Similarity

004338d0
004338d0 d8 38 43 00 00 00 00 00 0e 05 54 76 65 72 73 08 .8C.......Tvers.
004338e0 00 00 00 00 00 00 00 00 03 00 00 00 98 10 40 00 ..............@.
004338f0 00 00 00 00 00 00 00 00 00 00 00 00 02 05 6d 61 ..............ma
00433900 6a 6f 72 02 00 98 10 40 00 00 00 00 00 01 00 00 jor....@........
00433910 00 00 00 00 00 02 05 6d 69 6e 6f 72 02 00 d8 10 .......minor....
00433920 40 00 00 00 00 00 04 00 00 00 00 00 00 00 02 07 @...............
00433930 6c 69 6e 6b 61 67 65 02 00 02 00 00 00 00 00 00 linkage.........
00433940 48 39 43 00 00 00 00 00 0e 0e 54 63 6f 6e 66 69 H9C.......Tconfi
00433950 67 75 72 61 74 69 6f 6e 90 00 00 00 0e 00 00 00 guration........
00433960 20 ee 42 00 00 00 00 00 00 00 00 00 00 00 00 00 .B.............
00433970 70 12 40 00 00 00 00 00 10 00 00 00 00 00 00 00 p.@.............
00433980 20 ee 42 00 00 00 00 00 18 00 00 00 00 00 00 00 .B.............
00433990 20 ee 42 00 00 00 00 00 20 00 00 00 00 00 00 00 .B..... .......
004339a0 20 ee 42 00 00 00 00 00 28 00 00 00 00 00 00 00 .B.....(.......
004339b0 20 ee 42 00 00 00 00 00 30 00 00 00 00 00 00 00 .B.....0.......
004339c0 20 ee 42 00 00 00 00 00 38 00 00 00 00 00 00 00 .B.....8.......
004339d0 20 ee 42 00 00 00 00 00 50 00 00 00 00 00 00 00 .B.....P.......
004339e0 20 ee 42 00 00 00 00 00 60 00 00 00 00 00 00 00 .B.....`.......
004339f0 20 ee 42 00 00 00 00 00 68 00 00 00 00 00 00 00 .B.....h.......
00433a00 20 ee 42 00 00 00 00 00 70 00 00 00 00 00 00 00 .B.....p.......
00433a10 20 ee 42 00 00 00 00 00 78 00 00 00 00 00 00 00 .B.....x.......
00433a20 20 ee 42 00 00 00 00 00 80 00 00 00 00 00 00 00 .B.............
00433a30 20 ee 42 00 00 00 00 00 88 00 00 00 00 00 00 00 .B.............
00433a40 00 13 00 00 00 20 ee 42 00 00 00 00 00 00 00 00 ..... .B........
00433a50 00 00 00 00 00 02 08 61 73 5f 61 72 72 61 79 02 .......as_array.
00433a60 00 d0 38 43 00 00 00 00 00 08 00 00 00 00 00 00 ..8C............
00433a70 00 02 04 76 65 72 73 02 00 70 12 40 00 00 00 00 ...vers..p.@....
00433a80 00 10 00 00 00 00 00 00 00 02 11 6c 61 75 6e 63 ...........launc
00433a90 68 5f 74 69 6d 65 5f 73 74 61 6d 70 02 00 20 ee h_time_stamp.. .
00433aa0 42 00 00 00 00 00 18 00 00 00 00 00 00 00 02 08 B...............
00433ab0 6f 70 65 6e 5f 6b 65 79 02 00 20 ee 42 00 00 00 open_key.. .B...
00433ac0 00 00 20 00 00 00 00 00 00 00 02 07 73 79 73 5f .. .........sys_
00433ad0 6b 65 79 02 00 20 ee 42 00 00 00 00 00 28 00 00 key.. .B.....(..
00433ae0 00 00 00 00 00 02 03 56 49 44 02 00 20 ee 42 00 .......VID.. .B.
00433af0 00 00 00 00 30 00 00 00 00 00 00 00 02 03 50 49 ....0.........PI
00433b00 44 02 00 20 ee 42 00 00 00 00 00 38 00 00 00 00 D.. .B.....8....
00433b10 00 00 00 02 04 45 50 49 44 02 00 98 13 43 00 00 .....EPID....C..
00433b20 00 00 00 40 00 00 00 00 00 00 00 02 0e 65 78 63 ...@.........exc
00433b30 6c 75 64 65 64 5f 6d 61 73 6b 73 02 00 98 13 43 luded_masks....C
00433b40 00 00 00 00 00 48 00 00 00 00 00 00 00 02 09 6b .....H.........k
00433b50 69 6c 6c 5f 6c 69 73 74 02 00 20 ee 42 00 00 00 ill_list.. .B...
00433b60 00 00 50 00 00 00 00 00 00 00 02 07 73 75 70 70 ..P.........supp
00433b70 6f 72 74 02 00 b8 10 40 00 00 00 00 00 58 00 00 ort....@.....X..
00433b80 00 00 00 00 00 02 0b 64 6f 75 62 6c 65 5f 64 61 .......double_da
00433b90 79 73 02 00 b8 10 40 00 00 00 00 00 5a 00 00 00 ys....@.....Z...
00433ba0 00 00 00 00 02 08 65 6e 64 5f 64 61 79 73 02 00 ......end_days..
00433bb0 20 ee 42 00 00 00 00 00 60 00 00 00 00 00 00 00 .B.....`.......
00433bc0 02 07 63 6f 6d 6d 65 6e 74 02 00 20 ee 42 00 00 ..comment.. .B..
00433bd0 00 00 00 68 00 00 00 00 00 00 00 02 05 67 72 6f ...h.........gro
00433be0 75 70 02 00 20 ee 42 00 00 00 00 00 70 00 00 00 up.. .B.....p...
00433bf0 00 00 00 00 02 0c 77 6f 72 6b 65 72 5f 67 72 6f ......worker_gro
00433c00 75 70 02 00 20 ee 42 00 00 00 00 00 78 00 00 00 up.. .B.....x...
00433c10 00 00 00 00 02 06 72 65 67 6b 65 79 02 00 20 ee ......regkey.. .
00433c20 42 00 00 00 00 00 80 00 00 00 00 00 00 00 02 03 B...............
00433c30 43 49 44 02 00 20 ee 42 00 00 00 00 00 88 00 00 CID.. .B........
00433c40 00 00 00 00 00 02 04 62 63 64 72 02 00 02 00 00 .......bcdr.....
00433c50 00 00 00 00 00 00 00 00 60 3c 43 00 00 00 00 00 ........`<C.....
00433c60 0e 0c 54 73 70 65 63 66 6f 6c 64 65 72 73 10 00 ..Tspecfolders..
00433c70 00 00 02 00 00 00 58 12 40 00 00 00 00 00 00 00 ......X.@.......
00433c80 00 00 00 00 00 00 58 12 40 00 00 00 00 00 08 00 ......X.@.......
00433c90 00 00 00 00 00 00 00 02 00 00 00 58 12 40 00 00 ...........X.@..
00433ca0 00 00 00 00 00 00 00 00 00 00 00 02 09 77 69 6e .............win
00433cb0 66 6f 6c 64 65 72 02 00 58 12 40 00 00 00 00 00 folder..X.@.....
00433cc0 08 00 00 00 00 00 00 00 02 0a 74 65 6d 70 66 6f ..........tempfo
00433cd0 6c 64 65 72 02 00 02 00 00 00 00 00 00 00 00 00 lder............
00433ce0 e8 3c 43 00 00 00 00 00 0d 10 3a 54 65 78 74 65 .<C.......:Texte
00433cf0 6e 65 74 69 6f 6e 73 2e 3a 31 68 00 00 00 0d 00 netions.:1h.....
00433d00 00 00 68 36 43 00 00 00 00 00 01 00 00 00 00 00 ..h6C...........
00433d10 00 00 00 02 00 00 00 00 20 3d 43 00 00 00 00 00 ........ =C.....
00433d20 0e 0c 54 65 78 74 65 6e 65 74 69 6f 6e 73 70 00 ..Textenetionsp.
00433d30 00 00 02 00 00 00 20 ee 42 00 00 00 00 00 00 00 ...... .B.......
00433d40 00 00 00 00 00 00 e0 3c 43 00 00 00 00 00 08 00 .......<C.......
00433d50 00 00 00 00 00 00 00 02 00 00 00 20 ee 42 00 00 ........... .B..
00433d60 00 00 00 00 00 00 00 00 00 00 00 02 08 61 73 5f .............as_
00433d70 61 72 72 61 79 02 00 e0 3c 43 00 00 00 00 00 08 array...<C......
00433d80 00 00 00 00 00 00 00 02 08 65 78 74 5f 6c 69 73 .........ext_lis
00433d90 74 02 00 02 00 00 00 00 a0 3d 43 00 00 00 00 00 t........=C.....
00433da0 0e 0a 54 64 65 62 75 67 6d 6f 64 65 02 00 00 00 ..Tdebugmode....
00433db0 00 00 00 00 00 02 00 00 00 00 10 40 00 00 00 00 ...........@....
00433dc0 00 00 00 00 00 00 00 00 00 02 05 64 65 62 75 67 ...........debug
00433dd0 02 00 00 10 40 00 00 00 00 00 01 00 00 00 00 00 ....@...........
00433de0 00 00 02 12 68 74 61 5f 69 6e 5f 6d 61 69 6e 5f ....hta_in_main_
00433df0 74 68 72 65 61 64 02 00 02 00 00 00 00 00 00 00 thread..........
00433e00 08 3e 43 00 00 00 00 00 0e 08 54 63 6f 6e 66 69 .>C.......Tconfi
00433e10 67 73 10 03 00 00 05 00 00 00 40 39 43 00 00 00 gs........@9C...
00433e20 00 00 00 00 00 00 00 00 00 00 20 ee 42 00 00 00 .......... .B...
00433e30 00 00 98 00 00 00 00 00 00 00 18 3d 43 00 00 00 ...........=C...
00433e40 00 00 a0 00 00 00 00 00 00 00 58 3c 43 00 00 00 ..........X<C...
00433e50 00 00 10 01 00 00 00 00 00 00 20 ee 42 00 00 00 .......... .B...
00433e60 00 00 e0 02 00 00 00 00 00 00 00 26 00 00 00 40 ...........&...@
00433e70 39 43 00 00 00 00 00 00 00 00 00 00 00 00 00 02 9C..............
00433e80 0d 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 02 00 .configuration..
00433e90 78 10 40 00 00 00 00 00 90 00 00 00 00 00 00 00 x.@.............
00433ea0 02 05 73 6c 65 65 70 02 00 20 ee 42 00 00 00 00 ..sleep.. .B....
00433eb0 00 98 00 00 00 00 00 00 00 02 03 68 74 61 02 00 ...........hta..
00433ec0 18 3d 43 00 00 00 00 00 a0 00 00 00 00 00 00 00 .=C.............
00433ed0 02 0b 65 78 74 65 6e 65 74 69 6f 6e 73 02 00 58 ..extenetions..X
00433ee0 3c 43 00 00 00 00 00 10 01 00 00 00 00 00 00 02 <C..............
00433ef0 07 66 6f 6c 64 65 72 73 02 00 90 11 40 00 00 00 .folders....@...
00433f00 00 00 20 01 00 00 00 00 00 00 02 0e 73 74 6f 70 .. .........stop
00433f10 70 65 72 5f 68 61 6e 64 6c 65 02 00 00 10 40 00 per_handle....@.
00433f20 00 00 00 00 28 01 00 00 00 00 00 00 02 0e 69 73 ....(.........is
00433f30 5f 77 69 6e 78 36 34 5f 66 6c 61 67 02 00 00 10 _winx64_flag....
00433f40 40 00 00 00 00 00 29 01 00 00 00 00 00 00 02 0c @.....).........
00433f50 69 73 5f 65 73 78 69 5f 66 6c 61 67 02 00 00 10 is_esxi_flag....
00433f60 40 00 00 00 00 00 2a 01 00 00 00 00 00 00 02 0b @.....*.........
00433f70 69 73 5f 6e 61 73 5f 66 6c 61 67 02 00 00 10 40 is_nas_flag....@
00433f80 00 00 00 00 00 2b 01 00 00 00 00 00 00 02 07 6e .....+.........n
00433f90 6f 6c 6f 63 61 6c 02 00 00 10 40 00 00 00 00 00 olocal....@.....
00433fa0 2c 01 00 00 00 00 00 00 02 05 6e 6f 6c 61 6e 02 ,.........nolan.
00433fb0 00 00 10 40 00 00 00 00 00 2d 01 00 00 00 00 00 ...@.....-......
00433fc0 00 02 08 73 68 75 74 64 6f 77 6e 02 00 00 10 40 ...shutdown....@
00433fd0 00 00 00 00 00 2e 01 00 00 00 00 00 00 02 08 64 ...............d
00433fe0 65 6c 65 74 65 6d 65 02 00 00 10 40 00 00 00 00 eleteme....@....
00433ff0 00 2f 01 00 00 00 00 00 00 02 12 72 61 6e 64 6f ./.........rando
00434000 6d 5f 66 69 6c 65 5f 73 79 73 74 65 6d 02 00 00 m_file_system...
00434010 10 40 00 00 00 00 00 30 01 00 00 00 00 00 00 02 .@.....0........
00434020 07 6c 6f 63 6b 43 49 53 02 00 00 10 40 00 00 00 .lockCIS....@...
00434030 00 00 31 01 00 00 00 00 00 00 02 08 66 75 6c 6c ..1.........full
00434040 6d 6f 64 65 02 00 00 10 40 00 00 00 00 00 32 01 mode....@.....2.
00434050 00 00 00 00 00 00 02 08 66 61 73 74 6d 6f 64 65 ........fastmode
00434060 02 00 00 10 40 00 00 00 00 00 33 01 00 00 00 00 ....@.....3.....
00434070 00 00 02 09 65 72 61 73 65 6d 6f 64 65 02 00 98 ....erasemode...
00434080 3d 43 00 00 00 00 00 34 01 00 00 00 00 00 00 02 =C.....4........
00434090 09 64 65 62 75 67 6d 6f 64 65 02 00 00 10 40 00 .debugmode....@.
004340a0 00 00 00 00 36 01 00 00 00 00 00 00 02 0e 65 78 ....6.........ex
004340b0 63 6c 75 64 65 5f 73 79 73 74 65 6d 02 00 00 10 clude_system....
004340c0 40 00 00 00 00 00 37 01 00 00 00 00 00 00 02 15 @.....7.........
004340d0 65 72 61 73 65 5f 66 72 65 65 5f 64 69 73 6b 5f erase_free_disk_
004340e0 73 70 61 63 65 02 00 00 10 40 00 00 00 00 00 38 space....@.....8
004340f0 01 00 00 00 00 00 00 02 13 63 6c 65 61 72 5f 73 .........clear_s
00434100 68 61 64 6f 77 5f 63 6f 70 69 65 73 02 00 00 10 hadow_copies....
00434110 40 00 00 00 00 00 39 01 00 00 00 00 00 00 02 09 @.....9.........
00434120 70 72 65 72 65 6e 61 6d 65 02 00 98 10 40 00 00 prerename....@..
00434130 00 00 00 3a 01 00 00 00 00 00 00 02 05 64 65 70 ...:.........dep
00434140 74 68 02 00 00 10 40 00 00 00 00 00 3b 01 00 00 th....@.....;...
00434150 00 00 00 00 02 0e 6c 6f 63 61 6c 5f 66 69 6e 69 ......local_fini
00434160 73 68 65 64 02 00 00 10 40 00 00 00 00 00 3c 01 shed....@.....<.
00434170 00 00 00 00 00 00 02 0c 6c 61 6e 5f 66 69 6e 69 ........lan_fini
00434180 73 68 65 64 02 00 00 10 40 00 00 00 00 00 3d 01 shed....@.....=.
00434190 00 00 00 00 00 00 02 12 6c 6f 63 61 6c 5f 68 74 ........local_ht
004341a0 61 5f 66 69 6e 69 73 68 65 64 02 00 00 10 40 00 a_finished....@.
004341b0 00 00 00 00 3e 01 00 00 00 00 00 00 02 10 6c 61 ....>.........la
004341c0 6e 5f 68 74 61 5f 66 69 6e 69 73 68 65 64 02 00 n_hta_finished..
004341d0 00 10 40 00 00 00 00 00 3f 01 00 00 00 00 00 00 ..@.....?.......
004341e0 02 15 6e 65 74 77 6f 72 6b 5f 73 63 61 6e 5f 66 ..network_scan_f
004341f0 69 6e 69 73 68 65 64 02 00 00 10 40 00 00 00 00 inished....@....
00434200 00 40 01 00 00 00 00 00 00 02 0a 69 73 5f 74 65 .@.........is_te
00434210 73 74 69 6e 67 02 00 00 10 40 00 00 00 00 00 41 sting....@.....A
00434220 01 00 00 00 00 00 00 02 0a 69 73 5f 73 74 65 61 .........is_stea
00434230 6c 74 68 02 00 40 6c 41 00 00 00 00 00 48 01 00 lth..@lA.....H..
00434240 00 00 00 00 00 02 03 57 53 41 02 00 20 ee 42 00 .......WSA.. .B.
00434250 00 00 00 00 e0 02 00 00 00 00 00 00 02 06 72 65 ..............re
00434260 67 63 72 74 02 00 08 2a 40 00 00 00 00 00 e8 02 gcrt...*@.......
00434270 00 00 00 00 00 00 02 11 6c 61 75 6e 63 68 5f 74 ........launch_t
00434280 69 6d 65 5f 73 74 61 6d 70 02 00 98 13 43 00 00 ime_stamp....C..
00434290 00 00 00 f0 02 00 00 00 00 00 00 02 0d 65 73 78 .............esx
004342a0 69 5f 65 78 74 5f 6c 69 73 74 02 00 98 13 43 00 i_ext_list....C.
004342b0 00 00 00 00 f8 02 00 00 00 00 00 00 02 0c 74 6f ..............to
004342c0 5f 77 69 70 65 5f 6c 69 73 74 02 00 98 13 43 00 _wipe_list....C.
004342d0 00 00 00 00 00 03 00 00 00 00 00 00 02 0d 70 72 ..............pr
004342e0 69 6f 72 69 74 79 5f 6c 69 73 74 02 00 98 13 43 iority_list....C
004342f0 00 00 00 00 00 08 03 00 00 00 00 00 00 02 09 65 ...............e
00434300 78 74 72 61 5f 69 70 73 02 00 02 00 00 00 00 00 xtra_ips........
00434310 18 43 43 00 00 00 00 00 0e 05 54 46 52 43 53 18 .CC.......TFRCS.
00434320 00 00 00 02 00 00 00 58 12 40 00 00 00 00 00 08 .......X.@......
00434330 00 00 00 00 00 00 00 58 12 40 00 00 00 00 00 10 .......X.@......
00434340 00 00 00 00 00 00 00 00 03 00 00 00 80 34 43 00 .............4C.
00434350 00 00 00 00 00 00 00 00 00 00 00 00 02 02 43 53 ..............CS
00434360 02 00 58 12 40 00 00 00 00 00 08 00 00 00 00 00 ..X.@...........
00434370 00 00 02 14 70 72 6f 63 65 73 73 65 64 5f 6c 6f ....processed_lo
00434380 63 61 6c 5f 70 61 74 68 02 00 58 12 40 00 00 00 cal_path..X.@...
00434390 00 00 10 00 00 00 00 00 00 00 02 12 70 72 6f 63 ............proc
004343a0 65 73 73 65 64 5f 6c 61 6e 5f 70 61 74 68 02 00 essed_lan_path..
004343b0 02 00 00 00 cc cc cc cc cc cc cc cc cc cc cc cc ................

004343c0
004343c0fn_4343c0:
004343c0mov [rip+0x3bf5d], 0
004343c7mov [rip+0x3bf57], 0
004343cemov [rip+0x3bf51], 0
004343d5ret
004343c0

004343d6
004343d6 // align 0x10

004343e0
004343e0fn_4343e0:
004343e0push rbp
004343e1sub rsp, 80
004343e5mov rbp, rsp
004343e8mov [rbp+40], 0
004343f0mov [rbp+56], 0
004343f8mov [rbp+48], 0
00434400mov [rbp+72], 0
00434408mov [rbp+64], 0
00434410nop
00434411mov rcx, [rip-4504]
00434418mov dl, 1
0043441acall TSimpleCriticalSection.Create
0043441fmov [rip+0x3bf22], rax
00434426lea rcx, [rip+0x3bf23]
0043442dcall fn_40bd90
00434432lea rcx, [rip+0x3bf1f]
00434439call fn_40bd90
0043443emov rcx, [rip+0x2fc1b]
00434445lea rdx, [rip+1188]
0043444ccall fn_40c440
00434451mov rcx, [rip+0x2fe48]
00434458lea rdx, [rip+1217]
0043445fcall fn_40c440
00434464mov rcx, [rip+0x2fdc5]
0043446blea rdx, [rip+1222]
00434472call fn_40c440
00434477mov rcx, [rip-13350]
0043447emov dl, 1
00434480call TSimpleStringList.Create
00434485mov [rip+0x3be9c], rax
0043448cmov rcx, [rip-13371]
00434493mov dl, 1
00434495call TSimpleStringList.Create
0043449amov [rip+0x3be8f], rax
004344a1mov rcx, [rip-13392]
004344a8mov dl, 1
004344aacall TSimpleStringList.Create
004344afmov [rip+0x3be82], rax
004344b6mov rcx, [rip-13413]
004344bdmov dl, 1
004344bfcall TSimpleStringList.Create
004344c4mov [rip+0x3be75], rax
004344cblea rcx, [rbp+64]
004344cfcall fn_430e60
004344d4lea rcx, [rbp+72]
004344d8mov rdx, [rbp+64]
004344dccall fn_422140
004344e1lea rcx, [rip+0x3bc38]
004344e8mov rdx, [rbp+72]
004344eccall fn_40c440
004344f1lea rcx, [rbp+48]
004344f5call fn_430c60
004344falea rcx, [rbp+56]
004344femov rdx, [rbp+48]
00434502call fn_422140
00434507lea rcx, [rip+0x3bc1a]
0043450emov rdx, [rbp+56]
00434512call fn_40c440
00434517lea rcx, [rip+0x3baea]
0043451ecall fn_40bd90
00434523lea rcx, [rip+0x3bae6]
0043452amov rdx, [rip-22289]
00434531call fn_410600
00434536mov [rip+0x3badb], 0
0043453dmov [rip+0x3bad5], 1
00434544mov [rip+0x3bace], 30
0043454emovsd_xmm x0, [rip+0x3bda2]
00434556call fn_42fdb0
0043455blea rcx, [rbp+40]
0043455fmov rdx, rax
00434562call fn_4225f0
00434567lea rcx, [rip+0x3bab2]
0043456emov rdx, [rbp+40]
00434572xor r8, r8
00434575call fn_40cff0
0043457alea rcx, [rip+0x3baa7]
00434581mov rdx, [rip-22376]
00434588call fn_410600
0043458dlea rcx, [rip+0x3ba9c]
00434594mov rdx, [rip-22395]
0043459bcall fn_410600
004345a0lea rcx, [rip+0x3ba91]
004345a7mov rdx, [rip-22414]
004345aecall fn_410600
004345b3lea rcx, [rip+0x3ba86]
004345bamov rdx, [rip-22433]
004345c1call fn_410600
004345c6lea rcx, [rip+0x3ba7b]
004345cdmov rdx, [rip-22452]
004345d4call fn_410600
004345d9mov rcx, [rip-13704]
004345e0mov dl, 1
004345e2call TSimpleStringList.Create
004345e7mov [rip+0x3ba62], rax
004345eemov rcx, [rip-13725]
004345f5mov dl, 1
004345f7call TSimpleStringList.Create
004345fcmov [rip+0x3ba55], rax
00434603mov [rip+0x3bd56], 1
0043460amov rcx, [rip-13753]
00434611mov dl, 1
00434613call TSimpleStringList.Create
00434618mov [rip+0x3bce9], rax
0043461fmov rcx, [rip-13774]
00434626mov dl, 1
00434628call TSimpleStringList.Create
0043462dmov [rip+0x3bcdc], rax
00434634mov rcx, [rip-13795]
0043463bmov dl, 1
0043463dcall TSimpleStringList.Create
00434642mov [rip+0x3bccf], rax
00434649lea rcx, [rip+0x3ba10]
00434650mov rdx, [rip-22583]
00434657call fn_410600
0043465cmov [rip+0x3ba03], 3
00434665mov [rip+0x3b9fc], 5
0043466elea rcx, [rip+0x3b9fb]
00434675mov rdx, [rip-22620]
0043467ccall fn_410600
00434681lea rcx, [rip+0x3b9f0]
00434688mov rdx, [rip-22639]
0043468fcall fn_410600
00434694lea rcx, [rip+0x3b9e5]
0043469bmov rdx, [rip-22658]
004346a2call fn_410600
004346a7lea rcx, [rip+0x3b9da]
004346aemov rdx, [rip-22677]
004346b5call fn_410600
004346balea rcx, [rip+0x3b9cf]
004346c1mov rdx, [rip-22696]
004346c8call fn_410600
004346cdmov [rip+0x3b9c9], 0
004346d7mov [rip+0x3ba62], 0
004346demov [rip+0x3ba5c], 0
004346e5mov [rip+0x3ba56], 0
004346ecmov [rip+0x3ba50], 0
004346f3mov [rip+0x3ba4c], 1
004346famov [rip+0x3ba46], 0
00434701mov [rip+0x3ba40], 1
00434708mov [rip+0x3ba3a], 1
0043470fmov [rip+0x3ba34], 10
00434716mov [rip+0x3ba22], 0
0043471dmov [rip+0x3ba14], 0
00434724mov [rip+0x3ba0e], 0
0043472bmov [rip+0x3ba08], 0
00434732mov [rip+0x3ba02], 0
00434739mov [rip+0x3b9fc], 0
00434740mov [rip+0x3b9f7], 0
00434747mov [rip+0x3b9ef], 0
0043474emov [rip+0x3b9f6], 0
00434755mov [rip+0x3b9f0], 0
0043475cmov [rip+0x3b9ea], 0
00434763mov [rip+0x3b9e4], 0
0043476amov [rip+0x3b9de], 0
00434771mov [rip+0x3b9d8], 0
00434778mov [rip+0x3b9d2], 0
0043477flea rcx, [rip+0x3b92a]
00434786mov rdx, [rip-22893]
0043478dcall fn_410600
00434792lea rcx, [rip+0x3b90f]
00434799mov rdx, [rip-22912]
004347a0call fn_410600
004347a5lea rcx, [rip+0x3bb44]
004347acmov rdx, [rip-22931]
004347b3call fn_410600
004347b8mov rcx, [rip-14183]
004347bfmov dl, 1
004347c1call TSimpleStringList.Create
004347c6mov [rip+0x3bb33], rax
004347cdmov rcx, rax
004347d0lea rdx, [rip+385]
004347d7call TSimpleStringList.Add
004347dcmov rcx, [rip+0x3bb1d]
004347e3lea rdx, [rip+386]
004347eacall TSimpleStringList.Add
004347efmov rcx, [rip+0x3bb0a]
004347f6lea rdx, [rip+391]
004347fdcall TSimpleStringList.Add
00434802mov rcx, [rip+0x3baf7]
00434809lea rdx, [rip+396]
00434810call TSimpleStringList.Add
00434815mov rcx, [rip+0x3bae4]
0043481clea rdx, [rip+401]
00434823call TSimpleStringList.Add
00434828mov rcx, [rip+0x3bad1]
0043482flea rdx, [rip+406]
00434836call TSimpleStringList.Add
0043483bmov rcx, [rip+0x3babe]
00434842lea rdx, [rip+407]
00434849call TSimpleStringList.Add
0043484emov rcx, [rip+0x3baab]
00434855lea rdx, [rip+412]
0043485ccall TSimpleStringList.Add
00434861mov rcx, [rip+0x3ba98]
00434868lea rdx, [rip+417]
0043486fcall TSimpleStringList.Add
00434874mov rcx, [rip+0x3ba85]
0043487blea rdx, [rip+434]
00434882call TSimpleStringList.Add
00434887mov rcx, [rip+0x3ba72]
0043488elea rdx, [rip+439]
00434895call TSimpleStringList.Add
0043489anop
0043489blea rcx, [rbp+40]
0043489fcall fn_40bcf0
004348a4lea rcx, [rbp+48]
004348a8mov edx, 4
004348adcall fn_40be70
004348b2lea rsp, [rbp+80]
004348b6pop rbp
004348b7ret
004343e0

004348b8
004348b8 48 8d 04 05 00 00 00 00 H.......

004348c0
004348c0fn_4348c0:
004348c0push rbp
004348c1push rbx
004348c2sub rsp, 40
004348c6mov rbp, rsp
004348c9mov rbx, rdx
004348cclea rcx, [rbx+40]
004348d0call fn_40bcf0
004348d5lea rcx, [rbx+48]
004348d9mov edx, 4
004348decall fn_40be70
004348e3lea rsp, [rbp+40]
004348e7pop rbx
004348e8pop rbp
004348e9ret
004348c0

004348ea
004348ea 00 00 28 00 00 00 ..(...
004348f0 61 00 76 00 61 00 69 00 6c 00 61 00 62 00 6c 00 a.v.a.i.l.a.b.l.
00434900 65 00 5f 00 66 00 6f 00 72 00 5f 00 74 00 72 00 e._.f.o.r._.t.r.
00434910 69 00 61 00 6c 00 2e 00 00 00 00 00 10 00 00 00 i.a.l...........
00434920 2e 00 5f 00 6c 00 6f 00 63 00 6b 00 65 00 64 00 .._.l.o.c.k.e.d.
00434930 00 00 00 00 10 00 00 00 2e 00 5f 00 65 00 72 00 .........._.e.r.
00434940 61 00 73 00 65 00 64 00 00 00 00 00 b0 04 02 00 a.s.e.d.........
00434950 ff ff ff ff 03 00 00 00 4c 00 4f 00 47 00 00 00 ........L.O.G...
00434960 b0 04 02 00 ff ff ff ff 04 00 00 00 56 00 4d 00 ............V.M.
00434970 44 00 4b 00 00 00 00 00 b0 04 02 00 ff ff ff ff D.K.............
00434980 04 00 00 00 56 00 4d 00 45 00 4d 00 00 00 00 00 ....V.M.E.M.....
00434990 b0 04 02 00 ff ff ff ff 04 00 00 00 56 00 53 00 ............V.S.
004349a0 57 00 50 00 00 00 00 00 b0 04 02 00 ff ff ff ff W.P.............
004349b0 04 00 00 00 56 00 4d 00 53 00 4e 00 00 00 00 00 ....V.M.S.N.....
004349c0 b0 04 02 00 ff ff ff ff 03 00 00 00 56 00 4d 00 ............V.M.
004349d0 58 00 00 00 b0 04 02 00 ff ff ff ff 04 00 00 00 X...............
004349e0 56 00 4d 00 58 00 46 00 00 00 00 00 b0 04 02 00 V.M.X.F.........
004349f0 ff ff ff ff 04 00 00 00 56 00 4d 00 53 00 44 00 ........V.M.S.D.
00434a00 00 00 00 00 b0 04 02 00 ff ff ff ff 0a 00 00 00 ................
00434a10 53 00 43 00 4f 00 52 00 45 00 42 00 4f 00 41 00 S.C.O.R.E.B.O.A.
00434a20 52 00 44 00 00 00 00 00 b0 04 02 00 ff ff ff ff R.D.............
00434a30 05 00 00 00 4e 00 56 00 52 00 41 00 4d 00 00 00 ....N.V.R.A.M...
00434a40 b0 04 02 00 ff ff ff ff 04 00 00 00 56 00 4d 00 ............V.M.
00434a50 53 00 53 00 00 00 cc cc cc cc cc cc cc cc cc cc S.S.............

00434a60
00434a60Unit32.finalization:
00434a60push rbp
00434a61sub rsp, 32
00434a65mov rbp, rsp
00434a68nop
00434a69add [rip+0x3b8f4], 1
00434a70cmp [rip+0x3b8ed], 0
00434a77jne 0x434aac
00434a79lea rcx, [rip+0x3b588]
00434a80call fn_40bd90
00434a85lea rcx, [rip+0x3b584]
00434a8cmov rdx, [rip-3219]
00434a93call fn_40e630
00434a98lea rcx, [rip+0x3b8a9]
00434a9fmov rdx, [rip-1942]
00434aa6call fn_40e630
00434aabnop
00434aac
00434aacloc_434aac:
00434aaclea rsp, [rbp+32]
00434ab0pop rbp
00434ab1ret
00434a60

00434ab2
00434ab2 64 48 8d 44 20 00 48 8d 04 05 00 00 00 00 dH.D .H.......

00434ac0
00434ac0fn_434ac0:
00434ac0push rbp
00434ac1mov rbp, rsp
00434ac4mov rsp, rbp
00434ac7pop rbp
00434ac8ret
00434ac0

00434ac9
00434ac9 // align 0x10

00434ad0
00434ad0Unit32.initialization:
00434ad0sub [rip+0x3b88d], 1
00434ad7cmp [rip+0x3b886], -1
00434aderet
00434ad0

00434adf
00434adf // align 0x10
00434ae0
00434ae0 e8 4a 43 00 00 00 00 00 03 0f 54 44 43 50 5f 63 .JC.......TDCP_c
00434af0 69 70 68 65 72 6d 6f 64 65 01 00 00 00 00 04 00 iphermode.......
00434b00 00 00 e0 4a 43 00 00 00 00 00 05 63 6d 43 42 43 ...JC......cmCBC
00434b10 09 63 6d 43 46 42 38 62 69 74 0a 63 6d 43 46 42 .cmCFB8bit.cmCFB
00434b20 62 6c 6f 63 6b 05 63 6d 4f 46 42 05 63 6d 43 54 block.cmOFB.cmCT
00434b30 52 09 41 45 53 63 69 70 68 65 72 02 00 00 00 00 R.AEScipher.....
00434b40 08 4c 43 00 00 00 00 00 00 00 00 00 00 00 00 00 .LC.............
00434b50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00434b60 90 4e 43 00 00 00 00 00 08 4c 43 00 00 00 00 00 .NC......LC.....
00434b70 ad 4c 43 00 00 00 00 00 00 00 00 00 00 00 00 00 .LC.............
00434b80 ef 4c 43 00 00 00 00 00 f8 03 00 00 00 00 00 00 .LC.............
00434b90 38 16 40 00 00 00 00 00 40 8e 40 00 00 00 00 00 8.@.....@.@.....
00434ba0 50 8e 40 00 00 00 00 00 20 92 40 00 00 00 00 00 P.@..... .@.....
00434bb0 10 92 40 00 00 00 00 00 50 92 40 00 00 00 00 00 ..@.....P.@.....
00434bc0 60 92 40 00 00 00 00 00 70 92 40 00 00 00 00 00 `.@.....p.@.....
00434bd0 40 92 40 00 00 00 00 00 b0 8a 40 00 00 00 00 00 @.@.......@.....
00434be0 e0 8a 40 00 00 00 00 00 c0 8b 40 00 00 00 00 00 ..@.......@.....
00434bf0 00 8b 40 00 00 00 00 00 10 8b 40 00 00 00 00 00 ..@.......@.....
00434c00 20 8b 40 00 00 00 00 00 00 00 00 00 00 00 00 00 .@.............
00434c10 00 00 07 00 02 e0 4a 43 00 00 00 00 00 08 00 00 ......JC........
00434c20 00 0b 66 43 69 70 68 65 72 4d 6f 64 65 02 00 02 ..fCipherMode...
00434c30 00 10 40 00 00 00 00 00 09 00 00 00 0c 66 49 6e ..@..........fIn
00434c40 69 74 69 61 6c 69 7a 65 64 02 00 02 00 00 00 00 itialized.......
00434c50 00 00 00 00 0a 00 00 00 02 49 56 02 00 02 00 00 .........IV.....
00434c60 00 00 00 00 00 00 1a 00 00 00 02 43 56 02 00 02 ...........CV...
00434c70 d8 10 40 00 00 00 00 00 2c 00 00 00 09 6e 75 6d ..@.....,....num
00434c80 72 6f 75 6e 64 73 02 00 02 00 00 00 00 00 00 00 rounds..........
00434c90 00 30 00 00 00 02 72 6b 02 00 02 00 00 00 00 00 .0....rk........
00434ca0 00 00 00 10 02 00 00 03 64 72 6b 02 00 00 00 05 ........drk.....
00434cb0 00 f8 4c 43 00 00 00 00 00 42 00 f1 ff 63 4d 43 ..LC.....B...cMC
00434cc0 00 00 00 00 00 42 00 f1 ff 93 4d 43 00 00 00 00 .....B....MC....
00434cd0 00 42 00 f1 ff f2 4d 43 00 00 00 00 00 42 00 f1 .B....MC.....B..
00434ce0 ff 51 4e 43 00 00 00 00 00 44 00 f1 ff 00 00 08 .QNC.....D......
00434cf0 54 41 45 53 44 61 74 61 6b 00 c0 5a 43 00 00 00 TAESDatak..ZC...
00434d00 00 00 04 49 6e 69 74 03 00 00 00 00 00 00 00 00 ...Init.........
00434d10 00 30 00 04 08 88 4e 43 00 00 00 00 00 00 00 04 .0....NC........
00434d20 53 65 6c 66 02 00 02 00 00 00 00 00 00 00 00 00 Self............
00434d30 00 03 4b 65 79 02 00 00 d8 10 40 00 00 00 00 00 ..Key.....@.....
00434d40 00 00 04 53 69 7a 65 02 00 00 f8 10 40 00 00 00 ...Size.....@...
00434d50 00 00 00 00 0a 49 6e 69 74 56 65 63 74 6f 72 02 .....InitVector.
00434d60 00 02 00 30 00 10 5a 43 00 00 00 00 00 04 42 75 ...0..ZC......Bu
00434d70 72 6e 03 00 00 00 00 00 00 00 00 00 18 00 01 08 rn..............
00434d80 88 4e 43 00 00 00 00 00 00 00 04 53 65 6c 66 02 .NC........Self.
00434d90 00 02 00 5f 00 60 52 43 00 00 00 00 00 0a 45 6e ..._.`RC......En
00434da0 63 72 79 70 74 45 43 42 03 00 00 00 00 00 00 00 cryptECB........
00434db0 00 00 28 00 03 08 88 4e 43 00 00 00 00 00 00 00 ..(....NC.......
00434dc0 04 53 65 6c 66 02 00 02 00 00 00 00 00 00 00 00 .Self...........
00434dd0 00 00 06 49 6e 44 61 74 61 02 00 01 00 00 00 00 ...InData.......
00434de0 00 00 00 00 00 00 07 4f 75 74 44 61 74 61 02 00 .......OutData..
00434df0 02 00 5f 00 c0 4e 43 00 00 00 00 00 0a 44 65 63 .._..NC......Dec
00434e00 72 79 70 74 45 43 42 03 00 00 00 00 00 00 00 00 ryptECB.........
00434e10 00 28 00 03 08 88 4e 43 00 00 00 00 00 00 00 04 .(....NC........
00434e20 53 65 6c 66 02 00 02 00 00 00 00 00 00 00 00 00 Self............
00434e30 00 06 49 6e 44 61 74 61 02 00 01 00 00 00 00 00 ..InData........
00434e40 00 00 00 00 00 07 4f 75 74 44 61 74 61 02 00 02 ......OutData...
00434e50 00 32 00 50 5b 43 00 00 00 00 00 06 43 72 65 61 .2.P[C......Crea
00434e60 74 65 03 00 00 00 00 00 00 00 00 00 20 00 01 08 te.......... ...
00434e70 88 4e 43 00 00 00 00 00 00 00 04 53 65 6c 66 02 .NC........Self.
00434e80 00 02 00 00 00 00 00 00 90 4e 43 00 00 00 00 00 .........NC.....
00434e90 07 08 54 41 45 53 44 61 74 61 08 4c 43 00 00 00 ..TAESData.LC...
00434ea0 00 00 58 22 40 00 00 00 00 00 00 00 09 41 45 53 ..X"@........AES
00434eb0 63 69 70 68 65 72 00 00 00 00 02 00 00 00 cc cc cipher..........

00434ec0
00434ec0TAESData.DecryptECB:
00434ec0push rbp
00434ec1sub rsp, 80
00434ec5mov rbp, rsp
00434ec8cmp [rcx+9], 0
00434eccje 0x435229
00434ed2mov eax, [rdx]
00434ed4mov [rbp+12], eax
00434ed7mov eax, [rdx+4]
00434edamov [rbp+16], eax
00434eddmov eax, [rdx+8]
00434ee0mov [rbp+20], eax
00434ee3mov eax, [rdx+12]
00434ee6mov [rbp+24], eax
00434ee9mov eax, [rcx+44]
00434eeccmp eax, 2
00434eefjb 0x435070
00434ef5
00434ef5loc_434ef5:
00434ef5mov edx, eax
00434ef7mov r9, rdx
00434efaadd r9, r9
00434efdadd r9, r9
00434f00mov r10l, [rbp+12]
00434f04xor r10l, [rcx+8*r9+528]
00434f0cmov [rbp+48], r10l
00434f10mov r9, rdx
00434f13add r9, r9
00434f16add r9, r9
00434f19mov r10l, [rbp+16]
00434f1dxor r10l, [rcx+8*r9+532]
00434f25mov [rbp+52], r10l
00434f29mov r9, rdx
00434f2cadd r9, r9
00434f2fadd r9, r9
00434f32mov r10l, [rbp+20]
00434f36xor r10l, [rcx+8*r9+536]
00434f3emov [rbp+56], r10l
00434f42add rdx, rdx
00434f45add rdx, rdx
00434f48mov r9l, [rbp+24]
00434f4cxor r9l, [rcx+8*rdx+540]
00434f54mov [rbp+60], r9l
00434f58lea rdx, [rip+0x2b079]
00434f5fmovzx r9, [rbp+48]
00434f64lea r10, [rip+0x2b46d]
00434f6bmovzx r11, [rbp+61]
00434f70mov edx, [rdx+4*r9]
00434f74xor edx, [r10+4*r11]
00434f78lea r9, [rip+0x2b859]
00434f7fmovzx r10, [rbp+58]
00434f84xor edx, [r9+4*r10]
00434f88lea r9, [rip+0x2bc49]
00434f8fmovzx r10, [rbp+55]
00434f94xor edx, [r9+4*r10]
00434f98mov [rbp+12], edx
00434f9blea rdx, [rip+0x2b036]
00434fa2movzx r9, [rbp+52]
00434fa7lea r10, [rip+0x2b42a]
00434faemovzx r11, [rbp+49]
00434fb3mov edx, [rdx+4*r9]
00434fb7xor edx, [r10+4*r11]
00434fbblea r9, [rip+0x2b816]
00434fc2movzx r10, [rbp+62]
00434fc7xor edx, [r9+4*r10]
00434fcblea r9, [rip+0x2bc06]
00434fd2movzx r10, [rbp+59]
00434fd7xor edx, [r9+4*r10]
00434fdbmov [rbp+16], edx
00434fdelea rdx, [rip+0x2aff3]
00434fe5movzx r9, [rbp+56]
00434fealea r10, [rip+0x2b3e7]
00434ff1movzx r11, [rbp+53]
00434ff6mov edx, [rdx+4*r9]
00434ffaxor edx, [r10+4*r11]
00434ffelea r9, [rip+0x2b7d3]
00435005movzx r10, [rbp+50]
0043500axor edx, [r9+4*r10]
0043500elea r9, [rip+0x2bbc3]
00435015movzx r10, [rbp+63]
0043501axor edx, [r9+4*r10]
0043501emov [rbp+20], edx
00435021lea rdx, [rip+0x2afb0]
00435028movzx r9, [rbp+60]
0043502dlea r10, [rip+0x2b3a4]
00435034movzx r11, [rbp+57]
00435039mov edx, [rdx+4*r9]
0043503dxor edx, [r10+4*r11]
00435041lea r9, [rip+0x2b790]
00435048movzx r10, [rbp+54]
0043504dxor edx, [r9+4*r10]
00435051lea r9, [rip+0x2bb80]
00435058movzx r10, [rbp+51]
0043505dxor edx, [r9+4*r10]
00435061mov [rbp+24], edx
00435064sub eax, 1
00435067cmp eax, 1
0043506ajne 0x434ef5
00435070
00435070loc_435070:
00435070nop
00435071mov eax, [rbp+12]
00435074xor eax, [rcx+560]
0043507amov [rbp+48], eax
0043507dmov eax, [rbp+16]
00435080xor eax, [rcx+564]
00435086mov [rbp+52], eax
00435089mov eax, [rbp+20]
0043508cxor eax, [rcx+568]
00435092mov [rbp+56], eax
00435095mov eax, [rbp+24]
00435098xor eax, [rcx+572]
0043509emov [rbp+60], eax
004350a1lea rax, [rip+0x2bf30]
004350a8movzx rdx, [rbp+48]
004350admovzx rax, [rax+rdx]
004350b2mov [rbp+12], al
004350b5lea rax, [rip+0x2bf1c]
004350bcmovzx rdx, [rbp+61]
004350c1movzx rax, [rax+rdx]
004350c6mov [rbp+13], al
004350c9lea rax, [rip+0x2bf08]
004350d0movzx rdx, [rbp+58]
004350d5movzx rax, [rax+rdx]
004350damov [rbp+14], al
004350ddlea rax, [rip+0x2bef4]
004350e4movzx rdx, [rbp+55]
004350e9movzx rax, [rax+rdx]
004350eemov [rbp+15], al
004350f1lea rax, [rip+0x2bee0]
004350f8movzx rdx, [rbp+52]
004350fdmovzx rax, [rax+rdx]
00435102mov [rbp+16], al
00435105lea rax, [rip+0x2becc]
0043510cmovzx rdx, [rbp+49]
00435111movzx rax, [rax+rdx]
00435116mov [rbp+17], al
00435119lea rax, [rip+0x2beb8]
00435120movzx rdx, [rbp+62]
00435125movzx rax, [rax+rdx]
0043512amov [rbp+18], al
0043512dlea rax, [rip+0x2bea4]
00435134movzx rdx, [rbp+59]
00435139movzx rax, [rax+rdx]
0043513emov [rbp+19], al
00435141lea rax, [rip+0x2be90]
00435148movzx rdx, [rbp+56]
0043514dmovzx rax, [rax+rdx]
00435152mov [rbp+20], al
00435155lea rax, [rip+0x2be7c]
0043515cmovzx rdx, [rbp+53]
00435161movzx rax, [rax+rdx]
00435166mov [rbp+21], al
00435169lea rax, [rip+0x2be68]
00435170movzx rdx, [rbp+50]
00435175movzx rax, [rax+rdx]
0043517amov [rbp+22], al
0043517dlea rax, [rip+0x2be54]
00435184movzx rdx, [rbp+63]
00435189movzx rax, [rax+rdx]
0043518emov [rbp+23], al
00435191lea rax, [rip+0x2be40]
00435198movzx rdx, [rbp+60]
0043519dmovzx rax, [rax+rdx]
004351a2mov [rbp+24], al
004351a5lea rax, [rip+0x2be2c]
004351acmovzx rdx, [rbp+57]
004351b1movzx rax, [rax+rdx]
004351b6mov [rbp+25], al
004351b9lea rax, [rip+0x2be18]
004351c0movzx rdx, [rbp+54]
004351c5movzx rax, [rax+rdx]
004351camov [rbp+26], al
004351cdlea rax, [rip+0x2be04]
004351d4movzx rdx, [rbp+51]
004351d9movzx rax, [rax+rdx]
004351demov [rbp+27], al
004351e1mov eax, [rcx+528]
004351e7xor [rbp+12], eax
004351ealea rax, [rbp+16]
004351eemov edx, [rcx+532]
004351f4xor [rax], edx
004351f6lea rax, [rbp+20]
004351famov edx, [rcx+536]
00435200xor [rax], edx
00435202lea rax, [rbp+24]
00435206mov ecx, [rcx+540]
0043520cxor [rax], ecx
0043520emov eax, [rbp+12]
00435211mov [r8], eax
00435214mov eax, [rbp+16]
00435217mov [r8+4], eax
0043521bmov eax, [rbp+20]
0043521emov [r8+8], eax
00435222mov eax, [rbp+24]
00435225mov [r8+12], eax
00435229
00435229loc_435229:
00435229lea rsp, [rbp+80]
0043522dpop rbp
0043522eret
00434ec0

0043522f
0043522f // align 0x10

00435230
00435230fn_435230:
00435230sub rsp, 40
00435234cmp [rcx+9], 0
00435238je 0x435250
0043523alea rax, [rcx+10]
0043523elea rdx, [rcx+26]
00435242mov r8l, 16
00435248mov rcx, rax
0043524bcall fn_405ac0
00435250
00435250loc_435250:
00435250add rsp, 40
00435254ret
00435230

00435255
00435255 // align 0x10

00435260
00435260TAESData.EncryptECB:
00435260push rbp
00435261push rbx
00435262sub rsp, 88
00435266mov rbp, rsp
00435269cmp [rcx+9], 0
0043526dje 0x43561e
00435273mov eax, [rdx]
00435275mov [rbp+12], eax
00435278mov eax, [rdx+4]
0043527bmov [rbp+16], eax
0043527emov eax, [rdx+8]
00435281mov [rbp+20], eax
00435284mov eax, [rdx+12]
00435287mov [rbp+24], eax
0043528axor edx, edx
0043528cmov r9l, [rcx+44]
00435290sub r9l, 2
00435294mov eax, edx
00435296cmp eax, r9l
00435299ja 0x435419
0043529fsub r9l, edx
004352a2add r9l, 1
004352a6
004352a6loc_4352a6:
004352a6mov edx, eax
004352a8mov r10, rdx
004352abadd r10, r10
004352aeadd r10, r10
004352b1mov r11l, [rbp+12]
004352b5xor r11l, [rcx+8*r10+48]
004352bamov [rbp+48], r11l
004352bemov r10, rdx
004352c1add r10, r10
004352c4add r10, r10
004352c7mov r11l, [rbp+16]
004352cbxor r11l, [rcx+8*r10+52]
004352d0mov [rbp+52], r11l
004352d4mov r10, rdx
004352d7add r10, r10
004352daadd r10, r10
004352ddmov r11l, [rbp+20]
004352e1xor r11l, [rcx+8*r10+56]
004352e6mov [rbp+56], r11l
004352eaadd rdx, rdx
004352edadd rdx, rdx
004352f0mov r10l, [rbp+24]
004352f4xor r10l, [rcx+8*rdx+60]
004352f9mov [rbp+60], r10l
004352fdlea rdx, [rip+0x29cd4]
00435304movzx r10, [rbp+48]
00435309lea r11, [rip+0x2a0c8]
00435310movzx rbx, [rbp+53]
00435315mov edx, [rdx+4*r10]
00435319xor edx, [r11+4*rbx]
0043531dlea r10, [rip+0x2a4b4]
00435324movzx r11, [rbp+58]
00435329xor edx, [r10+4*r11]
0043532dlea r10, [rip+0x2a8a4]
00435334movzx r11, [rbp+63]
00435339xor edx, [r10+4*r11]
0043533dmov [rbp+12], edx
00435340lea rdx, [rip+0x29c91]
00435347movzx r10, [rbp+52]
0043534clea r11, [rip+0x2a085]
00435353movzx rbx, [rbp+57]
00435358mov edx, [rdx+4*r10]
0043535cxor edx, [r11+4*rbx]
00435360lea r10, [rip+0x2a471]
00435367movzx r11, [rbp+62]
0043536cxor edx, [r10+4*r11]
00435370lea r10, [rip+0x2a861]
00435377movzx r11, [rbp+51]
0043537cxor edx, [r10+4*r11]
00435380mov [rbp+16], edx
00435383lea rdx, [rip+0x29c4e]
0043538amovzx r10, [rbp+56]
0043538flea r11, [rip+0x2a042]
00435396movzx rbx, [rbp+61]
0043539bmov edx, [rdx+4*r10]
0043539fxor edx, [r11+4*rbx]
004353a3lea r10, [rip+0x2a42e]
004353aamovzx r11, [rbp+50]
004353afxor edx, [r10+4*r11]
004353b3lea r10, [rip+0x2a81e]
004353bamovzx r11, [rbp+55]
004353bfxor edx, [r10+4*r11]
004353c3mov [rbp+20], edx
004353c6lea rdx, [rip+0x29c0b]
004353cdmovzx r10, [rbp+60]
004353d2lea r11, [rip+0x29fff]
004353d9movzx rbx, [rbp+49]
004353demov edx, [rdx+4*r10]
004353e2xor edx, [r11+4*rbx]
004353e6lea r10, [rip+0x2a3eb]
004353edmovzx r11, [rbp+54]
004353f2xor edx, [r10+4*r11]
004353f6lea r10, [rip+0x2a7db]
004353fdmovzx r11, [rbp+59]
00435402xor edx, [r10+4*r11]
00435406mov [rbp+24], edx
00435409add eax, 1
0043540csub r9l, 1
00435410test r9l, r9l
00435413jne 0x4352a6
00435419
00435419loc_435419:
00435419nop
0043541amov edx, [rcx+44]
0043541dmov eax, edx
0043541fsub eax, 1
00435422mov eax, eax
00435424mov r9, rax
00435427add r9, r9
0043542aadd r9, r9
0043542dmov r10l, [rbp+12]
00435431xor r10l, [rcx+8*r9+48]
00435436mov [rbp+48], r10l
0043543amov r9, rax
0043543dadd r9, r9
00435440add r9, r9
00435443mov r10l, [rbp+16]
00435447xor r10l, [rcx+8*r9+52]
0043544cmov [rbp+52], r10l
00435450mov r9, rax
00435453add r9, r9
00435456add r9, r9
00435459mov r10l, [rbp+20]
0043545dxor r10l, [rcx+8*r9+56]
00435462mov [rbp+56], r10l
00435466add rax, rax
00435469add rax, rax
0043546cmov r9l, [rbp+24]
00435470xor r9l, [rcx+8*rax+60]
00435475mov [rbp+60], r9l
00435479lea rax, [rip+0x29b59]
00435480movzx r9, [rbp+48]
00435485movzx rax, [rax+4*r9]
0043548amov [rbp+12], al
0043548dlea rax, [rip+0x29b45]
00435494movzx r9, [rbp+53]
00435499movzx rax, [rax+4*r9]
0043549emov [rbp+13], al
004354a1lea rax, [rip+0x29b31]
004354a8movzx r9, [rbp+58]
004354admovzx rax, [rax+4*r9]
004354b2mov [rbp+14], al
004354b5lea rax, [rip+0x29b1d]
004354bcmovzx r9, [rbp+63]
004354c1movzx rax, [rax+4*r9]
004354c6mov [rbp+15], al
004354c9lea rax, [rip+0x29b09]
004354d0movzx r9, [rbp+52]
004354d5movzx rax, [rax+4*r9]
004354damov [rbp+16], al
004354ddlea rax, [rip+0x29af5]
004354e4movzx r9, [rbp+57]
004354e9movzx rax, [rax+4*r9]
004354eemov [rbp+17], al
004354f1lea rax, [rip+0x29ae1]
004354f8movzx r9, [rbp+62]
004354fdmovzx rax, [rax+4*r9]
00435502mov [rbp+18], al
00435505lea rax, [rip+0x29acd]
0043550cmovzx r9, [rbp+51]
00435511movzx rax, [rax+4*r9]
00435516mov [rbp+19], al
00435519lea rax, [rip+0x29ab9]
00435520movzx r9, [rbp+56]
00435525movzx rax, [rax+4*r9]
0043552amov [rbp+20], al
0043552dlea rax, [rip+0x29aa5]
00435534movzx r9, [rbp+61]
00435539movzx rax, [rax+4*r9]
0043553emov [rbp+21], al
00435541lea rax, [rip+0x29a91]
00435548movzx r9, [rbp+50]
0043554dmovzx rax, [rax+4*r9]
00435552mov [rbp+22], al
00435555lea rax, [rip+0x29a7d]
0043555cmovzx r9, [rbp+55]
00435561movzx rax, [rax+4*r9]
00435566mov [rbp+23], al
00435569lea rax, [rip+0x29a69]
00435570movzx r9, [rbp+60]
00435575movzx rax, [rax+4*r9]
0043557amov [rbp+24], al
0043557dlea rax, [rip+0x29a55]
00435584movzx r9, [rbp+49]
00435589movzx rax, [rax+4*r9]
0043558emov [rbp+25], al
00435591lea rax, [rip+0x29a41]
00435598movzx r9, [rbp+54]
0043559dmovzx rax, [rax+4*r9]
004355a2mov [rbp+26], al
004355a5lea rax, [rip+0x29a2d]
004355acmovzx r9, [rbp+59]
004355b1movzx rax, [rax+4*r9]
004355b6mov [rbp+27], al
004355b9mov edx, edx
004355bbmov rax, rdx
004355beadd rax, rax
004355c1add rax, rax
004355c4mov eax, [rcx+8*rax+48]
004355c8xor [rbp+12], eax
004355cblea rax, [rbp+16]
004355cfmov r9, rdx
004355d2add r9, r9
004355d5add r9, r9
004355d8mov r9l, [rcx+8*r9+52]
004355ddxor [rax], r9l
004355e0lea rax, [rbp+20]
004355e4add rdx, rdx
004355e7add rdx, rdx
004355eamov edx, [rcx+8*rdx+56]
004355eexor [rax], edx
004355f0lea rax, [rbp+24]
004355f4mov edx, [rcx+44]
004355f7add rdx, rdx
004355faadd rdx, rdx
004355fdmov ecx, [rcx+8*rdx+60]
00435601xor [rax], ecx
00435603mov eax, [rbp+12]
00435606mov [r8], eax
00435609mov eax, [rbp+16]
0043560cmov [r8+4], eax
00435610mov eax, [rbp+20]
00435613mov [r8+8], eax
00435617mov eax, [rbp+24]
0043561amov [r8+12], eax
0043561e
0043561eloc_43561e:
0043561elea rsp, [rbp+88]
00435622pop rbx
00435623pop rbp
00435624ret
00435260

00435625
00435625 // align 0x10

00435630
00435630fn_435630:
00435630push rsi
00435631push rbx
00435632xor ecx, ecx
00435634movzx r8, r8b
00435638sub r8l, 1
0043563cmov eax, ecx
0043563ecmp eax, r8l
00435641ja 0x4356b9
00435643sub r8l, ecx
00435646add r8l, 1
0043564a
0043564aloc_43564a:
0043564amov ecx, eax
0043564cadd ecx, ecx
0043564eadd ecx, ecx
00435650mov r9l, ecx
00435653lea r10, [rip+0x2ba7e]
0043565amov r11l, ecx
0043565dmovzx r11, [rdx+r11]
00435662lea rbx, [rip+0x2be6f]
00435669mov esi, ecx
0043566badd esi, 1
0043566emov esi, esi
00435670movzx rsi, [rdx+rsi]
00435675mov r10l, [r10+4*r11]
00435679xor r10l, [rbx+4*rsi]
0043567dlea r11, [rip+0x2c254]
00435684mov ebx, ecx
00435686add ebx, 2
00435689mov ebx, ebx
0043568bmovzx rbx, [rdx+rbx]
00435690xor r10l, [r11+4*rbx]
00435694lea r11, [rip+0x2c63d]
0043569badd ecx, 3
0043569emov ecx, ecx
004356a0movzx rcx, [rdx+rcx]
004356a5xor r10l, [r11+4*rcx]
004356a9mov [rdx+r9], r10l
004356adadd eax, 1
004356b0sub r8l, 1
004356b4test r8l, r8l
004356b7jne 0x43564a
004356b9
004356b9loc_4356b9:
004356b9nop
004356bapop rbx
004356bbpop rsi
004356bcret
00435630

004356bd
004356bd // align 0x10

004356c0
004356c0fn_4356c0:
004356c0push rbp
004356c1push r14
004356c3push r13
004356c5push rdi
004356c6push rsi
004356c7push rbx
004356c8sub rsp, 72
004356ccmov rbp, rsp
004356cfmov rbx, rcx
004356d2mov rsi, rdx
004356d5mov edi, r8l
004356d8shr edi, 3
004356dblea rcx, [rbp+32]
004356dfmov edx, 32
004356e4xor r8, r8
004356e7call fn_4069b0
004356ecmov rcx, rsi
004356eflea rdx, [rbp+32]
004356f3mov r8l, edi
004356f6call fn_405ac0
004356fbcmp edi, 16
004356feja 0x43570c
00435700mov eax, 4
00435705mov ecx, 10
0043570ajmp 0x435727
0043570c
0043570cloc_43570c:
0043570ccmp edi, 24
0043570fja 0x43571d
00435711mov eax, 6
00435716mov ecx, 12
0043571bjmp 0x435727
0043571d
0043571dloc_43571d:
0043571dmov eax, 8
00435722mov ecx, 14
00435727
00435727loc_435727:
00435727mov [rbx+44], ecx
0043572axor esi, esi
0043572cxor r8, r8
0043572fxor edx, edx
00435731jmp 0x43576f
00435733
00435733 eb 24 .$
00435735
00435735loc_435735:
00435735mov r9l, esi
00435738add r9, r9
0043573badd r9, r9
0043573elea r9, [rbx+8*r9+48]
00435743mov r10l, r8l
00435746mov r11l, edx
00435749mov r11l, [rbp+4*r11+32]
0043574emov [r9+4*r10], r11l
00435752add edx, 1
00435755add r8l, 1
00435759
00435759loc_435759:
00435759cmp edx, eax
0043575bjae 0x435763
0043575dcmp r8l, 4
00435761jb 0x435735
00435763
00435763loc_435763:
00435763cmp r8l, 4
00435767jne 0x43576f
00435769xor r8, r8
0043576cadd esi, 1
0043576f
0043576floc_43576f:
0043576fcmp edx, eax
00435771jae 0x43577f
00435773mov r9l, ecx
00435776add r9l, 1
0043577acmp esi, r9l
0043577djb 0x435759
0043577f
0043577floc_43577f:
0043577fxor r9, r9
00435782jmp 0x43599f
00435787
00435787loc_435787:
00435787mov r10l, eax
0043578asub r10l, 1
0043578emov edx, r10l
00435791lea r11, [rip+0x29740]
00435798movzx rdi, [rbp+4*rdx+33]
0043579emovzx r11, [r11+rdi]
004357a3xor [rbp+32], r11b
004357a7lea r11, [rbp+33]
004357ablea rdi, [rip+0x29726]
004357b2movzx r13, [rbp+4*rdx+34]
004357b8movzx rdi, [rdi+r13]
004357bdxor [r11], dil
004357c0lea r11, [rbp+34]
004357c4lea rdi, [rip+0x2970d]
004357cbmovzx r13, [rbp+4*rdx+35]
004357d1movzx rdi, [rdi+r13]
004357d6xor [r11], dil
004357d9lea r11, [rbp+35]
004357ddlea rdi, [rip+0x296f4]
004357e4movzx rdx, [rbp+4*rdx+32]
004357eamovzx rdx, [rdi+rdx]
004357efxor [r11], dl
004357f2lea rdx, [rip+0x2c8df]
004357f9mov r11l, r9l
004357fcmovzx rdx, [rdx+4*r11]
00435801xor [rbp+32], dl
00435804add r9l, 1
00435808cmp eax, 8
0043580bje 0x43584d
0043580dmov r11l, 1
00435813mov edi, r10l
00435816mov edx, r11l
00435819cmp edx, edi
0043581bja 0x435847
0043581dsub edi, r11l
00435820add edi, 1
00435823lea r10, [rbp+36]
00435827
00435827loc_435827:
00435827mov r11l, edx
0043582asub r11l, 1
0043582emov r11l, r11l
00435831mov r11l, [rbp+4*r11+32]
00435836xor [r10], r11l
00435839add edx, 1
0043583cadd r10, 4
00435840sub edi, 1
00435843test edi, edi
00435845jne 0x435827
00435847
00435847loc_435847:
00435847nop
00435848jmp 0x435951
0043584d
0043584dloc_43584d:
0043584dmov r10l, 1
00435853mov r11l, eax
00435856shr r11l, 1
0043585asub r11l, 1
0043585emov edx, r10l
00435861cmp edx, r11l
00435864ja 0x43588f
00435866sub r11l, r10l
00435869add r11l, 1
0043586dlea r10, [rbp+36]
00435871
00435871loc_435871:
00435871mov edi, edx
00435873sub edi, 1
00435876mov edi, edi
00435878mov edi, [rbp+4*rdi+32]
0043587cxor [r10], edi
0043587fadd edx, 1
00435882add r10, 4
00435886sub r11l, 1
0043588atest r11l, r11l
0043588djne 0x435871
0043588f
0043588floc_43588f:
0043588fnop
00435890mov edx, eax
00435892shr edx, 1
00435895mov r11l, edx
00435898mov r10l, edx
0043589bsub r10l, 1
0043589fmov r10l, r10l
004358a2lea rdi, [rbp+4*r11+32]
004358a7lea r13, [rip+0x2962a]
004358aemovzx r14, [rbp+4*r10+32]
004358b4movzx r13, [r13+r14]
004358baxor [rdi], r13b
004358bdlea rdi, [rbp+4*r11+33]
004358c2lea r13, [rip+0x2960f]
004358c9movzx r14, [rbp+4*r10+33]
004358cfmovzx r13, [r13+r14]
004358d5xor [rdi], r13b
004358d8lea rdi, [rbp+4*r11+34]
004358ddlea r13, [rip+0x295f4]
004358e4movzx r14, [rbp+4*r10+34]
004358eamovzx r13, [r13+r14]
004358f0xor [rdi], r13b
004358f3lea r11, [rbp+4*r11+35]
004358f8lea rdi, [rip+0x295d9]
004358ffmovzx r10, [rbp+4*r10+35]
00435905movzx r10, [rdi+r10]
0043590axor [r11], r10b
0043590dmov r10l, edx
00435910add r10l, 1
00435914mov r11l, eax
00435917sub r11l, 1
0043591bmov edx, r10l
0043591ecmp edx, r11l
00435921ja 0x435950
00435923sub r11l, r10l
00435926add r11l, 1
0043592amov r10l, edx
0043592dlea r10, [rbp+4*r10+32]
00435932
00435932loc_435932:
00435932mov edi, edx
00435934sub edi, 1
00435937mov edi, edi
00435939mov edi, [rbp+4*rdi+32]
0043593dxor [r10], edi
00435940add edx, 1
00435943add r10, 4
00435947sub r11l, 1
0043594btest r11l, r11l
0043594ejne 0x435932
00435950
00435950loc_435950:
00435950nop
00435951
00435951loc_435951:
00435951xor edx, edx
00435953jmp 0x43598f
00435955
00435955 eb 22 ."
00435957
00435957loc_435957:
00435957mov r10l, esi
0043595aadd r10, r10
0043595dadd r10, r10
00435960lea r10, [rbx+8*r10+48]
00435965mov r11l, r8l
00435968mov edi, edx
0043596amov edi, [rbp+4*rdi+32]
0043596emov [r10+4*r11], edi
00435972add edx, 1
00435975add r8l, 1
00435979
00435979loc_435979:
00435979cmp edx, eax
0043597bjae 0x435983
0043597dcmp r8l, 4
00435981jb 0x435957
00435983
00435983loc_435983:
00435983cmp r8l, 4
00435987jne 0x43598f
00435989add esi, 1
0043598cxor r8, r8
0043598f
0043598floc_43598f:
0043598fcmp edx, eax
00435991jae 0x43599f
00435993mov r10l, ecx
00435996add r10l, 1
0043599acmp esi, r10l
0043599djb 0x435979
0043599f
0043599floc_43599f:
0043599fmov edx, ecx
004359a1add edx, 1
004359a4cmp esi, edx
004359a6jb 0x435787
004359aclea rcx, [rbx+48]
004359b0lea rdx, [rbx+528]
004359b7mov r8l, 480
004359bdcall fn_405ac0
004359c2mov eax, 1
004359c7mov edi, [rbx+44]
004359casub edi, 1
004359cdmov esi, eax
004359cfcmp esi, edi
004359d1ja 0x4359fd
004359d3sub edi, eax
004359d5add edi, 1
004359d8
004359d8loc_4359d8:
004359d8mov rcx, rbx
004359dbmov eax, esi
004359ddadd rax, rax
004359e0add rax, rax
004359e3lea rdx, [rbx+8*rax+528]
004359ebmov r8b, 4
004359eecall fn_435630
004359f3add esi, 1
004359f6sub edi, 1
004359f9test edi, edi
004359fbjne 0x4359d8
004359fd
004359fdloc_4359fd:
004359fdnop
004359felea rsp, [rbp+72]
00435a02pop rbx
00435a03pop rsi
00435a04pop rdi
00435a05pop r13
00435a07pop r14
00435a09pop rbp
00435a0aret
004356c0

00435a0b
00435a0b // align 0x10

00435a10
00435a10TAESData.Burn:
00435a10push rbx
00435a11sub rsp, 32
00435a15mov rbx, rcx
00435a18mov [rbx+44], 0
00435a1flea rcx, [rbx+48]
00435a23mov edx, 480
00435a28xor r8, r8
00435a2bcall fn_4069b0
00435a30lea rcx, [rbx+528]
00435a37mov edx, 480
00435a3cxor r8, r8
00435a3fcall fn_4069b0
00435a44lea rcx, [rbx+10]
00435a48mov edx, 16
00435a4dmov r8l, 255
00435a53call fn_4069b0
00435a58lea rcx, [rbx+26]
00435a5cmov edx, 16
00435a61mov r8l, 255
00435a67call fn_4069b0
00435a6cmov [rbx+9], 0
00435a70add rsp, 32
00435a74pop rbx
00435a75ret
00435a10

00435a76
00435a76 // align 0x10

00435a80
00435a80fn_435a80:
00435a80push rsi
00435a81push rbx
00435a82sub rsp, 40
00435a86mov rbx, rcx
00435a89mov esi, edx
00435a8bcmp [rbx+9], 0
00435a8fje 0x435a99
00435a91mov rcx, rbx
00435a94call TAESData.Burn
00435a99
00435a99loc_435a99:
00435a99test esi, esi
00435a9bjbe 0x435ab3
00435a9dmov eax, esi
00435a9ftest eax, 3
00435aa5jne 0x435ab3
00435aa7cmp esi, 256
00435aadja 0x435ab3
00435aafmov [rbx+9], 1
00435ab3
00435ab3loc_435ab3:
00435ab3add rsp, 40
00435ab7pop rbx
00435ab8pop rsi
00435ab9ret
00435a80

00435aba
00435aba // align 0x10

00435ac0
00435ac0TAESData.Init:
00435ac0push r13
00435ac2push rdi
00435ac3push rsi
00435ac4push rbx
00435ac5sub rsp, 40
00435ac9mov rbx, rcx
00435accmov rsi, rdx
00435acfmov edi, r8l
00435ad2mov r13, r9
00435ad5mov rcx, rbx
00435ad8mov edx, edi
00435adacall fn_435a80
00435adfmov rcx, rbx
00435ae2mov rdx, rsi
00435ae5mov r8l, edi
00435ae8call fn_4356c0
00435aedtest r13, r13
00435af0jne 0x435b1d
00435af2lea rcx, [rbx+10]
00435af6mov edx, 16
00435afbxor r8, r8
00435afecall fn_4069b0
00435b03mov rcx, rbx
00435b06lea rdx, [rbx+10]
00435b0alea r8, [rbx+10]
00435b0ecall TAESData.EncryptECB
00435b13mov rcx, rbx
00435b16call fn_435230
00435b1bjmp 0x435b37
00435b1d
00435b1dloc_435b1d:
00435b1dmov rcx, r13
00435b20lea rdx, [rbx+10]
00435b24mov r8l, 16
00435b2acall fn_405ac0
00435b2fmov rcx, rbx
00435b32call fn_435230
00435b37
00435b37loc_435b37:
00435b37add rsp, 40
00435b3bpop rbx
00435b3cpop rsi
00435b3dpop rdi
00435b3epop r13
00435b40ret
00435ac0

00435b41
00435b41 // align 0x10

00435b50
00435b50TAESData.Create:
00435b50push rbp
00435b51push rbx
00435b52sub rsp, 56
00435b56mov rbp, rsp
00435b59mov [rbp+40], rbp
00435b5dmov [rbp+80], rcx
00435b61mov [rbp+88], dl
00435b64cmp [rbp+88], 0
00435b68je 0x435b7c
00435b6amov rcx, [rbp+80]
00435b6emovzx rdx, [rbp+88]
00435b73call fn_409530
00435b78mov [rbp+80], rax
00435b7c
00435b7cloc_435b7c:
00435b7cnop
00435b7dmov rax, [rbp+80]
00435b81mov [rax+9], 0
00435b85mov rax, [rbp+80]
00435b89mov [rax+8], 0
00435b8dcmp [rbp+88], 0
00435b91je 0x435bd0
00435b93mov rcx, [rbp+80]
00435b97call fn_409570
00435b9cmov [rbp+80], rax
00435ba0jmp 0x435bd0
00435ba2
00435ba2 90 90 80 7d 58 00 74 20 48 83 7d 50 00 74 ...}X.t H.}P.t
00435bb0 19 48 8b 4d 50 b2 81 48 8b 45 50 48 8b 18 ff 53 .H.MP..H.EPH...S
00435bc0 e0 48 8b 4d 50 e8 86 39 fd ff e8 41 54 fd ff 90 .H.MP..9...AT...
00435bd0
00435bd0loc_435bd0:
00435bd0mov rax, [rbp+80]
00435bd4lea rsp, [rbp+56]
00435bd8pop rbx
00435bd9pop rbp
00435bdaret
00435b50

00435bdb
00435bdb 48 8d 44 20 00 H.D .

00435be0
00435be0fn_435be0:
00435be0sub rsp, 40
00435be4call fn_40b050
00435be9add rsp, 40
00435bedret
00435be0

00435bee
00435bee // align 0x10

00435bf0
00435bf0AEScipher.finalization:
00435bf0add [rip+0x3a771], 1
00435bf7cmp [rip+0x3a76a], 0
00435bferet
00435bf0

00435bff
00435bff // align 0x10

00435c00
00435c00AEScipher.initialization:
00435c00sub [rip+0x3a761], 1
00435c07cmp [rip+0x3a75a], -1
00435c0eret
00435c00

00435c0f
00435c0f // align 0x10

00435c10
00435c10fn_435c10:
00435c10mov rax, [rcx]
00435c13test rax, rax
00435c16je 0x435c1c
00435c18mov rax, [rax-8]
00435c1c
00435c1cloc_435c1c:
00435c1cmov r9, [rdx]
00435c1fmov r8, r9
00435c22test r8, r8
00435c25je 0x435c2b
00435c27mov r8, [r8-8]
00435c2b
00435c2bloc_435c2b:
00435c2bmovsxd r10, eax
00435c2ecmp r8, r10
00435c31jge 0x435c3f
00435c33mov rax, r9
00435c36test rax, rax
00435c39je 0x435c3f
00435c3bmov rax, [rax-8]
00435c3f
00435c3floc_435c3f:
00435c3fxor r8, r8
00435c42mov r9l, eax
00435c45sub r9l, 1
00435c49mov eax, r8l
00435c4ccmp eax, r9l
00435c4fjg 0x435c79
00435c51sub r9l, r8l
00435c54add r9l, 1
00435c58
00435c58loc_435c58:
00435c58movsxd r8, eax
00435c5bmov r10, [rcx]
00435c5elea r10, [r10+r8]
00435c62mov r11, [rdx]
00435c65movzx r8, [r11+r8]
00435c6axor [r10], r8b
00435c6dadd eax, 1
00435c70sub r9l, 1
00435c74test r9l, r9l
00435c77jne 0x435c58
00435c79
00435c79loc_435c79:
00435c79nop
00435c7aret
00435c10

00435c7b
00435c7b // align 0x10

00435c80
00435c80fn_435c80:
00435c80push rbp
00435c81push r13
00435c83push rdi
00435c84push rsi
00435c85push rbx
00435c86sub rsp, 48
00435c8amov rbp, rsp
00435c8dmov rbx, rcx
00435c90mov rsi, r8
00435c93mov rdi, r9
00435c96xor r13, r13
00435c99mov rax, [rbp+136]
00435ca0mov rcx, [rax]
00435ca3mov rdx, [rdx]
00435ca6mov r8l, 256
00435cacmov r9, [rsi]
00435cafcall TAESData.Init
00435cb4mov rcx, [rsi]
00435cb7lea rdx, [rbp+32]
00435cbbmov r8l, 16
00435cc1call fn_405ac0
00435cc6jmp 0x435d15
00435cc8
00435cc8loc_435cc8:
00435cc8mov rax, [rbp+136]
00435ccfmov rcx, [rax]
00435cd2lea rdx, [rbp+32]
00435cd6lea r8, [rbp+32]
00435cdacall TAESData.EncryptECB
00435cdfxor eax, eax
00435ce1lea rcx, [rbp+32]
00435ce5
00435ce5loc_435ce5:
00435ce5movzx rdx, al
00435ce9mov r8l, r13l
00435cecadd r8l, edx
00435cefmovsxd rdx, r8l
00435cf2mov r8, [rdi]
00435cf5mov r9, [rbx]
00435cf8movzx r9, [r9+rdx]
00435cfdxor r9b, [rcx]
00435d00mov [r8+rdx], r9b
00435d04add al, 1
00435d07add rcx, 1
00435d0bcmp al, 16
00435d0ejne 0x435ce5
00435d10nop
00435d11add r13l, 16
00435d15
00435d15loc_435d15:
00435d15mov eax, r13l
00435d18add eax, 16
00435d1bcmp eax, [rbp+128]
00435d21jle 0x435cc8
00435d23cmp r13l, [rbp+128]
00435d2aje 0x435d96
00435d2cmov rax, [rbp+136]
00435d33mov rcx, [rax]
00435d36lea rdx, [rbp+32]
00435d3alea r8, [rbp+32]
00435d3ecall TAESData.EncryptECB
00435d43xor ecx, ecx
00435d45movzx r8, [rbp+128]
00435d4dsub r8b, r13b
00435d50sub r8b, 1
00435d54mov eax, ecx
00435d56cmp al, r8b
00435d59ja 0x435d95
00435d5bsub r8b, cl
00435d5eadd r8b, 1
00435d62lea rcx, [rbp+32]
00435d66
00435d66loc_435d66:
00435d66movzx rdx, al
00435d6amov r9l, r13l
00435d6dadd r9l, edx
00435d70movsxd rdx, r9l
00435d73mov r9, [rdi]
00435d76mov r10, [rbx]
00435d79movzx r10, [r10+rdx]
00435d7exor r10b, [rcx]
00435d81mov [r9+rdx], r10b
00435d85add al, 1
00435d88add rcx, 1
00435d8csub r8b, 1
00435d90test r8b, r8b
00435d93jne 0x435d66
00435d95
00435d95loc_435d95:
00435d95nop
00435d96
00435d96loc_435d96:
00435d96mov rax, [rbp+136]
00435d9dmov rcx, [rax]
00435da0call TAESData.Burn
00435da5lea rcx, [rbp+32]
00435da9mov edx, 16
00435daexor r8, r8
00435db1call fn_4069b0
00435db6lea rsp, [rbp+48]
00435dbapop rbx
00435dbbpop rsi
00435dbcpop rdi
00435dbdpop r13
00435dbfpop rbp
00435dc0ret
00435c80

00435dc1
00435dc1 // align 0x10

00435dd0
00435dd0fn_435dd0:
00435dd0push rbp
00435dd1push rdi
00435dd2push rsi
00435dd3push rbx
00435dd4sub rsp, 104
00435dd8mov rbp, rsp
00435ddbmov [rbp+32], rcx
00435ddfmov [rbp+40], rdx
00435de3mov [rbp+48], r8
00435de7mov [rbp+56], r9
00435debmov [rbp+88], 0
00435df3mov [rbp+80], 0
00435dfbmov [rbp+72], 0
00435e03nop
00435e04xor ebx, ebx
00435e06mov rcx, [rbp+56]
00435e0amov rdx, [rip-28657]
00435e11call fn_410600
00435e16mov rax, [rbp+32]
00435e1amov rax, [rax]
00435e1dtest rax, rax
00435e20je 0x435e26
00435e22mov rax, [rax-8]
00435e26
00435e26loc_435e26:
00435e26mov rcx, [rbp+56]
00435e2amov rdx, [rip-28689]
00435e31mov r8l, 1
00435e37mov r9, rax
00435e3acall fn_410430
00435e3flea rcx, [rbp+80]
00435e43mov rdx, [rip-28714]
00435e4acall fn_410600
00435e4flea rcx, [rbp+80]
00435e53mov rdx, [rip-28730]
00435e5amov r8l, 1
00435e60mov r9l, 16
00435e66call fn_410430
00435e6blea rcx, [rbp+72]
00435e6fmov rdx, [rip-28758]
00435e76call fn_410600
00435e7blea rcx, [rbp+72]
00435e7fmov rdx, [rip-28774]
00435e86mov r8l, 1
00435e8cmov r9l, 16
00435e92call fn_410430
00435e97lea rcx, [rbp+88]
00435e9bmov rdx, [rip-28802]
00435ea2call fn_410600
00435ea7lea rcx, [rbp+88]
00435eabmov rdx, [rip-28818]
00435eb2mov r8l, 1
00435eb8mov r9l, 16
00435ebecall fn_410430
00435ec3mov rcx, [rip-5002]
00435ecamov dl, 1
00435ecccall TAESData.Create
00435ed1mov rsi, rax
00435ed4mov rcx, rsi
00435ed7mov rax, [rbp+40]
00435edbmov rdx, [rax]
00435edemov r8l, 256
00435ee4mov rax, [rbp+48]
00435ee8mov r9, [rax]
00435eebcall TAESData.Init
00435ef0mov rax, [rbp+48]
00435ef4mov rcx, [rax]
00435ef7mov rdx, [rbp+80]
00435efbmov r8l, 16
00435f01call fn_405ac0
00435f06jmp 0x435f72
00435f08
00435f08loc_435f08:
00435f08movsxd rdi, ebx
00435f0bmov rax, [rbp+32]
00435f0fmov rax, [rax]
00435f12lea rcx, [rax+rdi]
00435f16mov rdx, [rbp+88]
00435f1amov r8l, 16
00435f20call fn_405ac0
00435f25lea rcx, [rbp+88]
00435f29lea rdx, [rbp+80]
00435f2dcall fn_435c10
00435f32mov rcx, rsi
00435f35mov rdx, [rbp+88]
00435f39mov r8, [rbp+72]
00435f3dcall TAESData.EncryptECB
00435f42mov rcx, [rbp+72]
00435f46mov rax, [rbp+56]
00435f4amov rax, [rax]
00435f4dlea rdx, [rax+rdi]
00435f51mov r8l, 16
00435f57call fn_405ac0
00435f5cmov rcx, [rbp+72]
00435f60mov rdx, [rbp+80]
00435f64mov r8l, 16
00435f6acall fn_405ac0
00435f6fadd ebx, 16
00435f72
00435f72loc_435f72:
00435f72mov rax, [rbp+32]
00435f76mov rax, [rax]
00435f79test rax, rax
00435f7cje 0x435f82
00435f7emov rax, [rax-8]
00435f82
00435f82loc_435f82:
00435f82mov ecx, ebx
00435f84add ecx, 16
00435f87movsxd rcx, ecx
00435f8acmp rcx, rax
00435f8djle 0x435f08
00435f93mov rcx, [rbp+88]
00435f97mov edx, 16
00435f9cxor r8, r8
00435f9fcall fn_4069b0
00435fa4mov rax, [rbp+32]
00435fa8mov rax, [rax]
00435fabtest rax, rax
00435faeje 0x435fb4
00435fb0mov rax, [rax-8]
00435fb4
00435fb4loc_435fb4:
00435fb4movsxd rdi, ebx
00435fb7cmp rdi, rax
00435fbaje 0x436070
00435fc0lea rcx, [rbp+88]
00435fc4mov rdx, [rip-29099]
00435fcbcall fn_410600
00435fd0mov rax, [rbp+32]
00435fd4mov rax, [rax]
00435fd7test rax, rax
00435fdaje 0x435fe0
00435fdcmov rax, [rax-8]
00435fe0
00435fe0loc_435fe0:
00435fe0lea rcx, [rbp+88]
00435fe4mov rdx, [rip-29131]
00435febmov r8l, 1
00435ff1mov r9, rax
00435ff4sub r9, rdi
00435ff7call fn_410430
00435ffcmov rax, [rbp+32]
00436000mov rax, [rax]
00436003test rax, rax
00436006je 0x43600c
00436008mov rax, [rax-8]
0043600c
0043600cloc_43600c:
0043600cmovsxd rbx, ebx
0043600fmov rcx, [rbp+32]
00436013mov rcx, [rcx]
00436016lea rcx, [rcx+rbx]
0043601amov rdx, [rbp+88]
0043601emov r8, rax
00436021sub r8, rdi
00436024call fn_405ac0
00436029mov rcx, rsi
0043602cmov rdx, [rbp+80]
00436030mov r8, [rbp+72]
00436034call TAESData.EncryptECB
00436039lea rcx, [rbp+88]
0043603dlea rdx, [rbp+72]
00436041call fn_435c10
00436046mov rax, [rbp+32]
0043604amov rax, [rax]
0043604dtest rax, rax
00436050je 0x436056
00436052mov rax, [rax-8]
00436056
00436056loc_436056:
00436056mov rcx, [rbp+88]
0043605amov rdx, [rbp+56]
0043605emov rdx, [rdx]
00436061lea rdx, [rdx+rbx]
00436065mov r8, rax
00436068sub r8, rdi
0043606bcall fn_405ac0
00436070
00436070loc_436070:
00436070mov rcx, rsi
00436073call TAESData.Burn
00436078mov rcx, rsi
0043607bcall TObject.Free
00436080mov rax, [rbp+88]
00436084test rax, rax
00436087je 0x43608d
00436089mov rax, [rax-8]
0043608d
0043608dloc_43608d:
0043608dmov rcx, [rbp+88]
00436091mov rdx, rax
00436094xor r8, r8
00436097call fn_4069b0
0043609cmov rcx, [rbp+80]
004360a0mov edx, 16
004360a5xor r8, r8
004360a8call fn_4069b0
004360admov rcx, [rbp+72]
004360b1mov edx, 16
004360b6xor r8, r8
004360b9call fn_4069b0
004360benop
004360bflea rcx, [rbp+72]
004360c3mov rdx, [rip-29354]
004360camov r8l, 3
004360d0call fn_40ec40
004360d5lea rsp, [rbp+104]
004360d9pop rbx
004360dapop rsi
004360dbpop rdi
004360dcpop rbp
004360ddret
00435dd0