Similarity

0043da14
0043da14 e3 04 01 00 ff ff ff ff 01 00 00 00 ............
0043da20 30 00 00 00 e3 04 01 00 ff ff ff ff 01 00 00 00 0...............
0043da30 31 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 1...............

0043da40
0043da40fn_43da40:
0043da40push rbp
0043da41sub rsp, 80
0043da45mov rbp, rsp
0043da48mov [rbp+32], rcx
0043da4cmov [rbp+40], rdx
0043da50mov [rbp+48], r8
0043da54mov [rbp+56], r9
0043da58lea rcx, [rbp+64]
0043da5cmov rdx, [rip-8539]
0043da63call fn_40e160
0043da68nop
0043da69mov rcx, [rbp+32]
0043da6dmov rdx, [rbp+40]
0043da71lea r8, [rbp+64]
0043da75call fn_43ce90
0043da7alea rcx, [rbp+64]
0043da7emov rdx, [rbp+48]
0043da82mov r8, [rbp+56]
0043da86call fn_43d720
0043da8blea rcx, [rbp+64]
0043da8fcall fn_43c700
0043da94nop
0043da95lea rcx, [rbp+64]
0043da99mov rdx, [rip-8600]
0043daa0call fn_40e630
0043daa5lea rsp, [rbp+80]
0043daa9pop rbp
0043daaaret
0043da40

0043daab
0043daab 48 8d 44 20 00 H.D .

0043dab0
0043dab0fn_43dab0:
0043dab0push rbp
0043dab1sub rsp, 32
0043dab5mov rbp, rsp
0043dab8lea rcx, [rdx+64]
0043dabcmov rdx, [rip-8635]
0043dac3call fn_40e630
0043dac8lea rsp, [rbp+32]
0043daccpop rbp
0043dacdret
0043dab0

0043dace
0043dace // align 0x10

0043dad0
0043dad0fn_43dad0:
0043dad0push r13
0043dad2push rdi
0043dad3push rsi
0043dad4push rbx
0043dad5sub rsp, 40
0043dad9mov rbx, rdx
0043dadcmov esi, r8l
0043dadfmov edi, r9l
0043dae2mov [rsp+80], rcx
0043dae7mov rax, [rsp+80]
0043daecmov rax, [rax+8]
0043daf0cmp esi, [rax]
0043daf2ja 0x43dba6
0043daf8lea rcx, [rbx+8]
0043dafcmov rdx, [rip-8779]
0043db03mov r8l, 1
0043db09mov r9l, esi
0043db0cadd r9l, 1
0043db10mov r9l, r9l
0043db13call fn_410430
0043db18xor eax, eax
0043db1amov ecx, esi
0043db1cmov r13l, eax
0043db1fcmp r13l, ecx
0043db22ja 0x43db4c
0043db24sub ecx, eax
0043db26add ecx, 1
0043db29
0043db29loc_43db29:
0043db29mov eax, r13l
0043db2cmov rdx, [rbx+8]
0043db30mov r8, [rsp+80]
0043db35mov r8, [r8+8]
0043db39mov r8l, [r8+4*rax]
0043db3dmov [rdx+4*rax], r8l
0043db41add r13l, 1
0043db45sub ecx, 1
0043db48test ecx, ecx
0043db4ajne 0x43db29
0043db4c
0043db4cloc_43db4c:
0043db4cnop
0043db4dmov rax, [rbx+8]
0043db51mov ecx, esi
0043db53lea rax, [rax+4*rcx]
0043db57and [rax], edi
0043db59mov r13l, esi
0043db5cjmp 0x43db62
0043db5e
0043db5eloc_43db5e:
0043db5esub r13l, 1
0043db62
0043db62loc_43db62:
0043db62mov rax, [rbx+8]
0043db66mov ecx, r13l
0043db69cmp [rax+4*rcx], 0
0043db6djne 0x43db75
0043db6fcmp r13l, 1
0043db73ja 0x43db5e
0043db75
0043db75loc_43db75:
0043db75cmp r13l, esi
0043db78jae 0x43db9a
0043db7alea rcx, [rbx+8]
0043db7emov rdx, [rip-8909]
0043db85mov r8l, 1
0043db8bmov r9l, r13l
0043db8eadd r9l, 1
0043db92mov r9l, r9l
0043db95call fn_410430
0043db9a
0043db9aloc_43db9a:
0043db9amov rax, [rbx+8]
0043db9emov [rax], r13l
0043dba1mov [rbx], 1
0043dba4jmp 0x43dbb3
0043dba6
0043dba6loc_43dba6:
0043dba6mov rcx, [rsp+80]
0043dbabmov rdx, rbx
0043dbaecall fn_43cc80
0043dbb3
0043dbb3loc_43dbb3:
0043dbb3add rsp, 40
0043dbb7pop rbx
0043dbb8pop rsi
0043dbb9pop rdi
0043dbbapop r13
0043dbbcret
0043dad0

0043dbbd
0043dbbd // align 0x10

0043dbc0
0043dbc0fn_43dbc0:
0043dbc0push r14
0043dbc2push r13
0043dbc4push rdi
0043dbc5push rsi
0043dbc6push rbx
0043dbc7sub rsp, 32
0043dbcbmov rbx, r8
0043dbcemov esi, r9l
0043dbd1mov [rsp+80], rcx
0043dbd6mov [rsp+88], rdx
0043dbdbmov rax, [rsp+80]
0043dbe0mov rax, [rax+8]
0043dbe4mov r13l, [rax]
0043dbe7mov rax, [rsp+88]
0043dbecmov rax, [rax+8]
0043dbf0mov r14l, [rax]
0043dbf3mov edi, r13l
0043dbf6add edi, r14l
0043dbf9cmp esi, edi
0043dbfbja 0x43dbff
0043dbfdmov edi, esi
0043dbff
0043dbffloc_43dbff:
0043dbfflea rcx, [rbx+8]
0043dc03mov rdx, [rip-9042]
0043dc0amov r8l, 1
0043dc10mov r9l, edi
0043dc13add r9l, 1
0043dc17mov r9l, r9l
0043dc1acall fn_410430
0043dc1fmov ecx, 1
0043dc24mov edx, edi
0043dc26mov eax, ecx
0043dc28cmp eax, edx
0043dc2aja 0x43dc4a
0043dc2csub edx, ecx
0043dc2eadd edx, 1
0043dc31
0043dc31loc_43dc31:
0043dc31mov rcx, [rbx+8]
0043dc35mov r8l, eax
0043dc38mov [rcx+4*r8], 0
0043dc40add eax, 1
0043dc43sub edx, 1
0043dc46test edx, edx
0043dc48jne 0x43dc31
0043dc4a
0043dc4aloc_43dc4a:
0043dc4anop
0043dc4bmov ecx, 1
0043dc50mov r10l, r14l
0043dc53mov eax, ecx
0043dc55cmp eax, r10l
0043dc58ja 0x43dd18
0043dc5esub r10l, ecx
0043dc61add r10l, 1
0043dc65
0043dc65loc_43dc65:
0043dc65xor edx, edx
0043dc67mov ecx, esi
0043dc69sub ecx, eax
0043dc6badd ecx, 1
0043dc6ecmp r13l, ecx
0043dc71ja 0x43dc76
0043dc73mov ecx, r13l
0043dc76
0043dc76loc_43dc76:
0043dc76mov r8l, 1
0043dc7cmov r11l, ecx
0043dc7fmov ecx, r8l
0043dc82cmp ecx, r11l
0043dc85ja 0x43dcf4
0043dc87sub r11l, r8l
0043dc8aadd r11l, 1
0043dc8e
0043dc8eloc_43dc8e:
0043dc8emov r8, [rsp+80]
0043dc93mov r8, [r8+8]
0043dc97mov r9l, ecx
0043dc9amov r8l, [r8+4*r9]
0043dc9emov r9, [rsp+88]
0043dca3mov r9, [r9+8]
0043dca7mov r14l, eax
0043dcaamov r9l, [r9+4*r14]
0043dcaeimul r8, r9
0043dcb2mov r9l, ecx
0043dcb5add r9l, eax
0043dcb8sub r9l, 1
0043dcbcmov r9l, r9l
0043dcbfmov r14, [rbx+8]
0043dcc3mov r14l, [r14+4*r9]
0043dcc7add r8, r14
0043dccamov edx, edx
0043dcccadd r8, rdx
0043dccfmov rdx, [rbx+8]
0043dcd3mov r14l, r8l
0043dcd6and r14l, 0x7fffffff
0043dcddmov [rdx+4*r9], r14l
0043dce1mov rdx, r8
0043dce4shr rdx, 31
0043dce8add ecx, 1
0043dcebsub r11l, 1
0043dceftest r11l, r11l
0043dcf2jne 0x43dc8e
0043dcf4
0043dcf4loc_43dcf4:
0043dcf4nop
0043dcf5mov ecx, eax
0043dcf7add ecx, r13l
0043dcfacmp ecx, esi
0043dcfcja 0x43dd08
0043dcfemov r8, [rbx+8]
0043dd02mov ecx, ecx
0043dd04mov [r8+4*rcx], edx
0043dd08
0043dd08loc_43dd08:
0043dd08add eax, 1
0043dd0bsub r10l, 1
0043dd0ftest r10l, r10l
0043dd12jne 0x43dc65
0043dd18
0043dd18loc_43dd18:
0043dd18nop
0043dd19mov rax, [rbx+8]
0043dd1dmov [rax], edi
0043dd1fcmp edi, esi
0043dd21jne 0x43dd38
0043dd23mov rax, [rbx+8]
0043dd27mov esi, esi
0043dd29lea rax, [rax+4*rsi]
0043dd2dmov ecx, [rsp+112]
0043dd31and [rax], ecx
0043dd33jmp 0x43dd38
0043dd35
0043dd35loc_43dd35:
0043dd35sub edi, 1
0043dd38
0043dd38loc_43dd38:
0043dd38mov rax, [rbx+8]
0043dd3cmov ecx, edi
0043dd3ecmp [rax+4*rcx], 0
0043dd42jne 0x43dd49
0043dd44cmp edi, 1
0043dd47ja 0x43dd35
0043dd49
0043dd49loc_43dd49:
0043dd49mov rax, [rbx+8]
0043dd4dcmp edi, [rax]
0043dd4fjae 0x43dd77
0043dd51lea rcx, [rbx+8]
0043dd55mov rdx, [rip-9380]
0043dd5cmov r8l, 1
0043dd62mov r9l, edi
0043dd65add r9l, 1
0043dd69mov r9l, r9l
0043dd6ccall fn_410430
0043dd71mov rax, [rbx+8]
0043dd75mov [rax], edi
0043dd77
0043dd77loc_43dd77:
0043dd77mov rax, [rsp+80]
0043dd7cmov rcx, [rsp+88]
0043dd81movzx rax, [rax]
0043dd85cmp al, [rcx]
0043dd87jne 0x43dd8e
0043dd89mov [rbx], 1
0043dd8cjmp 0x43dd91
0043dd8e
0043dd8eloc_43dd8e:
0043dd8emov [rbx], 0
0043dd91
0043dd91loc_43dd91:
0043dd91add rsp, 32
0043dd95pop rbx
0043dd96pop rsi
0043dd97pop rdi
0043dd98pop r13
0043dd9apop r14
0043dd9cret
0043dbc0

0043dd9d
0043dd9d // align 0x10

0043dda0
0043dda0fn_43dda0:
0043dda0push rbp
0043dda1sub rsp, 144
0043dda8mov rbp, rsp
0043ddabmov [rbp+48], rcx
0043ddafmov [rbp+56], rdx
0043ddb3mov [rbp+64], r8
0043ddb7mov [rbp+72], r9
0043ddbblea rcx, [rbp+128]
0043ddc2mov rdx, [rip-9409]
0043ddc9call fn_40e160
0043ddcelea rcx, [rbp+112]
0043ddd2mov rdx, [rip-9425]
0043ddd9call fn_40e160
0043dddelea rcx, [rbp+96]
0043dde2mov rdx, [rip-9441]
0043dde9call fn_40e160
0043ddeenop
0043ddefmov rcx, [rbp+48]
0043ddf3lea rdx, [rbp+112]
0043ddf7mov r8l, [rbp+192]
0043ddfemov r9l, [rbp+200]
0043de05call fn_43dad0
0043de0alea rcx, [rbp+112]
0043de0emov rdx, [rbp+64]
0043de12lea r8, [rbp+128]
0043de19mov r9l, [rbp+192]
0043de20mov eax, [rbp+200]
0043de26mov [rsp+32], eax
0043de2acall fn_43dbc0
0043de2flea rcx, [rbp+128]
0043de36mov rdx, [rbp+56]
0043de3alea r8, [rbp+96]
0043de3ecall fn_43ce90
0043de43lea rcx, [rbp+112]
0043de47call fn_43c700
0043de4clea rcx, [rbp+96]
0043de50mov rdx, [rbp+48]
0043de54lea r8, [rbp+112]
0043de58call fn_43c7b0
0043de5dlea rcx, [rbp+96]
0043de61call fn_43c700
0043de66mov rax, [rbp+72]
0043de6alea rcx, [rax+8]
0043de6emov rdx, [rbp+120]
0043de72mov r8, [rip-9665]
0043de79mov r9l, [rbp+192]
0043de80sub r9l, 1
0043de84mov r9l, r9l
0043de87mov rax, [rbp+120]
0043de8bmov eax, [rax]
0043de8dsub eax, [rbp+192]
0043de93add eax, 2
0043de96mov eax, eax
0043de98mov [rsp+32], rax
0043de9dcall fn_4104a0
0043dea2mov rax, [rbp+72]
0043dea6mov [rax], 1
0043dea9mov rax, [rax+8]
0043deadmov rcx, [rbp+120]
0043deb1mov ecx, [rcx]
0043deb3sub ecx, [rbp+192]
0043deb9add ecx, 1
0043debcmov [rax], ecx
0043debelea rcx, [rbp+112]
0043dec2call fn_43c700
0043dec7mov eax, [rbp+200]
0043decdshr eax, 30
0043ded0test eax, eax
0043ded2jne 0x43deec
0043ded4mov rcx, [rbp+72]
0043ded8mov edx, [rbp+200]
0043dedeadd edx, 1
0043dee1lea r8, [rbp+92]
0043dee5call fn_43cbc0
0043deeajmp 0x43def5
0043deec
0043deecloc_43deec:
0043deecmov rcx, [rbp+72]
0043def0call fn_43ccd0
0043def5
0043def5loc_43def5:
0043def5mov rcx, [rbp+72]
0043def9mov rdx, [rbp+56]
0043defdcall fn_43c720
0043df02cmp al, 1
0043df05je 0x43df14
0043df07mov rcx, [rbp+72]
0043df0bmov rdx, [rbp+56]
0043df0fcall fn_43cd60
0043df14
0043df14loc_43df14:
0043df14lea rcx, [rbp+112]
0043df18call fn_43c700
0043df1dlea rcx, [rbp+128]
0043df24call fn_43c700
0043df29nop
0043df2alea rcx, [rbp+96]
0043df2emov rdx, [rip-9773]
0043df35mov r8l, 3
0043df3bcall fn_40ec40
0043df40lea rsp, [rbp+144]
0043df47pop rbp
0043df48ret
0043dda0

0043df49
0043df49 48 8d 80 00 00 00 00 H......

0043df50
0043df50fn_43df50:
0043df50push rbp
0043df51sub rsp, 32
0043df55mov rbp, rsp
0043df58lea rcx, [rdx+96]
0043df5cmov rdx, [rip-9819]
0043df63mov r8l, 3
0043df69call fn_40ec40
0043df6elea rsp, [rbp+32]
0043df72pop rbp
0043df73ret
0043df50

0043df74
0043df74 // align 0x10

0043df80
0043df80fn_43df80:
0043df80push rbp
0043df81push r13
0043df83push rdi
0043df84push rsi
0043df85push rbx
0043df86sub rsp, 176
0043df8dmov rbp, rsp
0043df90mov [rbp+48], rcx
0043df94mov [rbp+72], rdx
0043df98mov [rbp+56], r8
0043df9cmov [rbp+64], r9
0043dfa0mov [rbp+88], 0
0043dfa8lea rcx, [rbp+160]
0043dfafmov rdx, [rip-9902]
0043dfb6call fn_40e160
0043dfbblea rcx, [rbp+144]
0043dfc2mov rdx, [rip-9921]
0043dfc9call fn_40e160
0043dfcelea rcx, [rbp+128]
0043dfd5mov rdx, [rip-9940]
0043dfdccall fn_40e160
0043dfe1lea rcx, [rbp+112]
0043dfe5mov rdx, [rip-9956]
0043dfeccall fn_40e160
0043dff1lea rcx, [rbp+96]
0043dff5mov rdx, [rip-9972]
0043dffccall fn_40e160
0043e001nop
0043e002lea rcx, [rip+887]
0043e009lea rdx, [rbp+96]
0043e00dcall fn_43bf30
0043e012mov rcx, [rbp+48]
0043e016mov rdx, [rbp+56]
0043e01amov r8, [rbp+64]
0043e01ecall fn_43d720
0043e023mov rcx, [rbp+64]
0043e027lea rdx, [rbp+96]
0043e02bcall fn_43c720
0043e030cmp al, 2
0043e033jne 0x43e043
0043e035lea rcx, [rbp+96]
0043e039call fn_43c700
0043e03ejmp 0x43e30e
0043e043
0043e043loc_43e043:
0043e043mov rcx, [rbp+64]
0043e047call fn_43c700
0043e04clea rcx, [rbp+96]
0043e050call fn_43c700
0043e055mov rcx, [rbp+72]
0043e059lea rdx, [rbp+88]
0043e05dcall fn_43be30
0043e062mov rax, [rbp+56]
0043e066mov rax, [rax+8]
0043e06amov esi, [rax]
0043e06cmov edi, esi
0043e06emov rax, [rbp+56]
0043e072mov rax, [rax+8]
0043e076mov ecx, esi
0043e078mov eax, [rax+4*rcx]
0043e07bshr eax, 30
0043e07ecmp eax, 1
0043e081jne 0x43e086
0043e083add esi, 1
0043e086
0043e086loc_43e086:
0043e086lea rcx, [rbp+120]
0043e08amov rdx, [rip-10201]
0043e091mov r8l, 1
0043e097mov r9l, esi
0043e09aadd r9l, 1
0043e09emov r9l, r9l
0043e0a1call fn_410430
0043e0a6mov rax, [rbp+120]
0043e0aamov [rax], esi
0043e0acmov [rbp+112], 1
0043e0b0mov eax, 1
0043e0b5mov ecx, esi
0043e0b7mov ebx, eax
0043e0b9cmp ebx, ecx
0043e0bbja 0x43e0d9
0043e0bdsub ecx, eax
0043e0bfadd ecx, 1
0043e0c2
0043e0c2loc_43e0c2:
0043e0c2mov rax, [rbp+120]
0043e0c6mov edx, ebx
0043e0c8mov [rax+4*rdx], 0
0043e0cfadd ebx, 1
0043e0d2sub ecx, 1
0043e0d5test ecx, ecx
0043e0d7jne 0x43e0c2
0043e0d9
0043e0d9loc_43e0d9:
0043e0d9nop
0043e0damov rax, [rbp+56]
0043e0demov rax, [rax+8]
0043e0e2cmp esi, [rax]
0043e0e4jne 0x43e131
0043e0e6mov r13l, 0x7fffffff
0043e0ecmov eax, 29
0043e0f1
0043e0f1loc_43e0f1:
0043e0f1shr r13l, 1
0043e0f5mov edx, esi
0043e0f7mov rcx, [rbp+56]
0043e0fbmov rcx, [rcx+8]
0043e0ffmov r8l, [rcx+4*rdx]
0043e103mov ecx, eax
0043e105shr r8l, cl
0043e108cmp r8l, 1
0043e10cjne 0x43e126
0043e10emov r8, [rbp+120]
0043e112mov r9l, 1
0043e118mov ecx, eax
0043e11aadd ecx, 1
0043e11dshl r9l, cl
0043e120mov [r8+4*rdx], r9l
0043e124jmp 0x43e12e
0043e126
0043e126loc_43e126:
0043e126sub eax, 1
0043e129cmp eax, -1
0043e12cjne 0x43e0f1
0043e12e
0043e12eloc_43e12e:
0043e12enop
0043e12fjmp 0x43e144
0043e131
0043e131loc_43e131:
0043e131mov rax, [rbp+120]
0043e135mov esi, esi
0043e137mov [rax+4*rsi], 1
0043e13emov r13l, 0x7fffffff
0043e144
0043e144loc_43e144:
0043e144mov rcx, [rbp+56]
0043e148lea rdx, [rbp+112]
0043e14clea r8, [rbp+160]
0043e153call fn_43e530
0043e158cmp [rbp+160], 0
0043e15fjne 0x43e176
0043e161lea rcx, [rbp+160]
0043e168lea rdx, [rbp+128]
0043e16fcall fn_43cc80
0043e174jmp 0x43e199
0043e176
0043e176loc_43e176:
0043e176lea rcx, [rbp+112]
0043e17alea rdx, [rbp+128]
0043e181call fn_43cc80
0043e186lea rcx, [rbp+128]
0043e18dlea rdx, [rbp+160]
0043e194call fn_43cd60
0043e199
0043e199loc_43e199:
0043e199lea rcx, [rbp+128]
0043e1a0call fn_43cc70
0043e1a5lea rcx, [rbp+160]
0043e1accall fn_43c700
0043e1b1lea rcx, [rbp+112]
0043e1b5mov rdx, [rbp+56]
0043e1b9mov r8, [rbp+64]
0043e1bdcall fn_43d720
0043e1c2mov rcx, [rbp+48]
0043e1c6mov rdx, [rbp+64]
0043e1camov r8, [rbp+56]
0043e1celea r9, [rbp+160]
0043e1d5call fn_43da40
0043e1dalea rcx, [rbp+112]
0043e1decall fn_43c700
0043e1e3xor ebx, ebx
0043e1e5mov rax, [rbp+88]
0043e1e9test rax, rax
0043e1ecje 0x43e1f1
0043e1eemov ebx, [rax-4]
0043e1f1
0043e1f1loc_43e1f1:
0043e1f1cmp ebx, 1
0043e1f4jb 0x43e2b4
0043e1fa
0043e1faloc_43e1fa:
0043e1famov rax, [rbp+88]
0043e1femov ecx, ebx
0043e200cmp [rax+rcx-1], 49
0043e205jne 0x43e257
0043e207mov rcx, [rbp+64]
0043e20blea rdx, [rbp+160]
0043e212lea r8, [rbp+144]
0043e219call fn_43ce90
0043e21emov rcx, [rbp+64]
0043e222call fn_43c700
0043e227lea rcx, [rbp+144]
0043e22emov rdx, [rbp+56]
0043e232lea r8, [rbp+128]
0043e239mov r9, [rbp+64]
0043e23dmov [rsp+32], edi
0043e241mov [rsp+40], r13l
0043e246call fn_43dda0
0043e24blea rcx, [rbp+144]
0043e252call fn_43c700
0043e257
0043e257loc_43e257:
0043e257lea rcx, [rbp+160]
0043e25elea rdx, [rbp+144]
0043e265call fn_43d040
0043e26alea rcx, [rbp+160]
0043e271call fn_43c700
0043e276lea rcx, [rbp+144]
0043e27dmov rdx, [rbp+56]
0043e281lea r8, [rbp+128]
0043e288lea r9, [rbp+160]
0043e28fmov [rsp+32], edi
0043e293mov [rsp+40], r13l
0043e298call fn_43dda0
0043e29dlea rcx, [rbp+144]
0043e2a4call fn_43c700
0043e2a9sub ebx, 1
0043e2actest ebx, ebx
0043e2aejne 0x43e1fa
0043e2b4
0043e2b4loc_43e2b4:
0043e2b4nop
0043e2b5lea rcx, [rbp+160]
0043e2bccall fn_43c700
0043e2c1mov rcx, [rbp+64]
0043e2c5mov rdx, [rbp+56]
0043e2c9lea r8, [rbp+128]
0043e2d0lea r9, [rbp+144]
0043e2d7mov [rsp+32], edi
0043e2dbmov [rsp+40], r13l
0043e2e0call fn_43dda0
0043e2e5lea rcx, [rbp+144]
0043e2ecmov rdx, [rbp+64]
0043e2f0call fn_43cc80
0043e2f5lea rcx, [rbp+144]
0043e2fccall fn_43c700
0043e301lea rcx, [rbp+128]
0043e308call fn_43c700
0043e30dnop
0043e30e
0043e30eloc_43e30e:
0043e30elea rcx, [rbp+88]
0043e312call fn_40bd40
0043e317lea rcx, [rbp+96]
0043e31bmov rdx, [rip-10778]
0043e322mov r8l, 5
0043e328call fn_40ec40
0043e32dlea rsp, [rbp+176]
0043e334pop rbx
0043e335pop rsi
0043e336pop rdi
0043e337pop r13
0043e339pop rbp
0043e33aret
0043df80

0043e33b
0043e33b 48 8d 44 20 00 H.D .

0043e340
0043e340fn_43e340:
0043e340push rbp
0043e341push rbx
0043e342sub rsp, 40
0043e346mov rbp, rsp
0043e349mov rbx, rdx
0043e34clea rcx, [rbx+88]
0043e350call fn_40bd40
0043e355lea rcx, [rbx+96]
0043e359mov rdx, [rip-10840]
0043e360mov r8l, 5
0043e366call fn_40ec40
0043e36blea rsp, [rbp+40]
0043e36fpop rbx
0043e370pop rbp
0043e371ret
0043e340

0043e372
0043e372 00 00 e3 04 01 00 ff ff ff ff 01 00 00 00 ..............
0043e380 30 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 0...............

0043e390
0043e390fn_43e390:
0043e390push rbp
0043e391sub rsp, 112
0043e395mov rbp, rsp
0043e398mov [rbp+40], r8
0043e39cmov [rbp+128], rcx
0043e3a3mov [rbp+136], rdx
0043e3aalea rcx, [rbp+96]
0043e3aemov rdx, [rip-10925]
0043e3b5call fn_40e160
0043e3balea rcx, [rbp+80]
0043e3bemov rdx, [rip-10941]
0043e3c5call fn_40e160
0043e3calea rcx, [rbp+64]
0043e3cemov rdx, [rip-10957]
0043e3d5call fn_40e160
0043e3dalea rcx, [rbp+48]
0043e3demov rdx, [rip-10973]
0043e3e5call fn_40e160
0043e3eanop
0043e3ebmov rcx, [rbp+128]
0043e3f2mov rdx, [rbp+136]
0043e3f9call fn_43c720
0043e3fecmp al, 2
0043e401jne 0x43e418
0043e403mov rcx, [rbp+128]
0043e40amov rdx, [rbp+40]
0043e40ecall fn_43cc80
0043e413jmp 0x43e4d1
0043e418
0043e418loc_43e418:
0043e418cmp al, 1
0043e41bjne 0x43e439
0043e41dmov rcx, [rbp+136]
0043e424mov rdx, [rbp+128]
0043e42bmov r8, [rbp+40]
0043e42fcall fn_43e390
0043e434jmp 0x43e4d1
0043e439
0043e439loc_43e439:
0043e439lea rcx, [rip+224]
0043e440lea rdx, [rbp+96]
0043e444call fn_43c310
0043e449mov rcx, [rbp+128]
0043e450lea rdx, [rbp+80]
0043e454call fn_43cc80
0043e459mov rcx, [rbp+136]
0043e460lea rdx, [rbp+64]
0043e464call fn_43cc80
0043e469jmp 0x43e49f
0043e46b
0043e46bloc_43e46b:
0043e46blea rcx, [rbp+80]
0043e46flea rdx, [rbp+64]
0043e473lea r8, [rbp+48]
0043e477call fn_43d720
0043e47clea rcx, [rbp+64]
0043e480lea rdx, [rbp+80]
0043e484call fn_43cc80
0043e489lea rcx, [rbp+48]
0043e48dlea rdx, [rbp+64]
0043e491call fn_43cc80
0043e496lea rcx, [rbp+48]
0043e49acall fn_43c700
0043e49f
0043e49floc_43e49f:
0043e49fmov rax, [rbp+72]
0043e4a3cmp [rax], 1
0043e4a6jne 0x43e46b
0043e4a8mov rax, [rbp+72]
0043e4accmp [rax+4], 0
0043e4b0jne 0x43e46b
0043e4b2lea rcx, [rbp+80]
0043e4b6mov rdx, [rbp+40]
0043e4bacall fn_43cc80
0043e4bflea rcx, [rbp+64]
0043e4c3call fn_43c700
0043e4c8lea rcx, [rbp+96]
0043e4cccall fn_43c700
0043e4d1
0043e4d1loc_43e4d1:
0043e4d1nop
0043e4d2lea rcx, [rbp+48]
0043e4d6mov rdx, [rip-11221]
0043e4ddmov r8l, 4
0043e4e3call fn_40ec40
0043e4e8lea rsp, [rbp+112]
0043e4ecpop rbp
0043e4edret
0043e390

0043e4ee
0043e4ee 48 90 H.

0043e4f0
0043e4f0fn_43e4f0:
0043e4f0push rbp
0043e4f1sub rsp, 32
0043e4f5mov rbp, rsp
0043e4f8lea rcx, [rdx+48]
0043e4fcmov rdx, [rip-11259]
0043e503mov r8l, 4
0043e509call fn_40ec40
0043e50elea rsp, [rbp+32]
0043e512pop rbp
0043e513ret
0043e4f0

0043e514
0043e514 e3 04 01 00 ff ff ff ff 01 00 00 00 ............
0043e520 30 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 0...............

0043e530
0043e530fn_43e530:
0043e530push rbp
0043e531sub rsp, 224
0043e538mov rbp, rsp
0043e53bmov [rbp+40], rcx
0043e53fmov [rbp+48], rdx
0043e543mov [rbp+56], r8
0043e547lea rcx, [rbp+208]
0043e54emov rdx, [rip-11341]
0043e555call fn_40e160
0043e55alea rcx, [rbp+192]
0043e561mov rdx, [rip-11360]
0043e568call fn_40e160
0043e56dlea rcx, [rbp+176]
0043e574mov rdx, [rip-11379]
0043e57bcall fn_40e160
0043e580lea rcx, [rbp+160]
0043e587mov rdx, [rip-11398]
0043e58ecall fn_40e160
0043e593lea rcx, [rbp+144]
0043e59amov rdx, [rip-11417]
0043e5a1call fn_40e160
0043e5a6lea rcx, [rbp+128]
0043e5admov rdx, [rip-11436]
0043e5b4call fn_40e160
0043e5b9lea rcx, [rbp+112]
0043e5bdmov rdx, [rip-11452]
0043e5c4call fn_40e160
0043e5c9lea rcx, [rbp+96]
0043e5cdmov rdx, [rip-11468]
0043e5d4call fn_40e160
0043e5d9lea rcx, [rbp+80]
0043e5ddmov rdx, [rip-11484]
0043e5e4call fn_40e160
0043e5e9lea rcx, [rbp+64]
0043e5edmov rdx, [rip-11500]
0043e5f4call fn_40e160
0043e5f9nop
0043e5falea rcx, [rip+527]
0043e601lea rdx, [rbp+192]
0043e608call fn_43c310
0043e60dmov rcx, [rbp+40]
0043e611mov rdx, [rbp+48]
0043e615lea r8, [rbp+112]
0043e619call fn_43e390
0043e61elea rcx, [rbp+192]
0043e625lea rdx, [rbp+112]
0043e629call fn_43c720
0043e62ecmp al, 2
0043e631jne 0x43e7a4
0043e637mov rcx, [rbp+48]
0043e63blea rdx, [rbp+176]
0043e642call fn_43cc80
0043e647mov rcx, [rbp+40]
0043e64blea rdx, [rbp+160]
0043e652call fn_43cc80
0043e657lea rcx, [rip+450]
0043e65elea rdx, [rbp+208]
0043e665call fn_43c310
0043e66alea rcx, [rip+431]
0043e671mov rdx, [rbp+56]
0043e675call fn_43c310
0043e67alea rcx, [rip+399]
0043e681lea rdx, [rbp+128]
0043e688call fn_43c310
0043e68d
0043e68dloc_43e68d:
0043e68dlea rcx, [rbp+144]
0043e694call fn_43c700
0043e699lea rcx, [rbp+176]
0043e6a0lea rdx, [rbp+160]
0043e6a7lea r8, [rbp+96]
0043e6ablea r9, [rbp+144]
0043e6b2call fn_43d290
0043e6b7lea rcx, [rbp+160]
0043e6belea rdx, [rbp+176]
0043e6c5call fn_43cc80
0043e6calea rcx, [rbp+144]
0043e6d1lea rdx, [rbp+160]
0043e6d8call fn_43cc80
0043e6ddlea rcx, [rbp+128]
0043e6e4lea rdx, [rbp+96]
0043e6e8lea r8, [rbp+80]
0043e6eccall fn_43ce90
0043e6f1mov rcx, [rbp+56]
0043e6f5lea rdx, [rbp+80]
0043e6f9lea r8, [rbp+64]
0043e6fdcall fn_43cab0
0043e702mov rcx, [rbp+56]
0043e706call fn_43c700
0043e70blea rcx, [rbp+80]
0043e70fcall fn_43c700
0043e714lea rcx, [rbp+128]
0043e71bmov rdx, [rbp+56]
0043e71fcall fn_43cc80
0043e724lea rcx, [rbp+64]
0043e728lea rdx, [rbp+128]
0043e72fcall fn_43cc80
0043e734lea rcx, [rbp+96]
0043e738call fn_43c700
0043e73dlea rcx, [rbp+144]
0043e744lea rdx, [rbp+208]
0043e74bcall fn_43c720
0043e750cmp al, 2
0043e753jne 0x43e68d
0043e759mov rax, [rbp+56]
0043e75dcmp [rax], 0
0043e760jne 0x43e780
0043e762mov rcx, [rbp+48]
0043e766mov rdx, [rbp+56]
0043e76alea r8, [rbp+96]
0043e76ecall fn_43c7b0
0043e773lea rcx, [rbp+96]
0043e777mov rdx, [rbp+56]
0043e77bcall fn_43cc80
0043e780
0043e780loc_43e780:
0043e780lea rcx, [rbp+128]
0043e787call fn_43c700
0043e78clea rcx, [rbp+176]
0043e793call fn_43c700
0043e798lea rcx, [rbp+160]
0043e79fcall fn_43c700
0043e7a4
0043e7a4loc_43e7a4:
0043e7a4lea rcx, [rbp+112]
0043e7a8call fn_43c700
0043e7adlea rcx, [rbp+192]
0043e7b4call fn_43c700
0043e7b9nop
0043e7balea rcx, [rbp+64]
0043e7bemov rdx, [rip-11965]
0043e7c5mov r8l, 10
0043e7cbcall fn_40ec40
0043e7d0lea rsp, [rbp+224]
0043e7d7pop rbp
0043e7d8ret
0043e530

0043e7d9
0043e7d9 48 8d 80 00 00 00 00 H......

0043e7e0
0043e7e0fn_43e7e0:
0043e7e0push rbp
0043e7e1sub rsp, 32
0043e7e5mov rbp, rsp
0043e7e8lea rcx, [rdx+64]
0043e7ecmov rdx, [rip-12011]
0043e7f3mov r8l, 10
0043e7f9call fn_40ec40
0043e7felea rsp, [rbp+32]
0043e802pop rbp
0043e803ret
0043e7e0

0043e804
0043e804 e3 04 01 00 ff ff ff ff 01 00 00 00 ............
0043e810 31 00 00 00 e3 04 01 00 ff ff ff ff 01 00 00 00 1...............
0043e820 30 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 0...............

0043e830
0043e830fn_43e830:
0043e830push rbp
0043e831push rbx
0043e832sub rsp, 72
0043e836mov rbp, rsp
0043e839mov [rbp+40], rdx
0043e83dmov [rbp+56], 0
0043e845mov [rbp+96], rcx
0043e849mov rcx, [rbp+96]
0043e84dcall fn_4106d0
0043e852nop
0043e853lea rcx, [rbp+56]
0043e857call fn_40bd40
0043e85cmov rbx, [rbp+96]
0043e860mov rax, rbx
0043e863test rax, rax
0043e866je 0x43e86c
0043e868mov rax, [rax-8]
0043e86c
0043e86cloc_43e86c:
0043e86clea rcx, [rbp+56]
0043e870mov edx, eax
0043e872xor r8, r8
0043e875call fn_40cf30
0043e87alea rcx, [rbp+56]
0043e87ecall fn_40c690
0043e883mov rcx, rax
0043e886mov rax, rbx
0043e889test rax, rax
0043e88cje 0x43e892
0043e88emov rax, [rax-8]
0043e892
0043e892loc_43e892:
0043e892mov rdx, [rbp+96]
0043e896mov r8, rcx
0043e899mov rcx, rdx
0043e89cmov rdx, r8
0043e89fmov r8, rax
0043e8a2call fn_405ac0
0043e8a7cmp [rbp+56], 0
0043e8acjne 0x43e8be
0043e8aelea rcx, [rbp+56]
0043e8b2lea rdx, [rip+111]
0043e8b9call fn_40c520
0043e8be
0043e8beloc_43e8be:
0043e8bemov rcx, [rbp+56]
0043e8c2mov rdx, [rbp+40]
0043e8c6call fn_43c0d0
0043e8cbnop
0043e8cclea rcx, [rbp+56]
0043e8d0call fn_40bd40
0043e8d5lea rcx, [rbp+96]
0043e8d9mov rdx, [rip-64192]
0043e8e0call fn_410600
0043e8e5lea rsp, [rbp+72]
0043e8e9pop rbx
0043e8eapop rbp
0043e8ebret
0043e830

0043e8ec
0043e8ec 48 8d 40 00 H.@.

0043e8f0
0043e8f0fn_43e8f0:
0043e8f0push rbp
0043e8f1push rbx
0043e8f2sub rsp, 40
0043e8f6mov rbp, rsp
0043e8f9mov rbx, rdx
0043e8fclea rcx, [rbx+56]
0043e900call fn_40bd40
0043e905lea rcx, [rbx+96]
0043e909mov rdx, [rip-64240]
0043e910call fn_410600
0043e915lea rsp, [rbp+40]
0043e919pop rbx
0043e91apop rbp
0043e91bret
0043e8f0

0043e91c
0043e91c e3 04 01 00 ....
0043e920 ff ff ff ff 01 00 00 00 00 00 cc cc cc cc cc cc ................

0043e930
0043e930Unit42.finalization:
0043e930add [rip+0x31e09], 1
0043e937cmp [rip+0x31e02], 0
0043e93eret
0043e930

0043e93f
0043e93f // align 0x10

0043e940
0043e940Unit42.initialization:
0043e940sub [rip+0x31df9], 1
0043e947cmp [rip+0x31df2], -1
0043e94eret
0043e940

0043e94f
0043e94f // align 0x10

0043e950
0043e950fn_43e950:
0043e950sub rsp, 40
0043e954mov rax, [rcx+8]
0043e958test rax, rax
0043e95bje 0x43e961
0043e95dmov rax, [rax-8]
0043e961
0043e961loc_43e961:
0043e961xor edx, edx
0043e963mov r8l, eax
0043e966sub r8l, 1
0043e96amov eax, edx
0043e96ccmp eax, r8l
0043e96fjg 0x43e993
0043e971sub r8l, edx
0043e974add r8l, 1
0043e978
0043e978loc_43e978:
0043e978mov rdx, [rcx+8]
0043e97cmovsxd r9, eax
0043e97fmov [rdx+4*r9], 0
0043e987add eax, 1
0043e98asub r8l, 1
0043e98etest r8l, r8l
0043e991jne 0x43e978
0043e993
0043e993loc_43e993:
0043e993nop
0043e994lea rcx, [rcx+8]
0043e998mov rdx, [rip-12519]
0043e99fcall fn_410600
0043e9a4add rsp, 40
0043e9a8ret
0043e950

0043e9a9
0043e9a9 // align 0x10

0043e9b0
0043e9b0fn_43e9b0:
0043e9b0push rbp
0043e9b1sub rsp, 112
0043e9b5mov rbp, rsp
0043e9b8mov [rbp+40], rdx
0043e9bcmov [rbp+48], r8
0043e9c0mov [rbp+56], r9
0043e9c4mov [rbp+72], 0
0043e9ccmov [rbp+128], rcx
0043e9d3mov rcx, [rbp+128]
0043e9dacall fn_4106d0
0043e9dflea rcx, [rbp+96]
0043e9e3mov rdx, [rip-12514]
0043e9eacall fn_40e160
0043e9eflea rcx, [rbp+80]
0043e9f3mov rdx, [rip-12530]
0043e9facall fn_40e160
0043e9ffnop
0043ea00mov rcx, [rbp+128]
0043ea07lea rdx, [rbp+96]
0043ea0bcall fn_43e830
0043ea10mov rax, [rbp+128]
0043ea17test rax, rax
0043ea1aje 0x43ea20
0043ea1cmov rax, [rax-8]
0043ea20
0043ea20loc_43ea20:
0043ea20mov rcx, [rbp+128]
0043ea27mov rdx, rax
0043ea2axor r8, r8
0043ea2dcall fn_4069b0
0043ea32lea rcx, [rbp+96]
0043ea36mov rdx, [rbp+48]
0043ea3amov r8, [rbp+40]
0043ea3elea r9, [rbp+80]
0043ea42call fn_43df80
0043ea47lea rcx, [rbp+96]
0043ea4bcall fn_43e950
0043ea50lea rcx, [rbp+80]
0043ea54lea rdx, [rbp+72]
0043ea58call fn_43be30
0043ea5dlea rcx, [rbp+80]
0043ea61call fn_43e950
0043ea66mov rcx, [rbp+72]
0043ea6alea rdx, [rbp+72]
0043ea6ecall fn_43bcd0
0043ea73mov rcx, [rbp+72]
0043ea77mov rdx, [rbp+56]
0043ea7bcall fn_430db0
0043ea80nop
0043ea81lea rcx, [rbp+72]
0043ea85call fn_40bd40
0043ea8alea rcx, [rbp+80]
0043ea8emov rdx, [rip-12685]
0043ea95mov r8l, 2
0043ea9bcall fn_40ec40
0043eaa0lea rcx, [rbp+128]
0043eaa7mov rdx, [rip-64654]
0043eaaecall fn_410600
0043eab3lea rsp, [rbp+112]
0043eab7pop rbp
0043eab8ret
0043e9b0

0043eab9
0043eab9 48 8d 80 00 00 00 00 H......

0043eac0
0043eac0fn_43eac0:
0043eac0push rbp
0043eac1push rbx
0043eac2sub rsp, 40
0043eac6mov rbp, rsp
0043eac9mov rbx, rdx
0043eacclea rcx, [rbx+72]
0043ead0call fn_40bd40
0043ead5lea rcx, [rbx+80]
0043ead9mov rdx, [rip-12760]
0043eae0mov r8l, 2
0043eae6call fn_40ec40
0043eaeblea rcx, [rbx+128]
0043eaf2mov rdx, [rip-64729]
0043eaf9call fn_410600
0043eafelea rsp, [rbp+40]
0043eb02pop rbx
0043eb03pop rbp
0043eb04ret
0043eac0

0043eb05
0043eb05 // align 0x10

0043eb10
0043eb10fn_43eb10:
0043eb10push rbp
0043eb11push rbx
0043eb12sub rsp, 88
0043eb16mov rbp, rsp
0043eb19mov [rbp+32], rcx
0043eb1dmov [rbp+40], rdx
0043eb21mov [rbp+48], r8
0043eb25mov [rbp+72], 0
0043eb2dmov [rbp+64], 0
0043eb35nop
0043eb36xor eax, eax
0043eb38mov [rbp+63], al
0043eb3blea rcx, [rbp+64]
0043eb3fmov rdx, [rip-64806]
0043eb46call fn_410600
0043eb4bmov rax, [rbp+32]
0043eb4fmov rax, [rax]
0043eb52test rax, rax
0043eb55je 0x43eb5b
0043eb57mov rax, [rax-8]
0043eb5b
0043eb5bloc_43eb5b:
0043eb5blea rcx, [rbp+64]
0043eb5fmov rdx, [rip-64838]
0043eb66mov r8l, 1
0043eb6cmov r9, rax
0043eb6fcall fn_410430
0043eb74mov rax, [rbp+32]
0043eb78mov rax, [rax]
0043eb7btest rax, rax
0043eb7eje 0x43eb84
0043eb80mov rax, [rax-8]
0043eb84
0043eb84loc_43eb84:
0043eb84mov rcx, [rbp+32]
0043eb88mov rcx, [rcx]
0043eb8bmov rdx, [rbp+64]
0043eb8fmov r8, rax
0043eb92call fn_405ac0
0043eb97mov rax, [rbp+64]
0043eb9btest rax, rax
0043eb9eje 0x43eba4
0043eba0mov rax, [rax-8]
0043eba4
0043eba4loc_43eba4:
0043eba4cmp rax, 4
0043eba8jl 0x43ed0e
0043ebaelea rcx, [rbp+64]
0043ebb2lea rdx, [rbp+72]
0043ebb6xor r8, r8
0043ebb9mov r9l, 4
0043ebbfcall fn_430a50
0043ebc4mov rax, [rbp+64]
0043ebc8test rax, rax
0043ebcbje 0x43ebd1
0043ebcdmov rax, [rax-8]
0043ebd1
0043ebd1loc_43ebd1:
0043ebd1lea rcx, [rbp+64]
0043ebd5lea rdx, [rbp+64]
0043ebd9mov r8l, 4
0043ebdfmov r9l, eax
0043ebe2sub r9l, 4
0043ebe6call fn_430a50
0043ebeblea rcx, [rbp+72]
0043ebefcall fn_430a00
0043ebf4mov ebx, eax
0043ebf6mov rax, [rbp+64]
0043ebfatest rax, rax
0043ebfdje 0x43ec03
0043ebffmov rax, [rax-8]
0043ec03
0043ec03loc_43ec03:
0043ec03cmp eax, ebx
0043ec05jae 0x43ec1c
0043ec07lea rcx, [rbp+64]
0043ec0bmov rdx, [rip-65010]
0043ec12call fn_410600
0043ec17jmp 0x43ed0e
0043ec1c
0043ec1cloc_43ec1c:
0043ec1clea rcx, [rbp+64]
0043ec20mov rdx, [rbp+40]
0043ec24xor r8, r8
0043ec27mov r9l, ebx
0043ec2acall fn_430a50
0043ec2fmov rax, [rbp+64]
0043ec33test rax, rax
0043ec36je 0x43ec3c
0043ec38mov rax, [rax-8]
0043ec3c
0043ec3cloc_43ec3c:
0043ec3clea rcx, [rbp+64]
0043ec40lea rdx, [rbp+64]
0043ec44mov r8l, ebx
0043ec47mov r9l, eax
0043ec4asub r9l, ebx
0043ec4dcall fn_430a50
0043ec52mov rax, [rbp+64]
0043ec56test rax, rax
0043ec59je 0x43ec5f
0043ec5bmov rax, [rax-8]
0043ec5f
0043ec5floc_43ec5f:
0043ec5fcmp rax, 4
0043ec63jge 0x43ec7a
0043ec65lea rcx, [rbp+64]
0043ec69mov rdx, [rip-65104]
0043ec70call fn_410600
0043ec75jmp 0x43ed0e
0043ec7a
0043ec7aloc_43ec7a:
0043ec7alea rcx, [rbp+64]
0043ec7elea rdx, [rbp+72]
0043ec82xor r8, r8
0043ec85mov r9l, 4
0043ec8bcall fn_430a50
0043ec90mov rax, [rbp+64]
0043ec94test rax, rax
0043ec97je 0x43ec9d
0043ec99mov rax, [rax-8]
0043ec9d
0043ec9dloc_43ec9d:
0043ec9dlea rcx, [rbp+64]
0043eca1lea rdx, [rbp+64]
0043eca5mov r8l, 4
0043ecabmov r9l, eax
0043ecaesub r9l, 4
0043ecb2call fn_430a50
0043ecb7lea rcx, [rbp+72]
0043ecbbcall fn_430a00
0043ecc0mov ebx, eax
0043ecc2mov rax, [rbp+64]
0043ecc6test rax, rax
0043ecc9je 0x43eccf
0043eccbmov rax, [rax-8]
0043eccf
0043eccfloc_43eccf:
0043eccfcmp eax, ebx
0043ecd1je 0x43ece5
0043ecd3lea rcx, [rbp+64]
0043ecd7mov rdx, [rip-65214]
0043ecdecall fn_410600
0043ece3jmp 0x43ed0e
0043ece5
0043ece5loc_43ece5:
0043ece5lea rcx, [rbp+64]
0043ece9mov rdx, [rbp+48]
0043ecedxor r8, r8
0043ecf0mov r9l, ebx
0043ecf3call fn_430a50
0043ecf8lea rcx, [rbp+64]
0043ecfcmov rdx, [rip-65251]
0043ed03call fn_410600
0043ed08mov al, 1
0043ed0amov [rbp+63], al
0043ed0dnop
0043ed0e
0043ed0eloc_43ed0e:
0043ed0elea rcx, [rbp+64]
0043ed12mov rdx, [rip-65273]
0043ed19mov r8l, 2
0043ed1fcall fn_40ec40
0043ed24movzx rax, [rbp+63]
0043ed29lea rsp, [rbp+88]
0043ed2dpop rbx
0043ed2epop rbp
0043ed2fret
0043eb10

0043ed30
0043ed30fn_43ed30:
0043ed30push rbp
0043ed31sub rsp, 32
0043ed35mov rbp, rsp
0043ed38lea rcx, [rdx+64]
0043ed3cmov rdx, [rip-65315]
0043ed43mov r8l, 2
0043ed49call fn_40ec40
0043ed4elea rsp, [rbp+32]
0043ed52pop rbp
0043ed53ret
0043ed30

0043ed54
0043ed54 // align 0x10

0043ed60
0043ed60fn_43ed60:
0043ed60push rbp
0043ed61push rdi
0043ed62push rsi
0043ed63push rbx
0043ed64sub rsp, 200
0043ed6bmov rbp, rsp
0043ed6emov [rbp+40], rcx
0043ed72mov [rbp+184], 0
0043ed7dmov [rbp+176], 0
0043ed88mov [rbp+168], 0
0043ed93mov [rbp+160], 0
0043ed9emov [rbp+152], 0
0043eda9mov [rbp+144], 0
0043edb4mov [rbp+88], 0
0043edbcmov [rbp+80], 0
0043edc4mov [rbp+72], 0
0043edccmov [rbp+64], 0
0043edd4mov [rbp+248], rdx
0043eddbmov rcx, [rbp+248]
0043ede2call fn_4106d0
0043ede7lea rcx, [rbp+112]
0043edebmov rdx, [rip-13546]
0043edf2call fn_40e160
0043edf7lea rcx, [rbp+96]
0043edfbmov rdx, [rip-13562]
0043ee02call fn_40e160
0043ee07nop
0043ee08lea rcx, [rbp+248]
0043ee0flea rdx, [rbp+184]
0043ee16lea r8, [rbp+176]
0043ee1dcall fn_43eb10
0043ee22test al, al
0043ee24je 0x43f2c1
0043ee2alea rcx, [rbp+152]
0043ee31mov edx, 32
0043ee36call fn_433160
0043ee3blea rcx, [rbp+160]
0043ee42mov edx, 32
0043ee47call fn_433160
0043ee4clea rcx, [rbp+144]
0043ee53mov edx, 16
0043ee58call fn_433160
0043ee5dlea rcx, [rbp+168]
0043ee64mov rdx, [rip-0x1004b]
0043ee6bcall fn_410600
0043ee70lea rcx, [rbp+168]
0043ee77mov rdx, [rip-0x1005e]
0043ee7emov r8l, 1
0043ee84mov r9l, 80
0043ee8acall fn_410430
0043ee8fmov rcx, [rbp+152]
0043ee96mov rdx, [rbp+168]
0043ee9dmov r8l, 32
0043eea3call fn_405ac0
0043eea8mov rcx, [rbp+144]
0043eeafmov rax, [rbp+168]
0043eeb6lea rdx, [rax+32]
0043eebamov r8l, 16
0043eec0call fn_405ac0
0043eec5mov rcx, [rbp+160]
0043eeccmov rax, [rbp+168]
0043eed3lea rdx, [rax+48]
0043eed7mov r8l, 32
0043eeddcall fn_405ac0
0043eee2mov rcx, [rbp+184]
0043eee9lea rdx, [rbp+112]
0043eeedcall fn_43e830
0043eef2mov rcx, [rbp+176]
0043eef9lea rdx, [rbp+96]
0043eefdcall fn_43e830
0043ef02mov rcx, [rbp+168]
0043ef09lea rdx, [rbp+112]
0043ef0dlea r8, [rbp+96]
0043ef11lea r9, [rbp+168]
0043ef18call fn_43e9b0
0043ef1dmov rax, [rbp+40]
0043ef21mov rax, [rax]
0043ef24test rax, rax
0043ef27je 0x43ef2d
0043ef29mov rax, [rax-8]
0043ef2d
0043ef2dloc_43ef2d:
0043ef2dlea rcx, [rbp+48]
0043ef31mov rdx, [rbp+40]
0043ef35mov rdx, [rdx]
0043ef38mov r8l, eax
0043ef3bcall fn_432b30
0043ef40lea rcx, [rbp+48]
0043ef44lea rdx, [rbp+128]
0043ef4bmov r8l, 15
0043ef51call fn_432b80
0043ef56mov ecx, 32
0043ef5bcall fn_405e80
0043ef60mov ebx, eax
0043ef62add ebx, 1
0043ef65lea rcx, [rbp+72]
0043ef69mov rdx, [rip-0x10150]
0043ef70call fn_410600
0043ef75lea rcx, [rbp+72]
0043ef79mov rdx, [rip-0x10160]
0043ef80mov r8l, 1
0043ef86movsxd r9, ebx
0043ef89call fn_410430
0043ef8exor eax, eax
0043ef90mov edi, ebx
0043ef92sub edi, 1
0043ef95mov esi, eax
0043ef97cmp esi, edi
0043ef99jg 0x43efbe
0043ef9bsub edi, eax
0043ef9dadd edi, 1
0043efa0
0043efa0loc_43efa0:
0043efa0mov ecx, 256
0043efa5call fn_405e80
0043efaamov rcx, [rbp+72]
0043efaemovsxd rdx, esi
0043efb1mov [rcx+rdx], al
0043efb4add esi, 1
0043efb7sub edi, 1
0043efbatest edi, edi
0043efbcjne 0x43efa0
0043efbe
0043efbeloc_43efbe:
0043efbenop
0043efbflea rcx, [rbp+88]
0043efc3mov rdx, [rip-0x101aa]
0043efcacall fn_410600
0043efcfmov rax, [rbp+40]
0043efd3mov rax, [rax]
0043efd6test rax, rax
0043efd9je 0x43efdf
0043efdbmov rax, [rax-8]
0043efdf
0043efdfloc_43efdf:
0043efdflea rcx, [rbp+88]
0043efe3mov rdx, [rip-0x101ca]
0043efeamov r8l, 1
0043eff0movsxd r9, ebx
0043eff3lea r9, [rax+r9+17]
0043eff8call fn_410430
0043effdmov rax, [rbp+88]
0043f001mov [rax], bl
0043f003mov rcx, [rbp+72]
0043f007mov rax, [rbp+88]
0043f00blea rdx, [rax+1]
0043f00fmovsxd r8, ebx
0043f012call fn_405ac0
0043f017lea rcx, [rbp+128]
0043f01emov rax, [rbp+88]
0043f022mov edx, ebx
0043f024add edx, 1
0043f027movsxd rdx, edx
0043f02alea rdx, [rax+rdx]
0043f02emov r8l, 16
0043f034call fn_405ac0
0043f039mov rax, [rbp+40]
0043f03dmov rax, [rax]
0043f040test rax, rax
0043f043je 0x43f049
0043f045mov rax, [rax-8]
0043f049
0043f049loc_43f049:
0043f049mov rcx, [rbp+40]
0043f04dmov rcx, [rcx]
0043f050mov rdx, [rbp+88]
0043f054mov r8l, ebx
0043f057add r8l, 17
0043f05bmovsxd r8, r8l
0043f05elea rdx, [rdx+r8]
0043f062mov r8, rax
0043f065call fn_405ac0
0043f06amov rax, [rbp+40]
0043f06emov rax, [rax]
0043f071test rax, rax
0043f074je 0x43f07a
0043f076mov rax, [rax-8]
0043f07a
0043f07aloc_43f07a:
0043f07amov rcx, [rbp+40]
0043f07emov rcx, [rcx]
0043f081mov rdx, rax
0043f084xor r8, r8
0043f087call fn_4069b0
0043f08cmov rcx, [rbp+72]
0043f090movsxd rdx, ebx
0043f093xor r8, r8
0043f096call fn_4069b0
0043f09blea rcx, [rbp+128]
0043f0a2mov edx, 16
0043f0a7xor r8, r8
0043f0aacall fn_4069b0
0043f0afmov rcx, [rbp+152]
0043f0b6mov edx, 32
0043f0bbxor r8, r8
0043f0becall fn_4069b0
0043f0c3xor ebx, ebx
0043f0c5lea rcx, [rbp+72]
0043f0c9mov rdx, [rip-0x102b0]
0043f0d0mov r8l, 1
0043f0d6movsxd r9, ebx
0043f0d9call fn_410430
0043f0delea rcx, [rbp+64]
0043f0e2mov rdx, [rip-0x102c9]
0043f0e9call fn_410600
0043f0eemov rax, [rbp+88]
0043f0f2test rax, rax
0043f0f5je 0x43f0fb
0043f0f7mov rax, [rax-8]
0043f0fb
0043f0fbloc_43f0fb:
0043f0fblea rcx, [rbp+64]
0043f0ffmov rdx, [rip-0x102e6]
0043f106mov r8l, 1
0043f10cmov r9, rax
0043f10fcall fn_410430
0043f114lea rcx, [rbp+88]
0043f118lea rdx, [rbp+160]
0043f11flea r8, [rbp+144]
0043f126lea r9, [rbp+64]
0043f12acall fn_435dd0
0043f12fmov rcx, [rbp+160]
0043f136mov edx, 32
0043f13bxor r8, r8
0043f13ecall fn_4069b0
0043f143mov rcx, [rbp+144]
0043f14amov edx, 16
0043f14fxor r8, r8
0043f152call fn_4069b0
0043f157mov rax, [rbp+88]
0043f15btest rax, rax
0043f15eje 0x43f164
0043f160mov rax, [rax-8]
0043f164
0043f164loc_43f164:
0043f164mov rcx, [rbp+88]
0043f168mov rdx, rax
0043f16bxor r8, r8
0043f16ecall fn_4069b0
0043f173lea rcx, [rbp+88]
0043f177mov rdx, [rip-0x1035e]
0043f17ecall fn_410600
0043f183mov rcx, [rbp+40]
0043f187mov rdx, [rip-0x1036e]
0043f18ecall fn_410600
0043f193mov rax, [rbp+64]
0043f197test rax, rax
0043f19aje 0x43f1a0
0043f19cmov rax, [rax-8]
0043f1a0
0043f1a0loc_43f1a0:
0043f1a0mov rcx, [rbp+168]
0043f1a7test rcx, rcx
0043f1aaje 0x43f1b0
0043f1acmov rcx, [rcx-8]
0043f1b0
0043f1b0loc_43f1b0:
0043f1b0mov rdx, [rbp+40]
0043f1b4mov r8, [rip-0x1039b]
0043f1bbmov r9l, 1
0043f1c1lea rax, [rax+rcx+8]
0043f1c6mov rcx, rdx
0043f1c9mov rdx, r8
0043f1ccmov r8, r9
0043f1cfmov r9, rax
0043f1d2call fn_410430
0043f1d7mov rax, [rbp+168]
0043f1detest rax, rax
0043f1e1je 0x43f1e7
0043f1e3mov rax, [rax-8]
0043f1e7
0043f1e7loc_43f1e7:
0043f1e7lea rcx, [rbp+80]
0043f1ebmov edx, eax
0043f1edcall fn_430990
0043f1f2mov rcx, [rbp+80]
0043f1f6mov rax, [rbp+40]
0043f1famov rdx, [rax]
0043f1fdmov r8l, 4
0043f203call fn_405ac0
0043f208mov rax, [rbp+168]
0043f20ftest rax, rax
0043f212je 0x43f218
0043f214mov rax, [rax-8]
0043f218
0043f218loc_43f218:
0043f218mov rcx, [rbp+168]
0043f21fmov rdx, [rbp+40]
0043f223mov rdx, [rdx]
0043f226lea rdx, [rdx+4]
0043f22amov r8, rax
0043f22dcall fn_405ac0
0043f232mov rax, [rbp+64]
0043f236test rax, rax
0043f239je 0x43f23f
0043f23bmov rax, [rax-8]
0043f23f
0043f23floc_43f23f:
0043f23flea rcx, [rbp+80]
0043f243mov edx, eax
0043f245call fn_430990
0043f24amov rax, [rbp+168]
0043f251test rax, rax
0043f254je 0x43f25a
0043f256mov rax, [rax-8]
0043f25a
0043f25aloc_43f25a:
0043f25amov rcx, [rbp+80]
0043f25emov rdx, [rbp+40]
0043f262mov rdx, [rdx]
0043f265lea rdx, [rdx+rax+4]
0043f26amov r8l, 4
0043f270call fn_405ac0
0043f275mov rax, [rbp+168]
0043f27ctest rax, rax
0043f27fje 0x43f285
0043f281mov rax, [rax-8]
0043f285
0043f285loc_43f285:
0043f285mov rcx, [rbp+64]
0043f289test rcx, rcx
0043f28cje 0x43f292
0043f28emov rcx, [rcx-8]
0043f292
0043f292loc_43f292:
0043f292mov rdx, [rbp+64]
0043f296mov r8, [rbp+40]
0043f29amov r8, [r8]
0043f29dlea rax, [r8+rax+8]
0043f2a2mov r8, rcx
0043f2a5mov rcx, rdx
0043f2a8mov rdx, rax
0043f2abcall fn_405ac0
0043f2b0lea rcx, [rbp+64]
0043f2b4mov rdx, [rip-0x1049b]
0043f2bbcall fn_410600
0043f2c0nop
0043f2c1
0043f2c1loc_43f2c1:
0043f2c1lea rcx, [rbp+64]
0043f2c5mov rdx, [rip-0x104ac]
0043f2ccmov r8l, 4
0043f2d2call fn_40ec40
0043f2d7lea rcx, [rbp+96]
0043f2dbmov rdx, [rip-14810]
0043f2e2mov r8l, 2
0043f2e8call fn_40ec40
0043f2edlea rcx, [rbp+144]
0043f2f4mov rdx, [rip-0x104db]
0043f2fbmov r8l, 6
0043f301call fn_40ec40
0043f306lea rcx, [rbp+248]
0043f30dmov rdx, [rip-0x104f4]
0043f314call fn_410600
0043f319lea rsp, [rbp+200]
0043f320pop rbx
0043f321pop rsi
0043f322pop rdi
0043f323pop rbp
0043f324ret
0043ed60

0043f325
0043f325 48 8b c0 48 8d 04 05 00 00 00 00 H..H.......

0043f330
0043f330fn_43f330:
0043f330push rbp
0043f331push rbx
0043f332sub rsp, 40
0043f336mov rbp, rsp
0043f339mov rbx, rdx
0043f33clea rcx, [rbx+64]
0043f340mov rdx, [rip-0x10527]
0043f347mov r8l, 4
0043f34dcall fn_40ec40
0043f352lea rcx, [rbx+96]
0043f356mov rdx, [rip-14933]
0043f35dmov r8l, 2
0043f363call fn_40ec40
0043f368lea rcx, [rbx+144]
0043f36fmov rdx, [rip-0x10556]
0043f376mov r8l, 6
0043f37ccall fn_40ec40
0043f381lea rcx, [rbx+248]
0043f388mov rdx, [rip-0x1056f]
0043f38fcall fn_410600
0043f394lea rsp, [rbp+40]
0043f398pop rbx
0043f399pop rbp
0043f39aret
0043f330

0043f39b
0043f39b // align 0x10

0043f3a0
0043f3a0Unit43.finalization:
0043f3a0add [rip+0x3139d], 1
0043f3a7cmp [rip+0x31396], 0
0043f3aeret
0043f3a0

0043f3af
0043f3af // align 0x10

0043f3b0
0043f3b0Unit43.initialization:
0043f3b0sub [rip+0x3138d], 1
0043f3b7cmp [rip+0x31386], -1
0043f3beret
0043f3b0

0043f3bf
0043f3bf // align 0x10

0043f3c0
0043f3c0GetVersionExW:
0043f3c0jmp [rip+0x323ea]
0043f3c0

0043f3c6
0043f3c6 // align 0x10

0043f3d0
0043f3d0NetWkstaGetInfo:
0043f3d0jmp [rip+0x32622]
0043f3d0

0043f3d6
0043f3d6 // align 0x10

0043f3e0
0043f3e0fn_43f3e0:
0043f3e0push rbp
0043f3e1sub rsp, 64
0043f3e5mov rbp, rsp
0043f3e8mov [rbp+40], rcx
0043f3ecmov [rbp+56], 0
0043f3f4mov [rbp+88], rdx
0043f3f8mov rcx, [rbp+88]
0043f3fccall fn_40bee0
0043f401nop
0043f402mov rcx, [rbp+88]
0043f406lea rdx, [rbp+56]
0043f40acall fn_430db0
0043f40flea rcx, [rbp+56]
0043f413mov rax, [rip+0x24ba6]
0043f41amov rdx, [rax+32]
0043f41ecall fn_43ed60
0043f423mov rcx, [rbp+40]
0043f427lea rdx, [rbp+56]
0043f42bcall fn_430d40
0043f430nop
0043f431lea rcx, [rbp+56]
0043f435mov rdx, [rip-0x1061c]
0043f43ccall fn_410600
0043f441lea rcx, [rbp+88]
0043f445call fn_40bd40
0043f44amov rax, [rbp+40]
0043f44elea rsp, [rbp+64]
0043f452pop rbp
0043f453ret
0043f3e0

0043f454
0043f454 48 8d 40 00 48 8d 04 05 00 00 00 00 H.@.H.......

0043f460
0043f460fn_43f460:
0043f460push rbp
0043f461push rbx
0043f462sub rsp, 40
0043f466mov rbp, rsp
0043f469mov rbx, rdx
0043f46clea rcx, [rbx+56]
0043f470mov rdx, [rip-0x10657]
0043f477call fn_410600
0043f47clea rcx, [rbx+88]
0043f480call fn_40bd40
0043f485lea rsp, [rbp+40]
0043f489pop rbx
0043f48apop rbp
0043f48bret
0043f460

0043f48c
0043f48c // align 0x10

0043f490
0043f490fn_43f490:
0043f490push rbx
0043f491sub rsp, 48
0043f495mov rax, [rip+0x24b24]
0043f49ccmp [rax+296], 0
0043f4a3je 0x43f4a9
0043f4a5mov al, 1
0043f4a7jmp 0x43f50b
0043f4a9
0043f4a9loc_43f4a9:
0043f4a9lea rcx, [rip+100]
0043f4b0call GetModuleHandleW
0043f4b5mov rcx, rax
0043f4b8lea rdx, [rip+111]
0043f4bfcall fn_416780
0043f4c4mov rbx, rax
0043f4c7mov [rsp+44], 0
0043f4cftest rbx, rbx
0043f4d2je 0x43f503
0043f4d4call GetCurrentProcess
0043f4d9mov rcx, rax
0043f4dclea rdx, [rsp+44]
0043f4e1call rbx
0043f4e3test eax, eax
0043f4e5je 0x43f4ee
0043f4e7cmp [rsp+44], 0
0043f4ecjne 0x43f4f2
0043f4ee
0043f4eeloc_43f4ee:
0043f4eexor eax, eax
0043f4f0jmp 0x43f4f4
0043f4f2
0043f4f2loc_43f4f2:
0043f4f2mov al, 1
0043f4f4
0043f4f4loc_43f4f4:
0043f4f4test al, al
0043f4f6setne al
0043f4f9movzx rax, al
0043f4fdneg eax
0043f4ffmov [rsp+44], eax
0043f503
0043f503loc_43f503:
0043f503cmp [rsp+44], 0
0043f508setne al
0043f50b
0043f50bloc_43f50b:
0043f50badd rsp, 48
0043f50fpop rbx
0043f510ret
0043f490

0043f511
0043f511 00 00 00 6b 00 65 00 72 00 6e 00 65 00 6c 00 ...k.e.r.n.e.l.
0043f520 33 00 32 00 2e 00 64 00 6c 00 6c 00 00 00 49 00 3.2...d.l.l...I.
0043f530 73 00 57 00 6f 00 77 00 36 00 34 00 50 00 72 00 s.W.o.w.6.4.P.r.
0043f540 6f 00 63 00 65 00 73 00 73 00 00 00 cc cc cc cc o.c.e.s.s.......

0043f550
0043f550fn_43f550:
0043f550push rbp
0043f551sub rsp, 416
0043f558mov rbp, rsp
0043f55bmov [rbp+56], rcx
0043f55fmov [rbp+72], 0
0043f567mov [rbp+64], 0
0043f56fnop
0043f570mov rcx, [rbp+56]
0043f574lea rdx, [rip+825]
0043f57bcall fn_40c4a0
0043f580lea rcx, [rbp+80]
0043f584call GetSystemInfo
0043f589mov [rbp+132], 284
0043f593lea rcx, [rbp+132]
0043f59acall GetVersionExW
0043f59ftest eax, eax
0043f5a1je 0x43f82d
0043f5a7mov eax, [rbp+136]
0043f5adsub eax, 5
0043f5b0test eax, eax
0043f5b2je 0x43f5cf
0043f5b4sub eax, 1
0043f5b7test eax, eax
0043f5b9je 0x43f695
0043f5bfsub eax, 4
0043f5c2test eax, eax
0043f5c4jne 0x43f7e8
0043f5cajmp 0x43f784
0043f5cf
0043f5cfloc_43f5cf:
0043f5cfmov eax, [rbp+140]
0043f5d5sub eax, 1
0043f5d8cmp eax, -1
0043f5dbje 0x43f5ea
0043f5ddtest eax, eax
0043f5dfje 0x43f5ff
0043f5e1sub eax, 1
0043f5e4test eax, eax
0043f5e6jne 0x43f638
0043f5e8jmp 0x43f614
0043f5ea
0043f5ealoc_43f5ea:
0043f5eamov rcx, [rbp+56]
0043f5eelea rdx, [rip+723]
0043f5f5call fn_40c4a0
0043f5fajmp 0x43f7e8
0043f5ff
0043f5ffloc_43f5ff:
0043f5ffmov rcx, [rbp+56]
0043f603lea rdx, [rip+730]
0043f60acall fn_40c4a0
0043f60fjmp 0x43f7e8
0043f614
0043f614loc_43f614:
0043f614cmp [rbp+412], -32768
0043f61djne 0x43f7e8
0043f623mov rcx, [rbp+56]
0043f627lea rdx, [rip+718]
0043f62ecall fn_40c4a0
0043f633jmp 0x43f7e8
0043f638
0043f638loc_43f638:
0043f638cmp [rbp+414], 1
0043f63fjne 0x43f65d
0043f641cmp [rbp+80], 9
0043f646jne 0x43f65d
0043f648mov rcx, [rbp+56]
0043f64clea rdx, [rip+705]
0043f653call fn_40c4a0
0043f658jmp 0x43f7e8
0043f65d
0043f65dloc_43f65d:
0043f65dmov ecx, 89
0043f662call GetSystemMetrics
0043f667test eax, eax
0043f669je 0x43f680
0043f66bmov rcx, [rbp+56]
0043f66flea rdx, [rip+710]
0043f676call fn_40c4a0
0043f67bjmp 0x43f7e8
0043f680
0043f680loc_43f680:
0043f680mov rcx, [rbp+56]
0043f684lea rdx, [rip+725]
0043f68bcall fn_40c4a0
0043f690jmp 0x43f7e8
0043f695
0043f695loc_43f695:
0043f695mov eax, [rbp+140]
0043f69bsub eax, 1
0043f69ecmp eax, -1
0043f6a1je 0x43f6be
0043f6a3test eax, eax
0043f6a5je 0x43f6f1
0043f6a7sub eax, 1
0043f6aatest eax, eax
0043f6acje 0x43f724
0043f6aesub eax, 1
0043f6b1test eax, eax
0043f6b3jne 0x43f7e8
0043f6b9jmp 0x43f757
0043f6be
0043f6beloc_43f6be:
0043f6becmp [rbp+414], 1
0043f6c5jne 0x43f6dc
0043f6c7mov rcx, [rbp+56]
0043f6cblea rdx, [rip+686]
0043f6d2call fn_40c4a0
0043f6d7jmp 0x43f7e8
0043f6dc
0043f6dcloc_43f6dc:
0043f6dcmov rcx, [rbp+56]
0043f6e0lea rdx, [rip+693]
0043f6e7call fn_40c4a0
0043f6ecjmp 0x43f7e8
0043f6f1
0043f6f1loc_43f6f1:
0043f6f1cmp [rbp+414], 1
0043f6f8jne 0x43f70f
0043f6famov rcx, [rbp+56]
0043f6felea rdx, [rip+695]
0043f705call fn_40c4a0
0043f70ajmp 0x43f7e8
0043f70f
0043f70floc_43f70f:
0043f70fmov rcx, [rbp+56]
0043f713lea rdx, [rip+698]
0043f71acall fn_40c4a0
0043f71fjmp 0x43f7e8
0043f724
0043f724loc_43f724:
0043f724cmp [rbp+414], 1
0043f72bjne 0x43f742
0043f72dmov rcx, [rbp+56]
0043f731lea rdx, [rip+704]
0043f738call fn_40c4a0
0043f73djmp 0x43f7e8
0043f742
0043f742loc_43f742:
0043f742mov rcx, [rbp+56]
0043f746lea rdx, [rip+707]
0043f74dcall fn_40c4a0
0043f752jmp 0x43f7e8
0043f757
0043f757loc_43f757:
0043f757cmp [rbp+414], 1
0043f75ejne 0x43f772
0043f760mov rcx, [rbp+56]
0043f764lea rdx, [rip+709]
0043f76bcall fn_40c4a0
0043f770jmp 0x43f7e8
0043f772
0043f772loc_43f772:
0043f772mov rcx, [rbp+56]
0043f776lea rdx, [rip+715]
0043f77dcall fn_40c4a0
0043f782jmp 0x43f7e8
0043f784
0043f784loc_43f784:
0043f784cmp [rbp+144], 22000
0043f78ejae 0x43f7bd
0043f790cmp [rbp+414], 1
0043f797jne 0x43f7ab
0043f799mov rcx, [rbp+56]
0043f79dlea rdx, [rip+712]
0043f7a4call fn_40c4a0
0043f7a9jmp 0x43f7e8
0043f7ab
0043f7abloc_43f7ab:
0043f7abmov rcx, [rbp+56]
0043f7aflea rdx, [rip+718]
0043f7b6call fn_40c4a0
0043f7bbjmp 0x43f7e8
0043f7bd
0043f7bdloc_43f7bd:
0043f7bdcmp [rbp+414], 1
0043f7c4jne 0x43f7d8
0043f7c6mov rcx, [rbp+56]
0043f7calea rdx, [rip+731]
0043f7d1call fn_40c4a0
0043f7d6jmp 0x43f7e8
0043f7d8
0043f7d8loc_43f7d8:
0043f7d8mov rcx, [rbp+56]
0043f7dclea rdx, [rip+737]
0043f7e3call fn_40c4a0
0043f7e8
0043f7e8loc_43f7e8:
0043f7e8lea rcx, [rbp+72]
0043f7ecmovzx edx, [rbp+408]
0043f7f3call fn_4225b0
0043f7f8lea rcx, [rbp+64]
0043f7fcmov rdx, [rbp+72]
0043f800xor r8, r8
0043f803call fn_40cff0
0043f808mov rcx, [rbp+56]
0043f80cmov edx, 3
0043f811mov rax, [rbp+56]
0043f815mov r8, [rax]
0043f818lea r9, [rip+709]
0043f81fmov rax, [rbp+64]
0043f823mov [rsp+32], rax
0043f828call fn_40cce0
0043f82d
0043f82dloc_43f82d:
0043f82dcall fn_43f490
0043f832test al, al
0043f834je 0x43f848
0043f836mov rcx, [rbp+56]
0043f83alea rdx, [rip+691]
0043f841call fn_40c910
0043f846jmp 0x43f858
0043f848
0043f848loc_43f848:
0043f848mov rcx, [rbp+56]
0043f84clea rdx, [rip+693]
0043f853call fn_40c910
0043f858
0043f858loc_43f858:
0043f858nop
0043f859lea rcx, [rbp+64]
0043f85dcall fn_40bd40
0043f862lea rcx, [rbp+72]
0043f866call fn_40bcf0
0043f86bmov rax, [rbp+56]
0043f86flea rsp, [rbp+416]
0043f876pop rbp
0043f877ret
0043f550

0043f878
0043f878 48 8d 04 05 00 00 00 00 H.......

0043f880
0043f880fn_43f880:
0043f880push rbp
0043f881push rbx
0043f882sub rsp, 40
0043f886mov rbp, rsp
0043f889mov rbx, rdx
0043f88clea rcx, [rbx+64]
0043f890call fn_40bd40
0043f895lea rcx, [rbx+72]
0043f899call fn_40bcf0
0043f89elea rsp, [rbp+40]
0043f8a2pop rbx
0043f8a3pop rbp
0043f8a4ret
0043f880

0043f8a5
0043f8a5 00 00 00 e3 04 01 00 ff ff ff ff ...........
0043f8b0 07 00 00 00 55 6e 6b 6e 6f 77 6e 00 e3 04 01 00 ....Unknown.....
0043f8c0 ff ff ff ff 0c 00 00 00 57 69 6e 64 6f 77 73 20 ........Windows
0043f8d0 32 30 30 30 00 00 00 00 e3 04 01 00 ff ff ff ff 2000............
0043f8e0 0a 00 00 00 57 69 6e 64 6f 77 73 20 58 50 00 00 ....Windows XP..
0043f8f0 e3 04 01 00 ff ff ff ff 0b 00 00 00 48 6f 6d 65 ............Home
0043f900 20 53 65 72 76 65 72 00 e3 04 01 00 ff ff ff ff Server.........
0043f910 19 00 00 00 57 69 6e 64 6f 77 73 20 58 50 20 36 ....Windows XP 6
0043f920 34 2d 42 69 74 20 45 64 69 74 69 6f 6e 00 00 00 4-Bit Edition...
0043f930 e3 04 01 00 ff ff ff ff 16 00 00 00 57 69 6e 64 ............Wind
0043f940 6f 77 73 20 53 65 72 76 65 72 20 32 30 30 33 20 ows Server 2003
0043f950 52 32 00 00 e3 04 01 00 ff ff ff ff 13 00 00 00 R2..............
0043f960 57 69 6e 64 6f 77 73 20 53 65 72 76 65 72 20 32 Windows Server 2
0043f970 30 30 33 00 e3 04 01 00 ff ff ff ff 0d 00 00 00 003.............
0043f980 57 69 6e 64 6f 77 73 20 56 69 73 74 61 00 00 00 Windows Vista...
0043f990 e3 04 01 00 ff ff ff ff 13 00 00 00 57 69 6e 64 ............Wind
0043f9a0 6f 77 73 20 53 65 72 76 65 72 20 32 30 30 38 00 ows Server 2008.
0043f9b0 e3 04 01 00 ff ff ff ff 09 00 00 00 57 69 6e 64 ............Wind
0043f9c0 6f 77 73 20 37 00 00 00 e3 04 01 00 ff ff ff ff ows 7...........
0043f9d0 16 00 00 00 57 69 6e 64 6f 77 73 20 53 65 72 76 ....Windows Serv
0043f9e0 65 72 20 32 30 30 38 20 52 32 00 00 e3 04 01 00 er 2008 R2......
0043f9f0 ff ff ff ff 09 00 00 00 57 69 6e 64 6f 77 73 20 ........Windows
0043fa00 38 00 00 00 e3 04 01 00 ff ff ff ff 13 00 00 00 8...............
0043fa10 57 69 6e 64 6f 77 73 20 53 65 72 76 65 72 20 32 Windows Server 2
0043fa20 30 31 32 00 e3 04 01 00 ff ff ff ff 0b 00 00 00 012.............
0043fa30 57 69 6e 64 6f 77 73 20 38 2e 31 00 e3 04 01 00 Windows 8.1.....
0043fa40 ff ff ff ff 16 00 00 00 57 69 6e 64 6f 77 73 20 ........Windows
0043fa50 53 65 72 76 65 72 20 32 30 31 32 20 52 32 00 00 Server 2012 R2..
0043fa60 e3 04 01 00 ff ff ff ff 0a 00 00 00 57 69 6e 64 ............Wind
0043fa70 6f 77 73 20 31 30 00 00 e3 04 01 00 ff ff ff ff ows 10..........
0043fa80 18 00 00 00 57 69 6e 64 6f 77 73 20 53 65 72 76 ....Windows Serv
0043fa90 65 72 20 32 30 31 36 2f 32 30 31 39 00 00 00 00 er 2016/2019....
0043faa0 e3 04 01 00 ff ff ff ff 0a 00 00 00 57 69 6e 64 ............Wind
0043fab0 6f 77 73 20 31 31 00 00 e3 04 01 00 ff ff ff ff ows 11..........
0043fac0 13 00 00 00 57 69 6e 64 6f 77 73 20 53 65 72 76 ....Windows Serv
0043fad0 65 72 20 32 30 32 32 00 e3 04 01 00 ff ff ff ff er 2022.........
0043fae0 03 00 00 00 20 53 50 00 e3 04 01 00 ff ff ff ff .... SP.........
0043faf0 04 00 00 00 20 78 36 34 00 00 00 00 e3 04 01 00 .... x64........
0043fb00 ff ff ff ff 04 00 00 00 20 78 33 32 00 cc cc cc ........ x32....