Similarity

0043f460
0043f460fn_43f460:
0043f460push rbp
0043f461push rbx
0043f462sub rsp, 40
0043f466mov rbp, rsp
0043f469mov rbx, rdx
0043f46clea rcx, [rbx+56]
0043f470mov rdx, [rip-0x10657]
0043f477call fn_410600
0043f47clea rcx, [rbx+88]
0043f480call fn_40bd40
0043f485lea rsp, [rbp+40]
0043f489pop rbx
0043f48apop rbp
0043f48bret
0043f460

0043f48c
0043f48c // align 0x10

0043f490
0043f490fn_43f490:
0043f490push rbx
0043f491sub rsp, 48
0043f495mov rax, [rip+0x24b24]
0043f49ccmp [rax+296], 0
0043f4a3je 0x43f4a9
0043f4a5mov al, 1
0043f4a7jmp 0x43f50b
0043f4a9
0043f4a9loc_43f4a9:
0043f4a9lea rcx, [rip+100]
0043f4b0call GetModuleHandleW
0043f4b5mov rcx, rax
0043f4b8lea rdx, [rip+111]
0043f4bfcall fn_416780
0043f4c4mov rbx, rax
0043f4c7mov [rsp+44], 0
0043f4cftest rbx, rbx
0043f4d2je 0x43f503
0043f4d4call GetCurrentProcess
0043f4d9mov rcx, rax
0043f4dclea rdx, [rsp+44]
0043f4e1call rbx
0043f4e3test eax, eax
0043f4e5je 0x43f4ee
0043f4e7cmp [rsp+44], 0
0043f4ecjne 0x43f4f2
0043f4ee
0043f4eeloc_43f4ee:
0043f4eexor eax, eax
0043f4f0jmp 0x43f4f4
0043f4f2
0043f4f2loc_43f4f2:
0043f4f2mov al, 1
0043f4f4
0043f4f4loc_43f4f4:
0043f4f4test al, al
0043f4f6setne al
0043f4f9movzx rax, al
0043f4fdneg eax
0043f4ffmov [rsp+44], eax
0043f503
0043f503loc_43f503:
0043f503cmp [rsp+44], 0
0043f508setne al
0043f50b
0043f50bloc_43f50b:
0043f50badd rsp, 48
0043f50fpop rbx
0043f510ret
0043f490

0043f511
0043f511 00 00 00 6b 00 65 00 72 00 6e 00 65 00 6c 00 ...k.e.r.n.e.l.
0043f520 33 00 32 00 2e 00 64 00 6c 00 6c 00 00 00 49 00 3.2...d.l.l...I.
0043f530 73 00 57 00 6f 00 77 00 36 00 34 00 50 00 72 00 s.W.o.w.6.4.P.r.
0043f540 6f 00 63 00 65 00 73 00 73 00 00 00 cc cc cc cc o.c.e.s.s.......

0043f550
0043f550fn_43f550:
0043f550push rbp
0043f551sub rsp, 416
0043f558mov rbp, rsp
0043f55bmov [rbp+56], rcx
0043f55fmov [rbp+72], 0
0043f567mov [rbp+64], 0
0043f56fnop
0043f570mov rcx, [rbp+56]
0043f574lea rdx, [rip+825]
0043f57bcall fn_40c4a0
0043f580lea rcx, [rbp+80]
0043f584call GetSystemInfo
0043f589mov [rbp+132], 284
0043f593lea rcx, [rbp+132]
0043f59acall GetVersionExW
0043f59ftest eax, eax
0043f5a1je 0x43f82d
0043f5a7mov eax, [rbp+136]
0043f5adsub eax, 5
0043f5b0test eax, eax
0043f5b2je 0x43f5cf
0043f5b4sub eax, 1
0043f5b7test eax, eax
0043f5b9je 0x43f695
0043f5bfsub eax, 4
0043f5c2test eax, eax
0043f5c4jne 0x43f7e8
0043f5cajmp 0x43f784
0043f5cf
0043f5cfloc_43f5cf:
0043f5cfmov eax, [rbp+140]
0043f5d5sub eax, 1
0043f5d8cmp eax, -1
0043f5dbje 0x43f5ea
0043f5ddtest eax, eax
0043f5dfje 0x43f5ff
0043f5e1sub eax, 1
0043f5e4test eax, eax
0043f5e6jne 0x43f638
0043f5e8jmp 0x43f614
0043f5ea
0043f5ealoc_43f5ea:
0043f5eamov rcx, [rbp+56]
0043f5eelea rdx, [rip+723]
0043f5f5call fn_40c4a0
0043f5fajmp 0x43f7e8
0043f5ff
0043f5ffloc_43f5ff:
0043f5ffmov rcx, [rbp+56]
0043f603lea rdx, [rip+730]
0043f60acall fn_40c4a0
0043f60fjmp 0x43f7e8
0043f614
0043f614loc_43f614:
0043f614cmp [rbp+412], -32768
0043f61djne 0x43f7e8
0043f623mov rcx, [rbp+56]
0043f627lea rdx, [rip+718]
0043f62ecall fn_40c4a0
0043f633jmp 0x43f7e8
0043f638
0043f638loc_43f638:
0043f638cmp [rbp+414], 1
0043f63fjne 0x43f65d
0043f641cmp [rbp+80], 9
0043f646jne 0x43f65d
0043f648mov rcx, [rbp+56]
0043f64clea rdx, [rip+705]
0043f653call fn_40c4a0
0043f658jmp 0x43f7e8
0043f65d
0043f65dloc_43f65d:
0043f65dmov ecx, 89
0043f662call GetSystemMetrics
0043f667test eax, eax
0043f669je 0x43f680
0043f66bmov rcx, [rbp+56]
0043f66flea rdx, [rip+710]
0043f676call fn_40c4a0
0043f67bjmp 0x43f7e8
0043f680
0043f680loc_43f680:
0043f680mov rcx, [rbp+56]
0043f684lea rdx, [rip+725]
0043f68bcall fn_40c4a0
0043f690jmp 0x43f7e8
0043f695
0043f695loc_43f695:
0043f695mov eax, [rbp+140]
0043f69bsub eax, 1
0043f69ecmp eax, -1
0043f6a1je 0x43f6be
0043f6a3test eax, eax
0043f6a5je 0x43f6f1
0043f6a7sub eax, 1
0043f6aatest eax, eax
0043f6acje 0x43f724
0043f6aesub eax, 1
0043f6b1test eax, eax
0043f6b3jne 0x43f7e8
0043f6b9jmp 0x43f757
0043f6be
0043f6beloc_43f6be:
0043f6becmp [rbp+414], 1
0043f6c5jne 0x43f6dc
0043f6c7mov rcx, [rbp+56]
0043f6cblea rdx, [rip+686]
0043f6d2call fn_40c4a0
0043f6d7jmp 0x43f7e8
0043f6dc
0043f6dcloc_43f6dc:
0043f6dcmov rcx, [rbp+56]
0043f6e0lea rdx, [rip+693]
0043f6e7call fn_40c4a0
0043f6ecjmp 0x43f7e8
0043f6f1
0043f6f1loc_43f6f1:
0043f6f1cmp [rbp+414], 1
0043f6f8jne 0x43f70f
0043f6famov rcx, [rbp+56]
0043f6felea rdx, [rip+695]
0043f705call fn_40c4a0
0043f70ajmp 0x43f7e8
0043f70f
0043f70floc_43f70f:
0043f70fmov rcx, [rbp+56]
0043f713lea rdx, [rip+698]
0043f71acall fn_40c4a0
0043f71fjmp 0x43f7e8
0043f724
0043f724loc_43f724:
0043f724cmp [rbp+414], 1
0043f72bjne 0x43f742
0043f72dmov rcx, [rbp+56]
0043f731lea rdx, [rip+704]
0043f738call fn_40c4a0
0043f73djmp 0x43f7e8
0043f742
0043f742loc_43f742:
0043f742mov rcx, [rbp+56]
0043f746lea rdx, [rip+707]
0043f74dcall fn_40c4a0
0043f752jmp 0x43f7e8
0043f757
0043f757loc_43f757:
0043f757cmp [rbp+414], 1
0043f75ejne 0x43f772
0043f760mov rcx, [rbp+56]
0043f764lea rdx, [rip+709]
0043f76bcall fn_40c4a0
0043f770jmp 0x43f7e8
0043f772
0043f772loc_43f772:
0043f772mov rcx, [rbp+56]
0043f776lea rdx, [rip+715]
0043f77dcall fn_40c4a0
0043f782jmp 0x43f7e8
0043f784
0043f784loc_43f784:
0043f784cmp [rbp+144], 22000
0043f78ejae 0x43f7bd
0043f790cmp [rbp+414], 1
0043f797jne 0x43f7ab
0043f799mov rcx, [rbp+56]
0043f79dlea rdx, [rip+712]
0043f7a4call fn_40c4a0
0043f7a9jmp 0x43f7e8
0043f7ab
0043f7abloc_43f7ab:
0043f7abmov rcx, [rbp+56]
0043f7aflea rdx, [rip+718]
0043f7b6call fn_40c4a0
0043f7bbjmp 0x43f7e8
0043f7bd
0043f7bdloc_43f7bd:
0043f7bdcmp [rbp+414], 1
0043f7c4jne 0x43f7d8
0043f7c6mov rcx, [rbp+56]
0043f7calea rdx, [rip+731]
0043f7d1call fn_40c4a0
0043f7d6jmp 0x43f7e8
0043f7d8
0043f7d8loc_43f7d8:
0043f7d8mov rcx, [rbp+56]
0043f7dclea rdx, [rip+737]
0043f7e3call fn_40c4a0
0043f7e8
0043f7e8loc_43f7e8:
0043f7e8lea rcx, [rbp+72]
0043f7ecmovzx edx, [rbp+408]
0043f7f3call fn_4225b0
0043f7f8lea rcx, [rbp+64]
0043f7fcmov rdx, [rbp+72]
0043f800xor r8, r8
0043f803call fn_40cff0
0043f808mov rcx, [rbp+56]
0043f80cmov edx, 3
0043f811mov rax, [rbp+56]
0043f815mov r8, [rax]
0043f818lea r9, [rip+709]
0043f81fmov rax, [rbp+64]
0043f823mov [rsp+32], rax
0043f828call fn_40cce0
0043f82d
0043f82dloc_43f82d:
0043f82dcall fn_43f490
0043f832test al, al
0043f834je 0x43f848
0043f836mov rcx, [rbp+56]
0043f83alea rdx, [rip+691]
0043f841call fn_40c910
0043f846jmp 0x43f858
0043f848
0043f848loc_43f848:
0043f848mov rcx, [rbp+56]
0043f84clea rdx, [rip+693]
0043f853call fn_40c910
0043f858
0043f858loc_43f858:
0043f858nop
0043f859lea rcx, [rbp+64]
0043f85dcall fn_40bd40
0043f862lea rcx, [rbp+72]
0043f866call fn_40bcf0
0043f86bmov rax, [rbp+56]
0043f86flea rsp, [rbp+416]
0043f876pop rbp
0043f877ret
0043f550

0043f878
0043f878 48 8d 04 05 00 00 00 00 H.......

0043f880
0043f880fn_43f880:
0043f880push rbp
0043f881push rbx
0043f882sub rsp, 40
0043f886mov rbp, rsp
0043f889mov rbx, rdx
0043f88clea rcx, [rbx+64]
0043f890call fn_40bd40
0043f895lea rcx, [rbx+72]
0043f899call fn_40bcf0
0043f89elea rsp, [rbp+40]
0043f8a2pop rbx
0043f8a3pop rbp
0043f8a4ret
0043f880

0043f8a5
0043f8a5 00 00 00 e3 04 01 00 ff ff ff ff ...........
0043f8b0 07 00 00 00 55 6e 6b 6e 6f 77 6e 00 e3 04 01 00 ....Unknown.....
0043f8c0 ff ff ff ff 0c 00 00 00 57 69 6e 64 6f 77 73 20 ........Windows
0043f8d0 32 30 30 30 00 00 00 00 e3 04 01 00 ff ff ff ff 2000............
0043f8e0 0a 00 00 00 57 69 6e 64 6f 77 73 20 58 50 00 00 ....Windows XP..
0043f8f0 e3 04 01 00 ff ff ff ff 0b 00 00 00 48 6f 6d 65 ............Home
0043f900 20 53 65 72 76 65 72 00 e3 04 01 00 ff ff ff ff Server.........
0043f910 19 00 00 00 57 69 6e 64 6f 77 73 20 58 50 20 36 ....Windows XP 6
0043f920 34 2d 42 69 74 20 45 64 69 74 69 6f 6e 00 00 00 4-Bit Edition...
0043f930 e3 04 01 00 ff ff ff ff 16 00 00 00 57 69 6e 64 ............Wind
0043f940 6f 77 73 20 53 65 72 76 65 72 20 32 30 30 33 20 ows Server 2003
0043f950 52 32 00 00 e3 04 01 00 ff ff ff ff 13 00 00 00 R2..............
0043f960 57 69 6e 64 6f 77 73 20 53 65 72 76 65 72 20 32 Windows Server 2
0043f970 30 30 33 00 e3 04 01 00 ff ff ff ff 0d 00 00 00 003.............
0043f980 57 69 6e 64 6f 77 73 20 56 69 73 74 61 00 00 00 Windows Vista...
0043f990 e3 04 01 00 ff ff ff ff 13 00 00 00 57 69 6e 64 ............Wind
0043f9a0 6f 77 73 20 53 65 72 76 65 72 20 32 30 30 38 00 ows Server 2008.
0043f9b0 e3 04 01 00 ff ff ff ff 09 00 00 00 57 69 6e 64 ............Wind
0043f9c0 6f 77 73 20 37 00 00 00 e3 04 01 00 ff ff ff ff ows 7...........
0043f9d0 16 00 00 00 57 69 6e 64 6f 77 73 20 53 65 72 76 ....Windows Serv
0043f9e0 65 72 20 32 30 30 38 20 52 32 00 00 e3 04 01 00 er 2008 R2......
0043f9f0 ff ff ff ff 09 00 00 00 57 69 6e 64 6f 77 73 20 ........Windows
0043fa00 38 00 00 00 e3 04 01 00 ff ff ff ff 13 00 00 00 8...............
0043fa10 57 69 6e 64 6f 77 73 20 53 65 72 76 65 72 20 32 Windows Server 2
0043fa20 30 31 32 00 e3 04 01 00 ff ff ff ff 0b 00 00 00 012.............
0043fa30 57 69 6e 64 6f 77 73 20 38 2e 31 00 e3 04 01 00 Windows 8.1.....
0043fa40 ff ff ff ff 16 00 00 00 57 69 6e 64 6f 77 73 20 ........Windows
0043fa50 53 65 72 76 65 72 20 32 30 31 32 20 52 32 00 00 Server 2012 R2..
0043fa60 e3 04 01 00 ff ff ff ff 0a 00 00 00 57 69 6e 64 ............Wind
0043fa70 6f 77 73 20 31 30 00 00 e3 04 01 00 ff ff ff ff ows 10..........
0043fa80 18 00 00 00 57 69 6e 64 6f 77 73 20 53 65 72 76 ....Windows Serv
0043fa90 65 72 20 32 30 31 36 2f 32 30 31 39 00 00 00 00 er 2016/2019....
0043faa0 e3 04 01 00 ff ff ff ff 0a 00 00 00 57 69 6e 64 ............Wind
0043fab0 6f 77 73 20 31 31 00 00 e3 04 01 00 ff ff ff ff ows 11..........
0043fac0 13 00 00 00 57 69 6e 64 6f 77 73 20 53 65 72 76 ....Windows Serv
0043fad0 65 72 20 32 30 32 32 00 e3 04 01 00 ff ff ff ff er 2022.........
0043fae0 03 00 00 00 20 53 50 00 e3 04 01 00 ff ff ff ff .... SP.........
0043faf0 04 00 00 00 20 78 36 34 00 00 00 00 e3 04 01 00 .... x64........
0043fb00 ff ff ff ff 04 00 00 00 20 78 33 32 00 cc cc cc ........ x32....

0043fb10
0043fb10fn_43fb10:
0043fb10push rbp
0043fb11push rdi
0043fb12push rsi
0043fb13push rbx
0043fb14sub rsp, 1272
0043fb1bmov rbp, rsp
0043fb1emov [rbp+72], rcx
0043fb22mov [rbp+80], 0
0043fb2amov [rbp+136], 0
0043fb35mov [rbp+128], 0
0043fb40mov [rbp+104], 0
0043fb48mov [rbp+96], 0
0043fb50mov [rbp+88], 0
0043fb58mov [rbp+120], 0
0043fb60mov [rbp+112], 0
0043fb68mov [rbp+144], 0
0043fb73mov [rbp+152], 0
0043fb7emov [rbp+176], 0
0043fb89mov [rbp+168], 0
0043fb94mov [rbp+160], 0
0043fb9fnop
0043fba0mov rcx, [rbp+72]
0043fba4call fn_40bd40
0043fba9xor ebx, ebx
0043fbab
0043fbabloc_43fbab:
0043fbabmov ecx, 1
0043fbb0call SetErrorMode
0043fbb5mov edi, ebx
0043fbb7add di, 65
0043fbbblea rcx, [rbp+152]
0043fbc2mov edx, edi
0043fbc4call fn_40d730
0043fbc9lea rcx, [rbp+152]
0043fbd0lea rdx, [rip+925]
0043fbd7call fn_40d9b0
0043fbdcmov rcx, [rbp+152]
0043fbe3call fn_40d710
0043fbe8mov rcx, rax
0043fbeblea rdx, [rbp+1256]
0043fbf2lea r8, [rbp+1240]
0043fbf9lea r9, [rbp+1248]
0043fc00mov rax, [rip+0x243f1]
0043fc07call [rax]
0043fc09test eax, eax
0043fc0bje 0x43fdb7
0043fc11mov rsi, [rbp+1240]
0043fc18sub rsi, [rbp+1248]
0043fc1flea rcx, [rbp+176]
0043fc26call fn_40bd90
0043fc2blea rcx, [rbp+144]
0043fc32mov edx, ebx
0043fc34add dx, 65
0043fc38call fn_40d730
0043fc3dlea rcx, [rbp+144]
0043fc44lea rdx, [rip+809]
0043fc4bcall fn_40d9b0
0043fc50mov rcx, [rbp+144]
0043fc57call fn_40d710
0043fc5cmov rcx, rax
0043fc5flea rdx, [rbp+720]
0043fc66mov r8l, 260
0043fc6clea r9, [rbp+196]
0043fc73lea rax, [rbp+192]
0043fc7amov [rsp+32], rax
0043fc7flea rax, [rbp+188]
0043fc86mov [rsp+40], rax
0043fc8blea rax, [rbp+200]
0043fc92mov [rsp+48], rax
0043fc97mov [rsp+56], 260
0043fc9fcall GetVolumeInformationW
0043fca4test eax, eax
0043fca6je 0x43fcc1
0043fca8lea rcx, [rbp+176]
0043fcaflea rdx, [rbp+720]
0043fcb6mov r8l, 260
0043fcbccall fn_40d110
0043fcc1
0043fcc1loc_43fcc1:
0043fcc1mov rcx, [rbp+176]
0043fcc8xor edx, edx
0043fccacall fn_40d640
0043fccftest eax, eax
0043fcd1jne 0x43fce6
0043fcd3lea rcx, [rbp+176]
0043fcdalea rdx, [rip+671]
0043fce1call fn_40c490
0043fce6
0043fce6loc_43fce6:
0043fce6lea rcx, [rbp+112]
0043fceamov edx, edi
0043fceccall fn_40d080
0043fcf1lea rcx, [rbp+120]
0043fcf5mov rdx, [rbp+112]
0043fcf9call fn_4220f0
0043fcfelea rcx, [rbp+128]
0043fd05mov edx, 5
0043fd0amov r8, [rbp+168]
0043fd11mov r9, [rbp+120]
0043fd15lea rax, [rip+628]
0043fd1cmov [rsp+32], rax
0043fd21mov rax, [rbp+176]
0043fd28mov [rsp+40], rax
0043fd2dlea rax, [rip+612]
0043fd34mov [rsp+48], rax
0043fd39call fn_40d530
0043fd3elea rcx, [rbp+104]
0043fd42mov rdx, [rbp+128]
0043fd49call fn_40d820
0043fd4elea rcx, [rbp+96]
0043fd52mov rdx, rsi
0043fd55call fn_4225f0
0043fd5alea rcx, [rbp+88]
0043fd5emov rdx, [rbp+1240]
0043fd65call fn_4225f0
0043fd6alea rcx, [rbp+136]
0043fd71mov edx, 5
0043fd76mov r8, [rbp+104]
0043fd7amov r9, [rbp+96]
0043fd7elea rax, [rip+547]
0043fd85mov [rsp+32], rax
0043fd8amov rax, [rbp+88]
0043fd8emov [rsp+40], rax
0043fd93lea rax, [rip+542]
0043fd9amov [rsp+48], rax
0043fd9fcall fn_40dbb0
0043fda4lea rcx, [rbp+168]
0043fdabmov rdx, [rbp+136]
0043fdb2call fn_40d850
0043fdb7
0043fdb7loc_43fdb7:
0043fdb7add ebx, 1
0043fdbacmp ebx, 26
0043fdbdjne 0x43fbab
0043fdc3nop
0043fdc4xor eax, eax
0043fdc6mov rcx, [rbp+168]
0043fdcdtest rcx, rcx
0043fdd0je 0x43fdd8
0043fdd2mov eax, [rcx-4]
0043fdd5shr eax, 1
0043fdd8
0043fdd8loc_43fdd8:
0043fdd8lea rcx, [rbp+80]
0043fddcmov rdx, [rbp+168]
0043fde3mov r8l, 1
0043fde9mov r9l, eax
0043fdecsub r9l, 4
0043fdf0call fn_40d650
0043fdf5lea rcx, [rbp+168]
0043fdfcmov edx, 3
0043fe01lea r8, [rip+448]
0043fe08mov r9, [rbp+80]
0043fe0clea rax, [rip+465]
0043fe13mov [rsp+32], rax
0043fe18call fn_40d530
0043fe1dlea rcx, [rbp+160]
0043fe24mov rdx, [rbp+168]
0043fe2bcall fn_414390
0043fe30mov rcx, [rbp+72]
0043fe34call fn_40bd40
0043fe39xor eax, eax
0043fe3bmov rcx, [rbp+160]
0043fe42test rcx, rcx
0043fe45je 0x43fe4a
0043fe47mov eax, [rcx-4]
0043fe4a
0043fe4aloc_43fe4a:
0043fe4amov rcx, [rbp+72]
0043fe4emov edx, eax
0043fe50xor r8, r8
0043fe53call fn_40cf30
0043fe58lea rcx, [rbp+160]
0043fe5fcall fn_40c690
0043fe64mov rbx, rax
0043fe67mov rcx, [rbp+72]
0043fe6bcall fn_40c690
0043fe70mov rcx, rax
0043fe73xor eax, eax
0043fe75mov rdx, [rbp+160]
0043fe7ctest rdx, rdx
0043fe7fje 0x43fe84
0043fe81mov eax, [rdx-4]
0043fe84
0043fe84loc_43fe84:
0043fe84mov rdx, rcx
0043fe87movsxd r8, eax
0043fe8amov rcx, rbx
0043fe8dcall fn_405ac0
0043fe92nop
0043fe93lea rcx, [rbp+80]
0043fe97call fn_40bd90
0043fe9clea rcx, [rbp+88]
0043fea0mov edx, 3
0043fea5call fn_40bdd0
0043feaalea rcx, [rbp+112]
0043feaemov edx, 3
0043feb3call fn_40be70
0043feb8lea rcx, [rbp+136]
0043febfmov edx, 3
0043fec4call fn_40bdd0
0043fec9lea rcx, [rbp+160]
0043fed0call fn_40bd40
0043fed5lea rcx, [rbp+168]
0043fedcmov edx, 2
0043fee1call fn_40be70
0043fee6mov rax, [rbp+72]
0043feealea rsp, [rbp+1272]
0043fef1pop rbx
0043fef2pop rsi
0043fef3pop rdi
0043fef4pop rbp
0043fef5ret
0043fb10

0043fef6
0043fef6 48 90 48 8d 04 05 00 00 00 00 H.H.......

0043ff00
0043ff00fn_43ff00:
0043ff00push rbp
0043ff01push rbx
0043ff02sub rsp, 40
0043ff06mov rbp, rsp
0043ff09mov rbx, rdx
0043ff0clea rcx, [rbx+80]
0043ff10call fn_40bd90
0043ff15lea rcx, [rbx+88]
0043ff19mov edx, 3
0043ff1ecall fn_40bdd0
0043ff23lea rcx, [rbx+112]
0043ff27mov edx, 3
0043ff2ccall fn_40be70
0043ff31lea rcx, [rbx+136]
0043ff38mov edx, 3
0043ff3dcall fn_40bdd0
0043ff42lea rcx, [rbx+160]
0043ff49call fn_40bd40
0043ff4elea rcx, [rbx+168]
0043ff55mov edx, 2
0043ff5acall fn_40be70
0043ff5flea rsp, [rbp+40]
0043ff63pop rbx
0043ff64pop rbp
0043ff65ret
0043ff00

0043ff66
0043ff66 00 00 b0 04 02 00 ff ff ff ff ..........
0043ff70 02 00 00 00 3a 00 5c 00 00 00 00 00 0a 00 00 00 ....:.\.........
0043ff80 44 00 72 00 69 00 76 00 65 00 00 00 02 00 00 00 D.r.i.v.e.......
0043ff90 2d 00 00 00 02 00 00 00 3a 00 00 00 b0 04 02 00 -.......:.......
0043ffa0 ff ff ff ff 01 00 00 00 2f 00 00 00 b0 04 02 00 ......../.......
0043ffb0 ff ff ff ff 04 00 00 00 3c 00 62 00 72 00 3e 00 ........<.b.r.>.
0043ffc0 00 00 00 00 16 00 00 00 3c 00 64 00 69 00 73 00 ........<.d.i.s.
0043ffd0 6b 00 5f 00 64 00 61 00 74 00 61 00 3e 00 00 00 k._.d.a.t.a.>...
0043ffe0 18 00 00 00 3c 00 2f 00 64 00 69 00 73 00 6b 00 ....<./.d.i.s.k.
0043fff0 5f 00 64 00 61 00 74 00 61 00 3e 00 00 00 cc cc _.d.a.t.a.>.....

00440000
00440000fn_440000:
00440000push rbp
00440001push rsi
00440002push rbx
00440003sub rsp, 1056
0044000amov rbp, rsp
0044000dmov rbx, rcx
00440010mov esi, edx
00440012call fn_42b330
00440017cmp eax, 2
0044001ajne 0x440040
0044001cmov ecx, esi
0044001emov edx, 2
00440023lea r8, [rbp+32]
00440027mov r9l, 512
0044002dcall GetLocaleInfoW
00440032mov rcx, rbx
00440035lea rdx, [rbp+32]
00440039call fn_40fc10
0044003ejmp 0x44006e
00440040
00440040loc_440040:
00440040mov ecx, esi
00440042mov edx, 2
00440047lea r8, [rbp+544]
0044004emov r9l, 512
00440054call GetLocaleInfoW
00440059mov rcx, rbx
0044005clea rdx, [rbp+544]
00440063mov r8l, 256
00440069call fn_40d7b0
0044006e
0044006eloc_44006e:
0044006emov rax, rbx
00440071lea rsp, [rbp+1056]
00440078pop rbx
00440079pop rsi
0044007apop rbp
0044007bret
00440000

0044007c
0044007c // align 0x10

00440080
00440080fn_440080:
00440080push rbp
00440081push rbx
00440082sub rsp, 104
00440086mov rbp, rsp
00440089mov [rbp+48], 0
00440091mov [rbp+40], 0
00440099mov [rbp+56], rbp
0044009dmov [rbp+128], rcx
004400a4nop
004400a5mov rcx, [rbp+128]
004400aclea rdx, [rip+409]
004400b3call fn_40c440
004400b8mov [rbp+88], 0
004400c0xor ecx, ecx
004400c2mov rdx, [rbp+88]
004400c6call GetKeyboardLayoutList
004400cbmov [rbp+84], eax
004400cecmp [rbp+84], 0
004400d2jbe 0x440182
004400d8mov ecx, [rbp+84]
004400dbadd ecx, ecx
004400ddadd ecx, ecx
004400dfadd ecx, ecx
004400e1mov ecx, ecx
004400e3call fn_405700
004400e8mov [rbp+88], rax
004400ecnop
004400edmov ecx, [rbp+84]
004400f0mov rdx, [rbp+88]
004400f4call GetKeyboardLayoutList
004400f9mov rcx, [rbp+128]
00440100call fn_40bd90
00440105xor eax, eax
00440107mov ebx, [rbp+84]
0044010asub ebx, 1
0044010dmov [rbp+80], eax
00440110cmp [rbp+80], ebx
00440113ja 0x44016c
00440115sub ebx, eax
00440117add ebx, 1
0044011a
0044011aloc_44011a:
0044011amov rax, [rbp+88]
0044011emov ecx, [rbp+80]
00440121movzx eax, [rax+8*rcx]
00440125mov [rbp+76], eax
00440128lea rcx, [rbp+48]
0044012cmov edx, [rbp+76]
0044012fcall fn_440000
00440134lea rcx, [rbp+48]
00440138lea rdx, [rip+305]
0044013fcall fn_40d9b0
00440144lea rcx, [rbp+40]
00440148mov rdx, [rbp+48]
0044014ccall fn_40d850
00440151mov rcx, [rbp+128]
00440158mov rdx, [rbp+40]
0044015ccall fn_40d1a0
00440161add [rbp+80], 1
00440165sub ebx, 1
00440168test ebx, ebx
0044016ajne 0x44011a
0044016c
0044016cloc_44016c:
0044016cnop
0044016dnop
0044016emov rcx, [rbp+88]
00440172mov edx, [rbp+84]
00440175add edx, edx
00440177add edx, edx
00440179add edx, edx
0044017bmov edx, edx
0044017dcall fn_405730
00440182
00440182loc_440182:
00440182mov [rbp+68], 0
00440189mov rax, [rbp+128]
00440190mov rax, [rax]
00440193test rax, rax
00440196je 0x4401a1
00440198mov eax, [rax-4]
0044019bshr eax, 1
0044019emov [rbp+68], eax
004401a1
004401a1loc_4401a1:
004401a1mov rcx, [rbp+128]
004401a8mov rax, [rbp+128]
004401afmov rdx, [rax]
004401b2mov r8l, 1
004401b8mov r9l, [rbp+68]
004401bcsub r9l, 4
004401c0call fn_40d650
004401c5nop
004401c6lea rcx, [rbp+40]
004401cacall fn_40bd90
004401cflea rcx, [rbp+48]
004401d3call fn_40bcf0
004401d8mov rax, [rbp+128]
004401dflea rsp, [rbp+104]
004401e3pop rbx
004401e4pop rbp
004401e5ret
00440080

004401e6
004401e6 48 90 48 8d 04 05 00 00 00 00 H.H.......

004401f0
004401f0fn_4401f0:
004401f0push rbp
004401f1sub rsp, 32
004401f5mov rbp, rsp
004401f8mov rcx, [rdx+88]
004401fcmov edx, [rdx+84]
004401ffadd edx, edx
00440201add edx, edx
00440203add edx, edx
00440205mov edx, edx
00440207call fn_405730
0044020clea rsp, [rbp+32]
00440210pop rbp
00440211ret
004401f0

00440212
00440212 64 48 8d 44 20 00 48 8d 04 05 00 00 00 00 dH.D .H.......

00440220
00440220fn_440220:
00440220push rbp
00440221push rbx
00440222sub rsp, 40
00440226mov rbp, rsp
00440229mov rbx, rdx
0044022clea rcx, [rbx+40]
00440230call fn_40bd90
00440235lea rcx, [rbx+48]
00440239call fn_40bcf0
0044023elea rsp, [rbp+40]
00440242pop rbx
00440243pop rbp
00440244ret
00440220

00440245
00440245 00 00 00 16 00 00 00 55 00 6e 00 .......U.n.
00440250 6b 00 6e 00 6f 00 77 00 6e 00 3c 00 62 00 72 00 k.n.o.w.n.<.b.r.
00440260 3e 00 00 00 b0 04 02 00 ff ff ff ff 04 00 00 00 >...............
00440270 3c 00 62 00 72 00 3e 00 00 00 cc cc cc cc cc cc <.b.r.>.........

00440280
00440280fn_440280:
00440280push rbp
00440281push rbx
00440282sub rsp, 56
00440286mov rbp, rsp
00440289mov [rbp+32], rcx
0044028dmov [rbp+40], 0
00440295nop
00440296mov rcx, [rbp+32]
0044029alea rdx, [rip+155]
004402a1call fn_40c440
004402a6call fn_42d740
004402abmov rcx, rax
004402aemov rax, [rip+0x23fe3]
004402b5mov edx, [rax]
004402b7call TLanguages.IndexOf
004402bcmov ebx, eax
004402becall fn_42d740
004402c3mov rcx, rax
004402c6call fn_42d2d0
004402cbcmp ebx, eax
004402cdjge 0x44030a
004402cfcall fn_42d740
004402d4mov rbx, rax
004402d7call fn_42d740
004402dcmov rcx, rax
004402dfmov rax, [rip+0x23fb2]
004402e6mov edx, [rax]
004402e8call TLanguages.IndexOf
004402edmov rcx, rbx
004402f0lea rdx, [rbp+40]
004402f4mov r8l, eax
004402f7call TLanguages.GetName
004402fcmov rcx, [rbp+32]
00440300mov rdx, [rbp+40]
00440304call fn_40d850
00440309nop
0044030a
0044030aloc_44030a:
0044030alea rcx, [rbp+40]
0044030ecall fn_40bcf0
00440313mov rax, [rbp+32]
00440317lea rsp, [rbp+56]
0044031bpop rbx
0044031cpop rbp
0044031dret
00440280

0044031e
0044031e 48 90 H.

00440320
00440320fn_440320:
00440320push rbp
00440321sub rsp, 32
00440325mov rbp, rsp
00440328lea rcx, [rdx+40]
0044032ccall fn_40bcf0
00440331lea rsp, [rbp+32]
00440335pop rbp
00440336ret
00440320

00440337
00440337 00 0e 00 00 00 55 00 6e 00 .....U.n.
00440340 6b 00 6e 00 6f 00 77 00 6e 00 00 00 cc cc cc cc k.n.o.w.n.......

00440350
00440350fn_440350:
00440350push rbp
00440351sub rsp, 64
00440355mov rbp, rsp
00440358mov [rbp+40], rcx
0044035cmov [rbp+56], 0
00440364nop
00440365mov [rbp+52], 255
0044036clea rcx, [rbp+56]
00440370mov edx, [rbp+52]
00440373call fn_40d6b0
00440378mov rcx, [rbp+56]
0044037ccall fn_40d180
00440381mov rcx, rax
00440384lea rdx, [rbp+52]
00440388call GetUserNameW
0044038dtest eax, eax
0044038fje 0x4403ae
00440391mov rcx, [rbp+40]
00440395mov rdx, [rbp+56]
00440399mov r8l, 1
0044039fmov r9l, [rbp+52]
004403a3sub r9l, 1
004403a7call fn_40d650
004403acjmp 0x4403be
004403ae
004403aeloc_4403ae:
004403aemov rcx, [rbp+40]
004403b2lea rdx, [rip+67]
004403b9call fn_40c440
004403be
004403beloc_4403be:
004403benop
004403bflea rcx, [rbp+56]
004403c3call fn_40bd90
004403c8mov rax, [rbp+40]
004403cclea rsp, [rbp+64]
004403d0pop rbp
004403d1ret
00440350

004403d2
004403d2 64 48 8d 44 20 00 48 8d 04 05 00 00 00 00 dH.D .H.......

004403e0
004403e0fn_4403e0:
004403e0push rbp
004403e1sub rsp, 32
004403e5mov rbp, rsp
004403e8lea rcx, [rdx+56]
004403eccall fn_40bd90
004403f1lea rsp, [rbp+32]
004403f5pop rbp
004403f6ret
004403e0

004403f7
004403f7 00 0e 00 00 00 55 00 6e 00 .....U.n.
00440400 6b 00 6e 00 6f 00 77 00 6e 00 00 00 cc cc cc cc k.n.o.w.n.......

00440410
00440410fn_440410:
00440410push rbp
00440411push rbx
00440412sub rsp, 56
00440416mov rbp, rsp
00440419mov rbx, rcx
0044041cxor ecx, ecx
0044041emov edx, 100
00440423lea r8, [rbp+40]
00440427call NetWkstaGetInfo
0044042ctest eax, eax
0044042eje 0x440441
00440430mov rcx, rbx
00440433lea rdx, [rip+38]
0044043acall fn_40c440
0044043fjmp 0x440451
00440441
00440441loc_440441:
00440441mov rcx, rbx
00440444mov rax, [rbp+40]
00440448mov rdx, [rax+16]
0044044ccall fn_40d0d0
00440451
00440451loc_440451:
00440451mov rax, rbx
00440454lea rsp, [rbp+56]
00440458pop rbx
00440459pop rbp
0044045aret
00440410

0044045b
0044045b 00 0e 00 00 00 .....
00440460 55 00 6e 00 6b 00 6e 00 6f 00 77 00 6e 00 00 00 U.n.k.n.o.w.n...

00440470
00440470fn_440470:
00440470push rbp
00440471sub rsp, 1008
00440478mov rbp, rsp
0044047bmov [rbp+88], 0
00440483mov [rbp+96], 0
0044048bmov [rbp+104], 0
00440493mov [rbp+112], 0
0044049bmov [rbp+120], 0
004404a3mov [rbp+136], 0
004404aemov [rbp+128], 0
004404b9mov [rbp+144], 0
004404c4mov [rbp+152], 0
004404cfmov [rbp+160], 0
004404damov [rbp+184], 0
004404e5mov [rbp+200], 0
004404f0mov [rbp+192], 0
004404fbmov [rbp+208], 0
00440506mov [rbp+224], 0
00440511mov [rbp+216], 0
0044051cmov [rbp+232], 0
00440527mov [rbp+248], 0
00440532mov [rbp+240], 0
0044053dmov [rbp+256], 0
00440548mov [rbp+272], 0
00440553mov [rbp+264], 0
0044055emov [rbp+280], 0
00440569mov [rbp+296], 0
00440574mov [rbp+288], 0
0044057fmov [rbp+304], 0
0044058amov [rbp+312], 0
00440595mov [rbp+320], 0
004405a0mov [rbp+328], 0
004405abmov [rbp+344], 0
004405b6mov [rbp+336], 0
004405c1mov [rbp+360], 0
004405ccmov [rbp+352], 0
004405d7mov [rbp+376], 0
004405e2mov [rbp+368], 0
004405edmov [rbp+392], 0
004405f8mov [rbp+384], 0
00440603mov [rbp+408], 0
0044060emov [rbp+400], 0
00440619mov [rbp+424], 0
00440624mov [rbp+416], 0
0044062fmov [rbp+440], 0
0044063amov [rbp+432], 0
00440645mov [rbp+448], 0
00440650mov [rbp+496], 0
0044065bmov [rbp+488], 0
00440666mov [rbp+480], 0
00440671mov [rbp+472], 0
0044067cmov [rbp+464], 0
00440687mov [rbp+456], 0
00440692mov [rbp+992], 0
0044069dmov [rbp+984], 0
004406a8mov [rbp+976], 0
004406b3mov [rbp+968], 0
004406bemov [rbp+960], 0
004406c9mov [rbp+952], 0
004406d4mov [rbp+944], 0
004406dfmov [rbp+936], 0
004406eamov [rbp+928], 0
004406f5mov [rbp+920], 0
00440700mov [rbp+912], 0
0044070bmov [rbp+896], 0
00440716mov [rbp+888], 0
00440721mov [rbp+880], 0
0044072cmov [rbp+872], 0
00440737mov [rbp+1000], 0
00440742mov [rbp+504], rbp
00440749nop
0044074amov rax, [rip+0x2386f]
00440751lea rcx, [rax+736]
00440758mov rdx, [rip-0x1193f]
0044075fcall fn_410600
00440764mov rax, [rip+0x23855]
0044076bmov rax, [rax+32]
0044076fmov [rbp+864], rax
00440776mov rax, [rbp+864]
0044077dmov [rbp+856], rax
00440784cmp [rbp+856], 0
0044078cje 0x4407a0
0044078emov rax, [rbp+856]
00440795mov rax, [rax-8]
00440799mov [rbp+856], rax
004407a0
004407a0loc_4407a0:
004407a0cmp [rbp+856], 0
004407a8je 0x44183a
004407aelea rcx, [rbp+944]
004407b5call fn_43f550
004407balea rcx, [rbp+952]
004407c1call fn_43fb10
004407c6lea rcx, [rbp+992]
004407cdcall fn_440080
004407d2lea rcx, [rbp+984]
004407d9call fn_440280
004407delea rcx, [rbp+976]
004407e5call fn_440350
004407ealea rcx, [rbp+968]
004407f1call fn_42f930
004407f6lea rcx, [rbp+960]
004407fdcall fn_440410
00440802mov rax, [rip+0x237b7]
00440809cmp [rax+296], 0
00440810je 0x440827
00440812lea rcx, [rbp+872]
00440819lea rdx, [rip+4604]
00440820call fn_40c520
00440825jmp 0x44083a
00440827
00440827loc_440827:
00440827lea rcx, [rbp+872]
0044082elea rdx, [rip+4603]
00440835call fn_40c520
0044083a
0044083aloc_44083a:
0044083alea rcx, [rbp+496]
00440841mov rax, [rip+0x23778]
00440848movzx rdx, [rax+8]
0044084dcall fn_4225b0
00440852lea rcx, [rbp+488]
00440859mov rdx, [rbp+496]
00440860xor r8, r8
00440863call fn_40cff0
00440868lea rcx, [rbp+480]
0044086fmov rax, [rip+0x2374a]
00440876movzx rdx, [rax+9]
0044087bcall fn_4225b0
00440880lea rcx, [rbp+472]
00440887mov rdx, [rbp+480]
0044088exor r8, r8
00440891call fn_40cff0
00440896lea rcx, [rbp+464]
0044089dmov rax, [rip+0x2371c]
004408a4mov edx, [rax+12]
004408a7call fn_4225f0
004408aclea rcx, [rbp+456]
004408b3mov rdx, [rbp+464]
004408baxor r8, r8
004408bdcall fn_40cff0
004408c2lea rcx, [rbp+872]
004408c9mov edx, 7
004408cemov r8, [rbp+872]
004408d5lea r9, [rip+4456]
004408dcmov rax, [rbp+488]
004408e3mov [rsp+32], rax
004408e8lea rax, [rip+4453]
004408efmov [rsp+40], rax
004408f4mov rax, [rbp+472]
004408fbmov [rsp+48], rax
00440900lea rax, [rip+4429]
00440907mov [rsp+56], rax
0044090cmov rax, [rbp+456]
00440913mov [rsp+64], rax
00440918call fn_40cce0
0044091dmov [rbp+852], 0
00440927cmp [rbp+872], 0
0044092fje 0x440941
00440931mov rax, [rbp+872]
00440938mov eax, [rax-4]
0044093bmov [rbp+852], eax
00440941
00440941loc_440941:
00440941lea rcx, [rbp+448]
00440948mov edx, [rbp+852]
0044094ecall fn_42fde0
00440953lea rcx, [rbp+936]
0044095amov rdx, [rbp+448]
00440961mov r8, [rbp+872]
00440968call fn_40ca10
0044096dmov rax, [rip+0x2364c]
00440974mov rax, [rax+40]
00440978mov [rbp+840], rax
0044097fmov rax, [rbp+840]
00440986mov [rbp+832], rax
0044098dcmp [rbp+832], 0
00440995je 0x4409a9
00440997mov rax, [rbp+832]
0044099emov rax, [rax-8]
004409a2mov [rbp+832], rax
004409a9
004409a9loc_4409a9:
004409a9lea rcx, [rbp+440]
004409b0mov edx, [rbp+832]
004409b6call fn_42fde0
004409bblea rcx, [rbp+432]
004409c2mov rax, [rip+0x235f7]
004409c9lea rdx, [rax+40]
004409cdcall fn_430d40
004409d2lea rcx, [rbp+936]
004409d9mov edx, 3
004409demov r8, [rbp+936]
004409e5mov r9, [rbp+440]
004409ecmov rax, [rbp+432]
004409f3mov [rsp+32], rax
004409f8call fn_40cce0
004409fdmov rax, [rip+0x235bc]
00440a04mov rax, [rax+128]
00440a0bmov [rbp+824], rax
00440a12mov rax, [rbp+824]
00440a19mov [rbp+816], rax
00440a20cmp [rbp+816], 0
00440a28je 0x440a3c
00440a2amov rax, [rbp+816]
00440a31mov rax, [rax-8]
00440a35mov [rbp+816], rax
00440a3c
00440a3cloc_440a3c:
00440a3clea rcx, [rbp+424]
00440a43mov edx, [rbp+816]
00440a49call fn_42fde0
00440a4elea rcx, [rbp+416]
00440a55mov rax, [rip+0x23564]
00440a5clea rdx, [rax+128]
00440a63call fn_430d40
00440a68lea rcx, [rbp+936]
00440a6fmov edx, 3
00440a74mov r8, [rbp+936]
00440a7bmov r9, [rbp+424]
00440a82mov rax, [rbp+416]
00440a89mov [rsp+32], rax
00440a8ecall fn_40cce0
00440a93mov rax, [rip+0x23526]
00440a9amov rax, [rax+48]
00440a9emov [rbp+808], rax
00440aa5mov rax, [rbp+808]
00440aacmov [rbp+800], rax
00440ab3cmp [rbp+800], 0
00440abbje 0x440acf
00440abdmov rax, [rbp+800]
00440ac4mov rax, [rax-8]
00440ac8mov [rbp+800], rax
00440acf
00440acfloc_440acf:
00440acflea rcx, [rbp+408]
00440ad6mov edx, [rbp+800]
00440adccall fn_42fde0
00440ae1lea rcx, [rbp+400]
00440ae8mov rax, [rip+0x234d1]
00440aeflea rdx, [rax+48]
00440af3call fn_430d40
00440af8lea rcx, [rbp+936]
00440affmov edx, 3
00440b04mov r8, [rbp+936]
00440b0bmov r9, [rbp+408]
00440b12mov rax, [rbp+400]
00440b19mov [rsp+32], rax
00440b1ecall fn_40cce0
00440b23mov rax, [rip+0x23496]
00440b2amov rax, [rax+56]
00440b2emov [rbp+792], rax
00440b35mov rax, [rbp+792]
00440b3cmov [rbp+784], rax
00440b43cmp [rbp+784], 0
00440b4bje 0x440b5f
00440b4dmov rax, [rbp+784]
00440b54mov rax, [rax-8]
00440b58mov [rbp+784], rax
00440b5f
00440b5floc_440b5f:
00440b5flea rcx, [rbp+392]
00440b66mov edx, [rbp+784]
00440b6ccall fn_42fde0
00440b71lea rcx, [rbp+384]
00440b78mov rax, [rip+0x23441]
00440b7flea rdx, [rax+56]
00440b83call fn_430d40
00440b88lea rcx, [rbp+936]
00440b8fmov edx, 3
00440b94mov r8, [rbp+936]
00440b9bmov r9, [rbp+392]
00440ba2mov rax, [rbp+384]
00440ba9mov [rsp+32], rax
00440baecall fn_40cce0
00440bb3mov rax, [rip+0x23406]
00440bbamov rax, [rax+104]
00440bbemov [rbp+776], rax
00440bc5mov rax, [rbp+776]
00440bccmov [rbp+768], rax
00440bd3cmp [rbp+768], 0
00440bdbje 0x440bef
00440bddmov rax, [rbp+768]
00440be4mov rax, [rax-8]
00440be8mov [rbp+768], rax
00440bef
00440befloc_440bef:
00440beflea rcx, [rbp+376]
00440bf6mov edx, [rbp+768]
00440bfccall fn_42fde0
00440c01lea rcx, [rbp+368]
00440c08mov rax, [rip+0x233b1]
00440c0flea rdx, [rax+104]
00440c13call fn_430d40
00440c18lea rcx, [rbp+936]
00440c1fmov edx, 3
00440c24mov r8, [rbp+936]
00440c2bmov r9, [rbp+376]
00440c32mov rax, [rbp+368]
00440c39mov [rsp+32], rax
00440c3ecall fn_40cce0
00440c43mov rax, [rip+0x23376]
00440c4amov rax, [rax+96]
00440c4emov [rbp+760], rax
00440c55mov rax, [rbp+760]
00440c5cmov [rbp+752], rax
00440c63cmp [rbp+752], 0
00440c6bje 0x440c7f
00440c6dmov rax, [rbp+752]
00440c74mov rax, [rax-8]
00440c78mov [rbp+752], rax
00440c7f
00440c7floc_440c7f:
00440c7flea rcx, [rbp+360]
00440c86mov edx, [rbp+752]
00440c8ccall fn_42fde0
00440c91lea rcx, [rbp+352]
00440c98mov rax, [rip+0x23321]
00440c9flea rdx, [rax+96]
00440ca3call fn_430d40
00440ca8lea rcx, [rbp+936]
00440cafmov edx, 3
00440cb4mov r8, [rbp+936]
00440cbbmov r9, [rbp+360]
00440cc2mov rax, [rbp+352]
00440cc9mov [rsp+32], rax
00440ccecall fn_40cce0
00440cd3mov rax, [rip+0x232e6]
00440cdamov rax, [rax+112]
00440cdemov [rbp+744], rax
00440ce5mov rax, [rbp+744]
00440cecmov [rbp+736], rax
00440cf3cmp [rbp+736], 0
00440cfbje 0x440d0f
00440cfdmov rax, [rbp+736]
00440d04mov rax, [rax-8]
00440d08mov [rbp+736], rax
00440d0f
00440d0floc_440d0f:
00440d0flea rcx, [rbp+344]
00440d16mov edx, [rbp+736]
00440d1ccall fn_42fde0
00440d21lea rcx, [rbp+336]
00440d28mov rax, [rip+0x23291]
00440d2flea rdx, [rax+112]
00440d33call fn_430d40
00440d38lea rcx, [rbp+936]
00440d3fmov edx, 3
00440d44mov r8, [rbp+936]
00440d4bmov r9, [rbp+344]
00440d52mov rax, [rbp+336]
00440d59mov [rsp+32], rax
00440d5ecall fn_40cce0
00440d63mov rax, [rip+0x23256]
00440d6amov rax, [rax+16]
00440d6emov [rbp+728], rax
00440d75mov [rbp+724], 0
00440d7fcmp [rbp+728], 0
00440d87je 0x440d99
00440d89mov rax, [rbp+728]
00440d90mov eax, [rax-4]
00440d93mov [rbp+724], eax
00440d99
00440d99loc_440d99:
00440d99lea rcx, [rbp+328]
00440da0mov edx, [rbp+724]
00440da6call fn_42fde0
00440dablea rcx, [rbp+936]
00440db2mov edx, 3
00440db7mov r8, [rbp+936]
00440dbemov r9, [rbp+328]
00440dc5mov rax, [rip+0x231f4]
00440dccmov rax, [rax+16]
00440dd0mov [rsp+32], rax
00440dd5call fn_40cce0
00440ddamov [rbp+720], 0
00440de4cmp [rbp+944], 0
00440decje 0x440dfe
00440deemov rax, [rbp+944]
00440df5mov eax, [rax-4]
00440df8mov [rbp+720], eax
00440dfe
00440dfeloc_440dfe:
00440dfelea rcx, [rbp+320]
00440e05mov edx, [rbp+720]
00440e0bcall fn_42fde0
00440e10lea rcx, [rbp+936]
00440e17mov edx, 3
00440e1cmov r8, [rbp+936]
00440e23mov r9, [rbp+320]
00440e2amov rax, [rbp+944]
00440e31mov [rsp+32], rax
00440e36call fn_40cce0
00440e3bmov [rbp+716], 0
00440e45cmp [rbp+952], 0
00440e4dje 0x440e5f
00440e4fmov rax, [rbp+952]
00440e56mov eax, [rax-4]
00440e59mov [rbp+716], eax
00440e5f
00440e5floc_440e5f:
00440e5flea rcx, [rbp+312]
00440e66mov edx, [rbp+716]
00440e6ccall fn_42fde0
00440e71lea rcx, [rbp+936]
00440e78mov edx, 3
00440e7dmov r8, [rbp+936]
00440e84mov r9, [rbp+312]
00440e8bmov rax, [rbp+952]
00440e92mov [rsp+32], rax
00440e97call fn_40cce0
00440e9clea rcx, [rbp+304]
00440ea3mov rdx, [rbp+992]
00440eaacall fn_42fcb0
00440eafmov rax, [rbp+304]
00440eb6mov [rbp+704], rax
00440ebdmov [rbp+700], 0
00440ec7cmp [rbp+704], 0
00440ecfje 0x440ee1
00440ed1mov rax, [rbp+704]
00440ed8mov eax, [rax-4]
00440edbmov [rbp+700], eax
00440ee1
00440ee1loc_440ee1:
00440ee1lea rcx, [rbp+296]
00440ee8mov edx, [rbp+700]
00440eeecall fn_42fde0
00440ef3lea rcx, [rbp+288]
00440efamov rdx, [rbp+992]
00440f01call fn_42fcb0
00440f06lea rcx, [rbp+936]
00440f0dmov edx, 3
00440f12mov r8, [rbp+936]
00440f19mov r9, [rbp+296]
00440f20mov rax, [rbp+288]
00440f27mov [rsp+32], rax
00440f2ccall fn_40cce0
00440f31lea rcx, [rbp+280]
00440f38mov rdx, [rbp+984]
00440f3fcall fn_42fcb0
00440f44mov rax, [rbp+280]
00440f4bmov [rbp+688], rax
00440f52mov [rbp+684], 0
00440f5ccmp [rbp+688], 0
00440f64je 0x440f76
00440f66mov rax, [rbp+688]
00440f6dmov eax, [rax-4]
00440f70mov [rbp+684], eax
00440f76
00440f76loc_440f76:
00440f76lea rcx, [rbp+272]
00440f7dmov edx, [rbp+684]
00440f83call fn_42fde0
00440f88lea rcx, [rbp+264]
00440f8fmov rdx, [rbp+984]
00440f96call fn_42fcb0
00440f9blea rcx, [rbp+936]
00440fa2mov edx, 3
00440fa7mov r8, [rbp+936]
00440faemov r9, [rbp+272]
00440fb5mov rax, [rbp+264]
00440fbcmov [rsp+32], rax
00440fc1call fn_40cce0
00440fc6lea rcx, [rbp+256]
00440fcdmov rdx, [rbp+976]
00440fd4call fn_42fcb0
00440fd9mov rax, [rbp+256]
00440fe0mov [rbp+672], rax
00440fe7mov [rbp+668], 0
00440ff1cmp [rbp+672], 0
00440ff9je 0x44100b
00440ffbmov rax, [rbp+672]
00441002mov eax, [rax-4]
00441005mov [rbp+668], eax
0044100b
0044100bloc_44100b:
0044100blea rcx, [rbp+248]
00441012mov edx, [rbp+668]
00441018call fn_42fde0
0044101dlea rcx, [rbp+240]
00441024mov rdx, [rbp+976]
0044102bcall fn_42fcb0
00441030lea rcx, [rbp+936]
00441037mov edx, 3
0044103cmov r8, [rbp+936]
00441043mov r9, [rbp+248]
0044104amov rax, [rbp+240]
00441051mov [rsp+32], rax
00441056call fn_40cce0
0044105blea rcx, [rbp+232]
00441062mov rdx, [rbp+968]
00441069call fn_42fcb0
0044106emov rax, [rbp+232]
00441075mov [rbp+656], rax
0044107cmov [rbp+652], 0
00441086cmp [rbp+656], 0
0044108eje 0x4410a0
00441090mov rax, [rbp+656]
00441097mov eax, [rax-4]
0044109amov [rbp+652], eax
004410a0
004410a0loc_4410a0:
004410a0lea rcx, [rbp+224]
004410a7mov edx, [rbp+652]
004410adcall fn_42fde0
004410b2lea rcx, [rbp+216]
004410b9mov rdx, [rbp+968]
004410c0call fn_42fcb0
004410c5lea rcx, [rbp+936]
004410ccmov edx, 3
004410d1mov r8, [rbp+936]
004410d8mov r9, [rbp+224]
004410dfmov rax, [rbp+216]
004410e6mov [rsp+32], rax
004410ebcall fn_40cce0
004410f0lea rcx, [rbp+208]
004410f7mov rdx, [rbp+960]
004410fecall fn_42fcb0
00441103mov rax, [rbp+208]
0044110amov [rbp+640], rax
00441111mov [rbp+636], 0
0044111bcmp [rbp+640], 0
00441123je 0x441135
00441125mov rax, [rbp+640]
0044112cmov eax, [rax-4]
0044112fmov [rbp+636], eax
00441135
00441135loc_441135:
00441135lea rcx, [rbp+200]
0044113cmov edx, [rbp+636]
00441142call fn_42fde0
00441147lea rcx, [rbp+192]
0044114emov rdx, [rbp+960]
00441155call fn_42fcb0
0044115alea rcx, [rbp+936]
00441161mov edx, 3
00441166mov r8, [rbp+936]
0044116dmov r9, [rbp+200]
00441174mov rax, [rbp+192]
0044117bmov [rsp+32], rax
00441180call fn_40cce0
00441185lea rcx, [rbp+936]
0044118ccall fn_40c690
00441191mov [rbp+624], rax
00441198mov [rbp+632], 0
004411a2cmp [rbp+936], 0
004411aaje 0x4411bc
004411acmov rax, [rbp+936]
004411b3mov eax, [rax-4]
004411b6mov [rbp+632], eax
004411bc
004411bcloc_4411bc:
004411bclea rcx, [rbp+168]
004411c3mov rdx, [rbp+624]
004411camov r8l, [rbp+632]
004411d1call fn_432b30
004411d6lea rcx, [rbp+184]
004411ddlea rdx, [rbp+168]
004411e4call fn_432a70
004411e9lea rcx, [rbp+936]
004411f0mov rdx, [rbp+184]
004411f7call fn_40c910
004411fclea rcx, [rbp+160]
00441203mov rdx, [rbp+936]
0044120acall fn_43f3e0
0044120flea rcx, [rbp+936]
00441216mov rdx, [rbp+160]
0044121dcall fn_40c520
00441222lea rcx, [rbp+896]
00441229lea rdx, [rip+2100]
00441230call fn_40c520
00441235mov rax, [rip+0x22d84]
0044123cmov rax, [rax+40]
00441240mov [rbp+616], rax
00441247mov rax, [rbp+616]
0044124emov [rbp+608], rax
00441255cmp [rbp+608], 0
0044125dje 0x441271
0044125fmov rax, [rbp+608]
00441266mov rax, [rax-8]
0044126amov [rbp+608], rax
00441271
00441271loc_441271:
00441271lea rcx, [rbp+168]
00441278mov rax, [rip+0x22d41]
0044127fmov rdx, [rax+40]
00441283mov r8l, [rbp+608]
0044128acall fn_432b30
0044128flea rcx, [rbp+152]
00441296lea rdx, [rbp+168]
0044129dcall fn_432a70
004412a2lea rcx, [rbp+896]
004412a9mov rdx, [rbp+152]
004412b0call fn_40c910
004412b5mov rax, [rip+0x22d04]
004412bclea rcx, [rax+40]
004412c0lea rdx, [rbp+888]
004412c7call fn_42fc30
004412ccmov rax, [rbp+888]
004412d3mov [rbp+600], rax
004412dacmp [rbp+600], 0
004412e2je 0x4412f6
004412e4mov rax, [rbp+600]
004412ebmov rax, [rax-8]
004412efmov [rbp+600], rax
004412f6
004412f6loc_4412f6:
004412f6lea rcx, [rbp+168]
004412fdmov rdx, [rbp+888]
00441304mov r8l, [rbp+600]
0044130bcall fn_432b30
00441310lea rcx, [rbp+144]
00441317lea rdx, [rbp+168]
0044131ecall fn_432a70
00441323lea rcx, [rbp+896]
0044132amov rdx, [rbp+144]
00441331call fn_40c910
00441336mov rax, [rip+0x22c83]
0044133dmov rax, [rax+128]
00441344mov [rbp+592], rax
0044134bmov rax, [rbp+592]
00441352mov [rbp+584], rax
00441359cmp [rbp+584], 0
00441361je 0x441375
00441363mov rax, [rbp+584]
0044136amov rax, [rax-8]
0044136emov [rbp+584], rax
00441375
00441375loc_441375:
00441375lea rcx, [rbp+136]
0044137cmov edx, [rbp+584]
00441382call fn_42fde0
00441387lea rcx, [rbp+128]
0044138emov rax, [rip+0x22c2b]
00441395lea rdx, [rax+128]
0044139ccall fn_430d40
004413a1lea rcx, [rbp+896]
004413a8mov edx, 3
004413admov r8, [rbp+896]
004413b4mov r9, [rbp+136]
004413bbmov rax, [rbp+128]
004413c2mov [rsp+32], rax
004413c7call fn_40cce0
004413ccmov [rbp+580], 0
004413d6cmp [rbp+936], 0
004413deje 0x4413f0
004413e0mov rax, [rbp+936]
004413e7mov eax, [rax-4]
004413eamov [rbp+580], eax
004413f0
004413f0loc_4413f0:
004413f0lea rcx, [rbp+120]
004413f4mov edx, [rbp+580]
004413facall fn_42fde0
004413fflea rcx, [rbp+896]
00441406mov edx, 3
0044140bmov r8, [rbp+896]
00441412mov r9, [rbp+120]
00441416mov rax, [rbp+936]
0044141dmov [rsp+32], rax
00441422call fn_40cce0
00441427lea rcx, [rbp+896]
0044142ecall fn_40c690
00441433mov [rbp+568], rax
0044143amov [rbp+576], 0
00441444cmp [rbp+896], 0
0044144cje 0x44145e
0044144emov rax, [rbp+896]
00441455mov eax, [rax-4]
00441458mov [rbp+576], eax
0044145e
0044145eloc_44145e:
0044145elea rcx, [rbp+168]
00441465mov rdx, [rbp+568]
0044146cmov r8l, [rbp+576]
00441473call fn_432b30
00441478lea rcx, [rbp+912]
0044147flea rdx, [rbp+168]
00441486call fn_432a70
0044148bmov [rbp+564], 0
00441495cmp [rbp+912], 0
0044149dje 0x4414af
0044149fmov rax, [rbp+912]
004414a6mov eax, [rax-4]
004414a9mov [rbp+564], eax
004414af
004414afloc_4414af:
004414afmov eax, [rbp+564]
004414b5mov [rbp+908], eax
004414bblea rcx, [rbp+920]
004414c2mov rdx, [rip-0x126a9]
004414c9call fn_410600
004414celea rcx, [rbp+920]
004414d5mov rdx, [rip-0x126bc]
004414dcmov r8l, 1
004414e2movsxd r9, [rbp+908]
004414e9call fn_410430
004414eelea rcx, [rbp+912]
004414f5call fn_40c690
004414famov rcx, rax
004414fdmov rdx, [rbp+920]
00441504movsxd r8, [rbp+908]
0044150bcall fn_405ac0
00441510lea rcx, [rbp+920]
00441517lea rdx, [rbp+908]
0044151emov rax, [rip+0x22a9b]
00441525mov r8, [rax+120]
00441529xor r9, r9
0044152ccall fn_4364f0
00441531lea rcx, [rbp+912]
00441538call fn_40bd40
0044153dlea rcx, [rbp+912]
00441544mov edx, [rbp+908]
0044154axor r8, r8
0044154dcall fn_40cf30
00441552lea rcx, [rbp+912]
00441559call fn_40c690
0044155emov rcx, [rbp+920]
00441565mov rdx, rax
00441568movsxd r8, [rbp+908]
0044156fcall fn_405ac0
00441574mov [rbp+1000], 0
0044157fnop
00441580mov [rbp+560], 0
0044158acmp [rbp+912], 0
00441592je 0x4415a4
00441594mov rax, [rbp+912]
0044159bmov eax, [rax-4]
0044159emov [rbp+560], eax
004415a4
004415a4loc_4415a4:
004415a4lea rcx, [rbp+112]
004415a8mov edx, [rbp+560]
004415aecall fn_42fde0
004415b3lea rcx, [rbp+1000]
004415bamov edx, 3
004415bfmov r8, [rbp+896]
004415c6mov r9, [rbp+912]
004415cdmov rax, [rbp+112]
004415d1mov [rsp+32], rax
004415d6call fn_40cce0
004415dbmov rax, [rip+0x229de]
004415e2mov rax, [rax+120]
004415e6mov [rbp+552], rax
004415edmov rax, [rbp+552]
004415f4mov [rbp+544], rax
004415fbcmp [rbp+544], 0
00441603je 0x441617
00441605mov rax, [rbp+544]
0044160cmov rax, [rax-8]
00441610mov [rbp+544], rax
00441617
00441617loc_441617:
00441617lea rcx, [rbp+168]
0044161emov rax, [rip+0x2299b]
00441625mov rdx, [rax+120]
00441629mov r8l, [rbp+544]
00441630call fn_432b30
00441635lea rcx, [rbp+104]
00441639lea rdx, [rbp+168]
00441640call fn_432a70
00441645lea rcx, [rbp+896]
0044164cmov rdx, [rbp+1000]
00441653mov r8, [rbp+104]
00441657call fn_40ca10
0044165cnop
0044165dlea rcx, [rbp+1000]
00441664call fn_40bd40
00441669lea rcx, [rbp+880]
00441670mov edx, 32
00441675call fn_433160
0044167alea rcx, [rbp+928]
00441681call fn_40bd40
00441686lea rcx, [rbp+928]
0044168dmov edx, 32
00441692xor r8, r8
00441695call fn_40cf30
0044169alea rcx, [rbp+928]
004416a1call fn_40c690
004416a6mov rcx, [rbp+880]
004416admov rdx, rax
004416b0mov r8l, 32
004416b6call fn_405ac0
004416bblea rcx, [rbp+896]
004416c2mov rdx, [rbp+928]
004416c9call fn_40c910
004416celea rcx, [rbp+896]
004416d5call fn_40c690
004416damov [rbp+528], rax
004416e1mov [rbp+540], 0
004416ebcmp [rbp+896], 0
004416f3je 0x441705
004416f5mov rax, [rbp+896]
004416fcmov eax, [rax-4]
004416ffmov [rbp+540], eax
00441705
00441705loc_441705:
00441705lea rcx, [rbp+168]
0044170cmov rdx, [rbp+528]
00441713mov r8l, [rbp+540]
0044171acall fn_432b30
0044171flea rcx, [rbp+96]
00441723lea rdx, [rbp+168]
0044172acall fn_432a70
0044172flea rcx, [rbp+896]
00441736mov rdx, [rbp+96]
0044173acall fn_40c910
0044173flea rcx, [rbp+88]
00441743mov rdx, [rbp+896]
0044174acall fn_42fb50
0044174flea rcx, [rbp+896]
00441756mov rdx, [rbp+88]
0044175acall fn_40c520
0044175flea rcx, [rbp+896]
00441766mov edx, 4
0044176blea r8, [rip+774]
00441772mov r9, [rbp+896]
00441779lea rax, [rip+792]
00441780mov [rsp+32], rax
00441785lea rax, [rip+796]
0044178cmov [rsp+40], rax
00441791call fn_40cce0
00441796mov [rbp+524], 0
004417a0cmp [rbp+896], 0
004417a8je 0x4417ba
004417aamov rax, [rbp+896]
004417b1mov eax, [rax-4]
004417b4mov [rbp+524], eax
004417ba
004417baloc_4417ba:
004417bamov rax, [rip+0x227ff]
004417c1lea rcx, [rax+736]
004417c8mov rdx, [rip-0x129af]
004417cfmov r8l, 1
004417d5movsxd r9, [rbp+524]
004417dccall fn_410430
004417e1lea rcx, [rbp+896]
004417e8call fn_40c690
004417edmov [rbp+512], rax
004417f4mov [rbp+520], 0
004417fecmp [rbp+896], 0
00441806je 0x441818
00441808mov rax, [rbp+896]
0044180fmov eax, [rax-4]
00441812mov [rbp+520], eax
00441818
00441818loc_441818:
00441818mov rcx, [rbp+512]
0044181fmov rax, [rip+0x2279a]
00441826mov rdx, [rax+736]
0044182dmovsxd r8, [rbp+520]
00441834call fn_405ac0
00441839nop
0044183a
0044183aloc_44183a:
0044183alea rcx, [rbp+88]
0044183emov edx, 10
00441843call fn_40be20
00441848lea rcx, [rbp+184]
0044184fmov edx, 35
00441854call fn_40be20
00441859lea rcx, [rbp+464]
00441860call fn_40bcf0
00441865lea rcx, [rbp+472]
0044186ccall fn_40bd40
00441871lea rcx, [rbp+480]
00441878call fn_40bcf0
0044187dlea rcx, [rbp+488]
00441884call fn_40bd40
00441889lea rcx, [rbp+496]
00441890call fn_40bcf0
00441895lea rcx, [rbp+872]
0044189ccall fn_40bd40
004418a1lea rcx, [rbp+880]
004418a8mov rdx, [rip-0x12a8f]
004418afmov r8l, 2
004418b5call fn_40ec40
004418balea rcx, [rbp+896]
004418c1call fn_40bd40
004418c6lea rcx, [rbp+912]
004418cdcall fn_40bd40
004418d2lea rcx, [rbp+920]
004418d9mov rdx, [rip-0x12ac0]
004418e0call fn_410600
004418e5lea rcx, [rbp+928]
004418ecmov edx, 4
004418f1call fn_40be20
004418f6lea rcx, [rbp+960]
004418fdmov edx, 5
00441902call fn_40be70
00441907lea rsp, [rbp+1008]
0044190epop rbp
0044190fret
00440470