File trigona_be6dfedd91e1ebc81d58a61b05b0ef93322425b247636a0f7f5c3eeebbc52edd.exe
Function:
    0044bcaf
    0044bcaf 00 .
    0044bcb0 b8 bc 44 00 00 00 00 00 0e 08 54 6f 62 6a 65 63 ..D.......Tobjec
    0044bcc0 74 73 10 00 00 00 01 00 00 00 58 12 40 00 00 00 ts........X.@...
    0044bcd0 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 58 ...............X
    0044bce0 12 40 00 00 00 00 00 00 00 00 00 00 00 00 00 02 .@..............
    0044bcf0 04 6e 61 6d 65 02 00 d8 10 40 00 00 00 00 00 08 .name....@......
    0044bd00 00 00 00 00 00 00 00 02 04 61 74 74 72 02 00 00 .........attr...
    0044bd10 10 40 00 00 00 00 00 0c 00 00 00 00 00 00 00 02 .@..............
    0044bd20 09 69 73 5f 66 6f 6c 64 65 72 02 00 02 00 00 00 .is_folder......
    0044bd30 38 bd 44 00 00 00 00 00 11 10 3a 54 6f 62 6a 65 8.D.......:Tobje
    0044bd40 63 74 73 5f 6d 61 70 2e 3a 31 10 00 00 00 b0 bc cts_map.:1......
    0044bd50 44 00 00 00 00 00 ff ff ff ff b0 bc 44 00 00 00 D...........D...
    0044bd60 00 00 0a 53 63 61 6e 46 6f 6c 64 65 72 b0 bc 44 ...ScanFolder..D
    0044bd70 00 00 00 00 00 02 00 00 80 bd 44 00 00 00 00 00 ..........D.....
    0044bd80 0e 0c 54 6f 62 6a 65 63 74 73 5f 6d 61 70 10 00 ..Tobjects_map..
    0044bd90 00 00 01 00 00 00 30 bd 44 00 00 00 00 00 08 00 ......0.D.......
    0044bda0 00 00 00 00 00 00 00 02 00 00 00 78 10 40 00 00 ...........x.@..
    0044bdb0 00 00 00 00 00 00 00 00 00 00 00 02 05 63 6f 75 .............cou
    0044bdc0 6e 74 02 00 30 bd 44 00 00 00 00 00 08 00 00 00 nt..0.D.........
    0044bdd0 00 00 00 00 02 07 6f 62 6a 65 63 74 73 02 00 02 ......objects...
    0044bde0 00 00 00 00 00 00 00 00 f0 bd 44 00 00 00 00 00 ..........D.....
    0044bdf0 0e 08 54 6f 62 6a 65 63 74 73 10 00 00 00 01 00 ..Tobjects......
    0044be00 00 00 58 12 40 00 00 00 00 00 00 00 00 00 00 00 ..X.@...........
    0044be10 00 00 00 03 00 00 00 58 12 40 00 00 00 00 00 00 .......X.@......
    0044be20 00 00 00 00 00 00 00 02 04 6e 61 6d 65 02 00 d8 .........name...
    0044be30 10 40 00 00 00 00 00 08 00 00 00 00 00 00 00 02 .@..............
    0044be40 04 61 74 74 72 02 00 00 10 40 00 00 00 00 00 0c .attr....@......
    0044be50 00 00 00 00 00 00 00 02 09 69 73 5f 66 6f 6c 64 .........is_fold
    0044be60 65 72 02 00 02 00 00 00 70 be 44 00 00 00 00 00 er......p.D.....
    0044be70 11 10 3a 54 6f 62 6a 65 63 74 73 5f 6d 61 70 2e ..:Tobjects_map.
    0044be80 3a 31 10 00 00 00 e8 bd 44 00 00 00 00 00 ff ff :1......D.......
    0044be90 ff ff e8 bd 44 00 00 00 00 00 0a 53 63 61 6e 46 ....D......ScanF
    0044bea0 6f 6c 64 65 72 e8 bd 44 00 00 00 00 00 02 00 00 older..D........
    0044beb0 b8 be 44 00 00 00 00 00 0e 0c 54 6f 62 6a 65 63 ..D.......Tobjec
    0044bec0 74 73 5f 6d 61 70 10 00 00 00 01 00 00 00 68 be ts_map........h.
    0044bed0 44 00 00 00 00 00 08 00 00 00 00 00 00 00 00 02 D...............
    0044bee0 00 00 00 78 10 40 00 00 00 00 00 00 00 00 00 00 ...x.@..........
    0044bef0 00 00 00 02 05 63 6f 75 6e 74 02 00 68 be 44 00 .....count..h.D.
    0044bf00 00 00 00 00 08 00 00 00 00 00 00 00 02 07 6f 62 ..............ob
    0044bf10 6a 65 63 74 73 02 00 02 00 00 00 cc cc cc cc cc jects...........
    0044bf20
    0044bf20fn_44bf20:
    0044bf20push rbp
    0044bf21push rsi
    0044bf22push rbx
    0044bf23sub rsp, 192
    0044bf2amov rbp, rsp
    0044bf2dmov [rbp+88], 0
    0044bf35mov [rbp+80], 0
    0044bf3dmov [rbp+96], 0
    0044bf45mov [rbp+136], 0
    0044bf50mov [rbp+120], 0
    0044bf58mov [rbp+112], 0
    0044bf60mov [rbp+104], 0
    0044bf68mov [rbp+128], 0
    0044bf73mov [rbp+184], 0
    0044bf7emov [rbp+176], 0
    0044bf89mov [rbp+168], 0
    0044bf94mov [rbp+160], 0
    0044bf9fmov [rbp+152], 0
    0044bfaanop
    0044bfabmov rcx, [rip-0x17472]
    0044bfb2mov dl, 1
    0044bfb4call TAESData.Create
    0044bfb9mov [rbp+144], rax
    0044bfc0lea rcx, [rbp+160]
    0044bfc7mov rdx, [rip-0x1d1ae]
    0044bfcecall fn_410600
    0044bfd3lea rcx, [rbp+160]
    0044bfdamov rdx, [rip-0x1d1c1]
    0044bfe1mov r8l, 1
    0044bfe7mov r9l, 0x100000
    0044bfedcall fn_410430
    0044bff2lea rcx, [rbp+152]
    0044bff9mov rdx, [rip-0x1d1e0]
    0044c000call fn_410600
    0044c005lea rcx, [rbp+152]
    0044c00cmov rdx, [rip-0x1d1f3]
    0044c013mov r8l, 1
    0044c019mov r9l, 0x100000
    0044c01fcall fn_410430
    0044c024lea rcx, [rbp+184]
    0044c02bcall fn_442e50
    0044c030lea rcx, [rbp+184]
    0044c037lea rdx, [rbp+176]
    0044c03ecall fn_442cb0
    0044c043lea rcx, [rbp+184]
    0044c04alea rdx, [rbp+176]
    0044c051lea r8, [rbp+168]
    0044c058call fn_442930
    0044c05dxor ebx, ebx
    0044c05f
    0044c05floc_44c05f:
    0044c05flea rcx, [rbp+128]
    0044c066mov rax, [rip+0x17f53]
    0044c06dmov rax, [rax+272]
    0044c074movzx rdx, [rax]
    0044c078call fn_40d080
    0044c07dlea rcx, [rbp+136]
    0044c084mov rdx, [rbp+128]
    0044c08bcall fn_4220f0
    0044c090lea rcx, [rbp+120]
    0044c094mov rdx, [rbp+136]
    0044c09bxor r8, r8
    0044c09ecall fn_40c8e0
    0044c0a3mov esi, ebx
    0044c0a6add sil, 65
    0044c0aalea rcx, [rbp+104]
    0044c0aemov edx, esi
    0044c0b1xor r8, r8
    0044c0b4call fn_40c820
    0044c0b9lea rcx, [rbp+112]
    0044c0bdmov rdx, [rbp+104]
    0044c0c1call fn_430700
    0044c0c6mov rcx, [rbp+120]
    0044c0camov rdx, [rbp+112]
    0044c0cecall fn_40cdc0
    0044c0d3test eax, eax
    0044c0d5je 0x44c138
    0044c0d7lea rcx, [rbp+96]
    0044c0dbmov edx, esi
    0044c0decall fn_40d050
    0044c0e3lea rcx, [rbp+96]
    0044c0e7lea rdx, [rip+510]
    0044c0eecall fn_40d1a0
    0044c0f3mov rcx, [rbp+96]
    0044c0f7lea rdx, [rbp+184]
    0044c0felea r8, [rbp+168]
    0044c105lea r9, [rbp+160]
    0044c10clea rax, [rbp+152]
    0044c113mov [rsp+32], rax
    0044c118lea rax, [rbp+144]
    0044c11fmov [rsp+40], rax
    0044c124mov [rsp+48], 0
    0044c129mov [rsp+56], 0
    0044c12emov [rsp+64], 1
    0044c133call fn_449120
    0044c138
    0044c138loc_44c138:
    0044c138add ebx, 1
    0044c13bcmp ebx, 26
    0044c13ejne 0x44c05f
    0044c144nop
    0044c145lea rcx, [rbp+88]
    0044c149mov rax, [rip+0x17e70]
    0044c150mov rax, [rax+272]
    0044c157movzx rdx, [rax]
    0044c15bcall fn_40d730
    0044c160lea rcx, [rbp+88]
    0044c164lea rdx, [rip+405]
    0044c16bcall fn_40d9b0
    0044c170lea rcx, [rbp+80]
    0044c174mov rdx, [rbp+88]
    0044c178call fn_40d850
    0044c17dmov rcx, [rbp+80]
    0044c181lea rdx, [rbp+184]
    0044c188lea r8, [rbp+168]
    0044c18flea r9, [rbp+160]
    0044c196lea rax, [rbp+152]
    0044c19dmov [rsp+32], rax
    0044c1a2lea rax, [rbp+144]
    0044c1a9mov [rsp+40], rax
    0044c1aemov [rsp+48], 0
    0044c1b3mov [rsp+56], 0
    0044c1b8mov [rsp+64], 1
    0044c1bdcall fn_449120
    0044c1c2mov rcx, [rbp+144]
    0044c1c9call TObject.Free
    0044c1celea rcx, [rbp+160]
    0044c1d5mov rdx, [rip-0x1d3bc]
    0044c1dccall fn_410600
    0044c1e1lea rcx, [rbp+152]
    0044c1e8mov rdx, [rip-0x1d3cf]
    0044c1efcall fn_410600
    0044c1f4mov rcx, [rbp+184]
    0044c1fbmov edx, 32
    0044c200xor r8, r8
    0044c203call fn_4069b0
    0044c208mov rax, [rip+0x17db1]
    0044c20fmov [rax+315], 1
    0044c216nop
    0044c217lea rcx, [rbp+80]
    0044c21bcall fn_40bd90
    0044c220lea rcx, [rbp+88]
    0044c224call fn_40bcf0
    0044c229lea rcx, [rbp+96]
    0044c22dcall fn_40bd90
    0044c232lea rcx, [rbp+104]
    0044c236mov edx, 3
    0044c23bcall fn_40be20
    0044c240lea rcx, [rbp+128]
    0044c247mov edx, 2
    0044c24ccall fn_40be70
    0044c251lea rcx, [rbp+152]
    0044c258mov rdx, [rip-0x1d43f]
    0044c25fmov r8l, 5
    0044c265call fn_40ec40
    0044c26alea rsp, [rbp+192]
    0044c271pop rbx
    0044c272pop rsi
    0044c273pop rbp
    0044c274ret
    0044bf20
    0044c275
    0044c275 48 8b c0 48 8d 04 05 00 00 00 00 H..H.......
    0044c280
    0044c280fn_44c280:
    0044c280push rbp
    0044c281push rbx
    0044c282sub rsp, 40
    0044c286mov rbp, rsp
    0044c289mov rbx, rdx
    0044c28clea rcx, [rbx+80]
    0044c290call fn_40bd90
    0044c295lea rcx, [rbx+88]
    0044c299call fn_40bcf0
    0044c29elea rcx, [rbx+96]
    0044c2a2call fn_40bd90
    0044c2a7lea rcx, [rbx+104]
    0044c2abmov edx, 3
    0044c2b0call fn_40be20
    0044c2b5lea rcx, [rbx+128]
    0044c2bcmov edx, 2
    0044c2c1call fn_40be70
    0044c2c6lea rcx, [rbx+152]
    0044c2cdmov rdx, [rip-0x1d4b4]
    0044c2d4mov r8l, 5
    0044c2dacall fn_40ec40
    0044c2dflea rsp, [rbp+40]
    0044c2e3pop rbx
    0044c2e4pop rbp
    0044c2e5ret
    0044c280
    0044c2e6
    0044c2e6 00 00 04 00 00 00 3a 00 5c 00 ......:.\.
    0044c2f0 00 00 00 00 b0 04 02 00 ff ff ff ff 02 00 00 00 ................
    0044c300 3a 00 5c 00 00 00 cc cc cc cc cc cc cc cc cc cc :.\.............
    0044c310
    0044c310fn_44c310:
    0044c310push rbp
    0044c311push rsi
    0044c312push rbx
    0044c313sub rsp, 160
    0044c31amov rbp, rsp
    0044c31dmov [rbp+72], 0
    0044c325mov [rbp+64], 0
    0044c32dmov [rbp+80], 0
    0044c335mov [rbp+120], 0
    0044c33dmov [rbp+104], 0
    0044c345mov [rbp+96], 0
    0044c34dmov [rbp+88], 0
    0044c355mov [rbp+112], 0
    0044c35dmov [rbp+152], 0
    0044c368mov [rbp+144], 0
    0044c373mov [rbp+136], 0
    0044c37enop
    0044c37fmov rcx, [rip-0x17846]
    0044c386mov dl, 1
    0044c388call TAESData.Create
    0044c38dmov [rbp+128], rax
    0044c394lea rcx, [rbp+144]
    0044c39bcall fn_442e50
    0044c3a0lea rcx, [rbp+144]
    0044c3a7lea rdx, [rbp+136]
    0044c3aecall fn_442cb0
    0044c3b3lea rcx, [rbp+144]
    0044c3balea rdx, [rbp+136]
    0044c3c1lea r8, [rbp+152]
    0044c3c8call fn_441e90
    0044c3cdxor ebx, ebx
    0044c3cf
    0044c3cfloc_44c3cf:
    0044c3cflea rcx, [rbp+112]
    0044c3d3mov rax, [rip+0x17be6]
    0044c3damov rax, [rax+272]
    0044c3e1movzx rdx, [rax]
    0044c3e5call fn_40d080
    0044c3ealea rcx, [rbp+120]
    0044c3eemov rdx, [rbp+112]
    0044c3f2call fn_4220f0
    0044c3f7lea rcx, [rbp+104]
    0044c3fbmov rdx, [rbp+120]
    0044c3ffxor r8, r8
    0044c402call fn_40c8e0
    0044c407mov esi, ebx
    0044c40aadd sil, 65
    0044c40elea rcx, [rbp+88]
    0044c412mov edx, esi
    0044c415xor r8, r8
    0044c418call fn_40c820
    0044c41dlea rcx, [rbp+96]
    0044c421mov rdx, [rbp+88]
    0044c425call fn_430700
    0044c42amov rcx, [rbp+104]
    0044c42emov rdx, [rbp+96]
    0044c432call fn_40cdc0
    0044c437test eax, eax
    0044c439je 0x44c484
    0044c43blea rcx, [rbp+80]
    0044c43fmov edx, esi
    0044c442call fn_40d050
    0044c447lea rcx, [rbp+80]
    0044c44blea rdx, [rip+454]
    0044c452call fn_40d1a0
    0044c457mov rcx, [rbp+80]
    0044c45blea rdx, [rbp+144]
    0044c462lea r8, [rbp+152]
    0044c469lea r9, [rbp+128]
    0044c470mov [rsp+32], 0
    0044c475mov [rsp+40], 2
    0044c47amov [rsp+48], 1
    0044c47fcall fn_44afd0
    0044c484
    0044c484loc_44c484:
    0044c484add ebx, 1
    0044c487cmp ebx, 26
    0044c48ajne 0x44c3cf
    0044c490nop
    0044c491lea rcx, [rbp+72]
    0044c495mov rax, [rip+0x17b24]
    0044c49cmov rax, [rax+272]
    0044c4a3movzx rdx, [rax]
    0044c4a7call fn_40d730
    0044c4aclea rcx, [rbp+72]
    0044c4b0lea rdx, [rip+373]
    0044c4b7call fn_40d9b0
    0044c4bclea rcx, [rbp+64]
    0044c4c0mov rdx, [rbp+72]
    0044c4c4call fn_40d850
    0044c4c9mov rcx, [rbp+64]
    0044c4cdlea rdx, [rbp+144]
    0044c4d4lea r8, [rbp+152]
    0044c4dblea r9, [rbp+128]
    0044c4e2mov [rsp+32], 0
    0044c4e7mov [rsp+40], 2
    0044c4ecmov [rsp+48], 1
    0044c4f1call fn_44afd0
    0044c4f6mov rcx, [rbp+128]
    0044c4fdcall TObject.Free
    0044c502mov rcx, [rbp+144]
    0044c509mov edx, 32
    0044c50exor r8, r8
    0044c511call fn_4069b0
    0044c516mov rax, [rip+0x17cd3]
    0044c51dmov rcx, [rax]
    0044c520call TSimpleCriticalSection.Enter
    0044c525mov rax, [rip+0x17cc4]
    0044c52clea rcx, [rax+8]
    0044c530call fn_40bd90
    0044c535mov rax, [rip+0x17cb4]
    0044c53cmov rcx, [rax]
    0044c53fcall TSimpleCriticalSection.Leave
    0044c544mov rax, [rip+0x17a75]
    0044c54bmov [rax+317], 1
    0044c552nop
    0044c553lea rcx, [rbp+64]
    0044c557call fn_40bd90
    0044c55clea rcx, [rbp+72]
    0044c560call fn_40bcf0
    0044c565lea rcx, [rbp+80]
    0044c569call fn_40bd90
    0044c56elea rcx, [rbp+88]
    0044c572mov edx, 3
    0044c577call fn_40be20
    0044c57clea rcx, [rbp+112]
    0044c580mov edx, 2
    0044c585call fn_40be70
    0044c58alea rcx, [rbp+136]
    0044c591mov rdx, [rip-0x1d778]
    0044c598mov r8l, 3
    0044c59ecall fn_40ec40
    0044c5a3lea rsp, [rbp+160]
    0044c5aapop rbx
    0044c5abpop rsi
    0044c5acpop rbp
    0044c5adret
    0044c310
    0044c5ae
    0044c5ae 48 90 H.
    0044c5b0
    0044c5b0fn_44c5b0:
    0044c5b0push rbp
    0044c5b1push rbx
    0044c5b2sub rsp, 40
    0044c5b6mov rbp, rsp
    0044c5b9mov rbx, rdx
    0044c5bclea rcx, [rbx+64]
    0044c5c0call fn_40bd90
    0044c5c5lea rcx, [rbx+72]
    0044c5c9call fn_40bcf0
    0044c5celea rcx, [rbx+80]
    0044c5d2call fn_40bd90
    0044c5d7lea rcx, [rbx+88]
    0044c5dbmov edx, 3
    0044c5e0call fn_40be20
    0044c5e5lea rcx, [rbx+112]
    0044c5e9mov edx, 2
    0044c5eecall fn_40be70
    0044c5f3lea rcx, [rbx+136]
    0044c5famov rdx, [rip-0x1d7e1]
    0044c601mov r8l, 3
    0044c607call fn_40ec40
    0044c60clea rsp, [rbp+40]
    0044c610pop rbx
    0044c611pop rbp
    0044c612ret
    0044c5b0
    0044c613
    0044c613 00 04 00 00 00 3a 00 5c 00 00 00 00 00 .....:.\.....
    0044c620 b0 04 02 00 ff ff ff ff 02 00 00 00 3a 00 5c 00 ............:.\.
    0044c630 00 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................
    0044c640
    0044c640Unit53.finalization:
    0044c640add [rip+0x24131], 1
    0044c647cmp [rip+0x2412a], 0
    0044c64eret
    0044c640
    0044c64f
    0044c64f // align 0x10
    0044c650
    0044c650Unit53.initialization:
    0044c650sub [rip+0x24121], 1
    0044c657cmp [rip+0x2411a], -1
    0044c65eret
    0044c650
    0044c65f
    0044c65f // align 0x10
    0044c660
    0044c660WSAIoctl:
    0044c660jmp [rip+0x252d2]
    0044c660
    0044c666
    0044c666 00 00 70 c6 44 00 00 00 00 00 ..p.D.....
    0044c670 0e 10 54 6e 65 74 5f 73 63 61 6e 5f 74 68 72 65 ..Tnet_scan_thre
    0044c680 61 64 20 00 00 00 02 00 00 00 58 12 40 00 00 00 ad .......X.@...
    0044c690 00 00 08 00 00 00 00 00 00 00 a8 ee 42 00 00 00 ............B...
    0044c6a0 00 00 10 00 00 00 00 00 00 00 00 06 00 00 00 78 ...............x
    0044c6b0 10 40 00 00 00 00 00 00 00 00 00 00 00 00 00 02 .@..............
    0044c6c0 02 69 64 02 00 f0 ed 42 00 00 00 00 00 04 00 00 .id....B........
    0044c6d0 00 00 00 00 00 02 02 69 70 02 00 58 12 40 00 00 .......ip..X.@..
    0044c6e0 00 00 00 08 00 00 00 00 00 00 00 02 04 63 6f 6d .............com
    0044c6f0 70 02 00 a8 ee 42 00 00 00 00 00 10 00 00 00 00 p....B..........
    0044c700 00 00 00 02 05 66 6c 64 72 73 02 00 00 10 40 00 .....fldrs....@.
    0044c710 00 00 00 00 18 00 00 00 00 00 00 00 02 06 72 75 ..............ru
    0044c720 6e 6e 65 64 02 00 00 10 40 00 00 00 00 00 19 00 nned....@.......
    0044c730 00 00 00 00 00 00 02 08 66 69 6e 69 73 68 65 64 ........finished
    0044c740 02 00 02 00 00 00 00 00 50 c7 44 00 00 00 00 00 ........P.D.....
    0044c750 11 02 3a 31 20 00 00 00 68 c6 44 00 00 00 00 00 ..:1 ...h.D.....
    0044c760 ff ff ff ff 68 c6 44 00 00 00 00 00 07 4e 65 74 ....h.D......Net
    0044c770 53 63 61 6e 68 c6 44 00 00 00 00 00 02 00 cc cc Scanh.D.........
    0044c780
    0044c780NetShareEnum:
    0044c780jmp [rip+0x25282]
    0044c780
    0044c786
    0044c786 // align 0x10
    0044c790
    0044c790NetApiBufferFree:
    0044c790jmp [rip+0x2526a]
    0044c790
    0044c796
    0044c796 // align 0x10
    0044c7a0
    0044c7a0GetIpNetTable:
    0044c7a0jmp [rip+0x25222]
    0044c7a0
    0044c7a6
    0044c7a6 // align 0x10
    0044c7b0
    0044c7b0fn_44c7b0:
    0044c7b0push rbx
    0044c7b1sub rsp, 32
    0044c7b5mov ebx, edx
    0044c7b7mov rax, [rip+0x23fc2]
    0044c7bemovsxd rcx, ecx
    0044c7c1add rcx, rcx
    0044c7c4add rcx, rcx
    0044c7c7mov [rax+8*rcx+24], 1
    0044c7cc
    0044c7ccloc_44c7cc:
    0044c7ccxor ecx, ecx
    0044c7cemov rax, [rip+0x23fab]
    0044c7d5test rax, rax
    0044c7d8je 0x44c7de
    0044c7damov rax, [rax-8]
    0044c7de
    0044c7deloc_44c7de:
    0044c7dexor edx, edx
    0044c7e0mov r8l, eax
    0044c7e3sub r8l, 1
    0044c7e7mov eax, edx
    0044c7e9cmp eax, r8l
    0044c7ecjg 0x44c834
    0044c7eesub r8l, edx
    0044c7f1add r8l, 1
    0044c7f5
    0044c7f5loc_44c7f5:
    0044c7f5movsxd rdx, eax
    0044c7f8mov r9, [rip+0x23f81]
    0044c7ffmov r10, rdx
    0044c802add r10, r10
    0044c805add r10, r10
    0044c808cmp [r9+8*r10+24], 0
    0044c80eje 0x44c828
    0044c810mov r9, [rip+0x23f69]
    0044c817add rdx, rdx
    0044c81aadd rdx, rdx
    0044c81dcmp [r9+8*rdx+25], 0
    0044c823jne 0x44c828
    0044c825add ecx, 1
    0044c828
    0044c828loc_44c828:
    0044c828add eax, 1
    0044c82bsub r8l, 1
    0044c82ftest r8l, r8l
    0044c832jne 0x44c7f5
    0044c834
    0044c834loc_44c834:
    0044c834nop
    0044c835cmp ecx, ebx
    0044c837jge 0x44c845
    0044c839mov ecx, 1
    0044c83ecall Sleep
    0044c843jmp 0x44c854
    0044c845
    0044c845loc_44c845:
    0044c845mov ecx, 2000
    0044c84acall Sleep
    0044c84fjmp 0x44c7cc
    0044c854
    0044c854loc_44c854:
    0044c854add rsp, 32
    0044c858pop rbx
    0044c859ret
    0044c7b0
    0044c85a
    0044c85a // align 0x10
    0044c860
    0044c860fn_44c860:
    0044c860xor eax, eax
    0044c862mov rcx, [rip+0x23f17]
    0044c869test rcx, rcx
    0044c86cje 0x44c872
    0044c86emov rcx, [rcx-8]
    0044c872
    0044c872loc_44c872:
    0044c872xor edx, edx
    0044c874mov r8l, ecx
    0044c877sub r8l, 1
    0044c87bmov ecx, edx
    0044c87dcmp ecx, r8l
    0044c880jg 0x44c8ad
    0044c882sub r8l, edx
    0044c885add r8l, 1
    0044c889
    0044c889loc_44c889:
    0044c889mov rdx, [rip+0x23ef0]
    0044c890movsxd r9, ecx
    0044c893add r9, r9
    0044c896add r9, r9
    0044c899cmp [rdx+8*r9+25], 0
    0044c89fje 0x44c8b0
    0044c8a1add ecx, 1
    0044c8a4sub r8l, 1
    0044c8a8test r8l, r8l
    0044c8abjne 0x44c889
    0044c8ad
    0044c8adloc_44c8ad:
    0044c8adnop
    0044c8aemov al, 1
    0044c8b0
    0044c8b0loc_44c8b0:
    0044c8b0ret
    0044c860
    0044c8b1
    0044c8b1 // align 0x10
    0044c8c0
    0044c8c0fn_44c8c0:
    0044c8c0push rbp
    0044c8c1sub rsp, 48
    0044c8c5mov rbp, rsp
    0044c8c8mov [rbp+32], rcx
    0044c8ccmov [rbp+40], 0
    0044c8d4nop
    0044c8d5lea rcx, [rbp+40]
    0044c8d9call fn_42f930
    0044c8demov rcx, [rbp+32]
    0044c8e2lea rdx, [rip+67]
    0044c8e9mov r8, [rbp+40]
    0044c8edcall fn_40d230
    0044c8f2nop
    0044c8f3lea rcx, [rbp+40]
    0044c8f7call fn_40bd90
    0044c8fclea rsp, [rbp+48]
    0044c900pop rbp
    0044c901ret
    0044c8c0
    0044c902
    0044c902 64 48 8d 44 20 00 48 8d 04 05 00 00 00 00 dH.D .H.......
    0044c910
    0044c910fn_44c910:
    0044c910push rbp
    0044c911sub rsp, 32
    0044c915mov rbp, rsp
    0044c918lea rcx, [rdx+40]
    0044c91ccall fn_40bd90
    0044c921lea rsp, [rbp+32]
    0044c925pop rbp
    0044c926ret
    0044c910
    0044c927
    0044c927 00 04 00 00 00 5c 00 5c 00 .....\.\.
    0044c930 00 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................
    0044c940
    0044c940fn_44c940:
    0044c940push rbp
    0044c941push r13
    0044c943push rdi
    0044c944push rsi
    0044c945push rbx
    0044c946sub rsp, 1744
    0044c94dmov rbp, rsp
    0044c950mov [rbp+88], rbp
    0044c954mov [rbp+1792], rcx
    0044c95bmov [rbp+1800], rdx
    0044c962mov rcx, [rbp+1792]
    0044c969mov rdx, [rip-0x1db08]
    0044c970call fn_410600
    0044c975mov rcx, [rbp+1800]
    0044c97cmov rdx, [rip-0x1db1b]
    0044c983call fn_410600
    0044c988mov ecx, 2
    0044c98dmov edx, 1
    0044c992xor r8, r8
    0044c995call socket
    0044c99amov [rbp+1736], rax
    0044c9a1cmp [rbp+1736], -1
    0044c9a9je 0x44cae0
    0044c9afnop
    0044c9b0mov rcx, [rbp+1736]
    0044c9b7mov edx, 0x4004747f
    0044c9bcxor r8, r8
    0044c9bfxor r9, r9
    0044c9c2lea rax, [rbp+116]
    0044c9c6mov [rsp+32], rax
    0044c9cbmov [rsp+40], 1024
    0044c9d3lea rax, [rbp+1728]
    0044c9damov [rsp+48], rax
    0044c9dfmov [rsp+56], 0
    0044c9e8mov [rsp+64], 0
    0044c9f1call WSAIoctl
    0044c9f6cmp eax, -1
    0044c9f9je 0x44cad4
    0044c9ffmov ecx, 76
    0044ca04mov eax, [rbp+1728]
    0044ca0acdq
    0044ca0bidiv ecx
    0044ca0dmov [rbp+1732], eax
    0044ca13xor eax, eax
    0044ca15mov ecx, [rbp+1732]
    0044ca1bsub ecx, 1
    0044ca1emov [rbp+84], ecx
    0044ca21mov [rbp+112], eax
    0044ca24mov ecx, [rbp+84]
    0044ca27cmp [rbp+112], ecx
    0044ca2ajg 0x44cac9
    0044ca30mov ecx, [rbp+84]
    0044ca33sub ecx, eax
    0044ca35add ecx, 1
    0044ca38mov [rbp+84], ecx
    0044ca3blea rax, [rbp+120]
    0044ca3fmov [rbp+96], rax
    0044ca43
    0044ca43loc_44ca43:
    0044ca43mov rsi, [rbp+96]
    0044ca47lea rdi, [rbp+1712]
    0044ca4emovsq [rdi], [rsi]
    0044ca50movsq [rdi], [rsi]
    0044ca52cmp [rbp+1716], 0x100007f
    0044ca5cje 0x44cab0
    0044ca5emovzx rbx, [rbp+1716]
    0044ca66movzx rsi, [rbp+1717]
    0044ca6emovzx rdi, [rbp+1718]
    0044ca76movzx r13, [rbp+1719]
    0044ca7emov rcx, [rbp+1792]
    0044ca85mov edx, ebx
    0044ca87mov r8l, esi
    0044ca8amov r9l, edi
    0044ca8dmov [rsp+32], r13b
    0044ca92call fn_42f390
    0044ca97mov rcx, [rbp+1800]
    0044ca9emov edx, ebx
    0044caa0mov r8l, esi
    0044caa3mov r9l, edi
    0044caa6mov [rsp+32], r13b
    0044caabcall fn_42f390
    0044cab0
    0044cab0loc_44cab0:
    0044cab0add [rbp+96], 76
    0044cab5mov eax, [rbp+84]
    0044cab8sub eax, 1
    0044cabbmov [rbp+84], eax
    0044cabemov eax, [rbp+84]
    0044cac1test eax, eax
    0044cac3jne 0x44ca43
    0044cac9
    0044cac9loc_44cac9:
    0044cac9nop
    0044cacajmp 0x44cad4
    0044cacc
    0044cacc 90 90 e8 4d ...M
    0044cad0 e6 fb ff 90 ....
    0044cad4
    0044cad4loc_44cad4:
    0044cad4mov rcx, [rbp+1736]
    0044cadbcall closesocket
    0044cae0
    0044cae0loc_44cae0:
    0044cae0lea rsp, [rbp+1744]
    0044cae7pop rbx
    0044cae8pop rsi
    0044cae9pop rdi
    0044caeapop r13
    0044caecpop rbp
    0044caedret
    0044c940
    0044caee
    0044caee 48 90 H.
    0044caf0
    0044caf0fn_44caf0:
    0044caf0sub rsp, 40
    0044caf4call fn_40b050
    0044caf9add rsp, 40
    0044cafdret
    0044caf0
    0044cafe
    0044cafe // align 0x10
    0044cb00
    0044cb00fn_44cb00:
    0044cb00push rbp
    0044cb01push rbx
    0044cb02sub rsp, 232
    0044cb09mov rbp, rsp
    0044cb0cmov [rbp+32], rdx
    0044cb10mov [rbp+40], r8
    0044cb14mov [rbp+48], r9
    0044cb18mov [rbp+64], 0
    0044cb20mov [rbp+72], 0
    0044cb28mov [rbp+80], 0
    0044cb30mov [rbp+88], 0
    0044cb38mov [rbp+96], 0
    0044cb40mov [rbp+104], 0
    0044cb48mov [rbp+112], 0
    0044cb50mov [rbp+120], 0
    0044cb58mov [rbp+128], 0
    0044cb63mov [rbp+136], 0
    0044cb6emov [rbp+144], 0
    0044cb79mov [rbp+152], 0
    0044cb84mov [rbp+160], 0
    0044cb8fmov [rbp+168], 0
    0044cb9amov [rbp+176], 0
    0044cba5mov [rbp+184], 0
    0044cbb0mov [rbp+216], 0
    0044cbbbmov [rbp+208], 0
    0044cbc6mov [rbp+200], 0
    0044cbd1mov [rbp+192], 0
    0044cbdcmov [rbp+256], rcx
    0044cbe3lea rcx, [rbp+256]
    0044cbeacall fn_40bf00
    0044cbefnop
    0044cbf0xor eax, eax
    0044cbf2mov [rbp+63], al
    0044cbf5mov rbx, [rbp+256]
    0044cbfclea rcx, [rip+1169]
    0044cc03mov rdx, rbx
    0044cc06mov r8l, 1
    0044cc0ccall fn_40de90
    0044cc11lea rcx, [rbp+216]
    0044cc18mov rdx, [rbp+256]
    0044cc1fmov r8l, 1
    0044cc25mov r9l, eax
    0044cc28sub r9l, 1
    0044cc2ccall fn_40d650
    0044cc31lea rcx, [rip+1116]
    0044cc38mov rdx, rbx
    0044cc3bmov r8l, 1
    0044cc41call fn_40de90
    0044cc46mov ecx, eax
    0044cc48add ecx, 1
    0044cc4bxor eax, eax
    0044cc4dtest rbx, rbx
    0044cc50je 0x44cc58
    0044cc52mov eax, [rbx-4]
    0044cc55shr eax, 1
    0044cc58
    0044cc58loc_44cc58:
    0044cc58lea rdx, [rbp+256]
    0044cc5fmov r8, [rbp+256]
    0044cc66mov r9l, ecx
    0044cc69mov rcx, rdx
    0044cc6cmov rdx, r8
    0044cc6fmov r8l, r9l
    0044cc72mov r9l, eax
    0044cc75call fn_40d650
    0044cc7amov rbx, [rbp+256]
    0044cc81lea rcx, [rip+1036]
    0044cc88mov rdx, rbx
    0044cc8bmov r8l, 1
    0044cc91call fn_40de90
    0044cc96lea rcx, [rbp+208]
    0044cc9dmov rdx, [rbp+256]
    0044cca4mov r8l, 1
    0044ccaamov r9l, eax
    0044ccadsub r9l, 1
    0044ccb1call fn_40d650
    0044ccb6lea rcx, [rip+983]
    0044ccbdmov rdx, rbx
    0044ccc0mov r8l, 1
    0044ccc6call fn_40de90
    0044cccbmov ecx, eax
    0044cccdadd ecx, 1
    0044ccd0xor eax, eax
    0044ccd2test rbx, rbx
    0044ccd5je 0x44ccdd
    0044ccd7mov eax, [rbx-4]
    0044ccdashr eax, 1
    0044ccdd
    0044ccddloc_44ccdd:
    0044ccddlea rdx, [rbp+256]
    0044cce4mov r8, [rbp+256]
    0044ccebmov r9l, ecx
    0044cceemov rcx, rdx
    0044ccf1mov rdx, r8
    0044ccf4mov r8l, r9l
    0044ccf7mov r9l, eax
    0044ccfacall fn_40d650
    0044ccffmov rbx, [rbp+256]
    0044cd06lea rcx, [rip+903]
    0044cd0dmov rdx, rbx
    0044cd10mov r8l, 1
    0044cd16call fn_40de90
    0044cd1blea rcx, [rbp+200]
    0044cd22mov rdx, [rbp+256]
    0044cd29mov r8l, 1
    0044cd2fmov r9l, eax
    0044cd32sub r9l, 1
    0044cd36call fn_40d650
    0044cd3blea rcx, [rip+850]
    0044cd42mov rdx, rbx
    0044cd45mov r8l, 1
    0044cd4bcall fn_40de90
    0044cd50mov ecx, eax
    0044cd52add ecx, 1
    0044cd55xor eax, eax
    0044cd57test rbx, rbx
    0044cd5aje 0x44cd62
    0044cd5cmov eax, [rbx-4]
    0044cd5fshr eax, 1
    0044cd62
    0044cd62loc_44cd62:
    0044cd62lea rdx, [rbp+256]
    0044cd69mov r8, [rbp+256]
    0044cd70mov r9l, ecx
    0044cd73mov rcx, rdx
    0044cd76mov rdx, r8
    0044cd79mov r8l, r9l
    0044cd7cmov r9l, eax
    0044cd7fcall fn_40d650
    0044cd84lea rcx, [rbp+192]
    0044cd8bmov rdx, [rbp+256]
    0044cd92call fn_40c490
    0044cd97lea rcx, [rbp+184]
    0044cd9emov rdx, [rbp+216]
    0044cda5xor r8, r8
    0044cda8call fn_40c8e0
    0044cdadmov rcx, [rbp+184]
    0044cdb4call fn_4307b0
    0044cdb9test al, al
    0044cdbbje 0x44cff4
    0044cdc1lea rcx, [rbp+176]
    0044cdc8mov rdx, [rbp+208]
    0044cdcfxor r8, r8
    0044cdd2call fn_40c8e0
    0044cdd7mov rcx, [rbp+176]
    0044cddecall fn_4307b0
    0044cde3test al, al
    0044cde5je 0x44cff4
    0044cdeblea rcx, [rbp+168]
    0044cdf2mov rdx, [rbp+200]
    0044cdf9xor r8, r8
    0044cdfccall fn_40c8e0
    0044ce01mov rcx, [rbp+168]
    0044ce08call fn_4307b0
    0044ce0dtest al, al
    0044ce0fje 0x44cff4
    0044ce15lea rcx, [rbp+160]
    0044ce1cmov rdx, [rbp+192]
    0044ce23xor r8, r8
    0044ce26call fn_40c8e0
    0044ce2bmov rcx, [rbp+160]
    0044ce32call fn_4307b0
    0044ce37test al, al
    0044ce39je 0x44cff4
    0044ce3flea rcx, [rbp+152]
    0044ce46mov rdx, [rbp+216]
    0044ce4dcall fn_40d820
    0044ce52mov rcx, [rbp+152]
    0044ce59call fn_4228a0
    0044ce5ecmp eax, 255
    0044ce64jg 0x44cff4
    0044ce6alea rcx, [rbp+144]
    0044ce71mov rdx, [rbp+208]
    0044ce78call fn_40d820
    0044ce7dmov rcx, [rbp+144]
    0044ce84call fn_4228a0
    0044ce89cmp eax, 255
    0044ce8fjg 0x44cff4
    0044ce95lea rcx, [rbp+136]
    0044ce9cmov rdx, [rbp+200]
    0044cea3call fn_40d820
    0044cea8mov rcx, [rbp+136]
    0044ceafcall fn_4228a0
    0044ceb4cmp eax, 255
    0044cebajg 0x44cff4
    0044cec0lea rcx, [rbp+128]
    0044cec7mov rdx, [rbp+192]
    0044cececall fn_40d820
    0044ced3mov rcx, [rbp+128]
    0044cedacall fn_4228a0
    0044cedfcmp eax, 255
    0044cee5jg 0x44cff4
    0044ceeblea rcx, [rbp+120]
    0044ceefmov rdx, [rbp+216]
    0044cef6call fn_40d820
    0044cefbmov rcx, [rbp+120]
    0044ceffcall fn_4228a0
    0044cf04test eax, eax
    0044cf06jl 0x44cff4
    0044cf0clea rcx, [rbp+112]
    0044cf10mov rdx, [rbp+208]
    0044cf17call fn_40d820
    0044cf1cmov rcx, [rbp+112]
    0044cf20call fn_4228a0
    0044cf25test eax, eax
    0044cf27jl 0x44cff4
    0044cf2dlea rcx, [rbp+104]
    0044cf31mov rdx, [rbp+200]
    0044cf38call fn_40d820
    0044cf3dmov rcx, [rbp+104]
    0044cf41call fn_4228a0
    0044cf46test eax, eax
    0044cf48jl 0x44cff4
    0044cf4elea rcx, [rbp+96]
    0044cf52mov rdx, [rbp+192]
    0044cf59call fn_40d820
    0044cf5emov rcx, [rbp+96]
    0044cf62call fn_4228a0
    0044cf67test eax, eax
    0044cf69jl 0x44cff4
    0044cf6flea rcx, [rbp+88]
    0044cf73mov rdx, [rbp+216]
    0044cf7acall fn_40d820
    0044cf7fmov rcx, [rbp+88]
    0044cf83call fn_4228a0
    0044cf88mov rcx, [rbp+32]
    0044cf8cmov [rcx], al
    0044cf8elea rcx, [rbp+80]
    0044cf92mov rdx, [rbp+208]
    0044cf99call fn_40d820
    0044cf9emov rcx, [rbp+80]
    0044cfa2call fn_4228a0
    0044cfa7mov rcx, [rbp+40]
    0044cfabmov [rcx], al
    0044cfadlea rcx, [rbp+72]
    0044cfb1mov rdx, [rbp+200]
    0044cfb8call fn_40d820
    0044cfbdmov rcx, [rbp+72]
    0044cfc1call fn_4228a0
    0044cfc6mov rcx, [rbp+48]
    0044cfcamov [rcx], al
    0044cfcclea rcx, [rbp+64]
    0044cfd0mov rdx, [rbp+192]
    0044cfd7call fn_40d820
    0044cfdcmov rcx, [rbp+64]
    0044cfe0call fn_4228a0
    0044cfe5mov rcx, [rbp+288]
    0044cfecmov [rcx], al
    0044cfeemov al, 1
    0044cff0mov [rbp+63], al
    0044cff3nop
    0044cff4
    0044cff4loc_44cff4:
    0044cff4lea rcx, [rbp+64]
    0044cff8mov edx, 12
    0044cffdcall fn_40bdd0
    0044d002lea rcx, [rbp+160]
    0044d009mov edx, 4
    0044d00ecall fn_40be20
    0044d013lea rcx, [rbp+192]
    0044d01amov edx, 4
    0044d01fcall fn_40be70
    0044d024lea rcx, [rbp+256]
    0044d02bcall fn_40bd90
    0044d030movzx rax, [rbp+63]
    0044d035lea rsp, [rbp+232]
    0044d03cpop rbx
    0044d03dpop rbp
    0044d03eret
    0044cb00
    0044d03f
    0044d03f // align 0x10
    0044d040
    0044d040fn_44d040:
    0044d040push rbp
    0044d041push rbx
    0044d042sub rsp, 40
    0044d046mov rbp, rsp
    0044d049mov rbx, rdx
    0044d04clea rcx, [rbx+64]
    0044d050mov edx, 12
    0044d055call fn_40bdd0
    0044d05alea rcx, [rbx+160]
    0044d061mov edx, 4
    0044d066call fn_40be20
    0044d06blea rcx, [rbx+192]
    0044d072mov edx, 4
    0044d077call fn_40be70
    0044d07clea rcx, [rbx+256]
    0044d083call fn_40bd90
    0044d088lea rsp, [rbp+40]
    0044d08cpop rbx
    0044d08dpop rbp
    0044d08eret
    0044d040
    0044d08f
    0044d08f 00 .
    0044d090 02 00 00 00 2e 00 00 00 cc cc cc cc cc cc cc cc ................
    0044d0a0
    0044d0a0fn_44d0a0:
    0044d0a0push rbp
    0044d0a1push rsi
    0044d0a2push rbx
    0044d0a3sub rsp, 80
    0044d0a7mov rbp, rsp
    0044d0aamov [rbp+48], rcx
    0044d0aemov [rbp+56], 0
    0044d0b6nop
    0044d0b7xor eax, eax
    0044d0b9mov rcx, [rip+0x16f00]
    0044d0c0mov rcx, [rcx+776]
    0044d0c7mov esi, [rcx+16]
    0044d0casub esi, 1
    0044d0cdmov ebx, eax
    0044d0cfcmp ebx, esi
    0044d0d1jg 0x44d147
    0044d0d3sub esi, eax
    0044d0d5add esi, 1
    0044d0d8
    0044d0d8loc_44d0d8:
    0044d0d8lea rcx, [rbp+56]
    0044d0dcmov rax, [rip+0x16edd]
    0044d0e3mov rax, [rax+776]
    0044d0eamov rax, [rax+8]
    0044d0eemovsxd rdx, ebx
    0044d0f1mov rdx, [rax+8*rdx]
    0044d0f5call fn_40d850
    0044d0famov rcx, [rbp+56]
    0044d0felea rdx, [rbp+79]
    0044d102lea r8, [rbp+78]
    0044d106lea r9, [rbp+77]
    0044d10alea rax, [rbp+76]
    0044d10emov [rsp+32], rax
    0044d113call fn_44cb00
    0044d118test al, al
    0044d11aje 0x44d13d
    0044d11cmov rcx, [rbp+48]
    0044d120movzx rdx, [rbp+79]
    0044d125movzx r8, [rbp+78]
    0044d12amovzx r9, [rbp+77]
    0044d12fmovzx rax, [rbp+76]
    0044d134mov [rsp+32], al
    0044d138call fn_42f390
    0044d13d
    0044d13dloc_44d13d:
    0044d13dadd ebx, 1
    0044d140sub esi, 1
    0044d143test esi, esi
    0044d145jne 0x44d0d8
    0044d147
    0044d147loc_44d147:
    0044d147nop
    0044d148nop
    0044d149lea rcx, [rbp+56]
    0044d14dcall fn_40bd90
    0044d152lea rsp, [rbp+80]
    0044d156pop rbx
    0044d157pop rsi
    0044d158pop rbp
    0044d159ret
    0044d0a0
    0044d15a
    0044d15a 64 48 8d 44 20 00 dH.D .
    0044d160
    0044d160fn_44d160:
    0044d160push rbp
    0044d161sub rsp, 32
    0044d165mov rbp, rsp
    0044d168lea rcx, [rdx+56]
    0044d16ccall fn_40bd90
    0044d171lea rsp, [rbp+32]
    0044d175pop rbp
    0044d176ret
    0044d160
    0044d177
    0044d177 00 80 d1 44 00 00 00 00 00 ...D.....
    0044d180 11 02 3a 31 01 00 00 00 00 00 00 00 00 00 00 00 ..:1............
    0044d190 11 00 00 00 98 10 40 00 00 00 00 00 07 4e 65 74 ......@......Net
    0044d1a0 53 63 61 6e 98 10 40 00 00 00 00 00 02 00 cc cc Scan..@.........
    0044d1b0
    0044d1b0fn_44d1b0:
    0044d1b0push rbp
    0044d1b1push rsi
    0044d1b2push rbx
    0044d1b3sub rsp, 80
    0044d1b7mov rbp, rsp
    0044d1bamov [rbp+56], rcx
    0044d1bemov [rbp+72], 0
    0044d1c6nop
    0044d1c7lea rcx, [rbp+72]
    0044d1cbmov rdx, [rip-90]
    0044d1d2call fn_410600
    0044d1d7lea rcx, [rbp+72]
    0044d1dbmov rdx, [rip-106]
    0044d1e2mov r8l, 1
    0044d1e8mov r9l, 1
    0044d1eecall fn_410430
    0044d1f3mov [rbp+68], 0
    0044d1famov rcx, [rbp+72]
    0044d1felea rdx, [rbp+68]
    0044d202xor r8, r8
    0044d205call GetIpNetTable
    0044d20alea rcx, [rbp+72]
    0044d20emov rdx, [rip-157]
    0044d215call fn_410600
    0044d21alea rcx, [rbp+72]
    0044d21emov rdx, [rip-173]
    0044d225mov r8l, 1
    0044d22bmovsxd r9, [rbp+68]
    0044d22fcall fn_410430
    0044d234mov rcx, [rbp+72]
    0044d238lea rdx, [rbp+68]
    0044d23cxor r8, r8
    0044d23fcall GetIpNetTable
    0044d244test eax, eax
    0044d246jne 0x44d305
    0044d24cmov rax, [rbp+72]
    0044d250movzx rax, [rax+3]
    0044d255shl eax, 8
    0044d258mov rcx, [rbp+72]
    0044d25cmovzx rcx, [rcx+2]
    0044d261add eax, ecx
    0044d263shl eax, 8
    0044d266mov rcx, [rbp+72]
    0044d26amovzx rcx, [rcx+1]
    0044d26fadd eax, ecx
    0044d271shl eax, 8
    0044d274mov rcx, [rbp+72]
    0044d278movzx rcx, [rcx]
    0044d27cadd eax, ecx
    0044d27emov ebx, 4
    0044d283mov ecx, 1
    0044d288mov esi, eax
    0044d28amov eax, ecx
    0044d28ccmp eax, esi
    0044d28ejg 0x44d2f3
    0044d290sub esi, ecx
    0044d292add esi, 1
    0044d295
    0044d295loc_44d295:
    0044d295add ebx, 16
    0044d298mov rcx, [rbp+56]
    0044d29cmov rax, [rbp+72]
    0044d2a0mov edx, ebx
    0044d2a2movzx rdx, [rax+rdx]
    0044d2a7mov rax, [rbp+72]
    0044d2abmov r8l, ebx
    0044d2aeadd r8l, 1
    0044d2b2mov r8l, r8l
    0044d2b5movzx r8, [rax+r8]
    0044d2bamov rax, [rbp+72]
    0044d2bemov r9l, ebx
    0044d2c1add r9l, 2
    0044d2c5mov r9l, r9l
    0044d2c8movzx r9, [rax+r9]
    0044d2cdmov rax, [rbp+72]
    0044d2d1mov r10l, ebx
    0044d2d4add r10l, 3
    0044d2d8mov r10l, r10l
    0044d2dbmovzx rax, [rax+r10]
    0044d2e0mov [rsp+32], al
    0044d2e4call fn_42f390
    0044d2e9add ebx, 8
    0044d2ecsub esi, 1
    0044d2eftest esi, esi
    0044d2f1jne 0x44d295
    0044d2f3
    0044d2f3loc_44d2f3:
    0044d2f3nop
    0044d2f4lea rcx, [rbp+72]
    0044d2f8mov rdx, [rip-391]
    0044d2ffcall fn_410600
    0044d304nop
    0044d305
    0044d305loc_44d305:
    0044d305lea rcx, [rbp+72]
    0044d309mov rdx, [rip-408]
    0044d310call fn_410600
    0044d315lea rsp, [rbp+80]
    0044d319pop rbx
    0044d31apop rsi
    0044d31bpop rbp
    0044d31cret
    0044d1b0
    0044d31d
    0044d31d 48 8b c0 H..
    0044d320
    0044d320fn_44d320:
    0044d320push rbp
    0044d321sub rsp, 32
    0044d325mov rbp, rsp
    0044d328lea rcx, [rdx+72]
    0044d32cmov rdx, [rip-443]
    0044d333call fn_410600
    0044d338lea rsp, [rbp+32]
    0044d33cpop rbp
    0044d33dret
    0044d320
    0044d33e
    0044d33e // align 0x10
    0044d340
    0044d340fn_44d340:
    0044d340push rbx
    0044d341mov al, 1
    0044d343mov r8, [rdx]
    0044d346test r8, r8
    0044d349je 0x44d34f
    0044d34bmov r8, [r8-8]
    0044d34f
    0044d34floc_44d34f:
    0044d34fxor r9, r9
    0044d352mov r10l, r8l
    0044d355sub r10l, 1
    0044d359mov r8l, r9l
    0044d35ccmp r8l, r10l
    0044d35fjg 0x44d3be
    0044d361sub r10l, r9l
    0044d364add r10l, 1
    0044d368
    0044d368loc_44d368:
    0044d368movsxd r9, r8l
    0044d36bmov r11, [rdx]
    0044d36emov rbx, [rcx]
    0044d371movzx r11, [r11+4*r9]
    0044d376cmp r11b, [rbx]
    0044d379jne 0x44d3b1
    0044d37bmov r11, [rdx]
    0044d37emov rbx, [rcx]
    0044d381movzx r11, [r11+4*r9+1]
    0044d387cmp r11b, [rbx+1]
    0044d38bjne 0x44d3b1
    0044d38dmov r11, [rdx]
    0044d390mov rbx, [rcx]
    0044d393movzx r11, [r11+4*r9+2]
    0044d399cmp r11b, [rbx+2]
    0044d39djne 0x44d3b1
    0044d39fmov r11, [rdx]
    0044d3a2mov rbx, [rcx]
    0044d3a5movzx r9, [r11+4*r9+3]
    0044d3abcmp r9b, [rbx+3]
    0044d3afje 0x44d3c1
    0044d3b1
    0044d3b1loc_44d3b1:
    0044d3b1add r8l, 1
    0044d3b5sub r10l, 1
    0044d3b9test r10l, r10l
    0044d3bcjne 0x44d368
    0044d3be
    0044d3beloc_44d3be:
    0044d3benop
    0044d3bfxor eax, eax
    0044d3c1
    0044d3c1loc_44d3c1:
    0044d3c1pop rbx
    0044d3c2ret
    0044d340
    0044d3c3
    0044d3c3 // align 0x10
    0044d3d0
    0044d3d0fn_44d3d0:
    0044d3d0push rbp
    0044d3d1push rdi
    0044d3d2push rsi
    0044d3d3push rbx
    0044d3d4sub rsp, 104
    0044d3d8mov rbp, rsp
    0044d3dbmov [rbp+56], rcx
    0044d3dfmov [rbp+64], rdx
    0044d3e3mov [rbp+72], r8
    0044d3e7mov [rbp+88], 0
    0044d3efmov [rbp+80], 0
    0044d3f7nop
    0044d3f8mov rcx, [rbp+72]
    0044d3fcmov rdx, [rip-0x1e59b]
    0044d403call fn_410600
    0044d408lea rcx, [rbp+88]
    0044d40cmov rdx, [rip-0x1e5ab]
    0044d413call fn_410600
    0044d418lea rcx, [rbp+80]
    0044d41cmov rdx, [rip-0x1e603]
    0044d423call fn_410600
    0044d428lea rcx, [rbp+80]
    0044d42cmov rdx, [rip-0x1e613]
    0044d433mov r8l, 1
    0044d439mov r9l, 4
    0044d43fcall fn_410430
    0044d444mov rax, [rbp+64]
    0044d448mov rax, [rax]
    0044d44btest rax, rax
    0044d44eje 0x44d454
    0044d450mov rax, [rax-8]
    0044d454
    0044d454loc_44d454:
    0044d454xor ecx, ecx
    0044d456mov edi, eax
    0044d458sub edi, 1
    0044d45bmov ebx, ecx
    0044d45dcmp ebx, edi
    0044d45fjg 0x44d559
    0044d465sub edi, ecx
    0044d467add edi, 1
    0044d46a
    0044d46aloc_44d46a:
    0044d46amovsxd rax, ebx
    0044d46dmov rcx, [rbp+80]
    0044d471mov rdx, [rbp+64]
    0044d475mov rdx, [rdx]
    0044d478movzx rdx, [rdx+4*rax]
    0044d47dmov [rcx], dl
    0044d47fmov rcx, [rbp+80]
    0044d483mov rdx, [rbp+64]
    0044d487mov rdx, [rdx]
    0044d48amovzx rdx, [rdx+4*rax+1]
    0044d490mov [rcx+1], dl
    0044d493mov rcx, [rbp+80]
    0044d497mov rdx, [rbp+64]
    0044d49bmov rdx, [rdx]
    0044d49emovzx rax, [rdx+4*rax+2]
    0044d4a4mov [rcx+2], al
    0044d4a7mov rax, [rbp+80]
    0044d4abmov [rax+3], 0
    0044d4aflea rcx, [rbp+80]
    0044d4b3lea rdx, [rbp+88]
    0044d4b7call fn_44d340
    0044d4bctest al, al
    0044d4bejne 0x44d54b
    0044d4c4lea rcx, [rbp+88]
    0044d4c8mov rax, [rbp+80]
    0044d4ccmovzx rdx, [rax]
    0044d4d0mov rax, [rbp+80]
    0044d4d4movzx r8, [rax+1]
    0044d4d9mov rax, [rbp+80]
    0044d4ddmovzx r9, [rax+2]
    0044d4e2mov rax, [rbp+80]
    0044d4e6movzx rax, [rax+3]
    0044d4ebmov [rsp+32], al
    0044d4efcall fn_42f390
    0044d4f4xor esi, esi
    0044d4f6
    0044d4f6loc_44d4f6:
    0044d4f6mov rax, [rbp+80]
    0044d4famov [rax+3], sil
    0044d4felea rcx, [rbp+80]
    0044d502mov rdx, [rbp+56]
    0044d506call fn_44d340
    0044d50btest al, al
    0044d50djne 0x44d53f
    0044d50fmov rcx, [rbp+72]
    0044d513mov rax, [rbp+80]
    0044d517movzx rdx, [rax]
    0044d51bmov rax, [rbp+80]
    0044d51fmovzx r8, [rax+1]
    0044d524mov rax, [rbp+80]
    0044d528movzx r9, [rax+2]
    0044d52dmov rax, [rbp+80]
    0044d531movzx rax, [rax+3]
    0044d536mov [rsp+32], al
    0044d53acall fn_42f390
    0044d53f
    0044d53floc_44d53f:
    0044d53fadd esi, 1
    0044d542cmp esi, 256
    0044d548jne 0x44d4f6
    0044d54anop
    0044d54b
    0044d54bloc_44d54b:
    0044d54badd ebx, 1
    0044d54esub edi, 1
    0044d551test edi, edi
    0044d553jne 0x44d46a
    0044d559
    0044d559loc_44d559:
    0044d559nop
    0044d55anop
    0044d55blea rcx, [rbp+80]
    0044d55fmov rdx, [rip-0x1e746]
    0044d566call fn_410600
    0044d56blea rcx, [rbp+88]
    0044d56fmov rdx, [rip-0x1e70e]
    0044d576call fn_410600
    0044d57blea rsp, [rbp+104]
    0044d57fpop rbx
    0044d580pop rsi
    0044d581pop rdi
    0044d582pop rbp
    0044d583ret
    0044d3d0
    0044d584
    0044d584 48 8d 40 00 48 8d 04 05 00 00 00 00 H.@.H.......
    0044d590
    0044d590fn_44d590:
    0044d590push rbp
    0044d591push rbx
    0044d592sub rsp, 40
    0044d596mov rbp, rsp
    0044d599mov rbx, rdx
    0044d59clea rcx, [rbx+80]
    0044d5a0mov rdx, [rip-0x1e787]
    0044d5a7call fn_410600
    0044d5aclea rcx, [rbx+88]
    0044d5b0mov rdx, [rip-0x1e74f]
    0044d5b7call fn_410600
    0044d5bclea rsp, [rbp+40]
    0044d5c0pop rbx
    0044d5c1pop rbp
    0044d5c2ret
    0044d590
    0044d5c3
    0044d5c3 // align 0x10
    0044d5d0
    0044d5d0fn_44d5d0:
    0044d5d0push rbp
    0044d5d1push rbx
    0044d5d2sub rsp, 72
    0044d5d6mov rbp, rsp
    0044d5d9mov [rbp+32], rcx
    0044d5ddmov [rbp+40], 0
    0044d5e5mov [rbp+48], 0
    0044d5ednop
    0044d5eemov rax, [rbp+32]
    0044d5f2mov ebx, [rax]
    0044d5f4lea rcx, [rbp+48]
    0044d5f8mov rdx, [rip-0x1e7df]
    0044d5ffcall fn_410600
    0044d604lea rcx, [rbp+48]
    0044d608mov rdx, [rip-0x1e7ef]
    0044d60fmov r8l, 1
    0044d615mov r9l, 4
    0044d61bcall fn_410430
    0044d620movsxd rbx, ebx
    0044d623mov rax, [rbp+48]
    0044d627mov rcx, [rip+0x23152]
    0044d62emov rdx, rbx
    0044d631add rdx, rdx
    0044d634add rdx, rdx
    0044d637movzx rcx, [rcx+8*rdx+7]
    0044d63dmov [rax], cl
    0044d63fmov rax, [rbp+48]
    0044d643mov rcx, [rip+0x23136]
    0044d64amov rdx, rbx
    0044d64dadd rdx, rdx
    0044d650add rdx, rdx
    0044d653movzx rcx, [rcx+8*rdx+6]
    0044d659mov [rax+1], cl
    0044d65cmov rax, [rbp+48]
    0044d660mov rcx, [rip+0x23119]
    0044d667mov rdx, rbx
    0044d66aadd rdx, rdx
    0044d66dadd rdx, rdx
    0044d670movzx rcx, [rcx+8*rdx+5]
    0044d676mov [rax+2], cl
    0044d679mov rax, [rbp+48]
    0044d67dmov rcx, [rip+0x230fc]
    0044d684mov rdx, rbx
    0044d687add rdx, rdx
    0044d68aadd rdx, rdx
    0044d68dmovzx rcx, [rcx+8*rdx+4]
    0044d693mov [rax+3], cl
    0044d696lea rcx, [rbp+48]
    0044d69acall fn_430a00
    0044d69fmov [rbp+60], eax
    0044d6a2cmp [rbp+60], -1
    0044d6a6jne 0x44d6bc
    0044d6a8mov rax, [rip+0x230d1]
    0044d6afadd rbx, rbx
    0044d6b2add rbx, rbx
    0044d6b5mov [rax+8*rbx+25], 1
    0044d6bajmp 0x44d719
    0044d6bc
    0044d6bcloc_44d6bc:
    0044d6bclea rcx, [rbp+60]
    0044d6c0mov edx, 4
    0044d6c5mov r8l, 2
    0044d6cbcall gethostbyaddr
    0044d6d0test rax, rax
    0044d6d3je 0x44d706
    0044d6d5lea rcx, [rbp+40]
    0044d6d9mov rdx, [rax]
    0044d6dccall fn_40d0a0
    0044d6e1mov rax, [rip+0x23098]
    0044d6e8mov rcx, rbx
    0044d6ebadd rcx, rcx
    0044d6eeadd rcx, rcx
    0044d6f1lea rcx, [rax+8*rcx+8]
    0044d6f6lea rdx, [rip+115]
    0044d6fdmov r8, [rbp+40]
    0044d701call fn_40d230
    0044d706
    0044d706loc_44d706:
    0044d706mov rax, [rip+0x23073]
    0044d70dadd rbx, rbx
    0044d710add rbx, rbx
    0044d713mov [rax+8*rbx+25], 1
    0044d718nop
    0044d719
    0044d719loc_44d719:
    0044d719lea rcx, [rbp+40]
    0044d71dcall fn_40bd90
    0044d722lea rcx, [rbp+48]
    0044d726mov rdx, [rip-0x1e90d]
    0044d72dcall fn_410600
    0044d732lea rsp, [rbp+72]
    0044d736pop rbx
    0044d737pop rbp
    0044d738ret
    0044d5d0
    0044d739
    0044d739 48 8d 80 00 00 00 00 H......
    0044d740
    0044d740fn_44d740:
    0044d740push rbp
    0044d741push rbx
    0044d742sub rsp, 40
    0044d746mov rbp, rsp
    0044d749mov rbx, rdx
    0044d74clea rcx, [rbx+40]
    0044d750call fn_40bd90
    0044d755lea rcx, [rbx+48]
    0044d759mov rdx, [rip-0x1e940]
    0044d760call fn_410600
    0044d765lea rsp, [rbp+40]
    0044d769pop rbx
    0044d76apop rbp
    0044d76bret
    0044d740
    0044d76c
    0044d76c 04 00 00 00 ....
    0044d770 5c 00 5c 00 00 00 cc cc cc cc cc cc cc cc cc cc \.\.............
    0044d780
    0044d780fn_44d780:
    0044d780push rbp
    0044d781push rbx
    0044d782sub rsp, 264
    0044d789mov rbp, rsp
    0044d78cmov [rbp+104], 0
    0044d794mov [rbp+80], 0
    0044d79cmov [rbp+96], 0
    0044d7a4mov [rbp+88], 0
    0044d7acmov [rbp+112], 0
    0044d7b4mov [rbp+152], 0
    0044d7bfmov [rbp+144], 0
    0044d7camov [rbp+136], 0
    0044d7d5mov [rbp+128], 0
    0044d7e0mov [rbp+120], 0
    0044d7e8mov [rbp+184], 0
    0044d7f3mov [rbp+160], 0
    0044d7femov [rbp+176], 0
    0044d809mov [rbp+168], 0
    0044d814mov [rbp+192], 0
    0044d81fmov [rbp+200], rbp
    0044d826mov [rbp+288], rcx
    0044d82dnop
    0044d82emov rax, [rbp+288]
    0044d835mov [rbp+216], rax
    0044d83cmov rax, [rbp+216]
    0044d843mov eax, [rax]
    0044d845mov [rbp+212], eax
    0044d84bmovsxd rbx, [rbp+212]
    0044d852mov rax, [rip+0x22f27]
    0044d859mov rcx, rbx
    0044d85cadd rcx, rcx
    0044d85fadd rcx, rcx
    0044d862lea rcx, [rax+8*rcx+16]
    0044d867mov rdx, [rip-0x1e9c6]
    0044d86ecall fn_410600
    0044d873lea rcx, [rbp+192]
    0044d87amov rax, [rip+0x22eff]
    0044d881mov rdx, rbx
    0044d884add rdx, rdx
    0044d887add rdx, rdx
    0044d88amov rdx, [rax+8*rdx+8]
    0044d88fxor r8, r8
    0044d892call fn_40c8e0
    0044d897mov rcx, [rbp+192]
    0044d89ecall fn_40fc50
    0044d8a3mov [rbp+224], rax
    0044d8aamov rcx, [rbp+224]
    0044d8b1mov edx, 1
    0044d8b6lea r8, [rbp+248]
    0044d8bdor r9l, -1
    0044d8c1lea rax, [rbp+244]
    0044d8c8mov [rsp+32], rax
    0044d8cdlea rax, [rbp+240]
    0044d8d4mov [rsp+40], rax
    0044d8d9mov [rsp+48], 0
    0044d8e2call NetShareEnum
    0044d8e7test eax, eax
    0044d8e9jne 0x44d9cf
    0044d8efnop
    0044d8f0xor eax, eax
    0044d8f2mov ebx, [rbp+244]
    0044d8f8sub ebx, 1
    0044d8fbmov [rbp+236], eax
    0044d901cmp [rbp+236], ebx
    0044d907jg 0x44d9bc
    0044d90dsub ebx, eax
    0044d90fadd ebx, 1
    0044d912
    0044d912loc_44d912:
    0044d912lea rcx, [rbp+176]
    0044d919mov rdx, [rbp+224]
    0044d920call fn_40d780
    0044d925lea rcx, [rbp+168]
    0044d92cmov rax, [rbp+248]
    0044d933movsxd rdx, [rbp+236]
    0044d93alea rdx, [rdx+2*rdx]
    0044d93emov rdx, [rax+8*rdx]
    0044d942call fn_40d780
    0044d947lea rcx, [rbp+184]
    0044d94emov edx, 3
    0044d953mov r8, [rbp+176]
    0044d95alea r9, [rip+999]
    0044d961mov rax, [rbp+168]
    0044d968mov [rsp+32], rax
    0044d96dcall fn_40dbb0
    0044d972lea rcx, [rbp+160]
    0044d979mov rdx, [rbp+184]
    0044d980call fn_40d850
    0044d985mov rax, [rip+0x22df4]
    0044d98cmovsxd rcx, [rbp+212]
    0044d993add rcx, rcx
    0044d996add rcx, rcx
    0044d999lea rcx, [rax+8*rcx+16]
    0044d99emov rdx, [rbp+160]
    0044d9a5call fn_42f9a0
    0044d9aaadd [rbp+236], 1
    0044d9b1sub ebx, 1
    0044d9b4test ebx, ebx
    0044d9b6jne 0x44d912
    0044d9bc
    0044d9bcloc_44d9bc:
    0044d9bcnop
    0044d9bdnop
    0044d9bemov rcx, [rbp+248]
    0044d9c5call NetApiBufferFree
    0044d9cajmp 0x44dc0f
    0044d9cf
    0044d9cfloc_44d9cf:
    0044d9cflea rcx, [rbp+144]
    0044d9d6mov rax, [rip+0x22da3]
    0044d9ddmov rdx, rbx
    0044d9e0add rdx, rdx
    0044d9e3add rdx, rdx
    0044d9e6movzx rdx, [rax+8*rdx+4]
    0044d9eccall fn_4225b0
    0044d9f1lea rcx, [rbp+136]
    0044d9f8mov rax, [rip+0x22d81]
    0044d9ffmov rdx, rbx
    0044da02add rdx, rdx
    0044da05add rdx, rdx
    0044da08movzx rdx, [rax+8*rdx+5]
    0044da0ecall fn_4225b0
    0044da13lea rcx, [rbp+128]
    0044da1amov rax, [rip+0x22d5f]
    0044da21mov rdx, rbx
    0044da24add rdx, rdx
    0044da27add rdx, rdx
    0044da2amovzx rdx, [rax+8*rdx+6]
    0044da30call fn_4225b0
    0044da35lea rcx, [rbp+120]
    0044da39mov rax, [rip+0x22d40]
    0044da40mov rdx, rbx
    0044da43add rdx, rdx
    0044da46add rdx, rdx
    0044da49movzx rdx, [rax+8*rdx+7]
    0044da4fcall fn_4225b0
    0044da54lea rcx, [rbp+152]
    0044da5bmov edx, 8
    0044da60lea r8, [rip+753]
    0044da67mov r9, [rbp+144]
    0044da6elea rax, [rip+759]
    0044da75mov [rsp+32], rax
    0044da7amov rax, [rbp+136]
    0044da81mov [rsp+40], rax
    0044da86lea rax, [rip+735]
    0044da8dmov [rsp+48], rax
    0044da92mov rax, [rbp+128]
    0044da99mov [rsp+56], rax
    0044da9elea rax, [rip+711]
    0044daa5mov [rsp+64], rax
    0044daaamov rax, [rbp+120]
    0044daaemov [rsp+72], rax
    0044dab3call fn_40dbb0
    0044dab8mov rax, [rip+0x22cc1]
    0044dabfmov rcx, rbx
    0044dac2add rcx, rcx
    0044dac5add rcx, rcx
    0044dac8lea rcx, [rax+8*rcx+8]
    0044dacdmov rdx, [rbp+152]
    0044dad4call fn_40d850
    0044dad9lea rcx, [rbp+112]
    0044daddmov rax, [rip+0x22c9c]
    0044dae4add rbx, rbx
    0044dae7add rbx, rbx
    0044daeamov rdx, [rax+8*rbx+8]
    0044daefxor r8, r8
    0044daf2call fn_40c8e0
    0044daf7mov rcx, [rbp+112]
    0044dafbcall fn_40fc50
    0044db00mov [rbp+224], rax
    0044db07mov rcx, [rbp+224]
    0044db0emov edx, 1
    0044db13lea r8, [rbp+248]
    0044db1aor r9l, -1
    0044db1elea rax, [rbp+244]
    0044db25mov [rsp+32], rax
    0044db2alea rax, [rbp+240]
    0044db31mov [rsp+40], rax
    0044db36mov [rsp+48], 0
    0044db3fcall NetShareEnum
    0044db44test eax, eax
    0044db46jne 0x44dc0f
    0044db4cnop
    0044db4dxor eax, eax
    0044db4fmov ebx, [rbp+244]
    0044db55sub ebx, 1
    0044db58mov [rbp+236], eax
    0044db5ecmp [rbp+236], ebx
    0044db64jg 0x44dc01
    0044db6asub ebx, eax
    0044db6cadd ebx, 1
    0044db6f
    0044db6floc_44db6f:
    0044db6flea rcx, [rbp+96]
    0044db73mov rdx, [rbp+224]
    0044db7acall fn_40d780
    0044db7flea rcx, [rbp+88]
    0044db83mov rax, [rbp+248]
    0044db8amovsxd rdx, [rbp+236]
    0044db91lea rdx, [rdx+2*rdx]
    0044db95mov rdx, [rax+8*rdx]
    0044db99call fn_40d780
    0044db9elea rcx, [rbp+104]
    0044dba2mov edx, 3
    0044dba7mov r8, [rbp+96]
    0044dbablea r9, [rip+406]
    0044dbb2mov rax, [rbp+88]
    0044dbb6mov [rsp+32], rax
    0044dbbbcall fn_40dbb0
    0044dbc0lea rcx, [rbp+80]
    0044dbc4mov rdx, [rbp+104]
    0044dbc8call fn_40d850
    0044dbcdmov rax, [rip+0x22bac]
    0044dbd4movsxd rcx, [rbp+212]
    0044dbdbadd rcx, rcx
    0044dbdeadd rcx, rcx
    0044dbe1lea rcx, [rax+8*rcx+16]
    0044dbe6mov rdx, [rbp+80]
    0044dbeacall fn_42f9a0
    0044dbefadd [rbp+236], 1
    0044dbf6sub ebx, 1
    0044dbf9test ebx, ebx
    0044dbfbjne 0x44db6f
    0044dc01
    0044dc01loc_44dc01:
    0044dc01nop
    0044dc02nop
    0044dc03mov rcx, [rbp+248]
    0044dc0acall NetApiBufferFree
    0044dc0f
    0044dc0floc_44dc0f:
    0044dc0fmov rax, [rip+0x22b6a]
    0044dc16movsxd rcx, [rbp+212]
    0044dc1dadd rcx, rcx
    0044dc20add rcx, rcx
    0044dc23mov [rax+8*rcx+25], 1
    0044dc28nop
    0044dc29lea rcx, [rbp+80]
    0044dc2dcall fn_40bd90
    0044dc32lea rcx, [rbp+88]
    0044dc36mov edx, 3
    0044dc3bcall fn_40bdd0
    0044dc40lea rcx, [rbp+112]
    0044dc44call fn_40bd40
    0044dc49lea rcx, [rbp+120]
    0044dc4dmov edx, 5
    0044dc52call fn_40bdd0
    0044dc57lea rcx, [rbp+160]
    0044dc5ecall fn_40bd90
    0044dc63lea rcx, [rbp+168]
    0044dc6amov edx, 3
    0044dc6fcall fn_40bdd0
    0044dc74lea rcx, [rbp+192]
    0044dc7bcall fn_40bd40
    0044dc80lea rsp, [rbp+264]
    0044dc87pop rbx
    0044dc88pop rbp
    0044dc89ret
    0044d780
    0044dc8a
    0044dc8a 64 48 8d 44 20 00 dH.D .
    0044dc90
    0044dc90fn_44dc90:
    0044dc90push rbp
    0044dc91sub rsp, 32
    0044dc95mov rbp, rsp
    0044dc98mov rcx, [rdx+248]
    0044dc9fcall NetApiBufferFree
    0044dca4lea rsp, [rbp+32]
    0044dca8pop rbp
    0044dca9ret
    0044dc90
    0044dcaa
    0044dcaa 64 48 8d 44 20 00 dH.D .
    0044dcb0
    0044dcb0fn_44dcb0:
    0044dcb0push rbp
    0044dcb1sub rsp, 32
    0044dcb5mov rbp, rsp
    0044dcb8mov rcx, [rdx+248]
    0044dcbfcall NetApiBufferFree
    0044dcc4lea rsp, [rbp+32]
    0044dcc8pop rbp
    0044dcc9ret
    0044dcb0
    0044dcca
    0044dcca 64 48 8d 44 20 00 dH.D .
    0044dcd0
    0044dcd0fn_44dcd0:
    0044dcd0push rbp
    0044dcd1push rbx
    0044dcd2sub rsp, 40
    0044dcd6mov rbp, rsp
    0044dcd9mov rbx, rdx
    0044dcdclea rcx, [rbx+80]
    0044dce0call fn_40bd90
    0044dce5lea rcx, [rbx+88]
    0044dce9mov edx, 3
    0044dceecall fn_40bdd0
    0044dcf3lea rcx, [rbx+112]
    0044dcf7call fn_40bd40
    0044dcfclea rcx, [rbx+120]
    0044dd00mov edx, 5
    0044dd05call fn_40bdd0
    0044dd0alea rcx, [rbx+160]
    0044dd11call fn_40bd90
    0044dd16lea rcx, [rbx+168]
    0044dd1dmov edx, 3
    0044dd22call fn_40bdd0
    0044dd27lea rcx, [rbx+192]
    0044dd2ecall fn_40bd40
    0044dd33lea rsp, [rbp+40]
    0044dd37pop rbx
    0044dd38pop rbp
    0044dd39ret
    0044dcd0
    0044dd3a
    0044dd3a 00 00 b0 04 02 00 ......
    0044dd40 ff ff ff ff 01 00 00 00 5c 00 00 00 b0 04 02 00 ........\.......
    0044dd50 ff ff ff ff 02 00 00 00 5c 00 5c 00 00 00 00 00 ........\.\.....
    0044dd60 b0 04 02 00 ff ff ff ff 01 00 00 00 2e 00 00 00 ................