Function at 0x4196e5
Capabilities:
Execute command
Get system information on windows

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x1b8
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x160], ecx
mov qword [rbp + 0x168], rdx
call fcn.00447bd0
mov ecx, 0
call sub.msvcrt.dll__time64
mov ecx, eax
call sub.msvcrt.dll_srand
call fcn.0041954a
mov ecx, eax
call sub.msvcrt.dll_srand
lea rax, [rbp - 0x20]
mov edx, 0x104
mov rcx, rax
call sub.msvcrt.dll__getcwd
mov ecx, 0x20
call sub.msvcrt.dll_malloc
mov qword [rbp + 0x110], rax
mov rdx, qword [rbp + 0x110]
mov rax, qword [rbp + 0x168]
mov r8, rdx
mov rdx, rax
mov ecx, dword [rbp + 0x160]
call fcn.00416556
mov rax, qword [rbp + 0x110]
mov eax, dword [rax + 0x1c]
test eax, eax
jne 0x41a1df
lea rax, [rbp - 0x50]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetSystemInfo]
call rax
mov eax, dword [rbp - 0x30]
mov edx, eax
lea rax, [0x004ed450]
mov dword [rax], edx
lea rax, [0x004ed450]
mov eax, dword [rax]
cmp eax, 8
jle 0x4197b3
lea rax, [0x004ed450]
mov dword [rax], 8
lea rax, [0x004ed450]
mov eax, dword [rax]
cdqe
imul rax, rax, 0x44f0
mov rcx, rax
call sub.msvcrt.dll_malloc
mov rdx, rax
lea rax, [0x004ed480]
mov qword [rax], rdx
lea rax, [0x004ed450]
mov eax, dword [rax]
cdqe
shl rax, 2
mov rcx, rax
call sub.msvcrt.dll_malloc
mov rdx, rax
lea rax, [0x004e8e88]
mov qword [rax], rdx
lea rax, [0x004ed450]
mov eax, dword [rax]
cdqe
shl rax, 3
mov rcx, rax
call sub.msvcrt.dll_malloc
mov qword [rbp + 0x108], rax
lea rax, [0x004ed450]
mov eax, dword [rax]
cdqe
shl rax, 3
mov rcx, rax
call sub.msvcrt.dll_malloc
mov qword [rbp + 0x100], rax
lea rax, [0x004ed450]
mov eax, dword [rax]
cdqe
shl rax, 2
mov rcx, rax
call sub.msvcrt.dll_malloc
mov rdx, rax
lea rax, [0x004ed4a8]
mov qword [rax], rdx
lea rax, [0x004ed450]
mov eax, dword [rax]
cdqe
shl rax, 3
mov rcx, rax
call sub.msvcrt.dll_malloc
mov rdx, rax
lea rax, [0x004ed4a0]
mov qword [rax], rdx
lea rax, [0x004ed450]
mov eax, dword [rax]
cdqe
shl rax, 2
mov rcx, rax
call sub.msvcrt.dll_malloc
mov rdx, rax
lea rax, [0x004ed440]
mov qword [rax], rdx
lea rax, [0x004ed450]
mov eax, dword [rax]
cdqe
shl rax, 3
mov rcx, rax
call sub.msvcrt.dll_malloc
mov rdx, rax
lea rax, [0x004ed498]
mov qword [rax], rdx
mov edx, 0
lea rax, [0x004e8e18]
mov rcx, rax
call fcn.00443530
mov dword [rbp + 0x12c], 0
jmp 0x4199ff
lea rax, [0x004ed498]
mov rax, qword [rax]
mov edx, dword [rbp + 0x12c]
movsxd rdx, edx
shl rdx, 3
add rax, rdx
mov edx, 0
mov rcx, rax
call fcn.00443530
lea rax, [0x004ed4a8]
mov rax, qword [rax]
mov edx, dword [rbp + 0x12c]
movsxd rdx, edx
shl rdx, 2
add rax, rdx
mov dword [rax], 0xffffffff
lea rax, [0x004ed4a0]
mov rax, qword [rax]
mov edx, dword [rbp + 0x12c]
movsxd rdx, edx
shl rdx, 3
lea rbx, [rax + rdx]
mov ecx, 0x2000
call sub.msvcrt.dll_malloc
mov qword [rbx], rax
mov dword [rbp + 0x128], 0
jmp 0x4199aa
lea rax, [0x004ed4a0]
mov rax, qword [rax]
mov edx, dword [rbp + 0x12c]
movsxd rdx, edx
shl rdx, 3
add rax, rdx
mov rax, qword [rax]
mov edx, dword [rbp + 0x128]
movsxd rdx, edx
shl rdx, 3
lea rbx, [rax + rdx]
mov ecx, 0x1000
call sub.msvcrt.dll_malloc
mov qword [rbx], rax
add dword [rbp + 0x128], 1
cmp dword [rbp + 0x128], 0x3ff
jle 0x419968
lea rax, [0x004ed440]
mov rax, qword [rax]
mov edx, dword [rbp + 0x12c]
movsxd rdx, edx
shl rdx, 2
add rax, rdx
mov dword [rax], 0
mov eax, dword [rbp + 0x12c]
cdqe
lea rdx, [rax*8]
mov rax, qword [rbp + 0x100]
add rdx, rax
mov eax, dword [rbp + 0x12c]
mov dword [rdx], eax
add dword [rbp + 0x12c], 1
lea rax, [0x004ed450]
mov eax, dword [rax]
cmp dword [rbp + 0x12c], eax
jl 0x4198ed
mov rdx, qword [0x004dc8b0]
mov rax, qword [0x004dc8c0]
mov r8, rax
mov eax, 0x34
mov rdi, rdx
mov rsi, r8
mov rcx, rax
rep movsq qword [rdi], qword [rsi]
lea rax, [0x004e8e0c]
mov rdx, rax
lea rax, [0x004e8ec0]
mov rcx, rax
call fcn.00418f48
test eax, eax
jne 0x419f6d
mov dword [rbp + 0x12c], 0
jmp 0x419ab0
lea rax, [0x004e8e88]
mov rax, qword [rax]
mov edx, dword [rbp + 0x12c]
movsxd rdx, edx
shl rdx, 2
add rdx, rax
lea rax, [0x004ed480]
mov rcx, qword [rax]
mov eax, dword [rbp + 0x12c]
cdqe
imul rax, rax, 0x44f0
add rax, rcx
mov rcx, rax
call fcn.00418f48
test eax, eax
jne 0x419f70
add dword [rbp + 0x12c], 1
lea rax, [0x004ed450]
mov eax, dword [rax]
cmp dword [rbp + 0x12c], eax
jl 0x419a63
mov eax, dword [0x0044c268]
lea rdx, [0x004ed3e0]
mov r8, rdx
mov edx, eax
lea rcx, [0x0044c040]
call fcn.00423a10
test eax, eax
jne 0x419f73
mov rcx, qword [0x004dc860]
call fcn.0041f980
mov dword [rbp + 0xfc], eax
cmp dword [rbp + 0xfc], 0
jne 0x419f76
lea rcx, [0x004d0ef1]
call fcn.0041f6b0
mov edx, eax
lea rax, [0x004e8e08]
mov dword [rax], edx
lea rax, [0x004e8e08]
mov eax, dword [rax]
cmp eax, 0xffffffff
je 0x419f79
mov rcx, qword [0x004dc880]
call fcn.0041fc50
mov dword [rbp + 0xfc], eax
cmp dword [rbp + 0xfc], 0
jne 0x419f7c
lea rax, [0x004e8e08]
mov eax, dword [rax]
mov ecx, eax
call fcn.0041e170
mov dword [rbp + 0xfc], eax
cmp dword [rbp + 0xfc], 0
jne 0x419f7f
lea rcx, [0x004d0ef5]
call fcn.0041f800
mov edx, eax
lea rax, [0x004ed3c8]
mov dword [rax], edx
lea rax, [0x004ed3c8]
mov eax, dword [rax]
cmp eax, 0xffffffff
je 0x419f82
mov dword [rbp - 0x54], 0x20
lea rax, [rbp - 0x54]
mov rcx, rax
call fcn.0041b680
mov dword [rbp + 0xfc], eax
cmp dword [rbp + 0xfc], 0
jne 0x419f85
lea rax, [0x004ed3d8]
mov rdx, rax
lea rcx, str.109__159__40__144__126__186__82
call fcn.0041939f
lea rax, [0x004ed3d0]
mov rdx, rax
lea rcx, str.92__133__56__151__126__189__82__222__68__25__123__4__211__33__59__45__171__3__172__94__240__95__101__208__140__252
call fcn.0041939f
lea rax, [0x004e8e00]
mov rdx, rax
lea rcx, str.124__154__53__205__114__166__86__146__41__8__62__22__196__40__13__60__255__22__166__68__242__27__122__146__223__180__64__28__249__33__123__207__244__142__136__104__188__75__103__101__15__14__185__85__9__110__235__133__88__86__36__119__19__4__127__245__38
call fcn.0041939f
lea rax, [0x004e8e78]
mov rdx, rax
lea rcx, str.76__146__50__150__101__183__71__203__38__37__113__17__217__42__26__104__185__20__160__71__181__120__50__194__141__232__80__98__172__97__62__138__170__148__193__52__251__85__19__110__27__15__185__126__37__67__133__161__64__2__110__127__71__66__97__187__36__232__203__143__48__60__171__154__27__117__249__254__247__90__24__167__118__108__19__37__96__232__41__152__93__72__226__39__88__207__233__243__157__73__165__161__74__125__166__3__80__177__116__19__182__92__140__227__108__125__195__206__103__110__110__229__189__213__234__12__187__51__153__20__56__199__189__27__40__248__23__71__31__35__136__45__112__122__234__158__68__124__51__133__130__45__50__93__153__69__113__135__3__189__109__114__59__227__74__9__197__121__105__205__188__20__238__238__207__99__129__4__120__119__83__73__134__33__5__45__213__109__101__211__175__240__226__140__108__80__68__43__138__163__157__236__75__78__3__111__127__74__32__91__132__31__117__167__82__138__101__211__22__124__27__153__20__231__10__100__108__67__56__118__97__116__13__78__103__237__73__42__220__16__52__184__164__105__102__231__79__172__4__145__201__13__252__165__104__148__28__27__2__191__149__187__69__32__169__155__167__27__135__164__154__16__183__148__74__134__93__177__164__64__209__112__170__227__67__8__179__116__242__168__43__174__169__231__6__206__253__37__66__22__93__78__26__71__4__129__114__66__162__249__85__155__188__207__73__95__235__11__84__198__203__132__31__173__40__119__240__241__42__132__186__88__67__82__168__116__178__210__51__63__211__92__168__222__24__204__131__158__221__177__69__166__22__226__227__18__229__201__98__7__194__118__117__230__142__240__6__249__191__47__245__233__132__152__122__98__187__164__22__243__162__189__250__56__201__74__2__242__84__165__191__62__83__136__234__249__88__1__215__27__42__194__234__232__179__89__142__206__69__172__32__95__196__94__178__44__101__17__148__223__232__237__114__187__225__109__237__70__168__129__201__215__91__131__4__192__142__90__96__135__149__69__169__48__248__7__186__193__28__106__63__50__150__53__241__36__62__253__67__146__134__14__114__164__211__112__84__248__211__30__121__224__146__111__196__52__172__153__126__255__250__227__232__38__220__227__99__209__176__32__246__103__32__176__57__36__35__184__239__224__181__85__235__67__75__188__68__46__190__108__86__67__93__46__36__66__220__72__74__121__251__252__80__30__244__209__46__234__72__238__152__153__154__186__139__1__142__245__202__148__194__164__242__254__223__61__93__174__239__42__8__227__230__127__240__123__1__127__78__90__132__125__83__135__5__85__211__144__120__197__136__132__207__11__115__112__3__25__80__102__36__91__108__216__54__172__229__208__154__89__92__204__79__204__30__222__161__42__115__19__144__171__31__221__148__71__76__146__156__27__235__3__1__66__39__183__83__218__204__76__99__51__67__168__133__206__53__102__228__97__105__40__107__31__35__155__96__113__43__149__20__147__32__118__165__80__13__124__31__245__48__56__199__223__151__10__183__212__105__243__222__237__14__106__58__96__173__165__27__232__164__94__186__1__110__218__156__91__37__120__237__153__33__49__99__156__86__95__123__110__29__35__178__120__219__179__92__120__123__69__141__205__208__6__141__53__105__192__192__11__158__120__112__88__182__246__62__146__75__243__224__14__67__70__19__137__243__131__53__40__49__248__206__111__0__149__227__5__176__55__111__231__85__145__55__170__63__206__55__251__69__181__146__55__160__59__32__34__225__111__52__34__57__65__57__81__113__54__162__23__71__107__112__79__233__3__97__193__192__250__95__154__96__144__141__186__115__9__45__94__7__14__220__145__96__223__172__48__113__229__235__86__253__234__105__114__249__29__72__9__130__95__46__248__110__216__176__105__161__128__109__243__52__237__144__32__228__57__212__43__93__61__202__112__187__237__207__203__138__50__248__20__99__218__157__23__188__12__163__198__25__190__137__77__142__25__111__106__6__78__129__50__57__14__181__194__174__243__199__79__7__104__247__120__164__242__56__46__32__110__73__78__106__43__113__141__12__85__174__189__203__220__14__216__230__152__124__190__101__140__22__243__177__79__107__13__102__233__60__1
call fcn.0041939f
lea rax, [0x004ed490]
mov rdx, rax
lea rcx, str.58__167__21__165__58__239__29__134__12__78__221__199__115__234__117__121__255__86__239__69__247__81__65__156__212__144__95__102__160__123__38__138__249__200__129__80__179__54__53__110__27__22__246__1__15__102__113__31__52__1__11__122__51__67__14__161__4__200__170__141__81__47__206__152__126__107__141__160__250__54__76__239__19__124__96__104__8__188__77__223__49__3__134__50__1__160__168__198__155__84__160__160__64__119__186__3__12__42__248__103__142__50__159__195__35__27__214__183__38__27__45__197__225__176__176__123__236__104__248__27__19__212__171__90__62__244__29__71__123__49__137__43__51__55__221__215__16__57__109__221__203__58__97__3__196__0__40__219__68__224__36__108__47__148__22__92__131__35__6__211__225__113__229__244__202__111__151__78__7__54__83__16__203__35__2__35__182__48__45__188__236__221__187__157__125__80__31__0__142__247__154__239__72__69__102__55__70__69__32__30__146__82__39__238__14__138__86__189__76__48__116__143__9__230__22__38__114__38__44__36__52__34__11__73__122__199__1__126__179__31__6__168__186__104__47__166__109__167__92__246__254__16__238__178__120__237__64__104__45__250__153__189__16__54__215__209__132__37__139__180__213__78__225__190__12__139__85__229__252__15__149__31__165__212__106__77__162__42__176__205__103__138__147__199__6__199__250__105__67__22__35__20__59__100__12__156__126__66__244__216__79__135__249__159__18__33__249__10__66__194__137__154__122__184__97__51__163__190__39__158__213__113__13__118__160__111__168__214__45__113__128__7__141__207__11__139__192__175__231__159__116__219__117__244__173__23__228__139__109__126__134__51__43__178__136__243__0__211__240__103__154__182__240__149__101__39__254__229__61__201__178__178__191__47__213__37__13__210__68__164__190__53__74__153__179__246__112__2__210__92__38__166__177__218__189__79__147__210__28__189__123__9__212__45__242__17__114__88__157__210__232__186__43__249__186__71__171__106__167__135__219__244__74__131__50__204__151__95__125__140__222__11__132__127__181__127__181__242__1__105__61__48__177__101__226__34__40__173__3__184__144__29__59__174__197__23__84__252__219__97__63__222__146__101__131__52__171__153__35__167__186__166__222__69__135__192__42__201__172__44__247__103__127__132__58__38__50__174__216__171__219__48__130__44__4__239__27__77__161__56__101__66__88__49__75__73__51__193__228__68__138__226__196__111__129__88__135__135__100__96__98__207__172__199__176__45__168__28__213__148__8__73__206__131__228__91__24__128__131__66__114__28__58__89__189__96__110__191__63__104__25__82__112__128__96__61__190__248__65__190__110__51__237__1__156__94__130__91__31__54__124__93__102__128__110__7__176__56__222__143__15__122__223__67__224__208__173__106__101__212__53__24__176__123__10__183__118__222__251__116__133__47__33__50__75__210__50__169__169__108__21__90__48__193__241__238__90__19__150__65__30__77__9__108__74__239__5__75__38__159__124__231__84__6__159__127__34__14__119__140__67__81__163__190__241__101__223__166__1__138__167__223__111__25__64__9__154__199__118__219__150__42__212__107__15__174__169__35__87__17__219__172__71__94__19__255__46__52__31__8__101__75__219__76__175__218__56__11__28__114__238__172__180__40__226__91__0__175__174__6__148__16__4__44__198__204__17__189__57__155__153__125__42__34__114__239__144__181__89__69__6__137__175__93__109__254__138__112__219__85__10__157__61__166__77__223__75__166__4__146__113__194__253__81__148__86__72__16__128__26__80__73__64__44__74__50__27__91__148__110__34__12__17__43__199__108__15__168__175__148__82__144__23__249__249__210__83__112__66__43__117__46__175__244__3__173__201__68__81__142__142__47__221__187__48__75__203__36__24__48__200__25__125__174__34__155__134__51__249__194__91__187__102__186__194__110__211__97__151__122__31__127__248__40__139__224__197__198__128__115__140__96__6__180__233__126__211__98__131__131__116__206__229__34__247__124__10__25__60__67__139__102__81__103__198__226__194__156__160__32__105__72__153__23__208__155__94__71__67__15__61__39__5__69__81__228__127__117__218__210__235__181__96__190__137__234__17__158__28__227__99__211__197__39__10__121__70__157__84__220__66__76__128__1
call fcn.0041939f
lea rax, [0x004ed470]
mov dword [rax], 1
jmp 0x419f59
lea rax, [0x004e8e50]
mov dword [rax], 0
lea rax, [0x004e8e50]
mov dword [rax + 4], 0
lea rax, [0x004e8e50]
mov dword [rax + 8], 0
lea rax, [0x004e8e50]
mov dword [rax + 0xc], 0
lea rax, [0x004e8e50]
mov dword [rax + 0x10], 0
lea rax, [0x004e8e50]
mov dword [rax + 0x14], 0
lea rax, [0x004e8e48]
mov dword [rax], 0
lea rax, [0x004e8e70]
mov dword [rax], 1
mov dword [rbp + 0x12c], 0
jmp 0x419d32
mov eax, dword [rbp + 0x12c]
cdqe
lea rdx, [rax*8]
mov rax, qword [rbp + 0x100]
add rdx, rax
mov rax, qword [rbp + 0x110]
mov eax, dword [rax + 0x18]
mov dword [rdx + 4], eax
mov eax, dword [rbp + 0x12c]
cdqe
lea rdx, [rax*8]
mov rax, qword [rbp + 0x100]
add rdx, rax
mov eax, dword [rbp + 0x12c]
cdqe
lea rcx, [rax*8]
mov rax, qword [rbp + 0x108]
add rax, rcx
mov r9, rdx
lea r8, [0x00417ac1]
mov edx, 0
mov rcx, rax
call fcn.004454b0
add dword [rbp + 0x12c], 1
lea rax, [0x004ed450]
mov eax, dword [rax]
cmp dword [rbp + 0x12c], eax
jl 0x419cb9
mov dword [rbp + 0x12c], 0
jmp 0x419d7c
mov eax, dword [rbp + 0x12c]
cdqe
lea rdx, [rax*8]
mov rax, qword [rbp + 0x108]
add rax, rdx
mov rcx, rax
call fcn.00445980
add dword [rbp + 0x12c], 1
lea rax, [0x004ed450]
mov eax, dword [rax]
cmp dword [rbp + 0x12c], eax
jl 0x419d53
mov rax, qword [rbp + 0x110]
mov rax, qword [rax + 8]
movzx eax, byte [rax]
test al, al
jne 0x419e15
mov ecx, 0x1000
call sub.msvcrt.dll_malloc
mov qword [rbp + 0xf0], rax
mov dword [rbp + 0x124], 0x5a
jmp 0x419dfb
mov edx, dword [rbp + 0x124]
mov rax, qword [rbp + 0xf0]
mov r8d, edx
lea rdx, str._c:_
mov rcx, rax
call sub.msvcrt.dll_sprintf
mov rax, qword [rbp + 0x110]
mov edx, dword [rax + 0x18]
mov rax, qword [rbp + 0xf0]
mov rcx, rax
call fcn.0041767d
sub dword [rbp + 0x124], 1
cmp dword [rbp + 0x124], 0x40
jg 0x419dbc
mov rax, qword [rbp + 0xf0]
mov rcx, rax
call fcn.0044b0e8
jmp 0x419e32
mov rax, qword [rbp + 0x110]
mov edx, dword [rax + 0x18]
mov rax, qword [rbp + 0x110]
mov rax, qword [rax + 8]
mov rcx, rax
call fcn.0041767d
lea rax, [0x004ed450]
mov edx, dword [rax]
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 8
mov dword [rbp + 0xec], eax
jmp 0x419e5b
mov ecx, 0xa
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
lea rax, [0x004e8e48]
mov eax, dword [rax]
cmp dword [rbp + 0xec], eax
jg 0x419e4d
mov dword [rbp + 0x120], 0
jmp 0x419f2a
mov dword [rbp + 0x120], 1
mov dword [rbp + 0x12c], 0
jmp 0x419f07
lea rax, [0x004ed498]
mov rax, qword [rax]
mov edx, dword [rbp + 0x12c]
movsxd rdx, edx
shl rdx, 3
add rax, rdx
mov rcx, rax
call fcn.00443110
lea rax, [0x004ed4a8]
mov rax, qword [rax]
mov edx, dword [rbp + 0x12c]
movsxd rdx, edx
shl rdx, 2
add rax, rdx
mov eax, dword [rax]
cmp eax, 0xffffffff
je 0x419ede
mov dword [rbp + 0x120], 0
lea rax, [0x004ed498]
mov rax, qword [rax]
mov edx, dword [rbp + 0x12c]
movsxd rdx, edx
shl rdx, 3
add rax, rdx
mov rcx, rax
call fcn.004433e0
add dword [rbp + 0x12c], 1
lea rax, [0x004ed450]
mov eax, dword [rax]
cmp dword [rbp + 0x12c], eax
jl 0x419e91
mov ecx, 0xa
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
cmp dword [rbp + 0x120], 0
je 0x419e7b
lea rax, [0x004e8e70]
mov dword [rax], 0
lea rax, [0x004ed470]
mov eax, dword [rax]
lea edx, [rax + 1]
lea rax, [0x004ed470]
mov dword [rax], edx
lea rax, [0x004ed470]
mov eax, dword [rax]
cmp eax, 1
jle 0x419c40
jmp 0x419f86
nop
jmp 0x419f86
nop
jmp 0x419f86
nop
jmp 0x419f86
nop
jmp 0x419f86
nop
jmp 0x419f86
nop
jmp 0x419f86
nop
jmp 0x419f86
nop
jmp 0x419f86
nop
lea rax, [0x004ed480]
mov rax, qword [rax]
mov rcx, rax
call fcn.0044b0e8
lea rax, [0x004e8e88]
mov rax, qword [rax]
mov rcx, rax
call fcn.0044b0e8
mov dword [rbp + 0x12c], 0
jmp 0x419fdf
lea rax, [0x004ed498]
mov rax, qword [rax]
mov edx, dword [rbp + 0x12c]
movsxd rdx, edx
shl rdx, 3
add rax, rdx
mov rcx, rax
call fcn.00443580
add dword [rbp + 0x12c], 1
lea rax, [0x004ed450]
mov eax, dword [rax]
cmp dword [rbp + 0x12c], eax
jl 0x419fb6
mov rax, qword [rbp + 0x108]
mov rcx, rax
call fcn.0044b0e8
mov rax, qword [rbp + 0x100]
mov rcx, rax
call fcn.0044b0e8
lea rax, [0x004ed4a8]
mov rax, qword [rax]
mov rcx, rax
call fcn.0044b0e8
mov dword [rbp + 0x12c], 0
jmp 0x41a0b2
mov dword [rbp + 0x128], 0
jmp 0x41a07a
lea rax, [0x004ed4a0]
mov rax, qword [rax]
mov edx, dword [rbp + 0x12c]
movsxd rdx, edx
shl rdx, 3
add rax, rdx
mov rax, qword [rax]
mov edx, dword [rbp + 0x128]
movsxd rdx, edx
shl rdx, 3
add rax, rdx
mov rax, qword [rax]
mov rcx, rax
call fcn.0044b0e8
add dword [rbp + 0x128], 1
cmp dword [rbp + 0x128], 0x3ff
jle 0x41a03b
lea rax, [0x004ed4a0]
mov rax, qword [rax]
mov edx, dword [rbp + 0x12c]
movsxd rdx, edx
shl rdx, 3
add rax, rdx
mov rax, qword [rax]
mov rcx, rax
call fcn.0044b0e8
add dword [rbp + 0x12c], 1
lea rax, [0x004ed450]
mov eax, dword [rax]
cmp dword [rbp + 0x12c], eax
jl 0x41a02f
lea rax, [0x004ed4a0]
mov rax, qword [rax]
mov rcx, rax
call fcn.0044b0e8
lea rax, [0x004ed440]
mov rax, qword [rax]
mov rcx, rax
call fcn.0044b0e8
lea rax, [0x004ed498]
mov rax, qword [rax]
mov rcx, rax
call fcn.0044b0e8
lea rax, [0x004e8e18]
mov rcx, rax
call fcn.00443580
mov rax, qword [rbp + 0x110]
mov eax, dword [rax + 0x10]
cmp eax, 1
jne 0x41a1e2
mov ecx, 0x7ff
call sub.msvcrt.dll_malloc
mov qword [rbp + 0x118], rax
lea rax, [0x004e8e00]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x118]
mov rcx, rax
call sub.msvcrt.dll_strcpy
lea rdx, [rbp - 0x20]
mov rax, qword [rbp + 0x118]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov rax, qword [rbp + 0x118]
mov rcx, 0xffffffffffffffff
mov rdx, rax
mov eax, 0
mov rdi, rdx
repne scasb al, byte [rdi]
mov rax, rcx
not rax
lea rdx, [rax - 1]
mov rax, qword [rbp + 0x118]
add rax, rdx
mov word [rax], 0x5c
mov rax, qword [rbp + 0x110]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x118]
mov rcx, rax
call sub.msvcrt.dll_strcat
mov rax, qword [rbp + 0x118]
mov rcx, 0xffffffffffffffff
mov rdx, rax
mov eax, 0
mov rdi, rdx
repne scasb al, byte [rdi]
mov rax, rcx
not rax
lea rdx, [rax - 1]
mov rax, qword [rbp + 0x118]
add rax, rdx
mov word [rax], 0x22
jmp 0x41a1e3
nop
jmp 0x41a1e3
nop
mov rax, qword [rbp + 0x110]
mov rax, qword [rax]
mov rcx, rax
call fcn.0044b0e8
mov rax, qword [rbp + 0x110]
mov rax, qword [rax + 8]
mov rcx, rax
call fcn.0044b0e8
mov rax, qword [rbp + 0x110]
mov rcx, rax
call fcn.0044b0e8
mov rax, qword [rbp + 0x110]
mov eax, dword [rax + 0x10]
cmp eax, 1
jne 0x41a252
mov rax, qword [rbp + 0x110]
mov eax, dword [rax + 0x1c]
test eax, eax
jne 0x41a243
mov rax, qword [rbp + 0x118]
mov rcx, rax
call sub.msvcrt.dll_system
mov rax, qword [rbp + 0x118]
mov rcx, rax
call fcn.0044b0e8
lea rax, [0x004ed3d8]
mov rax, qword [rax]
mov rcx, rax
call fcn.0044b0e8
lea rax, [0x004ed3d0]
mov rax, qword [rax]
mov rcx, rax
call fcn.0044b0e8
lea rax, [0x004e8e00]
mov rax, qword [rax]
mov rcx, rax
call fcn.0044b0e8
lea rax, [0x004e8e78]
mov rax, qword [rax]
mov rcx, rax
call fcn.0044b0e8
lea rax, [0x004ed490]
mov rax, qword [rax]
mov rcx, rax
call fcn.0044b0e8
mov eax, 0
add rsp, 0x1b8
pop rbx
pop rsi
pop rdi
pop rbp
ret