Function at 0x408020
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x68
lea rcx, [0x0053a4f0]
mov edx, 0x3f8
call fcn.0040cc20
mov edx, 0x56f25148
lea rcx, [0x0052d0c0]
mov rsi, rax
lea rax, [0x0053a4b0]
mov qword [rsi], rax
call fcn.0040cb90
mov edx, 0x7a427848
mov rcx, rax
call fcn.0040cde0
xor r8d, r8d
xor edx, edx
mov ecx, 0x40000
call qword [0x0053a4a8]
mov r8d, 0x1000
mov edx, 8
mov rcx, rax
call qword [0x0053a4a0]
mov edx, 0x2775f448
mov dword [rsp + 0x38], 0
lea rbp, [rax + 0x17]
mov rbx, rax
mov qword [0x0053a498], rax
lea rdi, [rax + 0x2e]
mov qword [0x0053a490], rbp
lea rcx, [0x0052d080]
mov qword [0x0053a488], rdi
call fcn.0040cb90
mov edx, 0x3ea35948
mov rcx, rax
call fcn.0040cde0
lea rcx, section..rdata
test rax, rax
je 0x407cb6
cmp qword [rax], 0
lea rdx, [rax + 0x10]
cmovne rcx, rdx
mov rdx, rbx
call fcn.00403500
mov edx, 0x66af8d48
lea rcx, [0x0052d040]
call fcn.0040cb90
mov edx, 0x63258c48
mov rcx, rax
call fcn.0040cde0
lea rcx, section..rdata
test rax, rax
je 0x407cf4
cmp qword [rax], 0
lea rdx, [rax + 0x10]
cmovne rcx, rdx
mov rdx, rbp
call fcn.00403500
mov edx, 0x6e5b6848
lea rcx, [0x0052d000]
call fcn.0040cb90
mov edx, 0x5c1bd548
mov rcx, rax
call fcn.0040cde0
lea rcx, section..rdata
test rax, rax
je 0x407d32
cmp qword [rax], 0
lea rdx, [rax + 0x10]
cmovne rcx, rdx
mov rdx, rdi
call fcn.00403500
mov edx, 0x1e52948
lea rcx, [0x0052cfd0]
call fcn.0040cb90
mov edx, 0x47d0c048
mov rcx, rax
call fcn.0040cde0
lea rdx, [rbx + 0xa1]
lea rcx, section..rdata
test rax, rax
je 0x407d77
cmp qword [rax], 0
lea r8, [rax + 0x10]
cmovne rcx, r8
call fcn.00403500
mov edx, 0x43bffc48
lea rcx, [0x0052cfa0]
call fcn.0040cb90
mov edx, 0x559eb148
lea rdi, [rbx + 0x142]
mov rcx, rax
call fcn.0040cde0
lea rdx, [rbx + 0x12b]
lea rcx, section..rdata
test rax, rax
je 0x407dc0
cmp qword [rax], 0
lea r8, [rax + 0x10]
cmovne rcx, r8
call fcn.00403500
mov edx, 0x10d11448
lea rcx, [0x0052cf60]
call fcn.0040cde0
lea rcx, section..rdata
test rax, rax
je 0x407dee
cmp qword [rax], 0
lea rdx, [rax + 0x10]
cmovne rcx, rdx
mov rdx, rdi
call fcn.00403500
lea r9, [rsp + 0x38]
mov r8d, 0x20
mov rcx, rbx
mov edx, 0x17
call qword [0x0053a480]
mov edx, 0x4122ed48
lea rcx, [0x0052cda0]
call fcn.0040cde0
mov edx, 0x51fb8848
lea rcx, [0x0052ccc0]
call fcn.0040cde0
mov r8d, 0x3c8
xor edx, edx
lea rcx, [rsi + 0x30]
call sub.msvcrt.dll_memset
mov edx, 0x56f78948
mov qword [rsi + 0x10], 0
lea rcx, [0x0052cb00]
mov qword [rsi + 0x18], 0
mov qword [rsi + 0x20], 0
mov qword [rsi + 0x28], 0
call fcn.0040cde0
mov edx, 0x2fad1c48
lea rcx, [0x0052ca60]
call fcn.0040cde0
mov edx, 0x55838548
lea rcx, [0x0052c8a0]
call fcn.0040cde0
mov edx, 0x660ad048
lea rcx, [0x0052c700]
call fcn.0040cde0
mov edx, 0x6b05e148
lea rcx, [0x0052c640]
call fcn.0040cde0
call fcn.00407820
mov edx, 0x4bf2a048
xor ecx, ecx
call fcn.0040cb90
mov rcx, rax
call fcn.00411870
mov ecx, 0x5dc
call qword [0x0053a478]
call fcn.00405920
mov edx, 0x1a92b848
lea rcx, [0x0052c4e0]
call fcn.0040cde0
mov edx, 0x1cf81948
lea rcx, [0x0052c340]
call fcn.0040cde0
mov edx, 0x628fcc48
lea rcx, [0x0052c2c0]
call fcn.0040cde0
mov rbx, qword [0x00533390]
xor eax, eax
test rbx, rbx
je 0x407f24
mov rax, qword [rbx]
lea rdi, [rsp + 0x48]
xor r8d, r8d
mov rcx, 0xffffffffffffffff
mov qword [rsp + 0x40], 0
lea rdx, [rsp + 0x40]
mov r9, rdi
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x3c], 4
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x1000
call qword [0x0053a488]
lea rax, [rsp + 0x50]
mov rdx, qword [rsp + 0x40]
mov rcx, 0xffffffffffffffff
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x48]
lea r8, [rbx + 0x10]
mov qword [rsp + 0x50], 0
lea r9, [rax - 1]
call qword [0x0053a490]
mov rax, qword [rsp + 0x40]
mov rcx, rsi
mov qword [0x0053a470], rax
mov qword [0x0053a468], rax
call fcn.00404180
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x58]
mov r8, rdi
mov r9d, 0x20
mov rcx, 0xffffffffffffffff
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x3c]
mov qword [rsp + 0x20], rax
call qword [0x0053a498]
test eax, eax
jne 0x408008
call qword [rsp + 0x40]
mov edx, 0xffffffff
mov rcx, 0xffffffffffffffff
call qword [0x0053a460]
xor eax, eax
add rsp, 0x68
pop rbx
pop rsi
pop rdi
pop rbp
ret
mov ecx, 1
call sub.msvcrt.dll_exit
nop
nop dword [rax]
nop word cs:[rax + rax]
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x50
mov rax, qword [0x00548120]
cmp rax, 0xdab
jg 0x408d8d
mov rcx, qword [0x0052fb70]
lea rdx, [0x005413c0]
mov qword [rdx + rax*8], rcx
lea rcx, [rax + 1]
cmp rcx, 0xdac
mov qword [0x00548120], rcx
je 0x408d8d
mov r8, qword [0x0052fb80]
mov qword [rdx + rcx*8], r8
lea rcx, [rax + 2]
cmp rcx, 0xdac
mov qword [0x00548120], rcx
je 0x408d8d
mov r8, qword [0x0052fb90]
mov qword [rdx + rcx*8], r8
lea rcx, [rax + 3]
cmp rcx, 0xdac
mov qword [0x00548120], rcx
je 0x408d8d
mov r8, qword [0x0052fba0]
mov qword [rdx + rcx*8], r8
lea rcx, [rax + 4]
cmp rcx, 0xdac
mov qword [0x00548120], rcx
je 0x408d8d
mov r8, qword [0x0052fbb0]
mov qword [rdx + rcx*8], r8
lea rcx, [rax + 5]
cmp rcx, 0xdac
mov qword [0x00548120], rcx
je 0x408d8d
mov r8, qword [0x0052fbc0]
mov qword [rdx + rcx*8], r8
lea rcx, [rax + 6]
cmp rcx, 0xdac
mov qword [0x00548120], rcx
je 0x408d8d
mov r8, qword [0x0052fbd0]
mov qword [rdx + rcx*8], r8
lea rcx, [rax + 7]
cmp rcx, 0xdac
mov qword [0x00548120], rcx
je 0x408d8d
mov r8, qword [0x0052fbe0]
mov qword [rdx + rcx*8], r8
lea rcx, [rax + 8]
cmp rcx, 0xdac
mov qword [0x00548120], rcx
je 0x408d8d
mov r8, qword [0x0052fbf0]
mov qword [rdx + rcx*8], r8
lea rcx, [rax + 9]
cmp rcx, 0xdac
mov qword [0x00548120], rcx
je 0x408d8d
mov r8, qword [0x0052fc50]
mov qword [rdx + rcx*8], r8
lea rcx, [rax + 0xa]
cmp rcx, 0xdac
mov qword [0x00548120], rcx
je 0x408d8d
lea rbx, [0x004058e0]
mov qword [rdx + rcx*8], rbx
lea rcx, [rax + 0xb]
cmp rcx, 0xdac
mov qword [0x00548120], rcx
je 0x408d8d
lea rdi, [0x004058d0]
add rax, 0xc
mov qword [rsp + 0x38], 0
mov qword [rdx + rcx*8], rdi
lea rbx, [rsp + 0x40]
lea rcx, [0x00536260]
mov qword [0x00548120], rax
call qword [0x00539fe8]
mov rcx, rbx
mov qword [rsp + 0x40], 0
movsxd rdx, eax
call fcn.0040e940
mov rax, qword [rsp + 0x40]
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x38], rax
call fcn.00407680
mov eax, dword [0x00536264]
cmp eax, 6
je 0x4089a0
cmp eax, 5
jg 0x40823c
mov dword [0x0053a530], 1
mov r8d, 0x3000
mov r9d, 4
mov edx, 0x3eab4
lea rsi, str.A7_C2_BC_D0_1E_3C
xor ecx, ecx
call qword [0x00536960]
lea rbp, [rsi + 0x538f0]
mov r8, rax
mov qword [0x00536248], rax
mov qword [0x00536240], rax
lea rdi, [0x00536238]
jmp 0x408290
add rsi, 8
cmp rbp, rsi
je 0x4082b1
mov r8, qword [0x00536240]
mov rdx, rdi
mov rcx, qword [rsi]
call qword [0x00539fd8]
test eax, eax
jne 0x408280
add qword [0x00536240], 6
add rsi, 8
cmp rbp, rsi
jne 0x408289
lea rcx, [0x0052bf60]
mov edx, 0x5ce7ec48
call fcn.0040cde0
lea rcx, [0x00533088]
mov rdx, rax
call fcn.0040d970
mov rsi, qword [0x00533080]
mov rcx, qword [0x00533088]
call fcn.0040aaf0
test rsi, rsi
mov qword [0x00533080], rax
je 0x40830a
mov rax, qword [rsi - 0x10]
lea rdx, [rsi - 0x10]
sub rax, 8
cmp rax, 7
mov qword [rsi - 0x10], rax
jbe 0x4089d0
lea rcx, [0x00533250]
mov edx, 0x3eab4
call fcn.004103b0
lea rcx, [0x00533390]
mov rdx, rax
call fcn.0040d970
mov edx, 0x3eab4
lea rcx, [0x00533250]
call fcn.004103b0
lea rcx, [0x00533078]
mov rdx, rax
call fcn.0040d970
mov rcx, qword [0x00533390]
xor r8d, r8d
test rcx, rcx
je 0x408410
mov rax, qword [rcx]
test al, 0xf
mov r8, rax
je 0x408410
lea rcx, [0x00533250]
cqo
shr rdx, 0x3c
add rax, rdx
and eax, 0xf
sub rdx, rax
add rdx, 0x10
call fcn.004103b0
mov rcx, qword [0x00533390]
mov rdx, rax
call fcn.00410b90
lea rcx, [0x00533390]
mov rdx, rax
call fcn.0040d970
mov rax, qword [0x00533078]
mov edx, 0x10
test rax, rax
je 0x4083d3
mov rax, qword [rax]
mov rcx, rax
sar rcx, 0x3f
shr rcx, 0x3c
add rax, rcx
and eax, 0xf
sub rax, rcx
sub rdx, rax
lea rcx, [0x00533250]
call fcn.004103b0
mov rcx, qword [0x00533078]
mov rdx, rax
call fcn.00410b90
lea rcx, [0x00533078]
mov rdx, rax
call fcn.0040d970
mov rcx, qword [0x00533390]
test rcx, rcx
je 0x408d92
mov r8, qword [rcx]
mov rdx, qword [0x00536248]
add rcx, 0x10
call sub.msvcrt.dll_memmove
mov edx, 0x730ba948
lea rcx, [0x0052bea0]
call fcn.0040cb90
mov edx, 0x2aaae848
mov rcx, rax
call fcn.0040cde0
lea rcx, [0x00533070]
mov rdx, rax
call fcn.0040d970
mov edx, 0x3104a548
lea rcx, [0x0052be20]
call fcn.0040cb90
mov edx, 0x635b7c48
mov rcx, rax
call fcn.0040cde0
lea rcx, [0x00533068]
mov rdx, rax
call fcn.0040d970
mov edx, 0x72503048
lea rcx, [0x0052bd80]
call fcn.0040cb90
mov edx, 0x3104a548
mov rcx, rax
call fcn.0040cde0
lea rcx, [0x00533060]
mov rdx, rax
call fcn.0040d970
mov edx, 0x1a760448
lea rcx, [0x0052bcc0]
call fcn.0040cb90
mov edx, 0x3c3c0148
mov rcx, rax
call fcn.0040cde0
lea rcx, [0x00533058]
mov rdx, rax
call fcn.0040d970
lea rcx, [0x0052c260]
call fcn.0040d5b0
xor edx, edx
mov rcx, rax
call fcn.0040d000
lea rdx, str.LdrLoadDll
mov rcx, rax
call fcn.00402e20
lea rcx, [0x0052c260]
mov qword [0x00533398], rax
call fcn.0040d5b0
xor edx, edx
mov rcx, rax
call fcn.0040d000
lea rdx, str.RtlInitUnicodeString
mov rcx, rax
call fcn.00402e20
mov edx, 0x1b084048
lea rcx, [0x0052bc20]
mov qword [0x005333a0], rax
call fcn.0040cb90
mov edx, 0x7cb65548
mov rcx, rax
call fcn.0040cde0
lea rcx, [0x00533050]
mov rdx, rax
call fcn.0040d970
call fcn.004016a0
mov rcx, rax
call fcn.00402a00
lea rdx, str.GetCurrentProcessId
mov rcx, rax
call fcn.00403190
mov qword [0x00536230], rax
call fcn.004016a0
mov rcx, rax
call fcn.00402a00
lea rdx, str.VirtualProtect
mov rcx, rax
call fcn.00403190
mov qword [0x0053a480], rax
call fcn.004016a0
mov rcx, rax
call fcn.00402a00
lea rdx, str.OpenProcess
mov rcx, rax
call fcn.00403190
call fcn.004016a0
mov rcx, rax
call fcn.00402a00
lea rdx, str.GetProcessHeap
mov rcx, rax
call fcn.00403190
mov qword [0x00536228], rax
call fcn.004016a0
mov rcx, rax
call fcn.00402a00
lea rdx, str.GetProcAddress
mov rcx, rax
call fcn.00403190
lea rcx, [0x0052c260]
mov qword [0x00536220], rax
call fcn.0040d5b0
mov rcx, rax
call fcn.00402a00
lea rdx, str.RtlAddVectoredExceptionHandler
mov rcx, rax
call fcn.00402e20
mov qword [0x00536218], rax
call fcn.004016a0
mov rcx, rax
call fcn.00402a00
lea rdx, str.GetModuleHandleA
mov rcx, rax
call fcn.00403190
mov qword [0x00536210], rax
call fcn.004016a0
mov rcx, rax
call fcn.00402a00
lea rdx, str.GetThreadContext
mov rcx, rax
call fcn.00403190
mov qword [0x00536208], rax
call fcn.004016a0
mov rcx, rax
call fcn.00402a00
lea rdx, str.SetThreadContext
mov rcx, rax
call fcn.00403190
mov qword [0x00536200], rax
call fcn.004016a0
mov rcx, rax
call fcn.00402a00
lea rdx, str.CloseHandle
mov rcx, rax
call fcn.00403190
mov qword [0x005361f8], rax
call fcn.004016a0
mov rcx, rax
call fcn.00402a00
lea rdx, str.OpenThread
mov rcx, rax
call fcn.00403190
mov qword [0x005361f0], rax
call fcn.004016a0
mov rcx, rax
call fcn.00402a00
lea rdx, str.GetCurrentThreadId
mov rcx, rax
call fcn.00403190
call fcn.004016a0
mov rcx, rax
call fcn.00402a00
lea rdx, str.WaitForSingleObject
mov rcx, rax
call fcn.00403190
mov qword [0x0053a460], rax
call fcn.004016a0
mov rcx, rax
call fcn.00402a00
lea rdx, str.MultiByteToWideChar
mov rcx, rax
call fcn.00403190
call fcn.004016a0
mov rcx, rax
call fcn.00402a00
lea rdx, str.Sleep
mov rcx, rax
call fcn.00403190
mov qword [0x0053a478], rax
call fcn.004016a0
mov rcx, rax
call fcn.00402a00
lea rdx, str.GetTickCount
mov rcx, rax
call fcn.00403190
mov qword [0x005361e8], rax
call fcn.004016a0
mov rcx, rax
call fcn.00402a00
lea rdx, str.CreateFileA
mov rcx, rax
call fcn.00403190
mov qword [0x005361e0], rax
call fcn.004016a0
mov rcx, rax
call fcn.00402a00
lea rdx, str.GetFileSize
mov rcx, rax
call fcn.00403190
lea rcx, [0x0052c260]
mov qword [0x005361d8], rax
call fcn.0040d5b0
xor edx, edx
mov rcx, rax
call fcn.0040d000
lea rdx, str.RtlAllocateHeap
mov rcx, rax
call fcn.00402e20
mov qword [0x005361d0], rax
call fcn.004016a0
mov rcx, rax
call fcn.00402a00
lea rdx, str.ReadFile
mov rcx, rax
call fcn.00403190
mov edx, 0x8d20d48
lea rcx, [0x0052d2c0]
mov qword [0x005361c8], rax
call fcn.0040cb90
mov edx, 0x7c597448
mov rcx, rax
call fcn.0040cde0
mov rax, qword gs:[0x60]
cmp byte [rax + 2], 0
jne 0x408970
call qword [0x00536228]
mov rsi, rax
call qword [0x00536228]
cmp dword [rsi + 0x70], 2
jne 0x4089f0
mov eax, dword [rax + 0x74]
test eax, eax
jne 0x4089f0
call fcn.0040d9c0
test al, al
je 0x40890b
lea rdx, [0x0040a2d0]
mov ecx, 1
call qword [0x00536958]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x80000003
call qword [0x00536950]
lea rcx, [0x0040a2d0]
call qword [0x00536948]
lea rcx, [0x0052bc00]
mov edx, 0x13661848
call fcn.0040cb90
xor ecx, ecx
mov rsi, rax
mov rax, qword [0x00533088]
test rax, rax
je 0x4088c9
mov rcx, qword [rax]
test rsi, rsi
je 0x408d70
add rcx, qword [rsi]
call fcn.0040cda0
mov rdx, qword [0x00533088]
mov rdi, rax
test rdx, rdx
je 0x4088f1
mov rcx, rax
call fcn.004077e0
mov rdx, rsi
mov rcx, rdi
call fcn.004077e0
lea rcx, [0x00533080]
mov rdx, rdi
call fcn.0040d970
lea rcx, [0x0052bba0]
mov edx, 0x6d022c48
call fcn.0040cb90
mov edx, 0x3aeedd48
mov rcx, rax
call fcn.0040cde0
lea rcx, [0x00533048]
mov rdx, rax
call fcn.0040d970
call qword [0x005361e8]
mov ecx, 0x5dc
mov esi, eax
call qword [0x0053a478]
call qword [0x005361e8]
sub eax, esi
cmp eax, 0x513
jg 0x408a00
xor ecx, ecx
call sub.msvcrt.dll_exit
nop
nop word cs:[rax + rax]
lea rcx, [0x0052b660]
mov edx, 0x7bf52448
mov qword [rsp + 0x40], 0
call fcn.0040cb90
mov rcx, rbx
mov qword [rsp + 0x40], rax
call fcn.00407680
xor ecx, ecx
call sub.msvcrt.dll_exit
nop
mov eax, dword [0x00536268]
cmp eax, 2
je 0x408232
cmp eax, 3
je 0x408232
test eax, eax
je 0x408232
cmp eax, 1
je 0x408232
jmp 0x40823c
lea rcx, [0x005335b8]
call fcn.0040d8b0
jmp 0x40830a
mov ecx, 1
call sub.msvcrt.dll_exit
nop word [rax + rax]
lea rcx, [0x0052b680]
mov edx, 0x626bb548
call fcn.0040cb90
xor ecx, ecx
mov rsi, rax
mov rax, qword [0x00533080]
test rax, rax
je 0x408a25
mov rcx, qword [rax]
test rsi, rsi
je 0x408d50
add rcx, qword [rsi]
call fcn.0040cda0
mov rdx, qword [0x00533080]
mov rdi, rax
test rdx, rdx
je 0x408a4d
mov rcx, rax
call fcn.004077e0
mov rdx, rsi
mov rcx, rdi
call fcn.004077e0
lea rcx, [0x00533080]
mov rdx, rdi
call fcn.0040d970
mov edx, 0x378e6048
lea rcx, [0x0052b720]
call fcn.0040cb90
mov edx, 0xe065848
mov rcx, rax
call fcn.0040cde0
mov rcx, rax
call fcn.0040e6f0
mov rcx, rax
call qword [0x00539fc8]
mov edx, 0x3d7b448
lea rcx, [0x0052b6e0]
call fcn.0040cb90
mov edx, 0x173c6c48
mov rcx, rax
call fcn.0040cde0
mov edx, 0x5490cd48
lea rcx, [0x0052b6a0]
mov rsi, rax
call fcn.0040cb90
mov edx, 0x5c1e7548
mov rcx, rax
call fcn.0040cde0
mov rcx, rsi
mov rdi, rax
call fcn.0040e6f0
mov rcx, rax
call qword [0x00539fc8]
cmp eax, 0xffffffff
je 0x408d30
xor edx, edx
mov ecx, 0x1000
movabs r8, 0xffffffff1
call qword [0x00539fc0]
test rax, rax
jne 0x408cb0
lea rdi, [rsp + 0x20]
movabs rsi, 0x112e0be826d694b3
mov rcx, rdi
call fcn.0040ac60
mov rbp, qword [rsp + 0x20]
mov r12, qword [rsp + 0x28]
call fcn.00406a00
mov rcx, rdi
call fcn.0040ac60
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x48], 0
mov r8, qword [rsp + 0x20]
sub rcx, r12
sub r8, rbp
jmp 0x408b85
call fcn.00406a00
mov rcx, rdi
call fcn.0040ac60
mov rcx, qword [rsp + 0x28]
mov r8, qword [rsp + 0x20]
mov qword [rbx + 8], 0
sub rcx, r12
sub r8, rbp
mov rax, rcx
imul rsi
mov rax, rcx
sar rax, 0x3f
sar rdx, 0x1a
sub rdx, rax
add r8, rdx
imul rdx, rdx, 0x3b9aca00
sub rcx, rdx
shr rcx, 0x3f
sub r8, rcx
test r8, r8
js 0x408b60
cmp r8, 9
jle 0x408b60
lea rcx, [0x0052ba20]
mov edx, 0x747dbc48
call fcn.0040cb90
mov edx, 0x2775f448
mov rcx, rax
call fcn.0040cde0
lea rcx, [0x005361c0]
mov rdx, rax
call fcn.0040d970
mov edx, 0x55db4c48
lea rcx, [0x0052ba00]
call fcn.0040cb90
mov edx, 0x6088b048
mov rcx, rax
call fcn.0040cde0
lea rcx, section..rdata
test rax, rax
je 0x408c1b
cmp qword [rax], 0
lea rdx, [rax + 0x10]
cmovne rcx, rdx
call qword [0x00536210]
mov edx, 0x70391548
lea rcx, [0x0052b9c0]
mov rbx, rax
call fcn.0040cb90
mov edx, 0x3f2d8148
mov rcx, rax
call fcn.0040cde0
lea rdx, section..rdata
test rax, rax
je 0x408c5a
cmp qword [rax], 0
lea rcx, [rax + 0x10]
cmovne rdx, rcx
mov rcx, rbx
call qword [0x00536220]
mov qword [0x005361b8], rax
call fcn.00407bf0
call fcn.00407bf0
mov edx, 0x6f3a2548
lea rcx, [0x0052b7a0]
call fcn.0040cb90
mov edx, 0xe1ded48
mov rcx, rax
call fcn.0040cde0
lea rcx, [0x005361b0]
mov rdx, rax
call fcn.0040d970
nop
add rsp, 0x50
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
lea rcx, [0x0052b780]
mov edx, 0x6bc86948
call fcn.0040cb90
mov edx, 0x56f25148
mov rcx, rax
call fcn.0040cde0
lea rcx, [0x00533088]
mov rdx, rax
call fcn.0040d970
mov rsi, qword [0x00533080]
mov rcx, qword [0x00533088]
call fcn.0040aaf0
test rsi, rsi
mov qword [0x00533080], rax
je 0x408b12
mov rax, qword [rsi - 0x10]
lea rdx, [rsi - 0x10]
sub rax, 8
cmp rax, 7
mov qword [rsi - 0x10], rax
ja 0x408b12
lea rcx, [0x005335b8]
call fcn.0040d8b0
jmp 0x408b12
mov rcx, rdi
call fcn.0040e6f0
mov rcx, rax
call qword [0x00539fc8]
jmp 0x408af2
call fcn.0040cda0
mov rdx, qword [0x00533080]
mov rdi, rax
test rdx, rdx
jne 0x408a50
jmp 0x408a58
call fcn.0040cda0
mov rdx, qword [0x00533088]
mov rdi, rax
test rdx, rdx
jne 0x4088f4
jmp 0x4088fc
call fcn.0040af30
xor r8d, r8d
jmp 0x408410