Function at 0x40fbd0
Capabilities:
Enumerate gui resources
Get common file path
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x170]
sub rsp, 0x270
mov rax, qword [0x004a6080]
xor rax, rsp
mov qword [rbp + 0x168], rax
xor esi, esi
mov dword [rbp - 0x10], esi
mov qword [0x004a7958], rsi
mov qword [0x004a7690], rsi
mov word [0x004a7960], si
mov word [0x004a7698], si
mov byte [0x004a7962], sil
mov byte [0x004a769a], sil
xorps xmm0, xmm0
xor eax, eax
movups xmmword [0x004a7970], xmm0
movups xmmword [0x004a7980], xmm0
movups xmmword [0x004a7990], xmm0
movups xmmword [0x004a79a0], xmm0
mov byte [0x004a79b0], al
mov dword [0x004a7688], eax
movups xmmword [0x004a76a0], xmm0
mov qword [0x004a76b0], rax
mov dword [0x004a76b8], eax
mov byte [0x004a76bc], al
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
lea rdx, [0x00494cb8]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowTextW]
lea r8, str.qbots_lite_back
xor edx, edx
mov ecx, 0x1f0001
call qword [sym.imp.KERNEL32.dll_OpenMutexW]
mov rbx, rax
xor ecx, ecx
test rax, rax
jne 0x411b5b
lea r8, str.qbots_lite_back
lea edx, [rsi + 1]
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
test rax, rax
jne 0x40fcee
lea r9d, [rsi + 0x10]
lea r8, [0x00494cf8]
lea rdx, [0x00494d10]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rcx, [0x004a76c0]
call fcn.00429590
cmp byte [0x004a78f0], sil
jne 0x40fd28
mov r9d, reloc.WS2_32.dll_recv
lea r8, [0x00494cf8]
lea rdx, [0x00494dc0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea r9, [rbp - 0x10]
xor r8d, r8d
xor edx, edx
lea rcx, [0x004860e0]
call qword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
test eax, eax
js 0x40fd71
mov rdx, qword [rbp - 0x10]
lea rcx, [rbp]
call fcn.00413d80
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
movups xmm0, xmmword [rbp]
movups xmmword [rbp + 0x80], xmm0
movups xmm1, xmmword [rbp + 0x10]
movups xmmword [rbp + 0x90], xmm1
jmp 0x40fd84
lea rdx, [0x00494864]
lea rcx, [rbp + 0x80]
call fcn.00413d80
mov ebx, 0x40000
lea r8, str.qbots_liteconfig.txt
lea rdx, [rbp + 0x80]
lea rcx, [rbp]
call fcn.00415f10
mov rdi, rax
lea rax, [0x004a60e0]
cmp rax, rdi
je 0x40fe2c
mov rdx, qword [reloc.WS2_32.dll_getsockopt]
cmp rdx, 8
jb 0x40fdf1
mov rcx, qword [0x004a60e0]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x40fdec
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x40fe63
mov rcx, r8
call fcn.00480f20
movdqa xmm0, xmmword [0x00496260]
movdqu xmmword [0x004a60f0], xmm0
mov word [0x004a60e0], si
movups xmm0, xmmword [rdi]
movups xmmword [0x004a60e0], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [0x004a60f0], xmm1
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], 7
mov word [rdi], si
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x40fe6f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x40fe6a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x40fe6a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
xor r14b, r14b
mov byte [rsp + 0x21], r14b
xor al, al
mov byte [rsp + 0x20], al
xor r13b, r13b
xor r12b, r12b
xor r15b, r15b
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
movdqa xmm1, xmmword [0x00496260]
movdqu xmmword [rbp + 0x30], xmm1
mov word [rbp + 0x20], si
lea rdx, str.license_fish:
lea rcx, [rbp - 0x60]
call fcn.00413d80
nop
lea r8, [rbp - 0x60]
lea rcx, [rsp + 0x28]
call fcn.00404360
nop
mov rdx, rax
lea rcx, [rbp + 0x148]
call fcn.004051b0
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x40ff13
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x40ff0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x40ff0e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
movdqa xmm0, xmmword [0x00496260]
movdqu xmmword [rsp + 0x38], xmm0
mov word [rsp + 0x28], si
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x40ff69
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x40ff64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x40ff64
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
lea rdx, str.license_demorgan:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rbp]
lea rcx, [rbp - 0x60]
call fcn.00404360
nop
mov rdx, rax
lea rcx, [rbp + 0x128]
call fcn.004051b0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x40ffdb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x40ffd6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x40ffd6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
movdqa xmm0, xmmword [0x00496260]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x60], si
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x41002f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
add byte [r8 - 0x75], r9b
ror dword [rax - 0x7f], 0xfa
add byte [rax], dl
add byte [rax], al
jb 0x41002a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x41002a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
lea rdx, str.license_gym:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rbp]
lea rcx, [rsp + 0x28]
call fcn.00404360
nop
mov rdx, rax
lea rcx, [rbp + 0x108]
call fcn.004051b0
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x4100a4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x41009f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x41009f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
movdqa xmm0, xmmword [0x00496260]
movdqu xmmword [rsp + 0x38], xmm0
mov word [rsp + 0x28], si
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x4100fa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x4100f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x4100f5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
lea rdx, str.license_scheme:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rbp]
lea rcx, [rbp - 0x60]
call fcn.00404360
nop
mov rdx, rax
lea rcx, [rbp + 0xe8]
call fcn.004051b0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x41016c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x410167
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x410167
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
movdqa xmm0, xmmword [0x00496260]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x60], si
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x4101c0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x4101bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x4101bb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
lea rdx, str.license_sewing:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rbp]
lea rcx, [rsp + 0x28]
call fcn.00404360
nop
mov rdx, rax
lea rcx, [rbp + 0xc8]
call fcn.004051b0
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x410235
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x410230
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x410230
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
movdqa xmm0, xmmword [0x00496260]
movdqu xmmword [rsp + 0x38], xmm0
mov word [rsp + 0x28], si
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x41028b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x410286
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x410286
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
lea rdx, str.license_wheel:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rbp]
lea rcx, [rbp - 0x60]
call fcn.00404360
nop
mov rdx, rax
lea rcx, [rbp + 0xa8]
call fcn.004051b0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x4102fd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x4102f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x4102f8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
movdqa xmm0, xmmword [0x00496260]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x60], si
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x410351
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x41034c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x41034c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
lea rdx, [rbp + 0x148]
lea rcx, [rbp]
call fcn.00414360
mov rdx, rax
lea rcx, [0x004a76c0]
call fcn.0042b4f0
cmp byte [0x004a78f0], 0
jne 0x410520
lea rdx, [0x00494864]
lea rcx, [rbp]
call fcn.00413d80
nop
lea rdx, str.expire_fish:
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea r8, [rbp]
lea rdx, [rsp + 0x28]
call fcn.004048e0
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x4103f4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x4103ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x4103ef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
movdqa xmm0, xmmword [0x00496260]
movdqu xmmword [rsp + 0x38], xmm0
mov word [rsp + 0x28], si
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x41044a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x410445
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x410445
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
lea rdx, [0x00494864]
lea rcx, [rbp]
call fcn.00413d80
nop
lea rdx, str.license_fish:
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea r8, [rbp]
lea rdx, [rsp + 0x28]
call fcn.004048e0
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x4104c1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x4104bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x4104bc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
movdqa xmm0, xmmword [0x00496260]
movdqu xmmword [rsp + 0x38], xmm0
mov word [rsp + 0x28], si
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x4106d0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x410516
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x410516
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
jmp 0x4106d0
mov rdi, qword [0x004a7820]
mov rax, qword [0x004a7828]
sub rax, rdi
sar rax, 6
test rax, rax
je 0x411b87
mov rdx, rdi
lea rcx, [rbp + 0x40]
call fcn.00414360
nop
lea rdx, [rdi + 0x20]
lea rcx, [rbp + 0x60]
call fcn.00414360
nop
lea rcx, [rbp + 0x40]
cmp qword [rbp + 0x58], 0x10
cmovae rcx, qword [rbp + 0x40]
mov r8, qword [rbp + 0x50]
cmp r8, 8
jne 0x41062e
lea rdx, str.fish_bot
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x41062e
lea rdx, [rbp + 0x60]
lea rcx, [rbp]
call fcn.00414360
mov rcx, rax
call fcn.00404290
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.00404320
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp - 0x80], xmm1
mov eax, dword [rax + 0x20]
mov dword [rbp - 0x70], eax
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x50]
call fcn.004041f0
nop
mov rdx, rax
lea rcx, [rsp + 0x28]
call fcn.00405310
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.00413ce0
lea rcx, [rsp + 0x28]
call fcn.004034c0
nop
lea rcx, [rsp + 0x50]
call fcn.00414120
lea rdx, str.expire_fish:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rbp + 0x20]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
mov r14b, 1
jmp 0x4106ba
lea rdx, [0x00494864]
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea rdx, str.expire_fish:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rsp + 0x28]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.004034c0
lea rdx, [0x00494864]
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea rdx, str.license_fish:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rsp + 0x28]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.004034c0
lea rcx, [0x004a7820]
call fcn.00413ba0
nop
lea rcx, [rbp + 0x40]
call fcn.00411bd0
lea rdx, [rbp + 0x128]
lea rcx, [rsp + 0x50]
call fcn.00414360
mov rdx, rax
lea rcx, [0x004a76c0]
call fcn.0042b4f0
cmp byte [0x004a78f0], 0
jne 0x41078e
lea rdx, [0x00494864]
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea rdx, str.expire_demorgan:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rsp + 0x28]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.004034c0
lea rdx, [0x00494864]
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea rdx, str.license_demorgan:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rsp + 0x28]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.004034c0
jmp 0x410907
lea rcx, [0x004a7820]
call fcn.00413b70
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.00411b90
nop
lea rdx, str.demorgan_bot
lea rcx, [rbp + 0x40]
call fcn.00415970
test al, al
je 0x410865
lea rdx, [rbp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.00414360
mov rcx, rax
call fcn.00404290
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.00404320
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp - 0x80], xmm1
mov eax, dword [rax + 0x20]
mov dword [rbp - 0x70], eax
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x28]
call fcn.004041f0
nop
mov rdx, rax
lea rcx, [rbp]
call fcn.00405310
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.00413ce0
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.00414120
lea rdx, str.expire_demorgan:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rbp + 0x20]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
mov byte [rsp + 0x21], 1
jmp 0x4108f1
lea rdx, [0x00494864]
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea rdx, str.expire_demorgan:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rsp + 0x28]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.004034c0
lea rdx, [0x00494864]
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea rdx, str.license_demorgan:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rsp + 0x28]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.004034c0
lea rcx, [0x004a7820]
call fcn.00413ba0
nop
lea rcx, [rbp + 0x40]
call fcn.00411bd0
lea rdx, [rbp + 0x108]
lea rcx, [rsp + 0x50]
call fcn.00414360
mov rdx, rax
lea rcx, [0x004a76c0]
call fcn.0042b4f0
cmp byte [0x004a78f0], 0
jne 0x4109c5
lea rdx, [0x00494864]
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea rdx, str.expire_gym:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rsp + 0x28]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.004034c0
lea rdx, [0x00494864]
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea rdx, str.license_gym:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rsp + 0x28]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.004034c0
jmp 0x410b3e
lea rcx, [0x004a7820]
call fcn.00413b70
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.00411b90
nop
lea rdx, str.gym_bot
lea rcx, [rbp + 0x40]
call fcn.00415970
test al, al
je 0x410a9c
lea rdx, [rbp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.00414360
mov rcx, rax
call fcn.00404290
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.00404320
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp - 0x80], xmm1
mov eax, dword [rax + 0x20]
mov dword [rbp - 0x70], eax
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x28]
call fcn.004041f0
nop
mov rdx, rax
lea rcx, [rbp]
call fcn.00405310
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.00413ce0
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.00414120
lea rdx, str.expire_gym:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rbp + 0x20]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
mov byte [rsp + 0x20], 1
jmp 0x410b28
lea rdx, [0x00494864]
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea rdx, str.expire_gym:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rsp + 0x28]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.004034c0
lea rdx, [0x00494864]
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea rdx, str.license_gym:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rsp + 0x28]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.004034c0
lea rcx, [0x004a7820]
call fcn.00413ba0
nop
lea rcx, [rbp + 0x40]
call fcn.00411bd0
lea rdx, [rbp + 0xe8]
lea rcx, [rsp + 0x50]
call fcn.00414360
mov rdx, rax
lea rcx, [0x004a76c0]
call fcn.0042b4f0
cmp byte [0x004a78f0], 0
jne 0x410bfc
lea rdx, [0x00494864]
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea rdx, str.expire_scheme:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rsp + 0x28]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.004034c0
lea rdx, [0x00494864]
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea rdx, str.license_scheme:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rsp + 0x28]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.004034c0
jmp 0x410de9
lea rcx, [0x004a7820]
call fcn.00413b70
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.00411b90
nop
lea rdx, str.sxemi_bot
lea rcx, [rbp + 0x40]
call fcn.00415970
test al, al
je 0x410cd1
lea rdx, [rbp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.00414360
mov rcx, rax
call fcn.00404290
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.00404320
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp - 0x80], xmm1
mov eax, dword [rax + 0x20]
mov dword [rbp - 0x70], eax
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x28]
call fcn.004041f0
nop
mov rdx, rax
lea rcx, [rbp]
call fcn.00405310
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.00413ce0
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.00414120
lea rdx, str.expire_scheme:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rbp + 0x20]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
mov r13b, 1
jmp 0x410d5d
lea rdx, [0x00494864]
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea rdx, str.expire_scheme:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rsp + 0x28]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.004034c0
lea rdx, [0x00494864]
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea rdx, str.license_scheme:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rsp + 0x28]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.004034c0
mov rdi, qword [0x004a7820]
mov rsi, qword [0x004a7828]
cmp rdi, rsi
je 0x410d8f
mov rcx, rdi
call fcn.00411bd0
add rdi, 0x40
cmp rdi, rsi
jne 0x410d70
mov rax, qword [0x004a7820]
mov qword [0x004a7828], rax
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x410dcd
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x410dc8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x410dc8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
movdqa xmm0, xmmword [0x00496270]
movdqa xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x60], 0
lea rcx, [rbp + 0x40]
call fcn.00414120
xor esi, esi
lea rdx, [rbp + 0xc8]
lea rcx, [rsp + 0x50]
call fcn.00414360
mov rdx, rax
lea rcx, [0x004a76c0]
call fcn.0042b4f0
cmp byte [0x004a78f0], 0
jne 0x410ea7
lea rdx, [0x00494864]
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea rdx, str.expire_sewing:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rsp + 0x28]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.004034c0
lea rdx, [0x00494864]
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea rdx, str.license_sewing:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rsp + 0x28]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.004034c0
jmp 0x41101e
lea rcx, [0x004a7820]
call fcn.00413b70
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.00411b90
nop
lea rdx, str.shveya_bot
lea rcx, [rbp + 0x40]
call fcn.00415970
test al, al
je 0x410f7c
lea rdx, [rbp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.00414360
mov rcx, rax
call fcn.00404290
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.00404320
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp - 0x80], xmm1
mov eax, dword [rax + 0x20]
mov dword [rbp - 0x70], eax
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x28]
call fcn.004041f0
nop
mov rdx, rax
lea rcx, [rbp]
call fcn.00405310
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.00413ce0
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.00414120
lea rdx, str.expire_sewing:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rbp + 0x20]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
mov r12b, 1
jmp 0x411008
lea rdx, [0x00494864]
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea rdx, str.expire_sewing:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rsp + 0x28]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.004034c0
lea rdx, [0x00494864]
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea rdx, str.license_sewing:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rsp + 0x28]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.004034c0
lea rcx, [0x004a7820]
call fcn.00413ba0
nop
lea rcx, [rbp + 0x40]
call fcn.00411bd0
lea rdx, [rbp + 0xa8]
lea rcx, [rsp + 0x50]
call fcn.00414360
mov rdx, rax
lea rcx, [0x004a76c0]
call fcn.0042b4f0
cmp byte [0x004a78f0], 0
jne 0x4110dc
lea rdx, [0x00494864]
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea rdx, str.expire_wheel:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rsp + 0x28]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.004034c0
lea rdx, [0x00494864]
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea rdx, str.license_wheel:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rsp + 0x28]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.004034c0
jmp 0x411253
lea rcx, [0x004a7820]
call fcn.00413b70
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.00411b90
nop
lea rdx, str.koleso_bot
lea rcx, [rbp + 0x40]
call fcn.00415970
test al, al
je 0x4111b1
lea rdx, [rbp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.00414360
mov rcx, rax
call fcn.00404290
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.00404320
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp - 0x80], xmm1
mov eax, dword [rax + 0x20]
mov dword [rbp - 0x70], eax
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x28]
call fcn.004041f0
nop
mov rdx, rax
lea rcx, [rbp]
call fcn.00405310
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.00413ce0
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.00414120
lea rdx, str.expire_wheel:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rbp + 0x20]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
mov r15b, 1
jmp 0x41123d
lea rdx, [0x00494864]
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea rdx, str.expire_wheel:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rsp + 0x28]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.004034c0
lea rdx, [0x00494864]
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea rdx, str.license_wheel:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rsp + 0x28]
lea rdx, [rbp]
call fcn.004048e0
nop
lea rcx, [rbp]
call fcn.004034c0
nop
lea rcx, [rsp + 0x28]
call fcn.004034c0
lea rcx, [0x004a7820]
call fcn.00413ba0
nop
lea rcx, [rbp + 0x40]
call fcn.00411bd0
lea rdx, str.true
lea rcx, [rbp]
call fcn.00413d80
nop
lea rdx, str.authorized:
lea rcx, [rsp + 0x28]
call fcn.00413d80
nop
lea r8, [rbp]
lea rdx, [rsp + 0x28]
call fcn.004048e0
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x4112ca
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x4112c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x4112c5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
movdqa xmm0, xmmword [0x00496260]
movdqu xmmword [rsp + 0x38], xmm0
mov word [rsp + 0x28], si
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x411320
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x41131b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x41131b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
test r14b, r14b
movzx r14d, byte [rsp + 0x20]
jne 0x41134f
cmp byte [rsp + 0x21], 0
jne 0x41134f
test r14b, r14b
jne 0x41134f
test r13b, r13b
jne 0x41134f
test r12b, r12b
jne 0x41134f
test r15b, r15b
jne 0x41134f
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea r8, str.APPDATA
lea rdx, [rbp + 0xa0]
lea rcx, [rbp - 8]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__dupenv_s]
test eax, eax
jne 0x4118fe
mov rdx, qword [rbp - 8]
test rdx, rdx
je 0x4118fe
lea rcx, [rbp]
call fcn.00414320
nop
lea r8, str._qbots_lite
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.004156a0
mov rdx, rax
lea rcx, [0x004a60c0]
call fcn.00414180
lea rcx, [rsp + 0x50]
call fcn.00414120
nop
lea rcx, [rbp]
call fcn.00414120
mov rcx, qword [rbp - 8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov byte [rsp + 0x20], Ordinal_50
mov byte [rsp + 0x48], 0x5c
lea rdx, [rbp - 0x10]
call fcn.004140b0
mov rcx, qword [rax]
lea rdx, [rbp - 0x18]
call fcn.004140e0
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x48]
mov rdx, rcx
mov rcx, qword [rax]
call fcn.00415860
call fcn.00405610
mov esi, eax
test eax, eax
je 0x41144d
mov r8d, esi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
je 0x41144d
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.004056c0
mov rdx, rax
lea rcx, [0x004a6100]
call fcn.00413ce0
lea rcx, [rsp + 0x50]
call fcn.004034c0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, rsi
lea rcx, [0x00405760]
call qword [sym.imp.USER32.dll_EnumWindows]
lea rdx, str.qbots_lite
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
xor esi, esi
lea rdi, [0x00494b34]
nop word [rax + rax]
lea rdx, str.process:
lea rcx, [rbp]
call fcn.00413d80
nop
or ebx, 1
mov dword [rbp - 0x10], ebx
lea r8, [rbp]
lea rcx, [rsp + 0x28]
call fcn.00404360
mov r8, rax
or ebx, 2
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x4114b9
mov r8, qword [rax]
cmp rdx, 1
jne 0x4114e3
mov rcx, rdi
sub r8, rdi
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x4114e3
add rcx, 2
sub rdx, 1
jne 0x4114c5
test r15b, r15b
je 0x4114e3
mov dil, 1
jmp 0x4114e6
xor dil, dil
test bl, 2
je 0x411543
and ebx, 0xfffffffd
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x411530
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x41152b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x4118e2
call fcn.00480f20
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], 7
mov word [rsp + 0x28], si
test bl, 1
je 0x41158b
and ebx, 0xfffffffe
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x41158b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x411586
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x4118e9
call fcn.00480f20
test dil, dil
je 0x4115a7
mov rcx, qword [0x004a7640]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
call fcn.0040c720
jmp 0x41146e
lea rdx, str.process:
lea rcx, [rbp]
call fcn.00413d80
nop
or ebx, 4
mov dword [rbp - 0x10], ebx
lea r8, [rbp]
lea rcx, [rsp + 0x28]
call fcn.00404360
mov r8, rax
or ebx, 8
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x4115e0
mov r8, qword [rax]
cmp rdx, 1
jne 0x411611
lea rax, [0x00495088]
mov rcx, rax
sub r8, rax
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x411611
add rcx, 2
sub rdx, 1
jne 0x4115f3
test r12b, r12b
je 0x411611
mov dil, 1
jmp 0x411614
xor dil, dil
test bl, 8
je 0x411671
and ebx, 0xfffffff7
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x41165e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x411659
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x4118f0
call fcn.00480f20
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], 7
mov word [rsp + 0x28], si
test bl, 4
je 0x4116b9
and ebx, 0xfffffffb
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x4116b9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x4116b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x4118f7
call fcn.00480f20
test dil, dil
lea rdi, [0x00494b34]
jne 0x411480
lea rdx, str.process:
lea rcx, [rbp]
call fcn.00413d80
nop
or ebx, 0x10
mov dword [rbp - 0x10], ebx
lea r8, [rbp]
lea rcx, [rsp + 0x50]
call fcn.00404360
mov rcx, rax
or ebx, 0x20
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x411702
mov rcx, qword [rax]
cmp rdx, 1
jne 0x411730
lea r8, [0x00494a24]
sub r8, rcx
movzx eax, word [rcx]
cmp ax, word [rcx + r8]
jne 0x411730
add rcx, 2
sub rdx, 1
jne 0x411712
test r13b, r13b
je 0x411730
mov dil, 1
jmp 0x411733
xor dil, dil
test bl, 0x20
je 0x411746
and ebx, 0xffffffdf
lea rcx, [rsp + 0x50]
call fcn.004034c0
nop
test bl, 0x10
je 0x411757
and ebx, 0xffffffef
lea rcx, [rbp]
call fcn.004034c0
test dil, dil
je 0x411773
mov rcx, qword [0x004a7640]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
call fcn.0040b6d0
jmp 0x41146e
lea rdx, str.process:
lea rcx, [rbp]
call fcn.00413d80
nop
or ebx, 0x40
mov dword [rbp - 0x10], ebx
lea r8, [rbp]
lea rcx, [rsp + 0x50]
call fcn.00404360
bts ebx, 7
lea rdx, [0x0049508c]
mov rcx, rax
call fcn.00415e30
test al, al
je 0x4117b9
test r14b, r14b
je 0x4117b9
mov dil, 1
jmp 0x4117bc
xor dil, dil
test bl, bl
jns 0x4117cf
btr ebx, 7
lea rcx, [rsp + 0x50]
call fcn.004034c0
nop
test bl, 0x40
je 0x4117e0
and ebx, 0xffffffbf
lea rcx, [rbp]
call fcn.004034c0
test dil, dil
lea rdi, [0x00494b34]
jne 0x411480
lea rdx, str.process:
lea rcx, [rbp]
call fcn.00413d80
nop
bts ebx, 8
mov dword [rbp - 0x10], ebx
lea r8, [rbp]
lea rcx, [rsp + 0x50]
call fcn.00404360
bts ebx, 9
lea rdx, reloc.WLDAP32.dll_Ordinal_50
mov rcx, rax
call fcn.00415e30
test al, al
je 0x411839
cmp byte [rsp + 0x21], 0
je 0x411839
mov dil, 1
jmp 0x41183c
xor dil, dil
bt ebx, 9
jae 0x411851
btr ebx, 9
lea rcx, [rsp + 0x50]
call fcn.004034c0
nop
bt ebx, 8
jae 0x411864
btr ebx, 8
lea rcx, [rbp]
call fcn.004034c0
test dil, dil
je 0x411880
mov rcx, qword [0x004a7640]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
call fcn.00406de0
jmp 0x41146e
lea rdx, str.process:
lea rcx, [rbp]
call fcn.00413d80
nop
bts ebx, 0xa
mov dword [rbp - 0x10], ebx
lea r8, [rbp]
lea rcx, [rsp + 0x50]
call fcn.00404360
bts ebx, 0xb
bt ebx, 0xb
jae 0x4118bf
btr ebx, 0xb
lea rcx, [rsp + 0x50]
call fcn.004034c0
nop
bt ebx, 0xa
lea rdi, [0x00494b34]
jae 0x411480
btr ebx, 0xa
lea rcx, [rbp]
call fcn.004034c0
jmp 0x41146e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0x10
jb 0x411943
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x41193d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x41193d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x411988
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x411982
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x411982
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
nop
mov rdx, qword [rbp + 0x100]
cmp rdx, 0x10
jb 0x4119cd
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x4119c7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x4119c7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
nop
mov rdx, qword [rbp + 0x120]
cmp rdx, 0x10
jb 0x411a12
inc rdx
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x411a0c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x411a0c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
nop
mov rdx, qword [rbp + 0x140]
cmp rdx, 0x10
jb 0x411a57
inc rdx
mov rcx, qword [rbp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x411a51
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x411a51
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
nop
mov rdx, qword [rbp + 0x160]
cmp rdx, 0x10
jb 0x411a9c
inc rdx
mov rcx, qword [rbp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x411a96
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x411a96
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x411ae0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x411ada
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x411ada
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 8
jb 0x411b29
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x411b24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x411b24
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
xor eax, eax
mov rcx, qword [rbp + 0x168]
xor rcx, rsp
call fcn.00480f00
lea r11, [rsp + 0x270]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov r9d, reloc.WS2_32.dll_recv
lea r8, [0x00494d70]
lea rdx, [0x00494d88]
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.00414c00
nop
int3