Function at 0x48597b
Capabilities:
Create thread

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x20
push rax
push qword [rbp + 0x18]
push qword [rbp + 0x10]
push 9
push 0x70df4e
push 9
call fcn.00512441
pop rcx
cmp eax, 0
jne 0x4859dd
push 0x104
push 0x9d6130
push 6
push 0x70f278
imul eax, dword [rbp + 0x18], 2
mov dword [rbp - 8], eax
mov rax, qword [rbp + 0x10]
mov qword [rbp - 0x10], rax
push 1
lea rax, [rbp - 0x10]
push rax
call fcn.00402463
mov byte [0x009d6234], 1
call fcn.0042453e
leave
ret 0x10
push rax
push qword [rbp + 0x18]
push qword [rbp + 0x10]
push 7
push str.http:___.240s
push 7
call fcn.00512441
pop rcx
cmp eax, 0
je 0x485a17
push rax
push qword [rbp + 0x18]
push qword [rbp + 0x10]
push 8
push str.https:__system32:
push 8
call fcn.00512441
pop rcx
cmp eax, 0
je 0x485a17
leave
ret 0x10
push qword [rbp + 0x18]
push qword [rbp + 0x10]
call fcn.0045185b
mov dword [rbp - 8], eax
mov dword [rbp - 4], 0
jmp 0x485a71
mov eax, dword [rbp - 4]
cmp eax, dword [rbp + 0x18]
jae 0x485b5c
mov rbx, qword [rbp + 0x10]
movzx eax, word [rbx + rax*2]
mov word [rbp - 0xa], ax
movzx eax, word [rbp - 0xa]
cmp eax, 0x5c
je 0x485a6a
movzx eax, word [rbp - 0xa]
cmp eax, 0x22
je 0x485a6a
movzx eax, word [rbp - 0xa]
cmp eax, 0x20
jbe 0x485a6a
movzx eax, word [rbp - 0xa]
cmp eax, 0x7e
jbe 0x485a6e
leave
ret 0x10
inc dword [rbp - 4]
mov eax, dword [rbp - 4]
cmp eax, dword [rbp - 8]
jl 0x485a2e
push qword [rbp + 0x18]
push qword [rbp + 0x10]
push 8
push 0x70f290
call fcn.00512582
cmp eax, 0
jne 0x485a94
leave
ret 0x10
push qword [rbp + 0x18]
push qword [rbp + 0x10]
push 2
push 0x70f2a0
call fcn.0047d081
cmp eax, 0
jne 0x485aaf
leave
ret 0x10
push qword [rbp + 0x18]
push qword [rbp + 0x10]
call fcn.0045185b
mov dword [rbp - 4], eax
mov eax, dword [rbp - 4]
add eax, eax
add eax, 2
mov dword [rbp - 8], eax
push rax
push qword [rbp - 8]
call fcn.00482d30
pop rcx
mov qword [rbp - 0x18], rax
mov eax, dword [rbp - 4]
mov dword [rbp - 0x1c], eax
mov eax, dword [rbp + 0x18]
sub eax, dword [rbp - 0x1c]
jb 0x485b5e
mov rax, qword [rbp + 0x10]
mov ebx, dword [rbp - 4]
cmp ebx, dword [rbp - 0x1c]
jne 0x485b5e
shl ebx, 1
mov r8d, ebx
mov rdx, rax
mov rcx, qword [rbp - 0x18]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlMoveMemory]
add rsp, 0x20
mov rax, qword [rbp - 0x18]
movsxd rbx, dword [rbp - 4]
mov word [rax + rbx*2], 0
push 0
push 0
mov r9, qword [rbp - 0x18]
mov r8d, 0x5126d5
xor edx, edx
xor ecx, ecx
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_CreateThread]
add rsp, 0x30
test rax, rax
je 0x485b53
mov rcx, rax
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
add rsp, 0x20
mov eax, 0xffffffff
not eax
mov dword [rbp - 0xc], eax
leave
ret 0x10
int 5
int 5
push rbp
mov rbp, rsp
sub rsp, 0x110
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 4]
cmp eax, 0x1e
ja case.0x485b7b.4
jmp qword [rax*8 + 0x70f2b0]
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x487010
shl eax, 4
mov ebx, dword [rax + 0x70f408]
push rbx
push qword [rax + 0x70f400]
call fcn.0047b409
push rax
push 0
call fcn.004776de
pop rcx
push rax
push 0
call fcn.0047d3f3
pop rcx
push rax
push 0x14
call fcn.00477717
pop rcx
push 0x64
push 0xa
call fcn.004774ca
push 0x140
push 0x24c
call fcn.00477615
push rax
push 1
call fcn.0050e9dc
pop rcx
lea rcx, [rbp - 0x38]
mov edx, 0x2c
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlZeroMemory]
add rsp, 0x20
push 0x20
lea rax, [rbp - 0x38]
push rax
push 6
push str.Tahoma
call fcn.0040aecf
mov dword [rbp - 0x18], 0x10
mov dword [rbp - 0x10], 0xa0a0a0
push rax
lea rax, [rbp - 0x38]
push rax
call fcn.0047b49a
pop rcx
push rax
push 0x4e4e4e
call fcn.0047b475
pop rcx
push rax
push 0x6fbbe0
call fcn.00477750
pop rcx
push rax
push 0x3e3e3e
call fcn.004777bd
pop rcx
lea rcx, [rbp - 0x38]
mov edx, 0x2c
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlZeroMemory]
add rsp, 0x20
push 0x20
lea rax, [rbp - 0x38]
push rax
push 5
push str.Arial_Black
call fcn.0040aecf
mov dword [rbp - 0x18], 0x10
mov dword [rbp - 0x10], 0xa0a0a0
push rax
lea rax, [rbp - 0x38]
push rax
call fcn.004777e2
pop rcx
mov dword [rbp - 4], 0xa
mov dword [rbp - 8], 0x1c
push rax
push 0xa
push qword [rbp - 4]
push 0xb4
push 0x14
push 0x64
call fcn.0047786a
pop rcx
push 0xd2
mov eax, dword [rbp - 4]
sub eax, 2
push rax
push 0x5a
push 0x14
push 0x12
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x487012
shl eax, 4
mov ebx, dword [rax + 0x70f468]
push rbx
push qword [rax + 0x70f460]
push 0x6e
call fcn.00512781
mov eax, dword [rbp - 8]
add dword [rbp - 4], eax
push rax
push 0xa
push qword [rbp - 4]
push 0xfa
push 0x14
push 0x96
call fcn.0047786a
pop rcx
mov eax, dword [rbp - 8]
add dword [rbp - 4], eax
push rax
push 0xa
push qword [rbp - 4]
push 0xeb
push 0x14
push 0xc8
call fcn.0047786a
pop rcx
push rax
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x487014
shl eax, 4
mov ebx, dword [rax + 0x70f528]
push rbx
push qword [rax + 0x70f520]
push 0xc8
call fcn.004779e1
pop rcx
push rax
push 0xf5
mov eax, dword [rbp - 4]
sub eax, 2
push rax
push 0x41
push 0x14
push 0x18
push 0xf
push 5
push 9
push 0xd2
call fcn.0047b508
pop rcx
mov dword [rbp - 0x3c], 0
jmp 0x485de2
push 0x40
lea rax, [rbp - 0x88]
push rax
push 4
push 0x6fa680
mov eax, dword [rbp - 0x3c]
cmp eax, 9
jae 0x487016
mov dword [rbp - 0x90], 2
lea rax, [rax*2 + 0x70f550]
mov qword [rbp - 0x98], rax
push 1
lea rax, [rbp - 0x98]
push rax
call fcn.00402463
push rax
push 0
push 0x40
lea rax, [rbp - 0x88]
push rax
push 0xd2
push 0x6fbcf0
call fcn.0047c48c
pop rcx
inc dword [rbp - 0x3c]
cmp dword [rbp - 0x3c], 9
jl 0x485d7d
mov eax, dword [rbp - 8]
add dword [rbp - 4], eax
push rax
push 0xa
mov eax, dword [rbp - 4]
dec eax
push rax
push 0x12c
push 1
push 0xd3
call fcn.0047bc80
pop rcx
push 0xa0a0a0
push 0xd3
call fcn.0050b930
push rax
push 0
push 0
push 0x12b
push 0
push 0xd3
call fcn.0050b980
pop rcx
add dword [rbp - 4], 4
push rax
push 0xa
push qword [rbp - 4]
push 0x131
push 0x14
push 0x325
call fcn.0047786a
pop rcx
mov eax, dword [rbp - 8]
add dword [rbp - 4], eax
push rax
push 0xa
push qword [rbp - 4]
push 0xc6
push 0x14
push 0x32c8
call fcn.0047786a
pop rcx
push rax
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x487018
shl eax, 4
mov ebx, dword [rax + 0x70f5f8]
push rbx
push qword [rax + 0x70f5f0]
push 0x32c8
call fcn.004779e1
pop rcx
push rax
push 0xd0
mov eax, dword [rbp - 4]
sub eax, 2
push rax
push 0x66
push 0x14
push 0x18
push 0xf
push 0x20
push 0xd
push 0x32c9
call fcn.0047b508
pop rcx
push 0
push 0x32c9
call fcn.005059b4
mov dword [rbp - 0x3c], 0
jmp 0x485fee
push 0x40
lea rax, [rbp - 0x88]
push rax
push 5
push str._dx_d
mov ecx, dword [rbp - 0x3c]
mov eax, 1
shl eax, cl
mov dword [rbp - 0xec], eax
mov dword [rbp - 0xe0], 4
lea rax, [rbp - 0xec]
mov qword [rbp - 0xe8], rax
mov ecx, dword [rbp - 0x3c]
mov eax, 1
shl eax, cl
mov dword [rbp - 0xf0], eax
mov dword [rbp - 0xd0], 4
lea rax, [rbp - 0xf0]
mov qword [rbp - 0xd8], rax
push 2
lea rax, [rbp - 0xe8]
push rax
call fcn.00402463
push 0x40
lea rax, [rbp - 0xc8]
push rax
push 6
push str._s_s
push 0x40
lea rax, [rbp - 0x88]
push rax
call fcn.00401d50
mov ebx, 9
sub ebx, eax
imul ebx, ebx, 0xe
mov eax, ebx
mov ebx, 8
cdq
idiv ebx
mov dword [rbp - 0xfc], eax
mov dword [rbp - 0xf0], 4
lea rax, [rbp - 0xfc]
mov qword [rbp - 0xf8], rax
mov dword [rbp - 0xe0], 0
mov qword [rbp - 0xe8], 0x6e0730
mov dword [rbp - 0xd0], 0x40
lea rax, [rbp - 0x88]
mov qword [rbp - 0xd8], rax
push 3
lea rax, [rbp - 0xf8]
push rax
call fcn.00402463
push rax
push 0
push 0x40
lea rax, [rbp - 0xc8]
push rax
push 0x32c9
push 0x6fbcf0
call fcn.0047c48c
pop rcx
inc dword [rbp - 0x3c]
cmp dword [rbp - 0x3c], 0xc
jle 0x485ed0
mov eax, dword [rbp - 8]
add dword [rbp - 4], eax
push rax
push 0xa
push qword [rbp - 4]
push 0xeb
push 0x14
push 0x323
call fcn.0047786a
pop rcx
mov eax, dword [rbp - 8]
add dword [rbp - 4], eax
push rax
push 0xa
push qword [rbp - 4]
push 0xeb
push 0x14
push 0x321
call fcn.0047786a
pop rcx
push rax
push 0xfa
push qword [rbp - 4]
push 0x3c
push 0x14
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x48701a
shl eax, 4
mov ebx, dword [rax + 0x70f648]
push rbx
push qword [rax + 0x70f640]
push 0x2ee0
call fcn.0047b9cd
pop rcx
mov eax, dword [rbp - 8]
add dword [rbp - 4], eax
push rax
push 0xa
mov eax, dword [rbp - 4]
dec eax
push rax
push 0x12c
push 1
push 0x324
call fcn.0047bc80
pop rcx
push 0xa0a0a0
push 0x324
call fcn.0050b930
push rax
push 0
push 0
push 0x12b
push 0
push 0x324
call fcn.0050b980
pop rcx
add dword [rbp - 4], 4
push rax
push 0xa
push qword [rbp - 4]
push 0xd2
push 0x14
push 0x12c
call fcn.0047786a
pop rcx
push rax
push 0xfa
push qword [rbp - 4]
push 0x3c
push 0x14
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x48701c
shl eax, 4
mov ebx, dword [rax + 0x70f678]
push rbx
push qword [rax + 0x70f670]
push 0x2f44
call fcn.0047b9cd
pop rcx
mov eax, dword [rbp - 8]
add dword [rbp - 4], eax
push rax
push 0xa
push qword [rbp - 4]
push 0xf5
push 0x14
push 0x12d
call fcn.0047786a
pop rcx
push pe_nt_image_headers64
lea rax, [rbp - 0xb8]
push rax
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x48701e
shl eax, 4
mov ebx, dword [rax + 0x70f728]
push rbx
push qword [rax + 0x70f720]
mov dword [rbp - 0xc0], 4
mov qword [rbp - 0xc8], 0x70f7c4
push 1
lea rax, [rbp - 0xc8]
push rax
call fcn.00402463
push rax
push pe_nt_image_headers64
lea rax, [rbp - 0xb8]
push rax
push 0x12d
call fcn.004779e1
pop rcx
push 0x113
mov eax, dword [rbp - 4]
sub eax, 2
push rax
push 0x23
push 0x14
push 3
push 0x136
call fcn.0047d656
mov eax, dword [rbp - 8]
add dword [rbp - 4], eax
push rax
push 0xa
mov eax, dword [rbp - 4]
dec eax
push rax
push 0x12c
push 1
push 0x137
call fcn.0047bc80
pop rcx
push 0xa0a0a0
push 0x137
call fcn.0050b930
push rax
push 0
push 0
push 0x12b
push 0
push 0x137
call fcn.0050b980
pop rcx
add dword [rbp - 4], 4
push rax
push 0xa
push qword [rbp - 4]
push 0xd2
push 0x14
push 0x140
call fcn.0047786a
pop rcx
push rax
push 0xfa
push qword [rbp - 4]
push 0x3c
push 0x14
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x487020
shl eax, 4
mov ebx, dword [rax + 0x70f838]
push rbx
push qword [rax + 0x70f830]
push 0x2fa8
call fcn.0047b9cd
pop rcx
mov eax, dword [rbp - 8]
add dword [rbp - 4], eax
push rax
push 0xa
push qword [rbp - 4]
push 0xe1
push 0x14
push 0x149
call fcn.0047786a
pop rcx
push pe_nt_image_headers64
lea rax, [rbp - 0xb8]
push rax
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x487022
shl eax, 4
mov ebx, dword [rax + 0x70f8f8]
push rbx
push qword [rax + 0x70f8f0]
push 0
push rbp
call fcn.00402463
push rax
push pe_nt_image_headers64
lea rax, [rbp - 0xb8]
push rax
push 0x149
call fcn.004779e1
pop rcx
push 0x104
mov eax, dword [rbp - 4]
sub eax, 2
push rax
push 0x32
push 0x14
push 6
push 0x14a
call fcn.0047d656
mov eax, dword [rbp - 8]
add dword [rbp - 4], eax
push rax
push 0xa
push qword [rbp - 4]
push 0xe6
push 0x14
push 0x154
call fcn.0047786a
pop rcx
push pe_nt_image_headers64
lea rax, [rbp - 0xb8]
push rax
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x487024
shl eax, 4
mov ebx, dword [rax + 0x70f9b8]
push rbx
push qword [rax + 0x70f9b0]
push 0
push rbp
call fcn.00402463
push rax
push pe_nt_image_headers64
lea rax, [rbp - 0xb8]
push rax
push 0x154
call fcn.004779e1
pop rcx
push 0x109
mov eax, dword [rbp - 4]
sub eax, 2
push rax
push 0x2d
push 0x14
push 4
push 0x155
call fcn.0047d656
mov eax, dword [rbp - 8]
add dword [rbp - 4], eax
push rax
push 0xa
mov eax, dword [rbp - 4]
dec eax
push rax
push 0x12c
push 1
push 0x159
call fcn.0047bc80
pop rcx
push 0xa0a0a0
push 0x159
call fcn.0050b930
push rax
push 0
push 0
push 0x12b
push 0
push 0x159
call fcn.0050b980
pop rcx
add dword [rbp - 4], 4
add dword [rbp - 4], 2
push 0xa
mov eax, dword [rbp - 4]
sub eax, 2
push rax
push 0x136
push 0x14
push 0x12
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x487026
shl eax, 4
mov ebx, dword [rax + 0x70fa48]
push rbx
push qword [rax + 0x70fa40]
push 0x348
call fcn.00512781
mov eax, dword [rbp - 8]
add dword [rbp - 4], eax
push 0xa
mov eax, dword [rbp - 4]
sub eax, 2
push rax
push 0x136
push 0x14
push 0x12
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x487028
shl eax, 4
mov ebx, dword [rax + 0x70fae8]
push rbx
push qword [rax + 0x70fae0]
push 0x352
call fcn.00512781
mov eax, dword [rbp - 8]
add dword [rbp - 4], eax
push rax
push 0xa
push qword [rbp - 4]
push 0xf0
push 0x14
push 0x3b9
call fcn.0047786a
pop rcx
push rax
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x48702a
shl eax, 4
mov ebx, dword [rax + 0x70fba8]
push rbx
push qword [rax + 0x70fba0]
push 0x3b9
call fcn.004779e1
pop rcx
push rax
push 0xfa
mov eax, dword [rbp - 4]
sub eax, 2
push rax
push 0x3c
push 0x14
push 0x18
push 0xf
push 0x20
push 5
push 0x3ba
call fcn.0047b508
pop rcx
push 0
push 0x3ba
call fcn.005059b4
mov rax, qword [0x006fbcf0]
mov rbx, qword [0x006fbcf8]
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], rbx
lea rax, [rbp - 0x70]
push rax
lea rax, [rbp - 0x40]
push rax
call fcn.005127ea
mov dword [rbp - 0x3c], 0
jmp 0x486529
mov eax, dword [rbp - 0x3c]
cmp eax, 5
jae 0x48702c
mov eax, dword [rbp + rax*4 - 0x70]
mov dword [rbp - 0x74], eax
push 4
lea rax, [rbp - 0x44]
push rax
push 3
push str._dx_d
mov dword [rbp - 0x80], 4
lea rax, [rbp - 0x74]
mov qword [rbp - 0x88], rax
push 1
lea rax, [rbp - 0x88]
push rax
call fcn.00402463
movsxd rax, dword [rbp - 0x74]
mov qword [rbp - 0x58], rax
push rax
push 0
push 4
lea rax, [rbp - 0x44]
push rax
push 0x3ba
lea rax, [rbp - 0x58]
push rax
call fcn.0047c48c
pop rcx
inc dword [rbp - 0x3c]
mov eax, dword [rbp - 0x3c]
cmp eax, dword [rbp - 0x40]
jl 0x4864c2
mov eax, dword [rbp - 8]
add dword [rbp - 4], eax
push 0xa
mov eax, dword [rbp - 4]
sub eax, 2
push rax
push 0xeb
push 0x14
push 0x12
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x48702e
shl eax, 4
mov ebx, dword [rax + 0x70fc48]
push rbx
push qword [rax + 0x70fc40]
push 0x3b8
call fcn.00512781
mov eax, dword [rbp - 8]
add dword [rbp - 4], eax
push 0xa
mov eax, dword [rbp - 4]
sub eax, 2
push rax
push 0x91
push 0x14
push 0x12
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x487030
shl eax, 4
mov ebx, dword [rax + 0x70fcd8]
push rbx
push qword [rax + 0x70fcd0]
push 0x3bb
call fcn.00512781
push 0xa0
mov eax, dword [rbp - 4]
sub eax, 2
push rax
push 0x96
push 0x14
push 0x12
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x487032
shl eax, 4
mov ebx, dword [rax + 0x70fd48]
push rbx
push qword [rax + 0x70fd40]
push 0x3bc
call fcn.00512781
mov eax, dword [rbp - 8]
add dword [rbp - 4], eax
push 0xa
mov eax, dword [rbp - 4]
sub eax, 2
push rax
push 0x136
push 0x14
push 0x12
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x487034
shl eax, 4
mov ebx, dword [rax + 0x70fdf8]
push rbx
push qword [rax + 0x70fdf0]
push 0x3c0
call fcn.00512781
mov eax, dword [rbp - 8]
add dword [rbp - 4], eax
push rax
push 0xa
mov eax, dword [rbp - 4]
dec eax
push rax
push 0x12c
push 1
push 0x36ab
call fcn.0047bc80
pop rcx
push 0xa0a0a0
push 0x36ab
call fcn.0050b930
push rax
push 0
push 0
push 0x12b
push 0
push 0x36ab
call fcn.0050b980
pop rcx
add dword [rbp - 4], 4
push rax
push 0x14
push qword [rbp - 4]
push 0x118
push 0x14
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x487036
shl eax, 4
mov ebx, dword [rax + 0x70fe88]
push rbx
push qword [rax + 0x70fe80]
push 0x36b0
call fcn.0047b9cd
pop rcx
mov eax, dword [rbp - 8]
add dword [rbp - 4], eax
call fcn.00512820
call fcn.005128b0
jmp 0x48700c
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 8]
cmp eax, 0x2fa8
jge 0x4866fe
cmp eax, 0x2f44
jge 0x4866ef
cmp eax, 0x2ee0
jne 0x48675a
call fcn.00512a65
jmp 0x48675c
cmp eax, 0x2f44
jne 0x48675a
call fcn.00512a99
jmp 0x48675c
cmp eax, 0x36b0
jge 0x486715
cmp eax, 0x2fa8
jne 0x48675a
call fcn.00512ad8
jmp 0x48675c
cmp eax, 0x36b0
jne 0x48675a
mov al, byte [0x009d632b]
mov byte [rbp - 1], al
call fcn.004060c2
call fcn.00406131
call fcn.004797b5
call fcn.00512b17
test byte [0x009d632a], 0xff
je 0x486753
mov al, byte [rbp - 1]
cmp al, byte [0x009d632b]
je 0x486753
call fcn.00512b5a
call fcn.005128b0
jmp 0x48675c
jmp 0x48675c
jmp 0x48700c
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 8]
cmp eax, 0x352
jge 0x4867f6
cmp eax, 0x348
jge 0x4867b8
cmp eax, 0x6e
jne case.0x486843.953
push 0x1762470
mov rax, qword [rbp + 0x10]
push qword [rax + 8]
call fcn.00512b99
test byte [0x01762470], 0xff
sete al
mov byte [0x01762470], al
push rax
push qword [0x01762470]
call fcn.00506823
pop rcx
jmp 0x4868cc
cmp eax, 0x348
jne case.0x486843.953
lea rax, [rbp - 1]
push rax
mov rax, qword [rbp + 0x10]
push qword [rax + 8]
call fcn.00512b99
test byte [rbp - 1], 0xff
sete al
mov byte [0x009d6301], al
mov dword [0x009d6302], 0
call fcn.00406131
jmp 0x4868cc
cmp eax, 0x3b8
jge 0x486834
cmp eax, 0x352
jne case.0x486843.953
push 0x9d62cb
mov rax, qword [rbp + 0x10]
push qword [rax + 8]
call fcn.00512b99
push rax
movzx eax, byte [0x009d62cb]
push rax
call fcn.00506834
pop rcx
call fcn.00406131
jmp 0x4868cc
sub eax, 0x3b8
cmp eax, 8
ja case.0x486843.953
jmp qword [rax*8 + 0x70feb0]
push 0x9d6331
mov rax, qword [rbp + 0x10]
push qword [rax + 8]
call fcn.00512b99
call fcn.00512bf1
mov byte [0x009d6330], 0
mov dword [0x00b3a734], 0
call fcn.00406131
jmp 0x4868cc
push 0x9d632a
mov rax, qword [rbp + 0x10]
push qword [rax + 8]
call fcn.00512b99
call fcn.00406131
call fcn.00512b17
jmp 0x4868cc
push 0x9d632b
mov rax, qword [rbp + 0x10]
push qword [rax + 8]
call fcn.00512b99
call fcn.00406131
call fcn.00512b5a
jmp 0x4868cc
push 0x9d6271
mov rax, qword [rbp + 0x10]
push qword [rax + 8]
call fcn.00512b99
call fcn.00406131
jmp 0x4868cc
jmp 0x4868cc
jmp 0x48700c
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 8]
cmp eax, 0x14a
jge 0x48699a
cmp eax, 0x136
jge 0x486942
cmp eax, 0xd2
jne 0x486a48
push rax
push 0x17bbf40
call fcn.00512c32
pop rcx
test al, al
je 0x48693d
push rax
push 0x17bbf40
call fcn.00512dd6
pop rcx
fnstcw word [rsp + 8]
fldcw word [section..data]
fistp qword [rsp]
fldcw word [rsp + 8]
mov eax, dword [rsp]
mov dword [0x009d6269], eax
call fcn.00506845
call fcn.00512e5b
call fcn.00406131
jmp 0x486a4a
cmp eax, 0x136
jne 0x486a48
push rax
push 0x17bbfa0
call fcn.00512c32
pop rcx
test al, al
je 0x486995
push rax
push 0x17bbfa0
call fcn.00512dd6
sub rsp, 8
fstp qword [rsp]
call fcn.00431812
pop rcx
fnstcw word [rsp + 4]
fldcw word [section..data]
fistp dword [rsp]
fldcw word [rsp + 4]
mov eax, dword [rsp]
mov dword [0x009d626d], eax
call fcn.00406131
jmp 0x486a4a
cmp eax, 0x155
jge 0x4869f7
cmp eax, 0x14a
jne 0x486a48
push rax
push 0x17bc000
call fcn.00512c32
pop rcx
test al, al
je 0x4869f5
push rax
push 0x17bc000
call fcn.00512dd6
sub rsp, 8
fstp qword [rsp]
call fcn.00431812
pop rcx
fnstcw word [rsp + 4]
fldcw word [section..data]
fistp dword [rsp]
fldcw word [rsp + 4]
mov eax, dword [rsp]
mov dword [0x009d6272], eax
call fcn.00406131
jmp 0x486a4a
cmp eax, 0x155
jne 0x486a48
push rax
push 0x17bc060
call fcn.00512c32
pop rcx
test al, al
je 0x486a46
push rax
push 0x17bc060
call fcn.00512dd6
sub rsp, 8
fstp qword [rsp]
call fcn.00431812
pop rcx
fnstcw word [rsp + 8]
fldcw word [section..data]
fistp qword [rsp]
fldcw word [rsp + 8]
mov eax, dword [rsp]
mov dword [0x009d62ed], eax
call fcn.00406131
jmp 0x486a4a
jmp 0x486a4a
jmp 0x48700c
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 8]
cmp eax, 0x32c9
jge 0x486a9d
cmp eax, 0x3ba
jne 0x486b00
push rax
push 0x3ba
call fcn.0050609b
push rax
push 0x40
lea rax, [rbp - 0x58]
push rax
lea rax, [rbp - 0x18]
push rax
push 0x3ba
call fcn.0050ad0c
pop rcx
mov eax, dword [rbp - 0x18]
mov dword [0x009d63f0], eax
call fcn.00406131
jmp 0x486b02
cmp eax, 0x32c9
jne 0x486b00
mov rax, qword [rbp + 0x10]
push qword [rax + 0x14]
push 0x40
lea rax, [rbp - 0x48]
push rax
push 0x32c9
call fcn.0047d19a
push rax
push 0x40
lea rax, [rbp - 0x48]
push rax
push 0x32c9
call fcn.00505a78
pop rcx
push 0x40
lea rax, [rbp - 0x48]
push rax
call fcn.00401d50
add eax, 2
push rax
push 0x32c9
call fcn.00505de7
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 0x14]
dec eax
mov dword [0x009d62cc], eax
call fcn.00406131
jmp 0x486b02
jmp 0x486b02
jmp 0x48700c
mov rax, qword [rbp + 0x10]
cmp dword [rax + 0x10], 0x64
jne 0x486fd4
mov dword [rbp - 4], 0x7fffffff
mov dword [rbp - 8], 0x80000000
mov dword [rbp - 0xc], 0
jmp 0x486b79
mov eax, dword [rbp - 0xc]
cmp eax, 4
jae 0x487038
mov eax, dword [rax*4 + 0x1762474]
mov dword [rbp - 0x9c], eax
cmp dword [rbp - 0x9c], 0
je 0x486b76
mov eax, dword [rbp - 0x9c]
cmp eax, dword [rbp - 4]
jge 0x486b62
mov eax, dword [rbp - 0x9c]
mov dword [rbp - 4], eax
mov eax, dword [rbp - 0x9c]
cmp eax, dword [rbp - 8]
jle 0x486b76
mov eax, dword [rbp - 0x9c]
mov dword [rbp - 8], eax
inc dword [rbp - 0xc]
cmp dword [rbp - 0xc], 4
jl 0x486b2c
push pe_nt_image_headers64
lea rax, [rbp - 0x98]
push rax
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x48703a
shl eax, 4
mov ebx, dword [rax + 0x70ff68]
push rbx
push qword [rax + 0x70ff60]
mov dword [rbp - 0xb0], 4
lea rax, [rbp - 4]
mov qword [rbp - 0xb8], rax
mov dword [rbp - 0xa0], 4
lea rax, [rbp - 8]
mov qword [rbp - 0xa8], rax
push 2
lea rax, [rbp - 0xb8]
push rax
call fcn.00402463
push rax
push pe_nt_image_headers64
lea rax, [rbp - 0x98]
push rax
push 0x64
call fcn.004779e1
pop rcx
push 9
lea rax, [rbp - 0xa8]
push rax
push 3
push 0x70ff94
mov eax, dword [0x0177f358]
mov ebx, 3
xor edx, edx
div ebx
mov dword [rbp - 0xcc], eax
mov dword [rbp - 0xc0], 4
lea rax, [rbp - 0xcc]
mov qword [rbp - 0xc8], rax
push 1
lea rax, [rbp - 0xc8]
push rax
call fcn.00402463
push 0xb
lea rax, [rbp - 0xb8]
push rax
push 8
push str._s._s._striangles_affich
mov dword [rbp - 0xe0], 3
lea rax, [rbp - 0xa8]
mov qword [rbp - 0xe8], rax
mov dword [rbp - 0xd0], 3
lea rax, [rbp - 0xa5]
mov qword [rbp - 0xd8], rax
mov dword [rbp - 0xc0], 3
lea rax, [rbp - 0xa2]
mov qword [rbp - 0xc8], rax
push 3
lea rax, [rbp - 0xe8]
push rax
call fcn.00402463
mov dword [rbp - 0x9c], 0
jmp 0x486cdd
mov eax, dword [rbp - 0x9c]
cmp eax, 0xb
jae 0x48703c
movzx eax, byte [rbp + rax - 0xb8]
cmp eax, 0x30
jae 0x486ce6
inc dword [rbp - 0x9c]
cmp dword [rbp - 0x9c], 0xb
jl 0x486cbb
push pe_nt_image_headers64
lea rax, [rbp - 0x98]
push rax
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x48703e
shl eax, 4
mov ebx, dword [rax + 0x710038]
push rbx
push qword [rax + 0x710030]
mov eax, 0xb
sub eax, dword [rbp - 0x9c]
mov dword [rbp - 0xcc], eax
mov eax, 0xb
sub eax, dword [rbp - 0xcc]
jb 0x48703e
cmp eax, dword [rbp - 0x9c]
jb 0x48703e
mov eax, dword [rbp - 0x9c]
mov ebx, dword [rbp - 0xcc]
mov dword [rbp - 0xc0], ebx
lea rax, [rbp + rax - 0xb8]
mov qword [rbp - 0xc8], rax
push 1
lea rax, [rbp - 0xc8]
push rax
call fcn.00402463
push rax
push pe_nt_image_headers64
lea rax, [rbp - 0x98]
push rax
push 0x96
call fcn.004779e1
pop rcx
push pe_nt_image_headers64
lea rax, [rbp - 0x98]
push rax
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x487040
shl eax, 4
mov ebx, dword [rax + 0x7100c8]
push rbx
push qword [rax + 0x7100c0]
mov dword [rbp - 0xa0], 4
mov qword [rbp - 0xa8], 0x176248c
push 1
lea rax, [rbp - 0xa8]
push rax
call fcn.00402463
push rax
push pe_nt_image_headers64
lea rax, [rbp - 0x98]
push rax
push 0x12c
call fcn.004779e1
pop rcx
push pe_nt_image_headers64
lea rax, [rbp - 0x98]
push rax
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x487042
shl eax, 4
mov ebx, dword [rax + 0x710158]
push rbx
push qword [rax + 0x710150]
mov dword [rbp - 0xa0], 4
mov qword [rbp - 0xa8], 0x17624a8
push 1
lea rax, [rbp - 0xa8]
push rax
call fcn.00402463
push rax
push pe_nt_image_headers64
lea rax, [rbp - 0x98]
push rax
push 0x140
call fcn.004779e1
pop rcx
push pe_nt_image_headers64
lea rax, [rbp - 0x98]
push rax
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x487044
shl eax, 4
mov ebx, dword [rax + 0x7101e8]
push rbx
push qword [rax + 0x7101e0]
mov eax, 0x30
mul dword [0x01762494]
shr eax, 0x14
mov dword [rbp - 0xac], eax
mov dword [rbp - 0xa0], 4
lea rax, [rbp - 0xac]
mov qword [rbp - 0xa8], rax
push 1
lea rax, [rbp - 0xa8]
push rax
call fcn.00402463
push rax
push pe_nt_image_headers64
lea rax, [rbp - 0x98]
push rax
push 0x323
call fcn.004779e1
pop rcx
push pe_nt_image_headers64
lea rax, [rbp - 0x98]
push rax
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x487046
shl eax, 4
mov ebx, dword [rax + 0x710288]
push rbx
push qword [rax + 0x710280]
mov eax, dword [0x01762490]
shr eax, 0x12
mov dword [rbp - 0xac], eax
mov dword [rbp - 0xa0], 4
lea rax, [rbp - 0xac]
mov qword [rbp - 0xa8], rax
push 1
lea rax, [rbp - 0xa8]
push rax
call fcn.00402463
push rax
push pe_nt_image_headers64
lea rax, [rbp - 0x98]
push rax
push 0x321
call fcn.004779e1
pop rcx
push pe_nt_image_headers64
lea rax, [rbp - 0x98]
push rax
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x487048
shl eax, 4
mov ebx, dword [rax + 0x710348]
push rbx
push qword [rax + 0x710340]
mov dword [rbp - 0xb0], 4
mov qword [rbp - 0xb8], 0x177f350
mov dword [rbp - 0xa0], 4
mov qword [rbp - 0xa8], 0x177f354
push 2
lea rax, [rbp - 0xb8]
push rax
call fcn.00402463
push rax
push pe_nt_image_headers64
lea rax, [rbp - 0x98]
push rax
push 0x325
call fcn.004779e1
pop rcx
jmp 0x48700c
mov rax, qword [rbp + 0x10]
push qword [rax + 0x18]
mov rax, qword [rbp + 0x10]
push qword [rax + 0x1c]
call fcn.004774ca
jmp 0x48700c
jmp 0x48700c
mov byte [0x01762470], 1
push rax
push qword [0x01762470]
call fcn.00506823
pop rcx
mov byte [0x00e5d692], 0
jmp 0x48700c
jmp 0x48700c
leave
ret 8
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
push rbp
mov rbp, rsp
sub rsp, 0x440
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 4]
cmp eax, 0x1e
ja case.0x487065.4
jmp qword [rax*8 + 0x710370]
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x487dbc
shl eax, 4
mov ebx, dword [rax + 0x7104c8]
push rbx
push qword [rax + 0x7104c0]
call fcn.0047b409
push rax
push 0
call fcn.004776de
pop rcx
push rax
push 4
call fcn.0047d3f3
pop rcx
push rax
push 0x14
call fcn.00477717
pop rcx
push rax
push 1
call fcn.0050e9dc
pop rcx
mov byte [0x00e5d693], 1
mov byte [0x00e5d694], 0
lea rcx, [rbp - 0x40]
mov edx, 0x2c
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlZeroMemory]
add rsp, 0x20
push 0x20
lea rax, [rbp - 0x40]
push rax
push 6
push str.Tahoma
call fcn.0040aecf
mov dword [rbp - 0x20], 0x10
mov dword [rbp - 0x18], 0xa0a0a0
push rax
lea rax, [rbp - 0x40]
push rax
call fcn.0047b49a
pop rcx
mov dword [rbp - 0xc], 0x14
mov eax, dword [rbp - 0xc]
shl eax, 4
add eax, 4
add eax, 0x3c
mov dword [rbp - 0x10], eax
push rax
lea rax, [rbp - 4]
push rax
lea rax, [rbp - 8]
push rax
push 1
call fcn.00420557
pop rcx
mov eax, dword [rbp - 4]
sub eax, 0x118
mov dword [0x017bc0b8], eax
mov dword [0x017bc0bc], 0
push qword [0x017bc0b8]
push qword [0x017bc0bc]
call fcn.004774ca
push 0x118
push qword [rbp - 0x10]
call fcn.00477615
push rax
push 0x4e4e4e
call fcn.0047b475
pop rcx
push rax
push 0x6fbbe0
call fcn.00477750
pop rcx
push rax
push 0x3e3e3e
call fcn.004777bd
pop rcx
lea rcx, [rbp - 0x40]
mov edx, 0x2c
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlZeroMemory]
add rsp, 0x20
push 0x20
lea rax, [rbp - 0x40]
push rax
push 5
push str.Arial_Black
call fcn.0040aecf
mov dword [rbp - 0x20], 0x10
mov dword [rbp - 0x18], 0xc0c0c0
push rax
lea rax, [rbp - 0x40]
push rax
call fcn.004777e2
pop rcx
push 0
push 0
push 0x118
push 0x14
push 0x20
push 0x32
call fcn.0047d656
push rax
push 0
push 0x14
push 0x50
push 0x14
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x487dbe
shl eax, 4
mov ebx, dword [rax + 0x710528]
push rbx
push qword [rax + 0x710520]
push 0x2d
call fcn.0047b9cd
pop rcx
push rax
push 0x5a
push 0x14
push 0x50
push 0x14
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x487dc0
shl eax, 4
mov ebx, dword [rax + 0x710578]
push rbx
push qword [rax + 0x710570]
push 0x2e
call fcn.0047b9cd
pop rcx
push rax
push 0xb4
push 0x14
push 0x50
push 0x14
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x487dc2
shl eax, 4
mov ebx, dword [rax + 0x7105d8]
push rbx
push qword [rax + 0x7105d0]
push 0x37
call fcn.0047b9cd
pop rcx
push 0
push 0x28
push 0x118
mov eax, dword [rbp - 0xc]
shl eax, 4
add eax, 4
push rax
push 0x14
push 0x14
push 0x200
push 0x64
call fcn.00512ebd
push rax
push 0x64
call fcn.00513296
pop rcx
call fcn.00513320
call fcn.00513351
push rax
push qword [0x009d6dc8]
call fcn.0040ecbf
pop rcx
cmp eax, 0
jne 0x487dc4
call fcn.00513373
push rax
push qword [0x009d6dc8]
call fcn.0040ee3f
pop rcx
cmp eax, 0
jne 0x487dc6
mov byte [0x017bc0c0], 0
jmp 0x487db8
mov byte [0x00b3a35a], 1
mov rax, qword [rbp + 0x10]
cmp dword [rax + 8], 0x64
jne 0x487396
mov rax, qword [rbp + 0x10]
cmp dword [rax + 0x14], 1
jl 0x48738d
mov rax, qword [rbp + 0x10]
push rax
push 0x64
mov eax, dword [rax + 0x14]
mov dword [rsp + 0x10], eax
call fcn.0047c4ee
pop rcx
cmp eax, dword [rsp]
jl 0x48738d
mov rax, qword [rbp + 0x10]
push qword [rax + 0x14]
push 0x64
call fcn.00513441
test al, al
jne 0x487351
push rax
push 0x64
call fcn.005134fa
pop rcx
push rax
mov rax, qword [rbp + 0x10]
push qword [rax + 0x14]
push 1
push 0x64
call fcn.00505ad4
pop rcx
push rax
lea rax, [rbp - 0x10]
push rax
call fcn.00513539
pop rcx
mov rax, qword [rbp + 0x10]
mov ebx, dword [0x017bc0b8]
add ebx, dword [rax + 0x18]
push rbx
mov rax, qword [rbp + 0x10]
mov ebx, dword [0x017bc0bc]
add ebx, dword [rax + 0x1c]
add ebx, 0x10
push rbx
lea rax, [rbp - 0x10]
push rax
push 0x5144eb
call fcn.00513984
jmp 0x487396
push rax
push 0x64
call fcn.005134fa
pop rcx
jmp 0x487db8
push rax
mov rax, qword [rbp + 0x10]
push qword [rax + 0x14]
push 0x200
lea rax, [rbp - 0x3d8]
push rax
lea rax, [rbp - 0x18]
push rax
push 0x64
call fcn.0050ad0c
pop rcx
test byte [rbp - 0xe], 0xff
je 0x48753d
push rax
push qword [0x009d6dc8]
call fcn.0040ecbf
pop rcx
cmp eax, 0
jne 0x487dc8
lea rcx, [rbp - 0x1d8]
mov edx, 0x1ba
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlZeroMemory]
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov qword [rbp - 0x1d8], rax
push qword [0x009d6ddc]
push 0x1ba
lea rax, [rbp - 0x1d8]
push rax
push 2
push 3
push 0x6e05f2
call fcn.0040ece8
mov dword [rbp - 0x3dc], eax
cmp dword [rbp - 0x3dc], 0
jne 0x487dca
mov rax, qword [rbp - 0x198]
mov qword [rbp - 0x1d8], rax
mov dword [rbp - 0x3e0], 0
jmp 0x487519
push qword [0x009d6ddc]
push 0x1ba
lea rax, [rbp - 0x1d8]
push rax
push 2
push 3
push 0x6e05f2
call fcn.0040ece8
mov dword [rbp - 0x3dc], eax
cmp dword [rbp - 0x3dc], 0
jne 0x487dcc
xor eax, eax
mov qword [rbp - 0x3f8], rax
mov qword [rbp - 0x3f0], rax
mov rax, qword [rbp - 0x1d8]
mov qword [rbp - 0x3f8], rax
movzx eax, byte [rbp - 0x1c1]
cmp eax, 3
sete al
mov byte [rbp - 0x3ee], al
movzx eax, word [rbp - 0xc]
inc eax
mov word [rbp - 0x3ec], ax
lea rax, [rbp - 0x1d8]
push rax
lea rax, [rbp - 0x428]
push rax
call fcn.0051451e
push rax
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 0x14]
inc eax
add eax, dword [rbp - 0x3e0]
push rax
push 0x2f
lea rax, [rbp - 0x428]
push rax
push 0x64
lea rax, [rbp - 0x3f8]
push rax
call fcn.0047c48c
pop rcx
mov rax, qword [rbp - 0x1a0]
mov qword [rbp - 0x1d8], rax
inc dword [rbp - 0x3e0]
cmp qword [rbp - 0x1d8], 0xffffffffffffffff
jne 0x487453
push rax
push qword [0x009d6dc8]
call fcn.0040ee3f
pop rcx
cmp eax, 0
jne 0x487dce
jmp 0x487db8
push rax
mov rax, qword [rbp + 0x10]
push qword [rax + 0x14]
call fcn.0051481e
pop rcx
jmp 0x487db8
mov byte [0x00b3a35a], 1
mov rax, qword [rbp + 0x10]
cmp dword [rax + 0xc], 1
jne 0x48756b
call fcn.005148aa
jmp 0x487db8
mov rax, qword [rbp + 0x10]
cmp dword [rax + 8], 0x64
jne 0x487591
cmp dword [0x00e59210], 1
je 0x48758c
cmp dword [0x00e59230], 1
jne 0x487591
call fcn.00420a65
jmp 0x487db8
mov byte [0x00b3a35a], 1
mov rax, qword [rbp + 0x10]
cmp dword [rax + 8], 0x64
jne 0x4878ca
mov rax, qword [rbp + 0x10]
cmp dword [rax + 0x14], 1
jl 0x487db8
mov rax, qword [rbp + 0x10]
push rax
mov rbx, qword [rbp + 0x10]
push qword [rbx + 8]
mov eax, dword [rax + 0x14]
mov dword [rsp + 0x10], eax
call fcn.0047c4ee
pop rcx
cmp eax, dword [rsp]
jl 0x487db8
cmp dword [0x00e59210], 1
je 0x4875f1
cmp dword [0x00e59230], 1
jne 0x4878ca
push rax
mov rax, qword [rbp + 0x10]
push qword [rax + 0x14]
push 0x200
lea rax, [rbp - 0x228]
push rax
lea rax, [rbp - 0x28]
push rax
push 0x64
call fcn.0050ad0c
pop rcx
mov rax, qword [rbp - 0x28]
mov qword [rbp - 0x18], rax
lea rcx, [rbp - 0x3e8]
mov edx, 0x1ba
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlZeroMemory]
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov qword [rbp - 0x3e8], rax
push qword [0x009d6ddc]
push 0x1ba
lea rax, [rbp - 0x3e8]
push rax
push 2
push 3
push 0x6e05f2
call fcn.0040ece8
mov dword [rbp - 0xc], eax
cmp dword [rbp - 0xc], 0
jne 0x487dd0
push rax
push 0x64
call fcn.005134fa
pop rcx
cmp dword [0x00e59210], 1
jne 0x4877a2
push rax
push qword [0x009d6dc8]
call fcn.0040ecbf
pop rcx
cmp eax, 0
jne 0x487dd2
mov rax, qword [0x00e59218]
lock inc dword [rax]
cmp dword [rax + 4], 0x20
jne 0x487dd4
mov qword [rbp - 0x3f0], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
mov rsi, qword [rbp - 0x3f0]
lock dec dword [rsi]
mov dword [rbp - 8], ebx
movzx eax, byte [rbp - 0x3d1]
cmp eax, 3
je 0x48772f
mov dword [rbp - 4], 0
jmp 0x487725
mov rax, qword [0x00e59218]
lock inc dword [rax]
cmp dword [rax + 4], 0x20
jne 0x487dd6
mov qword [rbp - 0x3f0], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
mov esi, dword [rbp - 4]
cmp esi, ebx
jae 0x487dd6
push qword [rax + rsi*8 + 8]
mov rax, qword [rbp - 0x3f0]
lock dec dword [rax]
push qword [rbp - 0x3e8]
call fcn.00514da2
inc dword [rbp - 4]
mov eax, dword [rbp - 4]
cmp eax, dword [rbp - 8]
jl 0x4876dd
jmp 0x487787
mov eax, dword [rbp - 8]
dec eax
mov dword [rbp - 4], eax
jmp 0x487781
mov rax, qword [0x00e59218]
lock inc dword [rax]
cmp dword [rax + 4], 0x20
jne 0x487dd8
mov qword [rbp - 0x3f0], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
mov esi, dword [rbp - 4]
cmp esi, ebx
jae 0x487dd8
push qword [rax + rsi*8 + 8]
mov rax, qword [rbp - 0x3f0]
lock dec dword [rax]
push qword [rbp - 0x3e8]
call fcn.0041828d
dec dword [rbp - 4]
cmp dword [rbp - 4], 0
jge 0x487739
push rax
push qword [0x009d6dc8]
call fcn.0040ee3f
pop rcx
cmp eax, 0
jne 0x487dda
jmp 0x4878c5
cmp dword [0x00e59230], 1
jne 0x4878c5
mov byte [rbp - 0x3e9], 0
mov rax, qword [0x00e59238]
lock inc dword [rax]
cmp dword [rax + 4], 0x21
jne 0x487ddc
mov qword [rbp - 0x3f8], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
mov rsi, qword [rbp - 0x3f8]
lock dec dword [rsi]
mov dword [rbp - 8], ebx
movzx eax, byte [rbp - 0x3d1]
cmp eax, 3
je 0x487853
mov dword [rbp - 4], 0
jmp 0x487849
mov rax, qword [0x00e59238]
lock inc dword [rax]
cmp dword [rax + 4], 0x21
jne 0x487dde
mov qword [rbp - 0x3f8], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
mov esi, dword [rbp - 4]
cmp esi, ebx
jae 0x487dde
imul esi, esi, 0x4c
lea rax, [rax + rsi + 4]
push rax
push qword [rbp - 0x18]
call fcn.0051508e
mov rbx, qword [rbp - 0x3f8]
lock dec dword [rbx]
or byte [rbp - 0x3e9], al
inc dword [rbp - 4]
mov eax, dword [rbp - 4]
cmp eax, dword [rbp - 8]
jl 0x4877f9
jmp 0x4878b3
mov eax, dword [rbp - 8]
dec eax
mov dword [rbp - 4], eax
jmp 0x4878ad
mov rax, qword [0x00e59238]
lock inc dword [rax]
cmp dword [rax + 4], 0x21
jne 0x487de0
mov qword [rbp - 0x3f8], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
mov esi, dword [rbp - 4]
cmp esi, ebx
jae 0x487de0
imul esi, esi, 0x4c
lea rax, [rax + rsi + 4]
push rax
push qword [rbp - 0x18]
call fcn.0051508e
mov rbx, qword [rbp - 0x3f8]
lock dec dword [rbx]
or byte [rbp - 0x3e9], al
dec dword [rbp - 4]
cmp dword [rbp - 4], 0
jge 0x48785d
test byte [rbp - 0x3e9], 0xff
je 0x4878c5
push rax
push 1
call fcn.004204fd
pop rcx
call fcn.005151c7
jmp 0x487db8
mov rax, qword [rbp + 0x10]
cmp dword [rax + 0x10], 0x64
jne 0x4878e0
call fcn.0051524e
jmp 0x48795f
mov rax, qword [rbp + 0x10]
cmp dword [rax + 0x10], 0x12c
jl 0x487911
mov rax, qword [rbp + 0x10]
cmp dword [rax + 0x10], 0x18f
jg 0x487911
push rax
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 0x10]
sub eax, 0x12c
push rax
call fcn.00515632
pop rcx
jmp 0x48795f
mov rax, qword [rbp + 0x10]
cmp dword [rax + 0x10], 0x3e8
jne 0x487949
push rax
push 1
call fcn.0050e9dc
pop rcx
mov byte [0x00e5d693], 1
test byte [0x00e5d694], 0xff
je 0x487947
mov byte [0x00e5d694], 0
push rax
push 0xf
call fcn.0041d74e
pop rcx
jmp 0x48795f
mov rax, qword [rbp + 0x10]
cmp dword [rax + 0x10], 0x7d0
jne 0x48795f
push rax
push 0
call fcn.004204fd
pop rcx
jmp 0x487db8
mov byte [0x00b3a35a], 1
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 8]
cmp eax, 0x2e
jge 0x487aa0
cmp eax, 0x2d
jne 0x487d57
lea rcx, [rbp - 0x28]
mov edx, 0x22
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlZeroMemory]
add rsp, 0x20
mov byte [rbp - 0x28], 0x2a
push rax
push 0x20
lea rax, [rbp - 0x27]
push rax
push 0x32
call fcn.00516301
pop rcx
push 0x22
lea rax, [rbp - 0x28]
push rax
push 1
push 0x6e1740
call fcn.0040adb1
push 0x22
lea rax, [rbp - 0x28]
push rax
call fcn.005163cc
push 0xb39b30
push rax
mov r8d, 0x28
mov edx, 4
mov rcx, qword [section..bss]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_HeapAlloc]
add rsp, 0x28
mov dword [rax], 0
mov qword [rax + 8], 0
inc dword [0x017bc0c4]
mov ebx, dword [0x017bc0c4]
mov dword [rax + 0x10], ebx
mov qword [rsp + 8], rax
push rax
mov r8d, 0x26
mov edx, 4
mov rcx, qword [section..bss]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_HeapAlloc]
add rsp, 0x28
mov dword [rax], 0x22
push rax
mov r8d, 0x22
lea rdx, [rbp - 0x28]
mov rdi, rax
lea rcx, [rdi + 4]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlMoveMemory]
add rsp, 0x28
push rax
mov rax, rdi
call fcn.006defae
pop rcx
mov dword [rax + 4], 4
mov rbx, qword [rsp + 8]
mov qword [rbx + 0x18], rax
mov byte [rbx + 0x20], 0
push rax
mov rax, rbx
call fcn.006defae
pop rcx
mov dword [rax + 4], 0x1d
push rax
call fcn.00455ee5
push 0xf
push 0x64
call fcn.00420a72
jmp 0x487d59
cmp eax, 0x37
jge 0x487b61
cmp eax, 0x2e
jne 0x487d57
push 0xb39b30
push rax
mov r8d, 0x28
mov edx, 4
mov rcx, qword [section..bss]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_HeapAlloc]
add rsp, 0x28
mov dword [rax], 0
mov qword [rax + 8], 0
inc dword [0x017bc0c4]
mov ebx, dword [0x017bc0c4]
mov dword [rax + 0x10], ebx
mov qword [rsp + 8], rax
push rax
mov r8d, 4
mov edx, 4
mov rcx, qword [section..bss]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_HeapAlloc]
add rsp, 0x28
mov dword [rax], 0
push rax
call fcn.006defae
pop rcx
mov dword [rax + 4], 4
mov rbx, qword [rsp + 8]
mov qword [rbx + 0x18], rax
mov byte [rbx + 0x20], 1
push rax
mov rax, rbx
call fcn.006defae
pop rcx
mov dword [rax + 4], 0x1d
push rax
call fcn.00455ee5
push 0xf
push 0x64
call fcn.00420a72
jmp 0x487d59
cmp eax, 0x37
jne 0x487d57
push rax
lea rax, [rbp - 0x218]
push rax
call fcn.00516424
pop rcx
movzx eax, word [0x017bc0d0]
cmp eax, 0
je 0x487b94
push 0x104
push 0x17bc0d0
call fcn.00425760
push rax
push 0
call fcn.0050e9dc
pop rcx
mov byte [0x00e5d693], 0
push rax
push 0xb
push str.Select_File
push 0x30
push str.file.jpg_.jpeg_.gif_.bmp_.png_.avm_.bvh_n
push 0
lea rax, [rbp - 0x428]
push rax
push 0
push 0x6ead10
push 0xf
call fcn.0051659f
push rax
call fcn.00516448
pop rcx
mov dword [rbp - 4], eax
push rax
push 0x17bc0d0
call fcn.00516424
pop rcx
push 0x104
lea rax, [rbp - 0x218]
push rax
call fcn.00425760
cmp dword [rbp - 4], 0
jge 0x487c0e
push rax
push 1
call fcn.0050e9dc
pop rcx
mov byte [0x00e5d693], 1
jmp 0x487d59
inc dword [0x017bc2d8]
mov r8d, 0x10
mov edx, 4
mov rcx, qword [section..bss]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_HeapAlloc]
add rsp, 0x20
mov ebx, dword [0x017bc2d8]
mov dword [rax], ebx
mov qword [rsp], rax
mov r8d, 0x20c
mov edx, 4
mov rcx, qword [section..bss]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_HeapAlloc]
add rsp, 0x20
mov dword [rax], 0x104
mov r8d, 0x208
lea rdx, [rbp - 0x428]
mov rdi, rax
lea rcx, [rdi + 4]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlMoveMemory]
add rsp, 0x20
mov rax, rdi
call fcn.006defae
mov dword [rax + 4], 8
mov rbx, qword [rsp]
mov qword [rbx + 8], rax
mov rax, rbx
call fcn.006defae
mov dword [rax + 4], 0x85
mov qword [rbp - 0x430], rax
push 0
push 0
mov r9, qword [rbp - 0x430]
mov r8d, 0x5165b1
xor edx, edx
xor ecx, ecx
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_CreateThread]
add rsp, 0x30
test rax, rax
je 0x487cf3
mov rcx, rax
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
add rsp, 0x20
mov eax, 0xffffffff
not eax
cmp eax, 0
jge 0x487d55
mov rax, qword [rbp - 0x430]
lock inc dword [rax]
cmp dword [rax + 4], 0x85
jne 0x487de2
mov qword [rbp - 0x438], rax
mov rax, qword [rax + 8]
mov rax, qword [rax + 8]
mov ebx, 8
call fcn.006df099
mov rax, qword [rbp - 0x438]
lock dec dword [rax]
mov rax, qword [rbp - 0x430]
mov ebx, 0x85
call fcn.006df099
push rax
push 1
call fcn.0050e9dc
pop rcx
mov byte [0x00e5d693], 1
jmp 0x487d59
jmp 0x487d59
jmp 0x487db8
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 0x18]
mov dword [0x017bc0b8], eax
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 0x1c]
mov dword [0x017bc0bc], eax
mov rax, qword [rbp + 0x10]
push qword [rax + 0x18]
mov rax, qword [rbp + 0x10]
push qword [rax + 0x1c]
call fcn.004774ca
jmp 0x487db8
mov rax, qword [rbp + 0x10]
push qword [rax + 0x20]
mov rax, qword [rbp + 0x10]
push qword [rax + 0x24]
call fcn.00516e3c
jmp 0x487db8
push rax
push 0
call fcn.004204fd
pop rcx
mov byte [0x00b39b28], 0
call fcn.00488ebc
jmp 0x487db8
jmp 0x487db8
leave
ret 8
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
push rbp
mov rbp, rsp
sub rsp, 0x6f0
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 4]
cmp eax, 0x1e
ja case.0x487dff.4
jmp qword [rax*8 + 0x710680]
mov byte [0x00e5d695], 1
push rax
lea rax, [rbp - 0x34]
push rax
lea rax, [rbp - 0x38]
push rax
push 1
call fcn.00420557
pop rcx
mov eax, dword [rbp - 0x34]
sub eax, 0x3c0
sar eax, 1
push rax
push 0x14
call fcn.004774ca
mov dword [0x017bc2dc], 0x156
push 0x3c0
push qword [0x017bc2dc]
call fcn.00477615
lea rcx, [rbp - 0x30]
mov edx, 0x2c
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlZeroMemory]
add rsp, 0x20
push 0x20
lea rax, [rbp - 0x30]
push rax
push 6
push str.Tahoma
call fcn.0040aecf
mov dword [rbp - 0x10], 0xe
mov dword [rbp - 8], 0xa0a0a0
push rax
lea rax, [rbp - 0x30]
push rax
call fcn.0047b49a
pop rcx
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x488ddc
shl eax, 4
mov ebx, dword [rax + 0x710798]
push rbx
push qword [rax + 0x710790]
call fcn.0047b409
push rax
push 0x14
call fcn.00477717
pop rcx
push rax
push 0
call fcn.004776de
pop rcx
push rax
push 2
call fcn.0047d3f3
pop rcx
push rax
push 0x4e4e4e
call fcn.0047b475
pop rcx
push rax
push 0x6fbbe0
call fcn.00477750
pop rcx
push rax
push 0x3e3e3e
call fcn.004777bd
pop rcx
push 0xff
push 0xff
call fcn.0048071c
lea rcx, [rbp - 0x30]
mov edx, 0x2c
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlZeroMemory]
add rsp, 0x20
push 0x20
lea rax, [rbp - 0x30]
push rax
push 0xb
push str.Courier_New
call fcn.0040aecf
mov dword [rbp - 0x10], 0x10
mov dword [rbp - 8], 0xa0a0a0
push rax
lea rax, [rbp - 0x30]
push rax
call fcn.004777e2
pop rcx
push rax
push 5
push 5
push 0x46
push 0x14
push 0x64
call fcn.0047786a
pop rcx
push rax
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x488dde
shl eax, 4
mov ebx, dword [rax + 0x7107e8]
push rbx
push qword [rax + 0x7107e0]
push 0x64
call fcn.004779e1
pop rcx
push 0x50
push 3
push 0x2a8
push 0x14
push 0x50
push 0x65
call fcn.0047d656
push rax
push 0x307
push 3
push 0x50
push 0x1c
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x488de0
shl eax, 4
mov ebx, dword [rax + 0x710818]
push rbx
push qword [rax + 0x710810]
push 0x3e8
call fcn.0047b9cd
pop rcx
push rax
push 0x361
push 3
push 0x50
push 0x1c
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x488de2
shl eax, 4
mov ebx, dword [rax + 0x710888]
push rbx
push qword [rax + 0x710880]
push 0x2328
call fcn.0047b9cd
pop rcx
push rax
push 6
push 0x1e
push 0x226
push 0x14
push 0xc8
call fcn.0047786a
pop rcx
push rax
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x488de4
shl eax, 4
mov ebx, dword [rax + 0x710918]
push rbx
push qword [rax + 0x710910]
push 0xc8
call fcn.004779e1
pop rcx
push 0x64
push 0xd
call fcn.004c233c
mov dword [0x017bc2e0], eax
push 4
push 0x32
push 0x190
mov eax, dword [0x017bc2e0]
shl eax, 4
add eax, 4
push rax
push 0x14
push 0x10
push 0x40
push 0xc9
call fcn.00516e94
push rax
push 0x1e
push 0x11e
push 0xa0
push 0x1c
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x488de6
shl eax, 4
mov ebx, dword [rax + 0x710978]
push rbx
push qword [rax + 0x710970]
push 0xbb8
call fcn.0047b9cd
pop rcx
push rax
push 0xe6
push 0x11e
push 0xa0
push 0x1c
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x488de8
shl eax, 4
mov ebx, dword [rax + 0x7109d8]
push rbx
push qword [rax + 0x7109d0]
push 0xfa0
call fcn.0047b9cd
pop rcx
push 0
push 0xbb8
call fcn.005064df
push 0
push 0xfa0
call fcn.005064df
push rax
push 0x1a4
push 0x32
push 0x190
push 0x14
push 0x1388
call fcn.0047786a
pop rcx
push rax
push 0x1a4
push 0x50
push 0x104
push 0x14
push 0x1392
call fcn.0047786a
pop rcx
push rax
push 0x1a4
push 0x69
push 0x104
push 0x14
push 0x1393
call fcn.0047786a
pop rcx
push rax
push 0x1a4
push 0x82
push 0x104
push 0x14
push 0x1394
call fcn.0047786a
pop rcx
push rax
push 0x1a4
push 0x9b
push 0x104
push 0x14
push 0x1395
call fcn.0047786a
pop rcx
push rax
push 0x2bc
push 0x50
push 0xf0
push 0x6e
push 0x1397
call fcn.0047bc80
pop rcx
push rax
push 0x1a4
push 0xd2
push 0x190
push 0x14
push 0x139c
call fcn.0047786a
pop rcx
push rax
push 0x1a4
push 0xf0
push 0x12c
push 0x14
push 0x13ba
call fcn.0047786a
pop rcx
push 0
push 0x13ba
call fcn.005064df
push rax
push 0x1f4
push 0xf0
push 0xa0
push 0x1c
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x488dea
shl eax, 4
mov ebx, dword [rax + 0x710a18]
push rbx
push qword [rax + 0x710a10]
push 0x13bb
call fcn.0047b9cd
pop rcx
push 0
push 0x13bb
call fcn.005064df
push rax
push 0x2d0
push 0xf0
push 0xa0
push 0x1c
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x488dec
shl eax, 4
mov ebx, dword [rax + 0x710a78]
push rbx
push qword [rax + 0x710a70]
push 0x13bc
call fcn.0047b9cd
pop rcx
push 0
push 0x13bc
call fcn.005064df
mov dword [0x017bc2e4], 0x7fffffff
mov ecx, 0x17bc2f0
mov edx, 0x184
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlZeroMemory]
add rsp, 0x20
call fcn.0051726d
call fcn.005172d2
push 0xd
push 0x32
call fcn.00420a72
jmp 0x488dd8
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 8]
cmp eax, 0x13bb
jge 0x4883f1
cmp eax, 0xbb8
jge 0x4882eb
cmp eax, 0x3e8
jne 0x4885c8
push 0xd
push 0x32
call fcn.00420a72
jmp 0x4885ca
cmp eax, 0xfa0
jge 0x488364
cmp eax, 0xbb8
jne 0x4885c8
call fcn.005172fe
test al, al
je 0x4885ca
push rax
push 0x17bc480
call fcn.0040b260
pop rcx
cmp qword [0x017bc4b0], 0
je 0x488353
cmp dword [0x017bc4b8], 0
je 0x488353
mov eax, dword [0x017bc2e0]
sub dword [0x017bc4b8], eax
cmp dword [0x017bc4b8], 0
jge 0x48834a
mov dword [0x017bc4b8], 0
push 0xd
push 0x64
call fcn.00420a72
push rax
push 0x17bc480
call fcn.0040ba36
pop rcx
jmp 0x4885ca
cmp eax, 0xfa0
jne 0x4885c8
call fcn.005172fe
test al, al
je 0x4885ca
push rax
push 0x17bc480
call fcn.0040b260
pop rcx
cmp qword [0x017bc4b0], 0
je 0x4883e0
mov eax, dword [0x017bc4b8]
add eax, dword [0x017bc2e0]
mov rbx, qword [0x017bc4b0]
lock inc dword [rbx]
cmp dword [rbx + 4], 0x86
jne 0x488dee
mov qword [rbp - 8], rbx
mov rbx, qword [rbx + 8]
mov esi, dword [rbx]
mov rdi, qword [rbp - 8]
lock dec dword [rdi]
cmp eax, esi
jge 0x4883e0
mov eax, dword [0x017bc2e0]
add dword [0x017bc4b8], eax
push 0xd
push 0x64
call fcn.00420a72
push rax
push 0x17bc480
call fcn.0040ba36
pop rcx
jmp 0x4885ca
cmp eax, 0x13bc
jge 0x488514
call fcn.005172fe
test al, al
je 0x4885ca
mov eax, dword [0x00e34aa4]
and eax, 0x20
cmp eax, 0
jne 0x4885ca
mov eax, dword [0x00e34ab0]
and eax, 0x20
cmp eax, 0
jne 0x4885ca
mov byte [0x017bc4bc], 1
inc dword [0x009d62e9]
call fcn.00406131
push rax
push 0x17bc480
call fcn.0040b260
pop rcx
cmp dword [0x017bc2f8], 0
je 0x488503
push 8
push 0x17bc2f0
push 8
push 0x175c9d8
call fcn.00410e58
cmp eax, 0
jne 0x4884cd
test byte [0x017bc43d], 0xff
je 0x4884cb
push 0x17bc43e
lea rax, [rbp - 0x48]
push rax
call fcn.004c5145
push rax
lea rax, [rbp - 0x48]
push rax
call fcn.004cbf60
pop rcx
cmp dword [0x009d6020], 2
jne 0x4884cb
mov eax, dword [0x017bc2f8]
mov dword [0x0175c9ec], eax
mov rax, qword [0x017bc464]
mov rbx, qword [0x017bc46c]
mov qword [0x00e5d590], rax
mov qword [0x00e5d598], rbx
call fcn.00421462
jmp 0x488503
push 4
push qword [0x00b3a29c]
mov dword [rbp - 0x18], 0x3d0bd0
mov dword [rbp - 0x14], 0
mov rax, qword [0x017bc2f0]
mov ebx, dword [0x017bc2f8]
mov qword [rbp - 0x10], rax
mov dword [rbp - 8], ebx
push 0x14
lea rax, [rbp - 0x18]
push rax
call fcn.00482744
push rax
push 0x17bc480
call fcn.0040ba36
pop rcx
jmp 0x4885ca
cmp eax, 0x2328
jge 0x4885b9
cmp eax, 0x13bc
jne 0x4885c8
call fcn.005172fe
test al, al
je 0x4885ca
push rax
push 0x17bc480
call fcn.0040b260
pop rcx
cmp dword [0x017bc2f8], 0
je 0x4885ab
push 8
push 0x17bc2f0
push 8
push 0x175c9d8
call fcn.00410e58
cmp eax, 0
jne 0x488575
push rax
push qword [0x017bc2f8]
call fcn.0050eb2c
pop rcx
jmp 0x4885ab
push 4
push qword [0x00b3a29c]
mov dword [rbp - 0x18], 0x3d0bd0
mov dword [rbp - 0x14], 2
mov rax, qword [0x017bc2f0]
mov ebx, dword [0x017bc2f8]
mov qword [rbp - 0x10], rax
mov dword [rbp - 8], ebx
push 0x14
lea rax, [rbp - 0x18]
push rax
call fcn.00482744
push rax
push 0x17bc480
call fcn.0040ba36
pop rcx
jmp 0x4885ca
cmp eax, 0x2328
jne 0x4885c8
call fcn.00506439
jmp 0x4885ca
int 5
jmp 0x488dd8
push rax
push 0x17bc480
call fcn.0040b260
pop rcx
push rax
mov rax, qword [rbp + 0x10]
mov ebx, dword [0x017bc4b8]
add ebx, dword [rax + 0x14]
dec ebx
push rbx
call fcn.0051731c
pop rcx
call fcn.00517354
push rax
push 0x17bc480
call fcn.0040ba36
pop rcx
jmp 0x488dd8
mov rax, qword [rbp + 0x10]
push qword [rax + 0x14]
push 0xc9
call fcn.0051740f
push rax
mov rax, qword [rbp + 0x10]
push qword [rax + 0x14]
push 1
push 0xc9
call fcn.00505ad4
pop rcx
jmp 0x488dd8
mov rax, qword [rbp + 0x10]
cmp dword [rax + 0x10], 0x32
jne 0x488719
call fcn.005172fe
test al, al
je 0x488dd8
lea rcx, [rbp - 0xa8]
mov edx, 0xa6
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlZeroMemory]
add rsp, 0x20
mov dword [rbp - 0xa8], 0x3d0af4
mov al, byte [0x00b3a358]
mov byte [rbp - 0xa4], al
mov al, byte [0x009d612d]
mov byte [rbp - 0xa3], al
push rax
push 0x50
lea rax, [rbp - 0xa2]
push rax
push 0x65
call fcn.0047dd92
pop rcx
push 4
push qword [0x00b3a29c]
push 0x50
lea rax, [rbp - 0xa2]
push rax
call fcn.0045185b
add eax, eax
add eax, 6
mov dword [rbp - 0xac], eax
mov eax, 0xa6
sub eax, dword [rbp - 0xac]
jb 0x488df0
push qword [rbp - 0xac]
lea rax, [rbp - 0xa8]
push rax
call fcn.00482744
mov dword [0x017bc2e4], 0x7fffffff
mov ecx, 0x17bc2f0
mov edx, 0x184
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlZeroMemory]
add rsp, 0x20
call fcn.0051726d
call fcn.00517509
call fcn.005172d2
jmp 0x488ce5
mov rax, qword [rbp + 0x10]
cmp dword [rax + 0x10], 0x64
jne 0x488ad0
jmp 0x488735
push 1
push 0xc9
call fcn.0047d1c1
push rax
push 0xc9
call fcn.0047c4ee
pop rcx
cmp eax, 0
jg 0x488729
call fcn.005172fe
test al, al
je 0x488dd8
push rax
push 0x17bc480
call fcn.0040b260
pop rcx
cmp qword [0x017bc4b0], 0
je 0x488abf
push rax
mov eax, dword [0x017bc4b8]
add eax, 0x80
sub eax, dword [0x017bc4c0]
push rax
mov rax, qword [0x017bc4b0]
lock inc dword [rax]
cmp dword [rax + 4], 0x86
jne 0x488df2
mov qword [rbp - 0x620], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
mov rsi, qword [rbp - 0x620]
lock dec dword [rsi]
sub ebx, dword [0x017bc4c0]
push rbx
push pe_nt_image_headers64
call fcn.00517559
pop rcx
mov dword [rbp - 4], eax
cmp dword [rbp - 4], 0
jle 0x4888cb
lea rcx, [rbp - 0x618]
mov edx, 0x60c
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlZeroMemory]
add rsp, 0x20
mov dword [rbp - 0x618], 0x3d0b58
mov dword [rbp - 0x614], 0
mov eax, dword [rbp - 4]
mov dword [rbp - 0x610], eax
mov dword [rbp - 8], 0
jmp 0x48887d
mov eax, dword [rbp - 8]
cmp eax, 0x80
jae 0x488df4
imul eax, eax, 0xc
mov rbx, qword [0x017bc4b0]
lock inc dword [rbx]
cmp dword [rbx + 4], 0x86
jne 0x488df4
mov qword [rbp - 0x620], rbx
mov esi, dword [0x017bc4c0]
add esi, dword [rbp - 8]
mov rbx, qword [rbx + 8]
mov edi, dword [rbx]
cmp esi, edi
jae 0x488df4
imul esi, esi, 0x50
mov rdi, qword [rbx + rsi + 4]
mov ecx, dword [rbx + rsi + 0xc]
mov qword [rbp + rax - 0x60c], rdi
mov dword [rbp + rax - 0x604], ecx
mov rax, qword [rbp - 0x620]
lock dec dword [rax]
inc dword [rbp - 8]
mov eax, dword [rbp - 8]
cmp eax, dword [rbp - 4]
jl 0x48880e
push 4
push qword [0x00b3a29c]
mov eax, 0xc
mul dword [rbp - 4]
add eax, 0xc
mov dword [rbp - 0x61c], eax
mov eax, 0x60c
sub eax, dword [rbp - 0x61c]
jb 0x488df6
push qword [rbp - 0x61c]
lea rax, [rbp - 0x618]
push rax
call fcn.00482744
mov eax, dword [rbp - 4]
add dword [0x017bc4c0], eax
mov eax, dword [0x017bc4b8]
mov dword [rbp - 8], eax
jmp 0x488a4b
mov rax, qword [0x017bc4b0]
lock inc dword [rax]
cmp dword [rax + 4], 0x86
jne 0x488df8
mov qword [rbp - 0x6a0], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
mov rsi, qword [rbp - 0x6a0]
lock dec dword [rsi]
cmp ebx, dword [rbp - 8]
jle 0x488a60
mov eax, dword [rbp - 8]
cmp eax, dword [0x017bc4c4]
jge 0x488a60
push 0x40
lea rax, [rbp - 0x698]
push rax
push 0xd
push str.__32.32S__10d
mov rax, qword [0x017bc4b0]
lock inc dword [rax]
cmp dword [rax + 4], 0x86
jne 0x488dfa
mov qword [rbp - 0x6a0], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
mov esi, dword [rbp - 8]
cmp esi, ebx
jae 0x488dfa
imul esi, esi, 0x50
mov dword [rbp - 0x6c0], 0x40
lea rax, [rax + rsi + 0x10]
mov qword [rbp - 0x6c8], rax
mov rax, qword [0x017bc4b0]
lock inc dword [rax]
cmp dword [rax + 4], 0x86
jne 0x488dfa
mov qword [rbp - 0x6d8], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
mov esi, dword [rbp - 8]
cmp esi, ebx
jae 0x488dfa
imul esi, esi, 0x50
fld dword [rax + rsi + 0x50]
fnstcw word [rsp + 0x28]
fldcw word [section..data]
fistp qword [rsp + 0x20]
fldcw word [rsp + 0x28]
mov rax, qword [rsp + 0x20]
mov rbx, qword [rbp - 0x6d8]
lock dec dword [rbx]
mov qword [rbp - 0x6d0], rax
mov dword [rbp - 0x6b0], 8
lea rax, [rbp - 0x6d0]
mov qword [rbp - 0x6b8], rax
push 2
lea rax, [rbp - 0x6c8]
push rax
call fcn.00451944
mov rbx, qword [rbp - 0x6a0]
lock dec dword [rbx]
push rax
push 0
push 0x40
lea rax, [rbp - 0x698]
push rax
push 0xc9
push 0x6fbcf0
call fcn.00509cc9
pop rcx
mov eax, dword [0x017bc2e4]
cmp eax, dword [rbp - 8]
jne 0x488a48
push rax
push 0xc9
call fcn.0047c4ee
push rax
push 1
push 0xc9
call fcn.00505ad4
pop rcx
inc dword [rbp - 8]
mov eax, dword [0x017bc4b8]
add eax, dword [0x017bc2e0]
cmp eax, dword [rbp - 8]
jg 0x4888d9
cmp dword [0x017bc4b8], 0
setg al
push rax
push 0xbb8
call fcn.005064df
mov eax, dword [0x017bc4b8]
add eax, dword [0x017bc2e0]
mov rbx, qword [0x017bc4b0]
lock inc dword [rbx]
cmp dword [rbx + 4], 0x86
jne 0x488dfc
mov qword [rbp - 0x620], rbx
mov rbx, qword [rbx + 8]
mov esi, dword [rbx]
mov rdi, qword [rbp - 0x620]
lock dec dword [rdi]
cmp eax, esi
setl al
push rax
push 0xfa0
call fcn.005064df
push rax
push 0x17bc480
call fcn.0040ba36
pop rcx
jmp 0x488ce5
mov rax, qword [rbp + 0x10]
cmp dword [rax + 0x10], 0x96
jne 0x488b08
push rax
push 0x17bc480
call fcn.0040b260
pop rcx
cmp dword [0x017bc2f8], 0
jne 0x488af7
call fcn.00517354
push rax
push 0x17bc480
call fcn.0040ba36
pop rcx
jmp 0x488ce5
mov rax, qword [rbp + 0x10]
cmp dword [rax + 0x10], 0xc8
jne 0x488cd3
push rax
push 0x17bc480
call fcn.0040b260
pop rcx
call fcn.0051726d
call fcn.0051758b
call fcn.005172fe
test al, al
je 0x488ca6
cmp dword [0x017bc2f8], 0
je 0x488ca6
push 0x40
lea rax, [rbp - 0x88]
push rax
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x488dfe
shl eax, 4
mov ebx, dword [rax + 0x710b08]
push rbx
push qword [rax + 0x710b00]
fld dword [0x017bc44c]
fnstcw word [rsp + 0x28]
fldcw word [section..data]
fistp qword [rsp + 0x20]
fldcw word [rsp + 0x28]
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0xa0], rax
mov dword [rbp - 0x90], 8
lea rax, [rbp - 0xa0]
mov qword [rbp - 0x98], rax
push 1
lea rax, [rbp - 0x98]
push rax
call fcn.00451944
push rax
push 0x40
lea rax, [rbp - 0x88]
push rax
push 0x139c
call fcn.005052d7
pop rcx
test byte [0x017bc43d], 0xff
je 0x488bf6
push 0
push 0x13ba
call fcn.005064df
push 1
push 0x13bb
call fcn.005064df
jmp 0x488c39
push 0
push 0x13bb
call fcn.005064df
push 1
push 0x13ba
call fcn.005064df
push rax
mov eax, dword [0x009d6dc4]
cmp eax, 3
jae 0x488e00
shl eax, 4
mov ebx, dword [rax + 0x710ba8]
push rbx
push qword [rax + 0x710ba0]
push 0x13ba
call fcn.004779e1
pop rcx
push 8
push 0x17bc2f0
push 8
push 0x175c9d8
call fcn.00410e58
cmp eax, 0
jne 0x488c7f
movsx eax, byte [0x017bc43c]
cmp eax, 0
setge al
test al, al
je 0x488c77
movsx eax, byte [0x017bc43c]
push rax
movzx eax, byte [0x017bc450]
push rax
call fcn.004855a3
mov byte [rbp - 0x89], al
jmp 0x488c92
movzx eax, byte [0x017bc450]
cmp eax, 6
setae al
mov byte [rbp - 0x89], al
movzx eax, byte [rbp - 0x89]
push rax
push 0x13bc
call fcn.005064df
jmp 0x488cc5
push 0
push 0x139c
call fcn.005064df
push rax
push 0
push 0x13ba
push 0x13bc
call fcn.0047bb91
pop rcx
push rax
push 0x17bc480
call fcn.0040ba36
pop rcx
jmp 0x488ce5
mov rax, qword [rbp + 0x10]
cmp dword [rax + 0x10], 0x384
jne 0x488ce5
call fcn.0051758b
jmp 0x488dd8
mov rax, qword [rbp + 0x10]
push qword [rax + 0x18]
mov rax, qword [rbp + 0x10]
push qword [rax + 0x1c]
call fcn.004774ca
jmp 0x488dd8
push 0x156
mov rax, qword [rbp + 0x10]
push qword [rax + 0x24]
call fcn.0042053f
mov dword [rbp - 4], eax
mov eax, dword [rbp - 4]
cmp eax, dword [0x017bc2dc]
je 0x488dc6
mov eax, dword [rbp - 4]
mov dword [0x017bc2dc], eax
push 0x64
mov eax, dword [rbp - 4]
sub eax, 4
sub eax, 0x14
sub eax, 0x32
sub eax, 0x2d
mov ebx, 0x10
cdq
idiv ebx
push rax
call fcn.004c233c
mov dword [0x017bc2e0], eax
push 0x3c0
push qword [rbp - 4]
call fcn.00477615
push rax
push 0x190
mov eax, dword [0x017bc2e0]
shl eax, 4
add eax, 4
push rax
push 0xc9
call fcn.0050afa9
pop rcx
push rax
push 0x1e
mov eax, dword [rbp - 4]
sub eax, 4
sub eax, 0x14
sub eax, 0x1e
sub eax, 2
push rax
push 0xbb8
call fcn.00505d3c
pop rcx
push rax
push 0xe6
mov eax, dword [rbp - 4]
sub eax, 4
sub eax, 0x14
sub eax, 0x1e
sub eax, 2
push rax
push 0xfa0
call fcn.00505d3c
pop rcx
push 0xd
push 0x64
call fcn.00420a72
jmp 0x488dd8
mov byte [0x00e5d695], 0
call fcn.00517708
jmp 0x488dd8
jmp 0x488dd8
leave
ret 8
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5