Function at 0x410ab0
Capabilities:
Check mutex on windows
Resolve function by parsing pe exports
Set current directory

Disassembly:
mov rax, rsp
sub rsp, 0x668
mov qword [rsp + 0x330], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rbp
mov qword [rax - 8], rsi
mov qword [rax - 0x10], rdi
mov qword [rax - 0x18], r12
mov qword [rax - 0x20], r13
mov qword [rax - 0x28], r14
mov qword [rax - 0x30], r15
mov rax, qword [0x00467048]
mov qword [rsp + 0x620], rax
mov r15, rdx
mov dword [rsp + 0x30], ecx
lea rdx, [0x0044fcbc]
xor ecx, ecx
call fcn.00429a70
mov edx, 1
lea rcx, [rsp + 0x340]
call fcn.0041afc0
nop
lea rcx, [rsp + 0x1e0]
call fcn.00408110
nop
lea rdx, [section..SHMMESS]
lea rcx, [rsp + 0x3f0]
call fcn.00423760
nop
lea rax, [rsp + 0x340]
mov qword [0x004687c8], rax
lea rax, [rsp + 0x1e0]
mov qword [0x004687d0], rax
lea rax, [rsp + 0x3f0]
mov qword [0x004687d8], rax
xor eax, eax
mov dword [rsp + 0x80], eax
mov dword [rsp + 0x84], eax
mov dword [rsp + 0x80], 8
lea rcx, [rsp + 0x80]
call qword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
lea rdx, [rsp + 0x158]
lea rcx, [rsp + 0x340]
call fcn.0041cea0
nop
lea rbp, [0x0044f640]
xor r12d, r12d
lea r13, [0x0044f620]
cmp dword [rsp + 0x168], r12d
je 0x410c2d
lea rdx, [rsp + 0x198]
lea rcx, [rsp + 0x340]
call fcn.00404200
nop
mov rdx, rax
lea rcx, [rsp + 0x158]
call fcn.0040d310
nop
mov qword [rsp + 0x198], rbp
mov rcx, qword [rsp + 0x1a0]
mov qword [rsp + 0x1a0], r12
mov dword [rsp + 0x1a8], r12d
mov dword [rsp + 0x1b0], r12d
test rcx, rcx
je 0x410c20
call fcn.00426530
mov qword [rsp + 0x198], r13
jmp 0x410cc7
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
mov edx, 0x64
call qword [sym.imp.USER32.dll_LoadBitmapA]
mov rbx, rax
test rax, rax
je 0x410cc7
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0x340]
call fcn.0040b590
nop
mov edx, dword [rsp + 0xf8]
lea rcx, [rsp + 0xe8]
mov r8, qword [rsp + 0xe8]
call qword [r8 + 8]
mov rdx, qword [rsp + 0xf0]
mov rcx, rbx
call fcn.004219c0
nop
mov qword [rsp + 0xe8], rbp
mov rcx, qword [rsp + 0xf0]
mov qword [rsp + 0xf0], r12
mov dword [rsp + 0xf8], r12d
mov dword [rsp + 0x100], r12d
test rcx, rcx
je 0x410cbf
call fcn.00426530
mov qword [rsp + 0xe8], r13
lea rdx, [rsp + 0x108]
mov rcx, qword [0x004687c8]
call fcn.0040c420
nop
mov edx, dword [rsp + 0x118]
test edx, edx
jle 0x410da4
lea rcx, [rsp + 0x108]
mov rax, qword [rsp + 0x108]
call qword [rax + 8]
mov rdi, qword [rsp + 0x110]
lea rdx, [rsp + 0x178]
mov rcx, qword [0x004687c8]
call fcn.0040c9a0
mov rbx, rax
mov r8, qword [rax]
mov edx, dword [rax + 0x10]
mov rcx, rax
call qword [r8 + 8]
mov r9d, 0x104
lea r8, [rsp + 0x510]
mov rdx, rdi
mov rcx, qword [rbx + 8]
call fcn.0040a4d0
mov ebx, eax
mov qword [rsp + 0x178], rbp
mov rcx, qword [rsp + 0x180]
mov qword [rsp + 0x180], r12
mov dword [rsp + 0x188], r12d
mov dword [rsp + 0x190], r12d
test rcx, rcx
je 0x410d78
call fcn.00426530
mov qword [rsp + 0x178], r13
lea eax, [rbx - 1]
cmp eax, 0x102
ja 0x410d98
lea rcx, [rsp + 0x510]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov rcx, qword [0x004687c8]
call fcn.00412c80
lea rdx, [rsp + 0xa8]
mov rcx, qword [0x004687c8]
call fcn.0040c200
nop
mov edx, dword [rsp + 0xb8]
test edx, edx
je 0x410deb
lea rcx, [rsp + 0xa8]
mov rax, qword [rsp + 0xa8]
call qword [rax + 8]
mov rdx, qword [rsp + 0xb0]
lea rcx, [0x00468850]
call fcn.004231c0
lea rdx, [rsp + 0xc8]
mov rcx, qword [0x004687c8]
call fcn.0040bfe0
nop
mov edx, dword [rsp + 0xd8]
test edx, edx
je 0x410e32
lea rcx, [rsp + 0xc8]
mov rax, qword [rsp + 0xc8]
call qword [rax + 8]
mov rdx, qword [rsp + 0xd0]
lea rcx, [0x00468850]
call fcn.004230f0
mov edx, dword [rsp + 0xb8]
lea rcx, [rsp + 0xa8]
mov rax, qword [rsp + 0xa8]
call qword [rax + 8]
mov r11, qword [rsp + 0xb0]
mov qword [rsp + 0x248], r11
mov ecx, r12d
mov dword [rsp + 0x250], r12d
test r11, r11
je 0x410e84
cmp byte [r11], cl
je 0x410e84
inc ecx
movsxd rax, ecx
cmp byte [rax + r11], 0
jne 0x410e71
mov dword [rsp + 0x250], ecx
mov eax, ecx
mov edi, dword [rsp + 0xd8]
cmp edi, ecx
cmovl eax, edi
mov r8d, r12d
mov r9, r12
movsxd rbx, eax
mov rsi, qword [rsp + 0xd0]
test eax, eax
jle 0x410ecc
mov rdx, rsi
mov r10, r11
sub r10, rsi
movzx eax, byte [r10 + rdx]
cmp byte [rdx], al
jne 0x410ec7
inc r8d
inc r9
inc rdx
cmp r9, rbx
jl 0x410eb0
test r8d, r8d
js 0x410edb
cmp r8d, edi
jge 0x410edb
movsxd rax, r8d
movzx r9d, byte [rax + rsi]
jmp 0x410ede
xor r9b, r9b
test r8d, r8d
js 0x410ef2
cmp r8d, ecx
jge 0x410ef2
movsxd rax, r8d
movzx edx, byte [rax + r11]
jmp 0x410ef4
xor dl, dl
movsx ecx, r9b
movsx eax, dl
sub ecx, eax
mov qword [rsp + 0x240], r13
mov eax, r12d
sete al
mov dword [0x004687c0], eax
mov dword [rsp + 0x3c], r12d
lea rdx, [rsp + 0x1b8]
lea rcx, [rsp + 0x340]
call fcn.0040be30
mov rbx, rax
mov r8, qword [rax]
mov edx, dword [rax + 0x10]
mov rcx, rax
call qword [r8 + 8]
lea r8, [rsp + 0x3c]
lea rdx, [0x0045070c]
mov rcx, qword [rbx + 8]
call fcn.00426410
nop
mov qword [rsp + 0x1b8], rbp
mov rcx, qword [rsp + 0x1c0]
mov qword [rsp + 0x1c0], r12
mov dword [rsp + 0x1c8], r12d
mov dword [rsp + 0x1d0], r12d
test rcx, rcx
je 0x410f83
call fcn.00426530
mov qword [rsp + 0x1b8], r13
lea rcx, [rsp + 0x4a8]
lea r13, [0x00400000]
mov rax, qword [r13 + 0x506f0]
mov qword [rcx], rax
mov rax, qword [r13 + 0x506f8]
mov qword [rcx + 8], rax
mov rax, qword [r13 + 0x50700]
mov qword [rcx + 0x10], rax
movzx eax, byte [r13 + 0x50708]
mov byte [rcx + 0x18], al
lea rcx, [rsp + 0x4a8]
lea rbx, [0x004688a0]
mov rdx, rbx
mov edi, 0x19
mov r8, rdi
nop
movzx eax, byte [rcx]
mov byte [rdx], al
inc rdx
inc rcx
dec r8
jne 0x410fe0
lea rcx, str._JAR2EXE_BINARY_DEBUG_
call fcn.00427dd0
test rax, rax
je 0x411040
movzx eax, byte [rbx]
test al, al
js 0x411013
movzx eax, byte [rbx]
cmp al, 0x20
jge 0x411013
mov al, 0x2e
jmp 0x411016
movzx eax, byte [rbx]
movsx edx, al
lea rcx, [0x00450090]
call fcn.00428520
inc rbx
dec rdi
jne 0x411001
lea rcx, [0x0045008c]
call fcn.00428520
lea rbx, [0x004688a0]
cmp byte [0x004688a0], 0
je 0x411100
mov ecx, dword [rsp + 0x3c]
call fcn.0041d3c0
test eax, eax
jne 0x411100
lea edx, [rax + 9]
lea rcx, [rsp + 0x258]
call fcn.0040ddf0
nop
mov edx, 0xa
lea rcx, [rsp + 0x2f8]
call fcn.0040ddf0
nop
mov edx, dword [rsp + 0x308]
lea rcx, [rsp + 0x2f8]
mov rax, qword [rsp + 0x2f8]
call qword [rax + 8]
mov rbx, qword [rsp + 0x300]
mov edx, dword [rsp + 0x268]
lea rcx, [rsp + 0x258]
mov rax, qword [rsp + 0x258]
call qword [rax + 8]
mov rcx, qword [0x00468f68]
call fcn.00421710
mov rcx, rax
mov r9d, 0x50030
mov r8, rbx
mov rdx, qword [rsp + 0x260]
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, 0x64
mov rcx, qword [0x00468f68]
call fcn.004216b0
mov ecx, 9
call fcn.00428c80
nop
lea rcx, [rsp + 0x490]
mov rax, qword [r13 + 0x506d8]
mov qword [rcx], rax
mov rax, qword [r13 + 0x506e0]
mov qword [rcx + 8], rax
mov eax, dword [r13 + 0x506e8]
mov dword [rcx + 0x10], eax
movzx eax, word [r13 + 0x506ec]
mov word [rcx + 0x14], ax
lea rcx, [rsp + 0x4e8]
mov rax, qword [r13 + 0x506b8]
mov qword [rcx], rax
mov rax, qword [r13 + 0x506c0]
mov qword [rcx + 8], rax
mov rax, qword [r13 + 0x506c8]
mov qword [rcx + 0x10], rax
movzx eax, word [r13 + 0x506d0]
mov word [rcx + 0x18], ax
movzx eax, byte [r13 + 0x506d2]
mov byte [rcx + 0x1a], al
lea rcx, [rsp + 0x4c8]
mov rax, qword [r13 + 0x50698]
mov qword [rcx], rax
mov rax, qword [r13 + 0x506a0]
mov qword [rcx + 8], rax
mov rax, qword [r13 + 0x506a8]
mov qword [rcx + 0x10], rax
movzx eax, word [r13 + 0x506b0]
mov word [rcx + 0x18], ax
lea rcx, [rsp + 0x4e8]
mov rdx, rbx
mov edi, 0x1b
mov r8, rdi
nop
nop
movzx eax, byte [rcx]
mov byte [rdx], al
inc rdx
inc rcx
dec r8
jne 0x4111c0
lea rcx, str._JAR2EXE_BINARY_DEBUG_
call fcn.00427dd0
test rax, rax
je 0x411220
movzx eax, byte [rbx]
test al, al
js 0x4111f3
movzx eax, byte [rbx]
cmp al, 0x20
jge 0x4111f3
mov al, 0x2e
jmp 0x4111f6
movzx eax, byte [rbx]
movsx edx, al
lea rcx, [0x00450090]
call fcn.00428520
inc rbx
dec rdi
jne 0x4111e1
lea rcx, [0x0045008c]
call fcn.00428520
lea rbx, [0x004688a0]
mov rbp, qword [0x004688a0]
lea rcx, [rsp + 0x4c8]
mov rdx, rbx
mov edi, 0x1a
mov r8, rdi
nop
nop
movzx eax, byte [rcx]
mov byte [rdx], al
inc rdx
inc rcx
dec r8
jne 0x411240
lea rcx, str._JAR2EXE_BINARY_DEBUG_
call fcn.00427dd0
test rax, rax
je 0x4112a0
movzx eax, byte [rbx]
test al, al
js 0x411273
movzx eax, byte [rbx]
cmp al, 0x20
jge 0x411273
mov al, 0x2e
jmp 0x411276
movzx eax, byte [rbx]
movsx edx, al
lea rcx, [0x00450090]
call fcn.00428520
inc rbx
dec rdi
jne 0x411261
lea rcx, [0x0045008c]
call fcn.00428520
lea rbx, [0x004688a0]
mov esi, dword [0x004688a0]
lea rdx, [rsp + 0x490]
mov r8, rbx
mov edi, 0x16
mov r9, rdi
nop
nop
movzx eax, byte [rdx]
mov byte [r8], al
inc r8
inc rdx
dec r9
jne 0x4112c0
lea rcx, str._JAR2EXE_BINARY_DEBUG_
call fcn.00427dd0
test rax, rax
je 0x411321
movzx eax, byte [rbx]
test al, al
js 0x4112f4
movzx eax, byte [rbx]
cmp al, 0x20
jge 0x4112f4
mov al, 0x2e
jmp 0x4112f7
movzx eax, byte [rbx]
movsx edx, al
lea rcx, [0x00450090]
call fcn.00428520
inc rbx
dec rdi
jne 0x4112e2
lea rcx, [0x0045008c]
call fcn.00428520
lea rbx, [0x004688a0]
cmp byte [0x004688a0], 0
je 0x4113e6
mov r8d, esi
mov rdx, rbp
mov rcx, rbx
call fcn.0040dc80
test eax, eax
jne 0x4113e6
lea edx, [rax + 0xb]
lea rcx, [rsp + 0x278]
call fcn.0040ddf0
nop
mov edx, 0xa
lea rcx, [rsp + 0x2b8]
call fcn.0040ddf0
nop
mov edx, dword [rsp + 0x2c8]
lea rcx, [rsp + 0x2b8]
mov rax, qword [rsp + 0x2b8]
call qword [rax + 8]
mov rbx, qword [rsp + 0x2c0]
mov edx, dword [rsp + 0x288]
lea rcx, [rsp + 0x278]
mov rax, qword [rsp + 0x278]
call qword [rax + 8]
mov rcx, qword [0x00468f68]
call fcn.00421710
mov rcx, rax
mov r9d, 0x50030
mov r8, rbx
mov rdx, qword [rsp + 0x280]
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, 0x64
mov rcx, qword [0x00468f68]
call fcn.004216b0
mov ecx, 0xb
call fcn.00428c80
nop
lea rdx, [rsp + 0x88]
mov rcx, qword [0x004687c8]
call fcn.0040b230
nop
mov esi, r12d
nop
inc esi
movsxd rax, esi
cmp byte [rax + r13 + 0x4fc34], 0
jne 0x411400
mov eax, esi
mov edx, dword [rsp + 0x98]
cmp edx, esi
cmovl eax, edx
mov ebp, r12d
mov rdi, r12
movsxd r13, eax
test eax, eax
jle 0x411479
lea r14, [0x00400000]
movzx ecx, byte [rdi + r14 + 0x4fc34]
mov rax, qword [rsp + 0x90]
movzx r12d, byte [rax + rdi]
cmp r12b, cl
je 0x411464
movsx ecx, cl
call fcn.00426690
mov ebx, eax
movsx ecx, r12b
call fcn.00426690
cmp eax, ebx
jne 0x41146e
inc ebp
inc rdi
cmp rdi, r13
jl 0x411432
test ebp, ebp
js 0x41148f
mov edx, dword [rsp + 0x98]
cmp ebp, edx
jge 0x411496
movsxd rcx, ebp
mov rax, qword [rsp + 0x90]
movzx r9d, byte [rcx + rax]
jmp 0x411499
mov edx, dword [rsp + 0x98]
xor r9b, r9b
test ebp, ebp
mov r14d, dword [rsp + 0x30]
js 0x4114bb
cmp ebp, esi
jge 0x4114bb
movsxd rax, ebp
lea r10, [0x00400000]
movzx r8d, byte [rax + r10 + 0x4fc34]
jmp 0x4114c5
xor r8b, r8b
lea r10, [0x00400000]
movsx ecx, r9b
movsx eax, r8b
sub ecx, eax
mov eax, 0
sete al
test eax, eax
je 0x4116fc
lea rdx, [rsp + 0x60]
mov rcx, qword [0x004687c8]
call fcn.00404200
nop
xor ecx, ecx
xor eax, eax
mov ebx, dword [rsp + 0x70]
test ebx, ebx
jle 0x41151c
nop
mov rdx, qword [rsp + 0x68]
cmp byte [rdx + rax], 0x3a
jne 0x411513
mov byte [rdx + rax], 0x2e
mov ebx, dword [rsp + 0x70]
inc ecx
inc rax
cmp ecx, ebx
jl 0x411500
xor ecx, ecx
xor eax, eax
test ebx, ebx
jle 0x411540
mov rdx, qword [rsp + 0x68]
cmp byte [rdx + rax], 0x5c
jne 0x411537
mov byte [rdx + rax], 0x2e
mov ebx, dword [rsp + 0x70]
inc ecx
inc rax
cmp ecx, ebx
jl 0x411524
lea rsi, str..j2e
mov qword [rsp + 0x320], rsi
lea rax, [0x0044f650]
mov qword [rsp + 0x318], rax
xor edi, edi
inc edi
movsxd rax, edi
cmp byte [rax + rsi], 0
jne 0x411560
mov dword [rsp + 0x328], edi
lea edx, [rdi + rbx]
lea rcx, [rsp + 0x60]
mov rax, qword [rsp + 0x60]
call qword [rax + 8]
cmp ebx, ebx
jge 0x4115a7
movsxd rax, ebx
mov r8, qword [rsp + 0x68]
lea rdx, [rax + r8]
movsxd rcx, edi
add rcx, rax
add rcx, r8
mov eax, ebx
sub eax, ebx
movsxd r8, eax
call fcn.004266e0
movsxd r8, edi
movsxd rcx, ebx
add rcx, qword [rsp + 0x68]
mov rdx, rsi
call fcn.004266e0
nop
mov edx, dword [rsp + 0x70]
lea rcx, [rsp + 0x60]
mov rax, qword [rsp + 0x60]
call qword [rax + 8]
mov r8, qword [rsp + 0x68]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov rbx, rax
test rax, rax
jne 0x4115f9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.CreateMutex_error:__d_n
call fcn.00428520
jmp 0x41161b
mov edx, 0x64
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x4116bf
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov edx, 0xd
lea rcx, [rsp + 0x2d8]
call fcn.0040ddf0
nop
mov edx, 0xa
lea rcx, [rsp + 0x298]
call fcn.0040ddf0
nop
mov edx, dword [rsp + 0x2a8]
lea rcx, [rsp + 0x298]
mov rax, qword [rsp + 0x298]
call qword [rax + 8]
mov rbx, qword [rsp + 0x2a0]
mov edx, dword [rsp + 0x2e8]
lea rcx, [rsp + 0x2d8]
mov rax, qword [rsp + 0x2d8]
call qword [rax + 8]
mov rcx, qword [0x00468f68]
call fcn.00421710
mov rcx, rax
mov r9d, 0x50030
mov r8, rbx
mov rdx, qword [rsp + 0x2e0]
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, 0x64
mov rcx, qword [0x00468f68]
call fcn.004216b0
mov ecx, 0xb
call fcn.00428c80
nop
lea rax, [0x0044f640]
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x68], 0
mov dword [rsp + 0x70], 0
mov dword [rsp + 0x78], 0
test rcx, rcx
je 0x4117b6
call fcn.00426530
jmp 0x4117b6
xor esi, esi
nop
inc esi
movsxd rax, esi
cmp byte [rax + r10 + 0x5066c], 0
jne 0x411700
mov eax, esi
cmp edx, esi
cmovl eax, edx
xor ebp, ebp
xor edi, edi
movsxd r13, eax
test eax, eax
jle 0x41176f
movzx r12d, byte [rdi + r10 + 0x5066c]
mov rax, qword [rsp + 0x90]
movzx ecx, byte [rax + rdi]
cmp cl, r12b
je 0x41175a
movsx ecx, cl
call fcn.00426690
mov ebx, eax
movsx ecx, r12b
call fcn.00426690
cmp ebx, eax
jne 0x411764
lea r10, [0x00400000]
inc ebp
inc rdi
cmp rdi, r13
jl 0x411722
test ebp, ebp
js 0x411785
mov edx, dword [rsp + 0x98]
cmp ebp, edx
jge 0x411785
movsxd rcx, ebp
mov rax, qword [rsp + 0x90]
movzx r8d, byte [rcx + rax]
jmp 0x411788
xor r8b, r8b
test ebp, ebp
js 0x4117a4
cmp ebp, esi
jge 0x4117a4
movsxd rax, ebp
lea rcx, [0x00400000]
movzx edx, byte [rax + rcx + 0x5066c]
jmp 0x4117a6
xor dl, dl
movsx ecx, r8b
movsx eax, dl
sub ecx, eax
jne 0x4117b6
call fcn.00424230
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x340]
call fcn.0040b080
nop
xor esi, esi
lea rcx, [0x00400000]
nop
nop
nop
nop
inc esi
movsxd rax, esi
cmp byte [rax + rcx + 0x4fc34], 0
jne 0x4117e0
mov eax, esi
mov edx, dword [rsp + 0x50]
cmp edx, esi
cmovl eax, edx
xor ebp, ebp
xor edi, edi
movsxd r13, eax
test eax, eax
jle 0x411857
nop
nop
nop
movzx ecx, byte [rdi + rcx + 0x4fc34]
mov rax, qword [rsp + 0x48]
movzx r12d, byte [rax + rdi]
cmp r12b, cl
je 0x41183e
movsx ecx, cl
call fcn.00426690
mov ebx, eax
movsx ecx, r12b
call fcn.00426690
cmp eax, ebx
jne 0x41184f
inc ebp
inc rdi
cmp rdi, r13
lea rcx, [0x00400000]
jl 0x411810
test ebp, ebp
js 0x41186a
mov edx, dword [rsp + 0x50]
cmp ebp, edx
jge 0x41186e
movsxd rcx, ebp
mov rax, qword [rsp + 0x48]
movzx r9d, byte [rcx + rax]
jmp 0x411871
mov edx, dword [rsp + 0x50]
xor r9b, r9b
test ebp, ebp
js 0x41188e
cmp ebp, esi
jge 0x41188e
movsxd rax, ebp
lea r10, [0x00400000]
movzx r8d, byte [rax + r10 + 0x4fc34]
jmp 0x411898
xor r8b, r8b
lea r10, [0x00400000]
movsx ecx, r9b
movsx eax, r8b
lea r8, [0x00450668]
sub ecx, eax
je 0x41199d
xor esi, esi
nop
nop
nop
nop
inc esi
movsxd rax, esi
cmp byte [rax + r10 + 0x50660], 0
jne 0x4118c0
mov eax, esi
cmp edx, esi
cmovl eax, edx
xor ebp, ebp
xor edi, edi
movsxd r13, eax
test eax, eax
jle 0x41192a
movzx ecx, byte [rdi + r10 + 0x50660]
mov rax, qword [rsp + 0x48]
movzx r12d, byte [rax + rdi]
cmp r12b, cl
je 0x411918
movsx ecx, cl
call fcn.00426690
mov ebx, eax
movsx ecx, r12b
call fcn.00426690
cmp eax, ebx
jne 0x411922
lea r10, [0x00400000]
inc ebp
inc rdi
cmp rdi, r13
jl 0x4118e2
test ebp, ebp
js 0x41193d
mov edx, dword [rsp + 0x50]
cmp ebp, edx
jge 0x411941
movsxd rcx, ebp
mov rax, qword [rsp + 0x48]
movzx r9d, byte [rcx + rax]
jmp 0x411944
mov edx, dword [rsp + 0x50]
xor r9b, r9b
test ebp, ebp
js 0x411961
cmp ebp, esi
jge 0x411961
movsxd rax, ebp
lea rcx, [0x00400000]
movzx r8d, byte [rax + rcx + 0x50660]
jmp 0x411964
xor r8b, r8b
movsx ecx, r9b
movsx eax, r8b
sub ecx, eax
je 0x411996
lea rdx, [0x00450668]
lea rcx, [rsp + 0x40]
call fcn.00401c50
test eax, eax
jne 0x411a8d
mov edx, dword [rsp + 0x50]
lea r8, [0x00450668]
jmp 0x41199d
lea r8, [0x00450668]
xor esi, esi
nop
inc esi
movsxd rax, esi
cmp byte [rax + r8], 0
jne 0x4119a0
mov eax, esi
cmp edx, esi
cmovl eax, edx
xor ebp, ebp
xor edi, edi
movsxd r13, eax
test eax, eax
jle 0x411a04
nop
movzx ecx, byte [rdi + r8]
mov rax, qword [rsp + 0x48]
movzx r12d, byte [rax + rdi]
cmp r12b, cl
je 0x4119f2
movsx ecx, cl
call fcn.00426690
mov ebx, eax
movsx ecx, r12b
call fcn.00426690
cmp eax, ebx
jne 0x4119fc
lea r8, [0x00450668]
inc ebp
inc rdi
cmp rdi, r13
jl 0x4119c0
test ebp, ebp
js 0x411a17
mov edx, dword [rsp + 0x50]
cmp ebp, edx
jge 0x411a17
movsxd rcx, ebp
mov rax, qword [rsp + 0x48]
movzx r8d, byte [rcx + rax]
jmp 0x411a1a
xor r8b, r8b
test ebp, ebp
js 0x411a32
cmp ebp, esi
jge 0x411a32
movsxd rax, ebp
lea rcx, [0x00450668]
movzx edx, byte [rax + rcx]
jmp 0x411a34
xor dl, dl
movsx ecx, r8b
movsx eax, dl
sub ecx, eax
neg ecx
sbb r9d, r9d
add r9d, 2
mov r8, r15
mov edx, r14d
lea rcx, [0x00468800]
call fcn.00425b40
lea rdx, [0x00467020]
lea rcx, [0x00468800]
call fcn.00425120
mov r14d, dword [0x00467030]
mov edx, r14d
lea rcx, [0x00467020]
mov rax, qword [0x00467020]
call qword [rax + 8]
mov r15, qword [0x00467028]
lea rsi, [0x0044f640]
mov qword [rsp + 0x40], rsi
mov rcx, qword [rsp + 0x48]
xor edi, edi
mov qword [rsp + 0x48], rdi
mov dword [rsp + 0x50], edi
mov dword [rsp + 0x58], edi
test rcx, rcx
je 0x411ab7
call fcn.00426530
xor eax, eax
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], rax
mov qword [rsp + 0x150], rax
lea eax, [r14 - 1]
mov dword [rsp + 0x128], eax
lea rax, [r15 + 8]
mov qword [rsp + 0x130], rax
lea rax, [0x0040aa80]
mov qword [rsp + 0x138], rax
mov dword [rsp + 0x38], edi
lea rax, [rsp + 0x34]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x10000
lea r9, [rsp + 0x128]
lea r8, [0x00410a30]
xor edx, edx
xor ecx, ecx
call fcn.004286f0
mov rbx, rax
test rax, rax
jne 0x411b6b
lea rax, [rsp + 0x34]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edi
lea r9, [rsp + 0x128]
lea r8, [0x00410a30]
xor edx, edx
xor ecx, ecx
call fcn.004286f0
mov rbx, rax
test rax, rax
je 0x411b96
mov edx, 0xffffffff
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rdx, [rsp + 0x38]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetExitCodeThread]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [rsp + 0x38]
jmp 0x411bdc
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x140]
mov r8, qword [rsp + 0x138]
mov rdx, qword [rsp + 0x130]
mov ecx, dword [rsp + 0x128]
call fcn.0040e970
mov ebx, eax
mov dword [rsp + 0x150], eax
mov rcx, qword [0x004687d0]
call fcn.00407a40
mov qword [0x004687c8], rdi
mov qword [0x004687d0], rdi
mov qword [rsp + 0x88], rsi
mov rcx, qword [rsp + 0x90]
mov qword [rsp + 0x90], rdi
mov dword [rsp + 0x98], edi
mov dword [rsp + 0xa0], edi
test rcx, rcx
je 0x411c1a
call fcn.00426530
lea rbp, [0x0044f620]
mov qword [rsp + 0x88], rbp
mov qword [rsp + 0xc8], rsi
mov rcx, qword [rsp + 0xd0]
mov qword [rsp + 0xd0], rdi
mov dword [rsp + 0xd8], edi
mov dword [rsp + 0xe0], edi
test rcx, rcx
je 0x411c59
call fcn.00426530
mov qword [rsp + 0xc8], rbp
mov qword [rsp + 0xa8], rsi
mov rcx, qword [rsp + 0xb0]
mov qword [rsp + 0xb0], rdi
mov dword [rsp + 0xb8], edi
mov dword [rsp + 0xc0], edi
test rcx, rcx
je 0x411c91
call fcn.00426530
mov qword [rsp + 0xa8], rbp
mov qword [rsp + 0x108], rsi
mov rcx, qword [rsp + 0x110]
mov qword [rsp + 0x110], rdi
mov dword [rsp + 0x118], edi
mov dword [rsp + 0x120], edi
test rcx, rcx
je 0x411cc9
call fcn.00426530
mov qword [rsp + 0x108], rbp
mov qword [rsp + 0x158], rsi
mov rcx, qword [rsp + 0x160]
mov qword [rsp + 0x160], rdi
mov dword [rsp + 0x168], edi
mov dword [rsp + 0x170], edi
test rcx, rcx
je 0x411d01
call fcn.00426530
mov qword [rsp + 0x158], rbp
lea rcx, [rsp + 0x3f0]
call fcn.004236c0
nop
lea rcx, [rsp + 0x1e0]
call fcn.00407a40
nop
mov qword [rsp + 0x200], rsi
mov rcx, qword [rsp + 0x208]
mov qword [rsp + 0x208], rdi
mov dword [rsp + 0x210], edi
mov dword [rsp + 0x218], edi
test rcx, rcx
je 0x411d55
call fcn.00426530
mov qword [rsp + 0x200], rbp
lea rax, [0x0044f658]
mov qword [rsp + 0x1e0], rax
mov rcx, qword [rsp + 0x1e8]
mov qword [rsp + 0x1e8], rdi
mov dword [rsp + 0x1f0], edi
mov dword [rsp + 0x1f8], edi
test rcx, rcx
je 0x411d94
call fcn.00426530
lea rax, [0x0044f628]
mov qword [rsp + 0x1e0], rax
lea rcx, [rsp + 0x340]
call fcn.004122f0
mov eax, ebx
mov rcx, qword [rsp + 0x620]
call fcn.0044e630
mov rbx, qword [rsp + 0x680]
mov rbp, qword [rsp + 0x688]
mov rsi, qword [rsp + 0x660]
mov rdi, qword [rsp + 0x658]
mov r12, qword [rsp + 0x650]
mov r13, qword [rsp + 0x648]
mov r14, qword [rsp + 0x640]
mov r15, qword [rsp + 0x638]
add rsp, 0x668
ret