Function at 0x48b758
Capabilities:
Create process on windows

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1ee0
call fcn.006e5e00
sub rsp, rax
mov qword [rsp + 0x1a8], 0xfffffffffffffffe
mov qword [rsp + 0x1f18], rbx
mov qword [rsp + 0x1f20], rbp
mov qword [rsp + 0x1f28], rsi
mov r15, r9
mov rbp, r8
mov r12, rdx
mov rsi, rcx
xor edi, edi
mov dword [rsp + 0x50], edi
mov rax, qword [rcx + 0x7b8]
add rax, 0x238
mov qword [rsp + 0x20], rax
mov r13, qword [rsp + 0x1f30]
mov r9, r13
mov r8, r15
mov rdx, rbp
mov rcx, r12
call fcn.0055d718
cmp al, dil
jne 0x48ddb7
lea r8, [rsp + 0x1f10]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0xaa0]
call fcn.004023b4
lea rdx, str.join
mov rcx, qword [rsp + 0xae8]
call fcn.006e454c
cmp eax, edi
sete bl
lea rax, [rsp + 0xaa0]
mov r14d, 0x100
mov rcx, qword [rsp + 0xae8]
cmp rcx, rax
je 0x48b84f
cmp rcx, rdi
je 0x48b84f
mov rax, qword [rsp + 0xaa0]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r14
jbe 0x48b84a
call fcn.006a4944
jmp 0x48b84f
call fcn.006a3610
cmp bl, dil
je 0x48b9de
mov rax, qword [rbp + 0x48]
cmp rax, qword [rbp + 0x40]
je 0x48b9b3
mov rdx, rbp
lea rcx, [rsp + 0x468]
call fcn.00402190
nop
lea rcx, [rsi + 0x3c8]
cmp rax, rcx
je 0x48b891
mov r8, qword [rax + 0x20]
mov rdx, qword [rax + 0x28]
call fcn.0040289c
nop
lea rax, [rsp + 0x468]
mov rcx, qword [rsp + 0x490]
cmp rcx, rax
je 0x48b8c7
cmp rcx, rdi
je 0x48b8c7
mov rdx, qword [rsp + 0x468]
sub rdx, rcx
cmp rdx, r14
jbe 0x48b8c2
call fcn.006a4944
jmp 0x48b8c7
call fcn.006a3610
mov rcx, qword [rsi + 0x7b8]
cmp rcx, rdi
je 0x48b8fe
call fcn.005a1568
cmp byte [rax + 0x3054], dil
jne 0x48b8f6
mov rcx, qword [rax + 0x30]
cmp rcx, rdi
je 0x48b8f6
mov edx, 0x25c
call fcn.0041024c
jmp 0x48b92c
mov al, byte [rax + 0x2c75]
jmp 0x48b92c
mov rax, qword [0x00862cb8]
cmp byte [rax + 0x30dc], dil
jne 0x48b926
mov rcx, qword [rax + 0xb8]
cmp rcx, rdi
je 0x48b926
mov edx, 0x25c
call fcn.0041024c
jmp 0x48b92c
mov al, byte [rax + 0x2cfd]
cmp al, dil
je 0x48b991
mov rdx, rbp
lea rcx, [rsp + 0x270]
call fcn.00402190
nop
mov rcx, rax
call fcn.00489fe0
nop
lea rax, [rsp + 0x270]
mov rcx, qword [rsp + 0x298]
cmp rcx, rax
je 0x48ddb7
cmp rcx, rdi
je 0x48ddb7
mov rdx, qword [rsp + 0x270]
sub rdx, rcx
cmp rdx, r14
jbe 0x48b987
call fcn.006a4944
jmp 0x48ddb7
call fcn.006a3610
jmp 0x48ddb7
xor r8d, r8d
xor edx, edx
lea rax, [rsp + 0x130]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov rcx, rsi
call fcn.00495ba8
jmp 0x48ddb7
lea rax, [0x00876d90]
cmp rax, r13
je 0x48ddb7
mov r8, qword [0x00876dd0]
mov rdx, qword [0x00876dd8]
mov rcx, r13
call fcn.00406d38
jmp 0x48ddb7
lea r8, [rsp + 0x6e]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0x6e0]
call fcn.004023b4
nop
mov ebx, 3
lea rdx, str.clear
mov rcx, qword [rsp + 0x728]
call fcn.006e454c
cmp eax, edi
je 0x48ba91
mov dword [rsp + 0x50], 7
lea r8, [rsp + 0x62]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0x8c0]
call fcn.004023b4
nop
mov ebx, reloc.WS2_32.dll_ntohs
lea rdx, [0x00799370]
mov rcx, qword [rsp + 0x908]
call fcn.006e454c
cmp eax, edi
je 0x48ba91
mov dword [rsp + 0x50], 0x1f
lea r8, [rsp + 0x64]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0x640]
call fcn.004023b4
mov ebx, 0x3f
lea rdx, [0x00799378]
mov rcx, qword [rsp + 0x688]
call fcn.006e454c
cmp eax, edi
je 0x48ba91
mov r14b, dil
jmp 0x48ba94
mov r14b, 1
test bl, 0x20
je 0x48bae1
and ebx, 0xffffffdf
mov dword [rsp + 0x50], ebx
lea rax, [rsp + 0x640]
mov rcx, qword [rsp + 0x688]
cmp rcx, rax
je 0x48bae1
cmp rcx, rdi
je 0x48bae1
mov rax, qword [rsp + 0x640]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x48badc
call fcn.006a4944
jmp 0x48bae1
call fcn.006a3610
test bl, 0x10
je 0x48bae9
and ebx, 0xffffffef
test bl, 8
je 0x48bb36
and ebx, 0xfffffff7
mov dword [rsp + 0x50], ebx
lea rax, [rsp + 0x8c0]
mov rcx, qword [rsp + 0x908]
cmp rcx, rax
je 0x48bb36
cmp rcx, rdi
je 0x48bb36
mov rax, qword [rsp + 0x8c0]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x48bb31
call fcn.006a4944
jmp 0x48bb36
call fcn.006a3610
test bl, 4
je 0x48bb3e
and ebx, 0xfffffffb
test bl, 2
je 0x48bb87
and ebx, 0xfffffffd
lea rax, [rsp + 0x6e0]
mov rcx, qword [rsp + 0x728]
cmp rcx, rax
je 0x48bb87
cmp rcx, rdi
je 0x48bb87
mov rax, qword [rsp + 0x6e0]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x48bb82
call fcn.006a4944
jmp 0x48bb87
call fcn.006a3610
test bl, 1
je 0x48bb8f
and ebx, 0xfffffffe
cmp r14b, dil
je 0x48bbad
lea rdx, [0x0078dc30]
mov rcx, qword [rsi + 0xaa0]
call qword [sym.imp.USER32.dll_SetWindowTextW]
jmp 0x48ddb7
lea r8, [rsp + 0x57]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0xa00]
call fcn.004023b4
lea rdx, str.close
mov rcx, qword [rsp + 0xa48]
call fcn.006e454c
cmp eax, edi
sete r14b
lea rax, [rsp + 0xa00]
mov rcx, qword [rsp + 0xa48]
cmp rcx, rax
je 0x48bc1f
cmp rcx, rdi
je 0x48bc1f
mov rax, qword [rsp + 0xa00]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x48bc1a
call fcn.006a4944
jmp 0x48bc1f
call fcn.006a3610
cmp r14b, dil
je 0x48bc3d
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
mov rcx, qword [rsi + 8]
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x48ddb7
lea r8, [rsp + 0x65]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0x780]
call fcn.004023b4
lea rdx, [0x0079938c]
mov rcx, qword [rsp + 0x7c8]
call fcn.006e454c
cmp eax, edi
sete r14b
lea rax, [rsp + 0x780]
mov rcx, qword [rsp + 0x7c8]
cmp rcx, rax
je 0x48bcaf
cmp rcx, rdi
je 0x48bcaf
mov rax, qword [rsp + 0x780]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x48bcaa
call fcn.006a4944
jmp 0x48bcaf
call fcn.006a3610
cmp r14b, dil
je 0x48bcf7
cmp byte [rsi + 0x3f8], dil
sete al
mov byte [rsi + 0x3f8], al
lea rdx, [0x008773d0]
lea rcx, [0x00877380]
cmp al, dil
cmove rdx, rcx
cmp rdx, r13
je 0x48ddb7
mov r8, qword [rdx + 0x40]
mov rdx, qword [rdx + 0x48]
mov rcx, r13
call fcn.00406d38
jmp 0x48ddb7
or ebx, 0x40
lea r8, [rsp + 0x59]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0x960]
call fcn.004023b4
bts ebx, 7
lea rdx, str.password
mov rcx, qword [rsp + 0x9a8]
call fcn.006e454c
cmp eax, edi
jne 0x48bd3b
cmp byte [rsi + 0x450], dil
je 0x48bd3b
mov r14b, 1
jmp 0x48bd3e
mov r14b, dil
test bl, bl
jns 0x48bd87
btr ebx, 7
lea rax, [rsp + 0x960]
mov rcx, qword [rsp + 0x9a8]
cmp rcx, rax
je 0x48bd87
cmp rcx, rdi
je 0x48bd87
mov rax, qword [rsp + 0x960]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x48bd82
call fcn.006a4944
jmp 0x48bd87
call fcn.006a3610
test bl, 0x40
je 0x48bd8f
and ebx, 0xffffffbf
cmp r14b, dil
je 0x48be6d
mov rdx, rbp
lea rcx, [rsp + 0x438]
call fcn.00402190
nop
mov rcx, qword [rsi + 0x7b8]
add rcx, 0xb8
cmp rax, rcx
je 0x48bdca
mov r8, qword [rax + 0x20]
mov rdx, qword [rax + 0x28]
call fcn.0040289c
nop
lea rax, [rsp + 0x438]
mov rcx, qword [rsp + 0x460]
cmp rcx, rax
je 0x48be04
cmp rcx, rdi
je 0x48be04
mov rdx, qword [rsp + 0x438]
sub rdx, rcx
cmp rdx, 0x100
jbe 0x48bdff
call fcn.006a4944
jmp 0x48be04
call fcn.006a3610
mov rdx, rbp
lea rcx, [rsp + 0x2d0]
call fcn.00402190
nop
mov rcx, qword [rsi + 0x7b8]
mov r8, qword [rcx]
mov rdx, rax
call qword [r8 + 0x40]
nop
lea rax, [rsp + 0x2d0]
mov rcx, qword [rsp + 0x2f8]
cmp rcx, rax
je 0x48be61
cmp rcx, rdi
je 0x48be61
mov rdx, qword [rsp + 0x2d0]
sub rdx, rcx
cmp rdx, 0x100
jbe 0x48be5c
call fcn.006a4944
jmp 0x48be61
call fcn.006a3610
mov byte [rsi + 0x450], dil
jmp 0x48ddb7
lea r8, [rsp + 0x67]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0x820]
call fcn.004023b4
lea rdx, str.showjoins
mov rcx, qword [rsp + 0x868]
call fcn.006e454c
cmp eax, edi
sete r14b
lea rax, [rsp + 0x820]
mov rcx, qword [rsp + 0x868]
cmp rcx, rax
je 0x48bedf
cmp rcx, rdi
je 0x48bedf
mov rax, qword [rsp + 0x820]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x48beda
call fcn.006a4944
jmp 0x48bedf
call fcn.006a3610
cmp r14b, dil
je 0x48bf27
cmp byte [rsi + 0x3f9], dil
sete al
mov byte [rsi + 0x3f9], al
lea rdx, [0x0086d150]
lea rcx, [0x0086d100]
cmp al, dil
cmove rdx, rcx
cmp rdx, r13
je 0x48ddb7
mov r8, qword [rdx + 0x40]
mov rdx, qword [rdx + 0x48]
mov rcx, r13
call fcn.00406d38
jmp 0x48ddb7
lea r8, [rsp + 0x5b]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0x550]
call fcn.004023b4
lea rdx, str.favshowjoins
mov rcx, qword [rsp + 0x598]
call fcn.006e454c
cmp eax, edi
sete r14b
lea rax, [rsp + 0x550]
mov rcx, qword [rsp + 0x598]
cmp rcx, rax
je 0x48bf99
cmp rcx, rdi
je 0x48bf99
mov rax, qword [rsp + 0x550]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x48bf94
call fcn.006a4944
jmp 0x48bf99
call fcn.006a3610
cmp r14b, dil
je 0x48bfe1
cmp byte [rsi + 0x3fa], dil
sete al
mov byte [rsi + 0x3fa], al
lea rdx, [0x0086b170]
lea rcx, [0x0086b120]
cmp al, dil
cmove rdx, rcx
cmp rdx, r13
je 0x48ddb7
mov r8, qword [rdx + 0x40]
mov rdx, qword [rdx + 0x48]
mov rcx, r13
call fcn.00406d38
jmp 0x48ddb7
lea r8, [rsp + 0x69]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0x5f0]
call fcn.004023b4
lea rdx, str.userlist
mov rcx, qword [rsp + 0x638]
call fcn.006e454c
cmp eax, edi
sete r14b
lea rax, [rsp + 0x5f0]
mov rcx, qword [rsp + 0x638]
cmp rcx, rax
je 0x48c053
cmp rcx, rdi
je 0x48c053
mov rax, qword [rsp + 0x5f0]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x48c04e
call fcn.006a4944
jmp 0x48c053
call fcn.006a3610
cmp r14b, dil
je 0x48c080
cmp byte [rsi + 0x1591], dil
sete dil
xor r9d, r9d
mov r8, rdi
mov edx, 0xf1
mov rcx, qword [rsi + 0x9f0]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x48ddb7
lea r8, [rsp + 0x5d]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0x690]
call fcn.004023b4
lea rdx, str.connection
mov rcx, qword [rsp + 0x6d8]
call fcn.006e454c
cmp eax, edi
sete r14b
lea rax, [rsp + 0x690]
mov rcx, qword [rsp + 0x6d8]
cmp rcx, rax
je 0x48c0f2
cmp rcx, rdi
je 0x48c0f2
mov rax, qword [rsp + 0x690]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x48c0ed
call fcn.006a4944
jmp 0x48c0f2
call fcn.006a3610
cmp r14b, dil
je 0x48c2a8
lea rdx, [rsp + 0x3d8]
mov rcx, qword [rsi + 0x7b8]
call fcn.005a10f4
mov r11, rax
mov rdx, qword [0x008bb550]
mov cl, byte [rdx + 0x350]
cmp cl, dil
jne 0x48c12d
mov r8d, dword [rdx + 0x2f8]
jmp 0x48c130
mov r8d, edi
mov rax, qword [0x00862ce0]
mov edx, dword [rax + 0x128]
mov rcx, qword [0x008bb550]
mov al, byte [rcx + 0x268]
cmp al, dil
jne 0x48c157
mov eax, dword [rcx + 0x210]
jmp 0x48c159
mov eax, edi
mov rcx, qword [r11 + 0x28]
mov dword [rsp + 0x40], r8d
mov dword [rsp + 0x38], edx
mov dword [rsp + 0x30], eax
mov rax, qword [0x0088cf08]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov r9, qword [0x0088acb8]
lea r8, str._s__s___s__d__d__d
mov edx, 0x7d0
lea rcx, [rsp + 0x1710]
call fcn.006a5670
lea r11, [rsp + 0x3d8]
mov rcx, qword [rsp + 0x400]
cmp rcx, r11
je 0x48c1d5
cmp rcx, rdi
je 0x48c1d5
mov rdx, qword [rsp + 0x3d8]
sub rdx, rcx
cmp rdx, 0x100
jbe 0x48c1d0
call fcn.006a4944
jmp 0x48c1d5
call fcn.006a3610
lea r8, [rsp + 0x6b]
lea rdx, [rsp + 0x1710]
lea rcx, [rsp + 0x1b0]
call fcn.004021a8
nop
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0xb90]
call fcn.00401f00
nop
cmp rax, r13
je 0x48c21c
mov r8, qword [rax + 0x40]
mov rdx, qword [rax + 0x48]
mov rcx, r13
call fcn.00406d38
nop
lea rax, [rsp + 0xb90]
mov rcx, qword [rsp + 0xbd8]
cmp rcx, rax
je 0x48c25e
cmp rcx, rdi
je 0x48c25e
mov rax, qword [rsp + 0xb90]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x48c258
call fcn.006a4944
jmp 0x48c25e
call fcn.006a3610
nop
lea rax, [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1d8]
cmp rcx, rax
je 0x48ddb7
cmp rcx, rdi
je 0x48ddb7
mov rdx, qword [rsp + 0x1b0]
sub rdx, rcx
cmp rdx, 0x100
jbe 0x48c29e
call fcn.006a4944
jmp 0x48ddb7
call fcn.006a3610
jmp 0x48ddb7
bts ebx, 8
lea r8, [rsp + 0x5f]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0x7d0]
call fcn.004023b4
nop
bts ebx, 9
lea rdx, str.favorite
mov rcx, qword [rsp + 0x818]
call fcn.006e454c
cmp eax, edi
je 0x48c320
bts ebx, 0xa
mov dword [rsp + 0x50], ebx
lea r8, [rsp + 0x6d]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0x730]
call fcn.004023b4
bts ebx, 0xb
lea rdx, [0x00799448]
mov rcx, qword [rsp + 0x778]
call fcn.006e454c
cmp eax, edi
je 0x48c320
mov r13b, dil
jmp 0x48c323
mov r13b, 1
bt ebx, 0xb
jae 0x48c376
btr ebx, 0xb
mov dword [rsp + 0x50], ebx
lea rax, [rsp + 0x730]
mov rcx, qword [rsp + 0x778]
cmp rcx, rax
je 0x48c386
cmp rcx, rdi
je 0x48c37e
mov rax, qword [rsp + 0x730]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
mov r14d, 0x100
cmp rdx, r14
jbe 0x48c36f
call fcn.006a4944
jmp 0x48c38c
call fcn.006a3610
jmp 0x48c38c
mov r14d, 0x100
jmp 0x48c38c
mov r14d, 0x100
jmp 0x48c38c
mov r14d, 0x100
bt ebx, 0xa
jae 0x48c396
btr ebx, 0xa
bt ebx, 9
jae 0x48c3dd
btr ebx, 9
lea rax, [rsp + 0x7d0]
mov rcx, qword [rsp + 0x818]
cmp rcx, rax
je 0x48c3dd
cmp rcx, rdi
je 0x48c3dd
mov rax, qword [rsp + 0x7d0]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r14
jbe 0x48c3d8
call fcn.006a4944
jmp 0x48c3dd
call fcn.006a3610
bt ebx, 8
jae 0x48c3e7
btr ebx, 8
cmp r13b, dil
je 0x48c410
mov edx, WSAAsyncSelect
xor r8d, r8d
mov rcx, rbp
call fcn.00421278
cmp rax, 0xffffffffffffffff
setne dl
mov rcx, rsi
call fcn.0048e6b0
jmp 0x48ddb7
bts ebx, 0xc
lea r8, [rsp + 0x61]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0x910]
call fcn.004023b4
nop
bts ebx, 0xd
mov dword [rsp + 0x50], ebx
lea rdx, str.removefavorite
mov rcx, qword [rsp + 0x958]
call fcn.006e454c
cmp eax, edi
je 0x48c490
bts ebx, 0xe
mov dword [rsp + 0x50], ebx
lea r8, [rsp + 0x6f]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0x870]
call fcn.004023b4
bts ebx, 0xf
mov dword [rsp + 0x50], ebx
lea rdx, str.removefav
mov rcx, qword [rsp + 0x8b8]
call fcn.006e454c
cmp eax, edi
je 0x48c490
mov r13b, dil
jmp 0x48c493
mov r13b, 1
bt ebx, 0xf
jae 0x48c4de
btr ebx, 0xf
mov dword [rsp + 0x50], ebx
lea rax, [rsp + 0x870]
mov rcx, qword [rsp + 0x8b8]
cmp rcx, rax
je 0x48c4de
cmp rcx, rdi
je 0x48c4de
mov rax, qword [rsp + 0x870]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r14
jbe 0x48c4d9
call fcn.006a4944
jmp 0x48c4de
call fcn.006a3610
bt ebx, 0xe
jae 0x48c4ec
btr ebx, 0xe
mov dword [rsp + 0x50], ebx
bt ebx, 0xd
jae 0x48c537
btr ebx, 0xd
mov dword [rsp + 0x50], ebx
lea rax, [rsp + 0x910]
mov rcx, qword [rsp + 0x958]
cmp rcx, rax
je 0x48c537
cmp rcx, rdi
je 0x48c537
mov rax, qword [rsp + 0x910]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r14
jbe 0x48c532
call fcn.006a4944
jmp 0x48c537
call fcn.006a3610
bt ebx, 0xc
jae 0x48c545
btr ebx, 0xc
mov dword [rsp + 0x50], ebx
cmp r13b, dil
je 0x48c5b2
mov rdx, qword [rsi + 0x7b8]
add rdx, 0x340
mov rcx, qword [0x00862c98]
call fcn.005c7d60
cmp rax, rdi
je 0x48c595
mov rdx, rax
mov rcx, qword [0x00862c98]
call fcn.005c1684
mov r9b, 1
mov r8d, 3
lea rdx, [0x0086b3f0]
mov rcx, rsi
call fcn.004983bc
jmp 0x48ddb7
mov r9b, 1
mov r8d, 3
lea rdx, [0x0086b300]
mov rcx, rsi
call fcn.004983bc
jmp 0x48ddb7
lea r8, [rsp + 0x63]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0x500]
call fcn.004023b4
lea rdx, str.getlist
mov rcx, qword [rsp + 0x548]
call fcn.006e454c
cmp eax, edi
sete r13b
lea rax, [rsp + 0x500]
mov rcx, qword [rsp + 0x548]
cmp rcx, rax
je 0x48c620
cmp rcx, rdi
je 0x48c620
mov rax, qword [rsp + 0x500]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r14
jbe 0x48c61b
call fcn.006a4944
jmp 0x48c620
call fcn.006a3610
cmp r13b, dil
je 0x48c69c
mov rax, qword [rbp + 0x48]
cmp rax, qword [rbp + 0x40]
je 0x48ddb7
mov r8, rbp
lea rdx, [rsp + 0xc8]
mov rcx, rsi
call fcn.00488a90
nop
mov rcx, qword [rsp + 0xc8]
cmp rcx, rdi
je 0x48c66a
add rcx, 0x10
mov edx, 8
call fcn.005935b8
mov rcx, qword [rsp + 0xc8]
cmp rcx, rdi
je 0x48ddb7
or eax, 0xffffffff
lock xadd dword [rcx + 8], eax
add eax, 0xffffffff
jne 0x48ddb7
cmp rcx, rdi
je 0x48ddb7
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
jmp 0x48ddb7
lea r8, [rsp + 0x71]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0x9b0]
call fcn.004023b4
lea rdx, [0x00799498]
mov rcx, qword [rsp + 0x9f8]
call fcn.006e454c
cmp eax, edi
sete r13b
lea rax, [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9f8]
cmp rcx, rax
je 0x48c70a
cmp rcx, rdi
je 0x48c70a
mov rax, qword [rsp + 0x9b0]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r14
jbe 0x48c705
call fcn.006a4944
jmp 0x48c70a
call fcn.006a3610
cmp r13b, dil
je 0x48cc67
lea rax, [rsp + 0x73]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x66]
lea r8, [rsp + 0x75]
xor edx, edx
lea rcx, [rsp + 0x170]
call fcn.00415c3c
nop
mov rcx, qword [rsi + 0x7b8]
lea rbx, [rcx + 0x370]
mov rax, qword [rbx + 0x28]
cmp rax, qword [rbx + 0x20]
lea rax, [rcx + 0x340]
cmove rbx, rax
lea rdx, str.hubNI
lea rcx, [rsp + 0x170]
call fcn.005407dc
cmp rbx, rax
je 0x48c781
mov r8, qword [rbx + 0x20]
mov rdx, qword [rbx + 0x28]
mov rcx, rax
call fcn.0040289c
mov rbx, qword [rsi + 0x7b8]
add rbx, 0x340
lea rdx, str.hubURL
lea rcx, [rsp + 0x170]
call fcn.005407dc
cmp rbx, rax
je 0x48c7b8
mov r8, qword [rbx + 0x20]
mov rdx, qword [rbx + 0x28]
mov rcx, rax
call fcn.0040289c
mov rbx, qword [rsi + 0x7b8]
add rbx, 0xe8
lea rdx, str.myNI
lea rcx, [rsp + 0x170]
call fcn.005407dc
cmp rbx, rax
je 0x48c7ef
mov r8, qword [rbx + 0x20]
mov rdx, qword [rbx + 0x28]
mov rcx, rax
call fcn.0040289c
mov rdx, qword [rbp + 0x48]
cmp rdx, qword [rbp + 0x40]
jne 0x48c9f8
mov rsi, qword [rsi + 0x7b8]
mov rbx, qword [0x00862cb8]
cmp rsi, rdi
je 0x48c842
mov rcx, rsi
call fcn.005a1568
cmp byte [rax + 0x2e0f], dil
jne 0x48c839
mov rcx, qword [rax + 0x30]
cmp rcx, rdi
je 0x48c839
mov edx, reloc.WS2_32.dll_socket
call fcn.004083bc
mov rbp, rax
jmp 0x48c86d
lea rbp, [rax + 0x488]
jmp 0x48c86d
cmp byte [rbx + 0x2e97], dil
jne 0x48c866
mov rcx, qword [rbx + 0xb8]
cmp rcx, rdi
je 0x48c866
mov edx, reloc.WS2_32.dll_socket
call fcn.004083bc
mov rbp, rax
jmp 0x48c86d
lea rbp, [rbx + 0x510]
cmp rsi, rdi
je 0x48c8a4
mov rcx, rsi
call fcn.005a1568
cmp byte [rax + 0x2e0e], dil
jne 0x48c89b
mov rcx, qword [rax + 0x30]
cmp rcx, rdi
je 0x48c89b
mov edx, reloc.WS2_32.dll_shutdown
call fcn.004083bc
mov rbx, rax
jmp 0x48c8cf
lea rbx, [rax + 0x458]
jmp 0x48c8cf
cmp byte [rbx + 0x2e96], dil
jne 0x48c8c8
mov rcx, qword [rbx + 0xb8]
cmp rcx, rdi
je 0x48c8c8
mov edx, reloc.WS2_32.dll_shutdown
call fcn.004083bc
mov rbx, rax
jmp 0x48c8cf
add rbx, 0x4e0
xor r9d, r9d
lea r8, [rsp + 0x170]
mov rdx, rbp
lea rcx, [rsp + 0x498]
call fcn.0058b150
nop
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x1680]
call fcn.00402448
mov rdx, rax
lea rcx, [rsp + 0x330]
call fcn.0058904c
nop
mov rdx, rax
lea rcx, [rsp + 0xc30]
call fcn.00401f00
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov r8, qword [rax + 0x48]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea r11, [rsp + 0xc30]
mov rcx, qword [rsp + 0xc78]
cmp rcx, r11
je 0x48c97b
cmp rcx, rdi
je 0x48c97b
mov rax, qword [rsp + 0xc30]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r14
jbe 0x48c975
call fcn.006a4944
jmp 0x48c97b
call fcn.006a3610
nop
lea rax, [rsp + 0x330]
mov rcx, qword [rsp + 0x358]
cmp rcx, rax
je 0x48c9b2
cmp rcx, rdi
je 0x48c9b2
mov rdx, qword [rsp + 0x330]
sub rdx, rcx
cmp rdx, r14
jbe 0x48c9ac
call fcn.006a4944
jmp 0x48c9b2
call fcn.006a3610
nop
lea rax, [rsp + 0x498]
mov rcx, qword [rsp + 0x4c0]
cmp rcx, rax
je 0x48cc55
cmp rcx, rdi
je 0x48cc55
mov rdx, qword [rsp + 0x498]
sub rdx, rcx
cmp rdx, r14
jbe 0x48c9ee
call fcn.006a4944
jmp 0x48cc55
call fcn.006a3610
jmp 0x48cc55
lea r8, [rsp + 0x68]
lea rcx, [rsp + 0xa50]
call fcn.004023b4
lea rdx, [0x007994a0]
mov rcx, qword [rsp + 0xa98]
call fcn.006e454c
cmp eax, edi
sete bl
lea rax, [rsp + 0xa50]
mov rcx, qword [rsp + 0xa98]
cmp rcx, rax
je 0x48ca60
cmp rcx, rdi
je 0x48ca60
mov rax, qword [rsp + 0xa50]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r14
jbe 0x48ca5b
call fcn.006a4944
jmp 0x48ca60
call fcn.006a3610
cmp bl, dil
je 0x48cc55
mov rsi, qword [rsi + 0x7b8]
mov rbx, qword [0x00862cb8]
cmp rsi, rdi
je 0x48caae
mov rcx, rsi
call fcn.005a1568
cmp byte [rax + 0x2e11], dil
jne 0x48caa5
mov rcx, qword [rax + 0x30]
cmp rcx, rdi
je 0x48caa5
mov edx, 0x19
call fcn.004083bc
mov rbp, rax
jmp 0x48cad9
lea rbp, [rax + 0x4e8]
jmp 0x48cad9
cmp byte [rbx + 0x2e99], dil
jne 0x48cad2
mov rcx, qword [rbx + 0xb8]
cmp rcx, rdi
je 0x48cad2
mov edx, 0x19
call fcn.004083bc
mov rbp, rax
jmp 0x48cad9
lea rbp, [rbx + 0x570]
cmp rsi, rdi
je 0x48cb10
mov rcx, rsi
call fcn.005a1568
cmp byte [rax + 0x2e0e], dil
jne 0x48cb07
mov rcx, qword [rax + 0x30]
cmp rcx, rdi
je 0x48cb07
mov edx, reloc.WS2_32.dll_shutdown
call fcn.004083bc
mov rbx, rax
jmp 0x48cb3b
lea rbx, [rax + 0x458]
jmp 0x48cb3b
cmp byte [rbx + 0x2e96], dil
jne 0x48cb34
mov rcx, qword [rbx + 0xb8]
cmp rcx, rdi
je 0x48cb34
mov edx, reloc.WS2_32.dll_shutdown
call fcn.004083bc
mov rbx, rax
jmp 0x48cb3b
add rbx, 0x4e0
xor r9d, r9d
lea r8, [rsp + 0x170]
mov rdx, rbp
lea rcx, [rsp + 0x240]
call fcn.0058b150
nop
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x16e0]
call fcn.00402448
mov rdx, rax
lea rcx, [rsp + 0x378]
call fcn.0058904c
nop
mov rdx, rax
lea rcx, [rsp + 0xc80]
call fcn.00401f00
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov r8, qword [rax + 0x48]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea r11, [rsp + 0xc80]
mov rcx, qword [rsp + 0xcc8]
cmp rcx, r11
je 0x48cbe7
cmp rcx, rdi
je 0x48cbe7
mov rax, qword [rsp + 0xc80]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r14
jbe 0x48cbe1
call fcn.006a4944
jmp 0x48cbe7
call fcn.006a3610
nop
lea rax, [rsp + 0x378]
mov rcx, qword [rsp + 0x3a0]
cmp rcx, rax
je 0x48cc1e
cmp rcx, rdi
je 0x48cc1e
mov rdx, qword [rsp + 0x378]
sub rdx, rcx
cmp rdx, r14
jbe 0x48cc18
call fcn.006a4944
jmp 0x48cc1e
call fcn.006a3610
nop
lea rax, [rsp + 0x240]
mov rcx, qword [rsp + 0x268]
cmp rcx, rax
je 0x48cc55
cmp rcx, rdi
je 0x48cc55
mov rdx, qword [rsp + 0x240]
sub rdx, rcx
cmp rdx, r14
jbe 0x48cc4f
call fcn.006a4944
jmp 0x48cc55
call fcn.006a3610
nop
lea rcx, [rsp + 0x170]
call fcn.00415b98
jmp 0x48ddb7
lea r8, [rsp + 0x70]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0xaf0]
call fcn.004023b4
lea rdx, str.find
mov rcx, qword [rsp + 0xb38]
call fcn.006e454c
cmp eax, edi
sete r13b
lea rax, [rsp + 0xaf0]
mov rcx, qword [rsp + 0xb38]
cmp rcx, rax
je 0x48ccd5
cmp rcx, rdi
je 0x48ccd5
mov rax, qword [rsp + 0xaf0]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r14
jbe 0x48ccd0
call fcn.006a4944
jmp 0x48ccd5
call fcn.006a3610
cmp r13b, dil
je 0x48cd57
mov rax, qword [rbp + 0x48]
cmp rax, qword [rbp + 0x40]
jne 0x48cd47
lea rdx, [rsp + 0xb40]
mov rcx, rsi
call fcn.00492aac
nop
cmp rax, rbp
je 0x48cd0b
mov r8, qword [rax + 0x40]
mov rdx, qword [rax + 0x48]
mov rcx, rbp
call fcn.00406d38
nop
lea rax, [rsp + 0xb40]
mov rcx, qword [rsp + 0xb88]
cmp rcx, rax
je 0x48cd47
cmp rcx, rdi
je 0x48cd47
mov rdx, qword [rsp + 0xb40]
sub rdx, rcx
sar rdx, 1
add rdx, rdx
cmp rdx, r14
jbe 0x48cd42
call fcn.006a4944
jmp 0x48cd47
call fcn.006a3610
mov rdx, rbp
mov rcx, rsi
call fcn.004928a0
jmp 0x48ddb7
lea r8, [rsp + 0x6a]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0x5a0]
call fcn.004023b4
lea rdx, str.ignorelist
mov rcx, qword [rsp + 0x5e8]
call fcn.006e454c
cmp eax, edi
sete r13b
lea rax, [rsp + 0x5a0]
mov rcx, qword [rsp + 0x5e8]
cmp rcx, rax
je 0x48cdc5
cmp rcx, rdi
je 0x48cdc5
mov rax, qword [rsp + 0x5a0]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r14
jbe 0x48cdc0
call fcn.006a4944
jmp 0x48cdc5
call fcn.006a3610
cmp r13b, dil
je 0x48cf82
lea r8, [rsp + 0x74]
lea rdx, str.Ignored_users:
lea rcx, [rsp + 0xbe0]
call fcn.004023b4
nop
mov qword [rsp + 0xd0], rdi
mov qword [rsp + 0xd8], rdi
mov qword [rsp + 0xe0], rdi
mov rcx, qword [rsi + 0x7b8]
mov rax, qword [rcx]
lea rdx, [rsp + 0xd0]
call qword [rax + 0x70]
mov rbx, qword [rsp + 0xd0]
cmp rbx, qword [rsp + 0xd8]
je 0x48cf4a
mov rcx, qword [rbx]
bt dword [rcx + 0x18], 0xb
jae 0x48cf38
lea rdx, [rsp + 0x2a0]
call fcn.00414e04
nop
mov rdx, rax
lea rcx, [rsp + 0xcd0]
call fcn.00401f00
nop
mov r8, rax
lea rdx, [0x0078cb74]
lea rcx, [rsp + 0xd20]
call fcn.00420494
nop
mov r8, qword [rax + 0x40]
mov rdx, qword [rax + 0x48]
lea rcx, [rsp + 0xbe0]
call fcn.00406b9c
nop
lea rax, [rsp + 0xd20]
mov rcx, qword [rsp + 0xd68]
cmp rcx, rax
je 0x48cec4
cmp rcx, rdi
je 0x48cec4
mov rax, qword [rsp + 0xd20]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r14
jbe 0x48cebe
call fcn.006a4944
jmp 0x48cec4
call fcn.006a3610
nop
lea rax, [rsp + 0xcd0]
mov rcx, qword [rsp + 0xd18]
cmp rcx, rax
je 0x48cf02
cmp rcx, rdi
je 0x48cf02
mov rax, qword [rsp + 0xcd0]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r14
jbe 0x48cefc
call fcn.006a4944
jmp 0x48cf02
call fcn.006a3610
nop
lea rax, [rsp + 0x2a0]
mov rcx, qword [rsp + 0x2c8]
cmp rcx, rax
je 0x48cf38
cmp rcx, rdi
je 0x48cf38
mov rdx, qword [rsp + 0x2a0]
sub rdx, rcx
cmp rdx, r14
jbe 0x48cf33
call fcn.006a4944
jmp 0x48cf38
call fcn.006a3610
add rbx, 8
cmp rbx, qword [rsp + 0xd8]
jne 0x48ce2b
xor r9d, r9d
lea r8d, [r9 + 3]
lea rdx, [rsp + 0xbe0]
mov rcx, rsi
call fcn.00493430
nop
lea rcx, [rsp + 0xd0]
call fcn.00445244
nop
lea rcx, [rsp + 0xbe0]
call fcn.00402278
jmp 0x48ddb7
bts ebx, 0x10
lea r8, [rsp + 0x6c]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0x1090]
call fcn.004023b4
nop
bts ebx, 0x11
mov dword [rsp + 0x50], ebx
lea rdx, str.help
mov rcx, qword [rsp + 0x10d8]
call fcn.006e454c
cmp eax, edi
je 0x48d002
bts ebx, 0x12
mov dword [rsp + 0x50], ebx
lea r8, [rsp + 0x72]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0xf50]
call fcn.004023b4
bts ebx, 0x13
mov dword [rsp + 0x50], ebx
lea rdx, [0x00799504]
mov rcx, qword [rsp + 0xf98]
call fcn.006e454c
cmp eax, edi
je 0x48d002
mov r13b, dil
jmp 0x48d005
mov r13b, 1
bt ebx, 0x13
jae 0x48d020
btr ebx, 0x13
mov dword [rsp + 0x50], ebx
lea rcx, [rsp + 0xf50]
call fcn.00402278
bt ebx, 0x12
jae 0x48d02e
btr ebx, 0x12
mov dword [rsp + 0x50], ebx
bt ebx, 0x11
jae 0x48d041
lea rcx, [rsp + 0x1090]
call fcn.00402278
cmp r13b, dil
je 0x48d089
lea r8, [0x00867e10]
lea rdx, [0x00799508]
lea rcx, [rsp + 0x12c0]
call fcn.00420494
nop
mov r9b, 1
mov r8d, 3
mov rdx, rax
mov rcx, rsi
call fcn.00493430
nop
lea rcx, [rsp + 0x12c0]
call fcn.00402278
jmp 0x48ddb7
lea r8, [rsp + 0x54]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0xff0]
call fcn.004023b4
lea rdx, [0x00799514]
mov rcx, qword [rsp + 0x1038]
call fcn.006e454c
cmp eax, edi
sete bl
lea rcx, [rsp + 0xff0]
call fcn.00402278
cmp bl, dil
je 0x48d262
mov edx, 0x20
xor r8d, r8d
mov rcx, rbp
call fcn.00421278
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x48d1d6
mov r9, rax
xor r8d, r8d
lea rdx, [rsp + 0xeb0]
mov rcx, rbp
call fcn.00421328
nop
lea r8, [rsp + 0xeb0]
lea rdx, [rsp + 0x78]
mov rcx, rsi
call fcn.00488a90
nop
mov rcx, qword [rsp + 0x78]
cmp rcx, rdi
je 0x48d1a2
mov rax, qword [rbp + 0x40]
lea r8, [rbx + 1]
sub rax, qword [rbp + 0x48]
sar rax, 1
cmp rax, r8
jbe 0x48d17d
or r9, 0xffffffffffffffff
lea rdx, [rsp + 0x11d0]
mov rcx, rbp
call fcn.00421328
nop
mov dword [rsp + 0x98], edi
lea r8, [rsp + 0x98]
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.004e2288
nop
lea rcx, [rsp + 0x11d0]
call fcn.00402278
mov rcx, qword [rsp + 0x78]
jmp 0x48d1a2
mov dword [rsp + 0xb4], edi
lea r8, [rsp + 0xb4]
lea rdx, [0x0085e850]
lea rcx, [rsp + 0x78]
call fcn.004e2288
mov rcx, qword [rsp + 0x78]
cmp rcx, rdi
je 0x48d1c4
or eax, 0xffffffff
lock xadd dword [rcx + 8], eax
add eax, 0xffffffff
jne 0x48d1c4
cmp rcx, rdi
je 0x48d1c4
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
lea rcx, [rsp + 0xeb0]
call fcn.00402278
jmp 0x48ddb7
mov rax, qword [rbp + 0x48]
cmp rax, qword [rbp + 0x40]
je 0x48ddb7
mov r8, rbp
lea rdx, [rsp + 0xa0]
mov rcx, rsi
call fcn.00488a90
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x48d230
mov dword [rsp + 0xb0], edi
lea r8, [rsp + 0xb0]
lea rdx, [0x0085e850]
lea rcx, [rsp + 0xa0]
call fcn.004e2288
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x48ddb7
or eax, 0xffffffff
lock xadd dword [rcx + 8], eax
add eax, 0xffffffff
jne 0x48ddb7
cmp rcx, rdi
je 0x48ddb7
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
jmp 0x48ddb7
lea r8, [rsp + 0x55]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0xf00]
call fcn.004023b4
lea rdx, [0x0079951c]
mov rcx, qword [rsp + 0xf48]
call fcn.006e454c
cmp eax, edi
sete bl
lea rcx, [rsp + 0xf00]
call fcn.00402278
cmp bl, dil
je 0x48d2e4
mov r8, rbp
lea rdx, [0x00799528]
lea rcx, [rsp + 0x1360]
call fcn.00420494
nop
cmp rax, r15
je 0x48d2d2
mov r8, qword [rax + 0x40]
mov rdx, qword [rax + 0x48]
mov rcx, r15
call fcn.00406d38
nop
lea rcx, [rsp + 0x1360]
call fcn.00402278
jmp 0x48ddb7
lea r8, [rsp + 0x56]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0xfa0]
call fcn.004023b4
lea rdx, str.switch
mov rcx, qword [rsp + 0xfe8]
call fcn.006e454c
cmp eax, edi
sete bl
lea rcx, [rsp + 0xfa0]
call fcn.00402278
cmp bl, dil
je 0x48d3fe
mov rbx, qword [rsi + 0x7b8]
cmp rbx, rdi
je 0x48d364
mov rcx, rbx
call fcn.005a1568
cmp byte [rax + 0x3053], dil
jne 0x48d35c
mov rcx, qword [rax + 0x30]
cmp rcx, rdi
je 0x48d35c
mov edx, 0x25b
call fcn.0041024c
jmp 0x48d392
mov al, byte [rax + 0x2c74]
jmp 0x48d392
mov rax, qword [0x00862cb8]
cmp byte [rax + 0x30db], dil
jne 0x48d38c
mov rcx, qword [rax + 0xb8]
cmp rcx, rdi
je 0x48d38c
mov edx, 0x25b
call fcn.0041024c
jmp 0x48d392
mov al, byte [rax + 0x2cfc]
cmp al, dil
sete dl
mov rcx, rbx
call fcn.005a1568
mov byte [rax + 0x2c74], dl
mov byte [rax + 0x3053], 1
cmp dl, dil
je 0x48d3d0
mov rcx, qword [rsi + 0x1450]
mov rax, qword [rsi + 0xa00]
mov qword [rsi + 0x118], rax
mov qword [rsi + 0x120], rcx
jmp 0x48d3ec
mov rcx, qword [rsi + 0xa00]
mov rax, qword [rsi + 0x1450]
mov qword [rsi + 0x118], rax
mov qword [rsi + 0x120], rcx
mov edx, 1
mov rcx, rsi
call fcn.004916c0
jmp 0x48ddb7
lea r8, [rsp + 0x58]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0xe60]
call fcn.004023b4
lea rdx, str.stats
mov rcx, qword [rsp + 0xea8]
call fcn.006e454c
cmp eax, edi
sete bl
lea rcx, [rsp + 0xe60]
call fcn.00402278
cmp bl, dil
je 0x48d4bf
lea rcx, [rsp + 0x300]
call fcn.00568160
nop
mov rdx, rax
lea rcx, [rsp + 0x15e0]
call fcn.00401f00
nop
mov rdx, rax
mov rcx, rsi
call fcn.004933f0
nop
lea rcx, [rsp + 0x15e0]
call fcn.00402278
nop
lea rax, [rsp + 0x300]
mov rcx, qword [rsp + 0x328]
cmp rcx, rax
je 0x48ddb7
cmp rcx, rdi
je 0x48ddb7
mov rdx, qword [rsp + 0x300]
sub rdx, rcx
cmp rdx, r14
jbe 0x48d4b5
call fcn.006a4944
jmp 0x48ddb7
call fcn.006a3610
jmp 0x48ddb7
lea r8, [rsp + 0x5a]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0x1040]
call fcn.004023b4
lea rdx, str.pubstats
mov rcx, qword [rsp + 0x1088]
call fcn.006e454c
cmp eax, edi
sete bl
lea rcx, [rsp + 0x1040]
call fcn.00402278
cmp bl, dil
je 0x48d58e
lea rcx, [rsp + 0x210]
call fcn.00568160
nop
mov rdx, rax
lea rcx, [rsp + 0x1400]
call fcn.00401f00
nop
cmp rax, r15
je 0x48d53a
mov r8, qword [rax + 0x40]
mov rdx, qword [rax + 0x48]
mov rcx, r15
call fcn.00406d38
nop
lea rcx, [rsp + 0x1400]
call fcn.00402278
nop
lea rax, [rsp + 0x210]
mov rcx, qword [rsp + 0x238]
cmp rcx, rax
je 0x48ddb7
cmp rcx, rdi
je 0x48ddb7
mov rdx, qword [rsp + 0x210]
sub rdx, rcx
cmp rdx, r14
jbe 0x48d584
call fcn.006a4944
jmp 0x48ddb7
call fcn.006a3610
jmp 0x48ddb7
lea r8, [rsp + 0x5c]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0x10e0]
call fcn.004023b4
lea rdx, str.ipclones
mov rcx, qword [rsp + 0x1128]
call fcn.006e454c
cmp eax, edi
sete bl
lea rcx, [rsp + 0x10e0]
call fcn.00402278
cmp bl, dil
je 0x48d656
lea rdx, [rsp + 0x3a8]
mov rcx, rsi
call fcn.0048b2d4
nop
mov rdx, rax
lea rcx, [rsp + 0x1540]
call fcn.00401f00
nop
mov rdx, rax
mov rcx, rsi
call fcn.004933f0
nop
lea rcx, [rsp + 0x1540]
call fcn.00402278
nop
lea rax, [rsp + 0x3a8]
mov rcx, qword [rsp + 0x3d0]
cmp rcx, rax
je 0x48ddb7
cmp rcx, rdi
je 0x48ddb7
mov rdx, qword [rsp + 0x3a8]
sub rdx, rcx
cmp rdx, r14
jbe 0x48d64c
call fcn.006a4944
jmp 0x48ddb7
call fcn.006a3610
jmp 0x48ddb7
lea r8, [rsp + 0x5e]
mov rdx, qword [r12 + 0x48]
lea rcx, [rsp + 0x1180]
call fcn.004023b4
lea rdx, str.iphistory
mov rcx, qword [rsp + 0x11c8]
call fcn.006e454c
cmp eax, edi
sete bl
lea rcx, [rsp + 0x1180]
call fcn.00402278
cmp bl, dil
je 0x48dcbb
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x88], rdi
mov qword [rsp + 0x90], rdi
lea r8, [rsp + 0x60]
lea rdx, [0x007986b0]
lea rcx, [rsp + 0x1e0]
call fcn.004021a8
nop
lea r8, [rsp + 0x1e0]
lea rdx, str._d1_3._3d1_3
lea rcx, [rsp + 0x1130]
call fcn.005832a0
nop
lea rax, [rsp + 0x1e0]
mov rcx, qword [rsp + 0x208]
cmp rcx, rax
je 0x48d721
cmp rcx, rdi
je 0x48d721
mov rdx, qword [rsp + 0x1e0]
sub rdx, rcx
cmp rdx, r14
jbe 0x48d71c
call fcn.006a4944
jmp 0x48d721
call fcn.006a3610
mov rdx, rbp
lea rcx, [rsp + 0x140]
call fcn.00402190
nop
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x108], rax
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x110], rax
mov edx, 0x20
lea rcx, [rsp + 0xe8]
call fcn.00402ae0
mov r11, qword [rsp + 0x108]
mov byte [r11], dil
xor r8d, r8d
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x1130]
call fcn.005833b4
cmp eax, edi
je 0x48d88c
mov rbx, qword [0x00862df0]
lea rcx, [rsp + 0x140]
call fcn.004a3c50
mov r8d, eax
lea rdx, [rsp + 0x360]
mov rcx, rbx
call fcn.005fd868
nop
mov rdx, rax
lea rcx, [rsp + 0x80]
call fcn.004a1ad4
nop
lea rcx, [rsp + 0x360]
call fcn.0049fb0c
mov r11, qword [rsp + 0x88]
sub r11, qword [rsp + 0x80]
movabs rax, 0x4924924924924925
imul r11
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
jne 0x48dac0
lea r8, [rsp + 0x140]
lea rdx, str.No_IP_history_for
lea rcx, [rsp + 0x408]
call fcn.0040fe34
nop
lea rcx, [rsp + 0xe8]
cmp rax, rcx
je 0x48d846
mov r8, qword [rax + 0x20]
mov rdx, qword [rax + 0x28]
lea rcx, [rsp + 0xe8]
call fcn.0040289c
nop
lea rax, [rsp + 0x408]
mov rcx, qword [rsp + 0x430]
cmp rcx, rax
je 0x48dac0
cmp rcx, rdi
je 0x48dac0
mov rdx, qword [rsp + 0x408]
sub rdx, rcx
cmp rdx, r14
jbe 0x48d882
call fcn.006a4944
jmp 0x48dac0
call fcn.006a3610
jmp 0x48dac0
mov rax, qword [rbp + 0x48]
cmp rax, qword [rbp + 0x40]
je 0x48dac0
mov r8, rbp
lea rdx, [rsp + 0xa8]
mov rcx, rsi
call fcn.00488a90
nop
cmp qword [rsp + 0xa8], rdi
je 0x48da23
lea r8, [rsp + 0xa8]
lea rdx, [rsp + 0x118]
mov rcx, qword [0x00862df0]
call fcn.005fdcfc
nop
mov rbx, qword [rsp + 0x118]
cmp rbx, qword [rsp + 0x120]
je 0x48d970
mov edx, dword [rbx + 8]
lea rcx, [rsp + 0x16b0]
call fcn.00414e50
mov r8, rax
mov rdx, qword [rbx]
lea rcx, [rsp + 0x4c8]
call fcn.004a1dac
nop
mov rdx, rax
lea rcx, [rsp + 0x80]
call fcn.0049fbd0
nop
lea rax, [rsp + 0x4d0]
mov rcx, qword [rsp + 0x4f8]
cmp rcx, rax
je 0x48d95a
cmp rcx, rdi
je 0x48d95a
mov rdx, qword [rsp + 0x4d0]
sub rdx, rcx
cmp rdx, r14
jbe 0x48d955
call fcn.006a4944
jmp 0x48d95a
call fcn.006a3610
add rbx, 0x10
cmp rbx, qword [rsp + 0x120]
jne 0x48d8ef
mov rbx, qword [rsp + 0x118]
mov rcx, qword [rsp + 0x88]
sub rcx, qword [rsp + 0x80]
movabs rax, 0x4924924924924925
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
jne 0x48d9f2
lea r8, [rsp + 0x140]
lea rdx, str.No_IP_history_for
lea rcx, [rsp + 0xd70]
call fcn.0040fe34
nop
lea rcx, [rsp + 0xe8]
cmp rax, rcx
je 0x48d9dd
mov r8, qword [rax + 0x20]
mov rdx, qword [rax + 0x28]
lea rcx, [rsp + 0xe8]
call fcn.0040289c
nop
lea rcx, [rsp + 0xd70]
call fcn.00402b3c
mov rbx, qword [rsp + 0x118]
cmp rbx, rdi
je 0x48da97
mov rdx, qword [rsp + 0x128]
sub rdx, rbx
and rdx, 0xfffffffffffffff0
cmp rdx, r14
jbe 0x48da19
mov rcx, rbx
call fcn.006a4944
jmp 0x48da97
mov rcx, rbx
call fcn.006a3610
jmp 0x48da97
lea r8, [rsp + 0x140]
lea rdx, [0x007995e0]
lea rcx, [rsp + 0xdd0]
call fcn.0040fe34
nop
lea r8, str._is_not_on_hub
mov rdx, rax
lea rcx, [rsp + 0xe30]
call fcn.00402658
nop
lea rcx, [rsp + 0xe8]
cmp rax, rcx
je 0x48da7b
mov r8, qword [rax + 0x20]
mov rdx, qword [rax + 0x28]
lea rcx, [rsp + 0xe8]
call fcn.0040289c
nop
lea rcx, [rsp + 0xe30]
call fcn.00402b3c
nop
lea rcx, [rsp + 0xdd0]
call fcn.00402b3c
nop
mov rcx, qword [rsp + 0xa8]
cmp rcx, rdi
je 0x48dac0
or eax, 0xffffffff
lock xadd dword [rcx + 8], eax
add eax, 0xffffffff
jne 0x48dac0
cmp rcx, rdi
je 0x48dac0
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov rbx, qword [rsp + 0x80]
cmp rbx, qword [rsp + 0x88]
je 0x48dbbe
lea rdx, [rsp + 0x138]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x138]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
movzx r11d, word [rsp + 0xc2]
movzx eax, word [rsp + 0xc0]
movzx ecx, word [rsp + 0xbe]
movzx r9d, word [rsp + 0xba]
movzx r8d, word [rsp + 0xb8]
mov dword [rsp + 0x30], r11d
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
lea rdx, str._04d._02d._02d__02d:_02d_t
lea rcx, [rsp + 0x1220]
call fcn.004a1e2c
lea r8, [rbx + 8]
lea rdx, [rsp + 0x1220]
lea rcx, [rsp + 0xe00]
call fcn.0040fe34
nop
lea r8, [0x0078cb38]
mov rdx, rax
lea rcx, [rsp + 0xda0]
call fcn.00402658
nop
mov r8, qword [rax + 0x20]
mov rdx, qword [rax + 0x28]
lea rcx, [rsp + 0xe8]
call fcn.00402720
nop
lea rcx, [rsp + 0xda0]
call fcn.00402b3c
nop
lea rcx, [rsp + 0xe00]
call fcn.00402b3c
add rbx, 0x38
cmp rbx, qword [rsp + 0x88]
jne 0x48dad6
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0x14f0]
call fcn.00401f00
mov rbx, rax
mov r8d, 0x20
mov rdx, r12
lea rcx, [rsp + 0x1450]
call fcn.004471d4
nop
mov r8, rbp
mov rdx, rax
lea rcx, [rsp + 0x13b0]
call fcn.0040fc8c
nop
lea r8, [0x00794f6c]
mov rdx, rax
lea rcx, [rsp + 0x1310]
call fcn.0040fd24
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x1270]
call fcn.0040fc8c
nop
mov rdx, rax
mov rcx, rsi
call fcn.004933f0
nop
lea rcx, [rsp + 0x1270]
call fcn.00402278
nop
lea rcx, [rsp + 0x1310]
call fcn.00402278
nop
lea rcx, [rsp + 0x13b0]
call fcn.00402278
nop
lea rcx, [rsp + 0x1450]
call fcn.00402278
nop
lea rcx, [rsp + 0x14f0]
call fcn.00402278
nop
lea rcx, [rsp + 0xe8]
call fcn.00402b3c
nop
lea rcx, [rsp + 0x140]
call fcn.00402b3c
nop
lea rcx, [rsp + 0x1130]
call fcn.00583350
nop
lea rcx, [rsp + 0x80]
call fcn.0049fb0c
jmp 0x48ddb7
mov rcx, qword [rsi + 0x7b8]
cmp rcx, rdi
je 0x48dcf2
call fcn.005a1568
cmp byte [rax + 0x3052], dil
jne 0x48dcea
mov rcx, qword [rax + 0x30]
cmp rcx, rdi
je 0x48dcea
mov edx, 0x25a
call fcn.0041024c
jmp 0x48dd20
mov al, byte [rax + 0x2c73]
jmp 0x48dd20
mov rax, qword [0x00862cb8]
cmp byte [rax + 0x30da], dil
jne 0x48dd1a
mov rcx, qword [rax + 0xb8]
cmp rcx, rdi
je 0x48dd1a
mov edx, 0x25a
call fcn.0041024c
jmp 0x48dd20
mov al, byte [rax + 0x2cfb]
cmp al, dil
je 0x48dd83
mov r8d, 0x20
mov rdx, r12
lea rcx, [rsp + 0x1630]
call fcn.004471d4
nop
mov r8, rbp
mov rdx, rax
lea rcx, [rsp + 0x1590]
call fcn.0040fc8c
nop
cmp rax, r15
je 0x48dd66
mov r8, qword [rax + 0x40]
mov rdx, qword [rax + 0x48]
mov rcx, r15
call fcn.00406d38
nop
lea rcx, [rsp + 0x1590]
call fcn.00402278
nop
lea rcx, [rsp + 0x1630]
call fcn.00402278
jmp 0x48ddb7
mov r8, r12
lea rdx, [0x008779c0]
lea rcx, [rsp + 0x14a0]
call fcn.0040fc8c
nop
mov r8b, 1
mov rdx, rax
mov rcx, rsi
call fcn.004961a8
nop
lea rcx, [rsp + 0x14a0]
call fcn.00402278
lea r11, [rsp + 0x1ee0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret