Function at 0x454f40
Capabilities:
Delete volume shadow copies
Resolve function by parsing pe exports
Run powershell expression

Disassembly:
lea r12, [rsp - 0x2e0]
cmp r12, qword [r14 + 0x10]
jbe 0x456a08
sub rsp, 0x360
mov qword [rsp + 0x358], rbp
lea rbp, [rsp + 0x358]
test rsi, rsi
jle 0x454f77
test r10, r10
jne 0x4569f6
mov rcx, r14
cmp rcx, rdi
jne 0x454f90
mov rdx, qword [rcx + 0x30]
cmp qword [rdx + 0x90], rcx
je 0x4569e5
mov edx, dword [0x006e1194]
mov rcx, qword [rcx + 0x30]
movzx ecx, byte [rcx + 0xf9]
shr edx, 2
test cl, cl
cmovne edx, ecx
cmp rax, 0xffffffffffffffff
jne 0x454fd5
cmp rbx, 0xffffffffffffffff
jne 0x454fd5
mov rcx, qword [rdi + 0x70]
test rcx, rcx
je 0x454fc7
mov rbx, qword [rdi + 0x78]
xor r12d, r12d
jmp 0x454fde
mov rbx, qword [rdi + 0x40]
mov rcx, qword [rdi + 0x38]
mov r12, qword [rdi + 0x50]
jmp 0x454fde
mov rcx, rbx
xor r12d, r12d
mov rbx, rax
movups xmmword [rsp + 0x300], xmm15
mov rax, rdi
lea rdi, [rsp + 0x308]
lea rdi, [rdi - 0x30]
nop word [rax + rax]
nop
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00462550
mov rbp, qword [rbp]
mov qword [rsp + 0x310], rbx
mov qword [rsp + 0x328], rcx
mov r13, qword [rax + 0x150]
mov r15, qword [rax + 0x158]
test r8, r8
je 0x45503a
xor edi, edi
jmp 0x455041
test r10, r10
sete dil
mov qword [rsp + 0x390], rsi
mov qword [rsp + 0x3a8], r10
mov qword [rsp + 0x120], rbx
mov qword [rsp + 0x118], rcx
mov byte [rsp + 0x2e], dil
mov qword [rsp + 0x2f8], r11
mov qword [rsp + 0x3a0], r9
mov qword [rsp + 0x398], r8
mov qword [rsp + 0x2f0], rax
mov qword [rsp + 0x2b0], r13
mov qword [rsp + 0xa0], r15
mov qword [rsp + 0x2a8], r12
mov dword [rsp + 0x3c], edx
test rbx, rbx
jne 0x4550c6
mov rcx, qword [rcx]
mov qword [rsp + 0x310], rcx
mov rcx, qword [rsp + 0x118]
lea rdx, [rcx + 8]
mov qword [rsp + 0x328], rdx
mov rax, qword [rsp + 0x310]
call fcn.0044f6a0
test rax, rax
je 0x455165
mov qword [rsp + 0x300], rax
mov qword [rsp + 0x308], rbx
lea rdi, [rsp + 0x150]
nop word [rax + rax]
nop dword [rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00462514
mov rbp, qword [rbp]
mov rsi, qword [rsp + 0x3a0]
mov rcx, qword [rsp + 0x2f0]
mov r9, qword [rsp + 0x120]
mov r10, qword [rsp + 0x118]
mov r11, qword [rsp + 0x390]
mov r13, qword [rsp + 0x2b0]
mov r15, qword [rsp + 0xa0]
mov r12, qword [rsp + 0x2a8]
xor eax, eax
xor edx, edx
xor ebx, ebx
xor edi, edi
nop dword [rax + rax]
jmp 0x45528f
mov rcx, qword [rsp + 0x3a8]
test rcx, rcx
jne 0x45517b
movzx edx, byte [rsp + 0x2e]
test dl, dl
je 0x4551e7
mov rax, qword [rsp + 0x310]
mov qword [rsp + 0x120], rax
call fcn.004372e0
lea rax, [0x005af582]
mov ebx, 0x14
nop dword [rax]
call fcn.00437be0
mov rax, qword [rsp + 0x120]
call fcn.00437a40
call fcn.00437540
call fcn.00437360
mov rax, qword [rsp + 0x2f0]
mov rbx, qword [rax + 8]
mov rax, qword [rax]
lea rcx, [rsp + 0x300]
xor edi, edi
call fcn.004588a0
mov rax, qword [rsp + 0x3a8]
test rax, rax
jmp 0x4551ea
test rcx, rcx
jne 0x4551fe
xor eax, eax
mov rbp, qword [rsp + 0x358]
add rsp, 0x360
ret
lea rax, [0x005ac70a]
mov ebx, 0xa
call fcn.00435b40
mov qword [rsp + 0x300], r8
mov r8, qword [rsp + 0x290]
mov qword [rsp + 0x308], r8
mov r8, qword [rsp + 0x320]
mov qword [rsp + 0x310], r8
mov qword [rsp + 0x320], 0
mov r8, qword [rsp + 0x330]
mov qword [rsp + 0x328], r8
mov qword [rsp + 0x330], 0
mov qword [rsp + 0x350], 0
cmp r12b, 0x12
sete r8b
mov r12, qword [rsp + 0x120]
mov r9, r12
mov rax, r10
xor r12d, r12d
mov edx, r8d
mov r10, qword [rsp + 0x118]
cmp rsi, rax
jle 0x455ef0
mov qword [rsp + 0x110], r11
mov r8, r12
mov r12, qword [rsp + 0x300]
mov r11, qword [rsp + 0x308]
cmp dword [r12 + 0x10], 0
je 0x455ef0
mov qword [rsp + 0x2e8], r11
mov qword [rsp + 0x2e0], r12
movzx r11d, byte [r12 + 0x25]
movzx r12d, byte [r12 + 0x24]
nop dword [rax + rax]
cmp r12b, 4
jne 0x4552ea
and r11d, 0xfffffffd
cmp qword [rsp + 0x310], r9
jne 0x455310
cmp qword [rsp + 0x328], r10
jne 0x455310
nop
cmp qword [rcx + 0x78], r9
jne 0x455310
cmp qword [rcx + 0x70], r10
jne 0x455310
and r11d, 0xfffffffd
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x60], rdi
mov byte [rsp + 0x2f], bl
mov qword [rsp + 0x2d8], r8
mov byte [rsp + 0x2d], dl
cmp qword [rsp + 0x330], 0
je 0x45535a
mov r12, qword [rsp + 0x2e0]
mov r12, qword [rsp + 0x2e8]
mov qword [rsp + 0x298], r12
mov r12, qword [rsp + 0x2e0]
jmp 0x455556
mov r10, qword [rsp + 0x368]
bt r10d, 2
jae 0x45548d
mov r9, qword [rcx + 0x30]
cmp qword [r9], rcx
jne 0x455485
mov r9, qword [r9 + 0x90]
test r9, r9
je 0x45547b
cmp r12b, 0xc
je 0x4553e9
cmp r12b, 0x13
jne 0x4553d4
mov r9, qword [r9 + 0x38]
mov qword [rsp + 0x328], r9
mov r9, qword [rcx + 0x30]
mov r9, qword [r9 + 0x90]
mov r13, qword [r9 + 0x150]
mov r15, qword [r9 + 0x158]
and r11d, 0xfffffffd
mov r9, qword [rsp + 0x2e0]
mov r12, qword [rsp + 0x2e8]
jmp 0x45549d
mov r9, qword [rsp + 0x2e0]
mov r12, qword [rsp + 0x2e8]
jmp 0x45549d
mov rax, qword [r9 + 0x40]
mov qword [rsp + 0x310], rax
call fcn.0044f6a0
mov qword [rsp + 0x300], rax
mov qword [rsp + 0x308], rbx
mov rcx, qword [rsp + 0x2f0]
mov rdx, qword [rcx + 0x30]
mov rdx, qword [rdx + 0x90]
movzx r11d, byte [rax + 0x25]
mov rdx, qword [rdx + 0x38]
mov qword [rsp + 0x328], rdx
mov rdx, qword [rcx + 0x30]
mov rdx, qword [rdx + 0x90]
mov r13, qword [rdx + 0x150]
mov r15, qword [rdx + 0x158]
movzx edx, byte [rsp + 0x2d]
mov rsi, qword [rsp + 0x3a0]
mov rdi, qword [rsp + 0x60]
mov r8, qword [rsp + 0x2d8]
mov r10, qword [rsp + 0x368]
mov r9, rax
mov r12, rbx
mov rax, qword [rsp + 0x78]
movzx ebx, byte [rsp + 0x2f]
jmp 0x45549d
mov r9, qword [rsp + 0x120]
jmp 0x45548d
mov r9, qword [rsp + 0x120]
mov r9, qword [rsp + 0x2e0]
mov r12, qword [rsp + 0x2e8]
mov qword [rsp + 0xa0], r15
mov qword [rsp + 0x2b0], r13
mov qword [rsp + 0x298], r12
mov qword [rsp + 0x2a0], r9
mov byte [rsp + 0x30], r11b
mov rcx, qword [rsp + 0x310]
mov rax, r9
mov rbx, r12
lea rdi, [rsp + 0x150]
call fcn.004502c0
movsxd rdx, eax
add rdx, qword [rsp + 0x328]
mov qword [rsp + 0x330], rdx
add rdx, 8
mov qword [rsp + 0x330], rdx
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x2f0]
movzx edx, byte [rsp + 0x2d]
movzx ebx, byte [rsp + 0x2f]
mov rsi, qword [rsp + 0x3a0]
mov rdi, qword [rsp + 0x60]
mov r8, qword [rsp + 0x2d8]
mov r9, qword [rsp + 0x120]
mov r10, qword [rsp + 0x118]
movzx r11d, byte [rsp + 0x30]
mov r12, qword [rsp + 0x2a0]
mov r15, qword [rsp + 0xa0]
mov r13, qword [rsp + 0x2b0]
mov qword [rsp + 0xa0], r15
mov qword [rsp + 0x2b0], r13
mov qword [rsp + 0x2a0], r12
test r11b, 1
je 0x455596
mov qword [rsp + 0x320], 0
xor r11d, r11d
xor r11d, r11d
mov qword [rsp + 0x290], r11
xor r11d, r11d
jmp 0x455859
test r11b, 2
je 0x4555ec
mov r11, qword [rsp + 0x3a8]
test r11, r11
je 0x4555b7
test rax, rax
jle 0x4555f4
test r11, r11
jne 0x456976
mov qword [rsp + 0x320], 0
mov qword [rsp + 0xc0], rax
xor eax, eax
mov qword [rsp + 0x278], rax
xor eax, eax
mov qword [rsp + 0x270], rax
mov rax, qword [rsp + 0xc0]
jmp 0x455831
mov r11, qword [rsp + 0x3a8]
cmp qword [rsp + 0x320], 0
jne 0x455622
mov r10, qword [rsp + 0x330]
add r10, 0xfffffffffffffff8
mov qword [rsp + 0x80], r10
mov r10, qword [r10]
mov qword [rsp + 0x320], r10
nop
jmp 0x455634
mov qword [rsp + 0xc8], rax
xor eax, eax
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x320]
nop dword [rax]
call fcn.0044f6a0
test rax, rax
je 0x45566c
mov rcx, qword [rsp + 0x2f0]
movzx edx, byte [rsp + 0x2e]
mov r10, qword [rsp + 0x2a0]
mov r11, qword [rsp + 0x3a8]
jmp 0x4557d5
movzx r9d, byte [rsp + 0x2e]
test r9b, r9b
je 0x4556ae
mov rcx, qword [rsp + 0x2f0]
mov r10, qword [rcx + 0x30]
cmp byte [r10 + 0xe8], 0
je 0x4556a4
mov r10, qword [rsp + 0x2a0]
cmp byte [r10 + 0x24], 0x12
jne 0x4556be
mov edx, r9d
xor r9d, r9d
jmp 0x4556c1
mov r10, qword [rsp + 0x2a0]
jmp 0x4556be
mov rcx, qword [rsp + 0x2f0]
mov r10, qword [rsp + 0x2a0]
mov edx, r9d
mov qword [rsp + 0x2d0], rax
mov qword [rsp + 0x2c8], rbx
mov r11, qword [rsp + 0x3a8]
test r11, r11
jne 0x4556ed
nop
test r9b, r9b
jne 0x4556ed
test r11, r11
jmp 0x4557cf
mov rax, r10
mov rbx, qword [rsp + 0x298]
call fcn.0044fe20
mov qword [rsp + 0x2c0], rax
mov qword [rsp + 0x108], rbx
mov rcx, qword [rsp + 0x320]
mov qword [rsp + 0x100], rcx
nop dword [rax]
call fcn.004372e0
lea rax, [0x005b45db]
mov ebx, 0x22
call fcn.00437be0
mov rax, qword [rsp + 0x2c0]
mov rbx, qword [rsp + 0x108]
call fcn.00437be0
lea rax, [0x005ad09b]
mov ebx, 0xd
call fcn.00437be0
mov rax, qword [rsp + 0x100]
call fcn.00437a40
call fcn.00437540
call fcn.00437360
mov rcx, qword [rsp + 0x2f0]
mov rbx, qword [rcx + 8]
mov rax, qword [rcx]
mov rdi, qword [rsp + 0x80]
lea rcx, [rsp + 0x300]
call fcn.004588a0
mov rdx, qword [rsp + 0x3a8]
test rdx, rdx
mov rax, qword [rsp + 0x2d0]
mov rcx, qword [rsp + 0x2f0]
movzx edx, byte [rsp + 0x2e]
mov rbx, qword [rsp + 0x2c8]
mov r10, qword [rsp + 0x2a0]
mov r11, qword [rsp + 0x3a8]
jne 0x456965
movzx edx, byte [rsp + 0x2d]
mov rsi, qword [rsp + 0x3a0]
mov rdi, qword [rsp + 0x60]
mov r8, qword [rsp + 0x2d8]
mov r9, qword [rsp + 0x120]
mov r10, qword [rsp + 0x118]
mov r12, qword [rsp + 0x2a0]
mov r13, qword [rsp + 0x2b0]
mov r15, qword [rsp + 0xa0]
mov qword [rsp + 0x278], rax
mov qword [rsp + 0x270], rbx
mov rax, qword [rsp + 0x78]
movzx ebx, byte [rsp + 0x2f]
mov r11, qword [rsp + 0x278]
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0x270]
mov qword [rsp + 0x290], rax
mov rax, qword [rsp + 0xb8]
mov r10, qword [rsp + 0x330]
mov qword [rsp + 0x338], r10
lea r9, [r10 - 8]
mov qword [rsp + 0x338], r9
cmp qword [rsp + 0x328], r9
jae 0x45588b
lea r9, [r10 - 0x10]
mov qword [rsp + 0x338], r9
mov qword [rsp + 0x278], r11
mov r9, qword [rsp + 0x3a8]
nop dword [rax + rax]
test r9, r9
je 0x4558ad
movzx r10d, byte [rsp + 0x2e]
jmp 0x4558bf
movzx r10d, byte [rsp + 0x2e]
test r10b, r10b
je 0x455989
test r9, r9
mov r11, qword [rsp + 0x330]
mov qword [rsp + 0x340], r11
je 0x4558e2
cmp dword [r12 + 8], 0x80000000
sete r11b
nop
jmp 0x4558e5
xor r11d, r11d
movsxd r13, dword [r12 + 8]
mov qword [rsp + 0x348], r13
mov qword [rsp + 0x350], 0
nop
test r11b, r11b
je 0x455979
test r9, r9
setne dil
lea rax, [rsp + 0x300]
mov rbx, r12
mov rcx, qword [rsp + 0x298]
mov rsi, r8
call fcn.00456fe0
mov qword [rsp + 0x348], rax
mov qword [rsp + 0x350], rbx
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x2f0]
movzx edx, byte [rsp + 0x2d]
movzx ebx, byte [rsp + 0x2f]
mov rsi, qword [rsp + 0x3a0]
mov rdi, qword [rsp + 0x60]
mov r9, qword [rsp + 0x3a8]
movzx r10d, byte [rsp + 0x2e]
mov r12, qword [rsp + 0x2a0]
mov r15, qword [rsp + 0xa0]
mov r11, qword [rsp + 0x278]
mov r13, qword [rsp + 0x2b0]
mov r8, r11
mov r11, qword [rsp + 0x310]
mov qword [rsp + 0x318], r11
nop dword [rax]
test dl, dl
je 0x455a55
mov r11, qword [rsp + 0x300]
cmp dword [r11 + 0xc], 0
jne 0x4559cb
mov qword [rsp + 0x318], 0
test r9, r9
jmp 0x455a58
mov rax, qword [rsp + 0x308]
mov ebx, dword [r11]
call fcn.0044f1c0
mov rcx, qword [rsp + 0x300]
mov ecx, dword [rcx + 0xc]
lea rcx, [rcx + rax]
lea rcx, [rcx + 1]
mov qword [rsp + 0x318], rcx
mov rdx, qword [rsp + 0x3a8]
test rdx, rdx
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x2f0]
movzx edx, byte [rsp + 0x2d]
movzx ebx, byte [rsp + 0x2f]
mov rsi, qword [rsp + 0x3a0]
mov rdi, qword [rsp + 0x60]
mov r8, qword [rsp + 0x278]
mov r9, qword [rsp + 0x3a8]
movzx r10d, byte [rsp + 0x2e]
mov r12, qword [rsp + 0x2a0]
mov r13, qword [rsp + 0x2b0]
mov r15, qword [rsp + 0xa0]
jmp 0x455a58
test r9, r9
jne 0x455a6a
mov r11, qword [rsp + 0x398]
test r11, r11
jmp 0x455aef
mov rcx, qword [r9]
lea rax, [rsp + 0x300]
mov rbx, qword [rsp + 0x2f8]
mov rdx, r9
call rcx
test al, al
je 0x455edb
mov rax, qword [rsp + 0x398]
test rax, rax
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x2f0]
movzx edx, byte [rsp + 0x2d]
movzx ebx, byte [rsp + 0x2f]
mov rsi, qword [rsp + 0x3a0]
mov rdi, qword [rsp + 0x60]
mov r8, qword [rsp + 0x278]
mov r9, qword [rsp + 0x3a8]
movzx r10d, byte [rsp + 0x2e]
mov r11, qword [rsp + 0x398]
mov r12, qword [rsp + 0x2a0]
mov r13, qword [rsp + 0x2b0]
mov r15, qword [rsp + 0xa0]
je 0x455c96
mov r9, qword [rsp + 0x310]
nop dword [rax]
test rax, rax
jne 0x455b1c
mov r13, qword [rsp + 0x368]
bt r13d, 1
jb 0x455b9f
test dl, dl
jmp 0x455b26
test dl, dl
mov r13, qword [rsp + 0x368]
jne 0x455b9f
mov qword [rsp + 0x58], r9
mov ebx, dword [r12]
mov rax, qword [rsp + 0x298]
call fcn.0044f1c0
mov rcx, qword [rsp + 0x58]
cmp rax, rcx
jne 0x455ba5
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x2f0]
movzx edx, byte [rsp + 0x2d]
movzx ebx, byte [rsp + 0x2f]
mov rsi, qword [rsp + 0x3a0]
mov rdi, qword [rsp + 0x60]
mov r8, qword [rsp + 0x278]
mov r9, qword [rsp + 0x58]
movzx r10d, byte [rsp + 0x2e]
mov r11, qword [rsp + 0x398]
mov r12, qword [rsp + 0x2a0]
mov r13, qword [rsp + 0x368]
mov r15, qword [rsp + 0xa0]
lea r15, [r9 + 1]
jmp 0x455bf8
lea r9, [rcx - 1]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x2f0]
movzx edx, byte [rsp + 0x2d]
movzx ebx, byte [rsp + 0x2f]
mov rsi, qword [rsp + 0x3a0]
mov rdi, qword [rsp + 0x60]
mov r8, qword [rsp + 0x278]
movzx r10d, byte [rsp + 0x2e]
mov r11, qword [rsp + 0x398]
mov r12, qword [rsp + 0x2a0]
mov r13, qword [rsp + 0x368]
mov r15, qword [rsp + 0x58]
mov qword [rsp + 0x50], r9
cmp byte [r12 + 0x27], 3
ja 0x455c22
mov qword [rsp + 0xb0], rax
xor eax, eax
mov qword [rsp + 0x258], rax
mov rax, qword [rsp + 0xb0]
nop
jmp 0x455c76
lea r9, [r12 + 0x27]
mov r13d, dword [r12 + 0x1c]
lea r9, [r9 + r13*4]
lea r9, [r9 + 0xd]
mov r9d, dword [r9]
cmp r9d, 0xffffffff
sete r13b
mov r10, qword [rsp + 0x298]
mov r10, qword [r10 + 0x130]
movzx r13d, r13b
dec r13
add r9, r10
and r9, r13
movzx r10d, byte [rsp + 0x2e]
mov r13, qword [rsp + 0x368]
mov qword [rsp + 0x258], r9
mov r9, qword [rsp + 0x50]
mov r9, qword [rsp + 0x258]
nop
test r9, r9
jne 0x456759
mov r9, qword [rsp + 0x110]
jmp 0x4568e2
test r10b, r10b
je 0x455dfa
mov byte [rsp + 0x33], bl
mov qword [rsp + 0x108], rax
mov r10, qword [rsp + 0x310]
mov qword [rsp + 0x48], r10
test rax, rax
jg 0x455ce7
mov r11, qword [rsp + 0x368]
bt r11d, 1
jae 0x455ce7
mov qword [rsp + 0xa8], rax
xor eax, eax
mov byte [rsp + 0x32], al
mov rax, qword [rsp + 0xa8]
jmp 0x455d63
mov ebx, dword [r12]
mov rax, qword [rsp + 0x298]
call fcn.0044f1c0
cmp qword [rsp + 0x310], rax
seta cl
mov rax, qword [rsp + 0x108]
movzx edx, byte [rsp + 0x2d]
movzx ebx, byte [rsp + 0x33]
mov rsi, qword [rsp + 0x3a0]
mov rdi, qword [rsp + 0x60]
mov r8, qword [rsp + 0x278]
mov r9, qword [rsp + 0x3a8]
mov r10, qword [rsp + 0x48]
mov r11, qword [rsp + 0x368]
mov r12, qword [rsp + 0x2a0]
mov r13, qword [rsp + 0x2b0]
mov r15, qword [rsp + 0xa0]
mov byte [rsp + 0x32], cl
mov rcx, qword [rsp + 0x2f0]
movzx r9d, byte [rsp + 0x32]
test r9b, r9b
je 0x455d75
test dl, dl
jne 0x455d75
dec r10
cmp byte [r12 + 0x27], 3
ja 0x455d82
xor r9d, r9d
jmp 0x455dc9
lea r9, [r12 + 0x27]
mov rdx, r13
mov r13d, dword [r12 + 0x1c]
lea r9, [r9 + r13*4]
lea r9, [r9 + 0xd]
mov r9d, dword [r9]
cmp r9d, 0xffffffff
sete r13b
mov r15, qword [rsp + 0x298]
mov r15, qword [r15 + 0x130]
movzx r13d, r13b
dec r13
add r9, r15
and r9, r13
mov r13, rdx
mov r15, qword [rsp + 0xa0]
test r9, r9
je 0x456317
mov qword [rsp + 0x250], r9
movups xmmword [rsp + 0x128], xmm15
movups xmmword [rsp + 0x130], xmm15
movups xmmword [rsp + 0x140], xmm15
jmp 0x4560f0
mov edx, r10d
lea r10, [rax + 1]
cmp byte [r12 + 0x24], 4
jne 0x455ebc
test r15, r15
je 0x455ebc
mov rax, r11
mov r11, qword [r13 + r15*8 - 8]
mov qword [rsp + 0x98], r11
mov r11, qword [rsp + 0x110]
test r11, r11
jne 0x455eb7
test r9, r9
jne 0x455eb7
mov qword [rsp + 0xf0], rdi
mov byte [rsp + 0x31], bl
mov ebx, edx
mov rcx, qword [rsp + 0x98]
mov rdi, r10
call fcn.004571c0
mov rcx, qword [rsp + 0x2f0]
movzx edx, byte [rsp + 0x2e]
movzx ebx, byte [rsp + 0x31]
mov rsi, qword [rsp + 0x3a0]
mov rdi, qword [rsp + 0xf0]
mov r8, qword [rsp + 0x278]
mov r9, qword [rsp + 0x3a8]
mov r11, qword [rsp + 0x110]
mov r12, qword [rsp + 0x2a0]
mov r13, qword [rsp + 0x2b0]
mov r15, qword [rsp + 0xa0]
mov r10, rax
mov rax, qword [rsp + 0x398]
dec r15
jmp 0x455ec7
mov rax, r11
mov r11, qword [rsp + 0x110]
movzx r12d, byte [r12 + 0x24]
test r8, r8
jne 0x45520f
jmp 0x456085
mov rax, qword [rsp + 0x78]
mov rbp, qword [rsp + 0x358]
add rsp, 0x360
ret
movzx edx, byte [rsp + 0x2e]
movzx edx, dl
test rdx, rdx
cmovne rax, rdi
mov rdx, qword [rsp + 0x3a8]
test rdx, rdx
je 0x455f25
cmp rsi, rax
jle 0x455f25
mov rdx, qword [rsp + 0x328]
mov rbx, qword [rcx + 0x80]
cmp rbx, rdx
jne 0x455f35
mov rbp, qword [rsp + 0x358]
add rsp, 0x360
ret
mov qword [rsp + 0x120], rdx
mov qword [rsp + 0x118], rbx
mov qword [rsp + 0x78], rax
mov rax, qword [rcx + 0x98]
mov qword [rsp + 0xf8], rax
call fcn.004372e0
lea rax, [0x005ac69c]
mov ebx, 0xa
call fcn.00437be0
mov rax, qword [rsp + 0xf8]
call fcn.004379e0
lea rax, [0x005ac83b]
mov ebx, 0xb
call fcn.00437be0
mov rax, qword [rsp + 0x120]
call fcn.00437a40
lea rax, [0x005ab4d8]
mov ebx, 5
call fcn.00437be0
mov rax, qword [rsp + 0x118]
call fcn.00437a40
call fcn.00437540
nop dword [rax]
call fcn.00437360
mov rax, qword [rsp + 0x2f0]
mov rcx, qword [rax]
mov qword [rsp + 0x120], rcx
mov rax, qword [rax + 8]
mov qword [rsp + 0x118], rax
call fcn.004372e0
lea rax, [0x005abe7d]
mov ebx, 8
call fcn.00437be0
mov rax, qword [rsp + 0x120]
call fcn.00437a40
lea rax, [0x005ab031]
mov ebx, 1
call fcn.00437be0
mov rax, qword [rsp + 0x118]
call fcn.00437a40
lea rax, [0x005ab3b9]
mov ebx, 4
call fcn.00437be0
mov rax, qword [rsp + 0x78]
nop dword [rax + rax]
call fcn.004379e0
lea rax, [0x005ab4c4]
mov ebx, 5
call fcn.00437be0
mov rax, qword [rsp + 0x3a0]
nop
call fcn.004379e0
call fcn.00437540
call fcn.00437360
lea rax, [0x005b4a9d]
mov ebx, 0x23
nop dword [rax + rax]
call fcn.00435b40
mov rax, r10
jmp 0x455ef0
mov qword [rsp + 0xe8], rdi
mov rcx, qword [rsp + 0x300]
mov rdx, qword [rsp + 0x2b8]
movzx edx, byte [rdx + 2]
mov byte [rsp + 0x2f], dl
mov rax, qword [rsp + 0x308]
mov ebx, dword [rcx]
call fcn.0044f1c0
mov rcx, qword [rsp + 0xe0]
mov rdx, qword [rsp + 0x250]
lea rcx, [rdx + rcx*4]
lea rcx, [rcx + 0x10]
movsxd rcx, dword [rcx]
lea r10, [rcx + rax]
mov r12, qword [rsp + 0x2a0]
movzx ebx, byte [rsp + 0x2f]
mov rdi, qword [rsp + 0xe8]
mov qword [rsp + 0xe8], rdi
mov byte [rsp + 0x2f], bl
mov qword [rsp + 0x48], r10
mov rax, r12
mov ecx, 2
xor esi, esi
mov rbx, qword [rsp + 0x298]
mov rdi, r10
call fcn.004504c0
nop dword [rax + rax]
test eax, eax
jl 0x4562c5
movsxd rax, eax
cmp rax, 0x100000
jae 0x4566dc
lea rdx, [rax + rax*4]
mov qword [rsp + 0xe0], rdx
mov r9, qword [rsp + 0x250]
mov r10d, dword [r9 + rdx*4 + 0xc]
mov dword [rsp + 0x12c], r10d
lea r10, [r9 + rdx*4]
lea r10, [r10 + 2]
movzx esi, byte [r10]
mov byte [rsp + 0x14c], sil
lea r10, [r9 + rdx*4]
mov qword [rsp + 0x2b8], r10
mov r11, qword [rsp + 0x368]
bt r11d, 0
jb 0x4561c8
mov rdx, qword [rsp + 0xe8]
test rdx, rdx
sete dil
lea rax, [rsp + 0x128]
mov rbx, qword [rsp + 0x298]
mov rcx, qword [rsp + 0x2f0]
movzx r8d, byte [rsp + 0x2f]
call fcn.004581a0
nop dword [rax]
test al, al
je 0x4562b6
lea rax, [rsp + 0x128]
mov rbx, qword [rsp + 0x298]
call fcn.0044fe20
mov qword [rsp + 0x268], rax
mov qword [rsp + 0x70], rbx
mov rcx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x2a0]
mov rbx, qword [rsp + 0x298]
nop
call fcn.00450260
mov qword [rsp + 0x288], rax
mov qword [rsp + 0x90], rbx
mov dword [rsp + 0x38], ecx
call fcn.004372e0
mov rax, qword [rsp + 0x268]
mov rbx, qword [rsp + 0x70]
call fcn.00437be0
lea rax, str._...__n__i____not__quiet390625__chanAnswerArabicAugustBrahmiCarianChakmaCommonCopticError:FormatFridayGOROOTGetACPGothicHangulHatranHebrewHyphenKaithiKhojkiLepchaLycianLydianMondayRejangSCHED_StringSundaySyriacTai_LeTangutTeluguThaanaTypeMXTypeNSUTC12UTC13UTC_02UTC_08UTC_09UTC_11WanchoYezidi__byteu_04X_n_____tchan__definedeletedomainefenceexec:_gopherhangupheaderhiddeninternipnetipMaskkilledlistenminuteobjectpopcntprintfrdtscpreadatremovesecondselectsocketstringstructsweep_sysmontelnettimersuint16uint32uint64__scan___scan__MB_in__Value__action_allocs_dying_locks_m__g0_nmsys_pad1__pad2__snil_n_text__using__zombie__CPU____goid__j0____type19531259765625AvestanBengaliBrailleChanDirConvertCopySidCypriotDeseretDesktopElbasanElymaicFloats:GODEBUGGranthaHanunooIO_waitJanuaryKannadaMUI_DltMUI_StdMakasarMandaicMarchenMultaniMyanmarOctoberOsmanyaPATHEXTRadicalSharadaShavianSiddhamSinhalaSogdianSoyomboSwapperTagalogTibetanTirhutaTuesdayTypeALLTypeOPTTypePTRTypeSOATypeSRVTypeTXTTypeWKSUNKNOWNUsage:_nWSARecvWSASend___s___flags__ttypes__tvalueabortedbdoUxXvbooleancmd.execommandcomplexconnectconsolecpuproffloat32float64forcegcgctracehead__integerinvalidipSliceminpc_operandpacer:_panic:_printlnreaddirrecurserunningshadowssignal_stringssyscalluintptrunknownversionwaitingwriteatend__flags__bytes___etypes__is_not__maxpc__mcount_minLC__minutes_nalloc_newval_nfreed_packed_pointer_stack__status___Month__.10q..._s:_d:_d0123456748828125AcceptExArmenianBalineseBopomofoBugineseCancelIoCherokeeClassANYCyrillicDecemberDuployanEthiopicExtenderFebruaryFullPathGeorgianGoStringGujaratiGurmukhiHiraganaJavaneseKatakanaKayah_LiLinear_ALinear_BMahajaniNovemberOl_ChikiParseIntPhags_PaQuestionReadFileSaturdayTagbanwaTai_ThamTai_VietThursdayTifinaghTypeAAAATypeAXFRUgariticWSAIoctl_signal__tstack___s___n_n_filediracceptexaddress_beEfFgGvbytesHexcgocheckcontinuecs______deadlockdurationfs______gs______infinityintSliceinvalid_no_anodenooptdefparsing_pollDescr10_____r11_____r12_____r13_____r14_____r15_____r8______r9______rax_____rbp_____rbx_____rcx_____rdi_____rflags__rip_____rsi_____rsp_____runnablerwmutexRrwmutexWscavengeshutdownstrconv.templatetraceBuftruncateunknown_urlqueryvssadminwsaioctlelse__forced_____node_B_exp.___B_work___as_type__blocked_in_use__n_lockedg_lockedm_m__curg_marked___ms_cpu___not_in___runtime_s.limit_s.state_threads_unmarked_wbuf1.n_wbuf2.n_unknown___newval__oldval__size____tail____s_____s01234567_244140625:_statusAuthorityBassa_VahBhaiksukiCallSliceClassINETCuneiformDiacriticFindCloseHex_DigitInheritedInterfaceKhudawadiLocalFreeMalayalamMongolianMoveFileWNabataeanPalmyreneParseBoolParseUintRemoveAllSamaritanSeptemberSundaneseTypeCNAMETypeHINFOTypeMINFOWSASendToWednesdayWriteFileatomicor8bad_indirbad_pruneboolSlicebus_errorchan_sendcomplex64copystackctxt___0debugLockfork_execfuncargs_hchanLeafhelp_for_inittraceinterfaceinterruptinvalid_nipv6_icmpmSpanDeadmSpanFreentdll.dllpanicwaitpclmulqdqpreemptedpsapi.dllrecover:_reflect:_rwxrwxrwxscavtraceshorthandstackpooltracebacktwo_word_uintSlicewbufSpansbreak_stack__________s_MB_goal___flushGen__gfreecnt_pages_at__ptrSize__runqsize_runqueue_s.base___spinning_stopwait_sweepgen__sweepgen_targetpc_throwing_until_pc__Weekday___bound____limit___dev_stdin012345678912207031256103515625_no_value_AdditionalBad_varintCancelIoExChorasmianClassCHAOSClassCSNETCreateFileCreatePipeDeprecatedDevanagariDnsQuery_WException_GC_forced_nGOMAXPROCSGetIfEntryGetVersionGlagoliticIP_addressKharoshthiLockFileExManichaeanOld_ItalicOld_PermicOld_TurkicOther_MathParseFloatPhoenicianSYSTEMROOTSaurashtraWSACleanupWSASocketWWSAStartup_Debug___s_Error___s__completearg__d:__watomicand8completioncomplex128debug_calldefinitiondeprecateddnsapi.dllexitThreadfloat32nanfloat64nangetsockoptgoroutine_int32Sliceint64SliceinvalidptrmSpanInUsenotifyListowner_diedpowershellruntime:_gs.state__schedtracesemacquiresetsockoptstackLarget.Kind__terminatedticks.locktracefree_tracegc___nunknown_pcvalue_for_ws2_32.dll____s_____s__of_size____targetpc___plugin:__KiB_work___exp
mov ebx, 6
nop dword [rax]
call fcn.00437be0
call fcn.00437360
call fcn.004372e0
lea rax, [0x005f534b]
mov ebx, 1
nop dword [rax + rax]
call fcn.00437be0
mov rax, qword [rsp + 0x288]
mov rbx, qword [rsp + 0x90]
call fcn.00437be0
lea rax, [0x005ab036]
mov ebx, 1
call fcn.00437be0
mov ecx, dword [rsp + 0x38]
movsxd rax, ecx
call fcn.004379e0
call fcn.00437540
nop dword [rax]
call fcn.00437360
mov rcx, qword [rsp + 0xe8]
lea rdi, [rcx + 1]
jmp 0x45608d
mov rdi, qword [rsp + 0xe8]
nop
jmp 0x45608d
mov rax, qword [rsp + 0x108]
mov rcx, qword [rsp + 0x2f0]
mov rsi, qword [rsp + 0x3a0]
mov r8, qword [rsp + 0x278]
mov r11, qword [rsp + 0x368]
mov r12, qword [rsp + 0x2a0]
mov r13, qword [rsp + 0x2b0]
mov r15, qword [rsp + 0xa0]
movzx ebx, byte [rsp + 0x2f]
mov r10, qword [rsp + 0x48]
mov rdi, qword [rsp + 0xe8]
mov qword [rsp + 0xe8], rdi
mov qword [rsp + 0x48], r10
bt r11d, 0
jae 0x456332
mov edx, 1
jmp 0x4563a2
test rdi, rdi
sete dl
movzx esi, byte [r12 + 0x24]
mov rax, r12
mov r8d, ebx
mov rbx, qword [rsp + 0x298]
mov edi, edx
call fcn.004581a0
mov rcx, qword [rsp + 0x2f0]
mov rsi, qword [rsp + 0x3a0]
mov rdi, qword [rsp + 0xe8]
mov r8, qword [rsp + 0x278]
mov r10, qword [rsp + 0x48]
mov r11, qword [rsp + 0x368]
mov r12, qword [rsp + 0x2a0]
mov r13, qword [rsp + 0x2b0]
mov r15, qword [rsp + 0xa0]
mov edx, eax
mov rax, qword [rsp + 0x108]
test dl, dl
je 0x4566bb
mov rax, r12
mov rbx, qword [rsp + 0x298]
call fcn.0044fe20
mov qword [rsp + 0x260], rax
mov qword [rsp + 0x68], rbx
mov rcx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x2a0]
mov rbx, qword [rsp + 0x298]
nop dword [rax]
call fcn.00450260
mov qword [rsp + 0x280], rax
mov qword [rsp + 0x88], rbx
mov dword [rsp + 0x34], ecx
mov rdx, qword [rsp + 0x68]
nop
cmp rdx, 0xf
jne 0x456442
movabs rsi, 0x2e656d69746e7572
mov rdi, qword [rsp + 0x260]
cmp qword [rdi], rsi
jne 0x45644a
cmp dword [rdi + 8], 0x61706f67
jne 0x45644a
cmp word [rdi + 0xc], 0x696e
jne 0x45644a
cmp byte [rdi + 0xe], 0x63
jne 0x45644a
mov edx, 5
lea rdi, [0x005ab66d]
jmp 0x45644a
mov rdi, qword [rsp + 0x260]
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x260], rdi
call fcn.004372e0
mov rax, qword [rsp + 0x260]
mov rbx, qword [rsp + 0x68]
call fcn.00437be0
lea rax, [0x005ab02c]
mov ebx, 1
call fcn.00437be0
nop
call fcn.00437360
mov rcx, qword [rsp + 0x340]
mov rax, qword [rsp + 0x2a0]
mov rbx, qword [rsp + 0x298]
mov rdi, qword [rsp + 0x48]
call fcn.00456a80
call fcn.004372e0
lea rax, [0x005ab06d]
mov ebx, 2
call fcn.00437be0
nop dword [rax]
call fcn.00437360
call fcn.004372e0
lea rax, [0x005f534b]
mov ebx, 1
call fcn.00437be0
mov rax, qword [rsp + 0x280]
mov rbx, qword [rsp + 0x88]
call fcn.00437be0
lea rax, [0x005ab036]
mov ebx, 1
nop dword [rax]
call fcn.00437be0
mov eax, dword [rsp + 0x34]
movsxd rax, eax
call fcn.004379e0
call fcn.00437360
mov rax, qword [rsp + 0x2a0]
mov ebx, dword [rax]
mov rax, qword [rsp + 0x298]
call fcn.0044f1c0
cmp qword [rsp + 0x310], rax
jbe 0x456593
mov rcx, qword [rsp + 0x2a0]
mov ebx, dword [rcx]
mov rax, qword [rsp + 0x298]
call fcn.0044f1c0
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x310]
mov qword [rsp + 0x100], rcx
call fcn.004372e0
lea rax, [0x005ab051]
mov ebx, 2
call fcn.00437be0
mov rax, qword [rsp + 0x100]
mov rcx, qword [rsp + 0x40]
sub rax, rcx
call fcn.00437a40
call fcn.00437360
mov rax, qword [rsp + 0x2f0]
mov rcx, qword [rax + 0x30]
nop
test rcx, rcx
je 0x4565b7
cmp dword [rcx + 0xc4], 0
jle 0x4565b7
cmp qword [rcx + 0x90], rax
je 0x4565c9
mov ecx, dword [rsp + 0x3c]
nop dword [rax + rax]
cmp ecx, 2
jl 0x456660
mov rax, qword [rsp + 0x330]
mov qword [rsp + 0x100], rax
mov rcx, qword [rsp + 0x328]
mov qword [rsp + 0xd8], rcx
mov rdx, qword [rsp + 0x310]
mov qword [rsp + 0xd0], rdx
call fcn.004372e0
lea rax, [0x005ab2d9]
mov ebx, 4
call fcn.00437be0
mov rax, qword [rsp + 0x100]
call fcn.00437a40
lea rax, [0x005ab2f9]
mov ebx, 4
call fcn.00437be0
mov rax, qword [rsp + 0xd8]
call fcn.00437a40
lea rax, [0x005ab2f1]
mov ebx, 4
call fcn.00437be0
mov rax, qword [rsp + 0xd0]
call fcn.00437a40
call fcn.00437360
nop dword [rax]
call fcn.004372e0
call fcn.00437540
call fcn.00437360
mov rax, qword [rsp + 0xe8]
lea rdi, [rax + 1]
mov rax, qword [rsp + 0x108]
mov rcx, qword [rsp + 0x2f0]
mov rsi, qword [rsp + 0x3a0]
mov r8, qword [rsp + 0x278]
mov r11, qword [rsp + 0x368]
mov r12, qword [rsp + 0x2a0]
mov r13, qword [rsp + 0x2b0]
mov r15, qword [rsp + 0xa0]
movzx ebx, byte [r12 + 0x24]
mov r9, qword [rsp + 0x3a8]
movzx r10d, byte [rsp + 0x2e]
mov r11, qword [rsp + 0x398]
jmp 0x455dfa
mov ecx, 0x100000
call fcn.00462280
mov qword [rsp + 0x110], r8
mov qword [rsp + 0x108], rax
mov rcx, qword [rsp + 0x300]
movzx edx, byte [rdi + 2]
mov byte [rsp + 0x2f], dl
mov rsi, qword [rsp + 0x308]
mov ebx, dword [rcx]
mov rax, rsi
call fcn.0044f1c0
mov rcx, qword [rsp + 0xe8]
mov rdx, qword [rsp + 0x258]
lea rcx, [rdx + rcx*4]
lea rcx, [rcx + 0x10]
movsxd rcx, dword [rcx]
lea r9, [rcx + rax]
lea r15, [rcx + rax]
lea r15, [r15 + 1]
mov r12, qword [rsp + 0x2a0]
mov qword [rsp + 0x50], r9
movzx ebx, byte [rsp + 0x2f]
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x108], rax
mov byte [rsp + 0x2f], bl
mov ecx, 2
mov rdi, qword [rsp + 0x50]
lea rsi, [rsp + 0x150]
mov rax, r12
mov rbx, qword [rsp + 0x298]
call fcn.004504c0
test eax, eax
jl 0x456885
movsxd rax, eax
nop word [rax + rax]
cmp rax, 0x100000
jae 0x456959
lea rdx, [rax + rax*4]
mov qword [rsp + 0xe8], rdx
mov rsi, qword [rsp + 0x258]
lea rdi, [rsi + rdx*4]
lea r8, [rsi + rdx*4]
lea r8, [r8 + 2]
cmp byte [r8], 0x15
jne 0x456805
movzx r8d, byte [rsp + 0x2f]
cmp r8b, 9
je 0x456805
nop
cmp r8b, 0x12
je 0x456805
cmp r8b, 0xe
je 0x456805
mov rax, qword [rsp + 0x108]
mov r8, qword [rsp + 0x110]
nop dword [rax]
jmp 0x4566e6
mov r8, qword [rsp + 0x110]
test r8, r8
jle 0x456836
lea rcx, [r8 - 1]
mov r9, qword [rsp + 0x3a0]
mov r10, qword [rsp + 0x398]
mov rax, qword [rsp + 0x108]
mov r8, rcx
jmp 0x4566e6
mov r9, qword [rsp + 0x3a0]
mov rax, qword [rsp + 0x108]
cmp r9, rax
jle 0x456873
cmp rax, 0x100000
jae 0x45694f
mov rcx, qword [rsp + 0x100]
mov r10, qword [rsp + 0x398]
mov qword [r10 + rax*8], rcx
inc rax
jmp 0x4566e6
mov r10, qword [rsp + 0x398]
nop dword [rax + rax]
jmp 0x4566e6
mov rcx, qword [rsp + 0x2f0]
movzx edx, byte [rsp + 0x2d]
mov rsi, qword [rsp + 0x3a0]
mov rdi, qword [rsp + 0x60]
mov r8, qword [rsp + 0x278]
movzx r10d, byte [rsp + 0x2e]
mov r11, qword [rsp + 0x398]
mov r12, qword [rsp + 0x2a0]
mov r13, qword [rsp + 0x368]
movzx ebx, byte [rsp + 0x2f]
mov rax, qword [rsp + 0x108]
mov r15, qword [rsp + 0x100]
mov r9, qword [rsp + 0x110]
cmp byte [r12 + 0x24], 0x15
jne 0x4568f9
cmp bl, 9
je 0x4568f9
cmp bl, 0x12
je 0x4568f9
cmp bl, 0xe
jne 0x456917
test r9, r9
jle 0x456903
dec r9
jmp 0x456917
cmp rsi, rax
jle 0x456917
cmp rax, 0x100000
jae 0x456945
mov qword [r11 + rax*8], r15
inc rax
movzx ebx, byte [r12 + 0x24]
dec rax
mov r13, qword [rsp + 0x2b0]
mov r15, qword [rsp + 0xa0]
mov qword [rsp + 0x110], r9
mov r9, qword [rsp + 0x3a8]
jmp 0x455c96
mov ecx, 0x100000
call fcn.00462280
mov ecx, 0x100000
call fcn.00462280
mov ecx, 0x100000
nop
call fcn.00462280
lea rax, [0x005ae451]
mov ebx, 0x11
call fcn.00435b40
mov rax, r12
mov rbx, qword [rsp + 0x298]
call fcn.0044fe20
mov qword [rsp + 0x2c0], rax
mov qword [rsp + 0x110], rbx
call fcn.004372e0
lea rax, [0x005b5a6c]
mov ebx, 0x27
call fcn.00437be0
mov rax, qword [rsp + 0x2c0]
mov rbx, qword [rsp + 0x110]
nop dword [rax]
call fcn.00437be0
call fcn.00437540
call fcn.00437360
lea rax, [0x005ac350]
mov ebx, 9
nop dword [rax + rax]
call fcn.00435b40
lea rax, [0x005b87a3]
mov ebx, 0x39
call fcn.00435b40
lea rax, [0x005b84ce]
mov ebx, 0x37
call fcn.00435b40
nop
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x40], r9
mov qword [rsp + 0x48], r10
mov qword [rsp + 0x50], r11
call fcn.0045fba0
mov rax, qword [rsp + 0x10]
mov rbx, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x28]
mov rsi, qword [rsp + 0x30]
mov r8, qword [rsp + 0x38]
mov r9, qword [rsp + 0x40]
mov r10, qword [rsp + 0x48]
mov r11, qword [rsp + 0x50]
jmp fcn.00454f40