Function at 0x4903ff
Capabilities:
Enumerate pe sections

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x3f0
mov r8d, 0x1f40
mov edx, 4
mov rcx, qword [section..bss]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_HeapAlloc]
add rsp, 0x20
mov qword [rbp - 0x18], rax
mov r8d, 0x111700
mov edx, 4
mov rcx, qword [section..bss]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_HeapAlloc]
add rsp, 0x20
mov qword [rbp - 0x20], rax
mov dword [rbp - 0xc], 0
mov rcx, qword [rbp - 0x18]
mov edx, 0x1f40
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlZeroMemory]
add rsp, 0x20
mov rcx, qword [rbp - 0x20]
mov edx, 0x111700
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlZeroMemory]
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov byte [rax], 2
mov word [rbp - 2], 6
push qword [0x009d6500]
push 0x1f40
push qword [rbp - 0x18]
movzx eax, word [rbp - 2]
push rax
push 7
push str.PRIMARY
call fcn.0040ece8
mov dword [rbp - 8], eax
cmp dword [rbp - 8], 0
je 0x4904c9
cmp dword [rbp - 8], 0xffffff12
jne 0x491473
cmp dword [rbp - 8], 0
jl 0x49055b
mov rax, qword [rbp - 0x18]
movzx eax, byte [rax]
cmp eax, 2
jne 0x49055b
mov rax, qword [rbp - 0x18]
movzx eax, word [rax + 0x12]
cmp eax, 0
jne 0x490550
mov eax, dword [rbp - 0xc]
inc dword [rbp - 0xc]
cmp eax, 0x4e20
jae 0x491475
mov rbx, qword [rbp - 0x20]
imul eax, eax, 0x38
lea rax, [rbx + rax]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 0x18]
mov rbx, qword [rbp - 0x28]
mov rsi, qword [rax + 1]
mov rdi, qword [rax + 9]
mov qword [rbx], rsi
mov qword [rbx + 8], rdi
mov rax, qword [rbp - 0x28]
mov rbx, qword [rbp - 0x18]
mov ebx, dword [rbx + 0x14]
mov dword [rax + 0x10], ebx
mov rax, qword [rbp - 0x28]
mov rbx, qword [rbp - 0x18]
mov rbx, qword [rbx + 0x18]
mov qword [rax + 0x18], rbx
mov rax, qword [rbp - 0x28]
mov rbx, qword [rbp - 0x18]
mov ebx, dword [rbx + 0x20]
mov dword [rax + 0x20], ebx
mov word [rbp - 2], 4
jmp 0x490494
mov dword [rbp - 0x24], 0
jmp 0x4907d1
push rax
mov eax, dword [rbp - 0x24]
cmp eax, 0x4e20
jae 0x491477
mov rbx, qword [rbp - 0x20]
imul eax, eax, 0x38
lea rax, [rbx + rax]
push rax
call fcn.0051b7c8
pop rcx
mov qword [rbp - 0x30], rax
mov rax, qword [rbp - 0x30]
lock inc dword [rax]
cmp dword [rax + 4], 1
jne 0x491479
mov qword [rbp - 0x48], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
mov rsi, qword [rbp - 0x48]
lock dec dword [rsi]
sub ebx, 0xa4f
mov eax, ebx
mov ebx, 0x2e
xor edx, edx
div ebx
mov dword [rbp - 0x3c], eax
mov eax, dword [rbp - 0x3c]
cmp eax, 0x2c8590c
jae 0x491479
imul eax, eax, 0x2e
add eax, 4
mov r8d, eax
mov edx, 0xc
mov rcx, qword [section..bss]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_HeapAlloc]
add rsp, 0x20
mov ebx, dword [rbp - 0x3c]
mov dword [rax], ebx
call fcn.006defae
mov dword [rax + 4], 0x8a
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
lock inc dword [rax]
cmp dword [rax + 4], 0x8a
jne 0x49147b
mov qword [rbp - 0x40], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
imul ebx, ebx, 0x2e
mov rsi, qword [rbp - 0x30]
lock inc dword [rsi]
cmp dword [rsi + 4], 1
jne 0x49147b
mov qword [rbp - 0x48], rsi
mov rdi, qword [rbp - 0x38]
lock inc dword [rdi]
cmp dword [rdi + 4], 0x8a
jne 0x49147b
mov qword [rbp - 0x58], rdi
mov rdi, qword [rdi + 8]
mov ecx, dword [rdi]
mov rdx, qword [rbp - 0x58]
lock dec dword [rdx]
imul ecx, ecx, 0x2e
mov dword [rbp - 0x4c], ecx
mov rsi, qword [rsi + 8]
mov edi, dword [rsi]
sub edi, dword [rbp - 0x4c]
jb 0x49147b
cmp edi, 0xa4f
jb 0x49147b
cmp ebx, dword [rbp - 0x4c]
jne 0x49147b
mov r8d, ebx
lea rdx, [rsi + 0xa53]
lea rcx, [rax + 4]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlMoveMemory]
add rsp, 0x20
mov rax, qword [rbp - 0x40]
lock dec dword [rax]
mov rax, qword [rbp - 0x48]
lock dec dword [rax]
mov rax, qword [rbp - 0x30]
lock inc dword [rax]
cmp dword [rax + 4], 1
jne 0x49147d
mov qword [rbp - 0x40], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
mov rsi, qword [rbp - 0x40]
lock dec dword [rsi]
mov rax, qword [rbp - 0x38]
lock inc dword [rax]
cmp dword [rax + 4], 0x8a
jne 0x49147d
mov qword [rbp - 0x40], rax
mov rax, qword [rax + 8]
mov esi, dword [rax]
mov rdi, qword [rbp - 0x40]
lock dec dword [rdi]
mov eax, 0x2e
mul esi
add eax, 0xa4f
cmp eax, ebx
jne 0x49147f
mov dword [rbp - 0x28], 0
jmp 0x490784
mov rax, qword [rbp - 0x38]
lock inc dword [rax]
cmp dword [rax + 4], 0x8a
jne 0x491483
mov qword [rbp - 0x48], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
mov esi, dword [rbp - 0x28]
cmp esi, ebx
jae 0x491483
imul esi, esi, 0x2e
lea rax, [rax + rsi + 4]
mov qword [rbp - 0x50], rax
mov rax, qword [rbp - 0x50]
movzx eax, byte [rax + 4]
cmp eax, 2
jne 0x49077a
mov rax, qword [rbp - 0x50]
lea rax, [rax + 0x1a]
push rax
push 0x4e20
push qword [rbp - 0x20]
lea rax, [rbp - 0xc]
push rax
call fcn.0051bb2a
mov rax, qword [rbp - 0x48]
lock dec dword [rax]
inc dword [rbp - 0x28]
mov rax, qword [rbp - 0x38]
lock inc dword [rax]
cmp dword [rax + 4], 0x8a
jne 0x491481
mov qword [rbp - 0x40], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
mov rsi, qword [rbp - 0x40]
lock dec dword [rsi]
cmp ebx, dword [rbp - 0x28]
jg 0x49071d
mov rax, qword [rbp - 0x38]
mov ebx, 0x8a
call fcn.006df099
mov rax, qword [rbp - 0x30]
mov ebx, 1
call fcn.006df099
inc dword [rbp - 0x24]
mov eax, dword [rbp - 0x24]
cmp eax, dword [rbp - 0xc]
jl 0x490567
mov dword [rbp - 0x24], 0
jmp 0x4908d2
mov eax, dword [rbp - 0x24]
inc eax
mov dword [rbp - 0x28], eax
jmp 0x49083a
mov eax, dword [rbp - 0x24]
cmp eax, 0x4e20
jae 0x491485
mov rbx, qword [rbp - 0x20]
imul eax, eax, 0x38
push 0x10
lea rax, [rbx + rax]
push rax
mov eax, dword [rbp - 0x28]
cmp eax, 0x4e20
jae 0x491485
mov rbx, qword [rbp - 0x20]
imul eax, eax, 0x38
push 0x10
lea rax, [rbx + rax]
push rax
call fcn.00410e58
cmp eax, 0
je 0x490842
inc dword [rbp - 0x28]
mov eax, dword [rbp - 0x28]
cmp eax, dword [rbp - 0xc]
jl 0x4907f3
mov eax, dword [rbp - 0x28]
cmp eax, dword [rbp - 0xc]
jge 0x4908cf
dec dword [rbp - 0xc]
mov eax, dword [rbp - 0xc]
sub eax, dword [rbp - 0x24]
mov dword [rbp - 0x2c], eax
mov eax, 0x4e20
sub eax, dword [rbp - 0x2c]
jb 0x491487
cmp eax, dword [rbp - 0x24]
jb 0x491487
mov rax, qword [rbp - 0x20]
imul ebx, dword [rbp - 0x24], 0x38
mov esi, dword [rbp - 0x24]
inc esi
mov edi, dword [rbp - 0xc]
sub edi, dword [rbp - 0x24]
mov dword [rbp - 0x30], edi
mov edi, 0x4e20
sub edi, dword [rbp - 0x30]
jb 0x491487
cmp edi, esi
jb 0x491487
mov rdi, qword [rbp - 0x20]
imul esi, esi, 0x38
mov ecx, dword [rbp - 0x30]
cmp ecx, dword [rbp - 0x2c]
jne 0x491487
imul ecx, ecx, 0x38
mov r8d, ecx
lea rdx, [rdi + rsi]
lea rcx, [rax + rbx]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlMoveMemory]
add rsp, 0x20
dec dword [rbp - 0x24]
inc dword [rbp - 0x24]
mov eax, dword [rbp - 0x24]
cmp eax, dword [rbp - 0xc]
jl 0x4907e9
mov eax, dword [rbp - 0xc]
dec eax
mov dword [rbp - 0x24], eax
jmp 0x490fd7
push rax
mov eax, dword [rbp - 0x24]
cmp eax, 0x4e20
jae 0x491489
mov rbx, qword [rbp - 0x20]
imul eax, eax, 0x38
lea rax, [rbx + rax]
push rax
call fcn.0051b7c8
pop rcx
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
lock inc dword [rax]
cmp dword [rax + 4], 1
jne 0x49148b
mov qword [rbp - 0x60], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
mov rsi, qword [rbp - 0x60]
lock dec dword [rsi]
sub ebx, 0xa4f
mov eax, ebx
mov ebx, 0x2e
xor edx, edx
div ebx
mov dword [rbp - 0x54], eax
mov eax, dword [rbp - 0x54]
cmp eax, 0x2c8590c
jae 0x49148b
imul eax, eax, 0x2e
add eax, 4
mov r8d, eax
mov edx, 0xc
mov rcx, qword [section..bss]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_HeapAlloc]
add rsp, 0x20
mov ebx, dword [rbp - 0x54]
mov dword [rax], ebx
call fcn.006defae
mov dword [rax + 4], 0x8b
mov qword [rbp - 0x48], rax
mov rax, qword [rbp - 0x48]
lock inc dword [rax]
cmp dword [rax + 4], 0x8b
jne 0x49148d
mov qword [rbp - 0x58], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
imul ebx, ebx, 0x2e
mov rsi, qword [rbp - 0x38]
lock inc dword [rsi]
cmp dword [rsi + 4], 1
jne 0x49148d
mov qword [rbp - 0x60], rsi
mov rdi, qword [rbp - 0x48]
lock inc dword [rdi]
cmp dword [rdi + 4], 0x8b
jne 0x49148d
mov qword [rbp - 0x70], rdi
mov rdi, qword [rdi + 8]
mov ecx, dword [rdi]
mov rdx, qword [rbp - 0x70]
lock dec dword [rdx]
imul ecx, ecx, 0x2e
mov dword [rbp - 0x64], ecx
mov rsi, qword [rsi + 8]
mov edi, dword [rsi]
sub edi, dword [rbp - 0x64]
jb 0x49148d
cmp edi, 0xa4f
jb 0x49148d
cmp ebx, dword [rbp - 0x64]
jne 0x49148d
mov r8d, ebx
lea rdx, [rsi + 0xa53]
lea rcx, [rax + 4]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlMoveMemory]
add rsp, 0x20
mov rax, qword [rbp - 0x58]
lock dec dword [rax]
mov rax, qword [rbp - 0x60]
lock dec dword [rax]
mov rax, qword [rbp - 0x38]
lock inc dword [rax]
cmp dword [rax + 4], 1
jne 0x49148f
mov qword [rbp - 0x58], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
mov rsi, qword [rbp - 0x58]
lock dec dword [rsi]
mov rax, qword [rbp - 0x48]
lock inc dword [rax]
cmp dword [rax + 4], 0x8b
jne 0x49148f
mov qword [rbp - 0x58], rax
mov rax, qword [rax + 8]
mov esi, dword [rax]
mov rdi, qword [rbp - 0x58]
lock dec dword [rdi]
mov eax, 0x2e
mul esi
add eax, 0xa4f
cmp eax, ebx
jne 0x491491
mov rax, qword [rbp - 0x48]
lock inc dword [rax]
cmp dword [rax + 4], 0x8b
jne 0x491493
mov qword [rbp - 0x60], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
mov rsi, qword [rbp - 0x60]
lock dec dword [rsi]
mov dword [rbp - 0x54], ebx
mov eax, dword [rbp - 0x54]
cmp eax, 0x199999a
jae 0x491493
imul eax, eax, 0x50
add eax, 4
mov r8d, eax
mov edx, 0xc
mov rcx, qword [section..bss]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_HeapAlloc]
add rsp, 0x20
mov ebx, dword [rbp - 0x54]
mov dword [rax], ebx
call fcn.006defae
mov dword [rax + 4], 0x8c
mov qword [rbp - 0x50], rax
mov dword [rbp - 0x2c], 0
mov dword [rbp - 0x28], 0
jmp 0x490d1b
mov rax, qword [rbp - 0x48]
lock inc dword [rax]
cmp dword [rax + 4], 0x8b
jne 0x491497
mov qword [rbp - 0x58], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
mov esi, dword [rbp - 0x28]
cmp esi, ebx
jae 0x491497
imul esi, esi, 0x2e
lea rax, [rax + rsi + 4]
mov qword [rbp - 0x60], rax
mov rax, qword [rbp - 0x50]
lock inc dword [rax]
cmp dword [rax + 4], 0x8c
jne 0x491499
mov qword [rbp - 0x68], rax
mov ebx, dword [rbp - 0x2c]
inc dword [rbp - 0x2c]
mov rax, qword [rax + 8]
mov esi, dword [rax]
cmp ebx, esi
jae 0x491499
imul ebx, ebx, 0x50
lea rax, [rax + rbx + 4]
mov qword [rbp - 0x70], rax
mov rcx, qword [rbp - 0x70]
mov edx, 0x50
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlZeroMemory]
add rsp, 0x20
mov rax, qword [rbp - 0x60]
mov rbx, qword [rbp - 0x70]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [rbp - 0x70]
mov rbx, qword [rbp - 0x60]
movzx ebx, byte [rbx + 4]
mov byte [rax + 4], bl
mov rax, qword [rbp - 0x70]
mov rbx, qword [rbp - 0x60]
movzx ebx, byte [rbx + 5]
mov byte [rax + 5], bl
mov rax, qword [rbp - 0x70]
mov rbx, qword [rbp - 0x60]
mov rsi, qword [rbx + 6]
mov rdi, qword [rbx + 0xe]
mov cx, word [rbx + 0x16]
mov qword [rax + 6], rsi
mov qword [rax + 0xe], rdi
mov word [rax + 0x16], cx
mov rax, qword [rbp - 0x70]
mov rbx, qword [rbp - 0x60]
movzx ebx, word [rbx + 0x18]
mov word [rax + 0x26], bx
mov rax, qword [rbp - 0x60]
mov rbx, qword [rbp - 0x70]
mov rsi, qword [rax + 0x1a]
mov rdi, qword [rax + 0x22]
mov qword [rbx + 0x28], rsi
mov qword [rbx + 0x30], rdi
mov rax, qword [rbp - 0x70]
mov rbx, qword [rbp - 0x60]
mov bl, byte [rbx + 0x2a]
mov byte [rax + 0x38], bl
mov rax, qword [rbp - 0x70]
movzx eax, byte [rax + 4]
cmp eax, 1
jne 0x490c6c
mov rax, qword [rbp - 0x70]
mov rbx, qword [rbp - 0x60]
mov bl, byte [rbx + 0x2b]
mov byte [rax + 0x39], bl
mov rax, qword [rbp - 0x70]
mov rbx, qword [rbp - 0x60]
movzx ebx, byte [rbx + 0x2c]
mov byte [rax + 0x3a], bl
mov rax, qword [rbp - 0x70]
mov rbx, qword [rbp - 0x60]
movzx ebx, byte [rbx + 0x2d]
mov byte [rax + 0x3b], bl
mov rax, qword [rbp - 0x70]
mov dword [rax + 0x3c], 0x3f800000
mov rax, qword [rbp - 0x70]
mov dword [rax + 0x44], 0xffffffff
mov rax, qword [rbp - 0x70]
movzx eax, byte [rax + 4]
cmp eax, 2
jne 0x490d0a
mov eax, dword [rbp - 0x24]
mov dword [rbp - 0x74], eax
jmp 0x490cba
push 0x10
mov rax, qword [rbp - 0x60]
lea rax, [rax + 0x1a]
push rax
mov eax, dword [rbp - 0x74]
cmp eax, 0x4e20
jae 0x49149b
mov rbx, qword [rbp - 0x20]
imul eax, eax, 0x38
push 0x10
lea rax, [rbx + rax]
push rax
call fcn.00410e58
cmp eax, 0
je 0x490cc2
inc dword [rbp - 0x74]
mov eax, dword [rbp - 0x74]
cmp eax, dword [rbp - 0xc]
jl 0x490c85
mov eax, dword [rbp - 0x74]
cmp eax, dword [rbp - 0xc]
jge 0x490cf8
mov eax, dword [rbp - 0x74]
cmp eax, 0x4e20
jae 0x49149d
mov rbx, qword [rbp - 0x20]
imul eax, eax, 0x38
mov rsi, qword [rbp - 0x70]
mov rdi, qword [rbx + rax + 0x24]
mov rcx, qword [rbx + rax + 0x2c]
mov qword [rsi + 0x28], rdi
mov qword [rsi + 0x30], rcx
jmp 0x490d0a
push 0x2b
push str.warning:_missing_object_item_:_remove_it___n
push 0
push rbp
call fcn.0040280b
dec dword [rbp - 0x2c]
mov rax, qword [rbp - 0x58]
lock dec dword [rax]
mov rax, qword [rbp - 0x68]
lock dec dword [rax]
inc dword [rbp - 0x28]
mov rax, qword [rbp - 0x48]
lock inc dword [rax]
cmp dword [rax + 4], 0x8b
jne 0x491495
mov qword [rbp - 0x58], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
mov rsi, qword [rbp - 0x58]
lock dec dword [rsi]
cmp ebx, dword [rbp - 0x28]
jg 0x490b19
mov eax, 0x50
mul dword [rbp - 0x2c]
add eax, 0xa50
mov dword [rbp - 0x54], eax
mov eax, dword [rbp - 0x54]
cmp eax, 0x7ffffffc
jae 0x49149f
add eax, 4
mov r8d, eax
mov edx, 0xc
mov rcx, qword [section..bss]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_HeapAlloc]
add rsp, 0x20
mov ebx, dword [rbp - 0x54]
mov dword [rax], ebx
call fcn.006defae
mov dword [rax + 4], 1
mov qword [rbp - 0x40], rax
mov rax, qword [rbp - 0x38]
lock inc dword [rax]
cmp dword [rax + 4], 1
jne 0x4914a1
mov qword [rbp - 0x58], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
sub ebx, 0xa4f
jb 0x4914a1
lea rax, [rax + 4]
push rax
mov rax, qword [rbp - 0x40]
lock inc dword [rax]
cmp dword [rax + 4], 1
jne 0x4914a1
mov qword [rbp - 0x60], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
sub ebx, 0xa50
jb 0x4914a1
lea rax, [rax + 4]
push rax
call fcn.0051be44
mov rax, qword [rbp - 0x58]
lock dec dword [rax]
mov rax, qword [rbp - 0x60]
lock dec dword [rax]
mov dword [rbp - 0x54], 0xa50
mov dword [rbp - 0x58], 0
jmp 0x490eaa
mov rax, qword [rbp - 0x40]
lock inc dword [rax]
cmp dword [rax + 4], 1
jne 0x4914a3
mov qword [rbp - 0x60], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
sub ebx, 0x50
jb 0x4914a3
cmp ebx, dword [rbp - 0x54]
jb 0x4914a3
mov ebx, dword [rbp - 0x54]
mov rsi, qword [rbp - 0x50]
lock inc dword [rsi]
cmp dword [rsi + 4], 0x8c
jne 0x4914a3
mov qword [rbp - 0x68], rsi
mov rsi, qword [rsi + 8]
mov edi, dword [rsi]
mov ecx, dword [rbp - 0x58]
cmp ecx, edi
jae 0x4914a3
imul ecx, ecx, 0x50
mov r8d, 0x50
lea rdx, [rsi + rcx + 4]
lea rcx, [rax + rbx + 4]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlMoveMemory]
add rsp, 0x20
mov rax, qword [rbp - 0x60]
lock dec dword [rax]
mov rax, qword [rbp - 0x68]
lock dec dword [rax]
add dword [rbp - 0x54], 0x50
inc dword [rbp - 0x58]
mov eax, dword [rbp - 0x58]
cmp eax, dword [rbp - 0x2c]
jl 0x490e1b
push rax
mov eax, dword [rbp - 0x24]
cmp eax, 0x4e20
jae 0x4914a5
mov rbx, qword [rbp - 0x20]
imul eax, eax, 0x38
lea rax, [rbx + rax]
push rax
call fcn.0051befe
pop rcx
push rax
mov rax, qword [rbp - 0x40]
lock inc dword [rax]
cmp dword [rax + 4], 1
jne 0x4914a7
mov qword [rbp - 0x68], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
push rbx
lea rax, [rax + 4]
push rax
lea rax, [rbp - 0x60]
push rax
call fcn.004556b3
pop rcx
mov rax, qword [rbp - 0x68]
lock dec dword [rax]
push rax
lea rax, [rbp - 0x60]
push rax
mov rax, qword [rbp - 0x40]
lock inc dword [rax]
cmp dword [rax + 4], 1
jne 0x4914a9
mov qword [rbp - 0x68], rax
mov rax, qword [rax + 8]
mov ebx, dword [rax]
push rbx
lea rax, [rax + 4]
push rax
mov eax, dword [rbp - 0x24]
cmp eax, 0x4e20
jae 0x4914a9
mov rbx, qword [rbp - 0x20]
imul eax, eax, 0x38
push qword [rbx + rax + 0x10]
mov eax, dword [rbp - 0x24]
cmp eax, 0x4e20
jae 0x4914a9
mov rbx, qword [rbp - 0x20]
imul eax, eax, 0x38
push qword [rbx + rax + 0x18]
call fcn.0051c059
pop rcx
mov rax, qword [rbp - 0x68]
lock dec dword [rax]
mov eax, dword [rbp - 0x24]
cmp eax, 0x4e20
jae 0x4914ab
mov rbx, qword [rbp - 0x20]
imul eax, eax, 0x38
mov rsi, qword [rbp - 0x60]
mov rdi, qword [rbp - 0x58]
mov qword [rbx + rax + 0x24], rsi
mov qword [rbx + rax + 0x2c], rdi
mov rax, qword [rbp - 0x48]
mov ebx, 0x8b
call fcn.006df099
mov rax, qword [rbp - 0x50]
mov ebx, 0x8c
call fcn.006df099
mov rax, qword [rbp - 0x38]
mov ebx, 1
call fcn.006df099
mov rax, qword [rbp - 0x40]
mov ebx, 1
call fcn.006df099
dec dword [rbp - 0x24]
cmp dword [rbp - 0x24], 0
jge 0x4908eb
mov dword [rbp - 0x24], 0
jmp 0x49111d
mov eax, dword [rbp - 0x24]
cmp eax, 0x4e20
jae 0x4914ad
mov rbx, qword [rbp - 0x20]
imul eax, eax, 0x38
push 0x10
lea rax, [rbx + rax + 0x24]
push rax
mov eax, dword [rbp - 0x24]
cmp eax, 0x4e20
jae 0x4914ad
mov rbx, qword [rbp - 0x20]
imul eax, eax, 0x38
push 0x10
lea rax, [rbx + rax]
push rax
call fcn.00410e58
cmp eax, 0
je 0x49111a
xor eax, eax
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x30], rax
mov byte [rbp - 0x28], al
mov byte [rbp - 0x40], 2
mov eax, dword [rbp - 0x24]
cmp eax, 0x4e20
jae 0x4914af
mov rbx, qword [rbp - 0x20]
imul eax, eax, 0x38
mov rsi, qword [rbx + rax]
mov rdi, qword [rbx + rax + 8]
mov qword [rbp - 0x3f], rsi
mov qword [rbp - 0x37], rdi
push qword [0x009d6508]
push 0x19
lea rax, [rbp - 0x40]
push rax
push 2
push 7
push str.PRIMARY
call fcn.0040ece8
mov dword [rbp - 8], eax
cmp dword [rbp - 8], 0
je 0x4910a3
cmp dword [rbp - 8], 0xffffff12
jne 0x4914b1
cmp dword [rbp - 8], 0
jne 0x49111a
push rax
push qword [0x009d6508]
push 0x19
lea rax, [rbp - 0x40]
push rax
push 7
push str.PRIMARY
call fcn.0040fd07
pop rcx
mov dword [rbp - 8], eax
cmp dword [rbp - 8], 0
jne 0x4914b3
mov eax, dword [rbp - 0x24]
cmp eax, 0x4e20
jae 0x4914b5
mov rbx, qword [rbp - 0x20]
imul eax, eax, 0x38
mov rsi, qword [rbx + rax + 0x24]
mov rdi, qword [rbx + rax + 0x2c]
mov qword [rbp - 0x3f], rsi
mov qword [rbp - 0x37], rdi
push rax
push qword [0x009d6508]
push 0x19
lea rax, [rbp - 0x40]
push rax
call fcn.0040eddb
pop rcx
mov dword [rbp - 8], eax
cmp dword [rbp - 8], 0
jne 0x4914b7
inc dword [rbp - 0x24]
mov eax, dword [rbp - 0x24]
cmp eax, dword [rbp - 0xc]
jl 0x490fed
lea rcx, [rbp - 0x200]
mov edx, 0x1e0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlZeroMemory]
add rsp, 0x20
push qword [0x009d64f4]
push 0x1e0
lea rax, [rbp - 0x200]
push rax
push 0
push 4
push str.key1
call fcn.0040ece8
mov dword [rbp - 8], eax
cmp dword [rbp - 8], 0
je 0x49117a
cmp dword [rbp - 8], 0xffffff12
jne 0x4914b9
cmp dword [rbp - 8], 0
jne 0x49143b
push rax
push qword [0x009d64f4]
push 0x1e0
lea rax, [rbp - 0x200]
push rax
push 4
push str.key1
call fcn.0040fd07
pop rcx
mov dword [rbp - 8], eax
cmp dword [rbp - 8], 0
jne 0x4914bb
lea rcx, [rbp - 0x3e0]
mov edx, 0x1e0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_RtlZeroMemory]
add rsp, 0x20
mov rax, qword [rbp - 0x200]
mov qword [rbp - 0x3e0], rax
movzx eax, byte [rbp - 0x1f8]
mov byte [rbp - 0x3d8], al
mov rax, qword [rbp - 0x1f4]
mov rbx, qword [rbp - 0x1ec]
mov si, word [rbp - 0x1e4]
mov qword [rbp - 0x3d0], rax
mov qword [rbp - 0x3c8], rbx
mov word [rbp - 0x3c0], si
movzx eax, word [rbp - 0x1e2]
mov word [rbp - 0x3d2], ax
mov rax, qword [rbp - 0x1e0]
mov rbx, qword [rbp - 0x1d8]
mov qword [rbp - 0x3b0], rax
mov qword [rbp - 0x3a8], rbx
movzx eax, byte [rbp - 0x1d0]
mov byte [rbp - 0x3a0], al
mov al, byte [rbp - 0x1cf]
mov byte [rbp - 0x39f], al
mov eax, dword [rbp - 0x1cc]
mov dword [rbp - 0x39c], eax
mov eax, dword [rbp - 0x1c8]
mov dword [rbp - 0x398], eax
mov rax, qword [rbp - 0x1c4]
mov rbx, qword [rbp - 0x1bc]
mov qword [rbp - 0x394], rax
mov qword [rbp - 0x38c], rbx
mov rax, qword [rbp - 0x1b4]
mov rbx, qword [rbp - 0x1ac]
mov qword [rbp - 0x384], rax
mov qword [rbp - 0x37c], rbx
mov rax, qword [rbp - 0x1a4]
mov rbx, qword [rbp - 0x19c]
mov qword [rbp - 0x374], rax
mov qword [rbp - 0x36c], rbx
mov rax, qword [rbp - 0x194]
mov rbx, qword [rbp - 0x18c]
mov qword [rbp - 0x364], rax
mov qword [rbp - 0x35c], rbx
mov rax, qword [rbp - 0x184]
mov rbx, qword [rbp - 0x17c]
mov qword [rbp - 0x354], rax
mov qword [rbp - 0x34c], rbx
mov al, byte [rbp - 0x174]
mov byte [rbp - 0x344], al
movzx eax, byte [rbp - 0x3d8]
cmp eax, 1
jne 0x49134a
mov al, byte [rbp - 0x173]
mov byte [rbp - 0x343], al
movzx eax, byte [rbp - 0x172]
mov byte [rbp - 0x342], al
movzx eax, byte [rbp - 0x171]
mov byte [rbp - 0x341], al
mov dword [rbp - 0x340], 0x3f800000
mov dword [rbp - 0x338], 0xffffffff
mov byte [rbp - 0x3e1], 1
movzx eax, byte [rbp - 0x3d8]
cmp eax, 2
jne 0x491406
mov dword [rbp - 0x3e8], 0
jmp 0x4913a7
push 0x10
lea rax, [rbp - 0x3b0]
push rax
mov eax, dword [rbp - 0x3e8]
cmp eax, 0x4e20
jae 0x4914bd
mov rbx, qword [rbp - 0x20]
imul eax, eax, 0x38
push 0x10
lea rax, [rbx + rax]
push rax
call fcn.00410e58
cmp eax, 0
je 0x4913b2
inc dword [rbp - 0x3e8]
mov eax, dword [rbp - 0x3e8]
cmp eax, dword [rbp - 0xc]
jl 0x49136d
mov eax, dword [rbp - 0x3e8]
cmp eax, dword [rbp - 0xc]
jge 0x4913f0
mov eax, dword [rbp - 0x3e8]
cmp eax, 0x4e20
jae 0x4914bf
mov rbx, qword [rbp - 0x20]
imul eax, eax, 0x38
mov rsi, qword [rbx + rax + 0x24]
mov rdi, qword [rbx + rax + 0x2c]
mov qword [rbp - 0x3b0], rsi
mov qword [rbp - 0x3a8], rdi
jmp 0x491406
push 0x33
push str.warning:_missing_object_item__2__:_deleting_item___n
push 0
push rbp
call fcn.0040280b
mov byte [rbp - 0x3e1], 0
test byte [rbp - 0x3e1], 0xff
je 0x491436
push rax
push qword [0x009d64f8]
push 0x1e0
lea rax, [rbp - 0x3e0]
push rax
call fcn.0040eddb
pop rcx
mov dword [rbp - 8], eax
cmp dword [rbp - 8], 0
jne 0x4914c1
jmp 0x491143
mov r8, qword [rbp - 0x18]
xor edx, edx
mov rcx, qword [section..bss]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_HeapFree]
add rsp, 0x20
mov r8, qword [rbp - 0x20]
xor edx, edx
mov rcx, qword [section..bss]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.DLL_HeapFree]
add rsp, 0x20
leave
ret
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5
int 5