Function at 0x404d08
Capabilities:
Enumerate processes
Get file attributes
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x5b8
lea rcx, [0x004ab860]
call fcn.00412ff0
lea rcx, [0x004ab840]
mov rbx, rax
call fcn.00412ff0
cmp byte [rbx], 0
mov r8, rax
lea rdx, [rax + 0xc]
jne 0x404db0
lea rsi, [0x004b0cc0]
mov ecx, 0xa
mov byte [rax + 0xa], 0
lea rdi, [rsp + 0xe8]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
mov word [rax + 8], 0
mov ecx, 0xa
xor eax, eax
lea rdi, [rsp + 0x2f0]
lea rsi, [rsp + 0xe8]
rep movsd dword [rdi], dword [rsi]
mov ecx, 7
mov rdi, rdx
rep stosd dword [rdi], eax
lea r9, [rsp + 0x2f0]
mov eax, 0xc
mov cx, word [r9 + rax]
mov word [r8 + rax], cx
add rax, 2
cmp rax, 0x28
jne 0x404d99
mov byte [rbx], 1
cmp byte [r8 + 0xa], 0
jne 0x404e2d
mov rax, rdx
mov r10d, 0xffffff88
mov ecx, dword [r8 + 4]
lea ebx, [rcx + 1]
lea edi, [rcx + 2]
lea r13d, [rcx + 4]
lea ebp, [rcx + 5]
lea r11d, [rcx + 4]
lea r12d, [rcx + 3]
lea r14d, [rcx + 2]
lea esi, [rcx + 1]
mov r9d, dword [r8]
cmp r9d, ebx
jne 0x404df3
xor word [rax], si
inc r9d
mov dword [r8], r9d
jmp 0x404de0
cmp r9d, edi
jne 0x404dfe
xor word [rax], r14w
jmp 0x404deb
cmp r9d, ecx
jne 0x404e09
xor word [rax], r10w
jmp 0x404e1f
cmp r9d, r13d
jne 0x404e14
xor word [rax], r12w
jmp 0x404deb
cmp r9d, ebp
jne 0x404e1f
xor word [rax], r11w
jmp 0x404deb
inc r10d
add rax, 2
cmp r10w, 0xff96
jne 0x404dc0
lea rbx, [rsp + 0x2f0]
mov byte [r8 + 0xa], 1
mov rcx, rbx
call fcn.00402afc
lea rcx, [0x004ab8a0]
call fcn.00412ff0
lea rcx, [0x004ab880]
mov rbp, rax
call fcn.00412ff0
cmp byte [rbp], 0
mov r8, rax
lea rdx, [rax + 0xc]
jne 0x404ed9
lea rsi, [0x004b0c80]
mov ecx, 0xb
mov byte [rax + 0xa], 0
lea rdi, [rsp + 0xa0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
mov word [rax + 8], 0
mov ecx, 0xb
xor eax, eax
lea rdi, [rsp + 0xe8]
lea rsi, [rsp + 0xa0]
rep movsd dword [rdi], dword [rsi]
mov ecx, 8
mov rdi, rdx
rep stosd dword [rdi], eax
lea r9, [rsp + 0xe8]
mov eax, 0xc
mov cx, word [r9 + rax]
mov word [r8 + rax], cx
add rax, 2
cmp rax, 0x2c
jne 0x404ec1
mov byte [rbp], 1
cmp byte [r8 + 0xa], 0
jne 0x404f57
mov rax, rdx
mov r10d, 0xffffff88
mov ecx, dword [r8 + 4]
lea ebp, [rcx + 1]
lea esi, [rcx + 2]
lea r13d, [rcx + 4]
lea r15d, [rcx + 5]
lea r11d, [rcx + 4]
lea r14d, [rcx + 3]
lea r12d, [rcx + 2]
lea edi, [rcx + 1]
mov r9d, dword [r8]
cmp ebp, r9d
jne 0x404f1d
xor word [rax], di
inc r9d
mov dword [r8], r9d
jmp 0x404f0a
cmp esi, r9d
jne 0x404f28
xor word [rax], r12w
jmp 0x404f15
cmp ecx, r9d
jne 0x404f33
xor word [rax], r10w
jmp 0x404f49
cmp r9d, r13d
jne 0x404f3e
xor word [rax], r14w
jmp 0x404f15
cmp r9d, r15d
jne 0x404f49
xor word [rax], r11w
jmp 0x404f15
inc r10d
add rax, 2
cmp r10w, 0xff98
jne 0x404ee9
mov byte [r8 + 0xa], 1
lea rcx, [rbx + 0x20]
call fcn.00402afc
lea rcx, [0x004ab8e0]
call fcn.00412ff0
lea rcx, [0x004ab8c0]
mov rbp, rax
call fcn.00412ff0
cmp byte [rbp], 0
mov r8, rax
lea rdx, [rax + 0xc]
jne 0x404ffc
lea rsi, [0x004b0c40]
mov ecx, 9
mov byte [rax + 0xa], 0
lea rdi, [rsp + 0xa0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
mov word [rax + 8], 0
mov ecx, 9
xor eax, eax
lea rdi, [rsp + 0xe8]
lea rsi, [rsp + 0xa0]
rep movsd dword [rdi], dword [rsi]
mov ecx, 6
mov rdi, rdx
rep stosd dword [rdi], eax
lea r9, [rsp + 0xe8]
mov eax, 0xc
mov cx, word [r9 + rax]
mov word [r8 + rax], cx
add rax, 2
cmp rax, 0x24
jne 0x404fe4
mov byte [rbp], 1
cmp byte [r8 + 0xa], 0
jne 0x40507a
mov rax, rdx
mov r10d, 0xffffff88
mov ecx, dword [r8 + 4]
lea esi, [rcx + 1]
lea ebp, [rcx + 2]
lea r13d, [rcx + 4]
lea r15d, [rcx + 5]
lea r11d, [rcx + 4]
lea r14d, [rcx + 3]
lea r12d, [rcx + 2]
lea edi, [rcx + 1]
mov r9d, dword [r8]
cmp r9d, esi
jne 0x405040
xor word [rax], di
inc r9d
mov dword [r8], r9d
jmp 0x40502d
cmp r9d, ebp
jne 0x40504b
xor word [rax], r12w
jmp 0x405038
cmp r9d, ecx
jne 0x405056
xor word [rax], r10w
jmp 0x40506c
cmp r9d, r13d
jne 0x405061
xor word [rax], r14w
jmp 0x405038
cmp r9d, r15d
jne 0x40506c
xor word [rax], r11w
jmp 0x405038
inc r10d
add rax, 2
cmp r10w, 0xff94
jne 0x40500c
mov byte [r8 + 0xa], 1
lea rcx, [rbx + 0x40]
call fcn.00402afc
lea rcx, [0x004ab920]
call fcn.00412ff0
lea rcx, [0x004ab900]
mov rbp, rax
call fcn.00412ff0
cmp byte [rbp], 0
jne 0x40511b
lea rsi, [0x004b0c10]
mov ecx, 7
mov byte [rax + 0xa], 0
mov edx, 0xc
lea rdi, [rsp + 0xa0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
lea rdi, [rsp + 0xe8]
mov ecx, 7
mov word [rax + 8], 0
lea rsi, [rsp + 0xa0]
mov qword [rax + 0xc], 0
rep movsd dword [rdi], dword [rsi]
mov qword [rax + 0x14], 0
lea r8, [rsp + 0xe8]
mov cx, word [r8 + rdx]
mov word [rax + rdx], cx
add rdx, 2
cmp rdx, 0x1c
jne 0x405104
mov byte [rbp], 1
cmp byte [rax + 0xa], 0
lea rdx, [rax + 0xc]
jne 0x40519f
mov rcx, rdx
mov r10d, 0xffffff89
mov r8d, dword [rax + 4]
lea esi, [r8 + 1]
lea ebp, [r8 + 2]
lea r13d, [r8 + 4]
lea r15d, [r8 + 5]
lea r11d, [r8 + 4]
lea r14d, [r8 + 3]
lea r12d, [r8 + 2]
lea edi, [r8 + 1]
mov r9d, dword [rax]
cmp r9d, esi
jne 0x405165
xor word [rcx], di
inc r9d
mov dword [rax], r9d
jmp 0x405152
cmp r9d, ebp
jne 0x405170
xor word [rcx], r12w
jmp 0x40515d
cmp r9d, r8d
jne 0x40517b
xor word [rcx], r10w
jmp 0x405191
cmp r9d, r13d
jne 0x405186
xor word [rcx], r14w
jmp 0x40515d
cmp r9d, r15d
jne 0x405191
xor word [rcx], r11w
jmp 0x40515d
inc r10d
add rcx, 2
cmp r10w, 0xff91
jne 0x40512e
mov byte [rax + 0xa], 1
lea rcx, [rbx + 0x60]
call fcn.00402afc
lea rcx, [0x004ab960]
call fcn.00412ff0
lea rcx, [0x004ab940]
mov rbp, rax
call fcn.00412ff0
cmp byte [rbp], 0
mov r8, rax
lea rdx, [rax + 0xc]
jne 0x405243
lea rsi, [0x004b0be0]
mov ecx, 0xa
mov byte [rax + 0xa], 0
lea rdi, [rsp + 0xa0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
mov word [rax + 8], 0
mov ecx, 0xa
xor eax, eax
lea rdi, [rsp + 0xe8]
lea rsi, [rsp + 0xa0]
rep movsd dword [rdi], dword [rsi]
mov ecx, 7
mov rdi, rdx
rep stosd dword [rdi], eax
lea r9, [rsp + 0xe8]
mov eax, 0xc
mov cx, word [r9 + rax]
mov word [r8 + rax], cx
add rax, 2
cmp rax, 0x28
jne 0x40522b
mov byte [rbp], 1
cmp byte [r8 + 0xa], 0
jne 0x4052c1
mov rax, rdx
mov r10d, 0xffffff89
mov ecx, dword [r8 + 4]
lea esi, [rcx + 1]
lea ebp, [rcx + 2]
lea r13d, [rcx + 4]
lea r15d, [rcx + 5]
lea r11d, [rcx + 4]
lea r14d, [rcx + 3]
lea r12d, [rcx + 2]
lea edi, [rcx + 1]
mov r9d, dword [r8]
cmp r9d, esi
jne 0x405287
xor word [rax], di
inc r9d
mov dword [r8], r9d
jmp 0x405274
cmp r9d, ebp
jne 0x405292
xor word [rax], r12w
jmp 0x40527f
cmp r9d, ecx
jne 0x40529d
xor word [rax], r10w
jmp 0x4052b3
cmp r9d, r13d
jne 0x4052a8
xor word [rax], r14w
jmp 0x40527f
cmp r9d, r15d
jne 0x4052b3
xor word [rax], r11w
jmp 0x40527f
inc r10d
add rax, 2
cmp r10w, 0xff97
jne 0x405253
mov byte [r8 + 0xa], 1
lea rcx, [rbx + 0x80]
call fcn.00402afc
lea rcx, [0x004ab9a0]
call fcn.00412ff0
lea rcx, [0x004ab980]
mov rbp, rax
call fcn.00412ff0
cmp byte [rbp], 0
mov r8, rax
lea rdx, [rax + 0xc]
jne 0x405369
lea rsi, [0x004b0ba0]
mov ecx, 0xc
mov byte [rax + 0xa], 0
lea rdi, [rsp + 0xa0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
mov word [rax + 8], 0
mov ecx, 0xc
xor eax, eax
lea rdi, [rsp + 0xe8]
lea rsi, [rsp + 0xa0]
rep movsd dword [rdi], dword [rsi]
mov ecx, 0x22
mov rdi, rdx
rep stosb byte [rdi], al
lea r9, [rsp + 0xe8]
mov eax, 0xc
mov cx, word [r9 + rax]
mov word [r8 + rax], cx
add rax, 2
cmp rax, 0x2e
jne 0x405351
mov byte [rbp], 1
cmp byte [r8 + 0xa], 0
jne 0x4053e7
mov rax, rdx
mov r10d, 0xffffff89
mov ecx, dword [r8 + 4]
lea esi, [rcx + 1]
lea ebp, [rcx + 2]
lea r13d, [rcx + 4]
lea r15d, [rcx + 5]
lea r11d, [rcx + 4]
lea r14d, [rcx + 3]
lea r12d, [rcx + 2]
lea edi, [rcx + 1]
mov r9d, dword [r8]
cmp r9d, esi
jne 0x4053ad
xor word [rax], di
inc r9d
mov dword [r8], r9d
jmp 0x40539a
cmp r9d, ebp
jne 0x4053b8
xor word [rax], r12w
jmp 0x4053a5
cmp r9d, ecx
jne 0x4053c3
xor word [rax], r10w
jmp 0x4053d9
cmp r9d, r13d
jne 0x4053ce
xor word [rax], r14w
jmp 0x4053a5
cmp r9d, r15d
jne 0x4053d9
xor word [rax], r11w
jmp 0x4053a5
inc r10d
add rax, 2
cmp r10w, 0xff9a
jne 0x405379
mov byte [r8 + 0xa], 1
lea rcx, [rbx + 0xa0]
call fcn.00402afc
lea rcx, [0x004ab9e0]
call fcn.00412ff0
lea rcx, [0x004ab9c0]
mov rbp, rax
call fcn.00412ff0
cmp byte [rbp], 0
jne 0x40548b
lea rsi, [0x004b0b70]
mov ecx, 7
mov byte [rax + 0xa], 0
mov edx, 0xc
lea rdi, [rsp + 0xa0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
lea rdi, [rsp + 0xe8]
mov ecx, 7
mov word [rax + 8], 0
lea rsi, [rsp + 0xa0]
mov qword [rax + 0xc], 0
rep movsd dword [rdi], dword [rsi]
mov qword [rax + 0x14], 0
lea r8, [rsp + 0xe8]
mov cx, word [r8 + rdx]
mov word [rax + rdx], cx
add rdx, 2
cmp rdx, 0x1c
jne 0x405474
mov byte [rbp], 1
cmp byte [rax + 0xa], 0
lea rdx, [rax + 0xc]
jne 0x40550f
mov rcx, rdx
mov r10d, 0xffffff8a
mov r8d, dword [rax + 4]
lea esi, [r8 + 1]
lea ebp, [r8 + 2]
lea r13d, [r8 + 4]
lea r15d, [r8 + 5]
lea r11d, [r8 + 4]
lea r14d, [r8 + 3]
lea r12d, [r8 + 2]
lea edi, [r8 + 1]
mov r9d, dword [rax]
cmp r9d, esi
jne 0x4054d5
xor word [rcx], di
inc r9d
mov dword [rax], r9d
jmp 0x4054c2
cmp r9d, ebp
jne 0x4054e0
xor word [rcx], r12w
jmp 0x4054cd
cmp r9d, r8d
jne 0x4054eb
xor word [rcx], r10w
jmp 0x405501
cmp r9d, r13d
jne 0x4054f6
xor word [rcx], r14w
jmp 0x4054cd
cmp r9d, r15d
jne 0x405501
xor word [rcx], r11w
jmp 0x4054cd
inc r10d
add rcx, 2
cmp r10w, 0xff92
jne 0x40549e
mov byte [rax + 0xa], 1
lea rcx, [rbx + 0xc0]
call fcn.00402afc
lea rcx, [0x004aba20]
call fcn.00412ff0
lea rcx, [0x004aba00]
mov rbp, rax
call fcn.00412ff0
cmp byte [rbp], 0
jne 0x4055b2
lea rsi, [0x004b0b50]
mov ecx, 7
mov byte [rax + 0xa], 0
mov edx, 0xc
lea rdi, [rsp + 0xa0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
lea rdi, [rsp + 0xe8]
mov ecx, 7
mov word [rax + 8], 0
lea rsi, [rsp + 0xa0]
mov qword [rax + 0xc], 0
rep movsd dword [rdi], dword [rsi]
mov qword [rax + 0x14], 0
lea r8, [rsp + 0xe8]
mov cx, word [r8 + rdx]
mov word [rax + rdx], cx
add rdx, 2
cmp rdx, 0x1c
jne 0x40559b
mov byte [rbp], 1
cmp byte [rax + 0xa], 0
lea rdx, [rax + 0xc]
jne 0x405636
mov rcx, rdx
mov r10d, 0xffffff8a
mov r8d, dword [rax + 4]
lea esi, [r8 + 1]
lea ebp, [r8 + 2]
lea r13d, [r8 + 4]
lea r15d, [r8 + 5]
lea r11d, [r8 + 4]
lea r14d, [r8 + 3]
lea r12d, [r8 + 2]
lea edi, [r8 + 1]
mov r9d, dword [rax]
cmp r9d, esi
jne 0x4055fc
xor word [rcx], di
inc r9d
mov dword [rax], r9d
jmp 0x4055e9
cmp r9d, ebp
jne 0x405607
xor word [rcx], r12w
jmp 0x4055f4
cmp r9d, r8d
jne 0x405612
xor word [rcx], r10w
jmp 0x405628
cmp r9d, r13d
jne 0x40561d
xor word [rcx], r14w
jmp 0x4055f4
cmp r9d, r15d
jne 0x405628
xor word [rcx], r11w
jmp 0x4055f4
inc r10d
add rcx, 2
cmp r10w, 0xff92
jne 0x4055c5
mov byte [rax + 0xa], 1
lea rcx, [rbx + 0xe0]
call fcn.00402afc
lea rcx, [0x004aba60]
call fcn.00412ff0
lea rcx, [0x004aba40]
mov rbp, rax
call fcn.00412ff0
cmp byte [rbp], 0
mov r8, rax
lea rdx, [rax + 0xc]
jne 0x4056dd
lea rsi, [0x004b0b20]
mov ecx, 9
mov byte [rax + 0xa], 0
lea rdi, [rsp + 0xa0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
mov word [rax + 8], 0
mov ecx, 9
xor eax, eax
lea rdi, [rsp + 0xe8]
lea rsi, [rsp + 0xa0]
rep movsd dword [rdi], dword [rsi]
mov ecx, 6
mov rdi, rdx
rep stosd dword [rdi], eax
lea r9, [rsp + 0xe8]
mov eax, 0xc
mov cx, word [r9 + rax]
mov word [r8 + rax], cx
add rax, 2
cmp rax, 0x24
jne 0x4056c5
mov byte [rbp], 1
cmp byte [r8 + 0xa], 0
jne 0x40575b
mov rax, rdx
mov r10d, 0xffffff8b
mov ecx, dword [r8 + 4]
lea esi, [rcx + 1]
lea ebp, [rcx + 2]
lea r13d, [rcx + 4]
lea r15d, [rcx + 5]
lea r11d, [rcx + 4]
lea r14d, [rcx + 3]
lea r12d, [rcx + 2]
lea edi, [rcx + 1]
mov r9d, dword [r8]
cmp r9d, esi
jne 0x405721
xor word [rax], di
inc r9d
mov dword [r8], r9d
jmp 0x40570e
cmp r9d, ebp
jne 0x40572c
xor word [rax], r12w
jmp 0x405719
cmp r9d, ecx
jne 0x405737
xor word [rax], r10w
jmp 0x40574d
cmp r9d, r13d
jne 0x405742
xor word [rax], r14w
jmp 0x405719
cmp r9d, r15d
jne 0x40574d
xor word [rax], r11w
jmp 0x405719
inc r10d
add rax, 2
cmp r10w, 0xff97
jne 0x4056ed
mov byte [r8 + 0xa], 1
lea rcx, [rbx + 0x100]
call fcn.00402afc
lea rcx, [0x004abaa0]
call fcn.00412ff0
lea rcx, [0x004aba80]
mov rbp, rax
call fcn.00412ff0
cmp byte [rbp], 0
mov r8, rax
lea rdx, [rax + 0xc]
jne 0x405803
lea rsi, [0x004b0ae0]
mov ecx, 9
mov byte [rax + 0xa], 0
lea rdi, [rsp + 0xa0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
mov word [rax + 8], 0
mov ecx, 9
xor eax, eax
lea rdi, [rsp + 0xe8]
lea rsi, [rsp + 0xa0]
rep movsd dword [rdi], dword [rsi]
mov ecx, 0x16
mov rdi, rdx
rep stosb byte [rdi], al
lea r9, [rsp + 0xe8]
mov eax, 0xc
mov cx, word [r9 + rax]
mov word [r8 + rax], cx
add rax, 2
cmp rax, 0x22
jne 0x4057eb
mov byte [rbp], 1
cmp byte [r8 + 0xa], 0
jne 0x405881
mov rax, rdx
mov r10d, 0xffffff8b
mov ecx, dword [r8 + 4]
lea esi, [rcx + 1]
lea ebp, [rcx + 2]
lea r13d, [rcx + 4]
lea r15d, [rcx + 5]
lea r11d, [rcx + 4]
lea r14d, [rcx + 3]
lea r12d, [rcx + 2]
lea edi, [rcx + 1]
mov r9d, dword [r8]
cmp r9d, esi
jne 0x405847
xor word [rax], di
inc r9d
mov dword [r8], r9d
jmp 0x405834
cmp r9d, ebp
jne 0x405852
xor word [rax], r12w
jmp 0x40583f
cmp r9d, ecx
jne 0x40585d
xor word [rax], r10w
jmp 0x405873
cmp r9d, r13d
jne 0x405868
xor word [rax], r14w
jmp 0x40583f
cmp r9d, r15d
jne 0x405873
xor word [rax], r11w
jmp 0x40583f
inc r10d
add rax, 2
cmp r10w, 0xff96
jne 0x405813
mov byte [r8 + 0xa], 1
lea rcx, [rbx + 0x120]
call fcn.00402afc
lea rcx, [0x004abae0]
call fcn.00412ff0
lea rcx, [0x004abac0]
mov rbp, rax
call fcn.00412ff0
cmp byte [rbp], 0
mov r8, rax
lea rdx, [rax + 0xc]
jne 0x405929
lea rsi, [0x004b0aa0]
mov ecx, 9
mov byte [rax + 0xa], 0
lea rdi, [rsp + 0xa0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
mov word [rax + 8], 0
mov ecx, 9
xor eax, eax
lea rdi, [rsp + 0xe8]
lea rsi, [rsp + 0xa0]
rep movsd dword [rdi], dword [rsi]
mov ecx, 6
mov rdi, rdx
rep stosd dword [rdi], eax
lea r9, [rsp + 0xe8]
mov eax, 0xc
mov cx, word [r9 + rax]
mov word [r8 + rax], cx
add rax, 2
cmp rax, 0x24
jne 0x405911
mov byte [rbp], 1
cmp byte [r8 + 0xa], 0
jne 0x4059a7
mov rax, rdx
mov r10d, 0xffffff8b
mov ecx, dword [r8 + 4]
lea esi, [rcx + 1]
lea ebp, [rcx + 2]
lea r13d, [rcx + 4]
lea r15d, [rcx + 5]
lea r11d, [rcx + 4]
lea r14d, [rcx + 3]
lea r12d, [rcx + 2]
lea edi, [rcx + 1]
mov r9d, dword [r8]
cmp r9d, esi
jne 0x40596d
xor word [rax], di
inc r9d
mov dword [r8], r9d
jmp 0x40595a
cmp r9d, ebp
jne 0x405978
xor word [rax], r12w
jmp 0x405965
cmp r9d, ecx
jne 0x405983
xor word [rax], r10w
jmp 0x405999
cmp r9d, r13d
jne 0x40598e
xor word [rax], r14w
jmp 0x405965
cmp r9d, r15d
jne 0x405999
xor word [rax], r11w
jmp 0x405965
inc r10d
add rax, 2
cmp r10w, 0xff97
jne 0x405939
mov byte [r8 + 0xa], 1
lea rcx, [rbx + 0x140]
call fcn.00402afc
lea rcx, [0x004abb20]
call fcn.00412ff0
lea rcx, [0x004abb00]
mov rbp, rax
call fcn.00412ff0
cmp byte [rbp], 0
mov r8, rax
lea rdx, [rax + 0xc]
jne 0x405a4f
lea rsi, [0x004b0a60]
mov ecx, 9
mov byte [rax + 0xa], 0
lea rdi, [rsp + 0xa0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
mov word [rax + 8], 0
mov ecx, 9
xor eax, eax
lea rdi, [rsp + 0xe8]
lea rsi, [rsp + 0xa0]
rep movsd dword [rdi], dword [rsi]
mov ecx, 6
mov rdi, rdx
rep stosd dword [rdi], eax
lea r9, [rsp + 0xe8]
mov eax, 0xc
mov cx, word [r9 + rax]
mov word [r8 + rax], cx
add rax, 2
cmp rax, 0x24
jne 0x405a37
mov byte [rbp], 1
cmp byte [r8 + 0xa], 0
jne 0x405acd
mov rax, rdx
mov r10d, 0xffffff8c
mov ecx, dword [r8 + 4]
lea esi, [rcx + 1]
lea ebp, [rcx + 2]
lea r13d, [rcx + 4]
lea r15d, [rcx + 5]
lea r11d, [rcx + 4]
lea r14d, [rcx + 3]
lea r12d, [rcx + 2]
lea edi, [rcx + 1]
mov r9d, dword [r8]
cmp r9d, esi
jne 0x405a93
xor word [rax], di
inc r9d
mov dword [r8], r9d
jmp 0x405a80
cmp r9d, ebp
jne 0x405a9e
xor word [rax], r12w
jmp 0x405a8b
cmp r9d, ecx
jne 0x405aa9
xor word [rax], r10w
jmp 0x405abf
cmp r9d, r13d
jne 0x405ab4
xor word [rax], r14w
jmp 0x405a8b
cmp r9d, r15d
jne 0x405abf
xor word [rax], r11w
jmp 0x405a8b
inc r10d
add rax, 2
cmp r10w, 0xff98
jne 0x405a5f
mov byte [r8 + 0xa], 1
lea rcx, [rbx + 0x160]
call fcn.00402afc
lea rcx, [0x004abb60]
call fcn.00412ff0
lea rcx, [0x004abb40]
mov rbp, rax
call fcn.00412ff0
cmp byte [rbp], 0
mov r8, rax
lea rdx, [rax + 0xc]
jne 0x405b75
lea rsi, [0x004b0a20]
mov ecx, 0xa
mov byte [rax + 0xa], 0
lea rdi, [rsp + 0xa0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
mov word [rax + 8], 0
mov ecx, 0xa
xor eax, eax
lea rdi, [rsp + 0xe8]
lea rsi, [rsp + 0xa0]
rep movsd dword [rdi], dword [rsi]
mov ecx, 7
mov rdi, rdx
rep stosd dword [rdi], eax
lea r9, [rsp + 0xe8]
mov eax, 0xc
mov cx, word [r9 + rax]
mov word [r8 + rax], cx
add rax, 2
cmp rax, 0x28
jne 0x405b5d
mov byte [rbp], 1
cmp byte [r8 + 0xa], 0
jne 0x405bf3
mov rax, rdx
mov r10d, 0xffffff8c
mov ecx, dword [r8 + 4]
lea esi, [rcx + 1]
lea ebp, [rcx + 2]
lea r13d, [rcx + 4]
lea r15d, [rcx + 5]
lea r11d, [rcx + 4]
lea r14d, [rcx + 3]
lea r12d, [rcx + 2]
lea edi, [rcx + 1]
mov r9d, dword [r8]
cmp r9d, esi
jne 0x405bb9
xor word [rax], di
inc r9d
mov dword [r8], r9d
jmp 0x405ba6
cmp r9d, ebp
jne 0x405bc4
xor word [rax], r12w
jmp 0x405bb1
cmp r9d, ecx
jne 0x405bcf
xor word [rax], r10w
jmp 0x405be5
cmp r9d, r13d
jne 0x405bda
xor word [rax], r14w
jmp 0x405bb1
cmp r9d, r15d
jne 0x405be5
xor word [rax], r11w
jmp 0x405bb1
inc r10d
add rax, 2
cmp r10w, 0xff9a
jne 0x405b85
mov byte [r8 + 0xa], 1
lea rcx, [rbx + 0x180]
call fcn.00402afc
lea rcx, [0x004abba0]
call fcn.00412ff0
lea rcx, [0x004abb80]
mov rbp, rax
call fcn.00412ff0
cmp byte [rbp], 0
mov r8, rax
lea rdx, [rax + 0xc]
jne 0x405c9b
lea rsi, [0x004b09e0]
mov ecx, 0xb
mov byte [rax + 0xa], 0
lea rdi, [rsp + 0xa0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
mov word [rax + 8], 0
mov ecx, 0xb
xor eax, eax
lea rdi, [rsp + 0xe8]
lea rsi, [rsp + 0xa0]
rep movsd dword [rdi], dword [rsi]
mov ecx, 8
mov rdi, rdx
rep stosd dword [rdi], eax
lea r9, [rsp + 0xe8]
mov eax, 0xc
mov cx, word [r9 + rax]
mov word [r8 + rax], cx
add rax, 2
cmp rax, 0x2c
jne 0x405c83
mov byte [rbp], 1
cmp byte [r8 + 0xa], 0
jne 0x405d19
mov rax, rdx
mov r10d, 0xffffff8d
mov ecx, dword [r8 + 4]
lea esi, [rcx + 1]
lea ebp, [rcx + 2]
lea r13d, [rcx + 4]
lea r15d, [rcx + 5]
lea r11d, [rcx + 4]
lea r14d, [rcx + 3]
lea r12d, [rcx + 2]
lea edi, [rcx + 1]
mov r9d, dword [r8]
cmp r9d, esi
jne 0x405cdf
xor word [rax], di
inc r9d
mov dword [r8], r9d
jmp 0x405ccc
cmp r9d, ebp
jne 0x405cea
xor word [rax], r12w
jmp 0x405cd7
cmp r9d, ecx
jne 0x405cf5
xor word [rax], r10w
jmp 0x405d0b
cmp r9d, r13d
jne 0x405d00
xor word [rax], r14w
jmp 0x405cd7
cmp r9d, r15d
jne 0x405d0b
xor word [rax], r11w
jmp 0x405cd7
inc r10d
add rax, 2
cmp r10w, 0xff9d
jne 0x405cab
mov byte [r8 + 0xa], 1
lea rcx, [rbx + 0x1a0]
call fcn.00402afc
lea rcx, [0x004abbe0]
call fcn.00412ff0
lea rcx, [0x004abbc0]
mov rbp, rax
call fcn.00412ff0
cmp byte [rbp], 0
mov r8, rax
lea rdx, [rax + 0xc]
jne 0x405dc1
lea rsi, [0x004b09a0]
mov ecx, 0xb
mov byte [rax + 0xa], 0
lea rdi, [rsp + 0xa0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
mov word [rax + 8], 0
mov ecx, 0xb
xor eax, eax
lea rdi, [rsp + 0xe8]
lea rsi, [rsp + 0xa0]
rep movsd dword [rdi], dword [rsi]
mov ecx, 8
mov rdi, rdx
rep stosd dword [rdi], eax
lea r9, [rsp + 0xe8]
mov eax, 0xc
mov cx, word [r9 + rax]
mov word [r8 + rax], cx
add rax, 2
cmp rax, 0x2c
jne 0x405da9
mov byte [rbp], 1
cmp byte [r8 + 0xa], 0
jne 0x405e3f
mov rax, rdx
mov r10d, 0xffffff8d
mov ecx, dword [r8 + 4]
lea esi, [rcx + 1]
lea ebp, [rcx + 2]
lea r13d, [rcx + 4]
lea r15d, [rcx + 5]
lea r11d, [rcx + 4]
lea r14d, [rcx + 3]
lea r12d, [rcx + 2]
lea edi, [rcx + 1]
mov r9d, dword [r8]
cmp r9d, esi
jne 0x405e05
xor word [rax], di
inc r9d
mov dword [r8], r9d
jmp 0x405df2
cmp r9d, ebp
jne 0x405e10
xor word [rax], r12w
jmp 0x405dfd
cmp r9d, ecx
jne 0x405e1b
xor word [rax], r10w
jmp 0x405e31
cmp r9d, r13d
jne 0x405e26
xor word [rax], r14w
jmp 0x405dfd
cmp r9d, r15d
jne 0x405e31
xor word [rax], r11w
jmp 0x405dfd
inc r10d
add rax, 2
cmp r10w, 0xff9d
jne 0x405dd1
mov byte [r8 + 0xa], 1
lea rcx, [rbx + 0x1c0]
call fcn.00402afc
lea rcx, [0x004abc20]
call fcn.00412ff0
lea rcx, [0x004abc00]
mov rbp, rax
call fcn.00412ff0
cmp byte [rbp], 0
mov r8, rax
lea rdx, [rax + 0xc]
jne 0x405ee7
lea rsi, [0x004b0960]
mov ecx, 0xa
mov byte [rax + 0xa], 0
lea rdi, [rsp + 0xa0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
mov word [rax + 8], 0
mov ecx, 0xa
xor eax, eax
lea rdi, [rsp + 0xe8]
lea rsi, [rsp + 0xa0]
rep movsd dword [rdi], dword [rsi]
mov ecx, 0x1a
mov rdi, rdx
rep stosb byte [rdi], al
lea r9, [rsp + 0xe8]
mov eax, 0xc
mov cx, word [r9 + rax]
mov word [r8 + rax], cx
add rax, 2
cmp rax, 0x26
jne 0x405ecf
mov byte [rbp], 1
cmp byte [r8 + 0xa], 0
jne 0x405f65
mov rax, rdx
mov r10d, 0xffffff8d
mov ecx, dword [r8 + 4]
lea esi, [rcx + 1]
lea ebp, [rcx + 2]
lea r13d, [rcx + 4]
lea r15d, [rcx + 5]
lea r11d, [rcx + 4]
lea r14d, [rcx + 3]
lea r12d, [rcx + 2]
lea edi, [rcx + 1]
mov r9d, dword [r8]
cmp r9d, esi
jne 0x405f2b
xor word [rax], di
inc r9d
mov dword [r8], r9d
jmp 0x405f18
cmp r9d, ebp
jne 0x405f36
xor word [rax], r12w
jmp 0x405f23
cmp r9d, ecx
jne 0x405f41
xor word [rax], r10w
jmp 0x405f57
cmp r9d, r13d
jne 0x405f4c
xor word [rax], r14w
jmp 0x405f23
cmp r9d, r15d
jne 0x405f57
xor word [rax], r11w
jmp 0x405f23
inc r10d
add rax, 2
cmp r10w, 0xff9a
jne 0x405ef7
mov byte [r8 + 0xa], 1
lea rcx, [rbx + 0x1e0]
call fcn.00402afc
lea rcx, [0x004abc60]
call fcn.00412ff0
lea rcx, [0x004abc40]
mov rbx, rax
call fcn.00412ff0
cmp byte [rbx], 0
mov r8, rax
lea rdx, [rax + 0xc]
jne 0x40600b
lea rsi, [0x004b0900]
mov ecx, 0x11
mov byte [rax + 0xa], 0
lea rdi, [rsp + 0xa0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
mov word [rax + 8], 0
mov ecx, 0x11
xor eax, eax
lea rdi, [rsp + 0xe8]
lea rsi, [rsp + 0xa0]
rep movsd dword [rdi], dword [rsi]
mov ecx, 0xe
mov rdi, rdx
rep stosd dword [rdi], eax
lea r9, [rsp + 0xe8]
mov eax, 0xc
mov cx, word [r9 + rax]
mov word [r8 + rax], cx
add rax, 2
cmp rax, 0x44
jne 0x405ff4
mov byte [rbx], 1
cmp byte [r8 + 0xa], 0
jne 0x406087
mov rax, rdx
mov r10d, 0xffffff8e
mov ecx, dword [r8 + 4]
lea ebx, [rcx + 1]
lea edi, [rcx + 2]
lea r12d, [rcx + 4]
lea r14d, [rcx + 5]
lea r11d, [rcx + 4]
lea r13d, [rcx + 3]
lea ebp, [rcx + 2]
lea esi, [rcx + 1]
mov r9d, dword [r8]
cmp r9d, ebx
jne 0x40604e
xor word [rax], si
inc r9d
mov dword [r8], r9d
jmp 0x40603b
cmp r9d, edi
jne 0x406058
xor word [rax], bp
jmp 0x406046
cmp r9d, ecx
jne 0x406063
xor word [rax], r10w
jmp 0x406079
cmp r9d, r12d
jne 0x40606e
xor word [rax], r13w
jmp 0x406046
cmp r9d, r14d
jne 0x406079
xor word [rax], r11w
jmp 0x406046
inc r10d
add rax, 2
cmp r10w, 0xffaa
jne 0x40601b
lea rbx, [rsp + 0x2f0]
mov byte [r8 + 0xa], 1
lea rcx, [rbx + 0x200]
call fcn.00402afc
lea rcx, [0x004abca0]
call fcn.00412ff0
lea rcx, [0x004abc80]
mov rbp, rax
call fcn.00412ff0
cmp byte [rbp], 0
mov r8, rax
lea rdx, [rax + 0xc]
jne 0x406137
lea rsi, [0x004b08c0]
mov ecx, 0xb
mov byte [rax + 0xa], 0
lea rdi, [rsp + 0xa0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
mov word [rax + 8], 0
mov ecx, 0xb
xor eax, eax
lea rdi, [rsp + 0xe8]
lea rsi, [rsp + 0xa0]
rep movsd dword [rdi], dword [rsi]
mov ecx, 0x1e
mov rdi, rdx
rep stosb byte [rdi], al
lea r9, [rsp + 0xe8]
mov eax, 0xc
mov cx, word [r9 + rax]
mov word [r8 + rax], cx
add rax, 2
cmp rax, 0x2a
jne 0x40611f
mov byte [rbp], 1
cmp byte [r8 + 0xa], 0
jne 0x4061b5
mov rax, rdx
mov r10d, 0xffffff8e
mov ecx, dword [r8 + 4]
lea esi, [rcx + 1]
lea ebp, [rcx + 2]
lea r13d, [rcx + 4]
lea r15d, [rcx + 5]
lea r11d, [rcx + 4]
lea r14d, [rcx + 3]
lea r12d, [rcx + 2]
lea edi, [rcx + 1]
mov r9d, dword [r8]
cmp r9d, esi
jne 0x40617b
xor word [rax], di
inc r9d
mov dword [r8], r9d
jmp 0x406168
cmp r9d, ebp
jne 0x406186
xor word [rax], r12w
jmp 0x406173
cmp r9d, ecx
jne 0x406191
xor word [rax], r10w
jmp 0x4061a7
cmp r9d, r13d
jne 0x40619c
xor word [rax], r14w
jmp 0x406173
cmp r9d, r15d
jne 0x4061a7
xor word [rax], r11w
jmp 0x406173
inc r10d
add rax, 2
cmp r10w, 0xff9d
jne 0x406147
mov byte [r8 + 0xa], 1
lea rcx, [rbx + 0x220]
call fcn.00402afc
lea rcx, [0x004abce0]
call fcn.00412ff0
lea rcx, [0x004abcc0]
mov rbp, rax
call fcn.00412ff0
cmp byte [rbp], 0
mov r8, rax
lea rdx, [rax + 0xc]
jne 0x40625d
lea rsi, [0x004b0880]
mov ecx, 0xb
mov byte [rax + 0xa], 0
lea rdi, [rsp + 0xa0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
mov word [rax + 8], 0
mov ecx, 0xb
xor eax, eax
lea rdi, [rsp + 0xe8]
lea rsi, [rsp + 0xa0]
rep movsd dword [rdi], dword [rsi]
mov ecx, 0x1e
mov rdi, rdx
rep stosb byte [rdi], al
lea r9, [rsp + 0xe8]
mov eax, 0xc
mov cx, word [r9 + rax]
mov word [r8 + rax], cx
add rax, 2
cmp rax, 0x2a
jne 0x406245
mov byte [rbp], 1
cmp byte [r8 + 0xa], 0
jne 0x4062db
mov rax, rdx
mov r10d, 0xffffff8e
mov ecx, dword [r8 + 4]
lea esi, [rcx + 1]
lea ebp, [rcx + 2]
lea r13d, [rcx + 4]
lea r15d, [rcx + 5]
lea r11d, [rcx + 4]
lea r14d, [rcx + 3]
lea r12d, [rcx + 2]
lea edi, [rcx + 1]
mov r9d, dword [r8]
cmp r9d, esi
jne 0x4062a1
xor word [rax], di
inc r9d
mov dword [r8], r9d
jmp 0x40628e
cmp r9d, ebp
jne 0x4062ac
xor word [rax], r12w
jmp 0x406299
cmp r9d, ecx
jne 0x4062b7
xor word [rax], r10w
jmp 0x4062cd
cmp r9d, r13d
jne 0x4062c2
xor word [rax], r14w
jmp 0x406299
cmp r9d, r15d
jne 0x4062cd
xor word [rax], r11w
jmp 0x406299
inc r10d
add rax, 2
cmp r10w, 0xff9d
jne 0x40626d
mov byte [r8 + 0xa], 1
lea rcx, [rbx + 0x240]
call fcn.00402afc
lea rcx, [0x004abd20]
call fcn.00412ff0
lea rcx, [0x004abd00]
mov rbp, rax
call fcn.00412ff0
cmp byte [rbp], 0
mov r8, rax
lea rdx, [rax + 0xc]
jne 0x406383
lea rsi, [0x004b0840]
mov ecx, 0xa
mov byte [rax + 0xa], 0
lea rdi, [rsp + 0xa0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
mov word [rax + 8], 0
mov ecx, 0xa
xor eax, eax
lea rdi, [rsp + 0xe8]
lea rsi, [rsp + 0xa0]
rep movsd dword [rdi], dword [rsi]
mov ecx, 7
mov rdi, rdx
rep stosd dword [rdi], eax
lea r9, [rsp + 0xe8]
mov eax, 0xc
mov cx, word [r9 + rax]
mov word [r8 + rax], cx
add rax, 2
cmp rax, 0x28
jne 0x40636b
mov byte [rbp], 1
cmp byte [r8 + 0xa], 0
jne 0x406401
mov rax, rdx
mov r10d, 0xffffff8f
mov ecx, dword [r8 + 4]
lea esi, [rcx + 1]
lea ebp, [rcx + 2]
lea r13d, [rcx + 4]
lea r15d, [rcx + 5]
lea r11d, [rcx + 4]
lea r14d, [rcx + 3]
lea r12d, [rcx + 2]
lea edi, [rcx + 1]
mov r9d, dword [r8]
cmp r9d, esi
jne 0x4063c7
xor word [rax], di
inc r9d
mov dword [r8], r9d
jmp 0x4063b4
cmp r9d, ebp
jne 0x4063d2
xor word [rax], r12w
jmp 0x4063bf
cmp r9d, ecx
jne 0x4063dd
xor word [rax], r10w
jmp 0x4063f3
cmp r9d, r13d
jne 0x4063e8
xor word [rax], r14w
jmp 0x4063bf
cmp r9d, r15d
jne 0x4063f3
xor word [rax], r11w
jmp 0x4063bf
inc r10d
add rax, 2
cmp r10w, 0xff9d
jne 0x406393
mov byte [r8 + 0xa], 1
lea rcx, [rbx + 0x260]
call fcn.00402afc
lea rcx, [0x004abd60]
call fcn.00412ff0
lea rcx, [0x004abd40]
mov rbp, rax
call fcn.00412ff0
cmp byte [rbp], 0
mov r8, rax
lea rdx, [rax + 0xc]
jne 0x4064a9
lea rsi, [0x004b0800]
mov ecx, 9
mov byte [rax + 0xa], 0
lea rdi, [rsp + 0xa0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
mov word [rax + 8], 0
mov ecx, 9
xor eax, eax
lea rdi, [rsp + 0xe8]
lea rsi, [rsp + 0xa0]
rep movsd dword [rdi], dword [rsi]
mov ecx, 0x16
mov rdi, rdx
rep stosb byte [rdi], al
lea r9, [rsp + 0xe8]
mov eax, 0xc
mov cx, word [r9 + rax]
mov word [r8 + rax], cx
add rax, 2
cmp rax, 0x22
jne 0x406491
mov byte [rbp], 1
cmp byte [r8 + 0xa], 0
jne 0x406527
mov rax, rdx
mov r10d, 0xffffff8f
mov ecx, dword [r8 + 4]
lea esi, [rcx + 1]
lea ebp, [rcx + 2]
lea r13d, [rcx + 4]
lea r15d, [rcx + 5]
lea r11d, [rcx + 4]
lea r14d, [rcx + 3]
lea r12d, [rcx + 2]
lea edi, [rcx + 1]
mov r9d, dword [r8]
cmp r9d, esi
jne 0x4064ed
xor word [rax], di
inc r9d
mov dword [r8], r9d
jmp 0x4064da
cmp r9d, ebp
jne 0x4064f8
xor word [rax], r12w
jmp 0x4064e5
cmp r9d, ecx
jne 0x406503
xor word [rax], r10w
jmp 0x406519
cmp r9d, r13d
jne 0x40650e
xor word [rax], r14w
jmp 0x4064e5
cmp r9d, r15d
jne 0x406519
xor word [rax], r11w
jmp 0x4064e5
inc r10d
add rax, 2
cmp r10w, 0xff9a
jne 0x4064b9
mov byte [r8 + 0xa], 1
lea rcx, [rbx + 0x280]
call fcn.00402afc
lea rcx, [0x004abda0]
call fcn.00412ff0
lea rcx, [0x004abd80]
mov rbp, rax
call fcn.00412ff0
cmp byte [rbp], 0
mov r8, rax
lea rdx, [rax + 0xc]
jne 0x4065cf
lea rsi, [0x004b07c0]
mov ecx, 0xb
mov byte [rax + 0xa], 0
lea rdi, [rsp + 0xa0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
mov word [rax + 8], 0
mov ecx, 0xb
xor eax, eax
lea rdi, [rsp + 0xe8]
lea rsi, [rsp + 0xa0]
rep movsd dword [rdi], dword [rsi]
mov ecx, 0x1e
mov rdi, rdx
rep stosb byte [rdi], al
lea r9, [rsp + 0xe8]
mov eax, 0xc
mov cx, word [r9 + rax]
mov word [r8 + rax], cx
add rax, 2
cmp rax, 0x2a
jne 0x4065b7
mov byte [rbp], 1
cmp byte [r8 + 0xa], 0
jne 0x40664d
mov rax, rdx
mov r10d, 0xffffff90
mov ecx, dword [r8 + 4]
lea esi, [rcx + 1]
lea ebp, [rcx + 2]
lea r13d, [rcx + 4]
lea r15d, [rcx + 5]
lea r11d, [rcx + 4]
lea r14d, [rcx + 3]
lea r12d, [rcx + 2]
lea edi, [rcx + 1]
mov r9d, dword [r8]
cmp r9d, esi
jne 0x406613
xor word [rax], di
inc r9d
mov dword [r8], r9d
jmp 0x406600
cmp r9d, ebp
jne 0x40661e
xor word [rax], r12w
jmp 0x40660b
cmp r9d, ecx
jne 0x406629
xor word [rax], r10w
jmp 0x40663f
cmp r9d, r13d
jne 0x406634
xor word [rax], r14w
jmp 0x40660b
cmp r9d, r15d
jne 0x40663f
xor word [rax], r11w
jmp 0x40660b
inc r10d
add rax, 2
cmp r10w, 0xff9f
jne 0x4065df
lea rcx, [rbx + 0x2a0]
mov byte [r8 + 0xa], 1
call fcn.00402afc
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], 0x16
lea rcx, [rsp + 0x40]
call fcn.00402b6c
lea rsi, [rsp + 0x5b0]
sub rsi, 0x20
mov rcx, rsi
call fcn.00497c30
cmp rsi, rbx
jne 0x406683
lea rcx, [0x004abde0]
call fcn.00412ff0
lea rcx, [0x004abdc0]
mov rbp, rax
call fcn.00412ff0
cmp byte [rbp], 0
mov rdx, rax
lea r9, [rax + 0xc]
jne 0x40671c
lea rsi, [0x004b0780]
mov ecx, 0xa
mov byte [rax + 0xa], 0
lea rdi, [rsp + 0xe8]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
mov word [rax + 8], 0
mov ecx, 0xa
xor eax, eax
lea rsi, [rsp + 0xe8]
mov rdi, rbx
rep movsd dword [rdi], dword [rsi]
mov ecx, 0x1a
mov rdi, r9
rep stosb byte [rdi], al
mov eax, 0xc
mov cx, word [rbx + rax]
mov word [rdx + rax], cx
add rax, 2
cmp rax, 0x26
jne 0x406706
mov byte [rbp], 1
cmp byte [rdx + 0xa], 0
jne 0x406798
mov rax, r9
mov r10d, 0xffffff90
mov ecx, dword [rdx + 4]
lea esi, [rcx + 1]
lea ebp, [rcx + 2]
lea r13d, [rcx + 4]
lea r15d, [rcx + 5]
lea r11d, [rcx + 4]
lea r14d, [rcx + 3]
lea r12d, [rcx + 2]
lea edi, [rcx + 1]
mov r8d, dword [rdx]
cmp r8d, esi
jne 0x40675e
xor word [rax], di
inc r8d
mov dword [rdx], r8d
jmp 0x40674b
cmp r8d, ebp
jne 0x406769
xor word [rax], r12w
jmp 0x406756
cmp r8d, ecx
jne 0x406774
xor word [rax], r10w
jmp 0x40678a
cmp r8d, r13d
jne 0x40677f
xor word [rax], r14w
jmp 0x406756
cmp r8d, r15d
jne 0x40678a
xor word [rax], r11w
jmp 0x406756
inc r10d
add rax, 2
cmp r10w, 0xff9d
jne 0x40672b
mov byte [rdx + 0xa], 1
mov r8d, 0x104
mov rcx, r9
lea rdx, [rsp + 0xe8]
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
dec eax
cmp eax, 0x102
ja 0x406c39
lea rcx, [0x004abe20]
call fcn.00412ff0
lea rcx, [0x004abe00]
mov r12, rax
call fcn.00412ff0
cmp byte [r12], 0
mov rdx, rax
lea rbp, [rax + 0xc]
jne 0x40684a
lea rsi, [0x004b0720]
mov ecx, 0x11
mov byte [rax + 0xa], 0
lea rdi, [rsp + 0xa0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
mov word [rax + 8], 0
mov ecx, 0x11
xor eax, eax
lea rsi, [rsp + 0xa0]
mov rdi, rbx
rep movsd dword [rdi], dword [rsi]
mov ecx, 0x36
mov rdi, rbp
rep stosb byte [rdi], al
mov eax, 0xc
mov cx, word [rbx + rax]
mov word [rdx + rax], cx
add rax, 2
cmp rax, 0x42
jne 0x406833
mov byte [r12], 1
cmp byte [rdx + 0xa], 0
jne 0x4068c7
mov rax, rbp
mov r9d, 0xffffff90
mov ecx, dword [rdx + 4]
lea r11d, [rcx + 1]
lea edi, [rcx + 2]
lea r13d, [rcx + 4]
lea r15d, [rcx + 5]
lea r10d, [rcx + 4]
lea r14d, [rcx + 3]
lea r12d, [rcx + 2]
lea esi, [rcx + 1]
mov r8d, dword [rdx]
cmp r8d, r11d
jne 0x40688d
xor word [rax], si
inc r8d
mov dword [rdx], r8d
jmp 0x40687a
cmp r8d, edi
jne 0x406898
xor word [rax], r12w
jmp 0x406885
cmp r8d, ecx
jne 0x4068a3
xor word [rax], r9w
jmp 0x4068b9
cmp r8d, r13d
jne 0x4068ae
xor word [rax], r14w
jmp 0x406885
cmp r8d, r15d
jne 0x4068b9
xor word [rax], r10w
jmp 0x406885
inc r9d
add rax, 2
cmp r9w, 0xffab
jne 0x406859
mov byte [rdx + 0xa], 1
lea rdx, [rsp + 0xe8]
mov rcx, rbx
call fcn.00402afc
mov rdx, rbp
mov rcx, rbx
call fcn.00498820
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x58], rdx
mov rcx, qword [rax]
lea rdx, [rax + 0x10]
cmp rcx, rdx
jne 0x406907
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rsp + 0x68], xmm0
jmp 0x406915
mov qword [rsp + 0x58], rcx
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x68], rcx
mov rcx, qword [rax + 8]
mov word [rax + 0x10], 0
mov qword [rsp + 0x60], rcx
mov rcx, rbx
mov qword [rax], rdx
mov qword [rax + 8], 0
call fcn.00497c30
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
inc eax
jne 0x406c2a
lea rcx, [0x004abe60]
call fcn.00412ff0
lea rcx, [0x004abe40]
mov rbp, rax
call fcn.00412ff0
cmp byte [rbp], 0
mov rdx, rax
lea r9, [rax + 0xc]
jne 0x4069d2
lea rsi, [0x004b06f0]
mov ecx, 7
mov byte [rax + 0xa], 0
lea rdi, [rsp + 0xa0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
mov word [rax + 8], 0
mov ecx, 7
xor eax, eax
lea rsi, [rsp + 0xa0]
mov rdi, rbx
rep movsd dword [rdi], dword [rsi]
mov ecx, 0xe
mov rdi, r9
rep stosb byte [rdi], al
mov eax, 0xc
mov cx, word [rbx + rax]
mov word [rdx + rax], cx
add rax, 2
cmp rax, 0x1a
jne 0x4069bc
mov byte [rbp], 1
cmp byte [rdx + 0xa], 0
jne 0x406a4e
mov rax, r9
mov r10d, 0xffffff91
mov ecx, dword [rdx + 4]
lea esi, [rcx + 1]
lea ebp, [rcx + 2]
lea r13d, [rcx + 4]
lea r15d, [rcx + 5]
lea r11d, [rcx + 4]
lea r14d, [rcx + 3]
lea r12d, [rcx + 2]
lea edi, [rcx + 1]
mov r8d, dword [rdx]
cmp r8d, esi
jne 0x406a14
xor word [rax], di
inc r8d
mov dword [rdx], r8d
jmp 0x406a01
cmp r8d, ebp
jne 0x406a1f
xor word [rax], r12w
jmp 0x406a0c
cmp r8d, ecx
jne 0x406a2a
xor word [rax], r10w
jmp 0x406a40
cmp r8d, r13d
jne 0x406a35
xor word [rax], r14w
jmp 0x406a0c
cmp r8d, r15d
jne 0x406a40
xor word [rax], r11w
jmp 0x406a0c
inc r10d
add rax, 2
cmp r10w, 0xff98
jne 0x4069e1
mov byte [rdx + 0xa], 1
mov r8d, 0x104
mov rdx, rbx
mov rcx, r9
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
dec eax
cmp eax, 0x102
ja 0x406c1e
lea rcx, [0x004abea0]
call fcn.00412ff0
lea rcx, [0x004abe80]
mov r12, rax
call fcn.00412ff0
cmp byte [r12], 0
mov rdx, rax
lea rbp, [rax + 0xc]
jne 0x406b03
lea rdi, [rsp + 0x78]
mov ecx, 0xa
mov byte [rax + 0xa], 0
lea rsi, [0x004b06c0]
mov qword [rax], 0
rep movsd dword [rdi], dword [rsi]
mov word [rax + 8], 0
lea rsi, [rsp + 0x78]
xor eax, eax
lea rdi, [rsp + 0xa0]
mov ecx, 0xa
rep movsd dword [rdi], dword [rsi]
mov ecx, 7
mov rdi, rbp
rep stosd dword [rdi], eax
lea r8, [rsp + 0xa0]
mov eax, 0xc
mov cx, word [r8 + rax]
mov word [rdx + rax], cx
add rax, 2
cmp rax, 0x28
jne 0x406aeb
mov byte [r12], 1
cmp byte [rdx + 0xa], 0
jne 0x406b80
mov rax, rbp
mov r9d, 0xffffff91
mov ecx, dword [rdx + 4]
lea r11d, [rcx + 1]
lea edi, [rcx + 2]
lea r13d, [rcx + 4]
lea r15d, [rcx + 5]
lea r10d, [rcx + 4]
lea r14d, [rcx + 3]
lea r12d, [rcx + 2]
lea esi, [rcx + 1]
mov r8d, dword [rdx]
cmp r8d, r11d
jne 0x406b46
xor word [rax], si
inc r8d
mov dword [rdx], r8d
jmp 0x406b33
cmp r8d, edi
jne 0x406b51
xor word [rax], r12w
jmp 0x406b3e
cmp r8d, ecx
jne 0x406b5c
xor word [rax], r9w
jmp 0x406b72
cmp r8d, r13d
jne 0x406b67
xor word [rax], r14w
jmp 0x406b3e
cmp r8d, r15d
jne 0x406b72
xor word [rax], r10w
jmp 0x406b3e
inc r9d
add rax, 2
cmp r9w, 0xff9f
jne 0x406b12
lea rdi, [rsp + 0xa0]
mov byte [rdx + 0xa], 1
mov rdx, rbx
mov rcx, rdi
call fcn.00402afc
mov rdx, rbp
mov rcx, rdi
call fcn.00498820
lea rsi, [rsp + 0x78]
lea rdx, [rsi + 0x10]
mov qword [rsp + 0x78], rdx
mov rcx, qword [rax]
lea rdx, [rax + 0x10]
cmp rcx, rdx
jne 0x406bca
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x88], xmm1
jmp 0x406bdb
mov qword [rsp + 0x78], rcx
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x88], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x80], rcx
mov rcx, rdi
mov qword [rax], rdx
mov qword [rax + 8], 0
mov word [rax + 0x10], 0
call fcn.00497c30
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
inc eax
mov rcx, rsi
je 0x406c19
call fcn.00497c30
jmp 0x406c2a
call fcn.00497c30
lea rcx, [rsp + 0x58]
call fcn.00497c30
jmp 0x406c39
lea rcx, [rsp + 0x58]
call fcn.00497c30
jmp 0x406cd3
xor edx, edx
mov ecx, 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
cmp rax, 0xffffffffffffffff
mov rsi, rax
je 0x406cc9
mov ecx, 0x8e
xor eax, eax
mov rdi, rbx
rep stosd dword [rdi], eax
lea rdx, [rsp + 0x2f0]
mov rcx, rsi
mov dword [rsp + 0x2f0], 0x238
call sub.KERNEL32.dll_Process32FirstW
test eax, eax
je 0x406ca2
mov r12, qword [sym.imp.msvcrt.dll__wcsicmp]
lea rbp, [rbx + 0x2c]
mov r13, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x40]
cmp r13, rdi
jne 0x406cad
mov rdx, rbx
mov rcx, rsi
call sub.KERNEL32.dll_Process32NextW
test eax, eax
jne 0x406c84
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x406cc9
mov rdx, qword [rdi]
mov rcx, rbp
call r12
add rdi, 0x20
test eax, eax
jne 0x406c8e
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x406cd3
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
je 0x406cdd
mov ebx, 1
jmp 0x406d6f
call fcn.0040200d
test eax, eax
jne 0x406cd3
call fcn.00403d6d
xor ebx, ebx
test eax, eax
setne bl
jmp 0x406d6f
lea rcx, [rsp + 0x40]
call fcn.0040218a
mov eax, ebx
add rsp, 0x5b8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret