Function at 0x448990
Capabilities:
Get geographical location
Reference http user-agent string
Reference sql statements
Run powershell expression

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
lea rax, [rsp - 0x280]
cmp rax, qword [rcx + 0x10]
jbe 0x44a5cc
sub rsp, 0x300
mov qword [rsp + 0x2f8], rbp
lea rbp, [rsp + 0x2f8]
mov rax, qword [rsp + 0x328]
test rax, rax
jle 0x44a369
mov rcx, qword [rsp + 0x340]
test rcx, rcx
jne 0x44a5b1
mov rdx, qword gs:[0x28]
mov rdx, qword [rdx]
mov rbx, qword [rsp + 0x320]
cmp rbx, rdx
jne 0x448a1c
mov rsi, qword [rdx + 0x30]
mov rsi, qword [rsi + 0x90]
cmp rsi, rdx
je 0x44a596
mov esi, dword [0x00b01150]
mov r8, qword [rdx + 0x30]
movzx r8d, byte [r8 + 0xf9]
test r8b, r8b
je 0x44a361
movzx esi, r8b
mov r8, qword [rsp + 0x308]
cmp r8, 0xffffffffffffffff
jne 0x44a351
mov r9, qword [rsp + 0x310]
cmp r9, 0xffffffffffffffff
jne 0x44a341
mov r8, qword [rbx + 0x70]
test r8, r8
je 0x44a334
mov r9, qword [rbx + 0x78]
mov qword [rsp + 0x2a0], 0
lea rdi, [rsp + 0x2a8]
xorps xmm0, xmm0
lea rdi, [rdi - 0x30]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.004546b5
mov rbp, qword [rbp]
mov qword [rsp + 0x2b0], r9
mov qword [rsp + 0x2c8], r8
mov r9, qword [rbx + 0x148]
mov r10, qword [rbx + 0x140]
mov r11, qword [rsp + 0x330]
test r11, r11
je 0x44a328
xor edi, edi
mov r12, qword [rbx + 0x28]
jmp 0x448ada
mov r12, qword [r12 + 0x28]
test r12, r12
je 0x448aea
mov r13, qword [r12 + 8]
cmp r13, 0xffffffffffffffff
je 0x448ad5
mov qword [rsp + 0x220], rdx
mov byte [rsp + 0x41], dil
mov qword [rsp + 0x258], r12
mov qword [rsp + 0xa8], r9
mov qword [rsp + 0x250], r10
mov dword [rsp + 0x48], esi
mov r13, qword [rsp + 0x2b0]
test r13, r13
jne 0x448b34
mov r8, qword [r8]
mov qword [rsp + 0x2b0], r8
add qword [rsp + 0x2c8], 8
mov rax, qword [rsp + 0x2b0]
mov qword [rsp], rax
call fcn.00443c90
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 8]
test rcx, rcx
je 0x44a25c
mov qword [rsp + 0x2a0], rcx
mov qword [rsp + 0x2a8], rax
lea rdi, [rsp + 0x108]
xorps xmm0, xmm0
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00454684
mov rbp, qword [rbp]
lea rax, [rsp + 0x18]
mov qword [rsp + 0x298], rax
xor ecx, ecx
xor edx, edx
xor ebx, ebx
mov rsi, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0x250]
mov r8, qword [rsp + 0x328]
xor r9d, r9d
mov r10, qword [rsp + 0x258]
jmp 0x448ce4
mov r10, qword [r10 + 0x28]
test r10, r10
je 0x449d1a
mov r11, qword [r10 + 8]
mov r13, qword [rsp + 0x2c8]
cmp r13, r11
je 0x448bc1
cmp r11, 0xffffffffffffffff
je 0x448bc1
test rax, rax
mov qword [rsp + 0x258], r10
jne 0x449c6b
mov r11, qword [rsp + 0x330]
test r11, r11
je 0x448c25
test r8, r8
jne 0x449a02
mov r13, qword [rsp + 0x2b0]
cmp rcx, 0x100000
jae 0x44a559
mov qword [r11 + rcx*8], r13
test r14b, r14b
jne 0x449126
inc rcx
mov r13d, dword [r12 + 0x10]
cmp r13d, 0x10
jne 0x44911e
test rsi, rsi
jle 0x44911e
lea r13, [rsi - 1]
cmp r13, rsi
jae 0x44a536
mov rsi, qword [rdi + rsi*8 - 8]
test r8, r8
jne 0x448c69
test rax, rax
je 0x449080
mov esi, dword [r12 + 0x10]
test r15, r15
je 0x448e67
mov qword [rsp + 0x2a0], r15
mov r12, qword [rsp + 0x240]
mov qword [rsp + 0x2a8], r12
mov r12, qword [rsp + 0x2c0]
mov qword [rsp + 0x2b0], r12
mov qword [rsp + 0x2c0], 0
mov r12, qword [rsp + 0x2d0]
mov qword [rsp + 0x2c8], r12
mov qword [rsp + 0x2d0], 0
mov qword [rsp + 0x2f0], 0
cmp esi, 8
sete dl
mov rax, qword [rsp + 0x298]
mov rsi, r13
mov r11, qword [rsp + 0x338]
cmp rcx, r11
jge 0x44a249
mov r12, qword [rsp + 0x2a0]
mov r13, qword [rsp + 0x2a8]
mov r14d, dword [r12 + 0x14]
test r14d, r14d
je 0x44a236
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x290], r10
mov qword [rsp + 0x68], r9
mov qword [rsp + 0x288], r13
mov qword [rsp + 0x328], r8
mov qword [rsp + 0x280], r12
mov byte [rsp + 0x40], bl
mov byte [rsp + 0x3f], dl
mov r14, qword [rsp + 0x2d0]
test r14, r14
je 0x44a0c0
mov r14, qword [rsp + 0x320]
mov r15, qword [r14 + 0x30]
test r15, r15
je 0x44a0b8
mov r15, qword [r15]
cmp r15, r14
sete r15b
mov eax, dword [r12 + 0x10]
cmp eax, 1
jne 0x44a056
mov eax, 1
mov qword [rsp + 0xa8], rsi
mov qword [rsp + 0x278], rdi
test al, al
je 0x449de8
mov qword [rsp + 0x2c0], 0
xor eax, eax
xor r15d, r15d
mov qword [rsp + 0x240], rax
mov r14, qword [rsp + 0x2d0]
lea r11, [r14 - 8]
mov qword [rsp + 0x2d8], r11
movzx eax, byte [0x010e3240]
test al, al
je 0x448df4
mov rax, qword [rsp + 0x2c8]
cmp r11, rax
jbe 0x448df4
lea rax, [r14 - 0x10]
mov qword [rsp + 0x2d8], rax
mov qword [rsp + 0x248], r15
mov rax, qword [rsp + 0x340]
test rax, rax
setne r11b
jne 0x449d33
movzx r14d, byte [rsp + 0x41]
test r14b, r14b
jne 0x449d33
mov r11, qword [rsp + 0x2b0]
mov qword [rsp + 0x2b8], r11
test dl, dl
je 0x448bc5
test r10, r10
je 0x449d22
mov r11, qword [r10 + 8]
mov r13, qword [rsp + 0x2c8]
cmp r13, r11
jne 0x449d22
mov r11, qword [r10 + 0x10]
mov qword [rsp + 0x2b8], r11
jmp 0x448bc5
test r14b, r14b
je 0x449078
test rax, rax
je 0x44906e
mov rcx, qword [rsp + 0x338]
cmp r9, rcx
jge 0x449069
test r10, r10
je 0x449027
mov rax, qword [rsp + 0x320]
mov rcx, qword [rax + 0x98]
mov qword [rsp + 0x100], rcx
mov rdx, qword [r10 + 8]
mov qword [rsp + 0xf8], rdx
mov rbx, qword [r10 + 0x10]
mov qword [rsp + 0xf0], rbx
call fcn.0042b400
lea rax, [0x0089812d]
mov qword [rsp], rax
mov qword [rsp + 8], 0xa
call fcn.0042bdc0
mov rax, qword [rsp + 0x100]
mov qword [rsp], rax
call fcn.0042bbe0
lea rax, [0x008a68e3]
mov qword [rsp], rax
mov qword [rsp + 8], 0x14
call fcn.0042bdc0
mov rax, qword [rsp + 0xf8]
mov qword [rsp], rax
call fcn.0042bc50
lea rax, [0x0088b77b]
mov qword [rsp], rax
mov qword [rsp + 8], 4
call fcn.0042bdc0
mov rax, qword [rsp + 0xf0]
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b6b0
call fcn.0042b490
mov rax, qword [rsp + 0x320]
mov rax, qword [rax + 0x28]
jmp 0x449019
mov qword [rsp + 0x258], rax
mov rcx, qword [rax + 8]
mov qword [rsp + 0xf8], rcx
mov rdx, qword [rax + 0x10]
mov qword [rsp + 0xf0], rdx
call fcn.0042b400
lea rax, [0x008904f6]
mov qword [rsp], rax
mov qword [rsp + 8], 7
call fcn.0042bdc0
mov rax, qword [rsp + 0x258]
mov qword [rsp], rax
call fcn.0042bd70
lea rax, [0x0088b783]
mov qword [rsp], rax
mov qword [rsp + 8], 4
call fcn.0042bdc0
mov rax, qword [rsp + 0xf8]
mov qword [rsp], rax
call fcn.0042bc50
lea rax, [0x0088b77b]
mov qword [rsp], rax
mov qword [rsp + 8], 4
call fcn.0042bdc0
mov rax, qword [rsp + 0xf0]
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b6b0
call fcn.0042b490
mov rax, qword [rsp + 0x258]
mov rax, qword [rax + 0x28]
test rax, rax
jne 0x448f60
jmp 0x44a51b
test rax, rax
je 0x449051
cmp r9, rcx
jge 0x449051
mov rax, qword [rsp + 0x2c8]
mov rdx, qword [rsp + 0x320]
mov rbx, qword [rdx + 0x80]
cmp rax, rbx
jne 0x44a376
mov qword [rsp + 0x358], r9
mov rbp, qword [rsp + 0x2f8]
add rsp, 0x300
ret
test rax, rax
jmp 0x44902a
mov rcx, qword [rsp + 0x338]
jmp 0x44902a
mov r9, rcx
jmp 0x448e70
mov qword [rsp + 0xe8], r13
mov qword [rsp + 0xe0], r9
mov qword [rsp + 0xd8], r8
mov byte [rsp + 0x43], bl
mov qword [rsp], r11
mov byte [rsp + 8], r14b
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rcx
mov rax, qword [rsp + 0x338]
mov qword [rsp + 0x20], rax
call fcn.0044a7a0
mov rcx, qword [rsp + 0x28]
mov rax, qword [rsp + 0x340]
movzx ebx, byte [rsp + 0x43]
mov rdi, qword [rsp + 0x278]
mov r8, qword [rsp + 0xd8]
mov r9, qword [rsp + 0xe0]
mov r10, qword [rsp + 0x258]
mov r11, qword [rsp + 0x330]
mov r12, qword [rsp + 0x280]
mov r13, qword [rsp + 0xe8]
movzx r14d, byte [rsp + 0x41]
mov r15, qword [rsp + 0x248]
jmp 0x448c69
mov r13, rsi
jmp 0x448c69
mov qword [rsp + 0xd0], r8
mov qword [rsp + 0xc8], rcx
mov qword [rsp], r12
mov rax, qword [rsp + 0x288]
mov qword [rsp + 8], rax
call fcn.004443d0
mov rax, qword [rsp + 0x10]
mov qword [rsp + 0x208], rax
mov rcx, qword [rsp + 0x18]
mov qword [rsp + 0x78], rcx
cmp rcx, 0xf
jne 0x4499f3
mov rdx, qword [rax]
movabs rbx, 0x2e656d69746e7572
cmp rbx, rdx
jne 0x449951
mov edx, dword [rax + 8]
cmp edx, 0x61706f67
jne 0x449951
movzx edx, word [rax + 0xc]
cmp dx, 0x696e
jne 0x449951
movzx edx, byte [rax + 0xe]
cmp dl, 0x63
jne 0x449951
mov edx, 1
mov byte [rsp + 0x42], dl
mov rsi, qword [rsp + 0x350]
bt esi, 0
jae 0x4498ba
mov rdi, qword [rsp + 0x2b0]
mov r8, qword [rsp + 0xc8]
test r8, r8
jle 0x4498a3
mov r9, qword [rsp + 0x280]
mov r10, qword [r9]
cmp rdi, r10
jbe 0x449201
movzx r10d, byte [rsp + 0x3f]
test r10b, r10b
je 0x44989b
mov qword [rsp + 0x50], rdi
mov qword [rsp], r9
mov rax, qword [rsp + 0x288]
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rdi
call fcn.00444750
mov eax, dword [rsp + 0x28]
mov dword [rsp + 0x44], eax
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0xa0], rcx
mov rdx, qword [rsp + 0x18]
mov qword [rsp + 0x238], rdx
mov rbx, qword [rsp + 0x280]
mov qword [rsp], rbx
mov rsi, qword [rsp + 0x288]
mov qword [rsp + 8], rsi
mov dword [rsp + 0x10], 2
call fcn.004449f0
mov rax, qword [rsp + 0x18]
test rax, rax
jne 0x44969c
mov rax, qword [rsp + 0x78]
cmp rax, 0xf
mov rcx, qword [rsp + 0x238]
mov rdx, qword [rsp + 0xa0]
mov ebx, dword [rsp + 0x44]
mov qword [rsp + 0x238], rcx
mov qword [rsp + 0xa0], rdx
mov dword [rsp + 0x44], ebx
jne 0x44968f
mov rsi, qword [rsp + 0x208]
mov rdi, qword [rsi]
movabs r8, 0x2e656d69746e7572
cmp rdi, r8
jne 0x4492f4
mov edi, dword [rsi + 8]
cmp edi, 0x61706f67
jne 0x4492f4
movzx edi, word [rsi + 0xc]
cmp di, 0x696e
jne 0x4492f4
movzx edi, byte [rsi + 0xe]
cmp dil, 0x63
jne 0x4492f4
mov eax, 5
lea rsi, [0x0088da93]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x218], rsi
call fcn.0042b400
mov rax, qword [rsp + 0x218]
mov qword [rsp], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 8], rax
call fcn.0042bdc0
lea rax, [0x0088ae56]
mov qword [rsp], rax
mov qword [rsp + 8], 1
call fcn.0042bdc0
call fcn.0042b490
mov rax, qword [rsp + 0x2e0]
mov qword [rsp + 0x270], rax
xor ecx, ecx
jmp 0x449390
test byte [rax], al
mov rdx, qword [rax + rcx*8]
mov qword [rsp + 0xf8], rdx
call fcn.0042b400
mov rax, qword [rsp + 0xf8]
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b490
mov rax, qword [rsp + 0x98]
lea rcx, [rax + 1]
mov rax, qword [rsp + 0x270]
mov rdx, qword [rsp + 0x2e8]
shr rdx, 3
cmp rcx, rdx
jae 0x44940f
cmp rcx, 0xa
jae 0x4493ec
mov qword [rsp + 0x98], rcx
test rcx, rcx
je 0x449353
call fcn.0042b400
lea rax, [0x0088aebe]
mov qword [rsp], rax
mov qword [rsp + 8], 2
call fcn.0042bdc0
call fcn.0042b490
mov rax, qword [rsp + 0x270]
mov rcx, qword [rsp + 0x98]
jmp 0x449353
call fcn.0042b400
lea rax, [0x0088c8aa]
mov qword [rsp], rax
mov qword [rsp + 8], 5
call fcn.0042bdc0
call fcn.0042b490
call fcn.0042b400
lea rax, [0x0088aeba]
mov qword [rsp], rax
mov qword [rsp + 8], 2
call fcn.0042bdc0
call fcn.0042b490
call fcn.0042b400
lea rax, [0x0088ae7a]
mov qword [rsp], rax
mov qword [rsp + 8], 1
call fcn.0042bdc0
mov rax, qword [rsp + 0x238]
mov qword [rsp], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 8], rax
call fcn.0042bdc0
lea rax, [0x0088ae62]
mov qword [rsp], rax
mov qword [rsp + 8], 1
call fcn.0042bdc0
mov eax, dword [rsp + 0x44]
movsxd rax, eax
mov qword [rsp], rax
call fcn.0042bbe0
call fcn.0042b490
mov rax, qword [rsp + 0x2b0]
mov rcx, qword [rsp + 0x280]
mov rdx, qword [rcx]
cmp rax, rdx
ja 0x449633
mov rax, qword [rsp + 0x220]
mov rdx, qword [rax + 0x30]
mov ebx, dword [rdx + 0xbc]
test ebx, ebx
jle 0x449629
mov rdx, qword [rdx + 0x90]
mov rbx, qword [rsp + 0x320]
cmp rdx, rbx
jne 0x449617
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0xf8], rax
mov rcx, qword [rsp + 0x2c8]
mov qword [rsp + 0xf0], rcx
mov rdx, qword [rsp + 0x2b0]
mov qword [rsp + 0xc0], rdx
call fcn.0042b400
lea rax, [0x0088b763]
mov qword [rsp], rax
mov qword [rsp + 8], 4
call fcn.0042bdc0
mov rax, qword [rsp + 0xf8]
mov qword [rsp], rax
call fcn.0042bc50
lea rax, [0x0088b783]
mov qword [rsp], rax
mov qword [rsp + 8], 4
call fcn.0042bdc0
mov rax, qword [rsp + 0xf0]
mov qword [rsp], rax
call fcn.0042bc50
lea rax, [0x0088b77b]
mov qword [rsp], rax
mov qword [rsp + 8], 4
call fcn.0042bdc0
mov rax, qword [rsp + 0xc0]
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b490
call fcn.0042b400
call fcn.0042b6b0
call fcn.0042b490
mov rax, qword [rsp + 0x68]
inc rax
movzx ebx, byte [rsp + 0x42]
xor ebx, 1
mov rcx, qword [rsp + 0xc8]
mov rsi, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0x278]
mov r8, qword [rsp + 0xd0]
mov r10, qword [rsp + 0x258]
mov r11, qword [rsp + 0x330]
mov r12, qword [rsp + 0x280]
movzx r14d, byte [rsp + 0x41]
mov r15, qword [rsp + 0x248]
mov r9, rax
mov rax, qword [rsp + 0x340]
jmp 0x448c2e
mov edx, dword [rsp + 0x48]
cmp edx, 2
jge 0x4494ea
jmp 0x4495a2
mov rbx, qword [rsp + 0x320]
jmp 0x449617
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0xf0], rdx
call fcn.0042b400
lea rax, [0x0088ae9a]
mov qword [rsp], rax
mov qword [rsp + 8], 2
call fcn.0042bdc0
mov rax, qword [rsp + 0xf8]
mov rcx, qword [rsp + 0xf0]
sub rax, rcx
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b490
mov rcx, qword [rsp + 0x280]
jmp 0x4494b8
mov rsi, qword [rsp + 0x208]
jmp 0x4492f4
mov qword [rsp + 0x270], rax
mov rax, qword [rsp + 0x280]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x288]
mov qword [rsp + 8], rcx
mov dword [rsp + 0x10], 1
mov rdx, qword [rsp + 0x50]
mov qword [rsp + 0x18], rdx
mov qword [rsp + 0x20], 0
call fcn.00444940
mov eax, dword [rsp + 0x28]
mov rcx, qword [rsp + 0xa0]
mov rdx, qword [rsp + 0x238]
mov ebx, dword [rsp + 0x44]
jmp 0x44986b
mov qword [rsp + 0xb8], rcx
mov qword [rsp + 0x268], rdx
mov dword [rsp + 0x4c], ebx
shl rax, 4
mov qword [rsp + 0xb0], rax
mov rcx, qword [rsp + 0x270]
mov edx, dword [rcx + rax + 0xc]
mov dword [rsp + 0x10], edx
mov rdx, qword [rsp + 0x280]
mov qword [rsp], rdx
mov rbx, qword [rsp + 0x288]
mov qword [rsp + 8], rbx
call fcn.00444460
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x80], rax
mov rcx, qword [rsp + 0x18]
mov qword [rsp + 0x210], rcx
call fcn.0042b400
mov rax, qword [rsp + 0x210]
mov qword [rsp], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 8], rax
call fcn.0042bdc0
lea rax, [0x0088e0b7]
mov qword [rsp], rax
mov qword [rsp + 8], 6
call fcn.0042bdc0
call fcn.0042b490
call fcn.0042b400
lea rax, [0x0088ae7a]
mov qword [rsp], rax
mov qword [rsp + 8], 1
call fcn.0042bdc0
mov rax, qword [rsp + 0x268]
mov qword [rsp], rax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 8], rax
call fcn.0042bdc0
lea rax, [0x0088ae62]
mov qword [rsp], rax
mov qword [rsp + 8], 1
call fcn.0042bdc0
mov eax, dword [rsp + 0x4c]
movsxd rax, eax
mov qword [rsp], rax
call fcn.0042bbe0
call fcn.0042b6b0
call fcn.0042b490
mov rax, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0x270]
mov edx, dword [rcx + rax + 4]
mov dword [rsp + 0x10], edx
mov rdx, qword [rsp + 0x280]
mov qword [rsp], rdx
mov rbx, qword [rsp + 0x288]
mov qword [rsp + 8], rbx
call fcn.00444500
mov rcx, qword [rsp + 0x20]
mov rdx, qword [rsp + 0x18]
mov rax, qword [rsp + 0xb0]
mov rbx, qword [rsp + 0x270]
mov esi, dword [rbx + rax + 8]
mov eax, dword [rbx + rax]
mov ebx, esi
cmp eax, 0xffffffff
je 0x449884
movsxd rax, eax
cmp rax, 0x100000
jb 0x4496fa
jmp 0x44a53d
mov rax, qword [rsp + 0x78]
cmp rax, 0xf
mov rsi, rcx
mov rcx, rdx
mov rdx, rsi
jmp 0x449294
dec rdi
jmp 0x449201
bt esi, 1
jae 0x4491e2
mov r9, qword [rsp + 0x280]
jmp 0x449201
mov rdi, qword [rsp + 0x280]
mov qword [rsp], rdi
mov r8, qword [rsp + 0x288]
mov qword [rsp + 8], r8
mov r9, qword [rsp + 0x320]
mov qword [rsp + 0x10], r9
mov r10, qword [rsp + 0x68]
test r10, r10
mov r11, qword [rsp + 0x298]
sete byte [r11]
movzx r12d, byte [rsp + 0x40]
test r12b, r12b
je 0x44994c
test r10, r10
setne r12b
mov byte [rsp + 0x19], r12b
call fcn.0044b140
movzx eax, byte [rsp + 0x20]
test al, al
jne 0x449923
mov rax, qword [rsp + 0x68]
jmp 0x4495b9
mov rax, qword [rsp + 0x208]
mov rcx, qword [rsp + 0x78]
movzx edx, byte [rsp + 0x42]
movabs rbx, 0x2e656d69746e7572
mov rsi, qword [rsp + 0x350]
jmp 0x4491c9
xor r12d, r12d
jmp 0x449906
cmp rcx, 0x10
jne 0x4499e5
mov rdx, qword [rax]
cmp rbx, rdx
jne 0x4499d7
mov rdx, qword [rax + 8]
movabs rsi, 0x63696e6170676973
cmp rsi, rdx
sete dl
test dl, dl
je 0x449985
mov edx, 1
jmp 0x4491b3
cmp rcx, 0x11
je 0x449992
xor edx, edx
jmp 0x4491b3
mov qword [rsp], rax
lea rdx, [0x008a46ae]
mov qword [rsp + 8], rdx
mov qword [rsp + 0x10], rcx
call fcn.004539e0
movzx edx, byte [rsp + 0x18]
mov rax, qword [rsp + 0x208]
mov rcx, qword [rsp + 0x78]
movabs rbx, 0x2e656d69746e7572
movabs rsi, 0x63696e6170676973
jmp 0x4491b3
movabs rsi, 0x63696e6170676973
xor edx, edx
jmp 0x449977
movabs rsi, 0x63696e6170676973
xor edx, edx
jmp 0x449977
movabs rbx, 0x2e656d69746e7572
jmp 0x449951
mov r13, qword [rsp + 0x2b0]
test rcx, rcx
jle 0x449c4d
mov r14, qword [r12]
cmp r13, r14
jbe 0x449a24
test dl, dl
je 0x449c45
mov qword [rsp + 0x58], r13
mov qword [rsp], r12
mov rax, qword [rsp + 0x288]
mov qword [rsp + 8], rax
mov dword [rsp + 0x10], 2
call fcn.004449f0
mov rax, qword [rsp + 0x18]
test rax, rax
jne 0x449ab2
mov r13, qword [rsp + 0x328]
lea r8, [r13 - 1]
mov rax, qword [rsp + 0x340]
mov rsi, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0x278]
mov r10, qword [rsp + 0x258]
mov r11, qword [rsp + 0x330]
mov r12, qword [rsp + 0x280]
movzx r14d, byte [rsp + 0x41]
mov r15, qword [rsp + 0x248]
movzx ebx, byte [rsp + 0x40]
mov r9, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x88]
jmp 0x448c31
mov qword [rsp + 0x270], rax
mov rax, qword [rsp + 0x280]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x288]
mov qword [rsp + 8], rcx
mov dword [rsp + 0x10], 1
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x18], rdx
lea rdx, [rsp + 0x108]
mov qword [rsp + 0x20], rdx
call fcn.00444940
mov eax, dword [rsp + 0x28]
mov rcx, qword [rsp + 0x270]
mov rdx, qword [rsp + 0x328]
xor ebx, ebx
jmp 0x449b1c
dec rdx
inc rbx
shl rax, 4
mov eax, dword [rcx + rax]
test eax, eax
jl 0x449b35
test rdx, rdx
jle 0x449b35
movsxd rax, eax
cmp rax, 0x100000
jb 0x449b0f
jmp 0x44a552
test rdx, rdx
jle 0x449b93
lea r8, [rdx - 1]
mov rax, qword [rsp + 0x340]
mov rsi, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0x278]
mov r10, qword [rsp + 0x258]
mov r11, qword [rsp + 0x330]
mov r12, qword [rsp + 0x280]
movzx r14d, byte [rsp + 0x41]
mov r15, qword [rsp + 0x248]
movzx ebx, byte [rsp + 0x40]
mov r9, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x88]
jmp 0x448c31
mov rax, qword [rsp + 0x2b0]
mov rcx, qword [rsp + 0x88]
cmp rcx, 0x100000
jae 0x44a54b
mov rsi, qword [rsp + 0x330]
mov qword [rsi + rcx*8], rax
lea rax, [rcx + 1]
mov rdi, qword [rsp + 0x338]
cmp rax, rdi
jge 0x449c40
mov r8, qword [0x016366b0]
add rbx, r8
cmp rax, 0x100000
jae 0x44a544
mov qword [rsi + rcx*8 + 8], rbx
movzx ebx, byte [rsp + 0x40]
mov rsi, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0x278]
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x258]
mov r11, qword [rsp + 0x330]
mov r12, qword [rsp + 0x280]
movzx r14d, byte [rsp + 0x41]
mov r15, qword [rsp + 0x248]
mov rcx, rax
mov r8, rdx
mov rax, qword [rsp + 0x340]
movzx edx, byte [rsp + 0x3f]
jmp 0x448c25
mov rax, rcx
jmp 0x449be8
dec r13
jmp 0x449a24
mov r14, qword [rsp + 0x350]
bt r14d, 1
jb 0x449a24
movzx r14d, byte [rsp + 0x41]
jmp 0x449a13
lea rcx, [rsp + 0x2a0]
mov qword [rsp], rcx
mov rbx, qword [rsp + 0x348]
mov qword [rsp + 8], rbx
mov rsi, qword [rax]
mov rdx, rax
call rsi
movzx eax, byte [rsp + 0x10]
test al, al
je 0x449cfa
mov r11, qword [rsp + 0x330]
test r11, r11
mov rax, qword [rsp + 0x340]
mov rcx, qword [rsp + 0x88]
movzx edx, byte [rsp + 0x3f]
movzx ebx, byte [rsp + 0x40]
mov rsi, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0x278]
mov r8, qword [rsp + 0x328]
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x258]
mov r12, qword [rsp + 0x280]
movzx r14d, byte [rsp + 0x41]
mov r15, qword [rsp + 0x248]
jmp 0x448c01
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x358], rax
mov rbp, qword [rsp + 0x2f8]
add rsp, 0x300
ret
test rax, rax
jmp 0x448be8
mov qword [rsp + 0x2b8], 0
jmp 0x448bc5
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0x2e0], rax
lea rax, [rsp + 0x2a0]
mov qword [rsp], rax
mov qword [rsp + 8], r12
mov qword [rsp + 0x10], r13
mov byte [rsp + 0x18], r11b
mov qword [rsp + 0x20], 0
call fcn.0044a5e0
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x2e8], rax
mov qword [rsp + 0x2f0], rcx
mov rax, qword [rsp + 0x340]
mov rcx, qword [rsp + 0x88]
movzx edx, byte [rsp + 0x3f]
movzx ebx, byte [rsp + 0x40]
mov rsi, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0x278]
mov r8, qword [rsp + 0x328]
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x290]
mov r12, qword [rsp + 0x280]
mov r13, qword [rsp + 0x288]
movzx r14d, byte [rsp + 0x41]
mov r15, qword [rsp + 0x248]
jmp 0x448e20
mov rax, qword [rsp + 0x2c0]
test rax, rax
jne 0x44a04e
mov rax, qword [rsp + 0x2d0]
add rax, 0xfffffffffffffff8
mov r15, rax
mov rax, qword [rax]
mov qword [rsp + 0x2c0], rax
mov qword [rsp + 0x90], r15
mov rax, qword [rsp + 0x2c0]
mov qword [rsp], rax
call fcn.00443c90
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 8]
test rcx, rcx
je 0x449e9a
movzx edx, byte [rsp + 0x3f]
movzx ebx, byte [rsp + 0x40]
mov rsi, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0x278]
mov r8, qword [rsp + 0x328]
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x290]
mov r11, qword [rsp + 0x338]
mov r12, qword [rsp + 0x280]
mov r13, qword [rsp + 0x288]
mov r14, qword [rsp + 0x320]
mov r15, rcx
mov rcx, qword [rsp + 0x88]
jmp 0x448db4
movzx ebx, byte [rsp + 0x41]
test bl, bl
je 0x44a037
mov rsi, qword [rsp + 0x320]
mov rdi, qword [rsi + 0x30]
movzx edi, byte [rdi + 0xe9]
test dil, dil
je 0x44a02d
mov rdi, qword [rsp + 0x280]
mov r8d, dword [rdi + 0x10]
cmp r8d, 8
jne 0x44a026
xor edx, edx
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x230], rcx
mov r8, qword [rsp + 0x340]
test r8, r8
jne 0x449f0a
test dl, dl
jne 0x449f0a
test r8, r8
jne 0x44a560
jmp 0x449e3b
mov qword [rsp], rdi
mov rax, qword [rsp + 0x288]
mov qword [rsp + 8], rax
call fcn.004443d0
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0xc8], rax
mov rcx, qword [rsp + 0x10]
mov qword [rsp + 0x260], rcx
mov rdx, qword [rsp + 0x2c0]
mov qword [rsp + 0xf8], rdx
call fcn.0042b400
lea rax, [0x008b268a]
mov qword [rsp], rax
mov qword [rsp + 8], 0x22
call fcn.0042bdc0
mov rax, qword [rsp + 0x260]
mov qword [rsp], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 8], rax
call fcn.0042bdc0
lea rax, [0x0089cc49]
mov qword [rsp], rax
mov qword [rsp + 8], 0xd
call fcn.0042bdc0
mov rax, qword [rsp + 0xf8]
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b6b0
call fcn.0042b490
mov rax, qword [rsp + 0x320]
mov rcx, qword [rax + 8]
mov rdx, qword [rax]
mov qword [rsp], rdx
mov qword [rsp + 8], rcx
lea rcx, [rsp + 0x2a0]
mov qword [rsp + 0x10], rcx
mov rdx, qword [rsp + 0x90]
mov qword [rsp + 0x18], rdx
call fcn.0044b8f0
mov r8, qword [rsp + 0x340]
test r8, r8
mov rax, qword [rsp + 0x228]
mov rcx, qword [rsp + 0x230]
movzx ebx, byte [rsp + 0x41]
mov rsi, qword [rsp + 0x320]
mov rdi, qword [rsp + 0x280]
jmp 0x449eff
mov edx, ebx
jmp 0x449edb
mov rdi, qword [rsp + 0x280]
jmp 0x44a026
mov rsi, qword [rsp + 0x320]
mov rdi, qword [rsp + 0x280]
xor edx, edx
jmp 0x449edb
xor r15d, r15d
jmp 0x449e13
cmp eax, 5
jne 0x44a065
mov eax, 1
jmp 0x448d8b
cmp eax, 3
jne 0x44a074
mov eax, 1
jmp 0x448d8b
cmp eax, 4
jne 0x44a083
mov eax, 1
jmp 0x448d8b
cmp eax, 6
jne 0x44a092
mov eax, 1
jmp 0x448d8b
cmp eax, 0x12
jne 0x44a0a1
mov eax, 1
jmp 0x448d8b
test r15b, r15b
je 0x44a0b1
cmp eax, 7
sete al
jmp 0x448d8b
xor eax, eax
jmp 0x448d8b
xor r15d, r15d
jmp 0x448d78
mov r14, qword [rsp + 0x2c8]
mov r15, qword [rsp + 0x350]
bt r15d, 2
jae 0x44a225
mov eax, dword [r12 + 0x10]
cmp eax, 0xf
jne 0x44a214
mov rax, qword [rsp + 0x220]
mov rax, qword [rax + 0x30]
mov rax, qword [rax]
mov r15, qword [rsp + 0x320]
cmp rax, r15
jne 0x44a203
mov rax, qword [r15 + 0x30]
mov rax, qword [rax + 0x90]
test rax, rax
je 0x44a1f2
mov rax, qword [rax + 0x38]
mov qword [rsp + 0x2c8], rax
mov rsi, qword [r15 + 0x30]
mov rsi, qword [rsi + 0x90]
mov rdi, qword [rsi + 0x148]
mov rsi, qword [rsi + 0x140]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0xa8], rdi
mov qword [rsp + 0x278], rsi
mov qword [rsp], r12
mov qword [rsp + 8], r13
mov rcx, qword [rsp + 0x2b0]
mov qword [rsp + 0x10], rcx
lea rcx, [rsp + 0x108]
mov qword [rsp + 0x18], rcx
call fcn.004447d0
movsxd rax, dword [rsp + 0x20]
mov rcx, qword [rsp + 0x60]
lea rax, [rax + rcx + 8]
mov qword [rsp + 0x2d0], rax
mov rax, qword [rsp + 0x298]
mov rcx, qword [rsp + 0x88]
movzx edx, byte [rsp + 0x3f]
movzx ebx, byte [rsp + 0x40]
mov r8, qword [rsp + 0x328]
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x290]
mov r11, qword [rsp + 0x338]
mov r12, qword [rsp + 0x280]
mov r13, qword [rsp + 0x288]
mov rsi, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0x278]
jmp 0x448d59
mov rax, r14
mov r14, rdi
mov rdi, rsi
mov rsi, r14
jmp 0x44a142
mov rax, r14
mov r14, rdi
mov rdi, rsi
mov rsi, r14
jmp 0x44a142
mov rax, r14
mov r14, rdi
mov rdi, rsi
mov rsi, r14
jmp 0x44a142
mov rax, r14
mov r14, rdi
mov rdi, rsi
mov rsi, r14
jmp 0x44a142
mov rax, qword [rsp + 0x340]
movzx r14d, byte [rsp + 0x41]
jmp 0x448e67
mov rax, qword [rsp + 0x340]
movzx r14d, byte [rsp + 0x41]
jmp 0x448e67
mov rax, qword [rsp + 0x340]
test rax, rax
je 0x44a316
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0xf8], rax
call fcn.0042b400
lea rax, [0x008a7577]
mov qword [rsp], rax
mov qword [rsp + 8], 0x14
call fcn.0042bdc0
mov rax, qword [rsp + 0xf8]
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b6b0
call fcn.0042b490
mov rax, qword [rsp + 0x320]
mov rcx, qword [rax + 8]
mov rax, qword [rax]
mov qword [rsp], rax
mov qword [rsp + 8], rcx
lea rax, [rsp + 0x2a0]
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], 0
call fcn.0044b8f0
mov rax, qword [rsp + 0x340]
test rax, rax
jne 0x44a57b
mov qword [rsp + 0x358], 0
mov rbp, qword [rsp + 0x2f8]
add rsp, 0x300
ret
movzx ecx, byte [rsp + 0x41]
test cl, cl
jne 0x44a26d
test rax, rax
jmp 0x44a2f4
test rcx, rcx
sete dil
jmp 0x448acf
mov r9, qword [rbx + 0x40]
mov r8, qword [rbx + 0x38]
jmp 0x448a70
mov r9, r8
mov r8, qword [rsp + 0x310]
jmp 0x448a70
mov r9, r8
mov r8, qword [rsp + 0x310]
jmp 0x448a70
shr esi, 2
jmp 0x448a3b
mov rcx, qword [rsp + 0x340]
jmp 0x4489eb
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0xf0], rbx
mov qword [rsp + 0x88], r9
mov rax, qword [rdx + 0x98]
mov qword [rsp + 0x100], rax
call fcn.0042b400
lea rax, [0x0089812d]
mov qword [rsp], rax
mov qword [rsp + 8], 0xa
call fcn.0042bdc0
mov rax, qword [rsp + 0x100]
mov qword [rsp], rax
call fcn.0042bbe0
lea rax, [0x008988d5]
mov qword [rsp], rax
mov qword [rsp + 8], 0xb
call fcn.0042bdc0
mov rax, qword [rsp + 0xf8]
mov qword [rsp], rax
call fcn.0042bc50
lea rax, [0x0088c82d]
mov qword [rsp], rax
mov qword [rsp + 8], 5
call fcn.0042bdc0
mov rax, qword [rsp + 0xf0]
mov qword [rsp], rax
call fcn.0042bc50
call fcn.0042b6b0
call fcn.0042b490
mov rax, qword [rsp + 0x320]
mov rcx, qword [rax]
mov qword [rsp + 0xf8], rcx
mov rax, qword [rax + 8]
mov qword [rsp + 0xf0], rax
call fcn.0042b400
lea rax, [0x008927e4]
mov qword [rsp], rax
mov qword [rsp + 8], 8
call fcn.0042bdc0
mov rax, qword [rsp + 0xf8]
mov qword [rsp], rax
call fcn.0042bc50
lea rax, [0x0088ae5b]
mov qword [rsp], rax
mov qword [rsp + 8], 1
call fcn.0042bdc0
mov rax, qword [rsp + 0xf0]
mov qword [rsp], rax
call fcn.0042bc50
lea rax, [0x0088bbc3]
mov qword [rsp], rax
mov qword [rsp + 8], 4
call fcn.0042bdc0
mov rax, qword [rsp + 0x88]
mov qword [rsp], rax
call fcn.0042bbe0
lea rax, [0x0088c819]
mov qword [rsp], rax
mov qword [rsp + 8], 5
call fcn.0042bdc0
mov rax, qword [rsp + 0x338]
mov qword [rsp], rax
call fcn.0042bbe0
call fcn.0042b6b0
call fcn.0042b490
lea rax, [0x008b31d2]
mov qword [rsp], rax
mov qword [rsp + 8], 0x23
call fcn.0042ab20
ud2
lea rax, [0x008af0c7]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1d
call fcn.0042ab20
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
call fcn.004292d0
ud2
lea rax, [0x008a47e0]
mov qword [rsp], rax
mov qword [rsp + 8], 0x11
call fcn.0042ab20
ud2
lea rax, [0x0089858d]
mov qword [rsp], rax
mov qword [rsp + 8], 0xa
call fcn.0042ab20
ud2
lea rax, [0x008bb453]
mov qword [rsp], rax
mov qword [rsp + 8], 0x39
call fcn.0042ab20
ud2
lea rax, [0x008badca]
mov qword [rsp], rax
mov qword [rsp + 8], 0x37
call fcn.0042ab20
ud2
call fcn.00451b80
jmp fcn.00448990