Function at 0x4e3154
Capabilities:
Create process on windows
Get graphical window text

Disassembly:
mov rax, rsp
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r15
sub rsp, 0x3f0
mov qword [rsp + 0x2e0], 0xfffffffffffffffe
mov rsi, rcx
xor r15d, r15d
mov dword [rax + 0x10], r15d
mov rcx, qword [rcx + 0x270]
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
cmp eax, r15d
jle 0x4e4a74
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x1e0], rax
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x1e8], rax
mov word [rsp + 0x1a0], r15w
mov rcx, qword [rsi + 0x270]
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
inc eax
movsxd rcx, eax
lea eax, [r15 + 2]
mul rcx
lea rcx, [r15 - 1]
cmovo rax, rcx
mov rcx, rax
call fcn.006a43c4
mov rbx, rax
mov qword [rsp + 0x440], rax
mov rcx, qword [rsi + 0x270]
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
lea r8d, [rax + 1]
mov rdx, rbx
mov rcx, qword [rsi + 0x270]
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov rcx, qword [rsi + 0x270]
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
movsxd r8, eax
lea r9, [rsp + 0x430]
mov rdx, rbx
lea rcx, [rsp + 0xb0]
call fcn.0042100c
nop
mov rcx, qword [rsi + 0xf30]
sub rcx, qword [rsi + 0xf28]
movabs rax, 0x6666666666666667
imul rcx
mov r10, rdx
sar r10, 5
mov rax, r10
shr rax, 0x3f
lea r12d, [r15 + 1]
add r10, rax
mov qword [rsi + 0xf90], r10
je 0x4e32f1
cmp r10, r15
jbe 0x4e3365
mov r11, qword [rsi + 0xf28]
lea r9, [r10 + r10*4]
add r9, r9
mov rdx, qword [r11 + r9*8 - 0x10]
mov rcx, qword [rsp + 0xf0]
mov r8, qword [rsp + 0xf8]
sub rcx, r8
mov rax, rdx
sub rax, qword [r11 + r9*8 - 8]
xor rcx, rax
test rcx, 0xfffffffffffffffe
jne 0x4e32f1
mov rcx, qword [r11 + r9*8 - 8]
sub rdx, rcx
sar rdx, 1
je 0x4e32e9
movzx eax, word [r8]
cmp word [rcx], ax
jne 0x4e32dc
add rcx, 2
add r8, 2
sub rdx, r12
jne 0x4e32c4
jmp 0x4e32e9
cmp word [rcx], ax
sbb eax, eax
and eax, 0xfffffffe
add eax, r12d
jmp 0x4e32ec
mov eax, r15d
cmp eax, r15d
je 0x4e3365
lea rax, [r10 + 1]
mov qword [rsi + 0xf90], rax
mov rax, qword [rsi + 0xf30]
cmp rax, qword [rsi + 0xf38]
je 0x4e333c
mov qword [rsp + 0x430], rax
mov qword [rsp + 0x438], rax
cmp rax, r15
je 0x4e3332
lea rdx, [rsp + 0xb0]
mov rcx, rax
call fcn.004021f8
nop
add qword [rsi + 0xf30], 0x50
jmp 0x4e3365
mov byte [rsp + 0x28], r12b
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x430]
lea r8, [rsp + 0xb0]
mov rdx, rax
lea rcx, [rsi + 0xf28]
call fcn.0040827c
lea rcx, [rsi + 0xf40]
lea rax, [0x0085e850]
cmp rax, rcx
je 0x4e338b
mov r8, qword [0x0085e890]
mov rdx, qword [0x0085e898]
call fcn.00406d38
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x80]
call fcn.00402190
nop
lea r13, [rsi + 0xeb0]
mov r8, rax
mov rdx, r13
mov rcx, qword [0x008bb560]
call fcn.00612518
mov edi, eax
lea rax, [rsp + 0x80]
mov rcx, qword [rsp + 0xa8]
cmp rcx, rax
je 0x4e33f6
cmp rcx, r15
je 0x4e33f6
mov rdx, qword [rsp + 0x80]
sub rdx, rcx
cmp rdx, 0x100
jbe 0x4e33f1
call fcn.006a4944
jmp 0x4e33f6
call fcn.006a3610
cmp edi, r15d
je 0x4e34b4
cmp edi, r12d
jne 0x4e3419
lea rdx, [0x0078dc30]
mov rcx, qword [rsi + 0x270]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop
lea rax, [rsp + 0xb0]
mov rcx, qword [rsp + 0xf8]
cmp rcx, rax
je 0x4e345b
cmp rcx, r15
je 0x4e345b
mov rax, qword [rsp + 0xb0]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e3455
call fcn.006a4944
jmp 0x4e345b
call fcn.006a3610
nop
mov rcx, rbx
call fcn.006a5088
nop
lea rax, [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1e8]
cmp rcx, rax
je 0x4e4a74
cmp rcx, r15
je 0x4e4a74
mov rdx, qword [rsp + 0x1a0]
sub rdx, rcx
sar rdx, 1
add rdx, rdx
cmp rdx, 0x100
jbe 0x4e34aa
call fcn.006a4944
jmp 0x4e4a74
call fcn.006a3610
jmp 0x4e4a74
mov rdx, qword [rsp + 0xf8]
cmp word [rdx], 0x2f
jne 0x4e4916
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x340]
call fcn.004021f8
nop
lea rax, [rsp + 0x2f0]
mov qword [rsp + 0x330], rax
lea rax, [rsp + 0x2f0]
mov qword [rsp + 0x338], rax
mov word [rsp + 0x2f0], r15w
lea rax, [rsp + 0x290]
mov qword [rsp + 0x2d0], rax
lea rax, [rsp + 0x290]
mov qword [rsp + 0x2d8], rax
mov word [rsp + 0x290], r15w
lea rax, [rsp + 0x240]
mov qword [rsp + 0x280], rax
lea rax, [rsp + 0x240]
mov qword [rsp + 0x288], rax
mov word [rsp + 0x240], r15w
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x240]
lea r8, [rsp + 0x290]
lea rdx, [rsp + 0x2f0]
lea rcx, [rsp + 0xb0]
call fcn.0055d718
cmp al, r15b
je 0x4e35e3
mov rax, qword [rsp + 0x2d0]
cmp qword [rsp + 0x2d8], rax
je 0x4e35b8
mov dword [rsp + 0x430], r15d
lea r8, [rsp + 0x430]
lea rdx, [rsp + 0x290]
mov rcx, rsi
call fcn.004df0b8
mov rax, qword [rsp + 0x280]
cmp qword [rsp + 0x288], rax
je 0x4e48dd
lea rdx, [rsp + 0x240]
mov rcx, rsi
call fcn.004e54a4
jmp 0x4e48dd
lea r8, [rsp + 0x430]
mov rdx, qword [rsp + 0xf8]
lea rcx, [rsp + 0x150]
call fcn.004023b4
nop
mov edi, 3
lea rdx, str.clear
mov rcx, qword [rsp + 0x198]
call fcn.006e454c
cmp eax, r15d
je 0x4e36af
mov dword [rsp + 0x438], 7
lea r8, [rsp + 0x430]
mov rdx, qword [rsp + 0xf8]
lea rcx, [rsp + 0x100]
call fcn.004023b4
nop
mov edi, reloc.WS2_32.dll_ntohs
lea rdx, [0x00799370]
mov rcx, qword [rsp + 0x148]
call fcn.006e454c
cmp eax, r15d
je 0x4e36af
mov dword [rsp + 0x438], 0x1f
lea r8, [rsp + 0x430]
mov rdx, qword [rsp + 0xf8]
lea rcx, [rsp + 0x30]
call fcn.004023b4
mov edi, 0x3f
lea rdx, [0x00799378]
mov rcx, qword [rsp + 0x78]
call fcn.006e454c
cmp eax, r15d
je 0x4e36af
mov bpl, r15b
jmp 0x4e36b2
mov bpl, r12b
test dil, 0x20
je 0x4e36fa
and edi, 0xffffffdf
mov dword [rsp + 0x438], edi
lea rax, [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
cmp rcx, rax
je 0x4e36fa
cmp rcx, r15
je 0x4e36fa
mov rax, qword [rsp + 0x30]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e36f5
call fcn.006a4944
jmp 0x4e36fa
call fcn.006a3610
test dil, 0x10
je 0x4e3703
and edi, 0xffffffef
test dil, 8
je 0x4e3754
and edi, 0xfffffff7
mov dword [rsp + 0x438], edi
lea rax, [rsp + 0x100]
mov rcx, qword [rsp + 0x148]
cmp rcx, rax
je 0x4e3754
cmp rcx, r15
je 0x4e3754
mov rax, qword [rsp + 0x100]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e374f
call fcn.006a4944
jmp 0x4e3754
call fcn.006a3610
test dil, 4
je 0x4e375d
and edi, 0xfffffffb
test dil, 2
je 0x4e37a7
and edi, 0xfffffffd
lea rax, [rsp + 0x150]
mov rcx, qword [rsp + 0x198]
cmp rcx, rax
je 0x4e37a7
cmp rcx, r15
je 0x4e37a7
mov rax, qword [rsp + 0x150]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e37a2
call fcn.006a4944
jmp 0x4e37a7
call fcn.006a3610
test r12b, dil
je 0x4e37af
and edi, 0xfffffffe
cmp bpl, r15b
je 0x4e37cd
lea rdx, [0x0078dc30]
mov rcx, qword [rsi + 0x3d8]
call qword [sym.imp.USER32.dll_SetWindowTextW]
jmp 0x4e48dd
lea r8, [rsp + 0x430]
mov rdx, qword [rsp + 0xf8]
lea rcx, [rsp + 0x30]
call fcn.004023b4
lea rdx, [0x0079b5e0]
mov rcx, qword [rsp + 0x78]
call fcn.006e454c
cmp eax, r15d
sete bpl
lea rax, [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
cmp rcx, rax
je 0x4e3837
cmp rcx, r15
je 0x4e3837
mov rax, qword [rsp + 0x30]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e3832
call fcn.006a4944
jmp 0x4e3837
call fcn.006a3610
cmp bpl, r15b
je 0x4e395c
mov rax, qword [r13]
cmp rax, r15
je 0x4e3856
mov rax, qword [rax + 0x60]
mov rdx, qword [rax + 0x198]
jmp 0x4e3859
mov rdx, r15
cmp rdx, r15
je 0x4e38d2
lea rcx, [rsp + 0x80]
call fcn.0058ed64
nop
mov dword [rsp + 0x430], r15d
lea r8, [rsp + 0x430]
mov rdx, rax
mov rcx, rsi
call fcn.004e4a88
nop
lea rax, [rsp + 0x80]
mov rcx, qword [rsp + 0xa8]
cmp rcx, rax
je 0x4e48dd
cmp rcx, r15
je 0x4e48dd
mov rdx, qword [rsp + 0x80]
sub rdx, rcx
cmp rdx, 0x100
jbe 0x4e38c8
call fcn.006a4944
jmp 0x4e48dd
call fcn.006a3610
jmp 0x4e48dd
lea r8, [rsp + 0x430]
lea rdx, str._networks_not_configured
lea rcx, [rsp + 0x30]
call fcn.004023b4
nop
mov rcx, qword [0x00862ca0]
call fcn.0059b4dc
mov rdx, rax
mov byte [rsp + 0x20], r15b
mov r9d, 3
lea r8, [rsp + 0x30]
mov rcx, rsi
call fcn.004e4f74
nop
lea rax, [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
cmp rcx, rax
je 0x4e48dd
cmp rcx, r15
je 0x4e48dd
mov rax, qword [rsp + 0x30]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e3952
call fcn.006a4944
jmp 0x4e48dd
call fcn.006a3610
jmp 0x4e48dd
lea r8, [rsp + 0x430]
mov rdx, qword [rsp + 0xf8]
lea rcx, [rsp + 0x30]
call fcn.004023b4
lea rdx, str.grant
mov rcx, qword [rsp + 0x78]
call fcn.006e454c
cmp eax, r15d
sete bpl
lea rax, [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
cmp rcx, rax
je 0x4e39c6
cmp rcx, r15
je 0x4e39c6
mov rax, qword [rsp + 0x30]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e39c1
call fcn.006a4944
jmp 0x4e39c6
call fcn.006a3610
cmp bpl, r15b
je 0x4e39f4
mov r8d, 0x258
mov rdx, r13
mov rcx, qword [0x00862ce8]
call fcn.005d33a4
lea rdx, [0x00876700]
mov rcx, rsi
call fcn.004e54a4
jmp 0x4e48dd
lea r8, [rsp + 0x430]
mov rdx, qword [rsp + 0xf8]
lea rcx, [rsp + 0x30]
call fcn.004023b4
lea rdx, str.close
mov rcx, qword [rsp + 0x78]
call fcn.006e454c
cmp eax, r15d
sete bpl
lea rax, [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
cmp rcx, rax
je 0x4e3a5e
cmp rcx, r15
je 0x4e3a5e
mov rax, qword [rsp + 0x30]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e3a59
call fcn.006a4944
jmp 0x4e3a5e
call fcn.006a3610
cmp bpl, r15b
je 0x4e3a7c
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
mov rcx, qword [rsi + 8]
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x4e48dd
or edi, 0x40
lea r8, [rsp + 0x430]
mov rdx, qword [rsp + 0xf8]
lea rcx, [rsp + 0x100]
call fcn.004023b4
nop
bts edi, 7
lea rdx, str.favorite
mov rcx, qword [rsp + 0x148]
call fcn.006e454c
cmp eax, r15d
je 0x4e3afe
bts edi, 8
mov dword [rsp + 0x438], edi
lea r8, [rsp + 0x430]
mov rdx, qword [rsp + 0xf8]
lea rcx, [rsp + 0x30]
call fcn.004023b4
bts edi, 9
lea rdx, [0x00799448]
mov rcx, qword [rsp + 0x78]
call fcn.006e454c
cmp eax, r15d
je 0x4e3afe
mov bpl, r15b
jmp 0x4e3b01
mov bpl, r12b
bt edi, 9
jae 0x4e3b4a
btr edi, 9
mov dword [rsp + 0x438], edi
lea rax, [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
cmp rcx, rax
je 0x4e3b4a
cmp rcx, r15
je 0x4e3b4a
mov rax, qword [rsp + 0x30]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e3b45
call fcn.006a4944
jmp 0x4e3b4a
call fcn.006a3610
bt edi, 8
jae 0x4e3b54
btr edi, 8
test dil, dil
jns 0x4e3b9e
btr edi, 7
lea rax, [rsp + 0x100]
mov rcx, qword [rsp + 0x148]
cmp rcx, rax
je 0x4e3b9e
cmp rcx, r15
je 0x4e3b9e
mov rax, qword [rsp + 0x100]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e3b99
call fcn.006a4944
jmp 0x4e3b9e
call fcn.006a3610
test dil, 0x40
je 0x4e3ba7
and edi, 0xffffffbf
cmp bpl, r15b
je 0x4e3bd2
xor r8d, r8d
mov rdx, r13
mov rcx, qword [0x00862c98]
call fcn.005c8850
lea rdx, [0x0086b490]
mov rcx, rsi
call fcn.004e54a4
jmp 0x4e48dd
bts edi, 0xa
lea r8, [rsp + 0x430]
mov rdx, qword [rsp + 0xf8]
lea rcx, [rsp + 0x100]
call fcn.004023b4
nop
bts edi, 0xb
lea rdx, str.getlist
mov rcx, qword [rsp + 0x148]
call fcn.006e454c
cmp eax, r15d
je 0x4e3c55
bts edi, 0xc
mov dword [rsp + 0x438], edi
lea r8, [rsp + 0x430]
mov rdx, qword [rsp + 0xf8]
lea rcx, [rsp + 0x30]
call fcn.004023b4
bts edi, 0xd
lea rdx, [0x0079b62c]
mov rcx, qword [rsp + 0x78]
call fcn.006e454c
cmp eax, r15d
je 0x4e3c55
mov bpl, r15b
jmp 0x4e3c58
mov bpl, r12b
bt edi, 0xd
jae 0x4e3ca1
btr edi, 0xd
mov dword [rsp + 0x438], edi
lea rax, [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
cmp rcx, rax
je 0x4e3ca1
cmp rcx, r15
je 0x4e3ca1
mov rax, qword [rsp + 0x30]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e3c9c
call fcn.006a4944
jmp 0x4e3ca1
call fcn.006a3610
bt edi, 0xc
jae 0x4e3cab
btr edi, 0xc
bt edi, 0xb
jae 0x4e3cf6
btr edi, 0xb
lea rax, [rsp + 0x100]
mov rcx, qword [rsp + 0x148]
cmp rcx, rax
je 0x4e3cf6
cmp rcx, r15
je 0x4e3cf6
mov rax, qword [rsp + 0x100]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e3cf1
call fcn.006a4944
jmp 0x4e3cf6
call fcn.006a3610
bt edi, 0xa
jae 0x4e3d00
btr edi, 0xa
cmp bpl, r15b
je 0x4e3d68
lea rcx, [rsi + 0x108]
mov rax, qword [rcx]
lea rdx, [rsp + 0x80]
call qword [rax + reloc.WS2_32.dll_recv]
nop
mov rdi, qword [rsp + 0x80]
cmp rdi, qword [rsp + 0x88]
je 0x4e3d56
mov rax, qword [rdi]
cmp rax, r15
je 0x4e3d3b
lea rcx, [rax + 0x10]
jmp 0x4e3d3e
mov rcx, r15
mov edx, 8
call fcn.005935b8
add rdi, 8
cmp rdi, qword [rsp + 0x88]
jne 0x4e3d2d
lea rcx, [rsp + 0x80]
call fcn.00445244
jmp 0x4e48dd
lea r8, [rsp + 0x430]
mov rdx, qword [rsp + 0xf8]
lea rcx, [rsp + 0x30]
call fcn.004023b4
lea rdx, [0x00799498]
mov rcx, qword [rsp + 0x78]
call fcn.006e454c
cmp eax, r15d
sete bpl
lea rax, [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
cmp rcx, rax
je 0x4e3dd2
cmp rcx, r15
je 0x4e3dd2
mov rax, qword [rsp + 0x30]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e3dcd
call fcn.006a4944
jmp 0x4e3dd2
call fcn.006a3610
cmp bpl, r15b
je 0x4e41e9
lea rax, [rsp + 0x430]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x430]
lea r8, [rsp + 0x430]
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.00415c3c
nop
lea rdx, [rsp + 0x80]
mov rcx, qword [r13]
call fcn.005daf34
mov rdi, rax
lea rdx, str.hubNI
lea rcx, [rsp + 0x30]
call fcn.005407dc
cmp rdi, rax
je 0x4e3e40
mov r8, qword [rdi + 0x20]
mov rdx, qword [rdi + 0x28]
mov rcx, rax
call fcn.0040289c
nop
lea rax, [rsp + 0x80]
mov rcx, qword [rsp + 0xa8]
cmp rcx, rax
je 0x4e3e84
cmp rcx, r15
je 0x4e3e7d
mov rdx, qword [rsp + 0x80]
sub rdx, rcx
mov ebp, 0x100
cmp rdx, rbp
jbe 0x4e3e76
call fcn.006a4944
jmp 0x4e3e89
call fcn.006a3610
jmp 0x4e3e89
mov ebp, 0x100
jmp 0x4e3e89
mov ebp, 0x100
lea rdx, [rsp + 0x80]
mov rcx, qword [r13]
call fcn.00415ee0
mov rdi, rax
lea rdx, str.hubURL
lea rcx, [rsp + 0x30]
call fcn.005407dc
cmp rdi, rax
je 0x4e3ec4
mov r8, qword [rdi + 0x20]
mov rdx, qword [rdi + 0x28]
mov rcx, rax
call fcn.0040289c
nop
lea rax, [rsp + 0x80]
mov rcx, qword [rsp + 0xa8]
cmp rcx, rax
je 0x4e3efa
cmp rcx, r15
je 0x4e3efa
mov rdx, qword [rsp + 0x80]
sub rdx, rcx
cmp rdx, rbp
jbe 0x4e3ef5
call fcn.006a4944
jmp 0x4e3efa
call fcn.006a3610
lea rdx, [rsp + 0x80]
mov rcx, qword [r13]
call fcn.00414e04
mov rdi, rax
lea rdx, str.userNI
lea rcx, [rsp + 0x30]
call fcn.005407dc
cmp rdi, rax
je 0x4e3f35
mov r8, qword [rdi + 0x20]
mov rdx, qword [rdi + 0x28]
mov rcx, rax
call fcn.0040289c
nop
lea rax, [rsp + 0x80]
mov rcx, qword [rsp + 0xa8]
cmp rcx, rax
je 0x4e3f6b
cmp rcx, r15
je 0x4e3f6b
mov rdx, qword [rsp + 0x80]
sub rdx, rcx
cmp rdx, rbp
jbe 0x4e3f66
call fcn.006a4944
jmp 0x4e3f6b
call fcn.006a3610
mov rcx, qword [r13]
test byte [rcx + 0x18], 0x10
je 0x4e3fe6
add rcx, 0x2c
lea rdx, [rsp + 0x3c0]
call fcn.00414f58
mov rdi, rax
lea rdx, str.userCID
lea rcx, [rsp + 0x30]
call fcn.005407dc
cmp rdi, rax
je 0x4e3fb0
mov r8, qword [rdi + 0x20]
mov rdx, qword [rdi + 0x28]
mov rcx, rax
call fcn.0040289c
nop
lea rax, [rsp + 0x3c0]
mov rcx, qword [rsp + 0x3e8]
cmp rcx, rax
je 0x4e3fe6
cmp rcx, r15
je 0x4e3fe6
mov rdx, qword [rsp + 0x3c0]
sub rdx, rcx
cmp rdx, rbp
jbe 0x4e3fe1
call fcn.006a4944
jmp 0x4e3fe6
call fcn.006a3610
mov rcx, qword [r13]
cmp rcx, r15
je 0x4e4025
call fcn.005db44c
cmp byte [rax + 0x2e10], r15b
jne 0x4e4015
mov rcx, qword [rax + 0x30]
cmp rcx, r15
je 0x4e4015
mov edx, 0x18
call fcn.004083bc
mov rbp, rax
jmp 0x4e401c
lea rbp, [rax + 0x4b8]
mov rdi, qword [0x00862cb8]
jmp 0x4e4057
mov rdi, qword [0x00862cb8]
cmp byte [rdi + 0x2e98], r15b
jne 0x4e4050
mov rcx, qword [rdi + 0xb8]
cmp rcx, r15
je 0x4e4050
mov edx, 0x18
call fcn.004083bc
mov rbp, rax
jmp 0x4e4057
lea rbp, [rdi + 0x540]
mov rcx, qword [r13]
cmp rcx, r15
je 0x4e408f
call fcn.005db44c
cmp byte [rax + 0x2e0e], r15b
jne 0x4e4086
mov rcx, qword [rax + 0x30]
cmp rcx, r15
je 0x4e4086
mov edx, reloc.WS2_32.dll_shutdown
call fcn.004083bc
mov rdi, rax
jmp 0x4e40ba
lea rdi, [rax + 0x458]
jmp 0x4e40ba
cmp byte [rdi + 0x2e96], r15b
jne 0x4e40b3
mov rcx, qword [rdi + 0xb8]
cmp rcx, r15
je 0x4e40b3
mov edx, reloc.WS2_32.dll_shutdown
call fcn.004083bc
mov rdi, rax
jmp 0x4e40ba
add rdi, 0x4e0
xor r9d, r9d
lea r8, [rsp + 0x30]
mov rdx, rbp
lea rcx, [rsp + 0x150]
call fcn.0058b150
nop
mov r8, rax
mov rdx, rdi
lea rcx, [rsp + 0x100]
call fcn.00402448
mov rdx, rax
lea rcx, [rsp + 0x390]
call fcn.0058904c
nop
mov rdx, rax
lea rcx, [rsp + 0x1f0]
call fcn.00401f00
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov r8, qword [rax + 0x48]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea r11, [rsp + 0x1f0]
mov rcx, qword [rsp + 0x238]
cmp rcx, r11
je 0x4e4164
cmp rcx, r15
je 0x4e4164
mov rax, qword [rsp + 0x1f0]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e415e
call fcn.006a4944
jmp 0x4e4164
call fcn.006a3610
nop
lea rax, [rsp + 0x390]
mov rcx, qword [rsp + 0x3b8]
cmp rcx, rax
je 0x4e419f
cmp rcx, r15
je 0x4e419f
mov rdx, qword [rsp + 0x390]
sub rdx, rcx
cmp rdx, 0x100
jbe 0x4e4199
call fcn.006a4944
jmp 0x4e419f
call fcn.006a3610
nop
lea rax, [rsp + 0x150]
mov rcx, qword [rsp + 0x178]
cmp rcx, rax
je 0x4e41da
cmp rcx, r15
je 0x4e41da
mov rdx, qword [rsp + 0x150]
sub rdx, rcx
cmp rdx, 0x100
jbe 0x4e41d4
call fcn.006a4944
jmp 0x4e41da
call fcn.006a3610
nop
lea rcx, [rsp + 0x30]
call fcn.00415b98
jmp 0x4e48dd
lea r8, [rsp + 0x430]
mov rdx, qword [rsp + 0xf8]
lea rcx, [rsp + 0x30]
call fcn.004023b4
lea rdx, str.stats
mov rcx, qword [rsp + 0x78]
call fcn.006e454c
cmp eax, r15d
sete bpl
lea rax, [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
cmp rcx, rax
je 0x4e4253
cmp rcx, r15
je 0x4e4253
mov rax, qword [rsp + 0x30]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e424e
call fcn.006a4944
jmp 0x4e4253
call fcn.006a3610
cmp bpl, r15b
je 0x4e432c
lea rcx, [rsp + 0x150]
call fcn.00568160
nop
mov rdx, rax
lea rcx, [rsp + 0x1f0]
call fcn.00401f00
mov rdi, rax
mov rcx, qword [0x00862ca0]
call fcn.0059b4dc
mov rdx, rax
mov byte [rsp + 0x20], r15b
xor r9d, r9d
mov r8, rdi
mov rcx, rsi
call fcn.004e4f74
nop
lea rax, [rsp + 0x1f0]
mov rcx, qword [rsp + 0x238]
cmp rcx, rax
je 0x4e42e2
cmp rcx, r15
je 0x4e42e2
mov rax, qword [rsp + 0x1f0]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e42dc
call fcn.006a4944
jmp 0x4e42e2
call fcn.006a3610
nop
lea rax, [rsp + 0x150]
mov rcx, qword [rsp + 0x178]
cmp rcx, rax
je 0x4e48dd
cmp rcx, r15
je 0x4e48dd
mov rdx, qword [rsp + 0x150]
sub rdx, rcx
cmp rdx, 0x100
jbe 0x4e4322
call fcn.006a4944
jmp 0x4e48dd
call fcn.006a3610
jmp 0x4e48dd
lea r8, [rsp + 0x430]
mov rdx, qword [rsp + 0xf8]
lea rcx, [rsp + 0x30]
call fcn.004023b4
lea rdx, str.pubstats
mov rcx, qword [rsp + 0x78]
call fcn.006e454c
cmp eax, r15d
sete bpl
lea rax, [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
cmp rcx, rax
je 0x4e4396
cmp rcx, r15
je 0x4e4396
mov rax, qword [rsp + 0x30]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e4391
call fcn.006a4944
jmp 0x4e4396
call fcn.006a3610
cmp bpl, r15b
je 0x4e440f
lea rcx, [rsp + 0x150]
call fcn.00568160
nop
mov dword [rsp + 0x430], r15d
lea r8, [rsp + 0x430]
mov rdx, rax
mov rcx, rsi
call fcn.004e4a88
nop
lea rax, [rsp + 0x150]
mov rcx, qword [rsp + 0x178]
cmp rcx, rax
je 0x4e48dd
cmp rcx, r15
je 0x4e48dd
mov rdx, qword [rsp + 0x150]
sub rdx, rcx
cmp rdx, 0x100
jbe 0x4e4405
call fcn.006a4944
jmp 0x4e48dd
call fcn.006a3610
jmp 0x4e48dd
bts edi, 0xe
lea r8, [rsp + 0x430]
mov rdx, qword [rsp + 0xf8]
lea rcx, [rsp + 0x100]
call fcn.004023b4
nop
bts edi, 0xf
lea rdx, str.help
mov rcx, qword [rsp + 0x148]
call fcn.006e454c
cmp eax, r15d
je 0x4e4490
bts edi, 0x10
mov dword [rsp + 0x438], edi
lea r8, [rsp + 0x430]
mov rdx, qword [rsp + 0xf8]
lea rcx, [rsp + 0x30]
call fcn.004023b4
bts edi, 0x11
lea rdx, [0x00799504]
mov rcx, qword [rsp + 0x78]
call fcn.006e454c
cmp eax, r15d
je 0x4e4490
mov r12b, r15b
bt edi, 0x11
jae 0x4e44d9
btr edi, 0x11
mov dword [rsp + 0x438], edi
lea rax, [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
cmp rcx, rax
je 0x4e44d9
cmp rcx, r15
je 0x4e44d9
mov rax, qword [rsp + 0x30]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e44d4
call fcn.006a4944
jmp 0x4e44d9
call fcn.006a3610
bt edi, 0x10
jae 0x4e44e3
btr edi, 0x10
bt edi, 0xf
jae 0x4e452a
lea rax, [rsp + 0x100]
mov rcx, qword [rsp + 0x148]
cmp rcx, rax
je 0x4e452a
cmp rcx, r15
je 0x4e452a
mov rax, qword [rsp + 0x100]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e4525
call fcn.006a4944
jmp 0x4e452a
call fcn.006a3610
cmp r12b, r15b
je 0x4e45c8
lea r8, [0x00867e10]
lea rdx, [0x00799508]
lea rcx, [rsp + 0x1f0]
call fcn.00420494
mov rdi, rax
mov rcx, qword [0x00862ca0]
call fcn.0059b4dc
mov rdx, rax
mov byte [rsp + 0x20], r15b
mov r9d, 3
mov r8, rdi
mov rcx, rsi
call fcn.004e4f74
nop
lea rax, [rsp + 0x1f0]
mov rcx, qword [rsp + 0x238]
cmp rcx, rax
je 0x4e48dd
cmp rcx, r15
je 0x4e48dd
mov rax, qword [rsp + 0x1f0]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e45be
call fcn.006a4944
jmp 0x4e48dd
call fcn.006a3610
jmp 0x4e48dd
lea r8, [rsp + 0x430]
mov rdx, qword [rsp + 0xf8]
lea rcx, [rsp + 0x30]
call fcn.004023b4
lea rdx, [0x0079951c]
mov rcx, qword [rsp + 0x78]
call fcn.006e454c
cmp eax, r15d
sete dil
lea rax, [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
cmp rcx, rax
je 0x4e4632
cmp rcx, r15
je 0x4e4632
mov rax, qword [rsp + 0x30]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e462d
call fcn.006a4944
jmp 0x4e4632
call fcn.006a3610
cmp dil, r15b
je 0x4e4659
mov r8, qword [rsp + 0x380]
mov rdx, qword [rsp + 0x388]
lea rcx, [rsp + 0x1a0]
call fcn.00406d38
jmp 0x4e48dd
lea r8, [rsp + 0x430]
mov rdx, qword [rsp + 0xf8]
lea rcx, [rsp + 0x30]
call fcn.004023b4
lea rdx, [0x0079b638]
mov rcx, qword [rsp + 0x78]
call fcn.006e454c
cmp eax, r15d
sete dil
lea rax, [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
cmp rcx, rax
je 0x4e46c3
cmp rcx, r15
je 0x4e46c3
mov rax, qword [rsp + 0x30]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e46be
call fcn.006a4944
jmp 0x4e46c3
call fcn.006a3610
cmp dil, r15b
je 0x4e4820
mov rax, qword [0x00862cb8]
cmp byte [rax + 0x3241], r15b
jne 0x4e46f7
mov rcx, qword [rax + 0xb8]
cmp rcx, r15
je 0x4e46f7
mov edx, 0x3c1
call fcn.004713d8
mov r11, rax
jmp 0x4e46fe
mov r11, qword [rax + 0x2e68]
movabs rax, 0x80000013000002d3
imul r11
add rdx, r11
sar rdx, 0x1e
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul edx, edx, 0x7fffffed
sub r11d, edx
mov r8d, r11d
mov edx, 0x457b1
mov rcx, qword [0x008bb630]
call fcn.0062f8d4
movsxd rdx, eax
imul rdx, rdx, 0x7fffffee
movabs rax, 0x87ffffebd
add rdx, rax
lea rcx, [rsp + 0x30]
call fcn.00407e58
nop
mov r8, rax
lea rdx, str.DHPK:
lea rcx, [rsp + 0x1f0]
call fcn.00420494
nop
lea rcx, [rsp + 0x1a0]
cmp rax, rcx
je 0x4e4796
mov r8, qword [rax + 0x40]
mov rdx, qword [rax + 0x48]
lea rcx, [rsp + 0x1a0]
call fcn.00406d38
nop
lea rax, [rsp + 0x1f0]
mov rcx, qword [rsp + 0x238]
cmp rcx, rax
je 0x4e47d8
cmp rcx, r15
je 0x4e47d8
mov rax, qword [rsp + 0x1f0]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e47d2
call fcn.006a4944
jmp 0x4e47d8
call fcn.006a3610
nop
lea rax, [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
cmp rcx, rax
je 0x4e48dd
cmp rcx, r15
je 0x4e48dd
mov rax, qword [rsp + 0x30]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, 0x100
jbe 0x4e4816
call fcn.006a4944
jmp 0x4e48dd
call fcn.006a3610
jmp 0x4e48dd
mov rcx, qword [r13]
cmp rcx, r15
je 0x4e4854
call fcn.005db44c
cmp byte [rax + 0x3052], r15b
jne 0x4e484c
mov rcx, qword [rax + 0x30]
cmp rcx, r15
je 0x4e484c
mov edx, 0x25a
call fcn.0041024c
jmp 0x4e4882
mov al, byte [rax + 0x2c73]
jmp 0x4e4882
mov rax, qword [0x00862cb8]
cmp byte [rax + 0x30da], r15b
jne 0x4e487c
mov rcx, qword [rax + 0xb8]
cmp rcx, r15
je 0x4e487c
mov edx, 0x25a
call fcn.0041024c
jmp 0x4e4882
mov al, byte [rax + 0x2cfb]
cmp al, r15b
je 0x4e48a6
mov r8, qword [rsp + 0x380]
mov rdx, qword [rsp + 0x388]
lea rcx, [rsp + 0x1a0]
call fcn.00406d38
jmp 0x4e48dd
lea r8, [rsp + 0x340]
lea rdx, [0x008779c0]
lea rcx, [rsp + 0x1f0]
call fcn.0040fc8c
nop
mov rdx, rax
mov rcx, rsi
call fcn.004e54a4
nop
lea rcx, [rsp + 0x1f0]
call fcn.00402278
nop
lea rcx, [rsp + 0x240]
call fcn.00402278
nop
lea rcx, [rsp + 0x290]
call fcn.00402278
nop
lea rcx, [rsp + 0x2f0]
call fcn.00402278
nop
lea rcx, [rsp + 0x340]
call fcn.00402278
jmp 0x4e492b
mov r8, qword [rsp + 0xf0]
lea rcx, [rsp + 0x1a0]
call fcn.00406d38
mov rax, qword [rsp + 0x1e0]
cmp qword [rsp + 0x1e8], rax
jne 0x4e4956
lea rdx, [0x0078dc30]
mov rcx, qword [rsi + 0x270]
call qword [sym.imp.USER32.dll_SetWindowTextW]
jmp 0x4e4a50
mov rax, qword [r13]
test byte [rax + 0x18], 2
je 0x4e4999
mov dword [rsp + 0x430], r15d
lea r8, [rsp + 0x430]
lea rdx, [rsp + 0x1a0]
mov rcx, rsi
call fcn.004df0b8
lea rdx, [0x0078dc30]
mov rcx, qword [rsi + 0x270]
call qword [sym.imp.USER32.dll_SetWindowTextW]
jmp 0x4e4a50
mov r9, qword [0x008783b8]
xor r8d, r8d
mov edx, 0x40b
mov rcx, qword [rsi + 0x1c0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, 0x24
mov r8, qword [0x00878318]
mov rdx, qword [0x0087cf58]
mov rcx, qword [rsi + 8]
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x4e4a50
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x150]
call fcn.00402190
nop
mov r8, rax
mov rdx, r13
mov rcx, qword [0x00862c98]
call fcn.005c98fc
nop
lea rax, [rsp + 0x150]
mov rcx, qword [rsp + 0x178]
cmp rcx, rax
je 0x4e4a3b
cmp rcx, r15
je 0x4e4a3b
mov rdx, qword [rsp + 0x150]
sub rdx, rcx
cmp rdx, 0x100
jbe 0x4e4a36
call fcn.006a4944
jmp 0x4e4a3b
call fcn.006a3610
lea rdx, [0x0078dc30]
mov rcx, qword [rsi + 0x270]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop
lea rcx, [rsp + 0xb0]
call fcn.00402278
nop
mov rcx, rbx
call fcn.006a5088
nop
lea rcx, [rsp + 0x1a0]
call fcn.00402278
add rsp, 0x3f0
pop r15
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret