Function at 0x1402c1ea0
Capabilities:
Check os version
Move file
Shutdown system

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x30c0
call sub.ntdll.dll___chkstk
sub rsp, rax
mov qword [rsp + 0x70], 0xfffffffffffffffe
mov qword [rsp + 0x3110], rbx
mov rax, qword [0x14042d950]
xor rax, rsp
mov qword [rsp + 0x30b0], rax
mov rdi, rcx
mov qword [rsp + 0x98], rcx
mov r8d, 0x18f8
call sub.ntdll.dll_memcpy
cmp dword [rdi + 0x10f0], 0
je 0x1402c1f26
call fcn.140049500
mov rdi, qword [rax]
lea rdx, str.1199
mov rcx, rax
call qword [rdi]
mov rdx, rax
lea rcx, [0x14037d7f0]
call qword [sym.imp.MSVCR80.dll_wprintf]
xor eax, eax
jmp 0x1402c2cad
mov eax, dword [rdi]
test eax, eax
jne 0x1402c1f3f
mov rcx, rdi
call fcn.1402bcd60
mov ebp, eax
mov dword [rsp + 0x30], eax
jmp 0x1402c2056
cmp eax, 2
jne 0x1402c1f57
mov rcx, rdi
call fcn.1402c1510
mov ebp, eax
mov dword [rsp + 0x30], eax
jmp 0x1402c2056
cmp eax, 1
jne 0x1402c1f6f
mov rcx, rdi
call fcn.1402c0f00
mov ebp, eax
mov dword [rsp + 0x30], eax
jmp 0x1402c2056
cmp eax, 5
jne 0x1402c1f87
mov rcx, rdi
call fcn.1402bf360
mov ebp, eax
mov dword [rsp + 0x30], eax
jmp 0x1402c2056
cmp dword [rdi + 0xa0], 0
je 0x1402c1f9d
mov rcx, rdi
call fcn.1402bb9d0
jmp 0x1402c2cad
mov ecx, dword [rdi + 0xb8]
test ecx, ecx
je 0x1402c1fbf
cmp eax, 7
jne 0x1402c1fbf
mov rcx, rdi
call fcn.1402bf870
mov ebp, eax
mov dword [rsp + 0x30], eax
jmp 0x1402c2056
test ecx, ecx
jne 0x1402c1fd8
cmp eax, 7
jne 0x1402c1fd8
mov rcx, rdi
call fcn.1402c02a0
mov ebp, eax
mov dword [rsp + 0x30], eax
jmp 0x1402c2056
cmp dword [rdi + 0xbc], 0
je 0x1402c1fee
mov rcx, rdi
call fcn.1402be800
jmp 0x1402c2cad
cmp eax, 6
jne 0x1402c2003
mov rcx, rdi
call fcn.1402be3a0
mov ebp, eax
mov dword [rsp + 0x30], eax
jmp 0x1402c2056
cmp eax, 9
jne 0x1402c2018
mov rcx, rdi
call fcn.1402bca30
mov ebp, eax
mov dword [rsp + 0x30], eax
jmp 0x1402c2056
cmp eax, 0x18
jne 0x1402c202d
mov rcx, rdi
call fcn.1402bafe0
mov ebp, eax
mov dword [rsp + 0x30], eax
jmp 0x1402c2056
cmp eax, 4
jne 0x1402c2042
mov rcx, rdi
call fcn.1402bdf70
mov ebp, eax
mov dword [rsp + 0x30], eax
jmp 0x1402c2056
mov dword [rdi], 0x16
mov rcx, rdi
call fcn.1402bad60
mov ebp, eax
mov dword [rsp + 0x30], eax
test ebp, ebp
jne 0x1402c2061
xor eax, eax
jmp 0x1402c2cad
call fcn.1400494c0
mov rsi, rax
mov qword [rsp + 0x40], rax
xor r12d, r12d
mov edi, r12d
mov dword [rsp + 0x38], r12d
mov r15d, r12d
nop
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
lea rcx, [rsp + 0x50]
call fcn.1402c1a00
mov rcx, qword [rsp + 0x58]
test rcx, rcx
jne 0x1402c20a8
mov rax, r12
jmp 0x1402c20b4
mov rax, qword [rsp + 0x60]
sub rax, rcx
sar rax, 2
mov edx, r12d
test rax, rax
setne dl
cmp edi, 3
jge 0x1402c2469
test edx, edx
je 0x1402c2454
mov eax, dword [0x140c47dc0]
test al, 1
jne 0x1402c20f2
or eax, 1
mov dword [0x140c47dc0], eax
call fcn.1400554f0
mov r13, rax
mov qword [0x140c47db8], rax
jmp 0x1402c20f9
mov r13, qword [0x140c47db8]
mov rax, qword [r13]
mov rcx, r13
call qword [rax + reloc.MFC80U.DLL_Ordinal_320]
mov r14d, r12d
mov rbp, r12
nop
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x58]
test rcx, rcx
jne 0x1402c2124
mov rdi, r12
jmp 0x1402c212e
mov rdi, rdx
sub rdi, rcx
sar rdi, 2
movsxd rax, r14d
cmp rax, rdi
jae 0x1402c23c8
test rcx, rcx
je 0x1402c214b
sub rdx, rcx
sar rdx, 2
cmp rbp, rdx
jb 0x1402c2156
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rcx, qword [rsp + 0x58]
mov ebx, dword [rcx + rbp*4]
mov rax, qword [r13]
mov edx, ebx
mov rcx, r13
call qword [rax + 0xe0]
mov rdi, rax
mov ecx, dword [rax]
cmp ecx, 0xb
je 0x1402c226f
cmp ecx, 9
je 0x1402c226f
cmp ecx, 0xd
je 0x1402c226f
mov rax, qword [r13]
mov edx, ebx
mov rcx, r13
call qword [rax + reloc.MFC80U.DLL_Ordinal_296]
movzx ebx, ax
call fcn.140049400
mov rdi, rax
mov word [rsp + 0xb0], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0xb2]
call sub.ntdll.dll_memset
mov r8d, Ordinal_265
lea rdx, [rsp + 0xb0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rsp + 0xb0]
call qword [sym.imp.ntdll.dll__wcsupr]
cmp bx, word [rsp + 0xb0]
jne 0x1402c2207
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x80]
cmp ax, bx
mov eax, 1
cmovne r15d, eax
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x80]
cmp ax, bx
je 0x1402c2233
cmp bx, word [rsp + 0xb0]
je 0x1402c2233
mov rax, qword [rdi]
movzx r8d, bx
or rdx, 0xffffffffffffffff
mov rcx, rdi
call qword [rax + 0x28]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x80]
cmp ax, bx
jne 0x1402c23bb
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x20]
test eax, eax
je 0x1402c23bb
mov rax, qword [rdi]
movzx r8d, bx
or rdx, 0xffffffffffffffff
mov rcx, rdi
call qword [rax + 0x28]
jmp 0x1402c23bb
mov eax, dword [0x140c47dd0]
test al, 1
jne 0x1402c2293
or eax, 1
mov dword [0x140c47dd0], eax
call fcn.140055490
mov rcx, rax
mov qword [0x140c47dc8], rax
jmp 0x1402c229a
mov rcx, qword [0x140c47dc8]
mov esi, dword [rdi + 0x10]
mov rax, qword [rcx]
mov rdx, qword [rdi + 8]
call qword [rax + 0x48]
mov rbx, rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
mov rdi, rax
test rax, rax
je 0x1402c22ee
nop
nop
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x50]
cmp eax, esi
je 0x1402c22e0
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x20]
mov rdi, rax
test rax, rax
jne 0x1402c22c0
jmp 0x1402c22ee
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x78]
mov rbx, rax
jmp 0x1402c22f1
mov rbx, r12
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x30]
mov rdi, rax
test rax, rax
je 0x1402c23b6
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x78]
test al, al
je 0x1402c239a
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x50]
movzx edi, ax
call fcn.140049400
mov rsi, rax
mov word [rsp + 0xb0], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0xb2]
call sub.ntdll.dll_memset
mov r8d, Ordinal_265
lea rdx, [rsp + 0xb0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rsp + 0xb0]
call qword [sym.imp.ntdll.dll__wcsupr]
mov rdx, qword [rsi]
mov rcx, rsi
call qword [rdx + 0x80]
cmp ax, di
je 0x1402c23af
cmp di, word [rsp + 0xb0]
je 0x1402c23af
mov rax, qword [rsi]
movzx r8d, di
or rdx, 0xffffffffffffffff
mov rcx, rsi
call qword [rax + 0x28]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x38]
mov rdi, rax
test rax, rax
jne 0x1402c2306
mov rsi, qword [rsp + 0x40]
jmp 0x1402c23bb
mov rsi, qword [rsp + 0x40]
add r14d, 1
add rbp, 1
jmp 0x1402c2110
mov rbx, rdx
cmp rcx, rdx
jbe 0x1402c23e0
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x58]
mov rdi, rcx
cmp rcx, rdx
jbe 0x1402c23f8
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x58]
cmp rdi, rbx
je 0x1402c2436
sub rdx, rbx
sar rdx, 2
lea rax, [rdx*4]
lea rsi, [rdi + rax]
test rdx, rdx
jle 0x1402c242c
mov r9, rax
mov r8, rbx
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.MSVCR80.dll_memmove_s]
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x60], rsi
mov rsi, qword [rsp + 0x40]
mov edi, dword [rsp + 0x38]
add edi, 1
mov dword [rsp + 0x38], edi
test rcx, rcx
je 0x1402c2080
call sub.MFC80U.DLL_Ordinal_776
jmp 0x1402c2080
test rcx, rcx
je 0x1402c245e
call sub.MFC80U.DLL_Ordinal_776
test r15d, r15d
je 0x1402c2a13
jmp 0x1402c2473
test rcx, rcx
je 0x1402c2473
call sub.MFC80U.DLL_Ordinal_776
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x20]
test eax, eax
jne 0x1402c2a13
lea rcx, [rsp + 0x38]
call qword [sym.imp.MFC80U.DLL_Ordinal_296]
nop
mov rax, qword [rsp + 0x98]
cmp dword [rax + 0xdc], 0
jne 0x1402c256b
lea rcx, [rsp + 0x30]
call qword [sym.imp.MFC80U.DLL_Ordinal_296]
nop
call fcn.140049500
mov rdi, qword [rax]
lea rdx, str.0109
mov rcx, rax
call qword [rdi]
mov rdx, rax
lea rcx, [rsp + 0x30]
call qword [sym.imp.MFC80U.DLL_Ordinal_788]
lea rcx, [rsp + 0x30]
call qword [sym.imp.MFC80U.DLL_Ordinal_2492]
mov rcx, rax
call qword [sym.imp.MSVCR80.dll_wprintf]
call fcn.140049500
mov rdi, qword [rax]
lea rdx, [0x14037d830]
mov rcx, rax
call qword [rdi]
mov rdx, rax
lea rcx, [rsp + 0x30]
call qword [sym.imp.MFC80U.DLL_Ordinal_788]
lea rcx, [0x140378094]
call qword [sym.imp.MSVCR80.dll_wprintf]
mov edi, 0x1e
nop
nop
lea rcx, [rsp + 0x30]
call qword [sym.imp.MFC80U.DLL_Ordinal_2492]
mov rdx, rax
mov r8, rdi
lea rcx, [0x14037d840]
call qword [sym.imp.MSVCR80.dll_wprintf]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
sub rdi, 1
test rdi, rdi
jg 0x1402c2520
lea rcx, [0x1403780ec]
call qword [sym.imp.MSVCR80.dll_wprintf]
nop
lea rcx, [rsp + 0x30]
call qword [sym.imp.MFC80U.DLL_Ordinal_588]
lea rdx, [0x14037810c]
lea rcx, [rsp + 0x38]
call qword [sym.imp.MFC80U.DLL_Ordinal_788]
xor edx, edx
mov r8d, Ordinal_280
lea rcx, [rsp + 0xb0]
call sub.ntdll.dll_memset
mov dword [rsp + 0xb0], Ordinal_280
lea rcx, [rsp + 0xb0]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [rsp + 0xb4], 6
jb 0x1402c265a
mov edx, reloc.MFC80U.DLL_Ordinal_512
lea rcx, [rsp + 0x4b0]
call qword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
mov word [rsp + 0xcb0], 0
xor edx, edx
mov r8d, reloc.MFC80U.DLL_Ordinal_1022
lea rcx, [rsp + 0xcb2]
call sub.ntdll.dll_memset
lea r8, [rsp + 0x4b0]
lea rdx, str._s_bootstat.dat
lea rcx, [rsp + 0xcb0]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov word [rsp + 0xb0], 0
xor edx, edx
mov r8d, reloc.MFC80U.DLL_Ordinal_1022
lea rcx, [rsp + 0xb2]
call sub.ntdll.dll_memset
lea r8, [rsp + 0x4b0]
lea rdx, str._s_bootstat2.dat
lea rcx, [rsp + 0xb0]
call qword [sym.imp.MSVCR80.dll__swprintf]
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0xcb0]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
call fcn.1402ba590
test eax, eax
jne 0x1402c2796
call fcn.140049470
mov rsi, rax
xor edx, edx
mov r8d, 0x80
lea rbx, [0x140c492d0]
mov rcx, rbx
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, [0x14037d850]
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
je 0x1402c2733
mov byte [rsp + 0x98], 0
xor eax, eax
mov qword [rsp + 0x99], rax
mov word [rsp + 0xa1], ax
mov byte [rsp + 0xa3], al
mov r8d, reloc.MFC80U.DLL_Ordinal_431
lea rdx, [0x14037f684]
lea rcx, [rsp + 0x98]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rbx
sub rcx, rdx
nop
nop
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x1402c26f0
mov rdi, rbx
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x98]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1402c2720
mov r12, rbx
mov rax, qword [rsi]
mov r8, r12
lea rdx, [0x14037d868]
mov rcx, rsi
call qword [rax + 0x10]
call fcn.140049500
mov rdi, qword [rax]
lea rdx, [0x14037d8a8]
mov rcx, rax
call qword [rdi]
mov rdx, rax
lea rcx, [rsp + 0x38]
call qword [sym.imp.MFC80U.DLL_Ordinal_788]
lea rcx, [rsp + 0x38]
call qword [sym.imp.MFC80U.DLL_Ordinal_2492]
mov rdx, rax
lea rcx, [0x14037d8b8]
call qword [sym.imp.MSVCR80.dll_wprintf]
nop
lea rcx, [rsp + 0x38]
call qword [sym.imp.MFC80U.DLL_Ordinal_588]
xor eax, eax
jmp 0x1402c2cad
mov eax, dword [0x140c47dc0]
test al, 1
jne 0x1402c27ba
or eax, 1
mov dword [0x140c47dc0], eax
call fcn.1400554f0
mov rbx, rax
mov qword [0x140c47db8], rax
jmp 0x1402c27c1
mov rbx, qword [0x140c47db8]
mov rax, qword [rbx]
xor edx, edx
mov rcx, rbx
call qword [rax + 0x158]
cmp eax, 9
jne 0x1402c2813
call fcn.140049500
mov rdi, qword [rax]
lea rdx, [0x14037d8c0]
mov rcx, rax
call qword [rdi]
mov rdx, rax
lea rcx, [rsp + 0x38]
call qword [sym.imp.MFC80U.DLL_Ordinal_788]
lea rcx, [rsp + 0x38]
call qword [sym.imp.MFC80U.DLL_Ordinal_2492]
mov rdx, rax
lea rcx, [0x14037d8d0]
call qword [sym.imp.MSVCR80.dll_wprintf]
jmp 0x1402c2855
cmp eax, 0xa
jne 0x1402c2855
call fcn.140049500
mov rdi, qword [rax]
lea rdx, [0x14037d8d8]
mov rcx, rax
call qword [rdi]
mov rdx, rax
lea rcx, [rsp + 0x38]
call qword [sym.imp.MFC80U.DLL_Ordinal_788]
lea rcx, [rsp + 0x38]
call qword [sym.imp.MFC80U.DLL_Ordinal_2492]
mov rdx, rax
lea rcx, [0x14037d8e8]
call qword [sym.imp.MSVCR80.dll_wprintf]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + Ordinal_332]
call fcn.140049470
mov rsi, rax
xor edx, edx
mov r8d, 0x80
lea rbx, [0x140c492d0]
mov rcx, rbx
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, [0x14037d8f0]
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x1402c28a2
mov rbx, r12
jmp 0x1402c2930
mov byte [rsp + 0x98], 0
xor eax, eax
mov qword [rsp + 0x99], rax
mov word [rsp + 0xa1], ax
mov byte [rsp + 0xa3], al
mov r8d, 0x1cb
lea rdx, [0x14037f684]
lea rcx, [rsp + 0x98]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rbx
sub rcx, rdx
nop
nop
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x1402c28f0
mov rdi, rbx
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x98]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1402c2920
mov rax, qword [rsi]
mov r8, rbx
lea rdx, [0x14037d908]
mov rcx, rsi
call qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rsp + 0x98]
mov edx, 0x28
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x1402c29c3
lea r8, [rsp + 0x44]
lea rdx, [0x140371ae0]
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
mov eax, 1
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x4c], 2
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, [rsp + 0x40]
xor edx, edx
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1402c29c3
xor edx, edx
lea ecx, [rax + 6]
call qword [sym.imp.USER32.dll_ExitWindowsEx]
test eax, eax
jne 0x1402c2a01
call fcn.140049500
mov rdi, qword [rax]
lea rdx, [0x14037d940]
mov rcx, rax
call qword [rdi]
mov rdx, rax
lea rcx, [rsp + 0x38]
call qword [sym.imp.MFC80U.DLL_Ordinal_788]
lea rcx, [rsp + 0x38]
call qword [sym.imp.MFC80U.DLL_Ordinal_2492]
mov rdx, rax
lea rcx, [0x14037d950]
call qword [sym.imp.MSVCR80.dll_wprintf]
nop
lea rcx, [rsp + 0x38]
call qword [sym.imp.MFC80U.DLL_Ordinal_588]
xor eax, eax
jmp 0x1402c2cad
xor ecx, ecx
call fcn.14024cab0
mov edx, dword [0x140c47dc0]
test dl, 1
jne 0x1402c2a3f
or edx, 1
mov dword [0x140c47dc0], edx
call fcn.1400554f0
mov rdi, rax
mov qword [0x140c47db8], rax
jmp 0x1402c2a46
mov rdi, qword [0x140c47db8]
call fcn.1400554c0
mov rsi, rax
lea rax, [0x1402ba7c0]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x88], rdi
mov rax, qword [rsi]
lea rdx, [rsp + 0x78]
mov rcx, rsi
call qword [rax + 0x18]
mov rdx, qword [rsi]
mov rcx, rsi
call qword [rdx + 0x88]
mov rax, qword [rdi]
mov rdx, rsi
mov rcx, rdi
call qword [rax + Ordinal_265]
mov rdx, qword [rsi]
mov rcx, rsi
call qword [rdx + 0xc8]
mov edi, eax
test eax, eax
je 0x1402c2b7d
mov word [rsp + reloc.MFC80U.DLL_Ordinal_4272], 0
xor edx, edx
mov r8d, 0x1ffe
lea rcx, [rsp + reloc.MFC80U.DLL_Ordinal_4274]
call sub.ntdll.dll_memset
mov edx, edi
lea rcx, [rsp + 0x98]
call fcn.1402a2460
mov rcx, qword [rax]
lea rdx, [rsp + reloc.MFC80U.DLL_Ordinal_4272]
nop
nop
movzx eax, word [rcx]
mov word [rdx], ax
add rcx, 2
add rdx, 2
test ax, ax
jne 0x1402c2ae0
lea rcx, [rsp + 0x98]
call qword [sym.imp.MFC80U.DLL_Ordinal_588]
lea rdi, [rsp + reloc.MFC80U.DLL_Ordinal_4272]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
mov eax, dword [0x1403781ac]
mov dword [rdi - 2], eax
call fcn.140049500
mov rdi, qword [rax]
lea rdx, str.1087
mov rcx, rax
call qword [rdi]
mov r11, rax
lea rdi, [rsp + reloc.MFC80U.DLL_Ordinal_4272]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
xor edx, edx
nop
nop
nop
movzx ecx, word [r11 + rdx]
mov word [rdi + rdx - 2], cx
add rdx, 2
test cx, cx
jne 0x1402c2b50
lea rdx, [rsp + reloc.MFC80U.DLL_Ordinal_4272]
lea rcx, str._s_n_n
call qword [sym.imp.MSVCR80.dll_wprintf]
jmp 0x1402c2c8d
mov word [rsp + 0x4b0], 0
xor edx, edx
mov r8d, 0x7fe
lea rcx, [rsp + 0x4b2]
call sub.ntdll.dll_memset
call fcn.140049500
mov rdi, rax
call fcn.140049500
mov rbx, rax
mov rax, qword [rdi]
lea rdx, str.0266
mov rcx, rdi
call qword [rax]
mov rdi, rax
mov rax, qword [rbx]
lea rdx, str.0265
mov rcx, rbx
call qword [rax]
mov r8, rax
mov r9, rdi
lea rdx, str._s:_100_____s:_100__.
lea rcx, [rsp + 0x4b0]
call qword [sym.imp.MSVCR80.dll__swprintf]
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x4b0]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
cmp ecx, 0x64
jge 0x1402c2c3a
mov r8d, 0x64
sub r8d, ecx
mov edx, dword [0x1403782a4]
nop
nop
nop
lea rdi, [rsp + 0x4b0]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
mov dword [rdi - 2], edx
sub r8, 1
jne 0x1402c2c20
lea rdi, [rsp + 0x4b0]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
mov eax, dword [0x14037838c]
mov dword [rdi - 2], eax
lea rdx, [rsp + 0x4b0]
lea rcx, [0x14037d9c4]
call qword [sym.imp.MSVCR80.dll_wprintf]
call fcn.140049500
mov rdi, qword [rax]
lea rdx, str.0826
mov rcx, rax
call qword [rdi]
mov rdx, rax
lea rcx, str._n_n_s_n
call qword [sym.imp.MSVCR80.dll_wprintf]
mov dword [0x14042f62c], 0xffffffff
mov ecx, 1
call fcn.14024cab0
mov rdx, qword [rsi]
mov rcx, rsi
call qword [rdx]
mov eax, dword [rsp + 0x30]
mov rcx, qword [rsp + 0x30b0]
xor rcx, rsp
call fcn.140161080
mov rbx, qword [rsp + 0x3110]
add rsp, 0x30c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret