Function at 0x140001af1
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 ksa
Parse pe header

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
mov eax, 0x1a98
call fcn.140010e20
sub rsp, rax
call fcn.14000fd90
mov qword [rsp + 0x1a88], 0xfffffffff8d8f200
lea rdx, [rsp + 0x1a88]
mov ecx, 0
call fcn.140006a90
call fcn.140005f29
mov edi, eax
call fcn.1400066c0
mov rsi, rax
mov rax, qword [rax + 0x20]
mov rbx, qword [rax + 0x80]
lea rcx, [rsp + 0x1880]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x150], 0x1e
mov word [rsp + 0x152], 0x24
mov word [rsp + 0x154], 0x1e
mov word [rsp + 0x156], 0x1f
mov word [rsp + 0x158], 0x10
mov word [rsp + 0x15a], 0x18
mov word [rsp + 0x15c], 0x1d
mov word [rsp + 0x15e], 0x1a
mov word [rsp + 0x160], 0x1a
mov word [rsp + 0x162], 0x1f
mov word [rsp + 0x164], 8
mov word [rsp + 0x166], 0xcb
cmp byte [0x1409c92f8], 0
jne 0x140001c1c
mov byte [0x1409c9318], 1
mov eax, 0
lea rcx, [0x1409c9300]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xc
jne 0x140001bf3
mov byte [0x1409c92f8], 1
lea rcx, [0x140001548]
call fcn.1400014f0
cmp byte [0x1409c9318], 0
je 0x140001c4e
lea rdx, [0x1409c9300]
lea rcx, [rdx + 0x18]
movzx eax, word [rdx]
add ax, 0x4135
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140001c30
mov byte [0x1409c9318], 0
lea rdx, [0x1409c9300]
mov rcx, rbx
call fcn.1400058d4
mov rdx, rax
lea rcx, [rsp + 0x1880]
call sub.msvcrt.dll_wcscat
lea rcx, [rsp + 0x1670]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x150], 0x77
mov word [rsp + 0x152], 0x6e
mov word [rsp + 0x154], 0x94
mov word [rsp + 0x156], 0x8e
mov word [rsp + 0x158], 0x8f
mov word [rsp + 0x15a], pe_nt_image_headers64
mov word [rsp + 0x15c], 0x88
mov word [rsp + 0x15e], 0x4e
mov word [rsp + 0x160], 0x4d
mov word [rsp + 0x162], 0x1b
cmp byte [0x1409c92d8], 0
jne 0x140001d2e
mov byte [0x1409c92f4], 1
mov eax, 0
lea rcx, [0x1409c92e0]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xa
jne 0x140001d05
mov byte [0x1409c92d8], 1
lea rcx, [0x140001562]
call fcn.1400014f0
cmp byte [0x1409c92f4], 0
je 0x140001d60
lea rdx, [0x1409c92e0]
lea rcx, [rdx + 0x14]
movzx eax, word [rdx]
sub ax, 0x4a1b
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140001d42
mov byte [0x1409c92f4], 0
lea rdx, [rsp + 0x1880]
lea rcx, [rsp + 0x1670]
lea r8, [0x1409c92e0]
call fcn.14000506e
lea rcx, [rsp + 0x1460]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x150], 0xcd
mov word [rsp + 0x152], 0xd4
mov word [rsp + 0x154], 0xde
mov word [rsp + 0x156], 0xd5
mov word [rsp + 0x158], 0x9f
mov word [rsp + 0x15a], 0xd6
mov word [rsp + 0x15c], 0xe9
mov word [rsp + 0x15e], 0xd6
mov word [rsp + 0x160], 0x71
cmp byte [0x1409c92b0], 0
jne 0x140001e33
mov byte [0x1409c92d2], 1
mov eax, 0
lea rcx, [0x1409c92c0]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 9
jne 0x140001e0a
mov byte [0x1409c92b0], 1
lea rcx, [0x14000157c]
call fcn.1400014f0
cmp byte [0x1409c92d2], 0
je 0x140001e65
lea rdx, [0x1409c92c0]
lea rcx, [rdx + 0x12]
movzx eax, word [rdx]
sub ax, 0xa71
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140001e47
mov byte [0x1409c92d2], 0
lea rdx, [rsp + 0x1670]
lea rcx, [rsp + 0x1460]
lea r8, [0x1409c92c0]
call fcn.14000506e
lea rcx, [rsp + 0x1250]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x150], 0x27
mov word [rsp + 0x152], 0x22
mov word [rsp + 0x154], 0x34
mov word [rsp + 0x156], 0x39
mov word [rsp + 0x158], 0x2f
mov word [rsp + 0x15a], 0x3a
mov word [rsp + 0x15c], 0x42
mov word [rsp + 0x15e], 0x3e
mov word [rsp + 0x160], 0x1b
mov word [rsp + 0x162], 0x3a
mov word [rsp + 0x164], 0x42
mov word [rsp + 0x166], 0x30
mov word [rsp + 0x168], 0x3d
mov word [rsp + 0x16a], 0x1e
mov word [rsp + 0x16c], 0x33
mov word [rsp + 0x16e], 0x30
mov word [rsp + 0x170], 0x37
mov word [rsp + 0x172], 0x37
mov word [rsp + 0x174], 0x27
mov word [rsp + 0x176], 0x41
mov word [rsp + 0x178], 0xfc
mov word [rsp + 0x17a], 0xf9
mov word [rsp + 0x17c], 0xfb
mov word [rsp + 0x17e], 0x27
mov word [rsp + 0x180], 0x3b
mov word [rsp + 0x182], 0x3a
mov word [rsp + 0x184], 0x42
mov word [rsp + 0x186], 0x30
mov word [rsp + 0x188], 0x3d
mov word [rsp + 0x18a], 0x3e
mov word [rsp + 0x18c], 0x33
mov word [rsp + 0x18e], 0x30
mov word [rsp + 0x190], 0x37
mov word [rsp + 0x192], 0x37
mov word [rsp + 0x194], 0xf9
mov word [rsp + 0x196], 0x30
mov word [rsp + 0x198], 0x43
mov word [rsp + 0x19a], 0x30
mov word [rsp + 0x19c], 0xcb
cmp byte [0x1409c9250], 0
jne 0x140002064
mov byte [0x1409c92ae], 1
mov eax, 0
lea rcx, [0x1409c9260]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x27
jne 0x14000203b
mov byte [0x1409c9250], 1
lea rcx, [0x140001596]
call fcn.1400014f0
cmp byte [0x1409c92ae], 0
je 0x140002096
lea rdx, [0x1409c9260]
lea rcx, [rdx + 0x4e]
movzx eax, word [rdx]
sub ax, 0x6acb
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140002078
mov byte [0x1409c92ae], 0
lea rdx, [rsp + 0x1670]
lea rcx, [rsp + 0x1250]
lea r8, [0x1409c9260]
call fcn.14000506e
lea rcx, [rsp + 0x1040]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x150], 0xbd
mov word [rsp + 0x152], 0xc4
mov word [rsp + 0x154], 0xd0
mov word [rsp + 0x156], 0xcf
mov word [rsp + 0x158], 0xc9
mov word [rsp + 0x15a], 0xd0
mov word [rsp + 0x15c], 0xd4
mov word [rsp + 0x15e], 0xd5
mov word [rsp + 0x160], 0x8f
mov word [rsp + 0x162], 0xc6
mov word [rsp + 0x164], 0xd9
mov word [rsp + 0x166], 0xc6
mov word [rsp + 0x168], 0x61
cmp byte [0x1409c9220], 0
jne 0x140002191
mov byte [0x1409c924a], 1
mov eax, 0
lea rcx, [0x1409c9230]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xd
jne 0x140002168
mov byte [0x1409c9220], 1
lea rcx, [0x1400015b0]
call fcn.1400014f0
cmp byte [0x1409c924a], 0
je 0x1400021c3
lea rdx, [0x1409c9230]
lea rcx, [rdx + 0x1a]
movzx eax, word [rdx]
add ax, 0x6d9f
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x1400021a5
mov byte [0x1409c924a], 0
lea rdx, [rsp + 0x1670]
lea rcx, [rsp + 0x1040]
lea r8, [0x1409c9230]
call fcn.14000506e
lea rcx, [rsp + 0xe30]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x150], 0xdf
mov word [rsp + 0x152], 0xe4
mov word [rsp + 0x154], 0xed
mov word [rsp + 0x156], 0xf0
mov word [rsp + 0x158], 0xf1
mov word [rsp + 0x15a], 0xee
mov word [rsp + 0x15c], 0xf2
mov word [rsp + 0x15e], 0xfa
mov word [rsp + 0x160], 0xed
mov word [rsp + 0x162], 0xf3
mov word [rsp + 0x164], 0xf1
mov word [rsp + 0x166], 0xea
mov word [rsp + 0x168], 0xf2
mov word [rsp + 0x16a], 0xb1
mov word [rsp + 0x16c], 0xf7
mov word [rsp + 0x16e], 0xf0
mov word [rsp + 0x170], 0xf3
mov word [rsp + 0x172], 0x83
cmp byte [0x1409c91d8], 0
jne 0x1400022f0
mov byte [0x1409c9204], 1
mov eax, 0
lea rcx, [0x1409c91e0]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x12
jne 0x1400022c7
mov byte [0x1409c91d8], 1
lea rcx, [0x1400015cb]
call fcn.1400014f0
cmp byte [0x1409c9204], 0
je 0x140002322
lea rdx, [0x1409c91e0]
lea rcx, [rdx + 0x24]
movzx eax, word [rdx]
add ax, 0x117d
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140002304
mov byte [0x1409c9204], 0
mov word [rsp + 0x150], 0xd7
mov word [rsp + 0x152], 0xc8
mov word [rsp + 0x154], 0xd0
mov word [rsp + 0x156], 0xd3
mov word [rsp + 0x158], 0xc0
mov word [rsp + 0x15a], 0x83
cmp byte [0x1409c9208], 0
jne 0x1400023a3
mov byte [0x1409c921c], 1
mov eax, 0
lea rcx, [0x1409c9210]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 6
jne 0x14000237a
mov byte [0x1409c9208], 1
lea rcx, [0x1400015ca]
call fcn.1400014f0
cmp byte [0x1409c921c], 0
je 0x1400023d5
lea rdx, [0x1409c9210]
lea rcx, [rdx + 0xc]
movzx eax, word [rdx]
add ax, 0x117d
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x1400023b7
mov byte [0x1409c921c], 0
lea rdx, [0x1409c9210]
mov rcx, rbx
call fcn.1400058d4
mov rdx, rax
lea rcx, [rsp + 0xe30]
lea r8, [0x1409c91e0]
call fcn.14000506e
lea rcx, [rsp + 0x150]
mov r8d, 0x130
lea rdx, section..rdata
call sub.msvcrt.dll_memcpy
cmp byte [0x1409c9098], 0
jne 0x14000245c
mov byte [0x1409c91d0], 1
mov eax, 0
lea rcx, [0x1409c90a0]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x98
jne 0x140002431
mov byte [0x1409c9098], 1
lea rcx, [0x1400015e5]
call fcn.1400014f0
cmp byte [0x1409c91d0], 0
je 0x140002491
lea rdx, [0x1409c90a0]
lea rcx, [rdx + 0x130]
movzx eax, word [rdx]
add ax, 0x3379
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140002473
mov byte [0x1409c91d0], 0
lea r8, [rsp + 0x1460]
lea rdx, [rsp + 0x1670]
mov qword [rsp + 0x20], r8
lea r9, [0x1409c90a0]
mov ecx, 0
call fcn.140005818
lea rbp, [rsp + 0xc20]
mov r8d, 0x208
mov edx, 0
mov rcx, rbp
call sub.msvcrt.dll_memset
mov rax, qword [rsi + 0x20]
mov rdx, qword [rax + 0x68]
mov rcx, rbp
call sub.msvcrt.dll_wcscat
lea rcx, [rsp + 0xa10]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x150], 0x93
mov word [rsp + 0x152], 0x7e
mov word [rsp + 0x154], 0xa6
mov word [rsp + 0x156], 0xa6
mov word [rsp + 0x158], 0x9e
mov word [rsp + 0x15a], 0xa3
mov word [rsp + 0x15c], 0x9c
mov word [rsp + 0x15e], 0x93
mov word [rsp + 0x160], 0x7a
mov word [rsp + 0x162], 0x9f
mov word [rsp + 0x164], 0xa9
mov word [rsp + 0x166], 0xa6
mov word [rsp + 0x168], 0xa4
mov word [rsp + 0x16a], 0x9c
mov word [rsp + 0x16c], 0x93
mov word [rsp + 0x16e], 0xac
mov word [rsp + 0x170], 0xa7
mov word [rsp + 0x172], 0x9b
mov word [rsp + 0x174], 0x98
mov word [rsp + 0x176], 0xab
mov word [rsp + 0x178], 0x9c
mov word [rsp + 0x17a], 0xa9
mov word [rsp + 0x17c], 0x65
mov word [rsp + 0x17e], 0x9c
mov word [rsp + 0x180], 0xaf
mov word [rsp + 0x182], 0x9c
mov word [rsp + 0x184], 0x37
cmp byte [0x1409c9038], 0
jne 0x14000264d
mov byte [0x1409c9076], 1
mov eax, 0
lea rcx, [0x1409c9040]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x1b
jne 0x140002624
mov byte [0x1409c9038], 1
lea rcx, [0x14000161c]
call fcn.1400014f0
cmp byte [0x1409c9076], 0
je 0x14000267f
lea rdx, [0x1409c9040]
lea rcx, [rdx + 0x36]
movzx eax, word [rdx]
sub ax, 0x7037
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140002661
mov byte [0x1409c9076], 0
mov word [rsp + 0x150], 0x78
mov word [rsp + 0x152], 0x87
mov word [rsp + 0x154], 0x87
mov word [rsp + 0x156], 0x7b
mov word [rsp + 0x158], 0x78
mov word [rsp + 0x15a], 0x8b
mov word [rsp + 0x15c], 0x78
mov word [rsp + 0x15e], 0x74
mov word [rsp + 0x160], 0x37
cmp byte [0x1409c9078], 0
jne 0x14000271e
mov byte [0x1409c9092], 1
mov eax, 0
lea rcx, [0x1409c9080]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 9
jne 0x1400026f5
mov byte [0x1409c9078], 1
lea rcx, [0x140001602]
call fcn.1400014f0
cmp byte [0x1409c9092], 0
je 0x140002750
lea rdx, [0x1409c9080]
lea rcx, [rdx + 0x12]
movzx eax, word [rdx]
sub ax, 0x7037
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140002732
mov byte [0x1409c9092], 0
lea rdx, [0x1409c9080]
mov rcx, rbx
call fcn.1400058d4
mov rdx, rax
lea rcx, [rsp + 0xa10]
lea r8, [0x1409c9040]
call fcn.14000506e
test dil, dil
je 0x14000351c
lea rcx, [rsp + 0x150]
mov r8d, 0x454
lea rdx, [0x1409bf140]
call sub.msvcrt.dll_memcpy
cmp byte [0x1409c8bc8], 0
jne 0x1400027e0
mov byte [0x1409c9034], 1
mov eax, 0
lea rcx, [0x1409c8be0]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x22a
jne 0x1400027b5
mov byte [0x1409c8bc8], 1
lea rcx, [0x140001636]
call fcn.1400014f0
cmp byte [0x1409c9034], 0
je 0x140002815
lea rdx, [0x1409c8be0]
lea rcx, [rdx + 0x454]
movzx eax, word [rdx]
add ax, 0x2f3b
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x1400027f7
mov byte [0x1409c9034], 0
lea r8, [rsp + 0x1250]
lea rdx, [rsp + 0x1670]
lea rsi, [rsp + 0xa10]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], r8
lea r9, [0x1409c8be0]
mov ecx, 1
call fcn.140005818
lea rcx, [rsp + 0xc20]
mov rdx, rsi
call sub.msvcrt.dll__wcsicmp
test eax, eax
jne 0x14000438a
mov edx, dword [0x140040988]
lea rcx, [0x14001c020]
call fcn.140001909
movsxd rsi, dword [0x140040988]
mov word [rsp + 0x150], 0xd7
mov word [rsp + 0x152], 0xbd
mov word [rsp + 0x154], 0xdc
mov word [rsp + 0x156], 0xee
mov word [rsp + 0x158], 0xe0
mov word [rsp + 0x15a], 0xc9
mov word [rsp + 0x15c], 0xdc
mov word [rsp + 0x15e], 0xe8
mov word [rsp + 0x160], 0xe0
mov word [rsp + 0x162], 0xdf
mov word [rsp + 0x164], 0xca
mov word [rsp + 0x166], 0xdd
mov word [rsp + 0x168], 0xe5
mov word [rsp + 0x16a], 0xe0
mov word [rsp + 0x16c], 0xde
mov word [rsp + 0x16e], 0xef
mov word [rsp + 0x170], 0xee
mov word [rsp + 0x172], 0xd7
mov word [rsp + 0x174], 0xef
mov word [rsp + 0x176], 0xf4
mov word [rsp + 0x178], 0xf4
mov word [rsp + 0x17a], 0xdd
mov word [rsp + 0x17c], 0xf0
mov word [rsp + 0x17e], 0xe4
mov word [rsp + 0x180], 0xe9
mov word [rsp + 0x182], 0xe2
mov word [rsp + 0x184], 0x7b
cmp byte [0x1409c89b8], 0
jne 0x1400029d1
mov byte [0x1409c89f6], 1
mov eax, 0
lea rcx, [0x1409c89c0]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x1b
jne 0x1400029a8
mov byte [0x1409c89b8], 1
lea rcx, [0x1400016bf]
call fcn.1400014f0
cmp byte [0x1409c89f6], 0
je 0x140002a03
lea rdx, [0x1409c89c0]
lea rcx, [rdx + 0x36]
movzx eax, word [rdx]
add ax, 0x785
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x1400029e5
mov byte [0x1409c89f6], 0
lea rcx, [rsp + 0xe30]
mov dword [rsp + 0x40], 1
mov qword [rsp + 0x38], 0
lea rax, [rsp + 0x1670]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x1040]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
mov r9, rsi
lea r8, [0x14001c020]
lea rdx, [0x1409c89c0]
call fcn.1400018a5
lea rcx, [rsp + 0x800]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x150], 0x45
mov word [rsp + 0x152], 0x30
mov word [rsp + 0x154], 0x58
mov word [rsp + 0x156], 0x58
mov word [rsp + 0x158], 0x50
mov word [rsp + 0x15a], 0x55
mov word [rsp + 0x15c], 0x4e
mov word [rsp + 0x15e], 0x45
mov word [rsp + 0x160], 0x35
mov word [rsp + 0x162], 0x52
mov word [rsp + 0x164], 0x4b
mov word [rsp + 0x166], 0x5c
mov word [rsp + 0x168], 0x45
mov word [rsp + 0x16a], 0xe9
cmp byte [0x1409c8968], 0
jne 0x140002b3a
mov byte [0x1409c898c], 1
mov eax, 0
lea rcx, [0x1409c8970]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xe
jne 0x140002b11
mov byte [0x1409c8968], 1
lea rcx, [0x1400016f3]
call fcn.1400014f0
cmp byte [0x1409c898c], 0
je 0x140002b6c
lea rdx, [0x1409c8970]
lea rcx, [rdx + 0x1c]
movzx eax, word [rdx]
sub ax, 0x6ce9
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x140002b4e
mov byte [0x1409c898c], 0
mov word [rsp + 0x150], 0x2a
mov word [rsp + 0x152], 0x39
mov word [rsp + 0x154], 0x39
mov word [rsp + 0x156], 0x2d
mov word [rsp + 0x158], 0x2a
mov word [rsp + 0x15a], 0x3d
mov word [rsp + 0x15c], 0x2a
mov word [rsp + 0x15e], 0x26
mov word [rsp + 0x160], 0xe9
cmp byte [0x1409c8990], 0
jne 0x140002c0b
mov byte [0x1409c89b2], 1
mov eax, 0
lea rcx, [0x1409c89a0]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 9
jne 0x140002be2
mov byte [0x1409c8990], 1
lea rcx, [0x1400016d9]
call fcn.1400014f0
cmp byte [0x1409c89b2], 0
je 0x140002c3d
lea rdx, [0x1409c89a0]
lea rcx, [rdx + 0x12]
movzx eax, word [rdx]
sub ax, 0x6ce9
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140002c1f
mov byte [0x1409c89b2], 0
lea rdx, [0x1409c89a0]
mov rcx, rbx
call fcn.1400058d4
mov rdx, rax
lea rcx, [rsp + 0x800]
lea r8, [0x1409c8970]
call fcn.14000506e
mov word [rsp + 0x150], 0x64
mov word [rsp + 0x152], 0x5f
mov word [rsp + 0x154], 0x43
mov word [rsp + 0x156], 0x41
mov word [rsp + 0x158], 0x3b
mov word [rsp + 0x15a], pe_nt_image_headers64
mov word [rsp + 0x15c], 0x86
mov word [rsp + 0x15e], pe_nt_image_headers64
mov word [rsp + 0x160], 0xd
cmp byte [0x1409c8940], 0
jne 0x140002d02
mov byte [0x1409c8962], 1
mov eax, 0
lea rcx, [0x1409c8950]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 9
jne 0x140002cd9
mov byte [0x1409c8940], 1
lea rcx, [0x14000170d]
call fcn.1400014f0
cmp byte [0x1409c8962], 0
je 0x140002d34
lea rdx, [0x1409c8950]
lea rcx, [rdx + 0x12]
movzx eax, word [rdx]
add ax, 0x33f3
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140002d16
mov byte [0x1409c8962], 0
lea r9, [0x1409c8950]
lea r8, [rsp + 0x800]
mov edx, dword [0x140044270]
lea rcx, [0x1400409a0]
call fcn.140001a8c
call fcn.1400047a7
mov ebx, eax
mov edx, dword [0x140475880]
lea rcx, [0x140044280]
call fcn.140001909
mov edx, dword [0x1409bd2a0]
lea rcx, [0x1404758a0]
call fcn.140001909
mov ecx, 0
mov rsi, qword [sym.imp.msvcrt.dll__time64]
call rsi
mov ecx, eax
call sub.msvcrt.dll_srand
mov ecx, 0
call rsi
mov rsi, rax
cmp rax, 0x664f9f1d
jle 0x140002dde
call sub.msvcrt.dll_rand
mov ecx, eax
sub rsi, 0x664f9f1d
mov r8d, 0x6540
mov rax, rsi
cqo
idiv r8
mov rsi, rax
mov r8d, 0x64
mov eax, ecx
cdq
idiv r8d
movsxd rdx, edx
cmp rsi, rdx
jg 0x1400037db
cmp byte [0x1409c7a48], 0
jne 0x140002e25
mov byte [0x1409c7a58], 1
mov word [0x1409c7a50], 0x29
mov word [0x1409c7a52], 0x1e
mov word [0x1409c7a54], 0x23
mov word [0x1409c7a56], 0xb1
mov byte [0x1409c7a48], 1
lea rcx, [0x1400017e6]
call fcn.1400014f0
lea rcx, [0x1409c7a50]
call fcn.14001a1e0
mov qword [rsp + 0x70], rax
mov word [rsp + 0x150], 0xd
mov word [rsp + 0x152], 0xf3
mov word [rsp + 0x154], 0x12
mov word [rsp + 0x156], 0x24
mov word [rsp + 0x158], 0x16
mov word [rsp + 0x15a], 0xff
mov word [rsp + 0x15c], 0x12
mov word [rsp + 0x15e], 0x1e
mov word [rsp + 0x160], 0x16
mov word [rsp + 0x162], 0x15
mov word [rsp + 0x164], 0
mov word [rsp + 0x166], 0x13
mov word [rsp + 0x168], 0x1b
mov word [rsp + 0x16a], 0x16
mov word [rsp + 0x16c], 0x14
mov word [rsp + 0x16e], 0x25
mov word [rsp + 0x170], 0x24
mov word [rsp + 0x172], 0xd
mov word [rsp + 0x174], 0x20
mov word [rsp + 0x176], 0x14
mov word [rsp + 0x178], 0x16
mov word [rsp + 0x17a], 0x12
mov word [rsp + 0x17c], 0x1b
mov word [rsp + 0x17e], 0x14
mov word [rsp + 0x180], 0x16
mov word [rsp + 0x182], 0x2b
mov word [rsp + 0x184], 0x21
mov word [rsp + 0x186], 0x24
mov word [rsp + 0x188], 0x20
mov word [rsp + 0x18a], 0x24
mov word [rsp + 0x18c], 0x1b
mov word [rsp + 0x18e], 0x23
mov word [rsp + 0x190], 0x22
mov word [rsp + 0x192], 0x1f
mov word [rsp + 0x194], 0xb1
cmp byte [0x1409c79f0], 0
jne 0x140002fd9
mov byte [0x1409c7a46], 1
mov eax, 0
lea rcx, [0x1409c7a00]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x23
jne 0x140002fb0
mov byte [0x1409c79f0], 1
lea rcx, [0x1400017e7]
call fcn.1400014f0
lea rcx, [0x1409c7a00]
call fcn.14001a160
mov qword [rsp + 0x78], rax
mov word [rsp + 0x150], 0xd
mov word [rsp + 0x152], 0x14
mov word [rsp + 0x154], 0x20
mov word [rsp + 0x156], 0x1f
mov word [rsp + 0x158], 0x19
mov word [rsp + 0x15a], 0x20
mov word [rsp + 0x15c], 0x24
mov word [rsp + 0x15e], 0x25
mov word [rsp + 0x160], 0xdf
mov word [rsp + 0x162], 0x16
mov word [rsp + 0x164], 0x29
mov word [rsp + 0x166], 0x16
mov word [rsp + 0x168], 0xb1
cmp byte [0x1409c79c0], 0
jne 0x1400030b1
mov byte [0x1409c79ea], 1
mov eax, 0
lea rcx, [0x1409c79d0]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xd
jne 0x140003088
mov byte [0x1409c79c0], 1
lea rcx, [0x140001801]
call fcn.1400014f0
lea rcx, [0x1409c79d0]
call fcn.14001a0e0
mov qword [rsp + 0x80], rax
lea rcx, [rsp + 0x150]
mov r8d, 0x47c
lea rdx, [0x1409bf5a0]
call sub.msvcrt.dll_memcpy
cmp byte [0x1409c7520], 0
jne 0x140003126
mov byte [0x1409c79bc], 1
mov eax, 0
lea rcx, [0x1409c7540]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x23e
jne 0x1400030fb
mov byte [0x1409c7520], 1
lea rcx, [0x14000181b]
call fcn.1400014f0
cmp byte [0x1409c79bc], 0
je 0x14000315b
lea rdx, [0x1409c7540]
lea rcx, [rdx + 0x47c]
movzx eax, word [rdx]
sub ax, 0x30b1
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x14000313d
mov byte [0x1409c79bc], 0
lea rax, [0x1409c7540]
mov qword [rsp + 0x88], rax
cmp byte [0x1409c7508], 0
jne 0x1400031b1
mov byte [0x1409c7518], 1
mov word [0x1409c7510], 0x16
mov word [0x1409c7512], 0x25
mov word [0x1409c7514], 0x19
mov word [0x1409c7516], 0xb1
mov byte [0x1409c7508], 1
lea rcx, [0x140001838]
call fcn.1400014f0
lea rcx, [0x1409c7510]
call fcn.14001a1e0
mov qword [rsp + 0x90], rax
mov word [rsp + 0x150], 0xd
mov word [rsp + 0x152], 0xf3
mov word [rsp + 0x154], 0x12
mov word [rsp + 0x156], 0x24
mov word [rsp + 0x158], 0x16
mov word [rsp + 0x15a], 0xff
mov word [rsp + 0x15c], 0x12
mov word [rsp + 0x15e], 0x1e
mov word [rsp + 0x160], 0x16
mov word [rsp + 0x162], 0x15
mov word [rsp + 0x164], 0
mov word [rsp + 0x166], 0x13
mov word [rsp + 0x168], 0x1b
mov word [rsp + 0x16a], 0x16
mov word [rsp + 0x16c], 0x14
mov word [rsp + 0x16e], 0x25
mov word [rsp + 0x170], 0x24
mov word [rsp + 0x172], 0xd
mov word [rsp + 0x174], 0x24
mov word [rsp + 0x176], 0x2a
mov word [rsp + 0x178], 0x25
mov word [rsp + 0x17a], 0x16
mov word [rsp + 0x17c], 0x1b
mov word [rsp + 0x17e], 0x29
mov word [rsp + 0x180], 0x27
mov word [rsp + 0x182], 0x28
mov word [rsp + 0x184], 0x1e
mov word [rsp + 0x186], 0x25
mov word [rsp + 0x188], 0x17
mov word [rsp + 0x18a], 0x18
mov word [rsp + 0x18c], 0x1d
mov word [rsp + 0x18e], 0x1d
mov word [rsp + 0x190], 0x13
mov word [rsp + 0x192], 0x2b
mov word [rsp + 0x194], 0xb1
cmp byte [0x1409c74a0], 0
jne 0x140003368
mov byte [0x1409c7506], 1
mov eax, 0
lea rcx, [0x1409c74c0]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x23
jne 0x14000333f
mov byte [0x1409c74a0], 1
lea rcx, [0x140001839]
call fcn.1400014f0
lea rcx, [0x1409c74c0]
call fcn.14001a160
mov qword [rsp + 0x98], rax
mov word [rsp + 0x150], 0xd
mov word [rsp + 0x152], 0x14
mov word [rsp + 0x154], 0x20
mov word [rsp + 0x156], 0x1f
mov word [rsp + 0x158], 0x19
mov word [rsp + 0x15a], 0x20
mov word [rsp + 0x15c], 0x24
mov word [rsp + 0x15e], 0x25
mov word [rsp + 0x160], 0xdf
mov word [rsp + 0x162], 0x16
mov word [rsp + 0x164], 0x29
mov word [rsp + 0x166], 0x16
mov word [rsp + 0x168], 0xb1
cmp byte [0x1409c7478], 0
jne 0x140003443
mov byte [0x1409c749a], 1
mov eax, 0
lea rcx, [0x1409c7480]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xd
jne 0x14000341a
mov byte [0x1409c7478], 1
lea rcx, [0x140001853]
call fcn.1400014f0
lea rcx, [0x1409c7480]
call fcn.14001a0e0
mov qword [rsp + 0xa0], rax
lea rcx, [rsp + 0x150]
mov r8d, 0x3d4
lea rdx, [0x1409bfa20]
call sub.msvcrt.dll_memcpy
cmp byte [0x1409c7088], 0
jne 0x1400034b8
mov byte [0x1409c7474], 1
mov eax, 0
lea rcx, [0x1409c70a0]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x1ea
jne 0x14000348d
mov byte [0x1409c7088], 1
lea rcx, [0x14000186d]
call fcn.1400014f0
cmp byte [0x1409c7474], 0
je 0x1400034ed
lea rdx, [0x1409c70a0]
lea rcx, [rdx + 0x3d4]
movzx eax, word [rdx]
sub ax, 0x30b1
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x1400034cf
mov byte [0x1409c7474], 0
lea rax, [0x1409c70a0]
mov qword [rsp + 0xa8], rax
lea rsi, [rsp + 0x70]
lea r13, [rsp + 0xb0]
lea r14, [0x14000188a]
lea rbp, [0x1409c7080]
jmp 0x140004185
lea rcx, [rsp + 0x150]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x70], 0xef
mov word [rsp + 0x72], 5
mov word [rsp + 0x74], 0xf8
mov word [rsp + 0x76], 0xfa
mov word [rsp + 0x78], 0xc1
mov word [rsp + 0x7a], 0xf8
mov word [rsp + 0x7c], 0xb
mov word [rsp + 0x7e], 0xf8
mov word [rsp + 0x80], 0x93
cmp byte [0x1409c8ba8], 0
jne 0x1400035b8
mov byte [0x1409c8bc2], 1
mov eax, 0
lea rcx, [0x1409c8bb0]
movzx edx, word [rsp + rax*2 + 0x70]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 9
jne 0x140003592
mov byte [0x1409c8ba8], 1
lea rcx, [0x140001653]
call fcn.1400014f0
cmp byte [0x1409c8bc2], 0
je 0x1400035ea
lea rdx, [0x1409c8bb0]
lea rcx, [rdx + 0x12]
movzx eax, word [rdx]
add ax, 0x176d
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x1400035cc
mov byte [0x1409c8bc2], 0
lea rdx, [rsp + 0x1670]
lea rcx, [rsp + 0x150]
lea r8, [0x1409c8bb0]
call fcn.14000506e
lea rdi, [rsp + 0x70]
lea rsi, str._l9z9_ad_nulh_mpZkuf
mov ecx, 0x38
rep movsd dword [rdi], dword [rsi]
cmp byte [0x1409c8aa0], 0
jne 0x14000365b
mov byte [0x1409c8ba0], 1
mov eax, 0
lea rcx, [0x1409c8ac0]
movzx edx, word [rsp + rax*2 + 0x70]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x70
jne 0x140003635
mov byte [0x1409c8aa0], 1
lea rcx, [0x14000166d]
call fcn.1400014f0
cmp byte [0x1409c8ba0], 0
je 0x140003690
lea rdx, [0x1409c8ac0]
lea rcx, [rdx + 0xe0]
movzx eax, word [rdx]
add ax, 0x5be7
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140003672
mov byte [0x1409c8ba0], 0
lea r8, [rsp + 0x150]
lea rdx, [rsp + 0x1670]
lea rsi, [rsp + 0xa10]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], r8
lea r9, [0x1409c8ac0]
mov ecx, 1
call fcn.140005818
lea rcx, [rsp + 0xc20]
mov rdx, rsi
call sub.msvcrt.dll__wcsicmp
test eax, eax
je 0x140002865
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xc20]
call fcn.140005cd5
mov rdx, rax
lea rcx, [rsp + 0xa10]
mov r8d, dword [rsp + 0x50]
call fcn.140005e1a
mov word [rsp + 0x150], 0x84
mov word [rsp + 0x152], 0xb2
mov word [rsp + 0x154], 0x5f
cmp byte [0x1409c89f8], 0
jne 0x14000375e
mov byte [0x1409c8a06], 1
mov word [0x1409c8a00], 0x84
mov word [0x1409c8a02], 0xb2
mov word [0x1409c8a04], 0x5f
mov byte [0x1409c89f8], 1
lea rcx, [0x1400016be]
call fcn.1400014f0
cmp byte [0x1409c8a06], 0
je 0x1400037b0
movzx eax, word [0x1409c8a00]
add ax, 0x1a1
and ax, 0xff
mov word [0x1409c8a00], ax
movzx eax, word [0x1409c8a02]
add ax, 0x1a1
and ax, 0xff
mov word [0x1409c8a02], ax
movzx eax, word [0x1409c8a04]
add ax, 0x1a1
and ax, 0xff
mov word [0x1409c8a04], ax
mov byte [0x1409c8a06], 0
lea r8, [rsp + 0xa10]
lea rdx, [rsp + 0x1670]
mov qword [rsp + 0x20], r8
lea r9, [0x1409c8a00]
mov ecx, 0
call fcn.140005818
jmp 0x1400046df
cmp byte [0x1409c8928], 0
jne 0x140003822
mov byte [0x1409c8938], 1
mov word [0x1409c8930], 0xfd
mov word [0x1409c8932], 0xf2
mov word [0x1409c8934], 0xf7
mov word [0x1409c8936], 0x85
mov byte [0x1409c8928], 1
lea rcx, [0x140001727]
call fcn.1400014f0
lea rcx, [0x1409c8930]
call fcn.14001a210
mov qword [rsp + 0x70], rax
mov word [rsp + 0x150], 0xe1
mov word [rsp + 0x152], 0xc7
mov word [rsp + 0x154], 0xe6
mov word [rsp + 0x156], 0xf8
mov word [rsp + 0x158], 0xea
mov word [rsp + 0x15a], 0xd3
mov word [rsp + 0x15c], 0xe6
mov word [rsp + 0x15e], 0xf2
mov word [rsp + 0x160], 0xea
mov word [rsp + 0x162], 0xe9
mov word [rsp + 0x164], 0xd4
mov word [rsp + 0x166], 0xe7
mov word [rsp + 0x168], 0xef
mov word [rsp + 0x16a], 0xea
mov word [rsp + 0x16c], 0xe8
mov word [rsp + 0x16e], 0xf9
mov word [rsp + 0x170], 0xf8
mov word [rsp + 0x172], 0xe1
mov word [rsp + 0x174], 0xf4
mov word [rsp + 0x176], 0xe8
mov word [rsp + 0x178], 0xea
mov word [rsp + 0x17a], 0xe6
mov word [rsp + 0x17c], 0xef
mov word [rsp + 0x17e], 0xe8
mov word [rsp + 0x180], 0xea
mov word [rsp + 0x182], 0xff
mov word [rsp + 0x184], 0xf5
mov word [rsp + 0x186], 0xf8
mov word [rsp + 0x188], 0xf4
mov word [rsp + 0x18a], 0xf8
mov word [rsp + 0x18c], 0xef
mov word [rsp + 0x18e], 0xf7
mov word [rsp + 0x190], 0xf6
mov word [rsp + 0x192], 0xf3
mov word [rsp + 0x194], 0x85
cmp byte [0x1409c88d0], 0
jne 0x1400039d6
mov byte [0x1409c8926], 1
mov eax, 0
lea rcx, [0x1409c88e0]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x23
jne 0x1400039ad
mov byte [0x1409c88d0], 1
lea rcx, [0x140001728]
call fcn.1400014f0
lea rcx, [0x1409c88e0]
call fcn.14001a1a0
mov qword [rsp + 0x78], rax
mov word [rsp + 0x150], 0xe1
mov word [rsp + 0x152], 0xe8
mov word [rsp + 0x154], 0xf4
mov word [rsp + 0x156], 0xf3
mov word [rsp + 0x158], 0xed
mov word [rsp + 0x15a], 0xf4
mov word [rsp + 0x15c], 0xf8
mov word [rsp + 0x15e], 0xf9
mov word [rsp + 0x160], 0xb3
mov word [rsp + 0x162], 0xea
mov word [rsp + 0x164], 0xfd
mov word [rsp + 0x166], 0xea
mov word [rsp + 0x168], 0x85
cmp byte [0x1409c88a0], 0
jne 0x140003aae
mov byte [0x1409c88ca], 1
mov eax, 0
lea rcx, [0x1409c88b0]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xd
jne 0x140003a85
mov byte [0x1409c88a0], 1
lea rcx, [0x140001742]
call fcn.1400014f0
lea rcx, [0x1409c88b0]
call fcn.14001a120
mov qword [rsp + 0x80], rax
lea rcx, [rsp + 0x150]
mov r8d, 0x67c
lea rdx, [0x1409bfee0]
call sub.msvcrt.dll_memcpy
cmp byte [0x1409c8200], 0
jne 0x140003b23
mov byte [0x1409c889c], 1
mov eax, 0
lea rcx, [0x1409c8220]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x33e
jne 0x140003af8
mov byte [0x1409c8200], 1
lea rcx, [0x14000175c]
call fcn.1400014f0
cmp byte [0x1409c889c], 0
je 0x140003b58
lea rdx, [0x1409c8220]
lea rcx, [rdx + 0x67c]
movzx eax, word [rdx]
sub ax, 0x7c85
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x140003b3a
mov byte [0x1409c889c], 0
lea rax, [0x1409c8220]
mov qword [rsp + 0x88], rax
cmp byte [0x1409c81e8], 0
jne 0x140003bae
mov byte [0x1409c81f8], 1
mov word [0x1409c81f0], 0xea
mov word [0x1409c81f2], 0xf9
mov word [0x1409c81f4], 0xed
mov word [0x1409c81f6], 0x85
mov byte [0x1409c81e8], 1
lea rcx, [0x140001779]
call fcn.1400014f0
lea rcx, [0x1409c81f0]
call fcn.14001a210
mov qword [rsp + 0x90], rax
mov word [rsp + 0x150], 0xe1
mov word [rsp + 0x152], 0xc7
mov word [rsp + 0x154], 0xe6
mov word [rsp + 0x156], 0xf8
mov word [rsp + 0x158], 0xea
mov word [rsp + 0x15a], 0xd3
mov word [rsp + 0x15c], 0xe6
mov word [rsp + 0x15e], 0xf2
mov word [rsp + 0x160], 0xea
mov word [rsp + 0x162], 0xe9
mov word [rsp + 0x164], 0xd4
mov word [rsp + 0x166], 0xe7
mov word [rsp + 0x168], 0xef
mov word [rsp + 0x16a], 0xea
mov word [rsp + 0x16c], 0xe8
mov word [rsp + 0x16e], 0xf9
mov word [rsp + 0x170], 0xf8
mov word [rsp + 0x172], 0xe1
mov word [rsp + 0x174], 0xf8
mov word [rsp + 0x176], 0xfe
mov word [rsp + 0x178], 0xf9
mov word [rsp + 0x17a], 0xea
mov word [rsp + 0x17c], 0xef
mov word [rsp + 0x17e], 0xfd
mov word [rsp + 0x180], 0xfb
mov word [rsp + 0x182], 0xfc
mov word [rsp + 0x184], 0xf2
mov word [rsp + 0x186], 0xf9
mov word [rsp + 0x188], 0xeb
mov word [rsp + 0x18a], 0xec
mov word [rsp + 0x18c], 0xf1
mov word [rsp + 0x18e], 0xf1
mov word [rsp + 0x190], 0xe7
mov word [rsp + 0x192], 0xff
mov word [rsp + 0x194], 0x85
cmp byte [0x1409c8190], 0
jne 0x140003d65
mov byte [0x1409c81e6], 1
mov eax, 0
lea rcx, [0x1409c81a0]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x23
jne 0x140003d3c
mov byte [0x1409c8190], 1
lea rcx, [0x14000177a]
call fcn.1400014f0
lea rcx, [0x1409c81a0]
call fcn.14001a1a0
mov qword [rsp + 0x98], rax
mov word [rsp + 0x150], 0xe1
mov word [rsp + 0x152], 0xe8
mov word [rsp + 0x154], 0xf4
mov word [rsp + 0x156], 0xf3
mov word [rsp + 0x158], 0xed
mov word [rsp + 0x15a], 0xf4
mov word [rsp + 0x15c], 0xf8
mov word [rsp + 0x15e], 0xf9
mov word [rsp + 0x160], 0xb3
mov word [rsp + 0x162], 0xea
mov word [rsp + 0x164], 0xfd
mov word [rsp + 0x166], 0xea
mov word [rsp + 0x168], 0x85
cmp byte [0x1409c8168], 0
jne 0x140003e40
mov byte [0x1409c818a], 1
mov eax, 0
lea rcx, [0x1409c8170]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xd
jne 0x140003e17
mov byte [0x1409c8168], 1
lea rcx, [0x140001794]
call fcn.1400014f0
lea rcx, [0x1409c8170]
call fcn.14001a120
mov qword [rsp + 0xa0], rax
lea rcx, [rsp + 0x150]
mov r8d, 0x6a4
lea rdx, [0x1409c0560]
call sub.msvcrt.dll_memcpy
cmp byte [0x1409c7aa8], 0
jne 0x140003eb5
mov byte [0x1409c8164], 1
mov eax, 0
lea rcx, [0x1409c7ac0]
movzx edx, word [rsp + rax*2 + 0x150]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x352
jne 0x140003e8a
mov byte [0x1409c7aa8], 1
lea rcx, [0x1400017ae]
call fcn.1400014f0
cmp byte [0x1409c8164], 0
je 0x140003eea
lea rdx, [0x1409c7ac0]
lea rcx, [rdx + 0x6a4]
movzx eax, word [rdx]
sub ax, 0x7c85
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x140003ecc
mov byte [0x1409c8164], 0
lea rax, [0x1409c7ac0]
mov qword [rsp + 0xa8], rax
lea rsi, [rsp + 0x70]
lea r13, [rsp + 0xb0]
lea r14, [0x1400017cb]
lea rbp, [0x1409c7aa0]
jmp 0x140003f4b
mov byte [0x1409c7aa0], 0
mov rdx, rdi
lea rcx, [0x1409c7a98]
call sub.msvcrt.dll__wcsicmp
mov edi, eax
test eax, eax
jne 0x140003fc0
test bl, bl
jne 0x140003fc0
add rsi, 0x20
cmp r13, rsi
je 0x1400046df
mov r12, rsi
mov rdi, qword [rsi]
cmp byte [0x1409c7a90], 0
jne 0x140003f94
mov byte [0x1409c7aa0], 1
mov word [0x1409c7a98], 4
mov word [0x1409c7a9a], 0x13
mov word [0x1409c7a9c], 7
mov word [0x1409c7a9e], 0x9f
mov byte [0x1409c7a90], 1
mov rcx, r14
call fcn.1400014f0
cmp byte [0x1409c7aa0], 0
je 0x140003f1d
lea rdx, [0x1409c7a98]
movzx eax, word [rdx]
add ax, 0x2761
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rbp, rdx
jne 0x140003fa4
jmp 0x140003f16
lea rcx, [rsp + 0x150]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov r15, qword [r12 + 0x10]
mov word [rsp + 0x50], 0xb9
mov word [rsp + 0x52], 0xc2
mov word [rsp + 0x54], 0xd5
mov word [rsp + 0x56], 0xcd
mov word [rsp + 0x58], 0xc9
mov word [rsp + 0x5a], 0xcc
mov word [rsp + 0x5c], 0xcf
mov word [rsp + 0x5e], 0xc2
mov word [rsp + 0x60], 0xcf
mov word [rsp + 0x62], 0x8b
mov word [rsp + 0x64], 0xc2
mov word [rsp + 0x66], 0xd5
mov word [rsp + 0x68], 0xc2
mov word [rsp + 0x6a], 0x5d
cmp byte [0x1409c7a60], 0
jne 0x140004081
mov byte [0x1409c7a8c], 1
mov eax, 0
lea rcx, [0x1409c7a70]
movzx edx, word [rsp + rax*2 + 0x50]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xe
jne 0x14000405b
mov byte [0x1409c7a60], 1
lea rcx, [0x1400017cc]
call fcn.1400014f0
cmp byte [0x1409c7a8c], 0
je 0x1400040b3
lea rdx, [0x1409c7a70]
lea rcx, [rdx + 0x1c]
movzx eax, word [rdx]
sub ax, 0x205d
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x140004095
mov byte [0x1409c7a8c], 0
mov rdx, r15
lea rcx, [0x1409c7a70]
call sub.msvcrt.dll__wcsicmp
lea rdx, [rsp + 0x1670]
test eax, eax
jne 0x1400040d6
lea rdx, [rsp + 0x1880]
lea rcx, [rsp + 0x150]
mov r8, r15
call fcn.14000506e
mov rax, qword [r12 + 0x18]
test edi, edi
jne 0x140004140
movsxd r9, dword [0x140475880]
lea r8, [0x140044280]
mov rdx, qword [r12 + 8]
lea rcx, [rsp + 0xe30]
mov dword [rsp + 0x40], 1
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x1670]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x150]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
call fcn.1400018a5
jmp 0x140003f3e
movsxd r9, dword [0x1409bd2a0]
lea r8, [0x1404758a0]
jmp 0x1400040fd
mov byte [0x1409c7080], 0
mov rdx, rdi
lea rcx, [0x1409c7078]
call sub.msvcrt.dll__wcsicmp
mov edi, eax
test eax, eax
jne 0x1400041fa
test bl, bl
jne 0x1400041fa
add rsi, 0x20
cmp rsi, r13
je 0x1400046df
mov r12, rsi
mov rdi, qword [rsi]
cmp byte [0x1409c7070], 0
jne 0x1400041ce
mov byte [0x1409c7080], 1
mov word [0x1409c7078], 0x8c
mov word [0x1409c707a], 0x9b
mov word [0x1409c707c], 0x8f
mov word [0x1409c707e], 0x27
mov byte [0x1409c7070], 1
mov rcx, r14
call fcn.1400014f0
cmp byte [0x1409c7080], 0
je 0x140004157
lea rdx, [0x1409c7078]
movzx eax, word [rdx]
add ax, 0x6bd9
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rbp, rdx
jne 0x1400041de
jmp 0x140004150
lea rcx, [rsp + 0x150]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov r15, qword [r12 + 0x10]
mov word [rsp + 0x50], 0xf1
mov word [rsp + 0x52], 0xfa
mov word [rsp + 0x54], 0xd
mov word [rsp + 0x56], 5
mov word [rsp + 0x58], 1
mov word [rsp + 0x5a], 4
mov word [rsp + 0x5c], 7
mov word [rsp + 0x5e], 0xfa
mov word [rsp + 0x60], 7
mov word [rsp + 0x62], 0xc3
mov word [rsp + 0x64], 0xfa
mov word [rsp + 0x66], 0xd
mov word [rsp + 0x68], 0xfa
mov word [rsp + 0x6a], 0x95
cmp byte [0x1409c7040], 0
jne 0x1400042bb
mov byte [0x1409c706c], 1
mov eax, 0
lea rcx, [0x1409c7050]
movzx edx, word [rsp + rax*2 + 0x50]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xe
jne 0x140004295
mov byte [0x1409c7040], 1
lea rcx, [0x14000188b]
call fcn.1400014f0
cmp byte [0x1409c706c], 0
je 0x1400042ed
lea rdx, [0x1409c7050]
lea rcx, [rdx + 0x1c]
movzx eax, word [rdx]
add ax, 0x6d6b
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rcx, rdx
jne 0x1400042cf
mov byte [0x1409c706c], 0
mov rdx, r15
lea rcx, [0x1409c7050]
call sub.msvcrt.dll__wcsicmp
lea rdx, [rsp + 0x1670]
test eax, eax
jne 0x140004310
lea rdx, [rsp + 0x1880]
lea rcx, [rsp + 0x150]
mov r8, r15
call fcn.14000506e
mov rax, qword [r12 + 0x18]
test edi, edi
jne 0x14000437a
movsxd r9, dword [0x140475880]
lea r8, [0x140044280]
mov rdx, qword [r12 + 8]
lea rcx, [rsp + 0xe30]
mov dword [rsp + 0x40], 1
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x1670]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x150]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
call fcn.1400018a5
jmp 0x140004178
movsxd r9, dword [0x1409bd2a0]
lea r8, [0x1404758a0]
jmp 0x140004337
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xc20]
call fcn.140005cd5
mov rdx, rax
lea rcx, [rsp + 0xa10]
mov r8d, dword [rsp + 0x50]
call fcn.140005e1a
lea rcx, [rsp + 0x150]
mov r8d, 0x208
mov edx, 0
call sub.msvcrt.dll_memset
mov word [rsp + 0x70], 0xf1
mov word [rsp + 0x72], 8
mov word [rsp + 0x74], 0xf8
mov word [rsp + 0x76], 0xfd
mov word [rsp + 0x78], 9
mov word [rsp + 0x7a], 0xf6
mov word [rsp + 0x7c], 8
mov word [rsp + 0x7e], 0
mov word [rsp + 0x80], 8
mov word [rsp + 0x82], 0xc3
mov word [rsp + 0x84], 0xfa
mov word [rsp + 0x86], 0xd
mov word [rsp + 0x88], 0xfa
mov word [rsp + 0x8a], 0x95
cmp byte [0x1409c8a78], 0
jne 0x14000447f
mov byte [0x1409c8a9c], 1
mov eax, 0
lea rcx, [0x1409c8a80]
movzx edx, word [rsp + rax*2 + 0x70]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0xe
jne 0x140004459
mov byte [0x1409c8a78], 1
lea rcx, [0x14000168a]
call fcn.1400014f0
cmp byte [0x1409c8a9c], 0
je 0x1400044b1
lea rdx, [0x1409c8a80]
lea rcx, [rdx + 0x1c]
movzx eax, word [rdx]
add ax, 0x756b
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x140004493
mov byte [0x1409c8a9c], 0
lea rdx, [rsp + 0x1670]
lea rcx, [rsp + 0x150]
lea r8, [0x1409c8a80]
call fcn.14000506e
mov word [rsp + 0x70], 0xc
mov word [rsp + 0x72], 0x3a
mov word [rsp + 0x74], 7
mov word [rsp + 0x76], 0x16
mov word [rsp + 0x78], 0x59
mov word [rsp + 0x7a], 0x5c
mov word [rsp + 0x7c], 0x55
mov word [rsp + 0x7e], 7
mov word [rsp + 0x80], 0x16
mov word [rsp + 0x82], 0x5b
mov word [rsp + 0x84], 0x55
mov word [rsp + 0x86], 7
mov word [rsp + 0x88], 9
mov word [rsp + 0x8a], 0x2e
mov word [rsp + 0x8c], 0x56
mov word [rsp + 0x8e], 0x56
mov word [rsp + 0x90], 0x4e
mov word [rsp + 0x92], 0x53
mov word [rsp + 0x94], 0x4c
mov word [rsp + 0x96], 0x3c
mov word [rsp + 0x98], 0x57
mov word [rsp + 0x9a], 0x4b
mov word [rsp + 0x9c], 0x48
mov word [rsp + 0x9e], 0x5b
mov word [rsp + 0xa0], 0x4c
mov word [rsp + 0xa2], 0x3b
mov word [rsp + 0xa4], 0x48
mov word [rsp + 0xa6], 0x5a
mov word [rsp + 0xa8], 0x52
mov word [rsp + 0xaa], 0x34
mov word [rsp + 0xac], 0x48
mov word [rsp + 0xae], 0x4a
mov word [rsp + 0xb0], 0x4f
mov word [rsp + 0xb2], 0x50
mov word [rsp + 0xb4], 0x55
mov word [rsp + 0xb6], 0x4c
mov word [rsp + 0xb8], 0x38
mov word [rsp + 0xba], 0x2a
mov word [rsp + 0xbc], 9
mov word [rsp + 0xbe], 0xe7
cmp byte [0x1409c8a08], 0
jne 0x140004687
mov byte [0x1409c8a70], 1
mov eax, 0
lea rcx, [0x1409c8a20]
movzx edx, word [rsp + rax*2 + 0x70]
mov word [rcx + rax*2], dx
add rax, 1
cmp rax, 0x28
jne 0x140004661
mov byte [0x1409c8a08], 1
lea rcx, [0x1400016a4]
call fcn.1400014f0
cmp byte [0x1409c8a70], 0
je 0x1400046b9
lea rdx, [0x1409c8a20]
lea rcx, [rdx + 0x50]
movzx eax, word [rdx]
add ax, 0x2919
and ax, 0xff
mov word [rdx], ax
add rdx, 2
cmp rdx, rcx
jne 0x14000469b
mov byte [0x1409c8a70], 0
lea r8, [rsp + 0x150]
lea rdx, [rsp + 0x1670]
mov qword [rsp + 0x20], r8
lea r9, [0x1409c8a20]
mov ecx, 0
call fcn.140005818
mov eax, 0
add rsp, 0x1a98
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret