Function at 0x1400026a0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0x450]
sub rsp, 0x550
xor esi, esi
mov dword [rbp + 0x460], esi
movdqa xmm0, xmmword [str._C_PQFE]
movdqu xmmword [rbp + 0x68], xmm0
mov word [rbp + 0x78], 0x25
mov byte [rbp + 0x7a], 1
mov ecx, esi
lea eax, [rcx + 0x30]
xor byte [rbp + rcx + 0x68], al
inc rcx
cmp rcx, 0x11
jb 0x1400026e0
mov byte [rbp + 0x7a], sil
lea r8, [rbp + 0x79]
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x80]
call fcn.1400040e0
lea rcx, [rbp + 0x80]
call fcn.140002230
mov ebx, eax
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x14000275a
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002755
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002755
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
test ebx, ebx
jne 0x140003d00
mov dword [rsp + 0x30], 0x505d4360
mov dword [rsp + 0x34], 0x17454651
mov dword [rsp + 0x38], 0x50595870
mov dword [rsp + 0x3c], 0x1004f59
mov rcx, rsi
nop word [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0xe
jb 0x140002790
mov byte [rsp + 0x3f], sil
lea r8, [rsp + 0x3e]
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0xb8]
call fcn.1400040e0
nop
mov ebx, 0x3c000001
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0xb8]
call fcn.1400024e0
test al, al
jne 0x1400028b5
movdqa xmm0, xmmword [str.cHAGQX]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x50], 1
mov rcx, rsi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 0xf
jb 0x140002800
mov byte [rsp + 0x50], 0
lea r8, [rsp + 0x4f]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0xd8]
call fcn.1400040e0
nop
mov ebx, 0xfc000003
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0xd8]
call fcn.1400024e0
test al, al
jne 0x1400028b5
mov dword [rsp + 0x20], 0x56405867
mov dword [rsp + 0x24], 0x45575d47
mov word [rsp + 0x28], 0x53
mov byte [rsp + 0x2a], 1
mov rcx, rsi
nop word [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 9
jb 0x140002870
mov byte [rsp + 0x2a], 0
lea r8, [rsp + 0x29]
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x80]
call fcn.1400040e0
mov ebx, 0xfc000007
lea rcx, [rbp + 0x80]
call fcn.1400024e0
test al, al
jne 0x1400028b5
xor dil, dil
jmp 0x1400028b8
mov dil, 1
test bl, 4
je 0x140002905
and ebx, 0xfffffffb
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x140002905
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400028ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400028ff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
test bl, 2
je 0x140002952
and ebx, 0xfffffffd
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0xf
jbe 0x140002952
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000294c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000294c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
test bl, 1
je 0x14000299e
and ebx, 0xfffffffe
mov rdx, qword [rbp + 0xd0]
cmp rdx, 0xf
jbe 0x14000299e
inc rdx
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002999
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002999
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
test dil, dil
jne 0x140003d00
movdqa xmm0, xmmword [str.cRK_XT]
movdqu xmmword [rbp + 0x128], xmm0
mov word [rbp + 0x138], 0x78
mov byte [rbp + 0x13a], 1
mov rcx, rsi
nop word [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rbp + rcx + 0x128], al
inc rcx
cmp rcx, 0x11
jb 0x1400029d0
mov byte [rbp + 0x13a], 0
lea rdx, [rbp + 0x128]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400035ed
movdqa xmm0, xmmword [0x140006530]
movdqu xmmword [rbp + 0x68], xmm0
mov word [rbp + 0x78], 0x100
mov rcx, rsi
nop dword [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rbp + rcx + 0x68], al
inc rcx
cmp rcx, 0x10
jb 0x140002a20
mov byte [rbp + 0x79], 0
lea rdx, [rbp + 0x68]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400035ed
mov dword [rbp + 0x58], 0x5c5f547d
mov dword [rbp + 0x5c], 0x61164c46
mov dword [rbp + 0x60], 0x5e4d5c51
mov word [rbp + 0x64], 0x4e
mov byte [rbp + 0x66], 1
mov rcx, rsi
nop dword [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rbp + rcx + 0x58], al
inc rcx
cmp rcx, 0xd
jb 0x140002a70
mov byte [rbp + 0x66], 0
lea rdx, [rbp + 0x58]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400035ed
mov dword [rbp + 0x48], 0x505d4360
mov dword [rbp + 0x4c], 0x17454651
mov dword [rbp + 0x50], 0x4f495074
mov word [rbp + 0x54], 0x100
mov rcx, rsi
nop word [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rbp + rcx + 0x48], al
inc rcx
cmp rcx, 0xc
jb 0x140002ac0
mov byte [rbp + 0x55], 0
lea rdx, [rbp + 0x48]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400035ed
mov dword [rsp + 0x20], 0x4676427b
mov dword [rsp + 0x24], 0x45534559
mov word [rsp + 0x28], 0x100
mov rcx, rsi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 8
jb 0x140002b10
mov byte [rsp + 0x29], 0
lea rdx, [rsp + 0x20]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400035ed
mov dword [rsp + 0x30], 0x63666578
mov dword [rsp + 0x34], 0x55537114
mov dword [rsp + 0x38], 0x5e5d5e4d
mov word [rsp + 0x3c], 0x4e
mov byte [rsp + 0x3e], 1
mov rcx, rsi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0xd
jb 0x140002b70
mov byte [rsp + 0x3e], 0
lea rdx, [rsp + 0x30]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400035ed
mov dword [rbp - 0x68], 0x4a5e5d7f
mov dword [rbp - 0x64], 0x515770
mov byte [rbp - 0x60], 1
mov rcx, rsi
lea eax, [rcx + 0x30]
xor byte [rbp + rcx - 0x68], al
inc rcx
cmp rcx, 7
jb 0x140002bb0
mov byte [rbp - 0x60], 0
lea rdx, [rbp - 0x68]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400035ed
movdqa xmm0, xmmword [str.xefcpPTB__IoK_]
movdqu xmmword [rbp + 0xb8], xmm0
mov dword [rbp + 0xc8], 0x273925
mov byte [rbp + 0xcc], 1
mov rcx, rsi
nop dword [rax]
lea eax, [rcx + 0x30]
xor byte [rbp + rcx + 0xb8], al
inc rcx
cmp rcx, 0x13
jb 0x140002c00
mov byte [rbp + 0xcc], 0
lea r8, [rbp + 0xcb]
lea rdx, [rbp + 0xb8]
lea rcx, [rbp + 0x430]
call fcn.1400040e0
nop
or ebx, 8
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0x430]
call fcn.140002230
test eax, eax
jne 0x1400035ed
mov dword [rbp + 0x18], 0x56405867
mov dword [rbp + 0x1c], 0x45575d47
mov dword [rbp + 0x20], 0x435f1753
mov word [rbp + 0x24], 0x59
mov byte [rbp + 0x26], 1
mov rcx, rsi
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rbp + rcx + 0x18], al
inc rcx
cmp rcx, 0xd
jb 0x140002c80
mov byte [rbp + 0x26], 0
lea r8, [rbp + 0x25]
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x410]
call fcn.1400040e0
nop
or ebx, 0x10
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0x410]
call fcn.140002230
test eax, eax
jne 0x1400035ed
mov dword [rbp - 0x28], 0x435f4454
mov dword [rbp - 0x24], 0x19465457
mov dword [rbp - 0x20], 0x5f415d
mov byte [rbp - 0x1c], 1
mov rcx, rsi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rbp + rcx - 0x28], al
inc rcx
cmp rcx, 0xb
jb 0x140002cf0
mov byte [rbp - 0x1c], 0
lea r8, [rbp - 0x1d]
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x3f0]
call fcn.1400040e0
nop
or ebx, 0x20
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0x3f0]
call fcn.140002230
test eax, eax
jne 0x1400035ed
mov dword [rbp - 0x58], 0x57060748
mov dword [rbp - 0x54], 0x52185256
mov dword [rbp - 0x50], 0x1005c40
mov rcx, rsi
nop
lea eax, [rcx + 0x30]
xor byte [rbp + rcx - 0x58], al
inc rcx
cmp rcx, 0xa
jb 0x140002d50
mov byte [rbp - 0x4d], 0
lea r8, [rbp - 0x4e]
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x3d0]
call fcn.1400040e0
nop
or ebx, 0x40
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0x3d0]
call fcn.140002230
test eax, eax
jne 0x1400035ed
mov dword [rsp + 0x78], 0x5535559
mov dword [rsp + 0x7c], 0x4f531b00
mov word [rbp - 0x80], 0x5d
mov byte [rbp - 0x7e], 1
mov rcx, rsi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rsp + rcx + 0x78], al
inc rcx
cmp rcx, 9
jb 0x140002dc0
mov byte [rbp - 0x7e], 0
lea r8, [rbp - 0x7f]
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x3b0]
call fcn.1400040e0
nop
bts ebx, 7
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0x3b0]
call fcn.140002230
test eax, eax
jne 0x1400035ed
mov dword [rbp + 0x28], 0x63465e54
mov dword [rbp + 0x2c], 0x15d5051
mov dword [rbp + 0x30], 0x435f170c
mov word [rbp + 0x34], 0x59
mov byte [rbp + 0x36], 1
mov rcx, rsi
nop word [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rbp + rcx + 0x28], al
inc rcx
cmp rcx, 0xd
jb 0x140002e30
mov byte [rbp + 0x36], 0
lea r8, [rbp + 0x35]
lea rdx, [rbp + 0x28]
lea rcx, [rbp + 0x390]
call fcn.1400040e0
nop
bts ebx, 8
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0x390]
call fcn.140002230
test eax, eax
jne 0x1400035ed
mov dword [rbp - 0x78], 0x535559
mov dword [rbp - 0x74], 0x4f531b06
mov word [rbp - 0x70], 0x5d
mov byte [rbp - 0x6e], 1
mov rcx, rsi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rbp + rcx - 0x78], al
inc rcx
cmp rcx, 9
jb 0x140002ea0
mov byte [rbp - 0x6e], 0
lea r8, [rbp - 0x6f]
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x370]
call fcn.1400040e0
nop
bts ebx, 9
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0x370]
call fcn.140002230
test eax, eax
jne 0x1400035ed
mov dword [rsp + 0x58], 0x1d535559
mov dword [rsp + 0x5c], 0x534d51
mov byte [rsp + 0x60], 1
mov rcx, rsi
nop
lea eax, [rcx + 0x30]
xor byte [rsp + rcx + 0x58], al
inc rcx
cmp rcx, 7
jb 0x140002f00
mov byte [rsp + 0x60], 0
lea r8, [rsp + 0x5f]
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x350]
call fcn.1400040e0
nop
bts ebx, 0xa
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0x350]
call fcn.140002230
test eax, eax
jne 0x1400035ed
movdqa xmm0, xmmword [str.BTQ_UFE]
movdqu xmmword [rbp + 0x140], xmm0
mov byte [rbp + 0x150], 1
mov rcx, rsi
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rbp + rcx + 0x140], al
inc rcx
cmp rcx, 0xf
jb 0x140002f70
mov byte [rbp + 0x150], 0
lea r8, [rbp + 0x14f]
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x330]
call fcn.1400040e0
nop
bts ebx, 0xb
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0x330]
call fcn.140002230
test eax, eax
jne 0x1400035ed
mov dword [rbp - 0x18], 0x5f515442
mov dword [rbp - 0x14], 0x19454655
mov dword [rbp - 0x10], 0x5f415d
mov byte [rbp - 0xc], 1
mov rcx, rsi
nop
lea eax, [rcx + 0x30]
xor byte [rbp + rcx - 0x18], al
inc rcx
cmp rcx, 0xb
jb 0x140002fe0
mov byte [rbp - 0xc], 0
lea r8, [rbp - 0xd]
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x310]
call fcn.1400040e0
nop
bts ebx, 0xc
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0x310]
call fcn.140002230
test eax, eax
jne 0x1400035ed
mov dword [rbp - 8], 0x414b5458
mov dword [rbp - 4], 0x19454c55
mov dword [rbp], 0x5f415d
mov byte [rbp + 4], 1
mov rcx, rsi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rbp + rcx - 8], al
inc rcx
cmp rcx, 0xb
jb 0x140003050
mov byte [rbp + 4], 0
lea r8, [rbp + 3]
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x2f0]
call fcn.1400040e0
nop
bts ebx, 0xd
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0x2f0]
call fcn.140002230
test eax, eax
jne 0x1400035ed
mov dword [rbp + 0x38], 0x5b55585c
mov dword [rbp + 0x3c], 0x42595d40
mov dword [rbp + 0x40], 0x5e145c4b
mov dword [rbp + 0x44], 0x1005844
mov rcx, rsi
nop word [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rbp + rcx + 0x38], al
inc rcx
cmp rcx, 0xe
jb 0x1400030c0
mov byte [rbp + 0x47], 0
lea r8, [rbp + 0x46]
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0x2d0]
call fcn.1400040e0
nop
bts ebx, 0xe
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0x2d0]
call fcn.140002230
test eax, eax
jne 0x1400035ed
movdqa xmm0, xmmword [0x140006560]
movdqu xmmword [rbp + 0x80], xmm0
mov dword [rbp + 0x90], 0x266c7576
mov dword [rbp + 0x94], 0x100203c
mov rcx, rsi
nop
lea eax, [rcx + 0x30]
xor byte [rbp + rcx + 0x80], al
inc rcx
cmp rcx, 0x16
jb 0x140003130
mov byte [rbp + 0x97], 0
lea r8, [rbp + 0x96]
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x2b0]
call fcn.1400040e0
nop
bts ebx, 0xf
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0x2b0]
call fcn.140002230
test eax, eax
jne 0x1400035ed
movdqa xmm0, xmmword [0x140006520]
movdqu xmmword [rbp + 0xa0], xmm0
mov word [rbp + 0xb0], 0x25
mov byte [rbp + 0xb2], 1
mov rcx, rsi
nop word [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rbp + rcx + 0xa0], al
inc rcx
cmp rcx, 0x11
jb 0x1400031b0
mov byte [rbp + 0xb2], 0
lea r8, [rbp + 0xb1]
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x290]
call fcn.1400040e0
nop
bts ebx, 0x10
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0x290]
call fcn.140002230
test eax, eax
jne 0x1400035ed
mov dword [rsp + 0x40], 0x1e535559
mov dword [rsp + 0x44], 0x52000d4c
mov dword [rsp + 0x48], 0x5e144c55
mov dword [rsp + 0x4c], 0x1005844
mov rcx, rsi
nop word [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 0xe
jb 0x140003230
mov byte [rsp + 0x4f], 0
lea r8, [rsp + 0x4e]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x270]
call fcn.1400040e0
nop
bts ebx, 0x11
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0x270]
call fcn.140002230
test eax, eax
jne 0x1400035ed
movdqa xmm0, xmmword [str.SWTVLEZXJH]
movdqu xmmword [rbp + 0x158], xmm0
mov byte [rbp + 0x168], 1
mov rcx, rsi
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rbp + rcx + 0x158], al
inc rcx
cmp rcx, 0xf
jb 0x1400032a0
mov byte [rbp + 0x168], 0
lea r8, [rbp + 0x167]
lea rdx, [rbp + 0x158]
lea rcx, [rbp + 0x250]
call fcn.1400040e0
nop
bts ebx, 0x12
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0x250]
call fcn.140002230
test eax, eax
jne 0x1400035ed
mov dword [rbp - 0x48], 0x5b5c5847
mov dword [rbp - 0x44], 0x52184d51
mov dword [rbp - 0x40], 0x1005c40
mov rcx, rsi
nop dword [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rbp + rcx - 0x48], al
inc rcx
cmp rcx, 0xa
jb 0x140003310
mov byte [rbp - 0x3d], 0
lea r8, [rbp - 0x3e]
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x230]
call fcn.1400040e0
nop
bts ebx, 0x13
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0x230]
call fcn.140002230
test eax, eax
jne 0x1400035ed
mov dword [rsp + 0x68], 0x44575858
mov dword [rsp + 0x6c], 0x524e501a
mov word [rsp + 0x70], 0x100
mov rcx, rsi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rsp + rcx + 0x68], al
inc rcx
cmp rcx, 8
jb 0x140003380
mov byte [rsp + 0x71], 0
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x210]
call fcn.1400040e0
nop
bts ebx, 0x14
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0x210]
call fcn.140002230
test eax, eax
jne 0x1400035ed
mov dword [rbp + 8], 0x57565856
mov dword [rbp + 0xc], 0x19445058
mov dword [rbp + 0x10], 0x5f415d
mov byte [rbp + 0x14], 1
mov rcx, rsi
nop word [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rbp + rcx + 8], al
inc rcx
cmp rcx, 0xb
jb 0x1400033f0
mov byte [rbp + 0x14], 0
lea r8, [rbp + 0x13]
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x1f0]
call fcn.1400040e0
nop
bts ebx, 0x15
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0x1f0]
call fcn.140002230
test eax, eax
jne 0x1400035ed
movdqa xmm0, xmmword [0x140006540]
movdqu xmmword [rbp + 0xf8], xmm0
mov word [rbp + 0x108], 0x100
mov rcx, rsi
lea eax, [rcx + 0x30]
xor byte [rbp + rcx + 0xf8], al
inc rcx
cmp rcx, 0x10
jb 0x140003453
mov byte [rbp + 0x109], 0
lea r8, [rbp + 0x108]
lea rdx, [rbp + 0xf8]
lea rcx, [rbp + 0x1d0]
call fcn.1400040e0
nop
bts ebx, 0x16
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0x1d0]
call fcn.140002230
test eax, eax
jne 0x1400035ed
movdqa xmm0, xmmword [str.XEFCPPTB__ILOQ]
movdqu xmmword [rbp + 0xd8], xmm0
mov dword [rbp + 0xe8], 0x273925
mov byte [rbp + 0xec], 1
mov rcx, rsi
nop word [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rbp + rcx + 0xd8], al
inc rcx
cmp rcx, 0x13
jb 0x1400034d0
mov byte [rbp + 0xec], 0
lea r8, [rbp + 0xeb]
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x1b0]
call fcn.1400040e0
nop
bts ebx, 0x17
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0x1b0]
call fcn.140002230
test eax, eax
jne 0x1400035ed
mov dword [rbp - 0x38], 0x5f4b5243
mov dword [rbp - 0x34], 0x52185458
mov dword [rbp - 0x30], 0x1005c40
mov rcx, rsi
nop dword [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rbp + rcx - 0x38], al
inc rcx
cmp rcx, 0xa
jb 0x140003540
mov byte [rbp - 0x2d], 0
lea r8, [rbp - 0x2e]
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x190]
call fcn.1400040e0
nop
bts ebx, 0x18
mov dword [rbp + 0x460], ebx
lea rcx, [rbp + 0x190]
call fcn.140002230
test eax, eax
jne 0x1400035ed
movdqa xmm0, xmmword [0x140006550]
movdqu xmmword [rbp + 0x110], xmm0
mov word [rbp + 0x120], 0x100
nop dword [rax]
lea eax, [rsi + 0x30]
xor byte [rbp + rsi + 0x110], al
inc rsi
cmp rsi, 0x10
jb 0x1400035a0
mov byte [rbp + 0x121], 0
lea r8, [rbp + 0x120]
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x170]
call fcn.1400040e0
bts ebx, 0x19
lea rcx, [rbp + 0x170]
call fcn.140002230
test eax, eax
jne 0x1400035ed
xor dil, dil
jmp 0x1400035f0
mov dil, 1
bt ebx, 0x19
jae 0x14000363f
btr ebx, 0x19
mov rdx, qword [rbp + 0x188]
cmp rdx, 0xf
jbe 0x14000363f
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003639
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003639
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
bt ebx, 0x18
jae 0x14000368e
btr ebx, 0x18
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0xf
jbe 0x14000368e
inc rdx
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003688
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003688
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
bt ebx, 0x17
jae 0x1400036dd
btr ebx, 0x17
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0xf
jbe 0x1400036dd
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400036d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400036d7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
bt ebx, 0x16
jae 0x14000372c
btr ebx, 0x16
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 0xf
jbe 0x14000372c
inc rdx
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003726
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003726
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
bt ebx, 0x15
jae 0x14000377b
btr ebx, 0x15
mov rdx, qword [rbp + 0x208]
cmp rdx, 0xf
jbe 0x14000377b
inc rdx
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003775
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003775
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
bt ebx, 0x14
jae 0x1400037ca
btr ebx, 0x14
mov rdx, qword [rbp + 0x228]
cmp rdx, 0xf
jbe 0x1400037ca
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400037c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400037c4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
bt ebx, 0x13
jae 0x140003819
btr ebx, 0x13
mov rdx, qword [rbp + 0x248]
cmp rdx, 0xf
jbe 0x140003819
inc rdx
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003813
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003813
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
bt ebx, 0x12
jae 0x140003868
btr ebx, 0x12
mov rdx, qword [rbp + 0x268]
cmp rdx, 0xf
jbe 0x140003868
inc rdx
mov rcx, qword [rbp + 0x250]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003862
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003862
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
bt ebx, 0x11
jae 0x1400038b7
btr ebx, 0x11
mov rdx, qword [rbp + 0x288]
cmp rdx, 0xf
jbe 0x1400038b7
inc rdx
mov rcx, qword [rbp + 0x270]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400038b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400038b1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
bt ebx, 0x10
jae 0x140003906
btr ebx, 0x10
mov rdx, qword [rbp + 0x2a8]
cmp rdx, 0xf
jbe 0x140003906
inc rdx
mov rcx, qword [rbp + 0x290]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003900
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003900
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
bt ebx, 0xf
jae 0x140003955
btr ebx, 0xf
mov rdx, qword [rbp + 0x2c8]
cmp rdx, 0xf
jbe 0x140003955
inc rdx
mov rcx, qword [rbp + 0x2b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000394f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000394f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
bt ebx, 0xe
jae 0x1400039a4
btr ebx, 0xe
mov rdx, qword [rbp + 0x2e8]
cmp rdx, 0xf
jbe 0x1400039a4
inc rdx
mov rcx, qword [rbp + 0x2d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000399e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000399e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
bt ebx, 0xd
jae 0x1400039f3
btr ebx, 0xd
mov rdx, qword [rbp + 0x308]
cmp rdx, 0xf
jbe 0x1400039f3
inc rdx
mov rcx, qword [rbp + 0x2f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400039ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400039ed
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
bt ebx, 0xc
jae 0x140003a42
btr ebx, 0xc
mov rdx, qword [rbp + 0x328]
cmp rdx, 0xf
jbe 0x140003a42
inc rdx
mov rcx, qword [rbp + 0x310]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003a3c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003a3c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
bt ebx, 0xb
jae 0x140003a91
btr ebx, 0xb
mov rdx, qword [rbp + 0x348]
cmp rdx, 0xf
jbe 0x140003a91
inc rdx
mov rcx, qword [rbp + 0x330]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003a8b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003a8b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
bt ebx, 0xa
jae 0x140003ae0
btr ebx, 0xa
mov rdx, qword [rbp + 0x368]
cmp rdx, 0xf
jbe 0x140003ae0
inc rdx
mov rcx, qword [rbp + 0x350]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003ada
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003ada
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
bt ebx, 9
jae 0x140003b2f
btr ebx, 9
mov rdx, qword [rbp + 0x388]
cmp rdx, 0xf
jbe 0x140003b2f
inc rdx
mov rcx, qword [rbp + 0x370]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003b29
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003b29
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
bt ebx, 8
jae 0x140003b7e
btr ebx, 8
mov rdx, qword [rbp + 0x3a8]
cmp rdx, 0xf
jbe 0x140003b7e
inc rdx
mov rcx, qword [rbp + 0x390]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003b78
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003b78
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
test bl, bl
jns 0x140003bcb
btr ebx, 7
mov rdx, qword [rbp + 0x3c8]
cmp rdx, 0xf
jbe 0x140003bcb
inc rdx
mov rcx, qword [rbp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003bc5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003bc5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
test bl, 0x40
je 0x140003c18
and ebx, 0xffffffbf
mov rdx, qword [rbp + 0x3e8]
cmp rdx, 0xf
jbe 0x140003c18
inc rdx
mov rcx, qword [rbp + 0x3d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003c12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003c12
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
test bl, 0x20
je 0x140003c65
and ebx, 0xffffffdf
mov rdx, qword [rbp + 0x408]
cmp rdx, 0xf
jbe 0x140003c65
inc rdx
mov rcx, qword [rbp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003c5f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003c5f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
test bl, 0x10
je 0x140003cb2
and ebx, 0xffffffef
mov rdx, qword [rbp + 0x428]
cmp rdx, 0xf
jbe 0x140003cb2
inc rdx
mov rcx, qword [rbp + 0x410]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003cac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003cac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
nop
test bl, 8
je 0x140003cfb
mov rdx, qword [rbp + 0x448]
cmp rdx, 0xf
jbe 0x140003cfb
inc rdx
mov rcx, qword [rbp + 0x430]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003cf6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003cf6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000472c
test dil, dil
je 0x140003d09
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea r11, [rsp + 0x550]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret