Function at 0x140027a10
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x320]
sub rsp, 0x420
mov rax, qword [0x1401973d0]
xor rax, rsp
mov qword [rbp + 0x318], rax
mov r13, rcx
mov qword [rbp + 0x2a0], rcx
call fcn.14000fb60
mov rcx, rax
test rax, rax
je 0x140028e10
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x2f0], rax
call fcn.14000fb60
mov rcx, rax
test rax, rax
je 0x140028e1b
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x2f8], rax
mov eax, 6
mov dword [rbp + 0x18], eax
mov dword [rbp + 0x1c], 0x49004d
mov dword [rbp + 0x20], 0x5a005e
mov dword [rbp + 0x24], 0x580048
mov dword [rbp + 0x28], 0x3e
xor r14d, r14d
mov edx, r14d
test eax, eax
je 0x140027ae9
nop dword [rax]
nop dword [rax + rax]
mov eax, edx
lea rcx, [rbp + 0x1c]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rbp + 0x18]
cmp edx, eax
jb 0x140027ad0
mov word [rbp + rax*2 + 0x1c], r14w
mov rax, qword [r13]
lea r8, [rbp + 0x1c]
sub r8, rax
nop word [rax + rax]
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x140027b14
add rax, 2
test ecx, ecx
jne 0x140027b00
mov eax, 1
test edx, edx
jne 0x140027b25
mov dword [0x1401a2bc4], eax
jmp 0x140027b2b
mov eax, dword [0x1401a2bc4]
mov dword [0x1401a2bb8], eax
mov rax, qword [0x1401a6bd8]
mov qword [0x1401a2bb0], rax
lea rcx, [rbp + 0x290]
call fcn.140002740
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rdi, qword [0x1401a6c08]
add rdi, 0xffffffffffffffe8
mov rbx, 0xffffffffffffffff
cmp rcx, rdi
je 0x140027bb7
cmp dword [rdi + 0x10], 0
jl 0x140027ba6
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x140027ba6
call fcn.14000c810
mov rsi, rax
mov ecx, ebx
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x140027b99
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [r8 + 8]
lea rax, [rsi + 0x18]
mov qword [0x1401a6c08], rax
jmp 0x140027bb7
mov r8d, dword [rdx - 0x10]
lea rcx, [0x1401a6c08]
call fcn.14000c910
nop
mov rdx, qword [rbp + 0x290]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140027bd7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rax, qword [0x1401a6c08]
cmp word [rax], 0
jne 0x140027daa
lea rax, [rsp + 0x70]
mov qword [rbp + 0x78], rax
lea rax, [rsp + 0x68]
mov qword [rbp - 0x50], rax
mov eax, r14d
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x34], 0x38
mov word [rsp + rax*2 + 0x34], r14w
call fcn.14000fb60
mov rcx, rax
test rax, rax
je 0x140028e26
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x34]
cmp rax, 0x10000
lea rax, [rsp + 0x34]
jae 0x140027c50
movzx edx, ax
lea rcx, [rsp + 0x70]
call fcn.14000c690
jmp 0x140027c6e
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x140027c53
lea rdx, [rsp + 0x34]
lea rcx, [rsp + 0x70]
call fcn.14000c910
nop
mov eax, 0x11
mov dword [rbp - 0x10], eax
mov dword [rbp - 0xc], 0x6d7268f8
mov dword [rbp - 8], 0x6711520a
mov dword [rbp - 4], 0x88f85bb5
mov dword [rbp], 0x72776b5d
mov dword [rbp + 4], 0x350033
mov dword [rbp + 8], 0x220027
mov dword [rbp + 0xc], 0x8bb20029
mov dword [rbp + 0x10], 0x67a26886
mov dword [rbp + 0x14], 0x49ff49
mov edx, r14d
nop dword [rax + rax]
mov eax, edx
lea rcx, [rbp - 0xc]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rbp - 0x10]
cmp edx, eax
jb 0x140027cc0
mov word [rbp + rax*2 - 0xc], r14w
call fcn.14000fb60
mov rcx, rax
test rax, rax
je 0x140028e31
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
lea rax, [rbp - 0xc]
cmp rax, 0x10000
lea rax, [rbp - 0xc]
jae 0x140027d1e
movzx edx, ax
lea rcx, [rsp + 0x68]
call fcn.14000c690
jmp 0x140027d3b
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x140027d21
lea rdx, [rbp - 0xc]
lea rcx, [rsp + 0x68]
call fcn.14000c910
nop
cmp dword [0x1401a2bb8], 0
jne 0x140027d6e
mov r9d, 0x10
mov r8, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x68]
mov rcx, qword [0x1401a2bb0]
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [0x1401a2bb8], 0
je 0x140028e3c
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140027d8c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140027daa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rax, [rbp + 0x58]
mov qword [rbp - 0x50], rax
mov edi, 9
mov dword [rbp - 0x68], edi
mov dword [rbp - 0x64], 0x4d004b
mov dword [rbp - 0x60], 0x5a005f
mov dword [rbp - 0x5c], 0x130051
mov dword [rbp - 0x58], 0x47005b
mov dword [rbp - 0x54], 0x410025
mov edx, r14d
mov eax, edx
lea rcx, [rbp - 0x64]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rbp - 0x68]
cmp edx, eax
jb 0x140027de0
mov word [rbp + rax*2 - 0x64], r14w
call fcn.14000fb60
mov rcx, rax
test rax, rax
je 0x140028e44
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x58], rax
lea rax, [rbp - 0x64]
cmp rax, 0x10000
lea rax, [rbp - 0x64]
jae 0x140027e3c
movzx edx, ax
lea rcx, [rbp + 0x58]
call fcn.14000c690
jmp 0x140027e59
mov r8, rbx
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x140027e40
lea rdx, [rbp - 0x64]
lea rcx, [rbp + 0x58]
call fcn.14000c910
nop
lea rcx, [rbp + 0x58]
call fcn.140004b90
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x1e
mov dword [rbp + 0x220], eax
mov dword [rbp + 0x224], 0x5a0017
mov dword [rbp + 0x228], 0x6f001a
mov dword [rbp + 0x22c], 0x6e007d
mov dword [rbp + 0x230], 0x740075
mov dword [rbp + 0x234], 0xd0009
mov dword [rbp + 0x238], 0x63000e
mov dword [rbp + 0x23c], 0x3006b
mov dword [rbp + 0x240], 0x680066
mov dword [rbp + 0x244], 0x40001
mov edi, 4
mov dword [rbp + 0x248], 0x69006a
mov dword [rbp + 0x24c], 0x39003f
mov dword [rbp + 0x250], 0x2e002b
mov dword [rbp + 0x254], 0x7f003d
mov dword [rbp + 0x258], 0x2b0037
mov dword [rbp + 0x25c], 0x770031
mov dword [rbp + 0x260], 0x56
mov edx, r14d
test eax, eax
je 0x140027f4f
nop dword [rax]
nop dword [rax + rax]
mov eax, edx
lea rcx, [rbp + 0x224]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rbp + 0x220]
cmp edx, eax
jb 0x140027f30
mov word [rbp + rax*2 + 0x224], r14w
lea rdx, [rbp + 0x224]
lea rcx, [rbp + 0x2f0]
call fcn.14000cb80
mov eax, edi
mov dword [rbp - 0x48], eax
mov dword [rbp - 0x44], 0x490057
mov dword [rbp - 0x40], 0x55005f
mov dword [rbp - 0x3c], 0x3c
mov edx, r14d
nop dword [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x44]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rbp - 0x48]
cmp edx, eax
jb 0x140027f90
mov word [rbp + rax*2 - 0x44], r14w
mov dword [rsp + 0x58], 3
mov dword [rsp + 0x5c], 0x54005b
mov dword [rsp + 0x60], 0x3b005e
mov edx, r14d
nop word [rax + rax]
mov eax, edx
lea rcx, [rsp + 0x5c]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rsp + 0x58]
cmp edx, eax
jb 0x140027fd0
mov word [rsp + rax*2 + 0x5c], r14w
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
mov r9, qword [rbp + 0x2f0]
lea r8, [rsp + 0x5c]
lea rdx, [rbp - 0x44]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x298]
call fcn.140002cb0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rdi, qword [0x1401a6c00]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x14002808f
cmp dword [rdi + 0x10], 0
jl 0x14002807e
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x14002807e
call fcn.14000c810
mov rsi, rax
mov ecx, ebx
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x140028071
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [r8 + 8]
lea rax, [rsi + 0x18]
mov qword [0x1401a6c00], rax
jmp 0x14002808f
mov r8d, dword [rdx - 0x10]
lea rcx, [0x1401a6c00]
call fcn.14000c910
nop
mov rdx, qword [rbp + 0x298]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400280af
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
call fcn.140026ce0
call fcn.140026480
mov eax, 0x2c
mov dword [rbp + 0xf0], eax
mov dword [rbp + 0xf4], 0x4d0050
mov dword [rbp + 0xf8], 0x4b004e
mov dword [rbp + 0xfc], 0x120006
mov dword [rbp + 0x100], 0x570011
mov dword [rbp + 0x104], 0x6c003a
mov dword [rbp + 0x108], 0x2c0021
mov dword [rbp + 0x10c], 0x23002a
mov dword [rbp + 0x110], 0x20002f
mov dword [rbp + 0x114], 0x260066
mov dword [rbp + 0x118], 0x380039
mov dword [rbp + 0x11c], 0x2c0061
mov dword [rbp + 0x120], 0x2c002d
mov dword [rbp + 0x124], 0x3d0035
mov dword [rbp + 0x128], 0x210037
mov dword [rbp + 0x12c], 0x210035
mov dword [rbp + 0x130], 0x790033
mov dword [rbp + 0x134], 0x350039
mov dword [rbp + 0x138], 0x220033
mov dword [rbp + 0x13c], 0x330029
mov dword [rbp + 0x140], 0x2c003d
mov dword [rbp + 0x144], 0x2004e
mov r12d, 2
mov dword [rbp + 0x148], 0xe000d
mov dword [rbp + 0x14c], 0x64
mov edx, r14d
nop dword [rax]
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp + 0xf4]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rbp + 0xf0]
cmp edx, eax
jb 0x1400281c0
mov word [rbp + rax*2 + 0xf4], r14w
call fcn.14000fb60
mov rcx, rax
test rax, rax
je 0x140028e4f
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x300], rax
lea rax, [rbp + 0xf4]
cmp rax, 0x10000
lea rax, [rbp + 0xf4]
jae 0x140028231
movzx edx, ax
lea rcx, [rbp + 0x300]
call fcn.14000c690
jmp 0x140028253
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x140028234
lea rdx, [rbp + 0xf4]
lea rcx, [rbp + 0x300]
call fcn.14000c910
nop
mov eax, 0x2d
mov dword [rbp + 0x150], eax
mov dword [rbp + 0x154], 0x4d0050
mov dword [rbp + 0x158], 0x4b004e
mov dword [rbp + 0x15c], 0x120006
mov dword [rbp + 0x160], 0x570011
mov dword [rbp + 0x164], 0x6c003a
mov dword [rbp + 0x168], 0x2c0021
mov dword [rbp + 0x16c], 0x23002a
mov dword [rbp + 0x170], 0x20002f
mov dword [rbp + 0x174], 0x260066
mov dword [rbp + 0x178], 0x380039
mov dword [rbp + 0x17c], 0x2e0061
mov dword [rbp + 0x180], 0x620020
mov dword [rbp + 0x184], 0x300038
mov dword [rbp + 0x188], 0x34003c
mov dword [rbp + 0x18c], 0x3d002e
mov dword [rbp + 0x190], 0x220039
mov dword [rbp + 0x194], 0x380076
mov dword [rbp + 0x198], 0x320036
mov dword [rbp + 0x19c], 0x280025
mov dword [rbp + 0x1a0], 0x3c0030
mov dword [rbp + 0x1a4], 0x4f0013
mov dword [rbp + 0x1a8], 0xc0001
mov dword [rbp + 0x1ac], 0x650009
mov edx, r14d
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp + 0x154]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rbp + 0x150]
cmp edx, eax
jb 0x140028350
mov word [rbp + rax*2 + 0x154], r14w
call fcn.14000fb60
mov rcx, rax
test rax, rax
je 0x140028e5a
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x308], rax
lea rax, [rbp + 0x154]
cmp rax, 0x10000
lea rax, [rbp + 0x154]
jae 0x1400283c1
movzx edx, ax
lea rcx, [rbp + 0x308]
call fcn.14000c690
jmp 0x1400283e3
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x1400283c4
lea rdx, [rbp + 0x154]
lea rcx, [rbp + 0x308]
call fcn.14000c910
nop
mov edx, 0x35
mov dword [rbp + 0x1b0], edx
mov dword [rbp + 0x1b4], 0x4d0050
mov dword [rbp + 0x1b8], 0x4b004e
mov dword [rbp + 0x1bc], 0x120006
mov dword [rbp + 0x1c0], 0x570011
mov dword [rbp + 0x1c4], 0x6c003a
mov dword [rbp + 0x1c8], 0x2c0021
mov dword [rbp + 0x1cc], 0x23002a
mov dword [rbp + 0x1d0], 0x20002f
mov dword [rbp + 0x1d4], 0x260066
mov dword [rbp + 0x1d8], 0x380039
mov dword [rbp + 0x1dc], 0x2c0061
mov dword [rbp + 0x1e0], 0x2c002d
mov dword [rbp + 0x1e4], 0x3d0035
mov dword [rbp + 0x1e8], 0x210037
mov dword [rbp + 0x1ec], 0x210035
mov dword [rbp + 0x1f0], 0x7a0033
mov dword [rbp + 0x1f4], 0x2f0037
mov dword [rbp + 0x1f8], 0x29003f
mov dword [rbp + 0x1fc], 0x38002f
mov dword [rbp + 0x200], 0x2c003f
mov dword [rbp + 0x204], 0x4e
mov dword [rbp + 0x208], 0xa000e
mov dword [rbp + 0x20c], 0x10001d
mov dword [rbp + 0x210], 0x40008
mov dword [rbp + 0x214], 0x47001b
mov dword [rbp + 0x218], 0x40009
mov dword [rbp + 0x21c], 0x6d0001
mov edx, r14d
nop
mov eax, edx
lea rcx, [rbp + 0x1b4]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rbp + 0x1b0]
cmp edx, eax
jb 0x140028500
mov word [rbp + rax*2 + 0x1b4], r14w
call fcn.14000fb60
mov rcx, rax
test rax, rax
je 0x140028e65
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x310], rax
lea rax, [rbp + 0x1b4]
cmp rax, 0x10000
lea rax, [rbp + 0x1b4]
jae 0x140028571
movzx edx, ax
lea rcx, [rbp + 0x310]
call fcn.14000c690
jmp 0x140028593
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x140028574
lea rdx, [rbp + 0x1b4]
lea rcx, [rbp + 0x310]
call fcn.14000c910
nop
mov rdi, r14
lea rsi, [rbp + 0x300]
nop dword [rax]
mov ecx, 8
mov dword [rbp + 0x60], ecx
mov dword [rbp + 0x64], 0x4a001d
mov dword [rbp + 0x68], 0x5f0015
mov dword [rbp + 0x6c], 0x5b004b
mov dword [rbp + 0x70], 0x770011
mov dword [rbp + 0x74], 0x40
mov eax, r14d
nop
mov ecx, eax
lea rdx, [rbp + 0x64]
lea rdx, [rdx + rcx*2]
lea ecx, [rax + 0x38]
xor word [rdx], cx
inc eax
mov ecx, dword [rbp + 0x60]
cmp eax, ecx
jb 0x1400285d0
mov word [rbp + rcx*2 + 0x64], r14w
mov r8, qword [rsi]
lea rdx, [rbp + 0x64]
lea rcx, [rbp + 0x2f8]
call fcn.14000cb80
mov eax, 0xa
mov dword [rbp + 0xa0], eax
mov dword [rbp + 0xa4], 0x4a001d
mov dword [rbp + 0xa8], 0x530066
mov dword [rbp + 0xac], 0x590055
mov dword [rbp + 0xb0], 0x5b0010
mov dword [rbp + 0xb4], 0x2d002c
mov dword [rbp + 0xb8], 0x42
mov edx, r14d
test eax, eax
je 0x14002866f
mov eax, edx
lea rcx, [rbp + 0xa4]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rbp + 0xa0]
cmp edx, eax
jb 0x140028650
mov word [rbp + rax*2 + 0xa4], r14w
mov r8, qword [0x1401a6c08]
lea rdx, [rbp + 0xa4]
lea rcx, [rbp + 0x2f0]
call fcn.14000cb80
lea rax, [rbp + 0x288]
mov qword [rbp - 0x50], rax
mov rcx, qword [rbp + 0x2f0]
add rcx, 0xffffffffffffffe8
call fcn.14000c810
add rax, 0x18
mov qword [rbp + 0x288], rax
mov rcx, qword [rbp + 0x2f8]
add rcx, 0xffffffffffffffe8
call fcn.14000c810
add rax, 0x18
mov qword [rbp + 0x280], rax
lea rdx, [rbp + 0x288]
lea rcx, [rbp + 0x280]
call fcn.140007750
test al, al
jne 0x140028703
inc rdi
add rsi, 8
cmp rdi, 3
jb 0x1400285a0
mov eax, dword [0x1401a2bc4]
jmp 0x140028711
mov eax, dword [0x1401a2bc4]
inc eax
mov dword [0x1401a2bc4], eax
cmp eax, 1
je 0x140028908
lea rax, [rbp - 0x80]
mov qword [rbp - 0x50], rax
lea rax, [rsp + 0x78]
mov qword [rbp + 0x78], rax
mov eax, r12d
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x3c], 0x8bd69521
mov dword [rsp + 0x40], 0x3a
mov edx, r14d
nop word [rax + rax]
mov eax, edx
lea rcx, [rsp + 0x3c]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rsp + 0x38]
cmp edx, eax
jb 0x140028750
mov word [rsp + rax*2 + 0x3c], r14w
call fcn.14000fb60
mov rcx, rax
test rax, rax
je 0x140028e70
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
lea rax, [rsp + 0x3c]
cmp rax, 0x10000
lea rax, [rsp + 0x3c]
jae 0x1400287b0
movzx edx, ax
lea rcx, [rbp - 0x80]
call fcn.14000c690
jmp 0x1400287cd
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x1400287b3
lea rdx, [rsp + 0x3c]
lea rcx, [rbp - 0x80]
call fcn.14000c910
nop
mov eax, 0x10
mov dword [rbp - 0x38], eax
mov dword [rbp - 0x34], 0x7ee57f69
mov dword [rbp - 0x30], 0x52936cd8
mov dword [rbp - 0x2c], 0xc0014
mov dword [rbp - 0x28], 0xff330017
mov dword [rbp - 0x24], 0x918c8bb7
mov dword [rbp - 0x20], 0x8f9365f2
mov dword [rbp - 0x1c], 0x6b218808
mov dword [rbp - 0x18], 0x5ec87a4d
mov dword [rbp - 0x14], 0x48
mov edx, r14d
test eax, eax
je 0x140028839
nop dword [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x34]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rbp - 0x38]
cmp edx, eax
jb 0x140028820
mov word [rbp + rax*2 - 0x34], r14w
call fcn.14000fb60
mov rcx, rax
test rax, rax
je 0x140028e7b
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rax, [rbp - 0x34]
cmp rax, 0x10000
lea rax, [rbp - 0x34]
jae 0x14002887e
movzx edx, ax
lea rcx, [rsp + 0x78]
call fcn.14000c690
jmp 0x14002889b
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x140028881
lea rdx, [rbp - 0x34]
lea rcx, [rsp + 0x78]
call fcn.14000c910
nop
cmp dword [0x1401a2bb8], 0
jne 0x1400288cd
mov r9d, 0x10
mov r8, qword [rbp - 0x80]
mov rdx, qword [rsp + 0x78]
mov rcx, qword [0x1401a2bb0]
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [0x1401a2bb8], 0
je 0x140028e86
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400288eb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140028908
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea r15, [rbp + 0x300]
nop
mov dword [rbp + 0x80], 0xb
mov dword [rbp + 0x84], 0x4a001d
mov dword [rbp + 0x88], 0x5f0015
mov dword [rbp + 0x8c], 0x5b004b
mov dword [rbp + 0x90], 0x570011
mov dword [rbp + 0x94], 0x250029
mov dword [rbp + 0x98], 0x430070
xor edi, edi
mov edx, edi
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp + 0x84]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rbp + 0x80]
cmp edx, eax
jb 0x140028960
mov word [rbp + rax*2 + 0x84], di
mov r8, qword [r15]
lea rdx, [rbp + 0x84]
lea rcx, [rbp + 0x2f8]
call fcn.14000cb80
mov eax, 0x12
mov dword [rbp + 0xc0], eax
mov dword [rbp + 0xc4], 0x4a001d
mov dword [rbp + 0xc8], 0x480066
mov dword [rbp + 0xcc], 0x580048
mov dword [rbp + 0xd0], 0x52005f
mov dword [rbp + 0xd4], 0x220001
mov dword [rbp + 0xd8], 0x2a0036
mov dword [rbp + 0xdc], 0x200032
mov dword [rbp + 0xe0], 0x2f001a
mov dword [rbp + 0xe4], 0x2d0021
mov dword [rbp + 0xe8], 0x4a
mov edx, edi
test eax, eax
je 0x140028a3f
nop dword [rax]
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp + 0xc4]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rbp + 0xc0]
cmp edx, eax
jb 0x140028a20
mov word [rbp + rax*2 + 0xc4], di
mov r8, qword [0x1401a6c00]
lea rdx, [rbp + 0xc4]
lea rcx, [rbp + 0x2f0]
call fcn.14000cb80
lea rax, [rbp + 0x278]
mov qword [rbp - 0x50], rax
mov rdi, qword [rbp + 0x2f0]
lea rcx, [rdi - 0x18]
call fcn.14000c810
add rax, 0x18
mov qword [rbp + 0x278], rax
mov rsi, qword [rbp + 0x2f8]
lea rcx, [rsi - 0x18]
call fcn.14000c810
add rax, 0x18
mov qword [rbp + 0x270], rax
lea rdx, [rbp + 0x278]
lea rcx, [rbp + 0x270]
call fcn.140007750
test al, al
jne 0x140028ad2
inc r14
add r15, 8
cmp r14, 3
jb 0x140028910
mov eax, dword [0x1401a2bc4]
jmp 0x140028ae0
mov eax, dword [0x1401a2bc4]
inc eax
mov dword [0x1401a2bc4], eax
xor r14d, r14d
cmp eax, 2
je 0x140028d84
lea rax, [rbp - 0x70]
mov qword [rbp - 0x50], rax
lea rax, [rbp - 0x78]
mov qword [rbp + 0x78], rax
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x4c], 0x8bd69521
mov dword [rsp + 0x50], 0x3a
mov edx, r14d
nop dword [rax]
nop dword [rax + rax]
mov eax, edx
lea rcx, [rsp + 0x4c]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov r12d, dword [rsp + 0x48]
cmp edx, r12d
jb 0x140028b20
mov word [rsp + r12*2 + 0x4c], r14w
call fcn.14000fb60
mov rcx, rax
test rax, rax
je 0x140028e8e
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
lea rax, [rsp + 0x4c]
cmp rax, 0x10000
lea rax, [rsp + 0x4c]
jae 0x140028b82
movzx edx, ax
lea rcx, [rbp - 0x70]
call fcn.14000c690
jmp 0x140028b9f
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x140028b85
lea rdx, [rsp + 0x4c]
lea rcx, [rbp - 0x70]
call fcn.14000c910
nop
mov r15d, 0x10
mov eax, r15d
mov dword [rbp + 0x30], eax
mov dword [rbp + 0x34], 0x7ee57f69
mov dword [rbp + 0x38], 0x52936cd8
mov dword [rbp + 0x3c], 0xf0014
mov dword [rbp + 0x40], 0xff330017
mov dword [rbp + 0x44], 0x918c8bb7
mov dword [rbp + 0x48], 0x8f9365f2
mov dword [rbp + 0x4c], 0x6b218808
mov dword [rbp + 0x50], 0x5ec87a4d
mov dword [rbp + 0x54], 0x48
mov edx, r14d
nop dword [rax]
mov eax, edx
lea rcx, [rbp + 0x34]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rbp + 0x30]
cmp edx, eax
jb 0x140028bf0
mov word [rbp + rax*2 + 0x34], r14w
call fcn.14000fb60
mov rcx, rax
test rax, rax
je 0x140028e99
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
lea rax, [rbp + 0x34]
cmp rax, 0x10000
lea rax, [rbp + 0x34]
jae 0x140028c4c
movzx edx, ax
lea rcx, [rbp - 0x78]
call fcn.14000c690
jmp 0x140028c69
mov r8, rbx
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x140028c50
lea rdx, [rbp + 0x34]
lea rcx, [rbp - 0x78]
call fcn.14000c910
nop
cmp dword [0x1401a2bb8], 0
jne 0x140028c97
mov r9d, r15d
mov r8, qword [rbp - 0x70]
mov rdx, qword [rbp - 0x78]
mov rcx, qword [0x1401a2bb0]
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [0x1401a2bb8], 0
je 0x140028d7c
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140028cb4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140028cd1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
cmp dword [0x1401a2bc4], 2
je 0x140028d84
lea r9, [fcn.140009770]
mov edx, 8
lea r8d, [rdx - 5]
lea rcx, [rbp + 0x300]
call fcn.14011e6d4
nop
mov eax, ebx
lock xadd dword [rsi - 8], eax
sub eax, 1
jg 0x140028d16
mov rcx, qword [rsi - 0x18]
mov rax, qword [rcx]
lea rdx, [rsi - 0x18]
call qword [rax + 8]
nop
mov eax, ebx
lock xadd dword [rdi - 8], eax
sub eax, 1
jg 0x140028d31
mov rcx, qword [rdi - 0x18]
mov rax, qword [rcx]
lea rdx, [rdi - 0x18]
call qword [rax + 8]
nop
mov rdx, qword [r13]
sub rdx, 0x18
lock xadd dword [rdx + 0x10], ebx
sub ebx, 1
jg 0x140028d4c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rbp + 0x318]
xor rcx, rsp
call fcn.14011e030
lea r11, [rsp + 0x420]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, ebx
call fcn.14012c640
int3
lea rdx, [rbp + 0x2c8]
call fcn.140028eb0
mov rcx, rax
call fcn.140007d80
mov rdx, rax
mov r8, qword [0x1401a6c08]
lea rcx, [rbp + 0x2f0]
call fcn.14000cb80
lea rcx, [rbp + 0x2f0]
call fcn.1400098a0
mov rbx, rax
lea rdx, [rbp + 0x2a8]
call fcn.140028f20
mov rcx, rax
call fcn.140007d80
mov r11, rax
lea rdx, [rbp + 0x2b8]
call fcn.140028f00
mov rcx, rax
call fcn.140007d80
mov rdx, rax
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
mov r9, rbx
mov r8, r11
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
call fcn.1400032e0
xor ecx, ecx
call fcn.14012c640
nop
mov ecx, 0x80004005
call fcn.14000fc90
nop
mov ecx, 0x80004005
call fcn.14000fc90
nop
mov ecx, 0x80004005
call fcn.14000fc90
nop
mov ecx, 0x80004005
call fcn.14000fc90
nop
mov ecx, ebx
call fcn.14012c640
int3
mov ecx, 0x80004005
call fcn.14000fc90
int3
mov ecx, 0x80004005
call fcn.14000fc90
nop
mov ecx, 0x80004005
call fcn.14000fc90
nop
mov ecx, 0x80004005
call fcn.14000fc90
nop
mov ecx, 0x80004005
call fcn.14000fc90
nop
mov ecx, 0x80004005
call fcn.14000fc90
nop
mov ecx, ebx
call fcn.14012c640
int3
mov ecx, 0x80004005
call fcn.14000fc90
nop
mov ecx, 0x80004005
call fcn.14000fc90
int3