Function at 0x14002e470
Capabilities:
Contain obfuscated stackstrings
Hash data with md5

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x98]
sub rsp, 0x198
xor esi, esi
mov dword [rsp + 0x48], esi
mov qword [rbp + 0xe8], rsi
movdqa xmm0, xmmword [0x14003da20]
movdqu xmmword [rsp + 0x30], xmm0
mov byte [rsp + 0x40], 0x6e
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], sil
mov dword [rsp + 0x48], 2
mov edx, 0x11
mov r9d, edx
lea rcx, [rbp - 0x30]
call fcn.140031460
mov ecx, esi
cmp rcx, 0x11
jae 0x14002f35b
movzx edx, byte [rsp + rcx + 0x30]
xor dl, 0x6e
cmp qword [rbp - 0x20], rcx
jbe 0x14002f355
lea rax, [rbp - 0x30]
cmp qword [rbp - 0x18], 0x10
cmovae rax, qword [rbp - 0x30]
mov byte [rcx + rax], dl
inc rcx
cmp rcx, 0x11
jl 0x14002e4e3
lea rbx, [rbp - 0x30]
cmp qword [rbp - 0x18], 0x10
cmovae rbx, qword [rbp - 0x30]
mov dword [rsp + 0x30], 0x66716366
mov dword [rsp + 0x34], 0x35346e77
mov dword [rsp + 0x38], 0x6b6b6329
mov byte [rsp + 0x3c], 7
mov r9d, 0xf
mov qword [rsp + 0x68], r9
mov byte [rsp + 0x50], 0
mov dword [rsp + 0x48], 6
mov edi, 0xd
mov eax, edi
mov qword [rsp + 0x60], rax
xor r8d, r8d
mov qword [rsp + 0x50], r8
mov dword [rsp + 0x58], r8d
mov word [rsp + 0x5c], r8w
mov rcx, rsi
nop word [rax + rax]
cmp rcx, rdi
jae 0x14002f3cd
movzx edx, byte [rsp + rcx + 0x30]
xor dl, 7
cmp rax, rcx
jbe 0x14002f3c7
lea rax, [rsp + 0x50]
cmp r9, 0x10
cmovae rax, r8
mov byte [rcx + rax], dl
inc rcx
cmp rcx, rdi
jge 0x14002e5c3
mov r9, qword [rsp + 0x68]
mov rax, qword [rsp + 0x60]
mov r8, qword [rsp + 0x50]
jmp 0x14002e580
lea rcx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae rcx, qword [rsp + 0x50]
call fcn.14002df90
mov rdx, rbx
mov rcx, rax
call fcn.14002e0e0
mov r13, rax
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x14002e628
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002e622
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002e622
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400327bc
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14002e666
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002e661
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002e661
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400327bc
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
movdqa xmm0, xmmword [0x14003da50]
movdqu xmmword [rsp + 0x30], xmm0
mov word [rsp + 0x40], 0x4033
mov qword [rbp - 0x10], rsi
mov qword [rbp], rsi
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
mov dword [rsp + 0x48], 8
mov edx, 0x12
mov r9d, edx
lea rcx, [rbp - 0x10]
call fcn.140031460
mov rcx, rsi
cmp rcx, 0x12
jae 0x14002f3c1
movzx edx, byte [rsp + rcx + 0x30]
xor dl, 0x40
cmp qword [rbp], rcx
jbe 0x14002f3bb
lea rax, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae rax, qword [rbp - 0x10]
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 0x12
jl 0x14002e6bf
lea rbx, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae rbx, qword [rbp - 0x10]
mov dword [rsp + 0x30], 0x55495e50
mov dword [rsp + 0x34], 0x908575e
mov dword [rsp + 0x38], 0x57575f15
mov byte [rsp + 0x3c], 0x3b
mov r9d, 0xf
mov qword [rsp + 0x68], r9
mov byte [rsp + 0x50], 0
mov dword [rsp + 0x48], 0x18
mov rax, rdi
mov qword [rsp + 0x60], rax
xor r8d, r8d
mov qword [rsp + 0x50], r8
mov dword [rsp + 0x58], r8d
mov word [rsp + 0x5c], r8w
mov rcx, rsi
cmp rcx, 0xd
jae 0x14002f3b5
movzx edx, byte [rsp + rcx + 0x30]
xor dl, 0x3b
cmp rax, rcx
jbe 0x14002f3af
lea rax, [rsp + 0x50]
cmp r9, 0x10
cmovae rax, r8
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 0xd
jge 0x14002e797
mov r9, qword [rsp + 0x68]
mov rax, qword [rsp + 0x60]
mov r8, qword [rsp + 0x50]
jmp 0x14002e752
lea rcx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae rcx, qword [rsp + 0x50]
call fcn.14002df90
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, rax
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x14002e7fd
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002e7f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002e7f7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400327bc
nop
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x14002e83b
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002e836
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002e836
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400327bc
mov qword [rbp], rsi
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
movdqa xmm0, xmmword [0x14003dc60]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x137d7c7a
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
mov dword [rsp + 0x48], 0x20
mov edx, 0x14
mov r9d, edx
lea rcx, [rbp - 0x50]
call fcn.140031460
mov rcx, rsi
cmp rcx, 0x14
jae 0x14002f3a9
movzx edx, byte [rsp + rcx + 0x30]
xor dl, 0x13
cmp qword [rbp - 0x40], rcx
jbe 0x14002f3a3
lea rax, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rax, qword [rbp - 0x50]
mov byte [rcx + rax], dl
inc rcx
cmp rcx, 0x14
jl 0x14002e895
lea rbx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rbx, qword [rbp - 0x50]
mov dword [rsp + 0x30], 0x11061411
mov dword [rsp + 0x34], 0x42431900
mov dword [rsp + 0x38], 0x1c1c145e
mov byte [rsp + 0x3c], 0x70
mov r9d, 0xf
mov qword [rsp + 0x68], r9
mov byte [rsp + 0x50], 0
mov dword [rsp + 0x48], 0x60
mov rax, rdi
mov qword [rsp + 0x60], rax
xor r8d, r8d
mov qword [rsp + 0x50], r8
mov dword [rsp + 0x58], r8d
mov word [rsp + 0x5c], r8w
mov rcx, rsi
nop dword [rax + rax]
cmp rcx, 0xd
jae 0x14002f39d
movzx edx, byte [rsp + rcx + 0x30]
xor dl, 0x70
cmp rax, rcx
jbe 0x14002f397
lea rax, [rsp + 0x50]
cmp r9, 0x10
cmovae rax, r8
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 0xd
jge 0x14002e975
mov r9, qword [rsp + 0x68]
mov rax, qword [rsp + 0x60]
mov r8, qword [rsp + 0x50]
jmp 0x14002e930
lea rcx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae rcx, qword [rsp + 0x50]
call fcn.14002df90
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r15, rax
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x14002e9db
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002e9d5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002e9d5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400327bc
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x14002ea19
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ea14
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002ea14
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400327bc
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
mov dword [rsp + 0x30], 0x263a3916
mov dword [rsp + 0x34], 0x3b341d30
mov dword [rsp + 0x38], 0x55303931
mov r9d, 0xf
mov qword [rsp + 0x68], r9
mov byte [rsp + 0x50], 0
mov dword [rsp + 0x48], pe_nt_image_headers64
mov eax, 0xc
mov qword [rsp + 0x60], rax
xor r8d, r8d
mov qword [rsp + 0x50], r8
mov dword [rsp + 0x58], r8d
mov byte [rsp + 0x5c], r8b
mov rcx, rsi
nop dword [rax + rax]
cmp rcx, 0xc
jae 0x14002f391
movzx edx, byte [rsp + rcx + 0x30]
xor dl, 0x55
cmp rax, rcx
jbe 0x14002f38b
lea rax, [rsp + 0x50]
cmp r9, 0x10
cmovae rax, r8
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 0xc
jge 0x14002eac5
mov r9, qword [rsp + 0x68]
mov rax, qword [rsp + 0x60]
mov r8, qword [rsp + 0x50]
jmp 0x14002ea80
lea rbx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae rbx, qword [rsp + 0x50]
mov dword [rsp + 0x30], 0xf13040a
mov dword [rsp + 0x34], 0x53520d04
mov dword [rsp + 0x38], 0xd0d054f
mov byte [rsp + 0x3c], 0x61
mov r9d, 0xf
mov qword [rbp - 0x78], r9
mov byte [rsp + 0x70], 0
mov dword [rsp + 0x48], 0x180
mov rax, rdi
mov qword [rbp - 0x80], rax
xor r8d, r8d
mov qword [rsp + 0x70], r8
mov dword [rsp + 0x78], r8d
mov word [rsp + 0x7c], r8w
mov rcx, rsi
nop word [rax + rax]
cmp rcx, 0xd
jae 0x14002f385
movzx edx, byte [rsp + rcx + 0x30]
xor dl, 0x61
cmp rax, rcx
jbe 0x14002f37f
lea rax, [rsp + 0x70]
cmp r9, 0x10
cmovae rax, r8
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 0xd
jge 0x14002eb73
mov r9, qword [rbp - 0x78]
mov rax, qword [rbp - 0x80]
mov r8, qword [rsp + 0x70]
jmp 0x14002eb30
lea rcx, [rsp + 0x70]
cmp qword [rbp - 0x78], 0x10
cmovae rcx, qword [rsp + 0x70]
call fcn.14002df90
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, rax
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x14002ebd7
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ebd1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002ebd1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400327bc
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x14002ec17
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ec12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002ec12
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400327bc
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov dword [rsp + 0x30], 0xa3d1822
mov dword [rsp + 0x34], 0x380f0207
mov word [rsp + 0x38], 0xf02
mov byte [rsp + 0x3a], 0x6b
mov r9d, 0xf
mov qword [rbp - 0x78], r9
mov byte [rsp + 0x70], 0
mov dword [rsp + 0x48], 0x200
mov eax, 0xb
mov qword [rbp - 0x80], rax
xor r8d, r8d
mov qword [rsp + 0x70], r8
mov dword [rsp + 0x78], r8d
mov rcx, rsi
cmp rcx, 0xb
jae 0x14002f379
movzx edx, byte [rsp + rcx + 0x30]
xor dl, 0x6b
cmp rax, rcx
jbe 0x14002f373
lea rax, [rsp + 0x70]
cmp r9, 0x10
cmovae rax, r8
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 0xb
jge 0x14002ecb9
mov r9, qword [rbp - 0x78]
mov rax, qword [rbp - 0x80]
mov r8, qword [rsp + 0x70]
jmp 0x14002ec76
lea rbx, [rsp + 0x70]
cmp qword [rbp - 0x78], 0x10
cmovae rbx, qword [rsp + 0x70]
mov dword [rsp + 0x30], 0x5a4d5f5a
mov dword [rsp + 0x34], 0x908524b
mov dword [rsp + 0x38], 0x57575f15
mov byte [rsp + 0x3c], 0x3b
mov r9d, 0xf
mov qword [rbp - 0x58], r9
mov byte [rbp - 0x70], 0
mov dword [rsp + 0x48], 0x600
mov qword [rbp - 0x60], rdi
xor r8d, r8d
mov qword [rbp - 0x70], r8
mov dword [rbp - 0x68], r8d
mov word [rbp - 0x64], r8w
mov rcx, rsi
cmp rcx, 0xd
jae 0x14002f36d
movzx edx, byte [rsp + rcx + 0x30]
xor dl, 0x3b
cmp rdi, rcx
jbe 0x14002f367
lea rax, [rbp - 0x70]
cmp r9, 0x10
cmovae rax, r8
mov byte [rcx + rax], dl
inc rcx
cmp rcx, 0xd
jge 0x14002ed54
mov r9, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov r8, qword [rbp - 0x70]
jmp 0x14002ed13
lea rcx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae rcx, qword [rbp - 0x70]
call fcn.14002df90
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x14002edb5
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002edaf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002edaf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400327bc
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x14002edf4
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002edef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002edef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400327bc
xor ebx, ebx
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], bl
call r12
mov rcx, rax
lea r8, [rbp + 0xe8]
lea edx, [rbx + 8]
call r13
test eax, eax
jne 0x14002ee72
mov qword [0x140161f98], rbx
mov qword [0x140161fa8], rbx
mov qword [0x140161fb0], 0xf
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rbx + r8], bl
jne 0x14002ee40
xor edx, edx
lea rcx, [0x140161f98]
call fcn.1400312b0
lea rax, [0x140161f98]
add rsp, 0x198
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
xor r12d, r12d
mov dword [rbp + 0xe0], r12d
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov r13d, 1
mov edx, r13d
mov rcx, qword [rbp + 0xe8]
call r15
test eax, eax
jne 0x14002eeee
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x14002eeee
mov rcx, qword [rbp + 0xe8]
call r14
mov qword [0x140161f98], r12
mov qword [0x140161fa8], r12
mov qword [0x140161fb0], 0xf
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [r12 + r8], bl
jne 0x14002eee0
jmp 0x14002ee49
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rbx
mov r9d, dword [rbp + 0xe0]
mov edx, r9d
test r9d, r9d
je 0x14002ef21
lea rcx, [rsp + 0x30]
call fcn.1400315f0
mov r9d, dword [rbp + 0xe0]
mov rbx, qword [rsp + 0x40]
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x20], rax
mov rdi, qword [rsp + 0x30]
mov r8, rdi
mov edx, r13d
mov rcx, qword [rbp + 0xe8]
call r15
test eax, eax
jne 0x14002efce
mov rcx, qword [rbp + 0xe8]
call r14
mov qword [0x140161f98], r12
mov qword [0x140161fa8], r12
mov qword [0x140161fb0], 0xf
mov r8, 0xffffffffffffffff
inc r8
cmp byte [r12 + r8], 0
jne 0x14002ef74
xor edx, edx
lea rcx, [0x140161f98]
call fcn.1400312b0
nop
test rdi, rdi
je 0x14002ee57
sub rbx, rdi
cmp rbx, 0x1000
mov rax, rdi
jb 0x14002efbe
add rbx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f0a5
mov rdx, rbx
mov rcx, rdi
call fcn.1400327bc
jmp 0x14002ee57
mov rcx, qword [rdi]
call rsi
mov rcx, qword [rbp + 0xe8]
test eax, eax
jne 0x14002f01f
call r14
mov qword [0x140161f98], r12
mov qword [0x140161fa8], r12
mov qword [0x140161fb0], 0xf
mov r8, 0xffffffffffffffff
inc r8
cmp byte [r12 + r8], 0
jne 0x14002f001
xor edx, edx
lea rcx, [0x140161f98]
call fcn.1400312b0
nop
jmp 0x14002ef96
call r14
mov qword [rbp + 0xf0], r12
lea rdx, [rbp + 0xf0]
mov rcx, qword [rdi]
call qword [sym.imp.ADVAPI32.dll_ConvertSidToStringSidA]
mov r8, 0xffffffffffffffff
test eax, eax
jne 0x14002f0ac
mov qword [0x140161f98], r12
mov qword [0x140161fa8], r12
mov qword [0x140161fb0], 0xf
nop dword [rax]
inc r8
cmp byte [r12 + r8], 0
jne 0x14002f060
xor edx, edx
lea rcx, [0x140161f98]
call fcn.1400312b0
nop
sub rbx, rdi
mov rax, rdi
cmp rbx, 0x1000
jb 0x14002efbe
add rbx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002efbe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
mov rdx, qword [rbp + 0xf0]
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14002f0d0
lea rcx, [rbp - 0x50]
call fcn.1400312b0
nop
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
lea r14, [rbp - 0x50]
mov r12, qword [rbp - 0x50]
mov r13, qword [rbp - 0x38]
cmp r13, 0x10
cmovae r14, r12
mov r15, qword [rbp - 0x40]
cmp r15, 0x10
jae 0x14002f11d
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x70], xmm0
mov esi, 0xf
jmp 0x14002f195
mov rsi, r15
or rsi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
cmova rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x14002f174
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14002f361
mov rcx, rax
call fcn.140032acc
mov rcx, rax
test rax, rax
je 0x14002f16d
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14002f182
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14002f180
call fcn.140032acc
jmp 0x14002f182
xor eax, eax
mov qword [rbp - 0x70], rax
lea r8, [r15 + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], rsi
lea rax, [rbp - 0x70]
mov qword [rbp + 0xf8], rax
mov byte [rbp + 0x10], 0
mov dword [rbp + 0x5c], 0x67452301
mov dword [rbp + 0x60], 0xefcdab89
mov dword [rbp + 0x64], 0x98badcfe
mov dword [rbp + 0x68], 0x10325476
lea r14, [rbp - 0x70]
cmp rsi, 0x10
cmovae r14, qword [rbp - 0x70]
mov r15d, dword [rbp - 0x40]
lea ecx, [r15*8]
mov dword [rbp + 0x54], ecx
lea eax, [r15*8]
xor edx, edx
cmp ecx, eax
mov eax, 1
cmovb edx, eax
mov eax, r15d
shr eax, 0x1d
add edx, eax
mov dword [rbp + 0x58], edx
cmp r15d, 0x40
jb 0x14002f26b
movups xmm0, xmmword [r14]
movups xmmword [rbp + 0x11], xmm0
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rbp + 0x21], xmm1
movups xmm0, xmmword [r14 + 0x20]
movups xmmword [rbp + 0x31], xmm0
movups xmm1, xmmword [r14 + 0x30]
movups xmmword [rbp + 0x41], xmm1
lea rdx, [rbp + 0x11]
lea rcx, [rbp + 0x10]
call fcn.1400317c0
mov esi, 0x40
cmp r15d, 0x80
jb 0x14002f26d
nop word [rax + rax]
mov edx, esi
add rdx, r14
lea rcx, [rbp + 0x10]
call fcn.1400317c0
add esi, 0x40
lea eax, [rsi + 0x40]
cmp eax, r15d
jbe 0x14002f250
jmp 0x14002f26d
xor esi, esi
sub r15d, esi
mov r8d, r15d
mov edx, esi
add rdx, r14
lea rcx, [rbp + 0x11]
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbp + 0x10]
call fcn.140032070
lea rcx, [rbp + 0x10]
call fcn.1400322d0
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x14002f2d2
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f2cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002f2cd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400327bc
mov qword [rbp - 0x60], 0
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
cmp r13, 0x10
jb 0x14002f322
lea rdx, [r13 + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x14002f319
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002f319
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.1400327bc
nop
sub rbx, rdi
mov rax, rdi
cmp rbx, 0x1000
jb 0x14002efbe
add rbx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002efbe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140031440
int3
call fcn.140031420
nop
call fcn.14002abc0
nop
call fcn.140031440
int3
call fcn.140031420
nop
call fcn.140031440
int3
call fcn.140031420
nop
call fcn.140031440
int3
call fcn.140031420
nop
call fcn.140031440
int3
call fcn.140031420
nop
call fcn.140031440
int3
call fcn.140031420
nop
call fcn.140031440
int3
call fcn.140031420
nop
call fcn.140031440
int3
call fcn.140031420
nop
call fcn.140031440
int3
call fcn.140031420
nop
call fcn.140031440
int3
call fcn.140031420
int3