Function at 0x14000e3e0
Capabilities:
Check if file exists
Delete file
Encode data using xor
Get file attributes
Read file on windows
Write file on windows

Disassembly:
mov r11, rsp
push rbp
push r13
lea rbp, [r11 - 0x498]
sub rsp, 0x588
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x450], rax
mov qword [r11 + 0x20], rbx
xorps xmm1, xmm1
mov qword [r11 - 0x20], rdi
xorps xmm0, xmm0
mov qword [r11 - 0x28], r12
mov rbx, rcx
mov qword [r11 - 0x30], r14
xor r12d, r12d
mov qword [rbp - 0x48], rcx
mov r13d, r12d
mov qword [r11 - 0x38], r15
lea rcx, [rbp - 0x40]
mov r15d, r12d
mov dword [rsp + 0x50], r8d
mov r14, rdx
mov qword [rsp + 0x60], rdx
movups xmmword [rbp + 0x430], xmm0
movups xmmword [rbp + 0x440], xmm1
movups xmmword [rbp + 0x3d0], xmm0
movups xmmword [rbp + 0x3e0], xmm0
movups xmmword [rbp + 0x3f0], xmm1
movups xmmword [rbp + 0x400], xmm1
movups xmmword [rbp + 0x410], xmm1
movups xmmword [rbp + 0x420], xmm1
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
mov edx, 0x7e4
lea rcx, [rbp - 0x40]
call fcn.140002940
movzx r9d, word [rbp - 0x3e]
lea rdx, str._04d_02d_02d
movzx r8d, word [rbp - 0x40]
lea rcx, [rbp + 0x430]
mov dword [rsp + 0x44], eax
movzx eax, word [rbp - 0x3a]
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_wsprintfA]
lea rdx, str.00000000_00000000_00000000_00000000_00000000_00000000_r_n
lea rcx, [rbp + 0x3f0]
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
mov rdi, 0xffffffffffffffff
lea rdx, [rbp - 0x30]
mov rcx, rbx
mov qword [rbp - 0x70], rdi
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp rax, rdi
je 0x14000e4f7
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindClose]
mov edi, dword [rbp - 0x10]
mov qword [rbp - 0x70], rdi
mov qword [rsp + 0x580], rsi
mov edx, 0xffffffff
movsxd rbx, edi
lea r8, [0x14001ab70]
cmp edi, 0x32
jge 0x14000e51d
mov esi, 0x83
jmp 0x14001026b
movsxd rdi, edi
lea rcx, [rdi + 8]
call fcn.1400125f4
lea r8, [rdi + 8]
mov qword [rsp + 0x48], rax
xor edx, edx
mov rcx, rax
mov r13, rax
call sub.VCRUNTIME140.dll_memset
xor ecx, ecx
mov dword [rsp + 0x40], r12d
mov esi, r12d
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r8, rbx
xor edx, edx
mov rcx, r13
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [rbp - 0x48]
xor r9d, r9d
mov qword [rsp + 0x30], r12
mov edx, 0x80000000
mov dword [rsp + 0x28], 0x8000080
mov dword [rsp + 0x20], 3
lea r8d, [r9 + 3]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
jne 0x14000e5a8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov esi, 0x84
jmp 0x14001025a
mov r8d, dword [rbp - 0x70]
lea r9, [rsp + 0x40]
mov rdx, r13
mov qword [rsp + 0x20], r12
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov ebx, 0xfffffffe
test eax, eax
jne 0x14000e5d5
mov edi, ebx
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x14000e5e8
mov edi, dword [rsp + 0x40]
cmp dword [rbp - 0x70], edi
je 0x14000e5ea
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, dword [rsp + 0x40]
mov esi, eax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_SetLastError]
test edi, edi
jns 0x14000e609
mov esi, 0x84
jmp 0x14001025a
mov rax, qword [rbp - 0x70]
mov edi, 0xffffffff
movsxd r8, eax
mov rdx, r12
test eax, eax
jle 0x14000e64c
lea r9, [0x14001ab70]
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rdx + r13]
mov eax, edi
xor rcx, rax
shr edi, 8
movzx eax, cl
inc rdx
xor edi, dword [r9 + rax*4]
cmp rdx, r8
jl 0x14000e630
mov r14, qword [rsp + 0x60]
not edi
mov rcx, r14
mov dword [rbp - 0x58], edi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp edi, 0xffffffff
je 0x14000e910
xor ecx, ecx
mov dword [rsp + 0x40], r12d
mov edi, r12d
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
mov qword [rsp + 0x30], r12
xorps xmm0, xmm0
mov dword [rsp + 0x28], 0x8000080
xor r9d, r9d
mov qword [rbp + 0x420], rax
mov edx, 0x80000000
mov dword [rbp + 0x428], eax
lea r8d, [rax + 3]
mov dword [rsp + 0x20], 3
mov rcx, r14
movups xmmword [rbp + 0x3f0], xmm0
movups xmmword [rbp + 0x400], xmm0
movups xmmword [rbp + 0x410], xmm0
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x14000e6f2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov esi, 0x85
jmp 0x14001025f
lea r9, [rsp + 0x40]
mov qword [rsp + 0x20], r12
mov r8d, 0x3c
lea rdx, [rbp + 0x3f0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x14000e71e
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x14000e731
mov ebx, dword [rsp + 0x40]
cmp ebx, 0x3c
je 0x14000e733
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, dword [rsp + 0x40]
mov edi, eax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_SetLastError]
cmp ebx, 0x32
jge 0x14000e753
mov esi, 0x85
jmp 0x14001025f
movabs rax, 0x3030313637423530
cmp qword [rbp + 0x3f0], rax
je 0x14000e910
movzx ecx, byte [rbp + 0x3f0]
lea eax, [rcx - 0x30]
cmp al, 9
ja 0x14000e77e
lea r15d, [rcx - 0x30]
jmp 0x14000e796
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000e78b
lea r15d, [rcx - 0x37]
jmp 0x14000e796
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000e796
lea r15d, [rcx - 0x57]
movzx ecx, byte [rbp + 0x3f1]
lea eax, [rcx - 0x30]
cmp al, 9
ja 0x14000e7ab
mov eax, ecx
add eax, 0xffffffd0
jmp 0x14000e7c5
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000e7b9
mov eax, ecx
add eax, 0xffffffc9
jmp 0x14000e7c5
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000e7cc
mov eax, ecx
add eax, 0xffffffa9
shl r15d, 4
add r15d, eax
movzx ecx, byte [rbp + 0x3f2]
lea eax, [rcx - 0x30]
cmp al, 9
ja 0x14000e7e1
mov eax, ecx
add eax, 0xffffffd0
jmp 0x14000e7fb
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000e7ef
mov eax, ecx
add eax, 0xffffffc9
jmp 0x14000e7fb
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000e802
mov eax, ecx
add eax, 0xffffffa9
shl r15d, 4
add r15d, eax
movzx ecx, byte [rbp + 0x3f3]
lea eax, [rcx - 0x30]
cmp al, 9
ja 0x14000e817
mov eax, ecx
add eax, 0xffffffd0
jmp 0x14000e831
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000e825
mov eax, ecx
add eax, 0xffffffc9
jmp 0x14000e831
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000e838
mov eax, ecx
add eax, 0xffffffa9
shl r15d, 4
add r15d, eax
movzx ecx, byte [rbp + 0x3f4]
lea eax, [rcx - 0x30]
cmp al, 9
ja 0x14000e84d
mov eax, ecx
add eax, 0xffffffd0
jmp 0x14000e867
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000e85b
mov eax, ecx
add eax, 0xffffffc9
jmp 0x14000e867
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000e86e
mov eax, ecx
add eax, 0xffffffa9
shl r15d, 4
add r15d, eax
movzx ecx, byte [rbp + 0x3f5]
lea eax, [rcx - 0x30]
cmp al, 9
ja 0x14000e883
mov eax, ecx
add eax, 0xffffffd0
jmp 0x14000e89d
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000e891
mov eax, ecx
add eax, 0xffffffc9
jmp 0x14000e89d
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000e8a4
mov eax, ecx
add eax, 0xffffffa9
shl r15d, 4
add r15d, eax
movzx ecx, byte [rbp + 0x3f6]
lea eax, [rcx - 0x30]
cmp al, 9
ja 0x14000e8b9
mov eax, ecx
add eax, 0xffffffd0
jmp 0x14000e8d3
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000e8c7
mov eax, ecx
add eax, 0xffffffc9
jmp 0x14000e8d3
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000e8da
mov eax, ecx
add eax, 0xffffffa9
shl r15d, 4
add r15d, eax
movzx ecx, byte [rbp + 0x3f7]
lea eax, [rcx - 0x30]
cmp al, 9
ja 0x14000e8ef
mov eax, ecx
add eax, 0xffffffd0
jmp 0x14000e909
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000e8fd
mov eax, ecx
add eax, 0xffffffc9
jmp 0x14000e909
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000e910
mov eax, ecx
add eax, 0xffffffa9
shl r15d, 4
add r15d, eax
mov rdi, qword [rbp - 0x70]
lea r9, str._provider_name
mov r8d, edi
mov rdx, r13
call fcn.1400025a0
lea r9, str._keywords_
mov r8d, edi
mov rdx, r13
mov rbx, rax
call fcn.1400025a0
lea r9, str._valueMap_name
mov r8d, edi
mov rdx, r13
mov rsi, rax
call fcn.1400025a0
mov qword [rbp - 0x68], rax
test rbx, rbx
je 0x140010924
test rsi, rsi
je 0x140010924
test rax, rax
je 0x140010924
lea rcx, str.guid
mov qword [rsp + 0x58], r12
mov r14, r12
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsxd r8, eax
lea eax, [r8 - 1]
cmp eax, 0x1f3
ja 0x14001091a
mov rax, r8
lea rdi, [rbp - 0x30]
dec r8d
mov ecx, pe_nt_image_headers64
movsxd r9, r8d
mov rdx, r12
rep stosd dword [rdi], eax
test r8d, r8d
jle 0x14000e9d9
mov ecx, r8d
lea rdi, str.guid
nop dword [rax]
movzx eax, byte [rdx + rdi]
inc rdx
mov dword [rbp + rax*4 - 0x30], ecx
dec ecx
cmp rdx, r9
jl 0x14000e9c0
movzx r11d, byte [r9 + rdi]
jmp 0x14000e9f0
lea r11, str.guid
movzx r11d, byte [r9 + r11]
nop word [rax + rax]
movsxd rcx, r8d
add rcx, rbx
movzx r10d, byte [rcx]
cmp r10b, r11b
jne 0x14000ea4f
test r9, r9
je 0x14000ea5f
lea edi, [r8 - 1]
movsxd rdx, edi
lea rcx, [r9 - 1]
add rdx, rbx
lea rax, str.guid
movzx eax, byte [rcx + rax]
cmp byte [rdx], al
jne 0x14000ea4a
test rcx, rcx
je 0x14000ea3f
dec rcx
lea rax, str.guid
dec rdx
dec edi
movzx eax, byte [rcx + rax]
cmp byte [rdx], al
je 0x14000ea21
jmp 0x14000ea4a
movsxd r14, edi
add r14, rbx
mov qword [rsp + 0x58], r14
test r14, r14
jne 0x14000ea70
add r8d, dword [rbp + r10*4 - 0x30]
cmp r8d, 0x1f4
jl 0x14000e9f0
jmp 0x14000ea67
mov r14, rcx
mov qword [rsp + 0x58], rcx
test r14, r14
je 0x14001091a
lea rcx, str.node
mov qword [rsp + 0x68], r12
mov r14, r12
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsxd r9, eax
lea eax, [r9 - 1]
cmp eax, 0x1f3
ja 0x14001091a
mov rax, r9
lea rdi, [rbp - 0x30]
mov ecx, pe_nt_image_headers64
mov rdx, r12
rep stosd dword [rdi], eax
lea ecx, [r9 - 1]
movsxd rdi, ecx
test ecx, ecx
jle 0x14000eae0
lea r8, str.node
nop word [rax + rax]
movzx eax, byte [rdx + r8]
inc rdx
mov dword [rbp + rax*4 - 0x30], ecx
dec ecx
cmp rdx, rdi
jl 0x14000eac0
dec r9d
movsxd rax, r9d
movzx r11d, byte [rax + r8]
jmp 0x14000eaf2
dec r9d
lea r11, str.node
movsxd rax, r9d
movzx r11d, byte [rax + r11]
mov r8d, r9d
movsxd r10, r9d
nop dword [rax + rax]
movsxd rcx, r8d
add rcx, rbx
movzx r9d, byte [rcx]
cmp r9b, r11b
jne 0x14000eb5f
test r10, r10
je 0x14000eb6f
lea edi, [r8 - 1]
movsxd rdx, edi
lea rcx, [r10 - 1]
add rdx, rbx
lea rax, str.node
movzx eax, byte [rcx + rax]
cmp byte [rdx], al
jne 0x14000eb5a
test rcx, rcx
je 0x14000eb4f
dec rcx
lea rax, str.node
dec rdx
dec edi
movzx eax, byte [rcx + rax]
cmp byte [rdx], al
je 0x14000eb31
jmp 0x14000eb5a
movsxd r14, edi
add r14, rbx
mov qword [rsp + 0x68], r14
test r14, r14
jne 0x14000eb80
add r8d, dword [rbp + r9*4 - 0x30]
cmp r8d, 0x1f4
jl 0x14000eb00
jmp 0x14000eb77
mov r14, rcx
mov qword [rsp + 0x68], rcx
test r14, r14
je 0x14001091a
lea rcx, str.type
mov qword [rsp + 0x70], r12
mov r14, r12
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsxd r9, eax
lea eax, [r9 - 1]
cmp eax, 0x1f3
ja 0x14001091a
mov rax, r9
lea rdi, [rbp - 0x30]
mov ecx, pe_nt_image_headers64
mov rdx, r12
rep stosd dword [rdi], eax
lea ecx, [r9 - 1]
movsxd rdi, ecx
test ecx, ecx
jle 0x14000ebf0
lea r8, str.type
nop word [rax + rax]
movzx eax, byte [rdx + r8]
inc rdx
mov dword [rbp + rax*4 - 0x30], ecx
dec ecx
cmp rdx, rdi
jl 0x14000ebd0
dec r9d
movsxd rax, r9d
movzx r11d, byte [rax + r8]
jmp 0x14000ec02
dec r9d
lea r11, str.type
movsxd rax, r9d
movzx r11d, byte [rax + r11]
mov r8d, r9d
movsxd r10, r9d
nop dword [rax + rax]
movsxd rcx, r8d
add rcx, rbx
movzx r9d, byte [rcx]
cmp r9b, r11b
jne 0x14000ec6f
test r10, r10
je 0x14000ec7f
lea edi, [r8 - 1]
movsxd rdx, edi
lea rcx, [r10 - 1]
add rdx, rbx
lea rax, str.type
movzx eax, byte [rcx + rax]
cmp byte [rdx], al
jne 0x14000ec6a
test rcx, rcx
je 0x14000ec5f
dec rcx
lea rax, str.type
dec rdx
dec edi
movzx eax, byte [rcx + rax]
cmp byte [rdx], al
je 0x14000ec41
jmp 0x14000ec6a
movsxd r14, edi
add r14, rbx
mov qword [rsp + 0x70], r14
test r14, r14
jne 0x14000ec90
add r8d, dword [rbp + r9*4 - 0x30]
cmp r8d, 0x1f4
jl 0x14000ec10
jmp 0x14000ec87
mov r14, rcx
mov qword [rsp + 0x70], rcx
test r14, r14
je 0x14001091a
lea rcx, str.mode
mov qword [rbp - 0x80], r12
mov r14, r12
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsxd r9, eax
lea eax, [r9 - 1]
cmp eax, 0x1f3
ja 0x14001091a
mov rax, r9
lea rdi, [rbp - 0x30]
mov ecx, pe_nt_image_headers64
mov rdx, r12
rep stosd dword [rdi], eax
lea ecx, [r9 - 1]
movsxd rdi, ecx
test ecx, ecx
jle 0x14000ed00
lea r8, str.mode
nop dword [rax]
movzx eax, byte [rdx + r8]
inc rdx
mov dword [rbp + rax*4 - 0x30], ecx
dec ecx
cmp rdx, rdi
jl 0x14000ece0
dec r9d
movsxd rax, r9d
movzx r11d, byte [rax + r8]
jmp 0x14000ed12
dec r9d
lea r11, str.mode
movsxd rax, r9d
movzx r11d, byte [rax + r11]
mov r8d, r9d
movsxd r10, r9d
nop dword [rax + rax]
movsxd rcx, r8d
add rcx, rbx
movzx r9d, byte [rcx]
cmp r9b, r11b
jne 0x14000ed7e
test r10, r10
je 0x14000ed8e
lea edi, [r8 - 1]
movsxd rdx, edi
lea rcx, [r10 - 1]
add rdx, rbx
lea rax, str.mode
movzx eax, byte [rcx + rax]
cmp byte [rdx], al
jne 0x14000ed79
test rcx, rcx
je 0x14000ed6f
dec rcx
lea rax, str.mode
dec rdx
dec edi
movzx eax, byte [rcx + rax]
cmp byte [rdx], al
je 0x14000ed51
jmp 0x14000ed79
movsxd r14, edi
add r14, rbx
mov qword [rbp - 0x80], r14
test r14, r14
jne 0x14000ed9e
add r8d, dword [rbp + r9*4 - 0x30]
cmp r8d, 0x1f4
jl 0x14000ed20
jmp 0x14000ed95
mov r14, rcx
mov qword [rbp - 0x80], rcx
test r14, r14
je 0x14001091a
lea rcx, str.chid
mov qword [rbp - 0x78], r12
mov r14, r12
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsxd r9, eax
lea eax, [r9 - 1]
cmp eax, 0x1f3
ja 0x14001091a
mov rax, r9
lea rdi, [rbp - 0x30]
mov ecx, pe_nt_image_headers64
mov rdx, r12
rep stosd dword [rdi], eax
lea ecx, [r9 - 1]
movsxd rdi, ecx
test ecx, ecx
jle 0x14000ee10
lea r8, str.chid
nop word [rax + rax]
movzx eax, byte [rdx + r8]
inc rdx
mov dword [rbp + rax*4 - 0x30], ecx
dec ecx
cmp rdx, rdi
jl 0x14000edf0
dec r9d
movsxd rax, r9d
movzx r11d, byte [rax + r8]
jmp 0x14000ee22
dec r9d
lea r11, str.chid
movsxd rax, r9d
movzx r11d, byte [rax + r11]
mov r8d, r9d
movsxd r10, r9d
nop dword [rax + rax]
movsxd rcx, r8d
add rcx, rbx
movzx r9d, byte [rcx]
cmp r9b, r11b
jne 0x14000ee8e
test r10, r10
je 0x14000ee9e
lea edi, [r8 - 1]
movsxd rdx, edi
lea rcx, [r10 - 1]
add rdx, rbx
lea rax, str.chid
movzx eax, byte [rcx + rax]
cmp byte [rdx], al
jne 0x14000ee89
test rcx, rcx
je 0x14000ee7f
dec rcx
lea rax, str.chid
dec rdx
dec edi
movzx eax, byte [rcx + rax]
cmp byte [rdx], al
je 0x14000ee61
jmp 0x14000ee89
movsxd r14, edi
add r14, rbx
mov qword [rbp - 0x78], r14
test r14, r14
jne 0x14000eeae
add r8d, dword [rbp + r9*4 - 0x30]
cmp r8d, 0x1f4
jl 0x14000ee30
jmp 0x14000eea5
mov r14, rcx
mov qword [rbp - 0x78], rcx
test r14, r14
je 0x14001091a
lea r14, str.mask_0x00
mov rbx, r12
mov rcx, r14
mov qword [rbp - 0x50], rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsxd r9, eax
lea eax, [r9 - 1]
cmp eax, 0x1f3
ja 0x140010910
mov rax, r9
lea rdi, [rbp - 0x30]
mov ecx, pe_nt_image_headers64
mov rdx, r12
rep stosd dword [rdi], eax
lea ecx, [r9 - 1]
movsxd rdi, ecx
test ecx, ecx
jle 0x14000ef18
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rdx + r14]
inc rdx
mov dword [rbp + rax*4 - 0x30], ecx
dec ecx
cmp rdx, rdi
jl 0x14000ef00
dec r9d
jmp 0x14000ef1b
dec r9d
movsxd rax, r9d
mov r8d, r9d
movsxd r10, r9d
movzx r11d, byte [rax + r14]
nop dword [rax]
movsxd rcx, r8d
add rcx, rsi
movzx r9d, byte [rcx]
cmp r9b, r11b
jne 0x14000ef88
test r10, r10
je 0x14000ef98
movzx eax, byte [r10 + r14 - 1]
lea edi, [r8 - 1]
movsxd rdx, edi
lea rcx, [r10 - 1]
add rdx, rsi
cmp byte [rdx], al
jne 0x14000ef83
nop dword [rax]
test rcx, rcx
je 0x14000ef79
movzx eax, byte [rcx + r14 - 1]
dec rcx
dec rdx
dec edi
cmp byte [rdx], al
je 0x14000ef60
jmp 0x14000ef83
movsxd rbx, edi
add rbx, rsi
mov qword [rbp - 0x50], rbx
test rbx, rbx
jne 0x14000efa8
add r8d, dword [rbp + r9*4 - 0x30]
cmp r8d, 0x1f4
jl 0x14000ef30
jmp 0x14000ef9f
mov rbx, rcx
mov qword [rbp - 0x50], rcx
test rbx, rbx
je 0x140010910
lea r14, str.mask_0x10
mov rbx, r12
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsxd r9, eax
lea eax, [r9 - 1]
cmp eax, 0x1f3
ja 0x140010910
mov rax, r9
lea rdi, [rbp - 0x30]
mov ecx, pe_nt_image_headers64
mov rdx, r12
rep stosd dword [rdi], eax
lea ecx, [r9 - 1]
movsxd rdi, ecx
test ecx, ecx
jle 0x14000f008
nop dword [rax]
movzx eax, byte [rdx + r14]
inc rdx
mov dword [rbp + rax*4 - 0x30], ecx
dec ecx
cmp rdx, rdi
jl 0x14000eff0
dec r9d
jmp 0x14000f00b
dec r9d
movsxd rax, r9d
mov r8d, r9d
movsxd r10, r9d
movzx r11d, byte [rax + r14]
nop dword [rax]
movsxd rcx, r8d
add rcx, rsi
movzx r9d, byte [rcx]
cmp r9b, r11b
jne 0x14000f074
test r10, r10
je 0x14000f084
movzx eax, byte [r10 + r14 - 1]
lea edi, [r8 - 1]
movsxd rdx, edi
lea rcx, [r10 - 1]
add rdx, rsi
cmp byte [rdx], al
jne 0x14000f06f
nop dword [rax]
test rcx, rcx
je 0x14000f069
movzx eax, byte [rcx + r14 - 1]
dec rcx
dec rdx
dec edi
cmp byte [rdx], al
je 0x14000f050
jmp 0x14000f06f
movsxd rbx, edi
add rbx, rsi
test rbx, rbx
jne 0x14000f090
add r8d, dword [rbp + r9*4 - 0x30]
cmp r8d, 0x1f4
jl 0x14000f020
jmp 0x14000f087
mov rbx, rcx
test rbx, rbx
je 0x140010910
lea r14, str.mask_0x20
mov rbx, r12
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsxd r9, eax
lea eax, [r9 - 1]
cmp eax, 0x1f3
ja 0x140010910
mov rax, r9
lea rdi, [rbp - 0x30]
mov ecx, pe_nt_image_headers64
mov rdx, r12
rep stosd dword [rdi], eax
lea ecx, [r9 - 1]
movsxd rdi, ecx
test ecx, ecx
jle 0x14000f0e9
movzx eax, byte [rdx + r14]
inc rdx
mov dword [rbp + rax*4 - 0x30], ecx
dec ecx
cmp rdx, rdi
jl 0x14000f0d1
dec r9d
jmp 0x14000f0ec
dec r9d
movsxd rax, r9d
mov r8d, r9d
movsxd r10, r9d
movzx r11d, byte [rax + r14]
nop word [rax + rax]
movsxd rcx, r8d
add rcx, rsi
movzx r9d, byte [rcx]
cmp r9b, r11b
jne 0x14000f154
test r10, r10
je 0x14000f164
movzx eax, byte [r10 + r14 - 1]
lea edi, [r8 - 1]
movsxd rdx, edi
lea rcx, [r10 - 1]
add rdx, rsi
cmp byte [rdx], al
jne 0x14000f14f
nop dword [rax]
test rcx, rcx
je 0x14000f149
movzx eax, byte [rcx + r14 - 1]
dec rcx
dec rdx
dec edi
cmp byte [rdx], al
je 0x14000f130
jmp 0x14000f14f
movsxd rbx, edi
add rbx, rsi
test rbx, rbx
jne 0x14000f170
add r8d, dword [rbp + r9*4 - 0x30]
cmp r8d, 0x1f4
jl 0x14000f100
jmp 0x14000f167
mov rbx, rcx
test rbx, rbx
je 0x140010910
lea r14, str._map_value_0
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsxd r9, eax
lea eax, [r9 - 1]
cmp eax, 0x1f3
ja 0x140010903
xor esi, esi
lea rdi, [rbp - 0x30]
mov rax, r9
mov ecx, pe_nt_image_headers64
rep stosd dword [rdi], eax
lea ecx, [r9 - 1]
mov edx, esi
movsxd rdi, ecx
test ecx, ecx
jle 0x14000f1c8
nop
movzx eax, byte [rdx + r14]
inc rdx
mov dword [rbp + rax*4 - 0x30], ecx
dec ecx
cmp rdx, rdi
jl 0x14000f1b0
dec r9d
jmp 0x14000f1cb
dec r9d
mov rbx, qword [rbp - 0x68]
mov r8d, r9d
movsxd rax, r9d
movsxd r10, r9d
movzx r11d, byte [rax + r14]
nop dword [rax]
movsxd rcx, r8d
add rcx, rbx
movzx r9d, byte [rcx]
cmp r9b, r11b
jne 0x14000f234
test r10, r10
je 0x14000f244
movzx eax, byte [r10 + r14 - 1]
lea edi, [r8 - 1]
movsxd rdx, edi
lea rcx, [r10 - 1]
add rdx, rbx
cmp byte [rdx], al
jne 0x14000f22f
nop dword [rax]
test rcx, rcx
je 0x14000f229
movzx eax, byte [rcx + r14 - 1]
dec rcx
dec rdx
dec edi
cmp byte [rdx], al
je 0x14000f210
jmp 0x14000f22f
movsxd r12, edi
add r12, rbx
test r12, r12
jne 0x14000f250
add r8d, dword [rbp + r9*4 - 0x30]
cmp r8d, 0x1f4
jl 0x14000f1e0
jmp 0x14000f247
mov r12, rcx
test r12, r12
je 0x140010903
lea r14, str._map_value_1
mov r13, rsi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsxd r9, eax
lea eax, [r9 - 1]
cmp eax, 0x1f3
ja 0x1400108fe
mov rax, r9
lea rdi, [rbp - 0x30]
mov ecx, pe_nt_image_headers64
mov rdx, rsi
rep stosd dword [rdi], eax
lea ecx, [r9 - 1]
movsxd rdi, ecx
test ecx, ecx
jle 0x14000f2a9
movzx eax, byte [rdx + r14]
inc rdx
mov dword [rbp + rax*4 - 0x30], ecx
dec ecx
cmp rdx, rdi
jl 0x14000f291
dec r9d
jmp 0x14000f2ac
dec r9d
movsxd rax, r9d
mov r8d, r9d
movsxd r10, r9d
movzx r11d, byte [rax + r14]
nop word [rax + rax]
movsxd rcx, r8d
add rcx, rbx
movzx r9d, byte [rcx]
cmp r9b, r11b
jne 0x14000f314
test r10, r10
je 0x14000f324
movzx eax, byte [r10 + r14 - 1]
lea edi, [r8 - 1]
movsxd rdx, edi
lea rcx, [r10 - 1]
add rdx, rbx
cmp byte [rdx], al
jne 0x14000f30f
nop dword [rax]
test rcx, rcx
je 0x14000f309
movzx eax, byte [rcx + r14 - 1]
dec rcx
dec rdx
dec edi
cmp byte [rdx], al
je 0x14000f2f0
jmp 0x14000f30f
movsxd r13, edi
add r13, rbx
test r13, r13
jne 0x14000f330
add r8d, dword [rbp + r9*4 - 0x30]
cmp r8d, 0x1f4
jl 0x14000f2c0
jmp 0x14000f327
mov r13, rcx
test r13, r13
je 0x1400108fe
lea rcx, str._map_value_2
mov r14, rsi
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsxd r9, eax
lea eax, [r9 - 1]
cmp eax, 0x1f3
ja 0x1400108fe
mov rax, r9
lea rdi, [rbp - 0x30]
mov ecx, pe_nt_image_headers64
mov rdx, rsi
rep stosd dword [rdi], eax
lea ecx, [r9 - 1]
movsxd rdi, ecx
test ecx, ecx
jle 0x14000f3a0
lea r8, str._map_value_2
nop word [rax + rax]
movzx eax, byte [rdx + r8]
inc rdx
mov dword [rbp + rax*4 - 0x30], ecx
dec ecx
cmp rdx, rdi
jl 0x14000f380
dec r9d
movsxd rax, r9d
movzx r11d, byte [rax + r8]
jmp 0x14000f3b2
dec r9d
lea r11, str._map_value_2
movsxd rax, r9d
movzx r11d, byte [rax + r11]
mov r8d, r9d
movsxd r10, r9d
nop dword [rax + rax]
movsxd rcx, r8d
add rcx, rbx
movzx r9d, byte [rcx]
cmp r9b, r11b
jne 0x14000f41a
test r10, r10
je 0x14000f42a
lea edi, [r8 - 1]
movsxd rdx, edi
lea rcx, [r10 - 1]
add rdx, rbx
lea rax, str._map_value_2
movzx eax, byte [rcx + rax]
cmp byte [rdx], al
jne 0x14000f415
test rcx, rcx
je 0x14000f40f
dec rcx
lea rax, str._map_value_2
dec rdx
dec edi
movzx eax, byte [rcx + rax]
cmp byte [rdx], al
je 0x14000f3f1
jmp 0x14000f415
movsxd r14, edi
add r14, rbx
test r14, r14
jne 0x14000f436
add r8d, dword [rbp + r9*4 - 0x30]
cmp r8d, 0x1f4
jl 0x14000f3c0
jmp 0x14000f42d
mov r14, rcx
test r14, r14
je 0x1400108fe
lea rcx, str._map_value_3
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsxd r9, eax
lea eax, [r9 - 1]
cmp eax, 0x1f3
ja 0x1400108fe
mov rax, r9
lea rdi, [rbp - 0x30]
mov ecx, pe_nt_image_headers64
xor edx, edx
rep stosd dword [rdi], eax
lea ecx, [r9 - 1]
movsxd rdi, ecx
test ecx, ecx
jle 0x14000f4a0
lea r8, str._map_value_3
nop word [rax + rax]
movzx eax, byte [rdx + r8]
inc rdx
mov dword [rbp + rax*4 - 0x30], ecx
dec ecx
cmp rdx, rdi
jl 0x14000f480
dec r9d
movsxd rax, r9d
movzx r11d, byte [rax + r8]
jmp 0x14000f4b2
dec r9d
lea r11, str._map_value_3
movsxd rax, r9d
movzx r11d, byte [rax + r11]
mov r8d, r9d
movsxd r10, r9d
nop dword [rax + rax]
movsxd rcx, r8d
add rcx, rbx
movzx r9d, byte [rcx]
cmp r9b, r11b
jne 0x14000f51a
test r10, r10
je 0x14000f52a
lea edi, [r8 - 1]
movsxd rdx, edi
lea rcx, [r10 - 1]
add rdx, rbx
lea rax, str._map_value_3
movzx eax, byte [rcx + rax]
cmp byte [rdx], al
jne 0x14000f515
test rcx, rcx
je 0x14000f50f
dec rcx
lea rax, str._map_value_3
dec rdx
dec edi
movzx eax, byte [rcx + rax]
cmp byte [rdx], al
je 0x14000f4f1
jmp 0x14000f515
movsxd rsi, edi
add rsi, rbx
test rsi, rsi
jne 0x14000f536
add r8d, dword [rbp + r9*4 - 0x30]
cmp r8d, 0x1f4
jl 0x14000f4c0
jmp 0x14000f52d
mov rsi, rcx
test rsi, rsi
je 0x1400108fe
mov eax, dword [rsp + 0x50]
cmp eax, 9
jne 0x14000f666
movups xmm0, xmmword [0x1400165e8]
mov edi, dword [rsp + 0x44]
lea rdx, str._08X._08X
xor eax, eax
mov dword [0x14001a090], 1
mov dword [0x14001a084], eax
lea rcx, [rbp + 0x3d0]
mov dword [0x14001a088], eax
mov r9d, edi
mov rax, qword [rsp + 0x58]
mov r8d, edi
mov dword [0x14001a08c], 0x1e
mov dword [0x14001a07c], 0xa
movups xmmword [rax + 7], xmm0
movups xmm1, xmmword [0x1400165f8]
movups xmmword [rax + 0x17], xmm1
movsd xmm0, qword [0x140016608]
movsd qword [rax + 0x27], xmm0
call qword [sym.imp.USER32.dll_wsprintfA]
mov rcx, qword [rsp + 0x68]
lea r9d, [rdi - 0x93a80]
movups xmm0, xmmword [rbp + 0x3d0]
mov r8d, edi
lea rdx, str._08X._08X
movups xmmword [rcx + 6], xmm0
movzx eax, byte [rbp + 0x3e0]
mov byte [rcx + 0x16], al
lea rcx, [rbp + 0x3d0]
call qword [sym.imp.USER32.dll_wsprintfA]
movups xmm0, xmmword [rbp + 0x3d0]
mov rdi, qword [rsp + 0x70]
lea rdx, str.05B76100.00000000
lea rcx, [rbp + 0x3d0]
movups xmmword [rdi + 6], xmm0
movzx eax, byte [rbp + 0x3e0]
mov byte [rdi + 0x16], al
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
mov rcx, qword [rbp - 0x80]
lea rdx, str.05B76100.00000000
movups xmm0, xmmword [rbp + 0x3d0]
movups xmmword [rcx + 6], xmm0
movzx eax, byte [rbp + 0x3e0]
mov byte [rcx + 0x16], al
lea rcx, [rbp + 0x3d0]
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
mov rcx, qword [rbp - 0x78]
movups xmm0, xmmword [rbp + 0x3d0]
movups xmmword [rcx + 6], xmm0
movzx eax, byte [rbp + 0x3e0]
mov byte [rcx + 0x16], al
jmp 0x14000fb21
cmp eax, 1
jne 0x14000fb21
mov rdi, qword [rsp + 0x70]
movabs rax, 0x3030313637423530
cmp qword [rdi + 6], rax
jne 0x14000f6c2
mov eax, dword [rsp + 0x44]
lea rdx, str._08X._08X
mov r8d, eax
lea rcx, [rbp + 0x3d0]
lea r9d, [rax - 0x3c]
call qword [sym.imp.USER32.dll_wsprintfA]
movups xmm0, xmmword [rbp + 0x3d0]
movups xmmword [rdi + 6], xmm0
movzx eax, byte [rbp + 0x3e0]
mov byte [rdi + 0x16], al
movabs rax, 0x3030313637423530
mov rbx, qword [rsp + 0x68]
cmp qword [rbx + 6], rax
jne 0x14000f71b
mov r9d, dword [rsp + 0x44]
lea rdx, str._08X._08X
mov r8d, r9d
mov dword [0x14001d00c], 1
lea rcx, [rbp + 0x3d0]
call qword [sym.imp.USER32.dll_wsprintfA]
movups xmm0, xmmword [rbp + 0x3d0]
movups xmmword [rbx + 6], xmm0
movzx eax, byte [rbp + 0x3e0]
mov byte [rbx + 0x16], al
mov rax, qword [rbp + 0x430]
mov qword [rbp + 0x440], rax
jmp 0x14000f93c
movzx ecx, byte [rbx + 0xf]
xor edi, edi
cmp cl, 0x30
jb 0x14000f730
cmp cl, 0x39
ja 0x14000f730
lea edi, [rcx - 0x30]
jmp 0x14000f746
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000f73c
lea edi, [rcx - 0x37]
jmp 0x14000f746
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000f746
lea edi, [rcx - 0x57]
movzx ecx, byte [rbx + 0x10]
cmp cl, 0x30
jb 0x14000f75b
cmp cl, 0x39
ja 0x14000f75b
mov eax, ecx
add eax, 0xffffffd0
jmp 0x14000f775
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000f769
mov eax, ecx
add eax, 0xffffffc9
jmp 0x14000f775
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000f77a
mov eax, ecx
add eax, 0xffffffa9
shl edi, 4
add edi, eax
movzx ecx, byte [rbx + 0x11]
cmp cl, 0x30
jb 0x14000f78f
cmp cl, 0x39
ja 0x14000f78f
mov eax, ecx
add eax, 0xffffffd0
jmp 0x14000f7a9
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000f79d
mov eax, ecx
add eax, 0xffffffc9
jmp 0x14000f7a9
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000f7ae
mov eax, ecx
add eax, 0xffffffa9
shl edi, 4
add edi, eax
movzx ecx, byte [rbx + 0x12]
cmp cl, 0x30
jb 0x14000f7c3
cmp cl, 0x39
ja 0x14000f7c3
mov eax, ecx
add eax, 0xffffffd0
jmp 0x14000f7dd
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000f7d1
mov eax, ecx
add eax, 0xffffffc9
jmp 0x14000f7dd
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000f7e2
mov eax, ecx
add eax, 0xffffffa9
shl edi, 4
add edi, eax
movzx ecx, byte [rbx + 0x13]
cmp cl, 0x30
jb 0x14000f7f7
cmp cl, 0x39
ja 0x14000f7f7
mov eax, ecx
add eax, 0xffffffd0
jmp 0x14000f811
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000f805
mov eax, ecx
add eax, 0xffffffc9
jmp 0x14000f811
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000f816
mov eax, ecx
add eax, 0xffffffa9
shl edi, 4
add edi, eax
movzx ecx, byte [rbx + 0x14]
cmp cl, 0x30
jb 0x14000f82b
cmp cl, 0x39
ja 0x14000f82b
mov eax, ecx
add eax, 0xffffffd0
jmp 0x14000f845
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000f839
mov eax, ecx
add eax, 0xffffffc9
jmp 0x14000f845
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000f84a
mov eax, ecx
add eax, 0xffffffa9
shl edi, 4
add edi, eax
movzx ecx, byte [rbx + 0x15]
cmp cl, 0x30
jb 0x14000f85f
cmp cl, 0x39
ja 0x14000f85f
mov eax, ecx
add eax, 0xffffffd0
jmp 0x14000f879
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000f86d
mov eax, ecx
add eax, 0xffffffc9
jmp 0x14000f879
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000f87e
mov eax, ecx
add eax, 0xffffffa9
shl edi, 4
add edi, eax
movzx ecx, byte [rbx + 0x16]
cmp cl, 0x30
jb 0x14000f893
cmp cl, 0x39
ja 0x14000f893
mov eax, ecx
add eax, 0xffffffd0
jmp 0x14000f8ad
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000f8a1
mov eax, ecx
add eax, 0xffffffc9
jmp 0x14000f8ad
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000f8b2
mov eax, ecx
add eax, 0xffffffa9
shl edi, 4
add edi, eax
lea rdx, [rbp - 0x40]
mov ecx, edi
call fcn.140002bd0
movzx eax, word [rbp - 0x3a]
lea rdx, str._04d_02d_02d
movzx r9d, word [rbp - 0x3e]
lea rcx, [rbp + 0x440]
movzx r8d, word [rbp - 0x40]
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_wsprintfA]
mov r8d, dword [rsp + 0x44]
lea rdx, str._08X
lea rcx, [rbp + 0x3d0]
call qword [sym.imp.USER32.dll_wsprintfA]
mov rax, qword [rbp + 0x3d0]
mov qword [rbx + 0xf], rax
lea eax, [rdi + 0x2a300]
cmp dword [rsp + 0x44], eax
jb 0x14000f93c
lea r9, str.sitePost.txt
lea r8, [0x14001c070]
lea rdx, str._s_s
lea rcx, [rbp - 0x30]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdi, qword [rbp - 0x80]
movabs rax, 0x3030303030303030
cmp qword [rdi + 0xf], rax
je 0x14000fb21
movzx edx, byte [rdi + 0xf]
xor ecx, ecx
mov dword [0x14001bd34], ecx
cmp dl, 0x30
jb 0x14000f96f
cmp dl, 0x39
ja 0x14000f96f
lea ecx, [rdx - 0x30]
jmp 0x14000f985
lea eax, [rdx - 0x41]
cmp al, 5
ja 0x14000f97b
lea ecx, [rdx - 0x37]
jmp 0x14000f985
lea eax, [rdx - 0x61]
cmp al, 5
ja 0x14000f98b
lea ecx, [rdx - 0x57]
mov dword [0x14001bd34], ecx
movzx edx, byte [rdi + 0x10]
cmp dl, 0x30
jb 0x14000f9a0
cmp dl, 0x39
ja 0x14000f9a0
mov eax, edx
add eax, 0xffffffd0
jmp 0x14000f9ba
lea eax, [rdx - 0x41]
cmp al, 5
ja 0x14000f9ae
mov eax, edx
add eax, 0xffffffc9
jmp 0x14000f9ba
lea eax, [rdx - 0x61]
cmp al, 5
ja 0x14000f9c5
mov eax, edx
add eax, 0xffffffa9
shl ecx, 4
add ecx, eax
mov dword [0x14001bd34], ecx
movzx edx, byte [rdi + 0x11]
cmp dl, 0x30
jb 0x14000f9da
cmp dl, 0x39
ja 0x14000f9da
mov eax, edx
add eax, 0xffffffd0
jmp 0x14000f9f4
lea eax, [rdx - 0x41]
cmp al, 5
ja 0x14000f9e8
mov eax, edx
add eax, 0xffffffc9
jmp 0x14000f9f4
lea eax, [rdx - 0x61]
cmp al, 5
ja 0x14000f9ff
mov eax, edx
add eax, 0xffffffa9
shl ecx, 4
add ecx, eax
mov dword [0x14001bd34], ecx
movzx edx, byte [rdi + 0x12]
cmp dl, 0x30
jb 0x14000fa14
cmp dl, 0x39
ja 0x14000fa14
mov eax, edx
add eax, 0xffffffd0
jmp 0x14000fa2e
lea eax, [rdx - 0x41]
cmp al, 5
ja 0x14000fa22
mov eax, edx
add eax, 0xffffffc9
jmp 0x14000fa2e
lea eax, [rdx - 0x61]
cmp al, 5
ja 0x14000fa39
mov eax, edx
add eax, 0xffffffa9
shl ecx, 4
add ecx, eax
mov dword [0x14001bd34], ecx
movzx edx, byte [rdi + 0x13]
cmp dl, 0x30
jb 0x14000fa4e
cmp dl, 0x39
ja 0x14000fa4e
mov eax, edx
add eax, 0xffffffd0
jmp 0x14000fa68
lea eax, [rdx - 0x41]
cmp al, 5
ja 0x14000fa5c
mov eax, edx
add eax, 0xffffffc9
jmp 0x14000fa68
lea eax, [rdx - 0x61]
cmp al, 5
ja 0x14000fa73
mov eax, edx
add eax, 0xffffffa9
shl ecx, 4
add ecx, eax
mov dword [0x14001bd34], ecx
movzx edx, byte [rdi + 0x14]
cmp dl, 0x30
jb 0x14000fa88
mov rcx, qword [rsp + 0x58]
xor ebx, ebx
mov r8, qword [rsp + 0x68]
mov edi, ebx
mov dword [0x14001cfe8], ebx
movups xmm0, xmmword [rcx + 7]
movups xmmword [0x14001bfd8], xmm0
movups xmm1, xmmword [rcx + 0x17]
movups xmmword [0x14001bfe8], xmm1
mov eax, dword [rcx + 0x27]
mov dword [0x14001bff8], eax
movzx eax, word [rcx + 0x2b]
mov word [0x14001bffc], ax
movzx eax, byte [rcx + 0x2d]
mov byte [0x14001bffe], al
movzx ecx, byte [r8 + 6]
cmp cl, 0x30
jb 0x14000fb7d
cmp cl, 0x39
ja 0x14000fb7d
lea edi, [rcx - 0x30]
jmp 0x14000fb93
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000fb89
lea edi, [rcx - 0x37]
jmp 0x14000fb93
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000fb99
lea edi, [rcx - 0x57]
mov dword [0x14001cfe8], edi
movzx ecx, byte [r8 + 7]
cmp cl, 0x30
jb 0x14000fbaf
cmp cl, 0x39
ja 0x14000fbaf
mov eax, ecx
add eax, 0xffffffd0
jmp 0x14000fbc9
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000fbbd
mov eax, ecx
add eax, 0xffffffc9
jmp 0x14000fbc9
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000fbd4
mov eax, ecx
add eax, 0xffffffa9
shl edi, 4
add edi, eax
mov dword [0x14001cfe8], edi
movzx ecx, byte [r8 + 8]
cmp cl, 0x30
jb 0x14000fbea
cmp cl, 0x39
ja 0x14000fbea
mov eax, ecx
add eax, 0xffffffd0
jmp 0x14000fc04
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000fbf8
mov eax, ecx
add eax, 0xffffffc9
jmp 0x14000fc04
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000fc0f
mov eax, ecx
add eax, 0xffffffa9
shl edi, 4
add edi, eax
mov dword [0x14001cfe8], edi
movzx ecx, byte [r8 + 9]
cmp cl, 0x30
jb 0x14000fc25
cmp cl, 0x39
ja 0x14000fc25
mov eax, ecx
add eax, 0xffffffd0
jmp 0x14000fc3f
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000fc33
mov eax, ecx
add eax, 0xffffffc9
jmp 0x14000fc3f
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000fc4a
mov eax, ecx
add eax, 0xffffffa9
shl edi, 4
add edi, eax
mov dword [0x14001cfe8], edi
movzx ecx, byte [r8 + 0xa]
cmp cl, 0x30
jb 0x14000fc60
cmp cl, 0x39
ja 0x14000fc60
mov eax, ecx
add eax, 0xffffffd0
jmp 0x14000fc7a
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000fc6e
mov eax, ecx
add eax, 0xffffffc9
jmp 0x14000fc7a
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000fc85
mov eax, ecx
add eax, 0xffffffa9
shl edi, 4
add edi, eax
mov dword [0x14001cfe8], edi
movzx ecx, byte [r8 + 0xb]
cmp cl, 0x30
jb 0x14000fc9b
cmp cl, 0x39
ja 0x14000fc9b
mov eax, ecx
add eax, 0xffffffd0
jmp 0x14000fcb5
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000fca9
mov eax, ecx
add eax, 0xffffffc9
jmp 0x14000fcb5
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000fcc0
mov eax, ecx
add eax, 0xffffffa9
shl edi, 4
add edi, eax
mov dword [0x14001cfe8], edi
movzx ecx, byte [r8 + 0xc]
cmp cl, 0x30
jb 0x14000fcd6
cmp cl, 0x39
ja 0x14000fcd6
mov eax, ecx
add eax, 0xffffffd0
jmp 0x14000fcf0
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000fce4
mov eax, ecx
add eax, 0xffffffc9
jmp 0x14000fcf0
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000fcfb
mov eax, ecx
add eax, 0xffffffa9
shl edi, 4
add edi, eax
mov dword [0x14001cfe8], edi
movzx ecx, byte [r8 + 0xd]
cmp cl, 0x30
jb 0x14000fd11
cmp cl, 0x39
ja 0x14000fd11
mov eax, ecx
add eax, 0xffffffd0
jmp 0x14000fd2b
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x14000fd1f
mov eax, ecx
add eax, 0xffffffc9
jmp 0x14000fd2b
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x14000fd36
mov eax, ecx
add eax, 0xffffffa9
shl edi, 4
add edi, eax
mov dword [0x14001cfe8], edi
movzx edx, byte [r8 + 0xf]
mov ecx, ebx
mov dword [0x14001c6b0], ebx
cmp dl, 0x30
jb 0x14000fd52
cmp dl, 0x39
ja 0x14000fd52
lea ecx, [rdx - 0x30]
jmp 0x14000fd68
lea eax, [rdx - 0x41]
cmp al, 5
ja 0x14000fd5e
lea ecx, [rdx - 0x37]
jmp 0x14000fd68
lea eax, [rdx - 0x61]
cmp al, 5
ja 0x14000fd6e
lea ecx, [rdx - 0x57]
mov dword [0x14001c6b0], ecx
movzx edx, byte [r8 + 0x10]
cmp dl, 0x30
jb 0x14000fd84
cmp dl, 0x39
ja 0x14000fd84
mov eax, edx
add eax, 0xffffffd0
jmp 0x14000fd9e
lea eax, [rdx - 0x41]
cmp al, 5
ja 0x14000fd92
mov eax, edx
add eax, 0xffffffc9
jmp 0x14000fd9e
lea eax, [rdx - 0x61]
cmp al, 5
ja 0x14000fda9
mov eax, edx
add eax, 0xffffffa9
shl ecx, 4
add ecx, eax
mov dword [0x14001c6b0], ecx
movzx edx, byte [r8 + 0x11]
cmp dl, 0x30
jb 0x14000fdbf
cmp dl, 0x39
ja 0x14000fdbf
mov eax, edx
add eax, 0xffffffd0
jmp 0x14000fdd9
lea eax, [rdx - 0x41]
cmp al, 5
ja 0x14000fdcd
mov eax, edx
add eax, 0xffffffc9
jmp 0x14000fdd9
lea eax, [rdx - 0x61]
cmp al, 5
ja 0x14000fde4
mov eax, edx
add eax, 0xffffffa9
shl ecx, 4
add ecx, eax
mov dword [0x14001c6b0], ecx
movzx edx, byte [r8 + 0x12]
cmp dl, 0x30
jb 0x14000fdfa
cmp dl, 0x39
ja 0x14000fdfa
mov eax, edx
add eax, 0xffffffd0
jmp 0x14000fe14
lea eax, [rdx - 0x41]
cmp al, 5
ja 0x14000fe08
mov eax, edx
add eax, 0xffffffc9
jmp 0x14000fe14
lea eax, [rdx - 0x61]
cmp al, 5
ja 0x14000fe1f
mov eax, edx
add eax, 0xffffffa9
shl ecx, 4
add ecx, eax
mov dword [0x14001c6b0], ecx
movzx edx, byte [r8 + 0x13]
cmp dl, 0x30
jb 0x14000fe35
cmp dl, 0x39
ja 0x14000fe35
mov eax, edx
add eax, 0xffffffd0
jmp 0x14000fe4f
lea eax, [rdx - 0x41]
cmp al, 5
ja 0x14000fe43
mov eax, edx
add eax, 0xffffffc9
jmp 0x14000fe4f
lea eax, [rdx - 0x61]
cmp al, 5
ja 0x14000fe5a
mov eax, edx
add eax, 0xffffffa9
shl ecx, 4
add ecx, eax
mov dword [0x14001c6b0], ecx
movzx edx, byte [r8 + 0x14]
cmp dl, 0x30
jb 0x14000fe70
cmp dl, 0x39
ja 0x14000fe70
mov eax, edx
add eax, 0xffffffd0
jmp 0x14000fe8a
lea eax, [rdx - 0x41]
cmp al, 5
ja 0x14000fe7e
mov eax, edx
add eax, 0xffffffc9
jmp 0x14000fe8a
lea eax, [rdx - 0x61]
cmp al, 5
ja 0x14000fe95
mov eax, edx
add eax, 0xffffffa9
shl ecx, 4
add ecx, eax
mov dword [0x14001c6b0], ecx
movzx edx, byte [r8 + 0x15]
cmp dl, 0x30
jb 0x14000feab
cmp dl, 0x39
ja 0x14000feab
lea eax, [rdx - 0x41]
cmp al, 5
ja 0x14000feb9
mov r14, qword [rsp + 0x60]
lea r8, [0x14001ab70]
mov edx, 0xffffffff
mov r15, qword [rbp - 0x70]
mov rdi, r12
movsxd rbx, r15d
test r15d, r15d
jle 0x14001029c
nop word [rax + rax]
movzx ecx, byte [rdi + r13]
mov eax, edx
xor rcx, rax
shr edx, 8
movzx eax, cl
inc rdi
xor edx, dword [r8 + rax*4]
cmp rdi, rbx
jl 0x140010280
not edx
lea rcx, [rbp + 0x3d0]
mov r8d, edx
lea rdx, str._08X
call qword [sym.imp.USER32.dll_wsprintfA]
mov rax, qword [rbp + 0x3d0]
lea rcx, [rbp + 0x3f0]
mov qword [rbp + 0x3f0], rax
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [rsp + 0x40], r12d
mov ebx, eax
test eax, eax
jle 0x140010967
xor r9d, r9d
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x80
mov edx, 0x40000000
mov rcx, r14
mov dword [rsp + 0x20], 2
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x14001092e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r12d, eax
jmp 0x140010967
mov r13, qword [rsp + 0x48]
mov esi, 0x90
xor r12d, r12d
jmp 0x14001025a
mov esi, 0x8f
jmp 0x14001025a
mov esi, 0x8e
jmp 0x14001025a
mov esi, 0x8d
jmp 0x14001025f
lea r9, [rsp + 0x40]
mov qword [rsp + 0x20], r12
mov r8d, ebx
lea rdx, [rbp + 0x3f0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140010955
cmp ebx, dword [rsp + 0x40]
je 0x14001095e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r12d, eax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, r12d
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [rbp - 0x48]
mov r8, r13
mov edx, r15d
call fcn.140002790
mov r15, qword [rsp + 0x560]
mov r14, qword [rsp + 0x568]
mov r12, qword [rsp + 0x570]
mov rdi, qword [rsp + 0x578]
mov rbx, qword [rsp + 0x5b8]
test r13, r13
je 0x1400109b4
mov rcx, r13
call fcn.1400125ec
mov eax, esi
mov rsi, qword [rsp + 0x580]
mov rcx, qword [rbp + 0x450]
xor rcx, rsp
call fcn.140012330
add rsp, 0x588
pop r13
pop rbp
ret