Function at 0x140030180
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x1400e10c0]
xor rax, rsp
mov qword [rbp + 0x38], rax
mov rsi, rcx
xor ebx, ebx
mov dword [rbp - 0x60], ebx
lea r9, [rbp - 0x60]
mov r8, qword [0x1400e2568]
call fcn.140031330
mov r8d, dword [rbp - 0x60]
lea rcx, str.xxxxxx____xxxxx____xxx____xxxxx____x____xx_x
mov qword [rsp + 0x20], rcx
lea r9, [0x1400ce938]
mov rdx, rax
mov rcx, rsi
call fcn.140030ef0
mov qword [0x1400e24f0], rax
mov dword [rbp - 0x60], ebx
lea r9, [rbp - 0x60]
mov r8, qword [0x1400e2568]
mov rcx, rsi
call fcn.140031330
mov r8d, dword [rbp - 0x60]
lea rcx, str.xxxxxx
mov qword [rsp + 0x20], rcx
lea r9, [0x1400ce970]
mov rdx, rax
mov rcx, rsi
call fcn.140030ef0
mov rcx, rax
mov qword [0x1400e24f8], rax
mov edi, 0x3bf2
mov rax, qword [0x1400e24f0]
test rax, rax
jne 0x140030449
mov dword [rbp - 0x60], ebx
lea r9, [rbp - 0x60]
mov r8, qword [0x1400e2568]
mov rcx, rsi
call fcn.140031330
mov r8d, dword [rbp - 0x60]
lea rcx, str.xxx____xxxxx____xxx____x____x
mov qword [rsp + 0x20], rcx
lea r9, [0x1400ce998]
mov rdx, rax
mov rcx, rsi
call fcn.140030ef0
mov qword [0x1400e24f0], rax
mov dword [rsp + 0x44], 0x3bd53ba9
test rax, rax
jne 0x14003035d
mov dword [rsp + 0x40], 0x3bde3ba9
mov dword [rsp + 0x48], 0x3b963ba1
mov dword [rsp + 0x4c], 0x3b973b8a
mov dword [rsp + 0x50], 0x3b953b93
mov dword [rsp + 0x54], 0x3bdd3b9b
mov dword [rsp + 0x58], 0x3b963bae
mov dword [rsp + 0x5c], 0x3c453c44
mov dword [rsp + 0x60], 0x3c4f3c40
mov dword [rsp + 0x64], 0x3c663c6b
mov dword [rsp + 0x68], 0x3c273c6d
mov dword [rsp + 0x6c], 0x3c663c66
mov dword [rsp + 0x70], 0x3c2b3c7e
mov dword [rsp + 0x74], 0x3c623c6a
mov dword [rsp + 0x78], 0x3c613c7b
mov dword [rsp + 0x7c], 0x3c74
mov byte [rbp - 0x80], 1
nop word [rax + rax]
lea eax, [rdi + rbx]
xor word [rsp + rbx*2 + 0x40], ax
inc rbx
cmp rbx, 0x1f
jb 0x140030320
mov byte [rbp - 0x80], 0
lea rdx, [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1400355d0
lea rdx, [0x1400357b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
xor al, al
jmp 0x140030eba
mov dword [rsp + 0x40], 0x3bd83ba9
mov dword [rsp + 0x48], 0x3b9e3ba6
mov dword [rsp + 0x4c], 0x3bbd3bbc
mov dword [rsp + 0x50], 0x3bb73bb8
mov dword [rsp + 0x54], 0x3b9e3b93
mov dword [rsp + 0x58], 0x3bdf3b95
mov dword [rsp + 0x5c], 0x3c6e3c66
mov dword [rsp + 0x60], 0x3c6d3c77
mov dword [rsp + 0x64], 0x3c253c60
mov dword [rsp + 0x68], 0x3c6e3c71
mov dword [rsp + 0x6c], 0x3c613c7c
mov dword [rsp + 0x70], 0x3c783c2a
mov dword [rsp + 0x74], 0x3c6e3c69
mov dword [rsp + 0x78], 0x3c613c61
mov dword [rsp + 0x7c], 0x3c313c74
mov dword [rbp - 0x80], 0x3c723c62
mov dword [rbp - 0x7c], 0x3c613c60
mov dword [rbp - 0x78], 0x3c653c73
mov dword [rbp - 0x74], 0x3c76
mov byte [rbp - 0x70], 1
mov rdx, rbx
nop dword [rax + rax]
lea eax, [rdi + rdx]
xor word [rsp + rdx*2 + 0x40], ax
inc rdx
cmp rdx, 0x27
jb 0x140030400
mov byte [rbp - 0x70], bl
lea rdx, [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1400355d0
lea rdx, [0x1400357b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rax, qword [0x1400e24f0]
add rax, 0x10
mov rcx, qword [0x1400e24f8]
jmp 0x14003044d
add rax, 0x1c
mov qword [0x1400e24f0], rax
test rcx, rcx
jne 0x14003051f
mov dword [rsp + 0x40], 0x3bde3ba9
mov dword [rsp + 0x44], 0x3bd53ba9
mov dword [rsp + 0x48], 0x3b963ba1
mov dword [rsp + 0x4c], 0x3b973b8a
mov dword [rsp + 0x50], 0x3b953b93
mov dword [rsp + 0x54], 0x3bdd3b9b
mov dword [rsp + 0x58], 0x3b963bae
mov dword [rsp + 0x5c], 0x3c453c44
mov dword [rsp + 0x60], 0x3c403c40
mov dword [rsp + 0x64], 0x3c663c65
mov dword [rsp + 0x68], 0x3c623c6e
mov dword [rsp + 0x6c], 0x3c683c5c
mov dword [rsp + 0x70], 0x3c673c68
mov dword [rsp + 0x74], 0x3c2d3c69
mov dword [rsp + 0x78], 0x3c603c60
mov dword [rsp + 0x7c], 0x3c313c64
mov dword [rbp - 0x80], 0x3c7c3c74
mov dword [rbp - 0x7c], 0x3c7b3c61
mov dword [rbp - 0x78], 0x3c72
mov byte [rbp - 0x74], 1
nop word [rax + rax]
lea eax, [rdi + rbx]
xor word [rsp + rbx*2 + 0x40], ax
inc rbx
cmp rbx, 0x25
jb 0x140030500
mov byte [rbp - 0x74], 0
lea rdx, [rsp + 0x40]
jmp 0x14003033a
movdqa xmm0, xmmword [0x1400cef60]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x7d342370
mov word [rbp - 0x2c], 0x100
mov rdx, rbx
nop dword [rax]
lea eax, [rdx - 0xe]
xor byte [rbp + rdx - 0x40], al
inc rdx
cmp rdx, 0x14
jb 0x140030540
mov byte [rbp - 0x2b], bl
lea rdx, [rbp - 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140039930
lea rdx, [0x14002bdc0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rdx, qword [0x1400e24f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x1400357b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
movdqa xmm0, xmmword [0x1400cee90]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x25616f60
mov dword [rbp - 0x2c], 0x297a7356
mov dword [rbp - 0x28], 0x100733a
mov rdx, rbx
nop dword [rax + rax]
lea eax, [rdx - 0xe]
xor byte [rbp + rdx - 0x40], al
inc rdx
cmp rdx, 0x1a
jb 0x1400305c0
mov byte [rbp - 0x25], bl
lea rdx, [rbp - 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140039930
lea rdx, [0x14002bdc0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rdx, qword [0x1400e24f8]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x1400357b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov r14, qword [0x1400e24f0]
mov dword [rbp - 0x60], ebx
lea r8, [r14 + 3]
mov r9d, 4
lea rdx, [rbp - 0x60]
mov rcx, rsi
call fcn.14002da30
test al, al
jne 0x14003063c
mov r13, rbx
jmp 0x140030647
movsxd r13, dword [rbp - 0x60]
add r13, 7
add r13, r14
mov r14, qword [0x1400e24f8]
mov dword [rbp - 0x5c], ebx
lea r8, [r14 + 6]
mov r9d, 4
lea rdx, [rbp - 0x5c]
mov rcx, rsi
call fcn.14002da30
test al, al
jne 0x140030670
mov r15, rbx
jmp 0x14003067b
movsxd r15, dword [rbp - 0x5c]
add r15, 0xa
add r15, r14
mov rdx, r13
mov rcx, rsi
call fcn.14002f7d0
test al, al
jne 0x140030730
mov dword [rsp + 0x40], 0x3bde3ba9
mov dword [rsp + 0x44], 0x3bd53ba9
mov dword [rsp + 0x48], 0x3b963bb5
mov dword [rsp + 0x4c], 0x3bde3b96
mov dword [rsp + 0x50], 0x3bdb3b8e
mov dword [rsp + 0x54], 0x3b923b90
mov dword [rsp + 0x58], 0x3b943b9d
mov dword [rsp + 0x5c], 0x3c513c20
mov dword [rsp + 0x60], 0x3c473c6b
mov dword [rsp + 0x64], 0x3c473c40
mov dword [rsp + 0x68], 0x3c663c45
mov dword [rsp + 0x6c], 0x3c613c6b
mov dword [rsp + 0x70], 0x3c5f3c6f
mov dword [rsp + 0x74], 0x3c6f3c6d
mov dword [rsp + 0x78], 0x3c6a3c62
mov word [rsp + 0x7c], bx
mov byte [rsp + 0x7e], 1
lea eax, [rdi + rbx]
xor word [rsp + rbx*2 + 0x40], ax
inc rbx
cmp rbx, 0x1e
jb 0x140030710
mov byte [rsp + 0x7e], 0
lea rdx, [rsp + 0x40]
jmp 0x14003033a
mov dword [rbp - 0x40], 0x3bd83ba9
mov dword [rbp - 0x3c], 0x3bd53ba9
mov dword [rbp - 0x38], 0x3b9e3ba6
mov dword [rbp - 0x34], 0x3bbd3bbc
mov dword [rbp - 0x30], 0x3bb73bb8
mov dword [rbp - 0x2c], 0x3b9e3b93
mov dword [rbp - 0x28], 0x3bdf3b95
mov dword [rbp - 0x24], 0x3c6e3c4c
mov dword [rbp - 0x20], 0x3c683c61
mov dword [rbp - 0x1c], 0x3c613c61
mov word [rbp - 0x18], bx
mov byte [rbp - 0x16], 1
mov rdx, rbx
lea eax, [rdi + rdx]
xor word [rbp + rdx*2 - 0x40], ax
inc rdx
cmp rdx, 0x14
jb 0x140030781
mov byte [rbp - 0x16], bl
lea rdx, [rbp - 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1400355d0
lea rdx, [0x1400357b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rbp + 0x18]
call fcn.14002c1a0
nop
lea rcx, [rbp + 0x18]
cmp qword [rbp + 0x30], 7
cmova rcx, qword [rbp + 0x18]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rbx
mov dword [rsp + 0x54], ebx
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x64], xmm0
mov dword [rsp + 0x74], ebx
mov dword [rsp + 0x60], 0x5284eac3
mov qword [rsp + 0x58], rcx
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140030800
add ax, ax
mov word [rsp + 0x50], ax
add ax, 2
mov word [rsp + 0x52], ax
lea r8, [rsp + 0x40]
mov rdx, r15
mov rcx, rsi
call fcn.14002ff00
mov r14, rax
test rax, rax
jne 0x1400308ae
mov dword [rbp - 0x40], 0x3bde3ba9
mov dword [rbp - 0x3c], 0x3bd53ba9
mov dword [rbp - 0x38], 0x3b983bb8
mov dword [rbp - 0x34], 0x3bd93b8c
mov dword [rbp - 0x30], 0x3b943b9c
mov dword [rbp - 0x2c], 0x3b933b89
mov dword [rbp - 0x28], 0x3bdf3b9a
mov dword [rbp - 0x24], 0x3c6f3c69
mov dword [rbp - 0x20], 0x3c603c22
mov dword [rbp - 0x1c], 0x3c663c65
mov dword [rbp - 0x18], 0x3c623c6e
mov word [rbp - 0x14], bx
mov byte [rbp - 0x12], 1
nop dword [rax + rax]
lea eax, [rdi + rbx]
xor word [rbp + rbx*2 - 0x40], ax
inc rbx
cmp rbx, 0x16
jb 0x140030890
mov byte [rbp - 0x12], 0
lea rdx, [rbp - 0x40]
jmp 0x140030e4b
lea r8, [rax + 8]
mov r9d, 8
lea rdx, [rbp - 0x50]
mov rcx, rsi
call fcn.14002da30
test al, al
jne 0x14003094e
mov dword [rbp - 0x40], 0x3bde3ba9
mov dword [rbp - 0x3c], 0x3bd53ba9
mov dword [rbp - 0x38], 0x3b963bb5
mov dword [rbp - 0x34], 0x3bde3b96
mov dword [rbp - 0x30], 0x3bdb3b8e
mov dword [rbp - 0x2c], 0x3b983b9b
mov dword [rbp - 0x28], 0x3bdf3b8a
mov dword [rbp - 0x24], 0x3c733c70
mov dword [rbp - 0x20], 0x3c753c67
mov dword [rbp - 0x1c], 0x3c603c24
mov dword [rbp - 0x18], 0x3c733c68
mov dword [rbp - 0x14], 0x3c703c7a
mov word [rbp - 0x10], bx
mov byte [rbp - 0xe], 1
nop dword [rax + rax]
lea eax, [rdi + rbx]
xor word [rbp + rbx*2 - 0x40], ax
inc rbx
cmp rbx, 0x18
jb 0x140030930
mov byte [rbp - 0xe], 0
lea rdx, [rbp - 0x40]
jmp 0x140030e4b
mov r9d, 8
mov r8, r14
lea rdx, [rbp - 0x58]
mov rcx, rsi
call fcn.14002da30
test al, al
jne 0x1400309ee
mov dword [rbp - 0x40], 0x3bde3ba9
mov dword [rbp - 0x3c], 0x3bd53ba9
mov dword [rbp - 0x38], 0x3b963bb5
mov dword [rbp - 0x34], 0x3bde3b96
mov dword [rbp - 0x30], 0x3bdb3b8e
mov dword [rbp - 0x2c], 0x3b983b9b
mov dword [rbp - 0x28], 0x3bdf3b8a
mov dword [rbp - 0x24], 0x3c643c6e
mov dword [rbp - 0x20], 0x3c773c7a
mov dword [rbp - 0x1c], 0x3c603c24
mov dword [rbp - 0x18], 0x3c733c68
mov dword [rbp - 0x14], 0x3c703c7a
mov word [rbp - 0x10], bx
mov byte [rbp - 0xe], 1
nop word [rax + rax]
lea eax, [rdi + rbx]
xor word [rbp + rbx*2 - 0x40], ax
inc rbx
cmp rbx, 0x18
jb 0x1400309d0
mov byte [rbp - 0xe], 0
lea rdx, [rbp - 0x40]
jmp 0x140030e4b
movdqa xmm0, xmmword [0x1400cedf0]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x77706d47
mov dword [rbp - 0x2c], 0x2935277f
mov dword [rbp - 0x28], 0x100733a
mov r8, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [r8 - 0xe]
xor byte [rbp + r8 - 0x40], al
inc r8
cmp r8, 0x1a
jb 0x140030a20
mov byte [rbp - 0x25], 0
lea rdx, [rbp - 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140039930
lea rdx, [0x14002bdc0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rdx, r14
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___void_const____ptr64____ptr64]
lea rdx, [0x1400357b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rax, qword [rbp - 0x50]
test rax, rax
je 0x140030dc3
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x40], gethostname
lea rcx, [rbp - 0x58]
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], 8
mov dword [rbp + 0x10], ebx
mov qword [rsp + 0x38], rbx
lea rax, [rbp + 0x10]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r9d, Ordinal_41
lea r8, [rbp - 0x40]
mov edx, 0x80862007
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x140030dc3
mov rax, qword [rbp - 0x58]
add rax, 8
je 0x140030d3e
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x40], gethostname
lea rcx, [rbp - 0x50]
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], 8
mov dword [rbp + 0x10], ebx
mov qword [rsp + 0x38], rbx
lea rax, [rbp + 0x10]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r9d, Ordinal_41
lea r8, [rbp - 0x40]
mov edx, 0x80862007
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x140030d3e
mov r8, r14
mov rdx, r15
mov rcx, rsi
call fcn.14002fc70
test al, al
jne 0x140030bfe
mov dword [rbp - 0x40], 0x3bde3ba9
mov dword [rbp - 0x3c], 0x3bd53ba9
mov dword [rbp - 0x38], 0x3b963bb5
mov dword [rbp - 0x34], 0x3bde3b96
mov dword [rbp - 0x30], 0x3bdb3b8e
mov dword [rbp - 0x2c], 0x3b983b98
mov dword [rbp - 0x28], 0x3b9a3b92
mov dword [rbp - 0x24], 0x3c643c74
mov dword [rbp - 0x20], 0x3c653c22
mov dword [rbp - 0x1c], 0x3c6a3c76
mov dword [rbp - 0x18], 0x3c273c6b
mov dword [rbp - 0x14], 0x3c603c58
mov dword [rbp - 0x10], 0x3c4f3c4e
mov dword [rbp - 0xc], 0x3c4e3c4e
mov dword [rbp - 8], 0x3c6c3c6f
mov dword [rbp - 4], 0x3c743c78
mov dword [rbp], 0x3c723c46
mov dword [rbp + 4], 0x3c793c76
mov dword [rbp + 8], 0x3c73
mov byte [rbp + 0xc], 1
lea eax, [rdi + rbx]
xor word [rbp + rbx*2 - 0x40], ax
inc rbx
cmp rbx, 0x25
jb 0x140030be0
mov byte [rbp + 0xc], 0
lea rdx, [rbp - 0x40]
jmp 0x140030e4b
mov dword [rbp + 0x14], ebx
lea r14, [r15 + 0x40]
mov r9d, 4
mov r8, r14
lea rdx, [rbp + 0x14]
mov rcx, rsi
call fcn.14002da30
mov eax, dword [rbp + 0x14]
test eax, eax
je 0x140030c7d
dec eax
mov dword [rbp + 0x14], eax
test r14, r14
je 0x140030c7d
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x40], gethostname
lea rax, [rbp + 0x14]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x20], 4
mov dword [rbp + 0x10], ebx
mov qword [rsp + 0x38], rbx
lea rax, [rbp + 0x10]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r9d, Ordinal_41
lea r8, [rbp - 0x40]
mov edx, 0x80862007
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rdx, r13
mov rcx, rsi
call fcn.14002fa50
mov dword [rsp + 0x40], 0x3bd83ba9
mov dword [rsp + 0x44], 0x3bd53ba9
mov dword [rsp + 0x48], 0x3b9e3ba6
mov dword [rsp + 0x4c], 0x3bbd3bbc
mov dword [rsp + 0x50], 0x3bb83bb8
mov dword [rsp + 0x54], 0x3b9e3b9d
mov dword [rsp + 0x58], 0x3b9a3b96
mov dword [rsp + 0x5c], 0x3c603c54
mov dword [rsp + 0x60], 0x3c6f3c60
mov dword [rsp + 0x64], 0x3c253c61
mov dword [rsp + 0x68], 0x3c6b3c45
mov dword [rsp + 0x6c], 0x3c683c6d
mov dword [rsp + 0x70], 0x3c6e3c64
mov dword [rsp + 0x74], 0x3c68
mov byte [rsp + 0x78], 1
nop dword [rax]
lea eax, [rdi + rbx]
xor word [rsp + rbx*2 + 0x40], ax
inc rbx
cmp rbx, 0x1b
jb 0x140030d00
mov byte [rsp + 0x78], 0
lea rdx, [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1400355d0
lea rdx, [0x1400357b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov bl, 1
jmp 0x140030e74
mov dword [rsp + 0x40], 0x3bde3ba9
mov dword [rsp + 0x44], 0x3bd53ba9
mov dword [rsp + 0x48], 0x3b963bb5
mov dword [rsp + 0x4c], 0x3bde3b96
mov dword [rsp + 0x50], 0x3bdb3b8e
mov dword [rsp + 0x54], 0x3b983b8f
mov dword [rsp + 0x58], 0x3bdf3b8a
mov dword [rsp + 0x5c], 0x3c733c70
mov dword [rsp + 0x60], 0x3c753c67
mov dword [rsp + 0x64], 0x3c603c24
mov dword [rsp + 0x68], 0x3c733c68
mov dword [rsp + 0x6c], 0x3c703c7a
mov word [rsp + 0x70], bx
mov byte [rsp + 0x72], 1
nop dword [rax + rax]
lea eax, [rdi + rbx]
xor word [rsp + rbx*2 + 0x40], ax
inc rbx
cmp rbx, 0x18
jb 0x140030db0
jmp 0x140030e41
mov dword [rsp + 0x40], 0x3bde3ba9
mov dword [rsp + 0x44], 0x3bd53ba9
mov dword [rsp + 0x48], 0x3b963bb5
mov dword [rsp + 0x4c], 0x3bde3b96
mov dword [rsp + 0x50], 0x3bdb3b8e
mov dword [rsp + 0x54], 0x3b983b8f
mov dword [rsp + 0x58], 0x3bdf3b8a
mov dword [rsp + 0x5c], 0x3c643c6e
mov dword [rsp + 0x60], 0x3c773c7a
mov dword [rsp + 0x64], 0x3c603c24
mov dword [rsp + 0x68], 0x3c733c68
mov dword [rsp + 0x6c], 0x3c703c7a
mov word [rsp + 0x70], bx
mov byte [rsp + 0x72], 1
nop dword [rax]
lea eax, [rdi + rbx]
xor word [rsp + rbx*2 + 0x40], ax
inc rbx
cmp rbx, 0x18
jb 0x140030e30
lea rdx, [rsp + 0x40]
mov byte [rsp + 0x72], 0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1400355d0
lea rdx, [0x1400357b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rdx, r13
mov rcx, rsi
call fcn.14002fa50
xor bl, bl
mov rdx, qword [rbp + 0x30]
cmp rdx, 7
jbe 0x140030eb7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030eb2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140030eb2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ac900
movzx eax, bl
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.1400ac810
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret