Function at 0x14002b8b0
Capabilities:
Encode data using xor
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xd0]
sub rsp, 0x1d0
mov rax, qword [0x14009e180]
xor rax, rsp
mov qword [rbp + 0xc0], rax
mov r13, rdx
mov qword [rbp - 0x30], rdx
mov qword [rbp - 8], rdx
xor ebx, ebx
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
lea r8d, [rbx + 4]
lea rdx, str.MFP_
lea rcx, [rbp - 0x50]
call fcn.140027cd0
lea rax, [rbp - 0x50]
mov qword [rbp - 0x70], rax
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x40]
call fcn.140065940
mov r8, rax
lea rdx, [rbp + 0xa0]
call fcn.140028510
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x14002b97c
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002b977
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002b977
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007ca90
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
lea rcx, [rbp + 0x80]
call fcn.140027dd0
nop
lea rdx, [rbp + 0xa0]
lea rcx, [rsp + 0x40]
call fcn.140065940
mov r8, rax
lea rdx, [rbp + 0x20]
call fcn.1400295c0
nop
mov rdx, r13
lea rcx, [rbp - 0x28]
call fcn.140065940
mov r8, rax
lea rdx, [rbp]
call fcn.1400295c0
nop
mov byte [rbp - 0x70], 0x48
mov al, 0x7a
mov cl, 0x67
xor edx, edx
xor al, 0x48
mov byte [rbp - 0x6f], al
xor cl, 0x48
mov byte [rbp - 0x6e], cl
mov byte [rbp - 0x6d], dl
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x70], xmm1
lea rax, [rbp - 0x6f]
mov r12, 0xffffffffffffffff
mov r8, r12
inc r8
cmp byte [rax + r8], dl
jne 0x14002ba05
lea rdx, [rbp - 0x6f]
lea rcx, [rbp + 0x60]
call fcn.140027cd0
nop
mov byte [rbp - 0x70], 0xa
mov al, 0x2c
mov cl, 0x62
mov dl, 0x6f
mov r8b, 0x63
mov r9b, 0x70
movzx r10d, dl
mov r11b, 0x64
mov bl, 0x68
movzx edi, dl
mov sil, 0x78
mov r14b, 0x6d
mov r15b, 0x37
xor r13d, r13d
xor al, 0xa
mov byte [rbp - 0x6f], al
xor cl, 0xa
mov byte [rbp - 0x6e], cl
xor dl, 0xa
mov byte [rbp - 0x6d], dl
xor r8b, 0xa
mov byte [rbp - 0x6c], r8b
xor r9b, 0xa
mov byte [rbp - 0x6b], r9b
xor r10b, 0xa
mov byte [rbp - 0x6a], r10b
xor r11b, 0xa
mov byte [rbp - 0x69], r11b
xor bl, 0xa
mov byte [rbp - 0x68], bl
xor dil, 0xa
mov byte [rbp - 0x67], dil
xor sil, 0xa
mov byte [rbp - 0x66], sil
xor r14b, 0xa
mov byte [rbp - 0x65], r14b
xor r15b, 0xa
mov byte [rbp - 0x64], r15b
mov byte [rbp - 0x63], r13b
mov byte [rbp - 0x60], 0x10
mov al, 0x2f
mov cl, 0x74
mov dl, 0x75
movzx r8d, cl
mov r9b, 0x7f
mov r10b, 0x7b
movzx r11d, dl
mov bl, 0x62
mov dil, 0x2d
xor esi, esi
xor al, 0x10
mov byte [rbp - 0x5f], al
xor cl, 0x10
mov byte [rbp - 0x5e], cl
xor dl, 0x10
mov byte [rbp - 0x5d], dl
xor r8b, 0x10
mov byte [rbp - 0x5c], r8b
xor r9b, 0x10
mov byte [rbp - 0x5b], r9b
xor r10b, 0x10
mov byte [rbp - 0x5a], r10b
xor r11b, 0x10
mov byte [rbp - 0x59], r11b
xor bl, 0x10
mov byte [rbp - 0x58], bl
xor dil, 0x10
mov byte [rbp - 0x57], dil
mov byte [rbp - 0x56], sil
lea rax, [rbp - 0x5f]
mov rcx, r12
mov r13, qword [rbp - 0x30]
nop dword [rax]
inc rcx
cmp byte [rax + rcx], sil
jne 0x14002bb10
movabs rax, 0x7fffffffffffffff
mov rdx, qword [rbp + 0x10]
sub rax, rdx
cmp rax, rcx
jb 0x14002cc4f
lea rax, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova rax, qword [rbp]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rbp - 0x5f]
lea rcx, [rsp + 0x40]
call fcn.140068ee0
nop
lea rax, [rbp - 0x6f]
mov r8, r12
inc r8
cmp byte [rax + r8], 0
jne 0x14002bb66
lea rdx, [rbp - 0x6f]
lea rcx, [rsp + 0x40]
call fcn.140065690
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x40], xmm1
xor r14d, r14d
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], r14b
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.140065690
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x28], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x18], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], r14b
lea rdx, [rbp - 0x28]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x60]
call fcn.140065690
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x14002bc54
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002bc4e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002bc4e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007ca90
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x14002bc92
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002bc8d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002bc8d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007ca90
movdqa xmm0, xmmword [0x14008cc10]
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x50], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14002bce3
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002bcde
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002bcde
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007ca90
mov rbx, qword [0x10]
lea rdx, [rbp + 0x60]
lea rcx, [rsp + 0x40]
call fcn.140065940
mov r8, rax
lea rdx, [rbp + 0x40]
mov rcx, rbx
call fcn.140028c70
movdqa xmm0, xmmword [0x14008d280]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x14008d8b0]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmmword [0x14008d8f0]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [0x14008d240]
movdqa xmmword [rsp + 0x70], xmm1
mov word [rbp - 0x80], 0x60
mov rcx, r14
nop dword [rax]
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x41], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x42], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x43], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x44], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x45], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x46], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x47], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x48], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x49], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4a], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4b], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4c], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4d], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4e], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4f], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x50], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x51], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x52], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x53], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x54], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x55], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x56], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x57], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x58], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x59], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5a], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5b], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5c], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5d], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5e], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5f], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x60], al
add rcx, 0x20
cmp rcx, 0x40
jb 0x14002bd50
mov byte [rbp - 0x7f], 0
lea rcx, [rsp + 0x41]
mov rax, r12
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14002be90
lea rcx, [rbp + 0x40]
mov rbx, qword [rbp + 0x40]
mov rdi, qword [rbp + 0x58]
cmp rdi, 0xf
cmova rcx, rbx
mov rsi, qword [rbp + 0x50]
cmp rsi, rax
jne 0x14002c110
mov r8, rsi
lea rdx, [rsp + 0x41]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14002c110
cmp rdi, 0xf
jbe 0x14002bf06
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14002befe
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002c93f
mov rcx, rbx
call fcn.14007ca90
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x14002bf51
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002bf4c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002c990
call fcn.14007ca90
movdqa xmm0, xmmword [0x14008cc10]
movdqu xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x14002bf9d
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002bf98
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002c9df
call fcn.14007ca90
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], 0xf
mov byte [rbp], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x14002bfe8
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002bfe3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002ca2d
call fcn.14007ca90
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x14002c039
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002c034
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002ca81
call fcn.14007ca90
movdqa xmm0, xmmword [0x14008cc10]
movdqu xmmword [rbp + 0x90], xmm0
mov byte [rbp + 0x80], 0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x14002c092
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002c08c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002cadc
call fcn.14007ca90
nop
mov rdx, qword [r13 + 0x18]
cmp rdx, 0xf
jbe 0x14002c0cd
inc rdx
mov rcx, qword [r13]
cmp rdx, 0x1000
jb 0x14002c0c8
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14002cb36
mov rcx, r8
call fcn.14007ca90
mov qword [r13 + 0x10], r14
mov qword [r13 + 0x18], 0xf
mov byte [r13], 0
mov al, 1
mov rcx, qword [rbp + 0xc0]
xor rcx, rsp
call fcn.14007c640
lea r11, [rsp + 0x1d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
movdqa xmm0, xmmword [0x14008d820]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x14008d770]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmmword [0x14008d810]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [0x14008d730]
movdqa xmmword [rsp + 0x70], xmm1
mov dword [rbp - 0x80], 0x7535d53
xor eax, eax
mov byte [rbp - 0x7c], al
mov rcx, r14
nop word [rax + rax]
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x41], al
inc rcx
cmp rcx, 0x43
jb 0x14002c160
mov byte [rbp - 0x7c], 0
lea rcx, [rsp + 0x41]
mov rax, r12
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x14002c180
lea rcx, [rbp + 0x40]
cmp rdi, 0xf
cmova rcx, rbx
cmp rsi, rax
jne 0x14002c3c9
mov r8, rsi
lea rdx, [rsp + 0x41]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14002c3c9
cmp rdi, 0xf
jbe 0x14002c1ea
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14002c1e2
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002c93f
mov rcx, rbx
call fcn.14007ca90
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x14002c235
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002c230
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002c990
call fcn.14007ca90
movdqa xmm0, xmmword [0x14008cc10]
movdqu xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x14002c281
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002c27c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002c9df
call fcn.14007ca90
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], 0xf
mov byte [rbp], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x14002c2cc
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002c2c7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002ca2d
call fcn.14007ca90
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x14002c31d
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002c318
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002ca81
call fcn.14007ca90
movdqa xmm0, xmmword [0x14008cc10]
movdqu xmmword [rbp + 0x90], xmm0
mov byte [rbp + 0x80], 0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x14002c376
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002c370
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002cadc
call fcn.14007ca90
nop
mov rdx, qword [r13 + 0x18]
cmp rdx, 0xf
jbe 0x14002c3b1
inc rdx
mov rcx, qword [r13]
cmp rdx, 0x1000
jb 0x14002c3ac
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14002cb36
mov rcx, r8
call fcn.14007ca90
mov qword [r13 + 0x10], r14
mov qword [r13 + 0x18], 0xf
mov byte [r13], 0
xor al, al
jmp 0x14002c0e0
movdqa xmm0, xmmword [0x14008daa0]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x14008d080]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmmword [0x14008d0a0]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [0x14008da90]
movdqa xmmword [rsp + 0x70], xmm1
mov word [rbp - 0x80], 0x21
mov rcx, r14
nop word [rax + rax]
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x41], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x42], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x43], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x44], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x45], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x46], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x47], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x48], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x49], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4a], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4b], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4c], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4d], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4e], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4f], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x50], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x51], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x52], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x53], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x54], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x55], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x56], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x57], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x58], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x59], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5a], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5b], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5c], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5d], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5e], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5f], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x60], al
add rcx, 0x20
cmp rcx, 0x40
jb 0x14002c410
mov byte [rbp - 0x7f], 0
lea rcx, [rsp + 0x41]
mov rax, r12
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14002c550
lea rcx, [rbp + 0x40]
cmp rdi, 0xf
cmova rcx, rbx
cmp rsi, rax
jne 0x14002c752
mov r8, rsi
lea rdx, [rsp + 0x41]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14002c752
mov byte [0x1400cdd60], 1
mov byte [rbp - 0x60], 0x16
mov al, 0xc4
mov cl, 0xf3
mov dl, 0xe3
mov r8b, 0x36
mov r9b, 0xe6
mov r10b, 0xf6
mov r11b, 0xf7
mov bl, 0xf8
mov dil, 0xe4
mov sil, 0xed
movzx r14d, r8b
mov r15b, 0x2d
mov r12b, 0x3e
xor r13d, r13d
xor al, 0x16
mov byte [rbp - 0x5f], al
xor cl, 0x16
mov byte [rbp - 0x5e], cl
xor dl, 0x16
mov byte [rbp - 0x5d], dl
xor r8b, 0x16
mov byte [rbp - 0x5c], r8b
xor r9b, 0x16
mov byte [rbp - 0x5b], r9b
xor r10b, 0x16
mov byte [rbp - 0x5a], r10b
xor r11b, 0x16
mov byte [rbp - 0x59], r11b
xor bl, 0x16
mov byte [rbp - 0x58], bl
xor dil, 0x16
mov byte [rbp - 0x57], dil
xor sil, 0x16
mov byte [rbp - 0x56], sil
xor r14b, 0x16
mov byte [rbp - 0x55], r14b
xor r15b, 0x16
mov byte [rbp - 0x54], r15b
xor r12b, 0x16
mov byte [rbp - 0x53], r12b
mov byte [rbp - 0x52], r13b
movdqa xmm1, xmmword [0x14008df80]
movdqu xmmword [rsp + 0x40], xmm1
movdqa xmm2, xmmword [0x14008d7e0]
movdqu xmmword [rsp + 0x50], xmm2
movdqa xmm3, xmmword [0x14008df90]
movdqu xmmword [rsp + 0x60], xmm3
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x41], al
xor byte [rsp + 0x42], cl
xor byte [rsp + 0x43], cl
xor byte [rsp + 0x44], cl
xor byte [rsp + 0x45], cl
xor byte [rsp + 0x46], cl
xor byte [rsp + 0x47], cl
xor byte [rsp + 0x48], cl
xor byte [rsp + 0x49], cl
xor byte [rsp + 0x4a], cl
xor byte [rsp + 0x4b], cl
xor byte [rsp + 0x4c], cl
xor byte [rsp + 0x4d], cl
xor byte [rsp + 0x4e], cl
xor byte [rsp + 0x4f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x50], al
xor byte [rsp + 0x51], cl
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
movd eax, xmm3
xor al, cl
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], cl
xor byte [rsp + 0x62], cl
xor byte [rsp + 0x63], cl
xor byte [rsp + 0x64], cl
xor byte [rsp + 0x65], cl
xor byte [rsp + 0x66], cl
xor byte [rsp + 0x67], cl
xor byte [rsp + 0x68], cl
xor byte [rsp + 0x69], cl
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
mov byte [rsp + 0x70], r13b
xor r9d, r9d
lea r8, [rbp - 0x5f]
lea rdx, [rsp + 0x41]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea edx, [r13 + 1]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
movdqa xmm0, xmmword [str.:X_f_n_b_vY__t]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x14008d800]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmmword [0x14008d830]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [0x14008cf20]
movdqa xmmword [rsp + 0x70], xmm1
mov word [rbp - 0x80], 0x59
mov rcx, r14
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x41], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x42], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x43], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x44], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x45], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x46], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x47], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x48], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x49], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4a], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4b], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4c], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4d], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4e], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x4f], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x50], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x51], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x52], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x53], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x54], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x55], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x56], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x57], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x58], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x59], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5a], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5b], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5c], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5d], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5e], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x5f], al
movzx eax, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x60], al
add rcx, 0x20
cmp rcx, 0x40
jb 0x14002c7a0
mov byte [rbp - 0x7f], 0
lea rax, [rsp + 0x41]
nop word [rax + rax]
inc r12
cmp byte [rax + r12], 0
jne 0x14002c8e0
lea rcx, [rbp + 0x40]
cmp rdi, 0xf
cmova rcx, rbx
cmp rsi, r12
jne 0x14002cb3d
mov r8, rsi
lea rdx, [rsp + 0x41]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14002cb3d
cmp rdi, 0xf
jbe 0x14002c94e
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14002c946
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002c946
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.14007ca90
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x14002c99c
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002c997
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002c997
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007ca90
movdqa xmm0, xmmword [0x14008cc10]
movdqu xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x14002c9eb
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002c9e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002c9e6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007ca90
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], 0xf
mov byte [rbp], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x14002ca39
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ca34
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002ca34
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007ca90
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x14002ca8d
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ca88
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002ca88
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007ca90
movdqa xmm0, xmmword [0x14008cc10]
movdqu xmmword [rbp + 0x90], xmm0
mov byte [rbp + 0x80], 0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x14002cae9
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002cae3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002cae3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007ca90
nop
mov rdx, qword [r13 + 0x18]
cmp rdx, 0xf
jbe 0x14002cb20
inc rdx
mov rcx, qword [r13]
cmp rdx, 0x1000
jb 0x14002cb1b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14002cb36
mov rcx, r8
call fcn.14007ca90
mov qword [r13 + 0x10], r14
mov qword [r13 + 0x18], 0xf
mov byte [r13], 0
jmp 0x14002c0e0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov byte [rbp - 0x70], 0x5f
mov al, 0x64
mov cl, 0x77
xor edx, edx
xor al, 0x5f
mov byte [rbp - 0x6f], al
xor cl, 0x5f
mov byte [rbp - 0x6e], cl
mov byte [rbp - 0x6d], dl
movdqa xmm1, xmmword [0x14008dfd0]
movdqu xmmword [rsp + 0x40], xmm1
movdqa xmm2, xmmword [0x14008db20]
movdqu xmmword [rsp + 0x50], xmm2
mov dl, 0x31
mov r8b, 0x5a
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x41], al
xor byte [rsp + 0x42], cl
xor byte [rsp + 0x43], cl
xor byte [rsp + 0x44], cl
xor byte [rsp + 0x45], cl
xor byte [rsp + 0x46], cl
xor byte [rsp + 0x47], cl
xor byte [rsp + 0x48], cl
xor byte [rsp + 0x49], cl
xor byte [rsp + 0x4a], cl
xor byte [rsp + 0x4b], cl
xor byte [rsp + 0x4c], cl
xor byte [rsp + 0x4d], cl
xor byte [rsp + 0x4e], cl
xor byte [rsp + 0x4f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x50], al
xor byte [rsp + 0x51], cl
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
xor dl, cl
mov byte [rsp + 0x60], dl
xor r8b, cl
mov byte [rsp + 0x61], r8b
mov byte [rsp + 0x62], 0
xor r9d, r9d
lea r8, [rbp - 0x6f]
lea rdx, [rsp + 0x41]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 1
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.140023b00
int3