Function at 0x1400052f0
Capabilities:
Encode data using xor
Enumerate files on windows
Hash data using fnv

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x448]
sub rsp, 0x520
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x140025030]
xor rax, rsp
mov qword [rbp + 0x3f0], rax
xor r13d, r13d
mov dword [rsp + 0x50], r13d
lea rcx, [rbp + 0x160]
call fcn.140018870
test al, al
jne 0x14000536f
lea rdx, str.Failed_to_retrieve_last_logon_time.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140004330
lea rdx, [0x140004500]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1400065f9
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
mov edx, 0x18
call fcn.140002e40
mov rbx, rax
mov qword [rbp + 0xa0], rax
mov r12d, 0x14
mov qword [rbp + 0xb0], r12
mov qword [rbp + 0xb8], 0x17
movups xmm0, xmmword [str.C:WindowsPrefetch_]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x14001cbe0]
movups xmmword [rax + 0x10], xmm1
movsd xmm0, qword [0x14001cbf0]
movsd qword [rax + 0x20], xmm0
mov word [rax + 0x28], r13w
mov qword [rbp + 0x108], r13
lea edx, [r12 + 4]
call fcn.140002e40
mov qword [rbp + 0x100], rax
movdqa xmm0, xmmword [0x14001eb30]
movdqu xmmword [rbp + 0x110], xmm0
movups xmm0, xmmword [rbx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rax + 0x10], xmm1
movsd xmm0, qword [rbx + 0x20]
movsd qword [rax + 0x20], xmm0
mov dword [rax + 0x28], 0x2a
lea r14d, [r12 + 0x2c]
lea rcx, [rbp + 0x100]
cmp qword [rbp + 0x118], 8
cmovae rcx, qword [rbp + 0x100]
lea rdx, [rbp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [rsp + 0x48], rax
mov rdx, qword [rbp + 0x118]
cmp rdx, 8
jb 0x14000548f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005485
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005485
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140019630
mov rax, qword [rsp + 0x48]
movdqa xmm0, xmmword [0x14001eb10]
movdqu xmmword [rbp + 0x110], xmm0
mov word [rbp + 0x100], r13w
cmp rax, 0xffffffffffffffff
jne 0x1400054d5
lea rdx, str.____Prefetch_directory_not_found._Ensure_that_you_can_access_C:WindowsPrefetch_and_ban_the_player_if_you_cant.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140004330
lea rdx, [0x140004500]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1400065b0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 5
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140002910
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 7
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rbp - 0x60]
call fcn.140003110
nop
mov rbx, qword [rsp + 0x48]
mov edx, 0xa
movabs rcx, 0x7ffffffffffffffe
cmp dword [rbp + 0x1a0], 0x10
je 0x140005a84
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], r13
mov qword [rbp + 0x58], r13
lea rax, [rbp + 0x1cc]
mov rdi, 0xffffffffffffffff
nop dword [rax + rax]
inc rdi
cmp word [rax + rdi*2], 0
jne 0x140005560
cmp rdi, rcx
ja 0x140006633
cmp rdi, 8
jae 0x1400055b0
mov qword [rbp + 0x50], rdi
mov qword [rbp + 0x58], 7
lea rbx, [rdi + rdi]
mov r8, rbx
lea rdx, [rbp + 0x1cc]
lea rcx, [rbp + 0x40]
call sub.VCRUNTIME140.dll_memcpy
mov word [rbp + rbx + 0x40], r13w
mov rsi, qword [rbp + 0x58]
mov rdi, qword [rbp + 0x50]
mov r15, qword [rbp + 0x40]
jmp 0x1400055fc
mov rsi, rdi
or rsi, 7
cmp rsi, rcx
jbe 0x1400055c1
mov rsi, rcx
jmp 0x1400055c9
cmp rsi, 0xa
cmovb rsi, rdx
lea rdx, [rsi + 1]
call fcn.140002e40
mov r15, rax
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x50], rdi
mov qword [rbp + 0x58], rsi
lea rbx, [rdi + rdi]
mov r8, rbx
lea rdx, [rbp + 0x1cc]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov word [r15 + rbx], r13w
lea r10, [rbp + 0x40]
cmp rsi, 8
setae bl
mov byte [rsp + 0x40], bl
cmovae r10, r15
cmp rdi, 4
jb 0x1400064e7
lea r11, [rdi - 3]
lea r11, [r10 + r11*2]
mov rcx, r10
nop dword [rax]
nop dword [rax + rax]
mov rax, r11
sub rax, rcx
sar rax, 1
mov rdx, r13
je 0x14000565a
cmp word [rcx], 0x2e
je 0x140005657
cmp rax, 1
je 0x14000565a
dec rax
add rcx, 2
cmp word [rcx], 0x2e
jne 0x140005644
mov rdx, rcx
mov rcx, rdx
test rdx, rdx
je 0x1400064e7
mov r8d, 4
lea rax, str..EXE
mov rdx, rax
mov r9, rcx
sub r9, rax
nop dword [rax]
movzx eax, word [rdx + r9]
cmp ax, word [rdx]
jne 0x140005721
add rdx, 2
sub r8, 1
jne 0x140005680
sub rcx, r10
sar rcx, 1
cmp rcx, 0xffffffffffffffff
je 0x1400064e7
movabs rdx, 0x7ffffffffffffffe
mov rax, rdx
sub rax, r12
cmp rax, rdi
jb 0x14000665d
lea rcx, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 8
setae byte [rsp + 0x41]
cmovae rcx, qword [rbp + 0xa0]
mov qword [rsp + 0x50], rcx
lea rax, [rbp + 0x40]
test bl, bl
cmovne rax, r15
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
lea r13, [r12 + rdi]
mov ebx, 7
lea r12, [rbp + 0x140]
cmp r13, rbx
jbe 0x14000574f
mov rbx, r13
or rbx, 7
cmp rbx, rdx
jbe 0x14000572a
mov rbx, rdx
jmp 0x140005737
add rcx, 2
jmp 0x140005630
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
lea rdx, [rbx + 1]
call fcn.140002e40
mov r12, rax
mov qword [rbp + 0x140], rax
mov rcx, qword [rsp + 0x50]
mov qword [rbp + 0x150], r13
mov qword [rbp + 0x158], rbx
mov rbx, qword [rbp + 0xb0]
add rbx, rbx
mov r8, rbx
mov rdx, rcx
mov rcx, r12
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + r12]
lea r8, [rdi + rdi]
mov rdx, qword [rsp + 0x70]
call sub.VCRUNTIME140.dll_memcpy
xor ecx, ecx
mov word [r12 + r13*2], cx
or r14d, 0x20
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x1b4]
call qword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
lea rdx, [rbp + 0x190]
lea rcx, [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x160]
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CompareFileTime]
test eax, eax
jle 0x14000645e
lea r9, [rbp + 0xa0]
cmp byte [rsp + 0x41], 0
cmovne r9, qword [rbp + 0xa0]
lea rax, [rbp + 0x40]
cmp byte [rsp + 0x40], 0
cmovne rax, r15
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0xb0]
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0xe0]
call fcn.1400035d0
bts r14d, 8
mov dword [rsp + 0x50], r14d
lea r8, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 8
cmovae r8, qword [rbp + 0xe0]
xor r13d, r13d
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor edx, edx
mov ecx, 0xfde9
lea r9d, [r13 - 1]
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd rbx, eax
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400075d0
nop
lea rcx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0x10
cmovae rcx, qword [rbp + 0xc0]
lea r8, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 8
cmovae r8, qword [rbp + 0xe0]
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rcx
xor edx, edx
mov ecx, 0xfde9
lea r9d, [r13 - 1]
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea rdx, [rbp + 0xc0]
lea rcx, [rsp + 0x58]
call fcn.140004780
nop
mov rcx, qword [rsp + 0x58]
cmp rcx, qword [rsp + 0x60]
jne 0x140005af6
test rcx, rcx
je 0x140005937
mov rdx, qword [rsp + 0x68]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005923
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006564
call fcn.140019630
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r13
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0x10
jb 0x140005978
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005973
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000656b
call fcn.140019630
mov qword [rbp + 0xd0], r13
mov qword [rbp + 0xd8], 0xf
mov byte [rbp + 0xc0], 0
mov rdx, qword [rbp + 0xf8]
cmp rdx, 8
jb 0x1400059d7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400059d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006572
call fcn.140019630
mov qword [rbp + 0xf0], r13
mov qword [rbp + 0xf8], 7
mov word [rbp + 0xe0], r13w
mov rdx, qword [rbp + 0x158]
cmp rdx, 8
jb 0x140005a38
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005a32
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006525
call fcn.140019630
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x140005a78
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005a73
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000652c
call fcn.140019630
mov r12, qword [rbp + 0xb0]
mov rbx, qword [rsp + 0x48]
lea rdx, [rbp + 0x1a0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140005522
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x140006598
mov rax, qword [rbp - 0x38]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006587
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006587
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x58]
call fcn.140004c50
nop
mov r12, qword [rbp - 0x80]
mov rax, qword [rbp - 0x78]
mov qword [rsp + 0x70], rax
cmp r12, rax
je 0x14000631f
nop dword [rax + rax]
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], r13
mov qword [rbp + 0x78], r13
lea rax, [rbp + 0x1cc]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140005b40
movabs r15, 0x7ffffffffffffffe
cmp rbx, r15
ja 0x140006657
mov qword [rbp + 0x78], 7
cmp rbx, 8
jae 0x140005b8d
mov qword [rbp + 0x70], rbx
add rbx, rbx
mov r8, rbx
lea rdx, [rbp + 0x1cc]
lea rcx, [rbp + 0x60]
call sub.VCRUNTIME140.dll_memcpy
mov word [rbp + rbx + 0x60], r13w
jmp 0x140005bdd
mov rsi, rbx
or rsi, 7
cmp rsi, r15
jbe 0x140005b9e
mov rsi, r15
jmp 0x140005bab
cmp rsi, 0xa
mov eax, 0xa
cmovb rsi, rax
lea rdx, [rsi + 1]
call fcn.140002e40
mov rdi, rax
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x70], rbx
mov qword [rbp + 0x78], rsi
add rbx, rbx
mov r8, rbx
lea rdx, [rbp + 0x1cc]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov word [rdi + rbx], r13w
lea rdx, [rbp + 0x60]
cmp qword [rbp + 0x78], 8
setae r9b
mov r8, qword [rbp + 0x60]
cmovae rdx, r8
mov rdi, qword [rbp + 0x70]
test rdi, rdi
je 0x140005c33
mov rax, rdi
mov rcx, rdx
mov rbx, r13
cmp word [rdx], 0x2d
je 0x140005c23
nop word [rax + rax]
cmp rax, 1
je 0x140005c26
dec rax
add rcx, 2
cmp word [rcx], 0x2d
jne 0x140005c10
mov rbx, rcx
test rbx, rbx
je 0x140005c33
sub rbx, rdx
sar rbx, 1
jmp 0x140005c3a
mov rbx, 0xffffffffffffffff
xorps xmm0, xmm0
cmp rbx, 0xffffffffffffffff
je 0x140005d0a
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], r13
cmp rdi, rbx
cmovb rbx, rdi
lea r15, [rbp + 0x60]
test r9b, r9b
cmovne r15, r8
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
ja 0x140006639
cmp rbx, 8
jae 0x140005ca4
mov qword [rbp + 0x10], rbx
mov qword [rbp + 0x18], 7
add rbx, rbx
mov r8, rbx
mov rdx, r15
lea rcx, [rbp]
call sub.VCRUNTIME140.dll_memcpy
mov word [rbp + rbx], r13w
jmp 0x140005cf0
mov rsi, rbx
or rsi, 7
cmp rsi, rax
jbe 0x140005cb5
mov rsi, rax
jmp 0x140005cc2
cmp rsi, 0xa
mov eax, 0xa
cmovb rsi, rax
lea rdx, [rsi + 1]
call fcn.140002e40
mov rdi, rax
mov qword [rbp], rax
mov qword [rbp + 0x10], rbx
mov qword [rbp + 0x18], rsi
add rbx, rbx
mov r8, rbx
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov word [rbx + rdi], r13w
bts r14d, 7
lea rax, [rbp]
or r14d, 1
lea rcx, [rbp + 0x10]
lea rdx, [rbp + 0x18]
jmp 0x140005db1
movups xmmword [rbp + 0x80], xmm0
lea rsi, [rbp + 0x60]
test r9b, r9b
cmovne rsi, r8
cmp rdi, r15
ja 0x140006651
cmp rdi, 8
jae 0x140005d49
mov qword [rbp + 0x90], rdi
mov qword [rbp + 0x98], 7
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x80], xmm0
jmp 0x140005d98
mov rbx, rdi
or rbx, 7
cmp rbx, r15
jbe 0x140005d5a
mov rbx, r15
jmp 0x140005d67
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
lea rdx, [rbx + 1]
call fcn.140002e40
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x90], rdi
mov qword [rbp + 0x98], rbx
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 0x80]
or r14d, 2
lea rcx, [rbp + 0x90]
lea rdx, [rbp + 0x98]
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0x170], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0x180], xmm6
mov qword [rcx], r13
mov qword [rdx], 7
mov word [rax], r13w
test r14b, 2
je 0x140005e25
and r14d, 0xfffffffd
mov rdx, qword [rbp + 0x98]
cmp rdx, 8
jb 0x140005e25
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005e1f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006533
call fcn.140019630
nop
test r14b, 1
je 0x140005e6f
and r14d, 0xfffffffe
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x140005e6f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005e6a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006548
call fcn.140019630
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], r13
mov rax, qword [r12 + 0x10]
cmp rax, 0x23
jb 0x14000664b
add rax, 0xffffffffffffffdd
mov rsi, 0xffffffffffffffff
cmp rax, rsi
cmovb rsi, rax
mov rax, r12
cmp qword [r12 + 0x18], 8
jb 0x140005eae
mov rax, qword [r12]
lea r15, [rax + 0x46]
movabs rax, 0x7ffffffffffffffe
cmp rsi, rax
ja 0x140006645
cmp rsi, 8
jae 0x140005ef2
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], 7
lea rbx, [rsi + rsi]
mov r8, rbx
mov rdx, r15
lea rcx, [rbp]
call sub.VCRUNTIME140.dll_memcpy
mov word [rbp + rbx], r13w
jmp 0x140005f3f
mov rbx, rsi
or rbx, 7
cmp rbx, rax
jbe 0x140005f03
mov rbx, rax
jmp 0x140005f10
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
lea rdx, [rbx + 1]
call fcn.140002e40
mov rdi, rax
mov qword [rbp], rax
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], rbx
lea rbx, [rsi + rsi]
mov r8, rbx
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov word [rdi + rbx], r13w
or r14d, 0x10
mov rdx, r12
lea rcx, [rbp + 0x80]
call fcn.1400050a0
nop
lea r9, [rbp]
mov r8, rax
lea rcx, [rbp + 0x20]
call fcn.140007e40
or r14d, 8
mov dword [rsp + 0x50], r14d
mov rdx, qword [rbp + 0x98]
cmp rdx, 8
jb 0x140005fb2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005fad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000653a
call fcn.140019630
mov qword [rbp + 0x90], r13
mov qword [rbp + 0x98], 7
mov word [rbp + 0x80], r13w
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x14000600c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006007
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006541
call fcn.140019630
lea r9, [rbp + 0x170]
movdqa xmm0, xmm6
psrldq xmm0, 8
movq r15, xmm0
cmp r15, 8
setae r13b
mov byte [rsp + 0x40], r13b
movq rdi, xmm7
cmovae r9, rdi
lea rcx, [rbp + 0x20]
cmp qword [rbp + 0x38], 8
cmovae rcx, qword [rbp + 0x20]
movq qword [rsp + 0x20], xmm6
mov rdx, qword [rbp + 0x30]
call fcn.140002c70
cmp rax, 0xffffffffffffffff
je 0x140006235
lea rdx, [rbp + 0x20]
call fcn.140018c80
test al, al
jne 0x140006235
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 8
setae sil
cmovae rdx, qword [rbp + 0x20]
movabs r9, 0xcbf29ce484222325
mov rbx, qword [rbp + 0x30]
lea r8, [rbx + rbx]
xor ecx, ecx
test r8, r8
je 0x1400060c9
movabs r13, 0x100000001b3
nop word [rax + rax]
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r13
inc rcx
cmp rcx, r8
jb 0x1400060b0
movzx r13d, byte [rsp + 0x40]
lea r8, [rbp + 0x20]
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x60]
call fcn.140003950
mov rcx, qword [rax + 8]
mov rax, qword [rbp - 0x58]
test rcx, rcx
cmovne rax, rcx
cmp rax, qword [rbp - 0x58]
jne 0x1400061b8
cmp rbx, 4
jb 0x1400061b8
lea rcx, [rbx - 4]
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
xor eax, eax
mov qword [rbp + 0x130], rax
mov qword [rbp + 0x138], rax
cmp rbx, rcx
jb 0x14000663f
sub rbx, rcx
mov r8, 0xffffffffffffffff
cmp rbx, r8
cmovb r8, rbx
lea rax, [rbp + 0x20]
test sil, sil
cmovne rax, qword [rbp + 0x20]
lea rdx, [rax + rcx*2]
lea rcx, [rbp + 0x120]
call fcn.140002d50
or r14d, 0x204
mov dword [rsp + 0x50], r14d
lea r8, [rbp + 0x120]
mov r10, qword [rbp + 0x120]
mov r9, qword [rbp + 0x138]
cmp r9, 8
cmovae r8, r10
mov rdx, qword [rbp + 0x130]
cmp rdx, 4
jne 0x1400061c6
lea rax, str..EXE
mov rcx, rax
test rdx, rdx
je 0x1400061b4
sub r8, rax
nop dword [rax]
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x1400061c6
add rcx, 2
sub rdx, 1
jne 0x1400061a0
mov bl, 1
jmp 0x1400061c8
mov r9, qword [rbp + 0x138]
mov r10, qword [rbp + 0x120]
xor bl, bl
test r14b, 4
je 0x1400061e9
and r14d, 0xfffffffb
mov dword [rsp + 0x50], r14d
cmp r9, 8
jb 0x1400061e9
lea r8, [r9 + 1]
mov rdx, r10
call fcn.1400026a0
test bl, bl
je 0x140006235
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140002700
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 8
cmovae rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x30]
mov rcx, rax
call fcn.140002eb0
lea rdx, [0x1400028d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea r8, [rbp + 0x20]
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x60]
call fcn.140007ad0
nop
mov rax, qword [rbp + 0x38]
cmp rax, 8
jb 0x140006275
lea rdx, [rax*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006270
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006548
call fcn.140019630
xor eax, eax
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], ax
test r13b, r13b
je 0x1400062c2
lea rdx, [r15*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400062b9
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000654f
mov rcx, rdi
call fcn.140019630
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 8
jb 0x140006302
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400062fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006556
call fcn.140019630
add r12, 0x20
cmp r12, qword [rsp + 0x70]
mov r13d, 0
jne 0x140005b20
mov rax, qword [rbp - 0x78]
mov r12, qword [rbp - 0x80]
test r12, r12
je 0x140006369
mov rdx, rax
mov rcx, r12
call fcn.140003d40
mov rdx, qword [rbp - 0x70]
mov rcx, qword [rbp - 0x80]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006363
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000655d
call fcn.140019630
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400063b4
mov rdx, qword [rsp + 0x68]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400063a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006564
call fcn.140019630
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r13
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0x10
jb 0x1400063f5
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400063f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000656b
call fcn.140019630
mov qword [rbp + 0xd0], r13
mov qword [rbp + 0xd8], 0xf
mov byte [rbp + 0xc0], 0
mov rdx, qword [rbp + 0xf8]
cmp rdx, 8
jb 0x140006454
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000644f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006572
call fcn.140019630
mov rsi, qword [rbp + 0x58]
mov r15, qword [rbp + 0x40]
jmp 0x140006461
xor r13d, r13d
mov rdx, qword [rbp + 0x158]
cmp rdx, 8
jb 0x1400064a8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400064a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006579
call fcn.140019630
nop
cmp rsi, 8
jb 0x140005a78
lea rdx, [rsi*2 + 2]
mov rax, r15
cmp rdx, 0x1000
jb 0x1400064df
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006580
mov rcx, r15
jmp 0x140005a73
test bl, bl
je 0x140005a7f
lea rdx, [rsi*2 + 2]
mov rax, r15
cmp rdx, 0x1000
jb 0x140006518
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006580
mov rcx, r15
call fcn.140019630
jmp 0x140005a7f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140019630
mov qword [rbp - 0x48], r13
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x40], xmm0
mov rdx, qword [rbp - 0x58]
call fcn.140003360
mov edx, 0x30
mov rcx, qword [rbp - 0x58]
call fcn.140019630
nop
mov rax, qword [rbp + 0xb8]
cmp rax, 8
jb 0x1400065f9
lea rdx, [rax*2 + 2]
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400065f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400065f4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140019630
mov rcx, qword [rbp + 0x3f0]
xor rcx, rsp
call fcn.140019610
lea r11, [rsp + 0x520]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140002300
nop
call fcn.140002300
nop
call fcn.1400026e0
nop
call fcn.140002300
int3
call fcn.1400026e0
nop
call fcn.140002300
nop
call fcn.140002300
nop
call fcn.140002300
int3