Function at 0x1400273a0
Capabilities:
Encode data using xor
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x6b0]
sub rsp, 0x7b0
mov rax, qword [0x14003c040]
xor rax, rsp
mov qword [rbp + 0x6a0], rax
xor r13d, r13d
lea rcx, [rbp + 0x498]
call fcn.140024000
mov rdx, rax
lea rcx, [0x14003c148]
call fcn.14002c160
mov rdx, qword [rbp + 0x4b0]
cmp rdx, 7
jbe 0x14002743c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x498]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140027437
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400286d0
call fcn.14002ffa8
movdqa xmm0, xmmword [0x140035a70]
movdqu xmmword [rbp + 0x4a8], xmm0
mov word [rbp + 0x498], r13w
mov r8, qword [0x14003e7a0]
lea rbx, [0x14003e790]
mov rdx, rbx
cmp qword [0x14003e7a8], 7
cmova rdx, qword [0x14003e790]
xorps xmm0, xmm0
movups xmmword [rbp + 0x370], xmm0
mov qword [rbp + 0x380], r13
mov qword [rbp + 0x388], r13
lea rcx, [rbp + 0x370]
call fcn.14002e280
nop
lea rcx, [rbp + 0x370]
call fcn.140024fd0
movzx edi, al
mov rdx, qword [rbp + 0x388]
cmp rdx, 7
jbe 0x1400274ef
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x370]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400274ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400286d0
call fcn.14002ffa8
movdqa xmm0, xmmword [0x140035a70]
movdqu xmmword [rbp + 0x380], xmm0
mov word [rbp + 0x370], r13w
test dil, dil
jne 0x1400275bf
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x590]
call sub.VCRUNTIME140.dll_memset
cmp qword [0x14003e7a8], 7
cmova rbx, qword [0x14003e790]
mov rdx, rbx
lea rcx, [rbp + 0x590]
call fcn.14002cc10
mov rax, qword [rbp + 0x590]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x590], rax
mov rax, qword [rbp + 0x590]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x58c], edx
cmp qword [rbp + 0x618], 0
je 0x1400275b3
lea rcx, [rbp + 0x598]
call fcn.14002cb50
test rax, rax
jne 0x1400275b3
mov rax, qword [rbp + 0x590]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x590]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
lea rcx, [rbp + 0x590]
call fcn.1400250d0
lea rcx, [rbp + 0x4b8]
call fcn.14001f950
nop
mov rdx, rax
lea rcx, [rbp + 0x478]
call fcn.140023940
mov rdx, rax
lea rdi, [0x14003c168]
mov rcx, rdi
call fcn.14002c160
mov rdx, qword [rbp + 0x490]
cmp rdx, 7
jbe 0x140027636
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x478]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140027631
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140027631
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002ffa8
movdqa xmm0, xmmword [0x140035a70]
movdqu xmmword [rbp + 0x488], xmm0
mov word [rbp + 0x478], r13w
mov rdx, qword [rbp + 0x4d0]
cmp rdx, 7
jbe 0x140027694
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x4b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002768f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400286d0
call fcn.14002ffa8
movdqa xmm0, xmmword [0x140035a70]
movdqu xmmword [rbp + 0x4c8], xmm0
mov word [rbp + 0x4b8], r13w
mov dword [rsp + 0x38], 0x36
mov byte [rsp + 0x3c], 0
lea rcx, [rsp + 0x38]
mov rbx, 0xffffffffffffffff
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400276d0
mov r9, rdi
mov r10, qword [0x14003c168]
mov r11, qword [0x14003c180]
cmp r11, 7
cmova r9, r10
mov esi, 0xbbb
mov rcx, qword [0x14003c178]
cmp rcx, rax
jne 0x140027803
mov r8, rcx
lea rdx, [rsp + 0x38]
test rcx, rcx
je 0x140027738
lea rax, [rsp + 0x38]
sub r9, rax
nop dword [rax]
movzx eax, word [rdx + r9]
cmp ax, word [rdx]
jne 0x140027803
add rdx, 2
sub r8, 1
jne 0x140027720
mov dword [rbp - 0x80], 0xf42af406
mov dword [rbp - 0x7c], 0xf42df42e
mov dword [rbp - 0x78], 0xf43ef427
mov word [rbp - 0x74], r13w
mov byte [rbp - 0x72], 1
mov rcx, r13
nop dword [rax]
movzx eax, cx
sub ax, si
xor word [rbp + rcx*2 - 0x80], ax
inc rcx
cmp rcx, 6
jb 0x140027760
mov byte [rbp - 0x72], 0
mov dword [rbp - 0x28], 0xf428f40c
mov dword [rbp - 0x24], 0xf429f431
mov dword [rbp - 0x20], 0xf423f425
mov dword [rbp - 0x1c], 0xf46cf42f
mov dword [rbp - 0x18], 0xf42ff43d
mov dword [rbp - 0x14], 0xf423f43c
mov dword [rbp - 0x10], 0xf43df426
mov dword [rbp - 0xc], 0xf430f421
mov dword [rbp - 8], 0xf47b
mov byte [rbp - 4], 1
mov rcx, r13
nop
movzx eax, cx
sub ax, si
xor word [rbp + rcx*2 - 0x28], ax
inc rcx
cmp rcx, 0x11
jb 0x1400277c0
mov byte [rbp - 4], 0
mov r9d, 0x30
lea r8, [rbp - 0x80]
lea rdx, [rbp - 0x28]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov r11, qword [0x14003c180]
mov rcx, qword [0x14003c178]
mov r10, qword [0x14003c168]
mov dword [rsp + 0x40], 0x32
mov byte [rsp + 0x44], 0
lea rdx, [rsp + 0x40]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140027820
mov r9, rdi
cmp r11, 7
cmova r9, r10
cmp rcx, rax
jne 0x140027c4a
mov r8, rcx
lea rdx, [rsp + 0x40]
test rcx, rcx
je 0x140027878
lea rax, [rsp + 0x40]
sub r9, rax
nop dword [rax]
nop word [rax + rax]
movzx eax, word [r9 + rdx]
cmp ax, word [rdx]
jne 0x140027c4a
add rdx, 2
sub r8, 1
jne 0x140027860
lea rcx, [rbp + 0x4f8]
call fcn.14001fea0
nop
mov rdx, rax
lea rcx, [rbp + 0x4d8]
call fcn.140023940
mov rdx, rax
lea rsi, [0x14003c0c8]
mov rcx, rsi
call fcn.14002c160
mov rdx, qword [rbp + 0x4f0]
cmp rdx, 7
jbe 0x1400278ef
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x4d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400278ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400278ea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002ffa8
movdqa xmm0, xmmword [0x140035a70]
movdqu xmmword [rbp + 0x4e8], xmm0
mov word [rbp + 0x4d8], r13w
mov rdx, qword [rbp + 0x510]
cmp rdx, 7
jbe 0x14002794d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x4f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140027948
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400286d0
call fcn.14002ffa8
movdqa xmm0, xmmword [0x140035a70]
movdqu xmmword [rbp + 0x508], xmm0
mov word [rbp + 0x4f8], r13w
mov dword [rsp + 0x48], 0x32
mov byte [rsp + 0x4c], 0
lea rcx, [rsp + 0x48]
mov rax, rbx
nop word [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140027980
cmp qword [0x14003c0e0], 7
cmova rsi, qword [0x14003c0c8]
mov rdx, qword [0x14003c0d8]
cmp rdx, rax
jne 0x140027b24
lea rcx, [rsp + 0x48]
test rdx, rdx
je 0x1400279d7
lea rax, [rsp + 0x48]
sub rsi, rax
nop dword [rax]
movzx eax, word [rcx + rsi]
cmp ax, word [rcx]
jne 0x140027b24
add rcx, 2
sub rdx, 1
jne 0x1400279c0
lea rcx, [rbp + 0x530]
call fcn.1400210d0
nop
mov rdx, rax
lea rcx, [rbp + 0x398]
call fcn.140023940
lea rcx, [rbp + 0x398]
call fcn.140024770
nop
lea rcx, [rbp + 0x530]
call fcn.140024770
mov dword [rbp], 0xf42af406
mov dword [rbp + 4], 0xf42df42e
mov dword [rbp + 8], 0xf43ef427
mov word [rbp + 0xc], r13w
mov byte [rbp + 0xe], 1
lea rcx, [rbp]
call fcn.14001fe70
mov r10, rax
mov dword [rbp + 0x1c0], 0xf429f41c
mov dword [rbp + 0x1c4], 0xf468f432
mov dword [rbp + 0x1c8], 0xf425f42d
mov dword [rbp + 0x1cc], 0xf46bf425
mov dword [rbp + 0x1d0], 0xf46ef439
mov dword [rbp + 0x1d4], 0xf431f427
mov dword [rbp + 0x1d8], 0xf437f427
mov dword [rbp + 0x1dc], 0xf435f473
mov dword [rbp + 0x1e0], 0xf42ff43b
mov dword [rbp + 0x1e4], 0xf40ef477
mov dword [rbp + 0x1e8], 0xf40af410
mov dword [rbp + 0x1ec], 0xf42ff47b
mov dword [rbp + 0x1f0], 0xf43cf428
mov dword [rbp + 0x1f4], 0xf403f42c
mov dword [rbp + 0x1f8], 0xf40bf413
mov dword [rbp + 0x1fc], 0xf410f413
mov dword [rbp + 0x200], 0xf409f40c
mov dword [rbp + 0x204], 0xf41bf409
mov dword [rbp + 0x208], 0xf447
mov byte [rbp + 0x20c], 1
lea rcx, [rbp + 0x1c0]
call fcn.140023250
mov r9d, 0x30
mov r8, r10
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.140026350
lea rcx, [rbp + 0x3d8]
call fcn.140020b50
nop
mov rdx, rax
lea rcx, [rbp + 0x3b8]
call fcn.140023940
mov rdx, qword [rbp + 0x3d0]
cmp rdx, 7
jbe 0x140027b8e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140027b89
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140027b89
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002ffa8
movdqa xmm0, xmmword [0x140035a70]
movdqu xmmword [rbp + 0x3c8], xmm0
mov word [rbp + 0x3b8], r13w
mov rdx, qword [rbp + 0x3f0]
cmp rdx, 7
jbe 0x140027bec
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140027be7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400286d0
call fcn.14002ffa8
movdqa xmm0, xmmword [0x140035a70]
movdqu xmmword [rbp + 0x3e8], xmm0
mov word [rbp + 0x3d8], r13w
lea rcx, [0x14003c108]
cmp qword [0x14003c120], 7
cmova rcx, qword [0x14003c108]
call qword [sym.imp.KERNEL32.dll_GlobalAddAtomW]
call fcn.140025190
mov dword [0x14003e760], 1
mov r11, qword [0x14003c180]
mov rcx, qword [0x14003c178]
mov r10, qword [0x14003c168]
mov esi, 0xbbb
mov dword [rsp + 0x50], 0x37
mov byte [rsp + 0x54], 0
lea rdx, [rsp + 0x50]
mov rax, rbx
nop
inc rax
cmp word [rdx + rax*2], 0
jne 0x140027c60
mov r9, rdi
cmp r11, 7
cmova r9, r10
cmp rcx, rax
jne 0x140027d80
mov r8, rcx
lea rdx, [rsp + 0x50]
test rcx, rcx
je 0x140027cb8
lea rax, [rsp + 0x50]
sub r9, rax
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rdx + r9]
cmp ax, word [rdx]
jne 0x140027d80
add rdx, 2
sub r8, 1
jne 0x140027ca0
mov dword [rbp - 0x70], 0xf42af406
mov dword [rbp - 0x6c], 0xf42df42e
mov dword [rbp - 0x68], 0xf43ef427
mov word [rbp - 0x64], r13w
mov byte [rbp - 0x62], 1
mov rcx, r13
nop dword [rax]
movzx eax, cx
sub ax, si
xor word [rbp + rcx*2 - 0x70], ax
inc rcx
cmp rcx, 6
jb 0x140027ce0
mov byte [rbp - 0x62], 0
mov dword [rbp - 0x50], 0xf428f40c
mov dword [rbp - 0x4c], 0xf429f431
mov dword [rbp - 0x48], 0xf423f425
mov dword [rbp - 0x44], 0xf46cf42f
mov dword [rbp - 0x40], 0xf43df438
mov dword [rbp - 0x3c], 0xf422f42a
mov dword [rbp - 0x38], 0xf433f43f
mov dword [rbp - 0x34], 0xf431f43e
mov dword [rbp - 0x30], 0xf47b
mov byte [rbp - 0x2c], 1
mov rcx, r13
nop
movzx eax, cx
sub ax, si
xor word [rbp + rcx*2 - 0x50], ax
inc rcx
cmp rcx, 0x11
jb 0x140027d40
mov byte [rbp - 0x2c], 0
xor r9d, r9d
lea r8, [rbp - 0x70]
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov r11, qword [0x14003c180]
mov rcx, qword [0x14003c178]
mov r10, qword [0x14003c168]
mov dword [rsp + 0x30], 0x38
mov byte [rsp + 0x34], 0
lea rdx, [rsp + 0x30]
mov rax, rbx
inc rax
cmp word [rdx + rax*2], 0
jne 0x140027d95
mov r9, rdi
cmp r11, 7
cmova r9, r10
cmp rcx, rax
jne 0x140027f3b
mov r8, rcx
lea rdx, [rsp + 0x30]
test rcx, rcx
je 0x140027de8
lea rax, [rsp + 0x30]
sub r9, rax
nop dword [rax + rax]
movzx eax, word [r9 + rdx]
cmp ax, word [rdx]
jne 0x140027f3b
add rdx, 2
sub r8, 1
jne 0x140027dd0
mov dword [rbp + 0xb0], 0xf433f404
mov dword [rbp + 0xb4], 0xf420f433
mov dword [rbp + 0xb8], 0xf424f42c
mov dword [rbp + 0xbc], 0xf425f43f
mov dword [rbp + 0xc0], 0xf42ff42e
mov dword [rbp + 0xc4], 0xf439f43b
mov dword [rbp + 0xc8], 0xf43cf43e
mov dword [rbp + 0xcc], 0xf411f473
mov dword [rbp + 0xd0], 0xf424f427
mov dword [rbp + 0xd4], 0xf42af438
mov word [rbp + 0xd8], r13w
mov byte [rbp + 0xda], 1
lea rcx, [rbp + 0xb0]
call fcn.140022490
mov r10, rax
mov dword [rbp + 0xe0], 0xf429f41c
mov dword [rbp + 0xe4], 0xf468f432
mov dword [rbp + 0xe8], 0xf438f428
mov dword [rbp + 0xec], 0xf46cf42e
mov dword [rbp + 0xf0], 0xf42ff42f
mov dword [rbp + 0xf4], 0xf43ef421
mov dword [rbp + 0xf8], 0xf436f434
mov dword [rbp + 0xfc], 0xf474f469
mov dword [rbp + 0x100], 0xf419f401
mov dword [rbp + 0x104], 0xf478f404
mov dword [rbp + 0x108], 0xf433f40f
mov dword [rbp + 0x10c], 0xf430f434
mov dword [rbp + 0x110], 0xf42af43c
mov dword [rbp + 0x114], 0xf40ff436
mov dword [rbp + 0x118], 0xf44cf40f
xor r9d, r9d
mov word [rbp + 0x11c], r9w
mov byte [rbp + 0x11e], 1
lea rcx, [rbp + 0xe0]
call fcn.140024220
mov r9d, 0x10
mov r8, r10
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rsp + 0x60], 0x33
mov byte [rsp + 0x64], 0
lea rdx, [rsp + 0x60]
mov rax, rbx
inc rax
cmp word [rdx + rax*2], 0
jne 0x140027f50
mov r9, rdi
cmp r11, 7
cmova r9, r10
cmp rcx, rax
jne 0x1400281a9
mov r8, rcx
lea rdx, [rsp + 0x60]
test rcx, rcx
je 0x140027fa8
lea rax, [rsp + 0x60]
sub r9, rax
nop dword [rax]
nop word [rax + rax]
movzx eax, word [r9 + rdx]
cmp ax, word [rdx]
jne 0x1400281a9
add rdx, 2
sub r8, 1
jne 0x140027f90
lea rcx, [rbp + 0x550]
call fcn.140021760
nop
mov rdx, rax
lea rcx, [rbp + 0x398]
call fcn.140023940
lea rcx, [rbp + 0x398]
call fcn.140024770
nop
lea rcx, [rbp + 0x550]
call fcn.140024770
mov dword [rbp + 0x10], 0xf42af406
mov dword [rbp + 0x14], 0xf42df42e
mov dword [rbp + 0x18], 0xf43ef427
mov word [rbp + 0x1c], r13w
mov byte [rbp + 0x1e], 1
lea rcx, [rbp + 0x10]
call fcn.14001fe70
mov r10, rax
mov dword [rbp + 0x210], 0xf428f40c
mov dword [rbp + 0x214], 0xf429f431
mov dword [rbp + 0x218], 0xf423f425
mov dword [rbp + 0x21c], 0xf46cf42f
mov dword [rbp + 0x220], 0xf439f425
mov dword [rbp + 0x224], 0xf434f426
mov dword [rbp + 0x228], 0xf472f47d
mov dword [rbp + 0x22c], 0xf432f43a
mov dword [rbp + 0x230], 0xf42ff475
mov dword [rbp + 0x234], 0xf42df438
mov dword [rbp + 0x238], 0xf42ef479
mov dword [rbp + 0x23c], 0xf435f433
mov dword [rbp + 0x240], 0xf435f433
mov dword [rbp + 0x244], 0xf414f47f
mov dword [rbp + 0x248], 0xf40bf409
mov dword [rbp + 0x24c], 0xf444f410
mov dword [rbp + 0x250], 0xf415f40c
mov dword [rbp + 0x254], 0xf409f447
mov dword [rbp + 0x258], 0xf403f449
mov dword [rbp + 0x25c], 0xf41ff418
mov dword [rbp + 0x260], 0xf40bf418
mov dword [rbp + 0x264], 0xf400f44f
mov dword [rbp + 0x268], 0xf417f41d
mov dword [rbp + 0x26c], 0xf407f412
mov dword [rbp + 0x270], 0xf456f410
mov dword [rbp + 0x274], 0xf417f414
mov dword [rbp + 0x278], 0xf40ef417
mov dword [rbp + 0x27c], 0xf41ff41a
mov dword [rbp + 0x280], 0xf45ef409
mov dword [rbp + 0x284], 0xf4f3f40a
mov dword [rbp + 0x288], 0xf4edf4a1
mov dword [rbp + 0x28c], 0xf4a4f4ed
mov dword [rbp + 0x290], 0xf4e3f4f1
mov dword [rbp + 0x294], 0xf4edf4eb
mov dword [rbp + 0x298], 0xf4f8f4ee
mov dword [rbp + 0x29c], 0xf4e1f4ea
mov dword [rbp + 0x2a0], 0xf4a3
mov byte [rbp + 0x2a4], 1
lea rcx, [rbp + 0x210]
call fcn.140028b40
mov r9d, 0x10
mov r8, r10
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rsp + 0x68], 0x35
mov byte [rsp + 0x6c], 0
lea rdx, [rsp + 0x68]
mov rax, rbx
nop
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400281c0
mov r9, rdi
cmp r11, 7
cmova r9, r10
cmp rcx, rax
jne 0x140028362
mov r8, rcx
lea rdx, [rsp + 0x68]
test rcx, rcx
je 0x140028218
lea rax, [rsp + 0x68]
sub r9, rax
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rdx + r9]
cmp ax, word [rdx]
jne 0x140028362
add rdx, 2
sub r8, 1
jne 0x140028200
lea rcx, [rbp + 0x570]
call fcn.1400210d0
nop
mov rdx, rax
lea rcx, [rbp + 0x398]
call fcn.140023940
lea rcx, [rbp + 0x398]
call fcn.140024770
nop
lea rcx, [rbp + 0x570]
call fcn.140024770
mov dword [rbp + 0x20], 0xf42af406
mov dword [rbp + 0x24], 0xf42df42e
mov dword [rbp + 0x28], 0xf43ef427
mov word [rbp + 0x2c], r13w
mov byte [rbp + 0x2e], 1
lea rcx, [rbp + 0x20]
call fcn.14001fe70
mov r10, rax
mov dword [rbp + 0x170], 0xf429f41c
mov dword [rbp + 0x174], 0xf468f432
mov dword [rbp + 0x178], 0xf425f42d
mov dword [rbp + 0x17c], 0xf46bf425
mov dword [rbp + 0x180], 0xf46ef439
mov dword [rbp + 0x184], 0xf431f427
mov dword [rbp + 0x188], 0xf437f427
mov dword [rbp + 0x18c], 0xf435f473
mov dword [rbp + 0x190], 0xf42ff43b
mov dword [rbp + 0x194], 0xf40ef477
mov dword [rbp + 0x198], 0xf40af410
mov dword [rbp + 0x19c], 0xf42ff47b
mov dword [rbp + 0x1a0], 0xf43cf428
mov dword [rbp + 0x1a4], 0xf403f42c
mov dword [rbp + 0x1a8], 0xf40bf413
mov dword [rbp + 0x1ac], 0xf410f413
mov dword [rbp + 0x1b0], 0xf409f40c
mov dword [rbp + 0x1b4], 0xf41bf409
mov dword [rbp + 0x1b8], 0xf447
mov byte [rbp + 0x1bc], 1
lea rcx, [rbp + 0x170]
call fcn.140023250
xor r9d, r9d
mov r8, r10
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rsp + 0x70], 0x34
mov byte [rsp + 0x74], 0
lea rdx, [rsp + 0x70]
mov rax, rbx
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140028380
cmp r11, 7
cmova rdi, r10
cmp rcx, rax
jne 0x140028b04
lea rdx, [rsp + 0x70]
test rcx, rcx
je 0x1400283c7
lea rax, [rsp + 0x70]
sub rdi, rax
nop dword [rax]
movzx eax, word [rdx + rdi]
cmp ax, word [rdx]
jne 0x140028b04
add rdx, 2
sub rcx, 1
jne 0x1400283b0
lea rcx, [rbp + 0x418]
call fcn.140021e00
nop
mov rdx, rax
lea rcx, [rbp + 0x3f8]
call fcn.140023940
mov rdx, qword [rbp + 0x410]
cmp rdx, 7
jbe 0x14002842c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140028427
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140028427
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002ffa8
movdqa xmm0, xmmword [0x140035a70]
movdqu xmmword [rbp + 0x408], xmm0
mov word [rbp + 0x3f8], r13w
mov rdx, qword [rbp + 0x430]
cmp rdx, 7
jbe 0x14002848a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x418]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140028485
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400286d0
call fcn.14002ffa8
movdqa xmm0, xmmword [0x140035a70]
movdqu xmmword [rbp + 0x428], xmm0
mov word [rbp + 0x418], r13w
mov dword [rbp - 0x60], 0xf42af406
mov dword [rbp - 0x5c], 0xf42df42e
mov dword [rbp - 0x58], 0xf43ef427
mov word [rbp - 0x54], r13w
mov byte [rbp - 0x52], 1
mov rcx, r13
nop dword [rax]
nop word [rax + rax]
movzx eax, cx
sub ax, si
xor word [rbp + rcx*2 - 0x60], ax
inc rcx
cmp rcx, 6
jb 0x1400284d0
mov byte [rbp - 0x52], 0
mov dword [rbp + 0x50], 0xf423f412
mov dword [rbp + 0x54], 0xf42bf467
mov dword [rbp + 0x58], 0xf43ff426
mov dword [rbp + 0x5c], 0xf428f427
mov dword [rbp + 0x60], 0xf469f423
mov dword [rbp + 0x64], 0xf470f43b
mov dword [rbp + 0x68], 0xf43bf437
mov dword [rbp + 0x6c], 0xf430f43d
mov dword [rbp + 0x70], 0xf42ff475
mov dword [rbp + 0x74], 0xf42df438
mov dword [rbp + 0x78], 0xf47af42b
mov dword [rbp + 0x7c], 0xf42bf433
mov dword [rbp + 0x80], 0xf43af434
mov dword [rbp + 0x84], 0xf440f473
mov dword [rbp + 0x88], 0xf407f412
mov dword [rbp + 0x8c], 0xf410f417
mov dword [rbp + 0x90], 0xf408f40c
mov dword [rbp + 0x94], 0xf448f400
mov dword [rbp + 0x98], 0xf44af408
mov dword [rbp + 0x9c], 0xf409f405
mov dword [rbp + 0xa0], 0xf44ef41a
mov dword [rbp + 0xa4], 0xf41ef400
mov dword [rbp + 0xa8], 0xf45cf414
xor r9d, r9d
mov word [rbp + 0xac], r9w
mov byte [rbp + 0xae], 1
mov ecx, r9d
mov edx, 0xbbb
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
sub ax, dx
xor word [rbp + rcx*2 + 0x50], ax
inc rcx
cmp rcx, 0x2e
jb 0x1400285d0
mov byte [rbp + 0xae], r9b
mov r9d, 0x30
lea r8, [rbp - 0x60]
lea rdx, [rbp + 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rcx, [rbp + 0x458]
call fcn.140020030
nop
mov rdx, rax
lea rcx, [rbp + 0x438]
call fcn.140023940
mov rdx, rax
lea rdi, [0x14003c0e8]
mov rcx, rdi
call fcn.14002c160
mov rdx, qword [rbp + 0x450]
cmp rdx, 7
jbe 0x140028678
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x438]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140028673
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140028673
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002ffa8
movdqa xmm0, xmmword [0x140035a70]
movdqu xmmword [rbp + 0x448], xmm0
xor r8d, r8d
mov word [rbp + 0x438], r8w
mov rdx, qword [rbp + 0x470]
cmp rdx, 7
jbe 0x1400286df
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x458]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400286d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400286d7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002ffa8
xor r8d, r8d
movdqa xmm0, xmmword [0x140035a70]
movdqu xmmword [rbp + 0x468], xmm0
mov word [rbp + 0x458], r8w
mov dword [rsp + 0x78], 0x31
mov byte [rsp + 0x7c], 0
lea rcx, [rsp + 0x78]
mov rax, rbx
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140028710
mov r9, rdi
mov r10, qword [0x14003c0e8]
mov r11, qword [0x14003c100]
cmp r11, 7
cmova r9, r10
mov rdx, qword [0x14003c0f8]
cmp rdx, rax
jne 0x14002888e
mov r8, rdx
lea rcx, [rsp + 0x78]
test rdx, rdx
je 0x140028778
lea rax, [rsp + 0x78]
sub r9, rax
nop dword [rax + rax]
movzx eax, word [rcx + r9]
cmp ax, word [rcx]
jne 0x14002888b
add rcx, 2
sub r8, 1
jne 0x140028760
mov dword [rbp + 0x30], 0xf42af406
mov dword [rbp + 0x34], 0xf42df42e
mov dword [rbp + 0x38], 0xf43ef427
xor r9d, r9d
mov word [rbp + 0x3c], r9w
mov byte [rbp + 0x3e], 1
lea rcx, [rbp + 0x30]
call fcn.14001fe70
mov r10, rax
mov dword [rbp + 0x120], 0xf431f40d
mov dword [rbp + 0x124], 0xf42cf42e
mov dword [rbp + 0x128], 0xf439f469
mov dword [rbp + 0x12c], 0xf438f42e
mov dword [rbp + 0x130], 0xf46ef461
mov dword [rbp + 0x134], 0xf43cf43f
mov dword [rbp + 0x138], 0xf433f434
mov dword [rbp + 0x13c], 0xf431f420
mov dword [rbp + 0x140], 0xf424f475
mov dword [rbp + 0x144], 0xf42bf432
mov dword [rbp + 0x148], 0xf43bf42d
mov dword [rbp + 0x14c], 0xf428f429
mov dword [rbp + 0x150], 0xf42af47d
mov dword [rbp + 0x154], 0xf405f437
mov dword [rbp + 0x158], 0xf40ef441
mov dword [rbp + 0x15c], 0xf405f40c
mov dword [rbp + 0x160], 0xf403f401
mov dword [rbp + 0x164], 0xf446f415
mov word [rbp + 0x168], r9w
mov byte [rbp + 0x16a], 1
lea rcx, [rbp + 0x120]
call fcn.140028b70
mov r8, r10
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor r8d, r8d
mov dword [rsp + 0x58], 0x30
mov byte [rsp + 0x5c], 0
lea rax, [rsp + 0x58]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x1400288a0
cmp r11, 7
cmova rdi, r10
cmp rdx, rbx
jne 0x140028b04
lea rcx, [rsp + 0x58]
test rdx, rdx
je 0x1400288e7
lea rax, [rsp + 0x58]
sub rdi, rax
nop dword [rax]
movzx eax, word [rcx + rdi]
cmp ax, word [rcx]
jne 0x140028b04
add rcx, 2
sub rdx, 1
jne 0x1400288d0
mov dword [rbp + 0x40], 0xf42af406
mov dword [rbp + 0x44], 0xf42df42e
mov dword [rbp + 0x48], 0xf43ef427
mov word [rbp + 0x4c], r8w
mov byte [rbp + 0x4e], 1
lea rcx, [rbp + 0x40]
call fcn.14001fe70
mov r10, rax
mov dword [rbp + 0x2b0], 0xf427f403
mov dword [rbp + 0x2b4], 0xf424f42e
mov dword [rbp + 0x2b8], 0xf42ef42c
mov dword [rbp + 0x2bc], 0xf438f46b
mov dword [rbp + 0x2c0], 0xf46ef422
mov dword [rbp + 0x2c4], 0xf435f43c
mov dword [rbp + 0x2c8], 0xf472f425
mov dword [rbp + 0x2cc], 0xf423f41b
mov dword [rbp + 0x2d0], 0xf432f43c
mov dword [rbp + 0x2d4], 0xf478f47b
mov dword [rbp + 0x2d8], 0xf432f42d
mov dword [rbp + 0x2dc], 0xf42ff432
mov dword [rbp + 0x2e0], 0xf433f47d
mov dword [rbp + 0x2e4], 0xf407f436
mov dword [rbp + 0x2e8], 0xf416f409
mov dword [rbp + 0x2ec], 0xf406f443
mov dword [rbp + 0x2f0], 0xf446f400
mov dword [rbp + 0x2f4], 0xf448f406
mov dword [rbp + 0x2f8], 0xf419f400
mov dword [rbp + 0x2fc], 0xf419f418
mov dword [rbp + 0x300], 0xf44ef408
mov dword [rbp + 0x304], 0xf419f418
mov dword [rbp + 0x308], 0xf41af405
mov dword [rbp + 0x30c], 0xf41bf453
mov dword [rbp + 0x310], 0xf404f400
mov dword [rbp + 0x314], 0xf40bf457
mov dword [rbp + 0x318], 0xf408f41c
mov dword [rbp + 0x31c], 0xf419f40d
mov dword [rbp + 0x320], 0xf45ef40f
mov dword [rbp + 0x324], 0xf4ecf40f
mov dword [rbp + 0x328], 0xf4e3f4e4
mov dword [rbp + 0x32c], 0xf4e1f4f0
mov dword [rbp + 0x330], 0xf4e5f4a5
mov dword [rbp + 0x334], 0xf4e6f4e8
mov dword [rbp + 0x338], 0xf4ebf4fd
mov dword [rbp + 0x33c], 0xf4f8f4e8
mov dword [rbp + 0x340], 0xf4fbf4ad
mov dword [rbp + 0x344], 0xf4b0f4fc
mov dword [rbp + 0x348], 0xf4fcf4fe
mov dword [rbp + 0x34c], 0xf4e0f4b3
mov dword [rbp + 0x350], 0xf4faf4f0
mov dword [rbp + 0x354], 0xf4fff4f2
mov dword [rbp + 0x358], 0xf4fbf4eb
mov dword [rbp + 0x35c], 0xf4b2f4f6
xor r9d, r9d
mov word [rbp + 0x360], r9w
mov byte [rbp + 0x362], 1
lea rcx, [rbp + 0x2b0]
call fcn.140028ba0
mov r9d, 0x10
mov r8, r10
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [rbp + 0x6a0]
xor rcx, rsp
call fcn.14002fac0
lea r11, [rsp + 0x7b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret