Function at 0x140072f40
Capabilities:
Access peb ldr_data
Encode data using xor
Enumerate gui resources
Get graphical window text
Get process filename
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0xea0
lea rbp, [rsp + 0x90]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140092040]
xor rax, rsp
mov qword [rbp + 0xe00], rax
movabs rax, 0xeb920b35825a289a
mov r15, rcx
mov qword [rbp + 0xc0], rax
lea rcx, [rbp + 0xc0]
movabs rax, 0x704efe2f69640550
movabs rsi, 0x8fbc3906f03f5bef
mov qword [rbp + 0xc8], rax
movabs rdi, 0x704efe2f6964693c
vmovdqu xmm0, xmmword [rbp + 0xc0]
mov qword [rbp + 0x60], rsi
mov rbx, rdx
mov qword [rbp + 0x68], rdi
vpxor xmm1, xmm0, xmmword [rbp + 0x60]
vmovdqu xmmword [rbp + 0xc0], xmm1
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
test rax, rax
jne 0x1400731a2
mov qword [rbp + 0x60], rsi
movabs rdx, 0xf73fc8de517d97d7
mov qword [rbp + 0x68], rdi
movabs r8, 0x257b527fcf54624
mov qword [rbp + 0x120], rdx
movabs rax, 0x8fdd3964f0525baa
mov qword [rbp + 0x160], rax
movabs rcx, 0x389940ba1898b513
mov qword [rbp + 0x80], rcx
movabs rax, 0x704efe2f690f694e
mov qword [rbp + 0x168], rax
movabs rcx, 0x5b74bcc304a39560
vmovdqu xmm0, xmmword [rbp + 0x160]
vpxor xmm1, xmm0, xmmword [rbp + 0x60]
mov qword [rbp + 0x128], r8
movabs rax, 0x8fd0396ff05e5ba9
mov qword [rbp + 0xe0], rax
movabs r13, 0xd1e07a04db1af409
movabs rax, 0x703afe0f69006959
mov qword [rbp + 0x88], rcx
mov qword [rbp + 0xe8], rax
movabs r12, 0x119918cd11a889de
movabs rax, 0xd1897a62db3af466
mov qword [rbp + 0xa0], rdx
mov qword [rbp + 0xf0], rax
lea rdx, [rbp + 0xe0]
movabs rax, 0x11ec18ed11cc89b0
mov qword [rbp + 0xa8], r8
mov qword [rbp + 0xf8], rax
lea r8, [rbp + 0x160]
movabs rax, 0x38aa40c818fdb560
mov qword [rbp + 0x60], rsi
mov qword [rbp + 0x100], rax
movabs rcx, 0x651854d8c849cb7d
movabs rax, 0x5b18bca7048d9552
mov qword [rbp + 0x68], rdi
mov qword [rbp + 0x108], rax
movabs rax, 0x657754b5c869cb11
mov qword [rbp + 0x110], rax
movabs rax, 0xd18f818d3b4cb4c6
mov qword [rbp + 0x118], rax
movabs rax, 0xd1ea81e13b39b4a2
vmovdqu ymm2, ymmword [rbp + 0x100]
vmovdqu xmmword [rbp + 0x160], xmm1
mov qword [rbp + 0x70], r13
mov qword [rbp + 0x78], r12
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
vmovdqu ymmword [rbp + 0xe0], ymm1
vmovdqu xmm1, xmmword [rbp + 0x120]
mov qword [rbp + 0x98], rax
mov qword [rbp + 0x90], rcx
vpxor ymm0, ymm2, ymmword [rbp + 0x80]
vpxor xmm2, xmm1, xmmword [rbp + 0xa0]
vmovdqu xmmword [rbp + 0x120], xmm2
vmovdqu ymmword [rbp + 0x100], ymm0
jmp 0x14007466b
movabs rcx, 0xe6eb5c72915a29ac
mov qword [rbp + 0xe0], rsi
mov qword [rbp + 0x160], rcx
lea rdx, [rbp + 0x160]
movabs rcx, 0x110c90661e0b0d52
mov qword [rbp + 0xe8], rdi
mov qword [rbp + 0x168], rcx
movabs r12, 0x119918cd11a889de
movabs rcx, 0xd1e07a04db1a9067
mov qword [rbp + 0x178], r12
mov qword [rbp + 0x170], rcx
movabs r13, 0xd1e07a04db1af409
vmovdqu ymm0, ymmword [rbp + 0x160]
mov qword [rbp + 0xf0], r13
mov rcx, rax
mov qword [rbp + 0xf8], r12
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
vmovdqu ymmword [rbp + 0x160], ymm1
vzeroupper
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp qword [rbx + 0x18], 7
mov r14, rax
jbe 0x140073244
mov rbx, qword [rbx]
mov qword [rbp + 0xc0], rbx
mov rcx, 0xffffffffffffffff
inc rcx
cmp word [rbx + rcx*2], 0
jne 0x140073252
mov qword [rbp + 0xc8], rcx
lea rdx, [rbp + 0xc0]
vmovups xmm0, xmmword [rbp + 0xc0]
vmovdqa xmmword [rbp + 0xc0], xmm0
call fcn.140076ba0
mov edi, eax
test eax, eax
jne 0x14007342f
mov qword [rbp + 0x60], rsi
movabs rdx, 0xf73fc8de517d97d7
mov qword [rbp + 0x1a0], rdx
movabs rax, 0x8fdd3964f0525baa
mov qword [rbp + 0xe0], rax
movabs rbx, 0x704efe2f6964693c
mov qword [rbp + 0x68], rbx
movabs rax, 0x704efe2f690f694e
mov qword [rbp + 0xe8], rax
movabs rcx, 0x389940ba1898b513
vmovdqu xmm0, xmmword [rbp + 0xe0]
vpxor xmm1, xmm0, xmmword [rbp + 0x60]
mov qword [rbp + 0x80], rcx
movabs rax, 0x8fd0396ff05e5ba9
mov qword [rbp + 0x160], rax
movabs rcx, 0x5b74bcc304a39560
movabs rax, 0x703afe0f69006959
mov qword [rbp + 0x88], rcx
mov qword [rbp + 0x168], rax
movabs r8, 0x257b527fcf54624
movabs rax, 0xd1897a62db3af466
mov qword [rbp + 0x1a8], r8
mov qword [rbp + 0x170], rax
movabs rcx, 0x651854d8c849cb7d
movabs rax, 0x11ed18ed11cc89b0
mov qword [rbp + 0xa0], rdx
mov qword [rbp + 0x178], rax
lea rdx, [rbp + 0x160]
vmovdqu ymm0, ymmword [rbp + 0x160]
movabs rax, 0x38fc40dd18eab572
mov qword [rbp + 0x60], rsi
mov qword [rbp + 0x180], rax
movabs rax, 0x5b06bcb304839514
mov qword [rbp + 0x188], rax
movabs rax, 0x656b54bdc82acb12
mov qword [rbp + 0x190], rax
movabs rax, 0xd18e81883b19b4d1
mov qword [rbp + 0x198], rax
movabs rax, 0xd1ea81e13b39b4a2
vmovdqu ymm2, ymmword [rbp + 0x180]
vmovdqu xmmword [rbp + 0xe0], xmm1
mov qword [rbp + 0x68], rbx
mov qword [rbp + 0x70], r13
mov qword [rbp + 0x78], r12
vpxor ymm1, ymm0, ymmword [rbp + 0x60]
vmovdqu ymmword [rbp + 0x160], ymm1
vmovdqu xmm1, xmmword [rbp + 0x1a0]
mov qword [rbp + 0x98], rax
mov qword [rbp + 0x90], rcx
vpxor ymm0, ymm2, ymmword [rbp + 0x80]
mov qword [rbp + 0xa8], r8
vpxor xmm2, xmm1, xmmword [rbp + 0xa0]
vmovdqu xmmword [rbp + 0x1a0], xmm2
vmovdqu ymmword [rbp + 0x180], ymm0
jmp 0x140074664
xor ebx, ebx
mov dword [rbp + 0xc8], edi
lea rdx, [rbp + 0xc0]
mov qword [rbp + 0xc0], rbx
lea rcx, [0x140075850]
call qword [sym.imp.USER32.dll_EnumWindows]
test eax, eax
jne 0x14007447b
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xffffffff
jne 0x14007447b
mov rsi, qword [rbp + 0xc0]
test rsi, rsi
je 0x140074471
mov r8d, 0x400
lea rdx, [rbp + 0x600]
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov r8d, 0x400
lea rdx, [rbp + 0x600]
lea rcx, [rbp + 0x200]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstombs]
mov qword [rbp + 0xd0], rbx
lea rax, [rbp + 0x200]
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd8], rbx
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], bl
jne 0x1400734d1
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0xc0]
call fcn.1400093b0
cmp qword [rbp + 0xd0], rbx
jne 0x1400736e8
movabs rcx, 0x8fbc3906f03f5bef
mov qword [rbp + 0x170], r13
mov qword [rbp + 0x60], rcx
movabs rax, 0x8fdd3964f0525baa
mov qword [rbp + 0xe0], rax
movabs rbx, 0x704efe2f6964693c
mov qword [rbp + 0x68], rbx
movabs rax, 0x704efe2f690f694e
mov qword [rbp + 0xe8], rax
movabs r10, 0x16d7cb1cc7cad9d1
vmovdqu xmm0, xmmword [rbp + 0xe0]
vpxor xmm1, xmm0, xmmword [rbp + 0x60]
mov qword [rbp + 0x160], rcx
movabs rax, 0x8fd0396ff05e5ba9
mov qword [rbp + 0x60], rax
movabs rcx, 0x389940ba1898b513
mov qword [rbp + 0x180], rcx
movabs rax, 0x703afe0f69006959
mov qword [rbp + 0x68], rax
movabs rcx, 0x5b74bcc304a39560
movabs rax, 0xd1897a62db3af466
mov qword [rbp + 0x188], rcx
mov qword [rbp + 0x70], rax
movabs r9, 0x7078eb259f3000a6
movabs rax, 0x11ee18ed11cc89b0
mov qword [rbp + 0xb0], r10
mov qword [rbp + 0x78], rax
movabs rdx, 0xf73fc8de517d97d7
movabs rax, 0x38f640de18f6b57a
mov qword [rbp + 0xb8], r9
mov qword [rbp + 0x80], rax
movabs rcx, 0x651854d8c849cb7d
movabs rax, 0x5b15bcad04839517
mov qword [rbp + 0x1a0], rdx
mov qword [rbp + 0x88], rax
lea rdx, [rbp + 0x60]
movabs rax, 0x657754f8c82ccb10
mov qword [rbp + 0x168], rbx
mov qword [rbp + 0x90], rax
movabs r8, 0x257b527fcf54624
movabs rax, 0xd18281953b19b4c4
mov qword [rbp + 0x178], r12
vmovdqu ymm0, ymmword [rbp + 0x160]
mov qword [rbp + 0x98], rax
movabs rax, 0xf75ec8b6515d97b2
vmovdqu ymm2, ymmword [rbp + 0x80]
mov qword [rbp + 0xa0], rax
movabs rax, 0x232b54bfc91464a
mov qword [rbp + 0xa8], rax
movabs rax, 0xd1ea81e13b39b4a2
vmovdqu xmmword [rbp + 0xe0], xmm1
vpxor ymm1, ymm0, ymmword [rbp + 0x60]
vmovdqu ymmword [rbp + 0x60], ymm1
vmovdqu ymm1, ymmword [rbp + 0xa0]
mov qword [rbp + 0x198], rax
mov qword [rbp + 0x190], rcx
vpxor ymm0, ymm2, ymmword [rbp + 0x180]
mov qword [rbp + 0x1a8], r8
mov qword [rbp + 0x1b0], r10
mov qword [rbp + 0x1b8], r9
vpxor ymm2, ymm1, ymmword [rbp + 0x1a0]
vmovdqu ymmword [rbp + 0xa0], ymm2
vmovdqu ymmword [rbp + 0x80], ymm0
jmp 0x140074407
mov ecx, 4
call fcn.1400783d8
mov dword [rax], ebx
mov rcx, qword [r15]
mov qword [r15], rax
test rcx, rcx
je 0x140073709
mov edx, 4
call fcn.1400783d0
mov ecx, 0x3a0
call fcn.1400783d8
xor edx, edx
mov r8d, 0x3a0
mov rcx, rax
mov rbx, rax
call sub.VCRUNTIME140.dll_memset
mov rcx, rbx
call fcn.14000a150
mov rcx, qword [r15 + 8]
mov qword [r15 + 8], rax
test rcx, rcx
je 0x140073745
mov edx, 0x3a0
call fcn.1400783d0
mov rcx, qword [r15 + 8]
mov dword [r15 + 0xb8], edi
mov qword [r15 + 0xc0], rsi
call fcn.140076a60
mov rcx, qword [r15 + 0xc0]
lea rdx, [r15 + 0x78]
call qword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
jne 0x1400738cd
movabs rcx, 0x8fbc3906f03f5bef
mov qword [rbp + 0x170], r13
mov qword [rbp + 0x60], rcx
lea rdx, [rbp + 0x60]
mov qword [rbp + 0x160], rcx
movabs rax, 0x8fdd3964f0525baa
mov qword [rbp + 0xe0], rax
movabs rbx, 0x704efe2f6964693c
mov qword [rbp + 0x68], rbx
movabs rax, 0x704efe2f690f694e
mov qword [rbp + 0xe8], rax
movabs rcx, 0x389940ba1898b513
vmovdqu xmm0, xmmword [rbp + 0xe0]
vpxor xmm1, xmm0, xmmword [rbp + 0x60]
mov qword [rbp + 0x180], rcx
movabs rax, 0x8fd0396ff05e5ba9
mov qword [rbp + 0x60], rax
movabs rcx, 0x5b74bcc304a39560
movabs rax, 0x703afe0f69006959
mov qword [rbp + 0x188], rcx
mov qword [rbp + 0x68], rax
movabs rcx, 0x651854d8c849cb7d
movabs rax, 0xd1857a63db3af466
mov qword [rbp + 0x168], rbx
mov qword [rbp + 0x70], rax
movabs rax, 0x11f018ba118889aa
mov qword [rbp + 0x78], rax
movabs rax, 0x38ee40d518fcb57d
mov qword [rbp + 0x80], rax
movabs rax, 0x5b00bca604ce9540
mov qword [rbp + 0x88], rax
movabs rax, 0x656b54bbc820cb0f
mov qword [rbp + 0x90], rax
movabs rax, 0xd1ea81e13b39b4a2
mov qword [rbp + 0x98], rax
vmovdqu ymm2, ymmword [rbp + 0x80]
mov qword [rbp + 0x178], r12
vmovdqu ymm0, ymmword [rbp + 0x160]
vmovdqu xmmword [rbp + 0xe0], xmm1
vpxor ymm1, ymm0, ymmword [rbp + 0x60]
mov qword [rbp + 0x190], rcx
mov qword [rbp + 0x198], rax
vpxor ymm0, ymm2, ymmword [rbp + 0x180]
vmovdqu ymmword [rbp + 0x80], ymm0
vmovdqu ymmword [rbp + 0x60], ymm1
jmp 0x140074407
mov ecx, dword [r15 + 0x84]
xor ebx, ebx
sub ecx, dword [r15 + 0x7c]
mov r8d, dword [r15 + 0x80]
sub r8d, dword [r15 + 0x78]
mov dword [r15 + 0xd4], ecx
mov eax, r8d
cdq
mov dword [r15 + 0xd0], r8d
sub eax, edx
sar eax, 1
mov dword [r15 + 0xd8], eax
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
mov dword [r15 + 0xdc], eax
mov rax, qword [0x1401170b0]
mov dword [rax + 0x138], r8d
mov rax, qword [0x1401170b0]
mov ecx, dword [r15 + 0xd4]
mov dword [rax + 0x13c], ecx
mov eax, dword [r15 + 0xd0]
mov rcx, qword [0x1401170b0]
cdq
sub eax, edx
sar eax, 1
mov dword [rcx + 0x140], eax
mov eax, dword [r15 + 0xd4]
mov rcx, qword [0x1401170b0]
cdq
sub eax, edx
sar eax, 1
mov dword [rcx + 0x144], eax
lea rax, [0x140072eb0]
xor ecx, ecx
mov qword [rbp + 8], rax
mov dword [rbp], 0x50
mov dword [rbp + 4], 0x40
mov qword [rbp + 0x10], rbx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rcx, [rbp]
mov qword [rbp + 0x48], rbx
mov qword [rbp + 0x18], rax
lea rax, [rbp + 0xe0]
vpxor xmm0, xmm0, xmm0
vpxor xmm1, xmm1, xmm1
mov qword [rbp + 0x40], rax
vmovdqu xmmword [rbp + 0x20], xmm0
vmovdqu xmmword [rbp + 0x30], xmm1
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov rcx, qword [rbp + 0x18]
lea r8, [0x140086cc0]
mov dword [rsp + 0x60], 1
mov r9d, 0x80000000
mov qword [rsp + 0x58], rbx
movzx edx, ax
mov qword [rsp + 0x50], rcx
mov ecx, dword [r15 + 0xd4]
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], ecx
mov ecx, dword [r15 + 0xd0]
mov dword [rsp + 0x30], ecx
mov ecx, 0x8080008
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
call r14
mov rcx, qword gs:[0x60]
mov rsi, rax
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rcx + 0x30]
movsxd rdx, dword [r10 + 0x3c]
mov r11d, dword [rdx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x140073aa5
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x140073aa5
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [rbx + r9*4]
mov r8d, dword [rdx + r10]
mov edx, 0x811c9dc5
add r8, r10
movzx eax, byte [r8]
inc r8
test al, al
je 0x140073aa0
nop
movsx eax, al
lea r8, [r8 + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [r8 - 1]
test al, al
jne 0x140073a80
cmp edx, 0xc98b9e00
je 0x140073aaa
test r9d, r9d
jne 0x140073a60
mov rcx, qword [rcx]
jmp 0x140073a30
mov ecx, dword [r11 + 0x24]
mov edx, 5
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
mov rcx, rsi
add rax, r10
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x140073b55
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x140073b55
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [rbx + r9*4]
mov r8d, dword [rdx + r10]
mov edx, 0x811c9dc5
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x140073b50
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x140073b30
cmp edx, 0x76991bcc
je 0x140073b5a
test r9d, r9d
jne 0x140073b10
mov rax, qword [rax]
jmp 0x140073ae0
mov ecx, dword [r11 + 0x24]
mov edx, 0xffffffec
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
mov r8d, 0x800a0
add rax, r10
mov rcx, rsi
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x140073c15
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x140073c15
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [rbx + r9*4]
mov r8d, dword [rdx + r10]
mov edx, 0x811c9dc5
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x140073c10
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x140073bf0
cmp edx, 0xcd945c60
je 0x140073c1a
test r9d, r9d
jne 0x140073bd0
mov rax, qword [rax]
jmp 0x140073ba0
mov ecx, dword [r11 + 0x24]
mov edx, 0xffffffec
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
mov rcx, rsi
add rax, r10
call rax
mov edi, eax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov ebx, dword [rcx + r11 + 0x88]
add rbx, r11
cmp rbx, r11
je 0x140073cd5
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140073cd5
mov r10d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + r11]
mov edx, 0x811c9dc5
add r8, r11
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x140073cd0
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x140073cb0
cmp edx, 0x76991bcc
je 0x140073cda
test r9d, r9d
jne 0x140073c90
mov rax, qword [rax]
jmp 0x140073c60
mov ecx, dword [rbx + 0x24]
or edi, 0x20
add rcx, r11
mov r8d, edi
mov edx, 0xffffffec
movzx r10d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r11
mov eax, dword [rcx + r10*4]
mov rcx, rsi
add rax, r11
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov r10d, dword [rcx + r11 + 0x88]
add r10, r11
cmp r10, r11
je 0x140073d95
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x140073d95
mov ebx, dword [r10 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [rbx + r9*4]
mov r8d, dword [rdx + r11]
mov edx, 0x811c9dc5
add r8, r11
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x140073d90
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x140073d70
cmp edx, 0xc2988208
je 0x140073d9a
test r9d, r9d
jne 0x140073d50
mov rax, qword [rax]
jmp 0x140073d20
mov ecx, dword [r10 + 0x24]
xor edi, edi
mov eax, dword [r15 + 0xd4]
add rcx, r11
mov dword [rsp + 0x28], edi
xor edx, edx
mov dword [rsp + 0x20], eax
movzx r8d, word [rcx + r9*2]
mov ecx, dword [r10 + 0x1c]
mov r9d, dword [r15 + 0xd0]
add rcx, r11
mov r10d, dword [rcx + r8*4]
xor r8d, r8d
add r10, r11
mov rcx, rsi
call r10
vpcmpeqd xmm0, xmm0, xmm0
vmovdqu xmmword [rbp + 0x140], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x140073e75
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x140073e75
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [rbx + r9*4]
mov r8d, dword [rdx + r10]
mov edx, 0x811c9dc5
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x140073e70
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x140073e50
cmp edx, 0x3aa81fe0
je 0x140073e7a
test r9d, r9d
jne 0x140073e30
mov rax, qword [rax]
jmp 0x140073e00
mov ecx, dword [r11 + 0x24]
lea rdx, [rbp + 0x140]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
mov rcx, rsi
add rax, r10
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x140073f35
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x140073f35
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [rbx + r9*4]
mov r8d, dword [rdx + r10]
mov edx, 0x811c9dc5
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x140073f30
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x140073f10
cmp edx, 0x1de05d54
je 0x140073f3a
test r9d, r9d
jne 0x140073ef0
mov rax, qword [rax]
jmp 0x140073ec0
mov ecx, dword [r11 + 0x24]
xor edx, edx
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov r9d, 2
mov ecx, dword [r11 + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
mov r8b, 0xff
add rax, r10
mov rcx, rsi
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x140073ff5
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x140073ff5
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [rbx + r9*4]
mov r8d, dword [rdx + r10]
mov edx, 0x811c9dc5
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x140073ff0
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x140073fd0
cmp edx, 0x83b8d5ab
je 0x140073ffa
test r9d, r9d
jne 0x140073fb0
mov rax, qword [rax]
jmp 0x140073f80
mov ecx, dword [r11 + 0x24]
xor r8d, r8d
add rcx, r10
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
movzx r9d, word [rcx + r9*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r10
mov eax, dword [rcx + r9*4]
xor r9d, r9d
add rax, r10
mov rcx, rsi
lea rdx, [r9 - 1]
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x1400740c7
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x1400740c7
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rdx, [rbx + r9*4]
mov ecx, dword [rdx + r10]
add rcx, r10
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x1400740c2
nop
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x1400740a0
cmp r8d, 0x8bc7bca8
je 0x1400740cc
test r9d, r9d
jne 0x140074080
mov rax, qword [rax]
jmp 0x140074050
mov edx, dword [r11 + 0x24]
mov rcx, rsi
add rdx, r10
movzx r9d, word [rdx + r9*2]
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov eax, dword [rdx + r9*4]
add rax, r10
call rax
mov rcx, qword [r15 + 0x10]
mov qword [r15 + 0xc8], rsi
call fcn.14000afa0
test al, al
jne 0x140074423
movabs rax, 0x8fdd3964f0525baa
mov qword [rbp + 0x170], r13
mov qword [rbp + 0xe0], rax
movabs rcx, 0x8fbc3906f03f5bef
mov qword [rbp + 0x60], rcx
movabs rax, 0x704efe2f690f694e
mov qword [rbp + 0xe8], rax
movabs rbx, 0x704efe2f6964693c
vmovdqu xmm0, xmmword [rbp + 0xe0]
mov qword [rbp + 0x160], rcx
movabs rax, 0x8fd0396ff05e5ba9
mov qword [rbp + 0x200], rax
movabs rcx, 0x389940ba1898b513
movabs rax, 0x703afe0f69006959
mov qword [rbp + 0x180], rcx
mov qword [rbp + 0x208], rax
movabs rcx, 0x5b74bcc304a39560
movabs rax, 0xd18e7a6ddb3af466
mov qword [rbp + 0x68], rbx
vpxor xmm1, xmm0, xmmword [rbp + 0x60]
mov qword [rbp + 0x210], rax
movabs r11, 0x95ef80df8f8c214c
movabs rax, 0x11f818a411dc89b7
mov qword [rbp + 0x168], rbx
mov qword [rbp + 0x218], rax
movabs rdx, 0xf73fc8de517d97d7
vmovdqu ymm0, ymmword [rbp + 0x200]
movabs rax, 0x38fc40c018f1b57f
mov qword [rbp + 0x178], r12
mov qword [rbp + 0x220], rax
movabs r8, 0x257b527fcf54624
movabs rax, 0x5b1bbcac04ce9540
mov qword [rbp + 0x188], rcx
mov qword [rbp + 0x228], rax
movabs rcx, 0x651854d8c849cb7d
movabs rax, 0x653854bdc83acb08
mov qword [rbp + 0x288], r11
mov qword [rbp + 0x230], rax
movabs r10, 0x16d7cb1cc7cad9d1
movabs rax, 0xd19e81923b57b4cb
mov qword [rbp + 0x190], rcx
mov qword [rbp + 0x238], rax
movabs r9, 0x7078eb259f3000a6
movabs rax, 0xf75ac8bd511397b6
mov qword [rbp + 0x1a0], rdx
mov qword [rbp + 0x240], rax
movabs rax, 0x236b54afcd54608
mov qword [rbp + 0x248], rax
movabs rax, 0x16a4cb3cc7afd9ba
mov qword [rbp + 0x250], rax
movabs rax, 0x7058eb409f4200d3
mov qword [rbp + 0x258], rax
movabs rax, 0x83f6e40754abe056
mov qword [rbp + 0x260], rax
movabs rax, 0xdf65db323941386d
mov qword [rbp + 0x268], rax
movabs rax, 0xca603bff0242a845
mov qword [rbp + 0x270], rax
movabs rax, 0xf737bc9a3fed9724
mov qword [rbp + 0x278], rax
movabs rax, 0x58229e98fd7e9a1a
mov qword [rbp + 0x280], rax
movabs rax, 0xd1ea81e13b39b4a2
mov qword [rbp + 0x198], rax
movabs rax, 0x8385e47254c4e03b
mov qword [rbp + 0x1c0], rax
movabs rax, 0xdf16db5b39613808
mov qword [rbp + 0x1c8], rax
movabs rax, 0xca0e3b900221a865
mov qword [rbp + 0x1d0], rax
movabs rax, 0xf743bcf93f88974a
mov qword [rbp + 0x1d8], rax
movabs rax, 0x58229eb6fd1a9a7f
vmovdqu xmmword [rbp + 0xe0], xmm1
vpxor ymm1, ymm0, ymmword [rbp + 0x160]
mov qword [rbp + 0x1e0], rax
mov qword [rbp + 0x1a8], r8
mov qword [rbp + 0x1b0], r10
mov qword [rbp + 0x1b8], r9
mov qword [rbp + 0x1e8], r11
vmovdqu ymmword [rbp + 0x200], ymm1
vmovdqu ymm2, ymmword [rbp + 0x220]
vpxor ymm0, ymm2, ymmword [rbp + 0x180]
vmovdqu ymm1, ymmword [rbp + 0x240]
vpxor ymm2, ymm1, ymmword [rbp + 0x1a0]
vmovdqu ymmword [rbp + 0x220], ymm0
vmovdqu ymm0, ymmword [rbp + 0x260]
vpxor ymm1, ymm0, ymmword [rbp + 0x1c0]
vmovdqu ymmword [rbp + 0x240], ymm2
vmovdqu xmm2, xmmword [rbp + 0x280]
vpxor xmm0, xmm2, xmmword [rbp + 0x1e0]
vmovdqu xmmword [rbp + 0x280], xmm0
vmovdqu ymmword [rbp + 0x260], ymm1
lea rdx, [rbp + 0x200]
mov r9d, 0x30
lea r8, [rbp + 0xe0]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxW]
xor bl, bl
jmp 0x140074425
mov bl, 1
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x140074469
mov rcx, qword [rbp + 0xc0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140074464
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140074464
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400783d0
movzx eax, bl
jmp 0x14007467e
movabs rsi, 0x8fbc3906f03f5bef
mov qword [rbp + 0x60], rsi
movabs rax, 0x8fdd3964f0525baa
mov qword [rbp + 0xe0], rax
movabs rbx, 0x704efe2f6964693c
mov qword [rbp + 0x68], rbx
movabs rax, 0x704efe2f690f694e
mov qword [rbp + 0xe8], rax
movabs rcx, 0x389940ba1898b513
vmovdqu xmm0, xmmword [rbp + 0xe0]
vpxor xmm1, xmm0, xmmword [rbp + 0x60]
mov qword [rbp + 0x180], rcx
movabs rax, 0x8fd0396ff05e5ba9
mov qword [rbp + 0x60], rax
movabs rcx, 0x5b74bcc304a39560
movabs rax, 0x703afe0f69006959
mov qword [rbp + 0x188], rcx
mov qword [rbp + 0x68], rax
movabs r9, 0x7078eb259f3000a6
movabs rax, 0xd1897a62db3af466
mov qword [rbp + 0xb8], r9
mov qword [rbp + 0x70], rax
movabs rdx, 0xf73fc8de517d97d7
movabs rax, 0x11ee18ed11cc89b0
mov qword [rbp + 0x1a0], rdx
mov qword [rbp + 0x78], rax
lea rdx, [rbp + 0x60]
movabs rax, 0x38f640de18f6b57a
mov qword [rbp + 0x160], rsi
mov qword [rbp + 0x80], rax
movabs rcx, 0x651854d8c849cb7d
movabs rax, 0x5b15bcab04839517
mov qword [rbp + 0x168], rbx
mov qword [rbp + 0x88], rax
movabs r8, 0x257b527fcf54624
movabs rax, 0x657d54b4c82dcb13
mov qword [rbp + 0x170], r13
mov qword [rbp + 0x90], rax
movabs r10, 0x16d7cb1cc7cad9d1
movabs rax, 0xd1ca81873b56b482
mov qword [rbp + 0x178], r12
vmovdqu ymm0, ymmword [rbp + 0x160]
mov qword [rbp + 0x98], rax
movabs rax, 0xf71fc8bb511597a3
vmovdqu ymm2, ymmword [rbp + 0x80]
mov qword [rbp + 0xa0], rax
movabs rax, 0x234b548fc874654
mov qword [rbp + 0xa8], rax
movabs rax, 0x16d7cb6fc7b9d9b4
mov qword [rbp + 0xb0], rax
movabs rax, 0xd1ea81e13b39b4a2
vmovdqu xmmword [rbp + 0xe0], xmm1
vpxor ymm1, ymm0, ymmword [rbp + 0x60]
vmovdqu ymmword [rbp + 0x60], ymm1
vmovdqu ymm1, ymmword [rbp + 0xa0]
mov qword [rbp + 0x198], rax
mov qword [rbp + 0x190], rcx
vpxor ymm0, ymm2, ymmword [rbp + 0x180]
mov qword [rbp + 0x1a8], r8
mov qword [rbp + 0x1b0], r10
mov qword [rbp + 0x1b8], r9
vpxor ymm2, ymm1, ymmword [rbp + 0x1a0]
vmovdqu ymmword [rbp + 0xa0], ymm2
vmovdqu ymmword [rbp + 0x80], ymm0
lea r8, [rbp + 0xe0]
mov r9d, 0x30
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxW]
xor al, al
mov rcx, qword [rbp + 0xe00]
xor rcx, rsp
call fcn.1400783b0
lea r11, [rsp + 0xea0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret