Function at 0x14004c040
Capabilities:
Contain obfuscated stackstrings
Delete file
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x100]
sub rsp, 0x200
mov rax, qword [0x140092010]
xor rax, rsp
mov qword [rbp + 0xf0], rax
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
imul eax, ebx
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
mov dword [rbp - 0x70], 0x4ebe4ebd
mov dword [rbp - 0x6c], 0x4eb84ecd
mov dword [rbp - 0x68], 0x4e874eab
mov dword [rbp - 0x64], 0x4e8b
xor ebx, ebx
mov byte [rbp - 0x60], 1
mov ecx, ebx
mov edi, 0x4ee1
nop dword [rax]
lea eax, [rdi + rcx]
xor word [rbp + rcx*2 - 0x70], ax
inc rcx
cmp rcx, 7
jb 0x14004c0c0
mov byte [rbp - 0x60], bl
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x14004c1e3
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rsp + 0x40], 0x4ecf4eba
mov dword [rsp + 0x44], 0x4ec44ebe
mov dword [rsp + 0x48], 0x4ea24eb9
mov dword [rsp + 0x4c], 0x4e9e4e82
mov dword [rsp + 0x50], 0x4e894e80
mov dword [rsp + 0x54], 0x4eb04e8e
mov dword [rsp + 0x58], 0x4e8f4ea3
mov dword [rsp + 0x5c], 0x4ed04e83
mov dword [rsp + 0x60], 0x4e814e98
mov dword [rsp + 0x64], 0x4e954ed3
mov dword [rsp + 0x68], 0x4e844e99
mov dword [rsp + 0x6c], 0x4e994e92
mov dword [rsp + 0x70], 0x4e834e9d
mov dword [rsp + 0x74], 0x4e954edb
mov dword [rsp + 0x78], 0x4ede4e93
mov dword [rsp + 0x7c], 0x4f734e8a
mov dword [rbp - 0x80], 0x4f2c4f64
mov word [rbp - 0x7c], bx
mov byte [rbp - 0x7a], 1
lea eax, [rdi + rbx]
xor word [rsp + rbx*2 + 0x40], ax
inc rbx
cmp rbx, 0x22
jb 0x14004c1a1
mov byte [rbp - 0x7a], 0
lea rdx, [rsp + 0x40]
mov rcx, qword [0x14006f250]
call fcn.140054ac0
lea rdx, [0x140054ca0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rax, 0xffffffffffffffff
jmp 0x14004cdb0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [0x140093080], xmm0
movups xmmword [0x140093090], xmm0
movups xmmword [0x1400930a0], xmm0
movups xmmword [0x1400930b0], xmm0
movups xmmword [0x1400930c0], xmm0
movups xmmword [0x1400930d0], xmm0
mov dword [0x1400930e0], eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 2
sub r8d, ecx
add r8d, 0xa
movsxd rsi, r8d
test r8d, r8d
jle 0x14004c293
mov rdi, rbx
movabs r12, 0x4ec4ec4ec4ec4ec5
lea r14, sym.MZ_E0__CWB3_:n_Z:I4pENocNAp93mCd_V
nop dword [rax]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movsxd rcx, eax
mov rax, r12
mul rcx
shr rdx, 4
imul rax, rdx, 0x34
sub rcx, rax
movzx eax, byte [rcx + r14 + 0x85df8]
mov byte [rdi + r14 + 0x93080], al
inc rdi
cmp rdi, rsi
jl 0x14004c260
mov dword [rbp - 0x40], 0x4ede4eba
mov dword [rbp - 0x3c], 0x4ec44ebe
mov dword [rbp - 0x38], 0x4e894ea9
mov dword [rbp - 0x34], 0x4e8c4e86
mov dword [rbp - 0x30], 0x4e844e80
mov dword [rbp - 0x2c], 0x4ecc4e8c
mov dword [rbp - 0x28], 0x4e9b4e9b
mov dword [rbp - 0x24], 0x4e9e4e83
mov dword [rbp - 0x20], 0x4e804e94
mov dword [rbp - 0x1c], 0x4e964e92
mov dword [rbp - 0x18], 0x4e934e99
mov dword [rbp - 0x14], 0x4e9c4ed7
mov dword [rbp - 0x10], 0x4e934e8b
mov dword [rbp - 0xc], 0x4e994e8d
mov dword [rbp - 8], 0x4ed24e8f
mov dword [rbp - 4], 0x4f4e4edf
mov dword [rbp], 0x4f6f4f60
mov dword [rbp + 4], 0x4f3e4f66
mov dword [rbp + 8], 0x4f25
mov byte [rbp + 0xc], 1
mov rdx, rbx
mov ecx, 0x4ee1
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + rdx]
xor word [rbp + rdx*2 - 0x40], ax
inc rdx
cmp rdx, 0x25
jb 0x14004c330
mov byte [rbp + 0xc], bl
lea rdx, [rbp - 0x40]
mov rcx, qword [0x14006f250]
call fcn.140054ac0
mov qword [rbp - 0x70], rax
lea rcx, [rsp + 0x40]
call fcn.14004bb90
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x14004c371
mov rax, qword [rax]
mov rdx, rax
mov rcx, qword [rbp - 0x70]
call fcn.140059d00
lea rdx, [0x140054ca0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14004c3d3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c3ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004c3ce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006c880
lea rcx, [rbp + 0xd0]
call fcn.14004bd20
nop
cmp qword [rbp + 0xe0], 0
jne 0x14004c4ac
mov dword [rsp + 0x40], 0x4ecf4eba
mov dword [rsp + 0x44], 0x4ec44ebe
mov dword [rsp + 0x48], 0x4e874ea6
mov dword [rsp + 0x4c], 0x4ecf4e89
mov dword [rsp + 0x50], 0x4eca4e9d
mov dword [rsp + 0x54], 0x4e854e8d
mov dword [rsp + 0x58], 0x4e8a4e83
mov dword [rsp + 0x5c], 0x4ea44ecf
mov dword [rsp + 0x60], 0x4ebf4eb4
mov dword [rsp + 0x64], 0x4ed44ea3
mov dword [rsp + 0x68], 0x4e994e93
mov dword [rsp + 0x6c], 0x4e9c4e9b
mov dword [rsp + 0x70], 0x4e884e9c
mov word [rsp + 0x74], bx
mov byte [rsp + 0x76], 1
mov ecx, 0x4ee1
nop word [rax + rax]
lea eax, [rcx + rbx]
xor word [rsp + rbx*2 + 0x40], ax
inc rbx
cmp rbx, 0x1a
jb 0x14004c470
mov byte [rsp + 0x76], 0
lea rdx, [rsp + 0x40]
mov rcx, qword [0x14006f250]
call fcn.140054ac0
lea rdx, [0x140054ca0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
jmp 0x14004cd5d
lea rcx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 8
cmovae rcx, qword [rbp + 0xd0]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp - 0x40]
call fcn.14006da7a
lea rdx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 8
cmovae rdx, qword [rbp + 0xd0]
lea rcx, [rbp - 0x40]
call fcn.140053e80
nop
mov r8d, 0x8708
lea rdx, [0x140074800]
lea rcx, [rbp - 0x40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
mov rcx, qword [rax]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbp - 0x38]
test byte [rdx + rax + 0x10], 6
je 0x14004c65e
call fcn.140054610
test rax, rax
jne 0x14004c54f
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x40]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x40], rax
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx - 0x44], edx
lea rcx, [rbp - 0x38]
call fcn.140053e10
lea rcx, [rbp - 0x30]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x68]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov dword [rbp - 0x40], 0x4ecf4eba
mov dword [rbp - 0x3c], 0x4ec44ebe
mov dword [rbp - 0x38], 0x4e874ea3
mov dword [rbp - 0x34], 0x4e844e8e
mov dword [rbp - 0x30], 0x4e8e4e8c
mov dword [rbp - 0x2c], 0x4e984ecb
mov dword [rbp - 0x28], 0x4ece4e82
mov dword [rbp - 0x24], 0x4e824e8c
mov dword [rbp - 0x20], 0x4e934e94
mov dword [rbp - 0x1c], 0x4e914e87
mov dword [rbp - 0x18], 0x4e804ed5
mov dword [rbp - 0x14], 0x4e944e82
mov dword [rbp - 0x10], 0x4e9f4e97
mov dword [rbp - 0xc], 0x4e9d4e89
mov dword [rbp - 8], 0x4e924e9f
mov dword [rbp - 4], 0x4f204e9a
mov dword [rbp], 0x4f704f65
mov dword [rbp + 4], 0x4f724f6a
mov dword [rbp + 8], 0x4f744f60
mov dword [rbp + 0xc], 0x4f6e4f27
mov dword [rbp + 0x10], 0x4f664f60
mov dword [rbp + 0x14], 0x4f6e
mov byte [rbp + 0x18], 1
mov ecx, 0x4ee1
nop word [rax + rax]
lea eax, [rcx + rbx]
xor word [rbp + rbx*2 - 0x40], ax
inc rbx
cmp rbx, 0x2b
jb 0x14004c640
mov byte [rbp + 0x18], 0
lea rdx, [rbp - 0x40]
jmp 0x14004c48b
call fcn.140054610
test rax, rax
jne 0x14004c685
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x40]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x40], rax
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx - 0x44], edx
lea rcx, [rbp - 0x38]
call fcn.140053e10
lea rcx, [rbp - 0x30]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x68]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0xd0]
call fcn.14005d1a0
test al, al
jne 0x14004c827
mov dword [rbp - 0x40], 0x4ecf4eba
mov dword [rbp - 0x3c], 0x4ec44ebe
mov dword [rbp - 0x38], 0x4e874ea3
mov dword [rbp - 0x34], 0x4e844e8e
mov dword [rbp - 0x30], 0x4e8e4e8c
mov dword [rbp - 0x2c], 0x4e984ecb
mov dword [rbp - 0x28], 0x4ece4e82
mov dword [rbp - 0x24], 0x4e954e9d
mov dword [rbp - 0x20], 0x4e9b4e96
mov dword [rbp - 0x1c], 0x4e804e80
mov dword [rbp - 0x18], 0x4e844e90
mov dword [rbp - 0x14], 0x4e994ed7
mov dword [rbp - 0x10], 0x4e9e4e97
mov dword [rbp - 0xc], 0x4e8f4edb
mov dword [rbp - 8], 0x4e9f4e89
mov dword [rbp - 4], 0x4f744e8d
mov dword [rbp], 0x4f714f21
mov dword [rbp + 4], 0x4f764f66
mov dword [rbp + 8], 0x4f6f4f73
mov dword [rbp + 0xc], 0x4f6d4f64
mov dword [rbp + 0x10], 0x4f6c4f29
mov dword [rbp + 0x14], 0x4f7e4f64
mov dword [rbp + 0x18], 0x4f7a4f2d
mov dword [rbp + 0x1c], 0x4f754f67
mov dword [rbp + 0x20], 0x4f644f31
mov dword [rbp + 0x24], 0x4f784f66
mov dword [rbp + 0x28], 0x4f734f7b
mov dword [rbp + 0x2c], 0x4f794f65
mov dword [rbp + 0x30], 0x4f764f7b
mov dword [rbp + 0x34], 0x4f3c4f7e
mov dword [rbp + 0x38], 0x4f6c4f79
mov dword [rbp + 0x3c], 0x4f564f76
mov dword [rbp + 0x40], 0x4f504f44
mov word [rbp + 0x44], bx
mov byte [rbp + 0x46], 1
mov ecx, 0x4ee1
lea eax, [rcx + rbx]
xor word [rbp + rbx*2 - 0x40], ax
inc rbx
cmp rbx, 0x42
jb 0x14004c7d0
mov byte [rbp + 0x46], 0
lea rdx, [rbp - 0x40]
mov rcx, qword [0x14006f250]
call fcn.140054ac0
lea rdx, [0x140054ca0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 8
cmovae rcx, qword [rbp + 0xd0]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
jmp 0x14004cd5d
mov dword [rbp - 0x58], 0x4ebe4ebd
mov dword [rbp - 0x54], 0x4eb84ecd
mov dword [rbp - 0x50], 0x4e874eab
mov dword [rbp - 0x4c], 0x4e8b
mov byte [rbp - 0x48], 1
mov rcx, rbx
mov edx, 0x4ee1
nop
lea eax, [rdx + rcx]
xor word [rbp + rcx*2 - 0x58], ax
inc rcx
cmp rcx, 7
jb 0x14004c850
mov byte [rbp - 0x48], 0
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x14004cc8f
mov dword [rbp - 0x70], 0x978c968f
mov dword [rbp - 0x6c], 0x8489948e
mov dword [rbp - 0x68], 0x89938fc7
mov word [rbp - 0x64], 0x100
mov rcx, rbx
nop dword [rax]
lea eax, [rcx - 0x1f]
xor byte [rbp + rcx - 0x70], al
inc rcx
cmp rcx, 0xc
jb 0x14004c8c0
mov byte [rbp - 0x63], 0
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], socket
mov byte [rsp + 0x40], 0
lea rax, [rbp - 0x70]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14004c900
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x40]
call fcn.140054910
nop
lea rcx, [rsp + 0x40]
call fcn.14005e080
mov qword [0x140093078], rax
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14004c971
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c965
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004c965
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006c880
mov rax, qword [0x140093078]
test rax, rax
jne 0x14004ca21
mov dword [rsp + 0x40], 0x4ecf4eba
mov dword [rsp + 0x44], 0x4ec44ebe
mov dword [rsp + 0x48], 0x4e874ea3
mov dword [rsp + 0x4c], 0x4e844e8e
mov dword [rsp + 0x50], 0x4e8e4e8c
mov dword [rsp + 0x54], 0x4e984ecb
mov dword [rsp + 0x58], 0x4ece4e82
mov dword [rsp + 0x5c], 0x4e954e88
mov dword [rsp + 0x60], 0x4ed24e85
mov dword [rsp + 0x64], 0x4e804e9d
mov dword [rsp + 0x68], 0x4e854e9a
mov dword [rsp + 0x6c], 0x4e8a4e9c
mov dword [rsp + 0x70], 0x4e964e97
mov dword [rsp + 0x74], 0x4e994ed5
mov dword [rsp + 0x78], 0x4e9b4e85
mov word [rsp + 0x7c], bx
mov byte [rsp + 0x7e], 1
mov ecx, 0x4ee1
lea eax, [rcx + rbx]
xor word [rsp + rbx*2 + 0x40], ax
inc rbx
cmp rbx, 0x1e
jb 0x14004ca01
mov byte [rsp + 0x7e], 0
lea rdx, [rsp + 0x40]
jmp 0x14004cd39
mov rcx, rdi
call fcn.14004f840
test al, al
jne 0x14004caef
mov dword [rsp + 0x40], 0x4ecf4eba
mov dword [rsp + 0x44], 0x4ec44ebe
mov dword [rsp + 0x48], 0x4e874ea3
mov dword [rsp + 0x4c], 0x4e844e8e
mov dword [rsp + 0x50], 0x4e8e4e8c
mov dword [rsp + 0x54], 0x4e984ecb
mov dword [rsp + 0x58], 0x4ece4e82
mov dword [rsp + 0x5c], 0x4e9c4eac
mov dword [rsp + 0x60], 0x4e934e94
mov dword [rsp + 0x64], 0x4ea44e81
mov dword [rsp + 0x68], 0x4eb24e9c
mov dword [rsp + 0x6c], 0x4eba4eb3
mov dword [rsp + 0x70], 0x4e9b4eba
mov dword [rsp + 0x74], 0x4e944e98
mov dword [rsp + 0x78], 0x4eaa4e98
mov dword [rsp + 0x7c], 0x4f624e9e
mov dword [rbp - 0x80], 0x4f674f6d
mov word [rbp - 0x7c], bx
mov byte [rbp - 0x7a], 1
mov ecx, 0x4ee1
nop word [rax + rax]
lea eax, [rcx + rbx]
xor word [rsp + rbx*2 + 0x40], ax
inc rbx
cmp rbx, 0x22
jb 0x14004cad0
mov byte [rbp - 0x7a], 0
lea rdx, [rsp + 0x40]
jmp 0x14004cd39
mov rcx, rdi
call fcn.140050bb0
test al, al
jne 0x14004cbbe
mov dword [rbp - 0x40], 0x4ecf4eba
mov dword [rbp - 0x3c], 0x4ec44ebe
mov dword [rbp - 0x38], 0x4e874ea3
mov dword [rbp - 0x34], 0x4e844e8e
mov dword [rbp - 0x30], 0x4e8e4e8c
mov dword [rbp - 0x2c], 0x4e984ecb
mov dword [rbp - 0x28], 0x4ece4e82
mov dword [rbp - 0x24], 0x4e9c4eac
mov dword [rbp - 0x20], 0x4e934e94
mov dword [rbp - 0x1c], 0x4ebf4e81
mov dword [rbp - 0x18], 0x4e844e90
mov dword [rbp - 0x14], 0x4e9d4e99
mov dword [rbp - 0x10], 0x4eb24e95
mov dword [rbp - 0xc], 0x4e8f4e9a
mov dword [rbp - 8], 0x4ebc4e95
mov dword [rbp - 4], 0x4f634e8a
mov dword [rbp], 0x4f674f6a
mov dword [rbp + 4], 0x4f484f77
mov dword [rbp + 8], 0x4f754f6c
mov dword [rbp + 0xc], 0x4f73
mov byte [rbp + 0x10], 1
mov ecx, 0x4ee1
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + rbx]
xor word [rbp + rbx*2 - 0x40], ax
inc rbx
cmp rbx, 0x27
jb 0x14004cba0
mov byte [rbp + 0x10], 0
lea rdx, [rbp - 0x40]
jmp 0x14004cd39
mov rcx, rdi
call fcn.14004e7f0
test al, al
jne 0x14004cd64
mov dword [rsp + 0x40], 0x4ec34eba
mov dword [rsp + 0x44], 0x4ec44ebe
mov dword [rsp + 0x48], 0x4e874ea3
mov dword [rsp + 0x4c], 0x4e844e8e
mov dword [rsp + 0x50], 0x4e8e4e8c
mov dword [rsp + 0x54], 0x4e984ecb
mov dword [rsp + 0x58], 0x4ece4e82
mov dword [rsp + 0x5c], 0x4e9c4eac
mov dword [rsp + 0x60], 0x4e934e94
mov dword [rsp + 0x64], 0x4eb94e81
mov dword [rsp + 0x68], 0x4ea34e98
mov dword [rsp + 0x6c], 0x4e944e99
mov dword [rsp + 0x70], 0x4e9b4e96
mov dword [rsp + 0x74], 0x4e994e9f
mov dword [rsp + 0x78], 0x4eba4e99
mov dword [rsp + 0x7c], 0x4f694e8d
mov dword [rbp - 0x80], 0x4f674f77
mov dword [rbp - 0x7c], 0x4f774f71
mov word [rbp - 0x78], bx
mov byte [rbp - 0x76], 1
mov ecx, 0x4ee1
nop dword [rax]
lea eax, [rcx + rbx]
xor word [rsp + rbx*2 + 0x40], ax
inc rbx
cmp rbx, 0x24
jb 0x14004cc70
mov byte [rbp - 0x76], 0
lea rdx, [rsp + 0x40]
jmp 0x14004cd39
mov dword [rbp - 0x40], 0x4ecf4eba
mov dword [rbp - 0x3c], 0x4ec44ebe
mov dword [rbp - 0x38], 0x4e874ea3
mov dword [rbp - 0x34], 0x4e844e8e
mov dword [rbp - 0x30], 0x4e8e4e8c
mov dword [rbp - 0x2c], 0x4e984ecb
mov dword [rbp - 0x28], 0x4ece4e82
mov dword [rbp - 0x24], 0x4e9f4e83
mov dword [rbp - 0x20], 0x4e964e90
mov dword [rbp - 0x1c], 0x4e904ed3
mov dword [rbp - 0x18], 0x4e9f4e87
mov dword [rbp - 0x14], 0x4e9d4e81
mov dword [rbp - 0x10], 0x4eda4e8b
mov dword [rbp - 0xc], 0x4e8d4e92
mov dword [rbp - 8], 0x4e894e8b
mov dword [rbp - 4], 0x4f344ec9
mov dword [rbp], 0x4f2c4f64
mov dword [rbp + 4], 0x4f7d4f70
mov dword [rbp + 8], 0x4f76
mov byte [rbp + 0xc], 1
mov ecx, 0x4ee1
nop dword [rax]
lea eax, [rcx + rbx]
xor word [rbp + rbx*2 - 0x40], ax
inc rbx
cmp rbx, 0x25
jb 0x14004cd20
mov byte [rbp + 0xc], 0
lea rdx, [rbp - 0x40]
mov rcx, qword [0x14006f250]
call fcn.140054ac0
lea rdx, [0x140054ca0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rcx, rdi
call fcn.14004cde0
mov rdi, 0xffffffffffffffff
mov rdx, qword [rbp + 0xe8]
cmp rdx, 8
jb 0x14004cdad
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004cda8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004cda8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006c880
mov rax, rdi
mov rcx, qword [rbp + 0xf0]
xor rcx, rsp
call fcn.14006c790
lea r11, [rsp + 0x200]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret