Function at 0x14001d530
Capabilities:
Contain obfuscated stackstrings
Create directory
Delete file
Encode data using xor
Get graphical window text

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x420]
sub rsp, 0x520
mov rax, qword [0x1401973d0]
xor rax, rsp
mov qword [rbp + 0x410], rax
mov r8d, 0x64
lea rdx, [rbp + 0x340]
mov rcx, qword [0x1401a6be0]
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rdx, str.AJQ1Q_AKQ11_AKQZK_AK211
mov r14, 0xffffffffffffffff
mov r8, r14
inc r8
cmp word [rdx + r8*2], 0
jne 0x14001d593
lea rcx, [0x1401a6c10]
call fcn.14000c910
call fcn.140029f40
mov rdx, qword [rax]
mov rcx, qword [0x1401a6be0]
call qword [sym.imp.USER32.dll_SetWindowTextW]
xor edx, edx
mov rcx, qword [0x1401a6be8]
call qword [sym.imp.USER32.dll_EnableWindow]
call fcn.14000fb60
mov rcx, rax
test rax, rax
je 0x14001e44a
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x188], rbx
mov rax, qword [0x1401a6c10]
cmp word [rax], 0
je 0x14001e336
cmp dword [rax - 0x10], 0x17
jne 0x14001e336
xor edi, edi
mov r15d, edi
lea esi, [rdi + 0x40]
lea r12d, [rdi + 0xa]
mov r11d, 0x30
nop dword [rax]
mov eax, r11d
mov dword [rbp + 0xd0], eax
mov dword [rbp + 0xd4], 0x4d0050
mov dword [rbp + 0xd8], 0x4b004e
mov dword [rbp + 0xdc], 0x120006
mov dword [rbp + 0xe0], 0x1a0011
mov dword [rbp + 0xe4], 0x7b0033
mov dword [rbp + 0xe8], 0x70007a
mov dword [rbp + 0xec], 0x760077
mov dword [rbp + 0xf0], 0x60069
mov dword [rbp + 0xf4], 0x200038
mov dword [rbp + 0xf8], 0x220065
mov dword [rbp + 0xfc], 0x390022
mov dword [rbp + 0x100], 0x28002b
mov dword [rbp + 0x104], 0x300022
mov dword [rbp + 0x108], 0x7c003e
mov dword [rbp + 0x10c], 0x300027
mov dword [rbp + 0x110], 0x68003a
mov dword [rbp + 0x114], 0x36002c
mov dword [rbp + 0x118], 0x3e0031
mov dword [rbp + 0x11c], 0x600032
mov dword [rbp + 0x120], 0x2c007b
mov dword [rbp + 0x124], 0xf0046
mov dword [rbp + 0x128], 0xe0003
mov dword [rbp + 0x12c], 0x580001
mov dword [rbp + 0x130], 0x140043
mov dword [rbp + 0x134], 0x68
mov edx, edi
test r11d, r11d
je 0x14001d74f
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp + 0xd4]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rbp + 0xd0]
cmp edx, eax
jb 0x14001d730
mov word [rbp + rax*2 + 0xd4], di
mov rax, qword [0x1401a6c10]
mov qword [rsp + 0x20], rax
mov r9, qword [0x1401a6c28]
mov r8, qword [0x1401a6c20]
lea rdx, [rbp + 0xd4]
lea rcx, [rbp + 0x1b0]
call fcn.14000d1e0
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a0], rdi
mov qword [rbp + 0x1a8], 0xf
mov byte [rbp + 0x190], 0
lea rax, [rbp - 8]
mov qword [rbp + 0x140], rax
call fcn.14000fb60
test rax, rax
je 0x14001e43f
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp - 8], rax
lea rax, [rbp + 0x1b0]
cmp rax, 0x10000
lea rax, [rbp + 0x1b0]
jae 0x14001d7f5
movzx edx, ax
lea rcx, [rbp - 8]
call fcn.14000c690
jmp 0x14001d81c
mov r8, r14
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14001d800
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp - 8]
call fcn.14000c910
nop
lea rdx, [rbp + 0x190]
lea rcx, [rbp - 8]
call fcn.1400036f0
test eax, eax
jne 0x14001d85f
lea rdx, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 0x10
cmovae rdx, qword [rbp + 0x190]
lea rcx, [rbp + 0x188]
call fcn.140009650
mov rbx, qword [rbp + 0x188]
jmp 0x14001d931
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, r14d
lea r8, [0x14016b967]
xor edx, edx
lea ecx, [rdx + 3]
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea esi, [rax - 1]
test esi, esi
jle 0x14001d8dd
mov edx, 1
sub edx, dword [rbx - 8]
mov ecx, dword [rbx - 0xc]
sub ecx, esi
or ecx, edx
jge 0x14001d8aa
mov edx, esi
lea rcx, [rbp + 0x188]
call fcn.14000cad0
mov rbx, qword [rbp + 0x188]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rbx
mov r9d, r14d
lea r8, [0x14016b967]
xor edx, edx
lea ecx, [rdx + 3]
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp esi, dword [rbx - 0xc]
jg 0x14001e455
mov dword [rbx - 0x10], esi
movsxd rax, esi
mov word [rbx + rax*2], di
jmp 0x14001d92c
lea rdx, [rbx - 0x18]
mov rsi, qword [rdx]
cmp dword [rdx + 8], 0
je 0x14001d92c
cmp dword [rdx + 0x10], 0
jge 0x14001d902
cmp dword [rbx - 0xc], 0
jl 0x14001e455
mov dword [rbx - 0x10], edi
mov word [rbx], di
jmp 0x14001d92c
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001d918
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x188], rbx
mov esi, 0x40
mov eax, edi
mov dword [rsp + 0x78], eax
mov dword [rsp + 0x7c], 0x38
mov word [rsp + rax*2 + 0x7c], di
mov rax, rbx
lea r8, [rsp + 0x7c]
sub r8, rbx
nop
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x14001d964
add rax, 2
test ecx, ecx
jne 0x14001d950
test edx, edx
jne 0x14001da1d
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
inc r15d
cmp r15d, 3
jle 0x14001da0c
mov dword [rbp - 0x28], r12d
mov dword [rbp - 0x24], 0x7ee57f69
mov dword [rbp - 0x20], 0x52936cd8
mov dword [rbp - 0x1c], 0x91f08bcb
mov dword [rbp - 0x18], 0x6fff658e
mov dword [rbp - 0x14], 0xff406d7b
mov dword [rbp - 0x10], 0x42
mov eax, edi
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], 0x38
mov word [rsp + rax*2 + 0x5c], di
mov eax, edi
mov ecx, dword [rbp - 0x28]
test ecx, ecx
je 0x14001d9e9
nop
mov ecx, eax
lea rdx, [rbp - 0x24]
lea rdx, [rdx + rcx*2]
lea ecx, [rax + 0x38]
xor word [rdx], cx
inc eax
mov ecx, dword [rbp - 0x28]
cmp eax, ecx
jb 0x14001d9d0
mov eax, ecx
mov word [rbp + rax*2 - 0x24], di
mov r9d, esi
lea r8, [rsp + 0x5c]
lea rdx, [rbp - 0x24]
mov rcx, qword [0x1401a6be0]
call qword [sym.imp.USER32.dll_MessageBoxW]
mov r15d, edi
lea rcx, [rbp + 0x190]
call fcn.140010cc0
jmp 0x14001d617
mov esi, 4
mov eax, esi
mov dword [rbp - 0x70], eax
mov dword [rbp - 0x6c], 0x4a001d
mov dword [rbp - 0x68], 0x310037
mov dword [rbp - 0x64], 0x3c
mov edx, edi
nop
mov eax, edx
lea rcx, [rbp - 0x6c]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rbp - 0x70]
cmp edx, eax
jb 0x14001da40
mov word [rbp + rax*2 - 0x6c], di
mov rdx, rbx
lea rcx, [rbp - 0x6c]
call fcn.14002b700
lea rax, [rbp]
mov qword [rbp + 0x140], rax
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x34], 0x4a0055
mov dword [rsp + 0x38], 0x3b005d
mov edx, edi
nop
mov eax, edx
lea rcx, [rsp + 0x34]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rsp + 0x30]
cmp edx, eax
jb 0x14001da90
mov word [rsp + rax*2 + 0x34], di
call fcn.14000fb60
mov rcx, rax
test rax, rax
je 0x14001e460
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp], rax
lea rax, [rsp + 0x34]
cmp rax, 0x10000
lea rax, [rsp + 0x34]
jae 0x14001daef
movzx edx, ax
lea rcx, [rbp]
call fcn.14000c690
jmp 0x14001db0c
mov r8, r14
inc r8
cmp word [rax + r8*2], 0
jne 0x14001daf2
lea rdx, [rsp + 0x34]
lea rcx, [rbp]
call fcn.14000c910
nop
lea r15, [rbx - 0x18]
mov rcx, r15
call fcn.14000c810
add rax, 0x18
mov qword [rbp + 0x148], rax
lea r8, [rbp]
lea rdx, [rbp + 0x148]
lea rcx, [rbp + 0x168]
call fcn.1400051f0
mov r8, rax
mov dword [rbp - 0x60], esi
mov dword [rbp - 0x5c], 0x4b004c
mov dword [rbp - 0x58], 0x5e004f
mov dword [rbp - 0x54], 0x3c
mov edx, edi
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x5c]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov ecx, dword [rbp - 0x60]
cmp edx, ecx
jb 0x14001db60
mov word [rbp + rcx*2 - 0x5c], di
mov rax, qword [r8]
lea rdx, [rbp - 0x5c]
sub rdx, rax
nop dword [rax + rax]
movzx ecx, word [rax]
cmp cx, word [rax + rdx]
jne 0x14001dba6
add rax, 2
test cx, cx
jne 0x14001db90
mov ebx, edi
jmp 0x14001dbab
sbb ebx, ebx
or ebx, 1
mov rdx, qword [rbp + 0x168]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001dbcc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov edx, edi
test ebx, ebx
jne 0x14001e120
lea rax, [rbp + 8]
mov qword [rbp + 0x160], rax
mov dword [rsp + 0x68], esi
mov dword [rsp + 0x6c], 0x58005c
mov dword [rsp + 0x70], 0x5a004e
mov dword [rsp + 0x74], 0x3c
nop dword [rax]
mov eax, edx
lea rcx, [rsp + 0x6c]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov esi, dword [rsp + 0x68]
cmp edx, esi
jb 0x14001dc00
mov word [rsp + rsi*2 + 0x6c], di
call fcn.14000fb60
mov rcx, rax
test rax, rax
je 0x14001e46b
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 8], rax
lea rax, [rsp + 0x6c]
cmp rax, 0x10000
lea rax, [rsp + 0x6c]
jae 0x14001dc5f
movzx edx, ax
lea rcx, [rbp + 8]
call fcn.14000c690
jmp 0x14001dc7c
mov r8, r14
inc r8
cmp word [rax + r8*2], 0
jne 0x14001dc62
lea rdx, [rsp + 0x6c]
lea rcx, [rbp + 8]
call fcn.14000c910
nop
mov rcx, r15
call fcn.14000c810
add rax, 0x18
mov qword [rbp + 0x150], rax
lea r8, [rbp + 8]
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x170]
call fcn.1400051f0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [0x1401a6c18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14001dd0c
cmp dword [rbx + 0x10], 0
jl 0x14001dcfb
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14001dcfb
call fcn.14000c810
mov rsi, rax
mov ecx, r14d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x14001dcee
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rsi + 0x18]
mov qword [0x1401a6c18], rax
jmp 0x14001dd0c
mov r8d, dword [rdx - 0x10]
lea rcx, [0x1401a6c18]
call fcn.14000c910
nop
mov rdx, qword [rbp + 0x170]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001dd2d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rdx, [0x14016b97a]
lea rcx, [0x1401a6c18]
call fcn.140009550
test al, al
jne 0x14001e476
mov eax, 2
mov dword [rbp - 0x80], eax
mov dword [rbp - 0x7c], 0x140015
mov dword [rbp - 0x78], 0x3a
mov edx, edi
test eax, eax
je 0x14001dd89
nop dword [rax]
nop dword [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x7c]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rbp - 0x80]
cmp edx, eax
jb 0x14001dd70
mov word [rbp + rax*2 - 0x7c], di
mov rcx, qword [0x1401a6c18]
cmp dword [rcx - 0x10], 0
jl 0x14001de62
lea rdx, [rbp - 0x7c]
call fcn.140120000
test rax, rax
je 0x14001de62
mov rcx, qword [0x1401a6c18]
sub rax, rcx
sar rax, 1
cmp eax, 0xffffffff
je 0x14001de62
mov r9d, dword [rcx - 0x10]
add r9d, 0xfffffffe
lea rdx, [rbp + 0x178]
call fcn.140029de0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [0x1401a6c18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14001de41
cmp dword [rbx + 0x10], 0
jl 0x14001de30
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14001de30
call fcn.14000c810
mov rsi, rax
mov ecx, r14d
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x14001de23
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [r8 + 8]
lea rax, [rsi + 0x18]
mov qword [0x1401a6c18], rax
jmp 0x14001de41
mov r8d, dword [rdx - 0x10]
lea rcx, [0x1401a6c18]
call fcn.14000c910
nop
mov rdx, qword [rbp + 0x178]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001de62
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov dword [rbp + 0x58], 0xd
mov dword [rbp + 0x5c], 0x4a001d
mov dword [rbp + 0x60], 0x5f0066
mov dword [rbp + 0x64], 0x4d0059
mov dword [rbp + 0x68], 0x4b0051
mov dword [rbp + 0x6c], 0x200023
mov dword [rbp + 0x70], 0x2b0021
mov dword [rbp + 0x74], 0x450021
mov edx, edi
nop dword [rax]
mov eax, edx
lea rcx, [rbp + 0x5c]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rbp + 0x58]
cmp edx, eax
jb 0x14001dea0
mov word [rbp + rax*2 + 0x5c], di
mov r8, qword [0x1401a6c08]
lea rdx, [rbp + 0x5c]
lea rcx, [rbp + 0x1b0]
call fcn.14000d1e0
mov edx, 2
lea rcx, [rbp + 0x1b0]
call fcn.140125278
test eax, eax
je 0x14001def9
xor edx, edx
lea rcx, [rbp + 0x1b0]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov dword [rbp + 0x18], 0xb
mov dword [rbp + 0x1c], 0x4a001d
mov dword [rbp + 0x20], 0x5a0066
mov dword [rbp + 0x24], 0x4d004c
mov dword [rbp + 0x28], 0x5e005d
mov dword [rbp + 0x2c], 0x290023
mov dword [rbp + 0x30], 0x430027
mov edx, edi
nop dword [rax]
mov eax, edx
lea rcx, [rbp + 0x1c]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rbp + 0x18]
cmp edx, eax
jb 0x14001df30
mov word [rbp + rax*2 + 0x1c], di
mov r8, qword [0x1401a6c08]
lea rdx, [rbp + 0x1c]
lea rcx, [rbp + 0x1b0]
call fcn.14000d1e0
mov edx, 2
lea rcx, [rbp + 0x1b0]
call fcn.140125278
test eax, eax
je 0x14001df89
xor edx, edx
lea rcx, [rbp + 0x1b0]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov dword [rbp - 0x40], 7
mov dword [rbp - 0x3c], 0x4a001d
mov dword [rbp - 0x38], 0x570066
mov dword [rbp - 0x34], 0x5a0053
mov dword [rbp - 0x30], 0x3f004d
mov r8d, edi
nop
mov eax, r8d
lea rcx, [rbp - 0x3c]
lea rcx, [rcx + rax*2]
lea eax, [r8 + 0x38]
xor word [rcx], ax
inc r8d
mov eax, dword [rbp - 0x40]
cmp r8d, eax
jb 0x14001dfb0
mov word [rbp + rax*2 - 0x3c], di
mov r8, qword [0x1401a6c08]
lea rdx, [rbp - 0x3c]
lea rcx, [rbp + 0x1b0]
call fcn.14000d1e0
mov edx, 2
lea rcx, [rbp + 0x1b0]
call fcn.140125278
test eax, eax
je 0x14001e00d
xor edx, edx
lea rcx, [rbp + 0x1b0]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov dword [rbp + 0x98], 0x17
mov dword [rbp + 0x9c], 0x4a001d
mov dword [rbp + 0xa0], 0x5a0066
mov dword [rbp + 0xa4], 0x4d004c
mov dword [rbp + 0xa8], 0x5e005d
mov dword [rbp + 0xac], 0x290023
mov dword [rbp + 0xb0], 0x1f0027
mov dword [rbp + 0xb4], 0x350025
mov dword [rbp + 0xb8], 0x2e0036
mov dword [rbp + 0xbc], 0x2f0026
mov dword [rbp + 0xc0], 0x650025
mov dword [rbp + 0xc4], 0x29003a
mov dword [rbp + 0xc8], 0x4f0028
mov edx, edi
nop dword [rax]
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp + 0x9c]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rbp + 0x98]
cmp edx, eax
jb 0x14001e0a0
mov word [rbp + rax*2 + 0x9c], di
mov r8, qword [0x1401a6c08]
lea rdx, [rbp + 0x9c]
lea rcx, [rbp + 0x1b0]
call fcn.14000d1e0
lea rcx, [rbp + 0x1b0]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
call fcn.140006300
nop
lea rcx, [rbp + 0x190]
call fcn.140010cc0
nop
lock xadd dword [r15 + 0x10], r14d
sub r14d, 1
jg 0x14001e119
mov rcx, qword [r15]
mov rax, qword [rcx]
mov rdx, r15
call qword [rax + 8]
mov al, 1
jmp 0x14001e40f
lea rax, [rbp + 0x10]
mov qword [rbp + 0x160], rax
mov dword [rsp + 0x40], 3
mov dword [rsp + 0x44], 0x4a0055
mov dword [rsp + 0x48], 0x3b005d
nop dword [rax]
nop word [rax + rax]
mov eax, edx
lea rcx, [rsp + 0x44]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rsp + 0x40]
cmp edx, eax
jb 0x14001e150
mov word [rsp + rax*2 + 0x44], di
call fcn.14000fb60
mov rcx, rax
test rax, rax
je 0x14001e4be
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x10], rax
lea rax, [rsp + 0x44]
cmp rax, 0x10000
lea rax, [rsp + 0x44]
jae 0x14001e1af
movzx edx, ax
lea rcx, [rbp + 0x10]
call fcn.14000c690
jmp 0x14001e1cc
mov r8, r14
inc r8
cmp word [rax + r8*2], 0
jne 0x14001e1b2
lea rdx, [rsp + 0x44]
lea rcx, [rbp + 0x10]
call fcn.14000c910
nop
mov rcx, r15
call fcn.14000c810
add rax, 0x18
mov qword [rbp + 0x158], rax
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x158]
lea rcx, [rbp + 0x180]
call fcn.1400051f0
mov r8, rax
mov dword [rbp - 0x50], 5
mov dword [rbp - 0x4c], 0x58005e
mov dword [rbp - 0x48], 0x480056
mov dword [rbp - 0x44], 0x3d0059
mov edx, edi
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp - 0x4c]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rbp - 0x50]
cmp edx, eax
jb 0x14001e220
mov word [rbp + rax*2 - 0x4c], di
mov rax, qword [r8]
lea rdx, [rbp - 0x4c]
sub rdx, rax
nop dword [rax + rax]
movzx ecx, word [rax]
cmp cx, word [rax + rdx]
jne 0x14001e266
add rax, 2
test cx, cx
jne 0x14001e250
mov ebx, edi
jmp 0x14001e26b
sbb ebx, ebx
or ebx, 1
mov rdx, qword [rbp + 0x180]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001e28c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
test ebx, ebx
jne 0x14001e31e
mov eax, edi
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x64], 0x38
mov word [rsp + rax*2 + 0x64], di
mov dword [rbp + 0x38], r12d
mov dword [rbp + 0x3c], 0x8faa8bcf
mov dword [rbp + 0x40], 0x6b58515f
mov dword [rbp + 0x44], 0x76b97852
mov dword [rbp + 0x48], 0x6d046ffe
mov dword [rbp + 0x4c], 0xff407841
mov dword [rbp + 0x50], 0x42
mov edx, edi
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp + 0x3c]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov r12d, dword [rbp + 0x38]
cmp edx, r12d
jb 0x14001e2e0
mov word [rbp + r12*2 + 0x3c], di
mov r9d, 0x40
lea r8, [rsp + 0x64]
lea rdx, [rbp + 0x3c]
mov rcx, qword [0x1401a6be0]
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
lea rcx, [rbp + 0x190]
call fcn.140010cc0
mov rbx, qword [rbp + 0x188]
jmp 0x14001e3cd
mov eax, 8
mov dword [rbp + 0x78], eax
mov dword [rbp + 0x7c], 0x6d026ff8
mov dword [rbp + 0x80], 0x9522783b
mov dword [rbp + 0x84], 0x1c8bd3
mov dword [rbp + 0x88], 0x1e001f
mov dword [rbp + 0x8c], 0x40
xor edi, edi
mov edx, edi
test eax, eax
je 0x14001e399
nop word [rax + rax]
mov eax, edx
lea rcx, [rbp + 0x7c]
lea rcx, [rcx + rax*2]
lea eax, [rdx + 0x38]
xor word [rcx], ax
inc edx
mov eax, dword [rbp + 0x78]
cmp edx, eax
jb 0x14001e380
mov word [rbp + rax*2 + 0x7c], di
mov eax, edi
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], 0x38
mov word [rsp + rax*2 + 0x54], di
mov r9d, 0x10
lea r8, [rsp + 0x54]
lea rdx, [rbp + 0x7c]
mov rcx, qword [0x1401a6be0]
call qword [sym.imp.USER32.dll_MessageBoxW]
mov edx, 1
mov rcx, qword [0x1401a6be8]
call qword [sym.imp.USER32.dll_EnableWindow]
lea rdx, [0x14016e144]
mov rcx, qword [0x1401a6be0]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop
lea rdx, [rbx - 0x18]
lock xadd dword [rdx + 0x10], r14d
sub r14d, 1
jg 0x14001e40d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor al, al
mov rcx, qword [rbp + 0x410]
xor rcx, rsp
call fcn.14011e030
lea r11, [rsp + 0x520]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x80004005
call fcn.14000fc90
nop
mov ecx, 0x80004005
call fcn.14000fc90
nop
mov ecx, 0x80070057
call fcn.14000fc90
int3
mov ecx, 0x80004005
call fcn.14000fc90
int3
mov ecx, 0x80004005
call fcn.14000fc90
int3
lea rdx, [rsp + 0x50]
call fcn.140004ea0
mov rcx, rax
call fcn.140007d80
mov r11, rax
lea rdx, [rbp + 0x78]
call fcn.14001e4d0
mov rcx, rax
call fcn.140007d80
mov rdx, rax
mov r9d, 0x40
mov r8, r11
mov rcx, qword [0x1401a6be0]
call qword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, r14d
call fcn.14012c640
int3
mov ecx, 0x80004005
call fcn.14000fc90
int3