Function at 0x140007210
Capabilities:
Create thread
Encode data using xor
Set console window title
Terminate process

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1c8]
sub rsp, 0x2a0
mov qword [rbp - 0x28], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x1400bc8f8]
xor rax, rsp
mov qword [rbp + 0x190], rax
xor edi, edi
mov dword [rbp - 0x30], edi
lea rcx, [rbp - 0x20]
call fcn.140002380
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x14000729b
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007296
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007296
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140008188
lea rcx, [rbp - 0x20]
call fcn.140002860
lea rcx, [rbp - 0x20]
call fcn.140002f80
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
mov ebx, edi
mov r14, 0xffffffffffffffff
movabs r12, 0x842108421084211
lea r15, [0x1400bc6c0]
nop dword [rax + rax]
movdqa xmm0, xmmword [0x14000b4a0]
movdqu xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [0x14000b4e0]
movdqu xmmword [rsp + 0x60], xmm1
mov dword [rsp + 0x70], 0x35343b3a
mov word [rsp + 0x74], 0x36
mov rax, rdi
nop
movzx ecx, byte [rsp + 0x50]
xor byte [rsp + rax + 0x51], cl
movzx ecx, byte [rsp + 0x50]
xor byte [rsp + rax + 0x52], cl
add rax, 2
cmp rax, 0x24
jb 0x140007310
mov byte [rsp + 0x75], dil
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], dil
lea rax, [rsp + 0x51]
mov r8, r14
nop dword [rax]
inc r8
cmp byte [rax + r8], dil
jne 0x140007350
lea rdx, [rsp + 0x51]
lea rcx, [rbp - 0x20]
call fcn.140005340
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
and r8d, 0x1f
mov rax, r12
mul r8
mov ecx, r8d
sub rcx, rdx
shr rcx, 1
add rcx, rdx
shr rcx, 4
imul rcx, rcx, 0x1f
sub r8, rcx
lea rax, [rbp - 0x20]
mov rcx, qword [rbp - 0x20]
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
cmovae rax, rcx
movzx esi, byte [rax + r8 + 1]
jb 0x1400073da
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400073d5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075ed
call fcn.140008188
mov rcx, qword [0x1400bc6d0]
mov rdx, qword [0x1400bc6d8]
cmp rcx, rdx
jae 0x140007412
lea rax, [rcx + 1]
mov qword [0x1400bc6d0], rax
mov rax, r15
cmp rdx, 0x10
cmovae rax, qword [0x1400bc6c0]
mov byte [rax + rcx], sil
mov byte [rax + rcx + 1], dil
jmp 0x140007425
movzx r9d, sil
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, r15
call fcn.140001c40
inc ebx
cmp ebx, 0xa
jb 0x1400072e0
mov rcx, r15
cmp qword [0x1400bc6d8], 0x10
cmovae rcx, qword [0x1400bc6c0]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, [rbp - 0x20]
call fcn.140002860
lea rcx, [rbp - 0x20]
call fcn.140002f80
mov dword [0x1400cb69c], 0x4f
lea rcx, [rbp - 0x20]
call fcn.140002860
lea rcx, [rbp - 0x20]
call fcn.140002f80
movdqa xmm0, xmmword [0x14000b490]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [0x14000b4b0]
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmm0, xmmword [0x14000b4c0]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x14000b4d0]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmm0, xmmword [0x14000b460]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x14000b480]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [0x14000b4f0]
movdqa xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x2a2738
mov rcx, rdi
nop
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x51], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x52], al
add rcx, 2
cmp rcx, 0x72
jb 0x1400074e0
mov byte [rbp - 0x3d], dil
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], dil
lea rax, [rsp + 0x51]
mov r8, r14
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], dil
jne 0x140007520
lea rdx, [rsp + 0x51]
lea rcx, [rbp - 0x20]
call fcn.140005340
nop
mov byte [rsp + 0x40], 0x4c
mov al, 0x10
movzx ecx, al
mov dl, 0x62
movzx r8d, al
xor r9d, r9d
xor al, 0x4c
mov byte [rsp + 0x41], al
xor cl, 0x4c
mov byte [rsp + 0x42], cl
xor dl, 0x4c
mov byte [rsp + 0x43], dl
xor r8b, 0x4c
mov byte [rsp + 0x44], r8b
mov byte [rsp + 0x45], r9b
movdqa xmm0, xmmword [0x14000b420]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], r9b
mov dword [rbp - 0x30], 1
lea rax, [rsp + 0x41]
mov rsi, r14
nop
inc rsi
cmp byte [rax + rsi], 0
jne 0x140007590
mov r12, qword [rbp - 0x10]
lea rdx, [r12 + rsi]
cmp rdx, 0x10
jb 0x1400075b9
xor r8d, r8d
lea rcx, [rsp + 0x50]
call fcn.140001f30
mov qword [rsp + 0x60], rdi
mov rax, qword [rsp + 0x68]
cmp rsi, rax
ja 0x1400075f4
mov qword [rsp + 0x60], rsi
lea rbx, [rsp + 0x50]
cmp rax, 0x10
cmovae rbx, qword [rsp + 0x50]
mov r8, rsi
lea rdx, [rsp + 0x41]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rsi], 0
jmp 0x14000760e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x41]
xor r8d, r8d
mov rdx, rsi
lea rcx, [rsp + 0x50]
call fcn.140001da0
lea r9, [rbp - 0x20]
mov r13, qword [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae r9, r13
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
mov rax, rdx
sub rax, rcx
cmp r12, rax
ja 0x140007664
lea rax, [rcx + r12]
mov qword [rsp + 0x60], rax
lea rbx, [rsp + 0x50]
cmp rdx, 0x10
cmovae rbx, qword [rsp + 0x50]
add rbx, rcx
mov r8, r12
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + r12], 0
jmp 0x14000767d
mov qword [rsp + 0x20], r12
xor r8d, r8d
mov rdx, r12
lea rcx, [rsp + 0x50]
call fcn.140001da0
mov r13, qword [rbp - 0x20]
lea rcx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae rcx, qword [rsp + 0x50]
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x40000000
lea r8d, [r9 + 2]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x1400cb690], rax
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x1400076ff
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400076f3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400076f3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140008188
mov rax, qword [0x1400cb690]
cmp rax, 0xffffffffffffffff
jne 0x1400078cd
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x140003180]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
movdqa xmm1, xmmword [0x14000b540]
movdqu xmmword [rbp - 0x20], xmm1
movdqa xmm2, xmmword [0x14000b560]
movdqu xmmword [rbp - 0x10], xmm2
movdqa xmm3, xmmword [0x14000b440]
movdqu xmmword [rbp], xmm3
mov cl, 0x29
mov dl, 0x3f
mov r8b, 0x38
mov r10b, 0x2d
mov r11b, 0x3e
movzx ebx, r8b
mov dil, 0x6c
mov sil, 0x1c
mov r14b, 0xf
movzx r15d, dil
mov r12b, 0x6d
movzx r13d, r12b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r9d, xmm1
xor al, r9b
mov byte [rbp - 0x1f], al
xor byte [rbp - 0x1e], r9b
xor byte [rbp - 0x1d], r9b
xor byte [rbp - 0x1c], r9b
xor byte [rbp - 0x1b], r9b
xor byte [rbp - 0x1a], r9b
xor byte [rbp - 0x19], r9b
xor byte [rbp - 0x18], r9b
xor byte [rbp - 0x17], r9b
xor byte [rbp - 0x16], r9b
xor byte [rbp - 0x15], r9b
xor byte [rbp - 0x14], r9b
xor byte [rbp - 0x13], r9b
xor byte [rbp - 0x12], r9b
xor byte [rbp - 0x11], r9b
movd eax, xmm2
xor al, r9b
mov byte [rbp - 0x10], al
xor byte [rbp - 0xf], r9b
xor byte [rbp - 0xe], r9b
xor byte [rbp - 0xd], r9b
xor byte [rbp - 0xc], r9b
xor byte [rbp - 0xb], r9b
xor byte [rbp - 0xa], r9b
xor byte [rbp - 9], r9b
xor byte [rbp - 8], r9b
xor byte [rbp - 7], r9b
xor byte [rbp - 6], r9b
xor byte [rbp - 5], r9b
xor byte [rbp - 4], r9b
xor byte [rbp - 3], r9b
xor byte [rbp - 2], r9b
xor byte [rbp - 1], r9b
movd eax, xmm3
xor al, r9b
mov byte [rbp], al
xor byte [rbp + 1], r9b
xor byte [rbp + 2], r9b
xor byte [rbp + 3], r9b
xor byte [rbp + 4], r9b
xor byte [rbp + 5], r9b
xor byte [rbp + 6], r9b
xor byte [rbp + 7], r9b
xor byte [rbp + 8], r9b
xor byte [rbp + 9], r9b
xor byte [rbp + 0xa], r9b
xor byte [rbp + 0xb], r9b
xor byte [rbp + 0xc], r9b
xor byte [rbp + 0xd], r9b
xor byte [rbp + 0xe], r9b
xor byte [rbp + 0xf], r9b
xor cl, r9b
mov byte [rbp + 0x10], cl
xor dl, r9b
mov byte [rbp + 0x11], dl
xor r8b, r9b
mov byte [rbp + 0x12], r8b
xor r10b, r9b
mov byte [rbp + 0x13], r10b
xor r11b, r9b
mov byte [rbp + 0x14], r11b
xor bl, r9b
mov byte [rbp + 0x15], bl
xor dil, r9b
mov byte [rbp + 0x16], dil
xor sil, r9b
mov byte [rbp + 0x17], sil
xor r14b, r9b
mov byte [rbp + 0x18], r14b
xor r15b, r9b
mov byte [rbp + 0x19], r15b
xor r12b, r9b
mov byte [rbp + 0x1a], r12b
xor r13b, r9b
mov byte [rbp + 0x1b], r13b
mov byte [rbp + 0x1c], 0
lea rcx, [0x1400bc6c0]
call fcn.140005890
mov r8, rax
mov r9d, 0x10
lea rdx, [rbp - 0x1f]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [rsp + 0x50]
call fcn.140002380
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140007916
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007911
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007911
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140008188
lea rcx, [rsp + 0x50]
call fcn.140002380
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x14000795f
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000795a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000795a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140008188
lea rcx, [rsp + 0x50]
call fcn.140002380
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x1400079a8
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400079a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400079a3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140008188
lea rcx, [rsp + 0x50]
call fcn.140002380
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x1400079f1
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400079ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400079ec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140008188
lea rcx, [rsp + 0x50]
call fcn.140002380
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140007a3a
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007a35
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007a35
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140008188
lea rcx, [rsp + 0x50]
call fcn.140002380
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140007a83
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007a7e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007a7e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140008188
lea rcx, [rsp + 0x50]
call fcn.140002860
lea rcx, [rsp + 0x50]
call fcn.140002f80
mov ecx, 0xa
call fcn.140004870
mov byte [rsp + 0x40], 0x4c
mov al, 0xac
mov cl, 0x89
mov dl, 0xa4
mov r8b, 0xf5
xor r9d, r9d
xor al, 0x4c
mov byte [rsp + 0x41], al
xor cl, 0x4c
mov byte [rsp + 0x42], cl
xor dl, 0x4c
mov byte [rsp + 0x43], dl
xor r8b, 0x4c
mov byte [rsp + 0x44], r8b
mov byte [rsp + 0x45], r9b
lea rdx, [rsp + 0x41]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001140
mov rcx, rax
lea rdx, [0x140002230]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x50]
call fcn.140002860
lea rcx, [rsp + 0x50]
call fcn.140002f80
mov ecx, 0x7270e0
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
cmp qword [0x1400bc6d8], 0x10
cmovae r15, qword [0x1400bc6c0]
movdqa xmm0, xmmword [0x14000b570]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [0x14000b550]
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmm0, xmmword [0x14000b450]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x14000b520]
movdqa xmmword [rbp - 0x80], xmm1
mov word [rbp - 0x70], 0x6d
mov rcx, rdi
nop word [rax + rax]
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x51], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x52], al
add rcx, 2
cmp rcx, 0x40
jb 0x140007b70
mov byte [rbp - 0x6f], 0
mov r9d, 0x40
mov r8, r15
lea rdx, [rsp + 0x51]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea r15, [0x140024680]
cmp dword [0x1400cb69c], 0x4f
cmovne r15, rbx
lea rcx, [rsp + 0x50]
call fcn.140002860
lea rcx, [rsp + 0x50]
call fcn.140002f80
movdqa xmm0, xmmword [0x14000b530]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x29251a6c
mov dword [rsp + 0x64], 0x212d2238
xor eax, eax
mov byte [rsp + 0x68], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rdi + 0x51], al
inc rdi
cmp rdi, 0x17
jb 0x140007bf0
mov byte [rsp + 0x68], 0
lea rax, [rsp + 0x51]
mov r8, r14
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140007c10
lea rdx, [rsp + 0x51]
lea rbx, [0x1400bc6a0]
mov rcx, rbx
call fcn.140005340
mov byte [0x1400bca0a], 1
cmp dword [0x1400cb61c], 0
jne 0x140007d04
lea rdi, [0x1400bc680]
nop dword [rax]
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x1400bca0a], 0
je 0x140007cad
cmp byte [0x140024607], 0
je 0x140007cf7
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdx, rbx
cmp qword [0x1400bc6b8], 0x10
cmovae rdx, qword [0x1400bc6a0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
lea rdx, [0x1400cb61c]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
test eax, eax
je 0x140007c64
jmp 0x140007cf0
cmp byte [0x140024607], 0
je 0x140007cf7
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
cmp qword [0x1400bc698], 0x10
cmovae rcx, qword [0x1400bc680]
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowA]
lea rdx, [0x1400cb61c]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
test eax, eax
je 0x140007cad
mov byte [0x140024607], 0
cmp dword [0x1400cb61c], 0
je 0x140007c50
lea rcx, [rsp + 0x50]
call fcn.140002860
lea rcx, [rsp + 0x50]
call fcn.140002f80
lea rcx, [rsp + 0x50]
call fcn.140002860
lea rcx, [rsp + 0x50]
call fcn.140002f80
lea rcx, [rsp + 0x50]
call fcn.140002860
lea rcx, [rsp + 0x50]
call fcn.140002f80
mov eax, dword [0x1400cb61c]
mov dword [0x1400cb654], eax
call fcn.1400031a0
mov rsi, rax
lea rcx, [rsp + 0x50]
call fcn.140002860
lea rcx, [rsp + 0x50]
call fcn.140002f80
mov byte [rsp + 0x40], 0x4c
mov cl, 0x28
mov dl, 0x7f
movzx r8d, cl
mov r9b, 0x7d
mov r10b, 0x7c
mov r11b, 0x62
movzx ebx, cl
mov dil, 0x20
movzx eax, dil
xor r12d, r12d
xor cl, 0x4c
mov byte [rsp + 0x41], cl
xor dl, 0x4c
mov byte [rsp + 0x42], dl
xor r8b, 0x4c
mov byte [rsp + 0x43], r8b
xor r9b, 0x4c
mov byte [rsp + 0x44], r9b
xor r10b, 0x4c
mov byte [rsp + 0x45], r10b
xor r11b, 0x4c
mov byte [rsp + 0x46], r11b
xor bl, 0x4c
mov byte [rsp + 0x47], bl
xor dil, 0x4c
mov byte [rsp + 0x48], dil
xor al, 0x4c
mov byte [rsp + 0x49], al
mov byte [rsp + 0x4a], r12b
xor r9d, r9d
mov r8, rsi
mov rdx, r15
lea rcx, [rsp + 0x41]
call fcn.140004030
lea rcx, [rsp + 0x50]
call fcn.140002860
lea rcx, [rsp + 0x50]
call fcn.140002f80
mov rcx, qword [0x1400cb690]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x50]
call fcn.140002860
lea rcx, [rsp + 0x50]
call fcn.140002f80
mov r8d, 0x104
lea rdx, [rbp + 0x80]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
movdqa xmm0, xmmword [0x14000b420]
movdqu xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x60], r12b
mov byte [rsp + 0x40], 0x4c
mov al, 0x3f
mov cl, 0x2f
mov dl, 0x6c
movzx r8d, al
mov r9b, 0x38
mov r10b, 0x23
mov r11b, 0x3c
movzx ebx, dl
xor edi, edi
xor al, 0x4c
mov byte [rsp + 0x41], al
xor cl, 0x4c
mov byte [rsp + 0x42], cl
xor dl, 0x4c
mov byte [rsp + 0x43], dl
xor r8b, 0x4c
mov byte [rsp + 0x44], r8b
xor r9b, 0x4c
mov byte [rsp + 0x45], r9b
xor r10b, 0x4c
mov byte [rsp + 0x46], r10b
xor r11b, 0x4c
mov byte [rsp + 0x47], r11b
xor bl, 0x4c
mov byte [rsp + 0x48], bl
mov byte [rsp + 0x49], dil
lea rax, [rsp + 0x41]
mov r8, r14
mov r12, qword [rbp - 0x10]
inc r8
cmp byte [rax + r8], dil
jne 0x140007eb3
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0x60]
call fcn.1400052b0
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rdx, r13
mov r8, r12
lea rcx, [rbp + 0x60]
call fcn.1400052b0
movdqa xmm0, xmmword [0x14000b420]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], dil
mov byte [rsp + 0x40], 0x4c
mov al, 0x3f
mov cl, 0x2f
mov dl, 0x6c
mov r8b, 0x28
mov r9b, 0x29
mov r10b, 0x20
movzx r11d, r9b
mov bl, 0x38
movzx edi, r9b
movzx esi, dl
xor r15d, r15d
xor al, 0x4c
mov byte [rsp + 0x41], al
xor cl, 0x4c
mov byte [rsp + 0x42], cl
xor dl, 0x4c
mov byte [rsp + 0x43], dl
xor r8b, 0x4c
mov byte [rsp + 0x44], r8b
xor r9b, 0x4c
mov byte [rsp + 0x45], r9b
xor r10b, 0x4c
mov byte [rsp + 0x46], r10b
xor r11b, 0x4c
mov byte [rsp + 0x47], r11b
xor bl, 0x4c
mov byte [rsp + 0x48], bl
xor dil, 0x4c
mov byte [rsp + 0x49], dil
xor sil, 0x4c
mov byte [rsp + 0x4a], sil
mov byte [rsp + 0x4b], r15b
lea rax, [rsp + 0x41]
inc r14
cmp byte [rax + r14], r15b
jne 0x140007f73
mov r8, r14
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0x40]
call fcn.1400052b0
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rdx, qword [rbp - 0x20]
mov r8, qword [rbp - 0x10]
lea rcx, [rbp + 0x40]
call fcn.1400052b0
lea rcx, [rbp + 0x60]
cmp qword [rbp + 0x78], 0x10
cmovae rcx, qword [rbp + 0x60]
call fcn.1400047d0
lea rcx, [rbp + 0x40]
cmp qword [rbp + 0x58], 0x10
cmovae rcx, qword [rbp + 0x40]
call fcn.1400047d0
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140008029
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008024
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008024
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140008188
movdqa xmm0, xmmword [0x14000b420]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x140008078
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008073
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008073
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140008188
movdqa xmm0, xmmword [0x14000b420]
movdqu xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x60], 0
mov r8, qword [rbp - 8]
cmp r8, 0x10
jb 0x1400080a3
inc r8
mov rdx, qword [rbp - 0x20]
lea rcx, [rbp - 0x20]
call fcn.140005b60
xor eax, eax
mov rcx, qword [rbp + 0x190]
xor rcx, rsp
call fcn.1400085d0
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret