Function at 0x140008410
Capabilities:
Create thread
Encode data using xor
Set console window title
Terminate process

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1c8]
sub rsp, 0x2a0
mov qword [rbp - 0x28], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x1400b14f8]
xor rax, rsp
mov qword [rbp + 0x190], rax
xor edi, edi
mov dword [rbp - 0x30], edi
lea rcx, [rbp - 0x20]
call fcn.140002380
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x14000849b
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008496
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008496
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140009380
lea rcx, [rbp - 0x20]
call fcn.140002860
lea rcx, [rbp - 0x20]
call fcn.140002f80
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
mov ebx, edi
mov r14, 0xffffffffffffffff
movabs r12, 0x842108421084211
lea r15, [0x1400b12c0]
nop dword [rax + rax]
movdqa xmm0, xmmword [0x14000c530]
movdqu xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [0x14000c4b0]
movdqu xmmword [rsp + 0x60], xmm1
mov dword [rsp + 0x70], 0x41404f4e
mov word [rsp + 0x74], 0x42
mov rax, rdi
nop
movzx ecx, byte [rsp + 0x50]
xor byte [rsp + rax + 0x51], cl
movzx ecx, byte [rsp + 0x50]
xor byte [rsp + rax + 0x52], cl
add rax, 2
cmp rax, 0x24
jb 0x140008510
mov byte [rsp + 0x75], dil
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], dil
lea rax, [rsp + 0x51]
mov r8, r14
nop dword [rax]
inc r8
cmp byte [rax + r8], dil
jne 0x140008550
lea rdx, [rsp + 0x51]
lea rcx, [rbp - 0x20]
call fcn.140006580
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
and r8d, 0x1f
mov rax, r12
mul r8
mov ecx, r8d
sub rcx, rdx
shr rcx, 1
add rcx, rdx
shr rcx, 4
imul rcx, rcx, 0x1f
sub r8, rcx
lea rax, [rbp - 0x20]
mov rcx, qword [rbp - 0x20]
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
cmovae rax, rcx
movzx esi, byte [rax + r8 + 1]
jb 0x1400085da
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400085d5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400087ed
call fcn.140009380
mov rcx, qword [0x1400b12d0]
mov rdx, qword [0x1400b12d8]
cmp rcx, rdx
jae 0x140008612
lea rax, [rcx + 1]
mov qword [0x1400b12d0], rax
mov rax, r15
cmp rdx, 0x10
cmovae rax, qword [0x1400b12c0]
mov byte [rax + rcx], sil
mov byte [rax + rcx + 1], dil
jmp 0x140008625
movzx r9d, sil
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, r15
call fcn.140001c40
inc ebx
cmp ebx, 0xa
jb 0x1400084e0
mov rcx, r15
cmp qword [0x1400b12d8], 0x10
cmovae rcx, qword [0x1400b12c0]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, [rbp - 0x20]
call fcn.140002860
lea rcx, [rbp - 0x20]
call fcn.140002f80
mov dword [0x1400c029c], 0x31
lea rcx, [rbp - 0x20]
call fcn.140002860
lea rcx, [rbp - 0x20]
call fcn.140002f80
movdqa xmm0, xmmword [0x14000c520]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [0x14000c540]
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmm0, xmmword [0x14000c490]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x14000c4a0]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmm0, xmmword [0x14000c4e0]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x14000c510]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [0x14000c480]
movdqa xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x5e534c
mov rcx, rdi
nop
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x51], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rcx + 0x52], al
add rcx, 2
cmp rcx, 0x72
jb 0x1400086e0
mov byte [rbp - 0x3d], dil
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], dil
lea rax, [rsp + 0x51]
mov r8, r14
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], dil
jne 0x140008720
lea rdx, [rsp + 0x51]
lea rcx, [rbp - 0x20]
call fcn.140006580
nop
mov byte [rsp + 0x40], 0x38
mov al, 0x64
movzx ecx, al
mov dl, 0x16
movzx r8d, al
xor r9d, r9d
xor al, 0x38
mov byte [rsp + 0x41], al
xor cl, 0x38
mov byte [rsp + 0x42], cl
xor dl, 0x38
mov byte [rsp + 0x43], dl
xor r8b, 0x38
mov byte [rsp + 0x44], r8b
mov byte [rsp + 0x45], r9b
movdqa xmm0, xmmword [0x14000c420]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], r9b
mov dword [rbp - 0x30], 1
lea rax, [rsp + 0x41]
mov rsi, r14
nop
inc rsi
cmp byte [rax + rsi], 0
jne 0x140008790
mov r12, qword [rbp - 0x10]
lea rdx, [rsi + r12]
cmp rdx, 0x10
jb 0x1400087b9
xor r8d, r8d
lea rcx, [rsp + 0x50]
call fcn.140001f30
mov qword [rsp + 0x60], rdi
mov rax, qword [rsp + 0x68]
cmp rsi, rax
ja 0x1400087f4
mov qword [rsp + 0x60], rsi
lea rbx, [rsp + 0x50]
cmp rax, 0x10
cmovae rbx, qword [rsp + 0x50]
mov r8, rsi
lea rdx, [rsp + 0x41]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rsi], 0
jmp 0x14000880e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x41]
xor r8d, r8d
mov rdx, rsi
lea rcx, [rsp + 0x50]
call fcn.140001da0
lea r9, [rbp - 0x20]
mov r13, qword [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae r9, r13
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
mov rax, rdx
sub rax, rcx
cmp r12, rax
ja 0x140008864
lea rax, [rcx + r12]
mov qword [rsp + 0x60], rax
lea rbx, [rsp + 0x50]
cmp rdx, 0x10
cmovae rbx, qword [rsp + 0x50]
add rbx, rcx
mov r8, r12
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + r12], 0
jmp 0x14000887d
mov qword [rsp + 0x20], r12
xor r8d, r8d
mov rdx, r12
lea rcx, [rsp + 0x50]
call fcn.140001da0
mov r13, qword [rbp - 0x20]
lea rcx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae rcx, qword [rsp + 0x50]
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x40000000
lea r8d, [r9 + 2]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x1400c0290], rax
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x1400088ff
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400088f3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400088f3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140009380
mov rax, qword [0x1400c0290]
cmp rax, 0xffffffffffffffff
jne 0x140008acd
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x140003180]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
movdqa xmm1, xmmword [0x14000c5a0]
movdqu xmmword [rbp - 0x20], xmm1
movdqa xmm2, xmmword [0x14000c570]
movdqu xmmword [rbp - 0x10], xmm2
movdqa xmm3, xmmword [0x14000c550]
movdqu xmmword [rbp], xmm3
mov cl, 0x5d
mov dl, 0x4b
mov r8b, 0x4c
mov r10b, 0x59
mov r11b, 0x4a
movzx ebx, r8b
mov dil, 0x18
mov sil, 0x68
mov r14b, 0x7b
movzx r15d, dil
mov r12b, 0x19
movzx r13d, r12b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r9d, xmm1
xor al, r9b
mov byte [rbp - 0x1f], al
xor byte [rbp - 0x1e], r9b
xor byte [rbp - 0x1d], r9b
xor byte [rbp - 0x1c], r9b
xor byte [rbp - 0x1b], r9b
xor byte [rbp - 0x1a], r9b
xor byte [rbp - 0x19], r9b
xor byte [rbp - 0x18], r9b
xor byte [rbp - 0x17], r9b
xor byte [rbp - 0x16], r9b
xor byte [rbp - 0x15], r9b
xor byte [rbp - 0x14], r9b
xor byte [rbp - 0x13], r9b
xor byte [rbp - 0x12], r9b
xor byte [rbp - 0x11], r9b
movd eax, xmm2
xor al, r9b
mov byte [rbp - 0x10], al
xor byte [rbp - 0xf], r9b
xor byte [rbp - 0xe], r9b
xor byte [rbp - 0xd], r9b
xor byte [rbp - 0xc], r9b
xor byte [rbp - 0xb], r9b
xor byte [rbp - 0xa], r9b
xor byte [rbp - 9], r9b
xor byte [rbp - 8], r9b
xor byte [rbp - 7], r9b
xor byte [rbp - 6], r9b
xor byte [rbp - 5], r9b
xor byte [rbp - 4], r9b
xor byte [rbp - 3], r9b
xor byte [rbp - 2], r9b
xor byte [rbp - 1], r9b
movd eax, xmm3
xor al, r9b
mov byte [rbp], al
xor byte [rbp + 1], r9b
xor byte [rbp + 2], r9b
xor byte [rbp + 3], r9b
xor byte [rbp + 4], r9b
xor byte [rbp + 5], r9b
xor byte [rbp + 6], r9b
xor byte [rbp + 7], r9b
xor byte [rbp + 8], r9b
xor byte [rbp + 9], r9b
xor byte [rbp + 0xa], r9b
xor byte [rbp + 0xb], r9b
xor byte [rbp + 0xc], r9b
xor byte [rbp + 0xd], r9b
xor byte [rbp + 0xe], r9b
xor byte [rbp + 0xf], r9b
xor cl, r9b
mov byte [rbp + 0x10], cl
xor dl, r9b
mov byte [rbp + 0x11], dl
xor r8b, r9b
mov byte [rbp + 0x12], r8b
xor r10b, r9b
mov byte [rbp + 0x13], r10b
xor r11b, r9b
mov byte [rbp + 0x14], r11b
xor bl, r9b
mov byte [rbp + 0x15], bl
xor dil, r9b
mov byte [rbp + 0x16], dil
xor sil, r9b
mov byte [rbp + 0x17], sil
xor r14b, r9b
mov byte [rbp + 0x18], r14b
xor r15b, r9b
mov byte [rbp + 0x19], r15b
xor r12b, r9b
mov byte [rbp + 0x1a], r12b
xor r13b, r9b
mov byte [rbp + 0x1b], r13b
mov byte [rbp + 0x1c], 0
lea rcx, [0x1400b12c0]
call fcn.140006ad0
mov r8, rax
mov r9d, 0x40010
lea rdx, [rbp - 0x1f]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [rsp + 0x50]
call fcn.140002380
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140008b16
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008b11
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008b11
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140009380
lea rcx, [rsp + 0x50]
call fcn.140002380
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140008b5f
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008b5a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008b5a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140009380
lea rcx, [rsp + 0x50]
call fcn.140002380
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140008ba8
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008ba3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008ba3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140009380
lea rcx, [rsp + 0x50]
call fcn.140002380
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140008bf1
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008bec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008bec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140009380
lea rcx, [rsp + 0x50]
call fcn.140002380
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140008c3a
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008c35
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008c35
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140009380
lea rcx, [rsp + 0x50]
call fcn.140002380
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140008c83
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008c7e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008c7e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140009380
lea rcx, [rsp + 0x50]
call fcn.140002860
lea rcx, [rsp + 0x50]
call fcn.140002f80
mov ecx, 0xa
call fcn.140005ab0
mov byte [rsp + 0x40], 0x38
mov al, 0xd8
mov cl, 0xfd
mov dl, 0xd0
mov r8b, 0x81
xor r9d, r9d
xor al, 0x38
mov byte [rsp + 0x41], al
xor cl, 0x38
mov byte [rsp + 0x42], cl
xor dl, 0x38
mov byte [rsp + 0x43], dl
xor r8b, 0x38
mov byte [rsp + 0x44], r8b
mov byte [rsp + 0x45], r9b
lea rdx, [rsp + 0x41]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001140
mov rcx, rax
lea rdx, [0x140002230]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x50]
call fcn.140002860
lea rcx, [rsp + 0x50]
call fcn.140002f80
mov ecx, 0x7270e0
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsp + 0x40], rax
cmp qword [0x1400b12d8], 0x10
cmovae r15, qword [0x1400b12c0]
movdqa xmm0, xmmword [0x14000c590]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [0x14000c580]
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmm0, xmmword [0x14000c4f0]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x14000c450]
movdqa xmmword [rbp - 0x80], xmm1
mov word [rbp - 0x70], 0x19
nop word [rax + rax]
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rdi + 0x51], al
movzx eax, byte [rsp + 0x50]
xor byte [rsp + rdi + 0x52], al
add rdi, 2
cmp rdi, 0x40
jb 0x140008d70
mov byte [rbp - 0x6f], 0
mov r9d, 0x40040
mov r8, r15
lea rdx, [rsp + 0x51]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
movsxd rax, dword [0x1400c029c]
cmp eax, 0x31
jne 0x140008dbb
lea r15, [0x140025680]
jmp 0x140008ddc
mov r15, qword [rsp + 0x40]
cmp eax, 0x37
ja 0x140008ddc
movabs rcx, 0x84002000000000
bt rcx, rax
jae 0x140008ddc
mov byte [0x1400b160a], 1
lea rcx, [rsp + 0x50]
call fcn.140002860
lea rcx, [rsp + 0x50]
call fcn.140002f80
call fcn.1400031a0
lea rcx, [rsp + 0x50]
call fcn.140002860
lea rcx, [rsp + 0x50]
call fcn.140002f80
cmp dword [0x1400c021c], 0
jne 0x140008ed8
lea rbx, [0x1400b12a0]
lea rdi, [0x1400b1280]
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x1400b160a], 0
je 0x140008e81
cmp byte [0x140025607], 0
je 0x140008ecb
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdx, rbx
cmp qword [0x1400b12b8], 0x10
cmovae rdx, qword [0x1400b12a0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
lea rdx, [0x1400c021c]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
test eax, eax
je 0x140008e38
jmp 0x140008ec4
cmp byte [0x140025607], 0
je 0x140008ecb
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
cmp qword [0x1400b1298], 0x10
cmovae rcx, qword [0x1400b1280]
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowA]
lea rdx, [0x1400c021c]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
test eax, eax
je 0x140008e81
mov byte [0x140025607], 0
cmp dword [0x1400c021c], 0
je 0x140008e24
lea rcx, [rsp + 0x50]
call fcn.140002860
lea rcx, [rsp + 0x50]
call fcn.140002f80
lea rcx, [rsp + 0x50]
call fcn.140002860
lea rcx, [rsp + 0x50]
call fcn.140002f80
lea rcx, [rsp + 0x50]
call fcn.140002860
lea rcx, [rsp + 0x50]
call fcn.140002f80
mov eax, dword [0x1400c021c]
mov dword [0x1400c0254], eax
call fcn.1400043e0
mov rsi, rax
lea rcx, [rsp + 0x50]
call fcn.140002860
lea rcx, [rsp + 0x50]
call fcn.140002f80
mov byte [rsp + 0x40], 0x38
mov cl, 0x5c
mov dl, 0xb
movzx r8d, cl
mov r9b, 9
mov r10b, 8
mov r11b, 0x16
movzx ebx, cl
mov dil, 0x54
movzx eax, dil
xor r12d, r12d
xor cl, 0x38
mov byte [rsp + 0x41], cl
xor dl, 0x38
mov byte [rsp + 0x42], dl
xor r8b, 0x38
mov byte [rsp + 0x43], r8b
xor r9b, 0x38
mov byte [rsp + 0x44], r9b
xor r10b, 0x38
mov byte [rsp + 0x45], r10b
xor r11b, 0x38
mov byte [rsp + 0x46], r11b
xor bl, 0x38
mov byte [rsp + 0x47], bl
xor dil, 0x38
mov byte [rsp + 0x48], dil
xor al, 0x38
mov byte [rsp + 0x49], al
mov byte [rsp + 0x4a], r12b
xor r9d, r9d
mov r8, rsi
mov rdx, r15
lea rcx, [rsp + 0x41]
call fcn.140005270
lea rcx, [rsp + 0x50]
call fcn.140002860
lea rcx, [rsp + 0x50]
call fcn.140002f80
mov rcx, qword [0x1400c0290]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x50]
call fcn.140002860
lea rcx, [rsp + 0x50]
call fcn.140002f80
mov r8d, 0x104
lea rdx, [rbp + 0x80]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
movdqa xmm0, xmmword [0x14000c420]
movdqu xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x60], r12b
mov byte [rsp + 0x40], 0x38
mov al, 0x4b
mov cl, 0x5b
mov dl, 0x18
movzx r8d, al
mov r9b, 0x4c
mov r10b, 0x57
mov r11b, 0x48
movzx ebx, dl
xor edi, edi
xor al, 0x38
mov byte [rsp + 0x41], al
xor cl, 0x38
mov byte [rsp + 0x42], cl
xor dl, 0x38
mov byte [rsp + 0x43], dl
xor r8b, 0x38
mov byte [rsp + 0x44], r8b
xor r9b, 0x38
mov byte [rsp + 0x45], r9b
xor r10b, 0x38
mov byte [rsp + 0x46], r10b
xor r11b, 0x38
mov byte [rsp + 0x47], r11b
xor bl, 0x38
mov byte [rsp + 0x48], bl
mov byte [rsp + 0x49], dil
lea rax, [rsp + 0x41]
mov r8, r14
mov r12, qword [rbp - 0x10]
inc r8
cmp byte [rax + r8], dil
jne 0x140009087
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0x60]
call fcn.1400064f0
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rdx, r13
mov r8, r12
lea rcx, [rbp + 0x60]
call fcn.1400064f0
movdqa xmm0, xmmword [0x14000c420]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], dil
mov byte [rsp + 0x40], 0x38
mov al, 0x4b
mov cl, 0x5b
mov dl, 0x18
mov r8b, 0x5c
mov r9b, 0x5d
mov r10b, 0x54
movzx r11d, r9b
mov bl, 0x4c
movzx edi, r9b
movzx esi, dl
xor r15d, r15d
xor al, 0x38
mov byte [rsp + 0x41], al
xor cl, 0x38
mov byte [rsp + 0x42], cl
xor dl, 0x38
mov byte [rsp + 0x43], dl
xor r8b, 0x38
mov byte [rsp + 0x44], r8b
xor r9b, 0x38
mov byte [rsp + 0x45], r9b
xor r10b, 0x38
mov byte [rsp + 0x46], r10b
xor r11b, 0x38
mov byte [rsp + 0x47], r11b
xor bl, 0x38
mov byte [rsp + 0x48], bl
xor dil, 0x38
mov byte [rsp + 0x49], dil
xor sil, 0x38
mov byte [rsp + 0x4a], sil
mov byte [rsp + 0x4b], r15b
lea rax, [rsp + 0x41]
inc r14
cmp byte [rax + r14], r15b
jne 0x140009147
mov r8, r14
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0x40]
call fcn.1400064f0
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rdx, qword [rbp - 0x20]
mov r8, qword [rbp - 0x10]
lea rcx, [rbp + 0x40]
call fcn.1400064f0
lea rcx, [rbp + 0x60]
cmp qword [rbp + 0x78], 0x10
cmovae rcx, qword [rbp + 0x60]
call fcn.140005a10
lea rcx, [rbp + 0x40]
cmp qword [rbp + 0x58], 0x10
cmovae rcx, qword [rbp + 0x40]
call fcn.140005a10
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x1400091fd
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400091f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400091f8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140009380
movdqa xmm0, xmmword [0x14000c420]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x14000924c
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009247
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009247
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140009380
movdqa xmm0, xmmword [0x14000c420]
movdqu xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000929b
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009296
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009296
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140009380
xor eax, eax
mov rcx, qword [rbp + 0x190]
xor rcx, rsp
call fcn.1400097c0
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret