Function at 0x14005f550
Capabilities:
Contain obfuscated stackstrings
Create thread
Encode data using xor
Enumerate processes
Set console window title
Terminate process
Terminate process by name

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2c8]
sub rsp, 0x3c8
xor edi, edi
mov dword [rsp + 0x68], 0x6c317329
mov dword [rsp + 0x6c], 0x65636e65
mov byte [rsp + 0x70], dil
lea rcx, [rsp + 0x69]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [rdi + 3]
lea rcx, str..Silence
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x1401337a8], rax
movabs rcx, 0x7fffffffffffffff
test rax, rax
je 0x14005f5d8
cmp rax, 0xffffffffffffffff
jne 0x14005ff64
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov r14, rdi
mov qword [rsp + 0x50], rdi
lea rbx, [0x140112740]
lea r15, [0x14010ccb0]
sub rbx, r15
je 0x14005f672
cmp rbx, rcx
ja 0x140060edc
cmp rbx, 0x1000
jb 0x14005f637
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x140060ee2
call fcn.1400e21e8
test rax, rax
je 0x14005ff58
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14005f642
mov rcx, rbx
call fcn.1400e21e8
mov rsi, rax
mov qword [rsp + 0x40], rsi
lea r14, [rsi + rbx]
mov qword [rsp + 0x50], r14
mov r8, rbx
mov rdx, r15
mov rcx, rsi
call sub.VCRUNTIME140.dll_memmove
mov rbx, r14
mov qword [rsp + 0x48], rbx
movabs rcx, 0x7fffffffffffffff
jmp 0x14005f67c
mov rbx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x40]
sub rbx, rsi
jne 0x14005f6ea
lea rcx, str.Invalid_drv_buffer_size_n
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
nop
test rsi, rsi
je 0x14005f6d4
sub r14, rsi
mov rax, rsi
cmp r14, 0x1000
jb 0x14005f6c9
add r14, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005ff58
mov rdx, r14
mov rcx, rsi
call fcn.1400e246c
mov al, 1
add rsp, 0x3c8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], rdi
cmp rbx, rcx
ja 0x140060ee8
cmp rbx, 0x1000
jb 0x14005f731
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x140060ed6
call fcn.1400e21e8
test rax, rax
je 0x14005ff18
lea r15, [rax + 0x27]
and r15, 0xffffffffffffffe0
mov qword [r15 - 8], rax
jmp 0x14005f73c
mov rcx, rbx
call fcn.1400e21e8
mov r15, rax
lea r13, [r15 + rbx]
mov r8, rbx
mov rdx, rsi
mov rcx, r15
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp + 0xc0], r15
mov qword [rbp + 0xc8], r13
mov qword [rbp + 0xd0], r13
mov qword [rbp + 0xd8], rdi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], r15
movsxd r12, dword [r15 + 0x3c]
add r12, r15
mov qword [rbp + 0xf8], r12
movzx ecx, word [r12 + 0x14]
add rcx, 0x18
add rcx, r12
mov qword [rbp + 0x100], rcx
movdqu xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], rdi
mov ecx, 0x36a7
call fcn.1400e21e8
test rax, rax
je 0x140060ecf
lea rcx, [rax + 0x27]
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
mov qword [rbp + 0x40], rcx
lea rbx, [rcx + 0x3680]
mov qword [rbp + 0x50], rbx
mov r8d, 0x3680
lea rdx, [0x14010f0c0]
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp + 0x48], rbx
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x60]
call fcn.14005b620
nop
mov rcx, qword [rbp + 0x40]
test rcx, rcx
je 0x14005f834
mov rdx, qword [rbp + 0x50]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f82e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140060ecf
call fcn.1400e246c
nop
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], 0xf
cmova rdx, qword [rbp - 0x60]
mov r8, qword [rbp - 0x50]
lea rcx, [0x14012f4f0]
call fcn.140005080
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..AsUpdateio
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbx, rax
mov qword [0x140133c88], rax
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x14005f8c4
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f8bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140060ecf
call fcn.1400e246c
test rbx, rbx
jne 0x14005f91c
lea rcx, str.Unable_to_load_driver...._n
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
nop
sub r13, r15
cmp r13, 0x1000
jb 0x14005f90c
add r13, 0x27
mov rcx, qword [r15 - 8]
sub r15, rcx
lea rax, [r15 - 8]
cmp rax, 0x1f
ja 0x14005ff18
mov r15, rcx
mov rdx, r13
mov rcx, r15
call fcn.1400e246c
jmp 0x14005f69c
lea rcx, [rbp + 0x310]
call fcn.140066d90
lea rax, vtable.std::_Func_impl_no_alloc_class__bool___cdecl_Silence::Initialize_void_::_5::_lambda_2___unsigned_long_long_unsigned___int64___char_const____ptr64__char_const____ptr64_.0
mov qword [rbp - 0x60], rax
lea rax, [rbp - 0x60]
mov qword [rbp - 0x28], rax
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0xc0]
call fcn.140013760
mov edx, dword [r12 + 0x50]
lea rcx, [rbp + 0xd8]
call fcn.1400138d0
mov r14, qword [rbp + 0xf8]
mov eax, dword [r14 + 0x54]
mov r12, qword [rbp + 0xd8]
mov r15, qword [rbp + 0xc0]
test eax, eax
je 0x14005f987
mov r8d, eax
mov rdx, r15
mov rcx, r12
call sub.VCRUNTIME140.dll_memmove
mov rsi, rdi
cmp di, word [r14 + 6]
jae 0x14005f9ca
mov rbx, qword [rbp + 0x100]
add rbx, 0x10
nop dword [rax]
mov ecx, dword [rbx - 4]
add rcx, r12
mov r8d, dword [rbx]
mov edx, dword [rbx + 4]
add rdx, r15
test r8d, r8d
je 0x14005f9b9
call sub.VCRUNTIME140.dll_memmove
inc rsi
add rbx, 0x28
movzx eax, word [r14 + 6]
cmp rsi, rax
jb 0x14005f9a0
mov r15d, dword [r14 + 0x50]
mov ebx, 4
mov rax, qword gs:[0x58]
mov rsi, qword [rax]
mov eax, dword [rbx + rsi]
cmp dword [0x140133e30], eax
jle 0x14005fa21
lea rcx, [0x140133e30]
call fcn.1400e2558
cmp dword [0x140133e30], 0xffffffff
jne 0x14005fa21
xor r8d, r8d
lea rdx, str.ExAllocatePool
call fcn.140066790
mov qword [0x140133df8], rax
lea rcx, [0x140133e30]
call fcn.1400e24ec
mov r14, qword [0x140133df8]
mov eax, dword [rbx + rsi]
cmp dword [0x140133e18], eax
jle 0x14005fa78
lea rcx, [0x140133e18]
call fcn.1400e2558
cmp dword [0x140133e18], 0xffffffff
jne 0x14005fa78
lea rcx, [0x14010ca48]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140133e08], rax
lea rcx, [0x140133e18]
call fcn.1400e24ec
mov rcx, qword [0x140133c80]
mov rdx, r14
call fcn.14005bf70
mov rax, qword [0x140133e08]
mov rdx, r15
xor ecx, ecx
call rax
mov r13, rax
mov rcx, qword [0x140133c80]
call fcn.14005c160
mov r12, qword [rbp + 0xd8]
mov r14, qword [rbp + 0xf8]
test byte [r14 + 0x16], 1
jne 0x14005fba5
mov rcx, r12
call qword [sym.imp.dbghelp.dll_ImageNtHeader]
mov r15, rax
mov r8d, 5
lea r9, [rbp + 0x318]
mov dl, 1
mov rcx, rax
call qword [sym.imp.dbghelp.dll_ImageDirectoryEntryToData]
mov rbx, rax
mov rsi, r13
sub rsi, qword [r15 + 0x30]
je 0x14005fba5
mov eax, dword [rbp + 0x318]
test eax, eax
je 0x14005fba5
lea r14, [rbx + rax]
cmp rbx, r14
jae case.0x14005fb58.5
nop dword [rax]
xor r9d, r9d
mov r8d, dword [rbx]
mov rdx, r12
mov rcx, r15
call qword [sym.imp.dbghelp.dll_ImageRvaToVa]
mov r9, rax
mov r8d, dword [rbx + 4]
sub r8d, 8
shr r8d, 1
lea rbx, [rbx + 8]
mov r10d, edi
je 0x14005fb95
lea r11, [0x140000000]
movzx edx, word [rbx]
mov ecx, edx
shr ecx, 0xc
cmp ecx, 0xa
ja case.0x14005fb58.5
mov ecx, dword [r11 + rcx*4 + 0x60ef0]
add rcx, r11
jmp rcx
and edx, 0xfff
add rdx, r9
mov rax, rsi
shr rax, 0x10
add word [rdx], ax
jmp case.0x14005fb58.0
and edx, 0xfff
add rdx, r9
add word [rdx], si
jmp case.0x14005fb58.0
and edx, 0xfff
add rdx, r9
add qword [rdx], rsi
inc r10d
add rbx, 2
cmp r10d, r8d
jb 0x14005fb40
cmp rbx, r14
jb 0x14005fb10
mov r14, qword [rbp + 0xf8]
mov esi, dword [r14 + 0x50]
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov r15d, 4
mov ecx, dword [r15 + rbx]
cmp dword [0x140133e1c], ecx
jle 0x14005fbfe
lea rcx, [0x140133e1c]
call fcn.1400e2558
cmp dword [0x140133e1c], 0xffffffff
jne 0x14005fbfe
xor r8d, r8d
lea rdx, str.RtlCopyMemory
call fcn.140066790
mov qword [0x140133e28], rax
lea rcx, [0x140133e1c]
call fcn.1400e24ec
mov qword [rsp + 0x20], rsi
mov r9, r12
mov r8, r13
call fcn.1400676b0
mov rax, qword [rbp + 0xf8]
mov esi, dword [rax + 0x28]
add rsi, r13
mov r14d, dword [rax + 0x50]
mov ecx, dword [r15 + rbx]
cmp dword [0x140133de0], ecx
jle 0x14005fc70
lea rcx, [0x140133de0]
call fcn.1400e2558
cmp dword [0x140133de0], 0xffffffff
jne 0x14005fc70
lea rcx, [0x14010ca48]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140133dc8], rax
lea rcx, [0x140133de0]
call fcn.1400e24ec
mov rcx, qword [0x140133c80]
mov rdx, rsi
call fcn.14005bf70
mov rdx, r14
mov rcx, r13
call qword [0x140133dc8]
mov rcx, qword [0x140133c80]
call fcn.14005c160
mov rax, qword [rbp + 0xf8]
mov r14d, dword [rax + 0x54]
mov ecx, dword [r15 + rbx]
cmp dword [0x140133e00], ecx
jle 0x14005fce5
lea rcx, [0x140133e00]
call fcn.1400e2558
cmp dword [0x140133e00], 0xffffffff
jne 0x14005fce5
xor r8d, r8d
lea rdx, str.RtlZeroMemory
call fcn.140066790
mov qword [0x140133de8], rax
lea rcx, [0x140133e00]
call fcn.1400e24ec
mov rsi, qword [0x140133de8]
mov ecx, dword [r15 + rbx]
cmp dword [0x140133e80], ecx
jle 0x14005fd3d
lea rcx, [0x140133e80]
call fcn.1400e2558
cmp dword [0x140133e80], 0xffffffff
jne 0x14005fd3d
lea rcx, [0x14010ca48]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.NtShutdownSystem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140133df0], rax
lea rcx, [0x140133e80]
call fcn.1400e24ec
mov rcx, qword [0x140133c80]
mov rdx, rsi
call fcn.14005bf70
mov rdx, r14
mov rcx, r13
call qword [0x140133df0]
mov rcx, qword [0x140133c80]
call fcn.14005c160
mov rcx, qword [0x140133c88]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x14005fd82
call fcn.14005ba80
test al, al
je 0x14005fd82
mov al, 1
jmp 0x14005fd84
xor al, al
test al, al
jne 0x14005fea5
movdqa xmm0, xmmword [0x140114d40]
movdqu xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x140114c70]
movdqu xmmword [rbp - 0x50], xmm1
movdqa xmm0, xmmword [0x140114ca0]
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x30], al
nop word [rax + rax]
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rdi - 0x5f], al
inc rdi
cmp rdi, 0x2f
jb 0x14005fdc0
mov byte [rbp - 0x30], 0
lea rcx, [rbp - 0x5f]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
nop
mov rcx, qword [rbp + 0xd8]
test rcx, rcx
je 0x14005fe20
mov rdx, qword [rbp + 0xe8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005fe1b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005ff18
call fcn.1400e246c
mov rcx, qword [rbp + 0xc0]
test rcx, rcx
je 0x14005fe61
mov rdx, qword [rbp + 0xd0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005fe5b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005ff18
call fcn.1400e246c
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14005f6d4
mov rdx, qword [rsp + 0x50]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f6cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005ff58
jmp 0x14005f6cf
mov rcx, qword [rbp + 0xd8]
test rcx, rcx
je 0x14005fee1
mov rdx, qword [rbp + 0xe8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005fedc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005ff18
call fcn.1400e246c
mov rcx, qword [rbp + 0xc0]
test rcx, rcx
je 0x14005ff25
mov rdx, qword [rbp + 0xd0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ff1f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005ff1f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e246c
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14005ff64
mov rdx, qword [rsp + 0x50]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ff5f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005ff5f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e246c
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov r13, rax
mov qword [rbp + 0x60], rax
lea rdx, [rbp + 0x160]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
movzx esi, word [rbp + 0x168]
mov word [rbp + 0x310], si
mov edx, 0x2f
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movdqa xmm0, xmmword [0x140114db0]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x5d207e20
mov byte [rsp + 0x54], 0
lea rdx, [rsp + 0x41]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011420
movzx edx, si
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movdqa xmm0, xmmword [0x140114e30]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x2e2e2e73
mov word [rsp + 0x54], 0xa
lea rdx, [rsp + 0x41]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011420
movdqa xmm0, xmmword [0x140114e40]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x78652e61
mov word [rsp + 0x54], 0x65
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
mov dword [rbp + 0x190], 0x130
lea rdx, [rbp + 0x190]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x14006007f
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0x1bc]
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
mov rcx, rbx
test eax, eax
je 0x1400604bf
lea rdx, [rbp + 0x190]
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140060051
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, edi
mov dword [0x1401337b0], eax
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 3]
lea rcx, str..Silence
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x1401337a8], rax
mov edx, 0x2f
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movdqa xmm0, xmmword [0x140114de0]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x5d207e20
mov byte [rsp + 0x54], 0
lea rdx, [rsp + 0x41]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011420
movzx edx, si
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movdqa xmm0, xmmword [str.b_initializing..5555555555555555XQTUC]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x50], 0xa2e
mov byte [rsp + 0x52], 0
lea rdx, [rsp + 0x41]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011420
call fcn.14005c260
mov rbx, rax
mov qword [rbp - 0x20], rdi
mov dword [rsp + 0x61], edi
mov word [rsp + 0x65], di
mov byte [rsp + 0x67], 0
mov dword [rsp + 0x40], 0x85b3e12
lea rcx, [rax + 0x118]
mov qword [rsp + 0x48], rcx
lea rax, [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 8
mov eax, dword [0x1401337b0]
mov dword [rsp + 0x44], eax
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, 0x28
lea r8, [rsp + 0x40]
mov edx, 0x2201c4
mov rcx, qword [0x1401337a8]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov edx, 0x2f
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movdqa xmm0, xmmword [0x140114d80]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x5d207e20
mov byte [rsp + 0x54], 0
lea rdx, [rsp + 0x41]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011420
movzx edx, si
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movdqa xmm0, xmmword [0x140114c60]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x50], 0
lea rdx, [rsp + 0x41]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011420
mov qword [rbp + 0x318], rdi
mov dword [rbp - 0x3f], edi
mov word [rbp - 0x3b], di
mov byte [rbp - 0x39], 0
mov dword [rbp - 0x60], 0x85b3e12
mov rax, qword [rbp - 0x20]
add rax, 0x198
mov qword [rbp - 0x58], rax
lea rax, [rbp + 0x318]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], 8
mov eax, dword [0x1401337b0]
mov dword [rbp - 0x5c], eax
mov byte [rbp - 0x40], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, 0x28
lea r8, [rbp - 0x60]
mov edx, 0x2201c4
mov rcx, qword [0x1401337a8]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp + 0x318]
mov qword [0x140133900], rax
mov qword [rbp], rdi
mov dword [rsp + 0x61], edi
mov word [rsp + 0x65], di
mov byte [rsp + 0x67], 0
mov dword [rsp + 0x40], 0x85b3e12
lea rax, [rbx + 0x10]
mov qword [rsp + 0x48], rax
lea rax, [rbp]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 8
mov eax, dword [0x1401337b0]
mov dword [rsp + 0x44], eax
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, 0x28
lea r8, [rsp + 0x40]
mov edx, 0x2201c4
mov rcx, qword [0x1401337a8]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp]
mov qword [0x140133910], rax
mov dword [rbp - 0x80], 0x726f5716
mov dword [rbp - 0x7c], 0x6170736b
mov word [rbp - 0x78], 0x6563
mov byte [rbp - 0x76], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
lea rax, [rbp - 0x7f]
mov r15, 0xffffffffffffffff
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x140060356
lea rdx, [rbp - 0x7f]
lea rcx, [rsp + 0x40]
call fcn.140005240
xor r9d, r9d
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0x140]
lea rcx, [0x140133900]
call fcn.14005d680
mov rcx, qword [rax]
mov qword [0x140133918], rcx
mov dword [rsp + 0x68], 0x616c505a
mov dword [rsp + 0x6c], 0x73726579
mov byte [rsp + 0x70], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
lea rax, [rsp + 0x69]
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x1400603c2
lea rdx, [rsp + 0x69]
lea rcx, [rsp + 0x40]
call fcn.140005240
xor r9d, r9d
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0x148]
lea rcx, [0x140133900]
call fcn.14005d680
mov r12, qword [rax]
mov qword [0x1401338f0], r12
mov edx, 0x2f
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movdqa xmm0, xmmword [0x140114dd0]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x5d207e20
mov byte [rsp + 0x54], 0
lea rdx, [rsp + 0x41]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011420
movzx edx, si
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movdqa xmm0, xmmword [0x140114e20]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0xa2e2e73
mov byte [rsp + 0x54], 0
lea rdx, [rsp + 0x41]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011420
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x18], xmm0
mov r14, rdi
mov qword [rbp - 8], rdi
mov esi, 0x1e
movabs r15, 0x7fffffffffb3b4bf
mov rbx, qword [rbp - 0x10]
movabs r13, 0x7fffffffffffffff
nop
mov rcx, r12
call fcn.14001b140
mov dword [rbp + 0x318], eax
cmp rbx, r14
je 0x1400604d0
mov dword [rbx], eax
add rbx, 4
mov qword [rbp - 0x10], rbx
jmp 0x1400604eb
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp + 0x198]
jmp 0x14006008a
lea r8, [rbp + 0x318]
mov rdx, rbx
lea rcx, [rbp - 0x18]
call fcn.140064890
mov r14, qword [rbp - 8]
mov rbx, qword [rbp - 0x10]
lea rcx, [rbp + 0x58]
call fcn.140001dc0
mov rax, qword [rbp + 0x58]
cmp rax, r15
je 0x140060513
setl cl
test cl, cl
je 0x140060513
add rax, 0x4c4b40
mov qword [rbp + 0x318], rax
jmp 0x14006051a
mov qword [rbp + 0x318], r13
lea rcx, [rbp + 0x318]
call fcn.140005420
sub rsi, 1
jne 0x1400604a0
mov rsi, qword [rbp - 0x18]
cmp rsi, rbx
mov r15, 0xffffffffffffffff
mov r13, qword [rbp + 0x60]
jne 0x140060584
test rsi, rsi
je 0x14005f6d4
sub r14, rsi
and r14, 0xfffffffffffffffc
mov rax, rsi
cmp r14, 0x1000
jb 0x14005f6c9
add r14, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005f6c9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov dword [rbp + 0x80], 0
mov qword [rbp + 0x88], rdi
mov qword [rbp + 0x90], rdi
mov ecx, 0x18
call fcn.1400e21e8
mov r12, rax
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rbp + 0x88], rax
mov qword [rbp + 0x98], rdi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], 7
mov qword [rbp + 0xb8], 8
mov dword [rbp + 0x80], 0x3f800000
mov ecx, 0x80
call fcn.1400e21e8
mov r14, rax
mov rax, qword [rbp + 0xa8]
mov rcx, qword [rbp + 0x98]
sub rax, rcx
sar rax, 3
test rax, rax
je 0x140060645
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140060640
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140060640
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e246c
mov qword [rbp + 0x98], r14
lea rax, [r14 + 0x80]
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0xa8], rax
cmp r14, rax
je 0x14006067c
nop word [rax + rax]
mov qword [r14], r12
add r14, 8
cmp r14, rax
jne 0x140060670
mov r14d, edi
cmp rsi, rbx
je 0x1400606f1
nop dword [rax]
nop dword [rax + rax]
mov eax, dword [rsi]
mov dword [rbp + 0x318], eax
lea r8, [rbp + 0x318]
lea rdx, [rbp + 0x178]
lea rcx, [rbp + 0x80]
call fcn.140063260
mov rcx, qword [rax]
inc dword [rcx + 0x14]
cmp dword [rcx + 0x14], r14d
jle 0x1400606e8
lea r8, [rbp + 0x318]
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x80]
call fcn.140063260
mov rcx, qword [rax]
mov r14d, dword [rcx + 0x14]
mov eax, dword [rbp + 0x318]
mov dword [0x140133908], eax
add rsi, 4
cmp rsi, rbx
jne 0x140060690
cmp qword [rbp - 0x20], 0
je 0x140060d5f
cmp qword [0x140133900], 0
je 0x140060d5f
cmp qword [0x140133918], 0
je 0x140060d5f
mov edx, 0x2f
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movdqa xmm0, xmmword [0x140114dc0]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x5d207e20
mov byte [rsp + 0x54], 0
lea rdx, [rsp + 0x41]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011420
movzx ebx, word [rbp + 0x310]
movzx edx, bx
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movdqa xmm0, xmmword [str.__almost_done.._n__please_wait.._nT]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x50], 0
lea rdx, [rsp + 0x41]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011420
mov edx, 0x2f
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movdqa xmm0, xmmword [0x140114d90]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x5d207e20
mov byte [rsp + 0x54], 0
lea rdx, [rsp + 0x41]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011420
movzx edx, bx
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movdqa xmm0, xmmword [0x140114e10]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x2e79616c
mov word [rsp + 0x54], 0xa2e
mov byte [rsp + 0x56], 0
lea rdx, [rsp + 0x41]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011420
lea rcx, [rbp + 0x68]
call fcn.140001dc0
movabs rcx, 0x7ffffffff4143dff
mov rax, qword [rbp + 0x68]
cmp rax, rcx
je 0x14006083e
setl cl
test cl, cl
je 0x14006083e
add rax, 0xbebc200
mov qword [rbp + 0x310], rax
movabs rsi, 0x7fffffffffffffff
jmp 0x14006084f
movabs rsi, 0x7fffffffffffffff
mov qword [rbp + 0x310], rsi
lea rcx, [rbp + 0x310]
call fcn.140005420
call fcn.140079bc0
mov ecx, 8
call fcn.1400e21e8
lea rcx, [fcn.14001b750]
mov qword [rax], rcx
mov qword [rbp + 0x310], rax
lea rcx, [rbp - 0x68]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140066050]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x70], rax
test rax, rax
je 0x140060d50
cmp dword [rbp - 0x68], 0
je 0x140060d44
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x80], xmm0
lea rcx, [rbp - 0x80]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140060d44
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x70], xmm0
lea ecx, [rax + 8]
call fcn.1400e21e8
lea rcx, [0x14007a580]
mov qword [rax], rcx
mov qword [rbp + 0x310], rax
lea rcx, [rbp + 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140066050]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x30], rax
test rax, rax
je 0x140060d35
cmp dword [rbp + 0x38], 0
je 0x140060d29
movaps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rbp - 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140060d29
lea ecx, [rax + 8]
call fcn.1400e21e8
lea rcx, [0x1400044f0]
mov qword [rax], rcx
mov qword [rbp + 0x310], rax
lea rcx, [rbp + 0x28]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140066050]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x20], rax
test rax, rax
je 0x140060d1a
cmp dword [rbp + 0x28], 0
je 0x140060d0e
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rbp - 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140060d0e
lea ecx, [rax + 8]
call fcn.1400e21e8
lea rcx, [0x14005dcd0]
mov qword [rax], rcx
mov qword [rbp + 0x310], rax
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140066050]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x10], rax
test rax, rax
je 0x140060cff
cmp dword [rbp + 0x18], 0
je 0x140060cf3
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rbp - 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140060cf3
mov rcx, qword [0x1401338f0]
add rcx, 0x100
call fcn.140062ea0
lea rcx, [rax + 0x298]
call fcn.140062ea0
mov qword [rbp + 0x310], rax
mov dword [rsp + 0x71], 0x6d754856
mov dword [rsp + 0x75], 0x696f6e61
mov word [rsp + 0x79], 0x64
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
lea rax, [rsp + 0x72]
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x140060a71
lea rdx, [rsp + 0x72]
lea rcx, [rsp + 0x40]
call fcn.140005240
mov r9b, 1
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x310]
call fcn.14005d680
lea rcx, [rbp + 0x70]
call fcn.140001dc0
movabs rcx, 0x7fffffff88ca6bff
mov rax, qword [rbp + 0x70]
cmp rax, rcx
je 0x140060ad7
setl cl
test cl, cl
je 0x140060ad7
add rax, 0x77359400
mov qword [rbp + 0x310], rax
jmp 0x140060ade
mov qword [rbp + 0x310], rsi
lea rcx, [rbp + 0x310]
call fcn.140005420
mov edx, 0x2f
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movdqa xmm0, xmmword [0x140114da0]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x5d207e20
mov byte [rsp + 0x54], 0
lea rdx, [rsp + 0x41]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011420
movzx edx, bx
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movdqa xmm0, xmmword [0x140114df0]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x6974696e
mov dword [rsp + 0x54], 0x7a696c61
mov dword [rsp + 0x58], 0x202e6465
mov byte [rsp + 0x5c], 0
lea rdx, [rsp + 0x41]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011420
mov dword [rbp + 0x320], 0x6d61433c
mov dword [rbp + 0x324], 0x617265
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
lea rax, [rbp + 0x321]
nop dword [rax]
inc r15
cmp byte [rax + r15], 0
jne 0x140060ba0
mov r8, r15
lea rdx, [rbp + 0x321]
lea rcx, [rsp + 0x40]
call fcn.140005240
xor r9d, r9d
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0x158]
lea rcx, [0x140133918]
call fcn.14005d680
mov rcx, qword [rax]
add rcx, 0x138
mov dword [rbp + 0x310], 0
mov dword [rbp - 0x3f], edi
mov word [rbp - 0x3b], di
mov byte [rbp - 0x39], 0
mov dword [rbp - 0x60], 0x85b3e12
mov qword [rbp - 0x58], rcx
lea rax, [rbp + 0x310]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], 4
mov eax, dword [0x1401337b0]
mov dword [rbp - 0x5c], eax
mov byte [rbp - 0x40], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, 0x28
lea r8, [rbp - 0x60]
mov edx, 0x2201c4
mov rcx, qword [0x1401337a8]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
movss xmm0, dword [rbp + 0x310]
mulss xmm0, dword [0x1401339a8]
mov rax, qword [0x140133800]
movss dword [rax + 0x1d0], xmm0
mov byte [rax + 0x175], 1
movabs rbx, 0x7ffffffff1194d7f
lea rcx, [rbp + 0x78]
call fcn.140001dc0
mov rax, qword [rbp + 0x78]
cmp rax, rbx
je 0x140060caa
setl cl
test cl, cl
je 0x140060caa
add rax, 0xee6b280
mov qword [rbp + 0x310], rax
jmp 0x140060cb1
mov qword [rbp + 0x310], rsi
lea rcx, [rbp + 0x310]
call fcn.140005420
mov dword [rbp + 0x328], 0x626f527d
mov dword [rbp + 0x32c], 0x786f6c
lea rdx, [rbp + 0x329]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140060c82
call fcn.14005bf40
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x18], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x28], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x38], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x68], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea rdx, [rbp + 0xc0]
call fcn.140060f20
mov r8, rax
lea rdx, [rax + 2]
mov r9, 0xfffffffffffffffe
sub r9, rax
nop dword [rax]
movzx ecx, byte [r8]
xor byte [rdx - 1], cl
movzx ecx, byte [r8]
xor byte [rdx], cl
movzx eax, byte [r8]
xor byte [rdx + 1], al
movzx eax, byte [r8]
xor byte [rdx + 2], al
movzx eax, byte [r8]
xor byte [rdx + 3], al
movzx eax, byte [r8]
xor byte [rdx + 4], al
movzx eax, byte [r8]
xor byte [rdx + 5], al
movzx eax, byte [r8]
xor byte [rdx + 6], al
movzx eax, byte [r8]
xor byte [rdx + 7], al
movzx eax, byte [r8]
xor byte [rdx + 8], al
movzx eax, byte [r8]
xor byte [rdx + 9], al
movzx eax, byte [r8]
xor byte [rdx + 0xa], al
movzx eax, byte [r8]
xor byte [rdx + 0xb], al
movzx eax, byte [r8]
xor byte [rdx + 0xc], al
movzx eax, byte [r8]
xor byte [rdx + 0xd], al
movzx eax, byte [r8]
xor byte [rdx + 0xe], al
movzx eax, byte [r8]
xor byte [rdx + 0xf], al
movzx eax, byte [r8]
xor byte [rdx + 0x10], al
movzx eax, byte [r8]
xor byte [rdx + 0x11], al
movzx eax, byte [r8]
xor byte [rdx + 0x12], al
movzx eax, byte [r8]
xor byte [rdx + 0x13], al
movzx eax, byte [r8]
xor byte [rdx + 0x14], al
movzx eax, byte [r8]
xor byte [rdx + 0x15], al
movzx eax, byte [r8]
xor byte [rdx + 0x16], al
movzx eax, byte [r8]
xor byte [rdx + 0x17], al
movzx eax, byte [r8]
xor byte [rdx + 0x18], al
movzx eax, byte [r8]
xor byte [rdx + 0x19], al
movzx eax, byte [r8]
xor byte [rdx + 0x1a], al
movzx eax, byte [r8]
xor byte [rdx + 0x1b], al
movzx eax, byte [r8]
xor byte [rdx + 0x1c], al
movzx eax, byte [r8]
xor byte [rdx + 0x1d], al
movzx eax, byte [r8]
xor byte [rdx + 0x1e], al
movzx eax, byte [r8]
xor byte [rdx + 0x1f], al
movzx eax, byte [r8]
xor byte [rdx + 0x20], al
movzx eax, byte [r8]
xor byte [rdx + 0x21], al
movzx eax, byte [r8]
xor byte [rdx + 0x22], al
movzx eax, byte [r8]
xor byte [rdx + 0x23], al
movzx eax, byte [r8]
xor byte [rdx + 0x24], al
lea rcx, [r8 + r9]
movzx eax, byte [rcx + rdx + 0x27]
xor al, byte [r8]
mov byte [rcx + rdx + 0x27], al
lea rdx, [rdx + 0x27]
lea rax, [r9 + rdx]
cmp rax, 0x75
jb 0x140060d80
mov byte [r8 + 0x76], 0
lea rcx, [r8 + 1]
call fcn.14001b880
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140001fa0
nop
call fcn.140005670
int3
call fcn.140001fa0
nop
call fcn.140005670
int3