Function at 0x140003360
Capabilities:
Execute command

Disassembly:
push rbp
push rbx
push r14
lea rbp, [rsp - 0x47]
sub rsp, 0xd0
mov rax, qword [0x14000b008]
xor rax, rsp
mov qword [rbp + 0x2f], rax
call qword [sym.imp.KERNEL32.dll_AllocConsole]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rax
lea rdx, [0x14000775c]
lea rcx, str.CONOUT_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rax
lea rdx, [0x140007768]
lea rcx, str.CONIN_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
mov rax, qword gs:[0x58]
mov edx, 0x704
mov ebx, 0x6f8
mov rcx, qword [rax]
add rbx, rcx
mov eax, dword [rdx + rcx]
test al, 1
jne 0x14000341d
or eax, 1
mov dword [rbx + 8], 0x113cb62
mov dword [rdx + rcx], eax
lea rcx, [0x140006bb0]
mov dword [rbx], 0x9d64c87e
mov dword [rbx + 4], 0x9a26b870
call fcn.140005308
cmp byte [rbx + 0xb], 0
je 0x1400035aa
xor r9d, r9d
lea rax, [rbx + 2]
movabs r10, 0xff4ecb02f813a70e
nop dword [rax + rax]
mov ecx, r9d
and ecx, 0x80000007
jge 0x140003452
dec ecx
or ecx, 0xfffffff8
inc ecx
shl ecx, 3
mov rdx, r10
shr rdx, cl
lea ecx, [r9 + 1]
xor byte [rax - 2], dl
and ecx, 0x80000007
jge 0x140003471
dec ecx
or ecx, 0xfffffff8
inc ecx
shl ecx, 3
mov rdx, r10
shr rdx, cl
lea ecx, [r9 + 2]
xor byte [rax - 1], dl
and ecx, 0x80000007
jge 0x140003490
dec ecx
or ecx, 0xfffffff8
inc ecx
shl ecx, 3
mov rdx, r10
shr rdx, cl
lea ecx, [r9 + 3]
xor byte [rax], dl
and ecx, 0x80000007
jge 0x1400034ae
dec ecx
or ecx, 0xfffffff8
inc ecx
shl ecx, 3
mov rdx, r10
shr rdx, cl
lea ecx, [r9 + 4]
xor byte [rax + 1], dl
and ecx, 0x80000007
jge 0x1400034cd
dec ecx
or ecx, 0xfffffff8
inc ecx
shl ecx, 3
mov rdx, r10
shr rdx, cl
lea ecx, [r9 + 5]
xor byte [rax + 2], dl
and ecx, 0x80000007
jge 0x1400034ec
dec ecx
or ecx, 0xfffffff8
inc ecx
shl ecx, 3
mov rdx, r10
shr rdx, cl
lea ecx, [r9 + 6]
xor byte [rax + 3], dl
and ecx, 0x80000007
jge 0x14000350b
dec ecx
or ecx, 0xfffffff8
inc ecx
shl ecx, 3
mov rdx, r10
shr rdx, cl
lea ecx, [r9 + 7]
xor byte [rax + 4], dl
and ecx, 0x80000007
jge 0x14000352a
dec ecx
or ecx, 0xfffffff8
inc ecx
shl ecx, 3
mov rdx, r10
shr rdx, cl
lea ecx, [r9 + 8]
xor byte [rax + 5], dl
and ecx, 0x80000007
jge 0x140003549
dec ecx
or ecx, 0xfffffff8
inc ecx
shl ecx, 3
mov rdx, r10
shr rdx, cl
lea ecx, [r9 + 9]
xor byte [rax + 6], dl
and ecx, 0x80000007
jge 0x140003568
dec ecx
or ecx, 0xfffffff8
inc ecx
shl ecx, 3
mov rdx, r10
shr rdx, cl
lea ecx, [r9 + 0xa]
xor byte [rax + 7], dl
and ecx, 0x80000007
jge 0x140003587
dec ecx
or ecx, 0xfffffff8
inc ecx
shl ecx, 3
mov r8, r10
shr r8, cl
add r9d, 0xb
xor byte [rax + 8], r8b
add rax, 0xb
cmp r9d, 0xb
jb 0x140003440
mov byte [rbx + 0xb], 0
mov rdx, rbx
lea rcx, [rbp + 0xf]
call fcn.140003eb0
lea rcx, [rbp - 0x59]
call fcn.1400039a0
mov r9, rax
cmp byte [rax + 0x5bc], 0
je 0x140003612
xor edx, edx
mov r8, rax
movabs r10, 0xa3fdef83fc9031fd
nop word [rax + rax]
mov ecx, edx
and ecx, 0x80000007
jge 0x1400035f1
dec ecx
or ecx, 0xfffffff8
inc ecx
shl ecx, 3
mov rax, r10
shr rax, cl
inc edx
xor byte [r8], al
inc r8
cmp edx, 0x5bc
jb 0x1400035e0
mov byte [r9 + 0x5bc], 0
mov rdx, r9
lea rcx, [rbp - 0x11]
call fcn.140003eb0
mov r14, qword [rbp + 0x1f]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 1
jb 0x140003923
mov qword [rsp + 0xf0], rsi
mov ebx, 0xf
mov rsi, qword [rbp + 0xf]
xorps xmm0, xmm0
mov qword [rsp + 0xf8], rdi
xorps xmm1, xmm1
mov qword [rsp + 0x100], r12
lea rdi, [rbp - 0x51]
mov qword [rsp + 0xc8], r13
lea r12, [rbp + 0xf]
mov r13, qword [rbp + 0x27]
cmp r13, 0x10
mov qword [rsp + 0xc0], r15
lea r15, [r14 + 1]
cmovae r12, rsi
movups xmmword [rbp - 0x51], xmm0
movdqu xmmword [rbp - 0x41], xmm1
cmp r15, rbx
jbe 0x140003712
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x1400036d5
movabs rax, 0x8000000000000000
mov rbx, rcx
add rax, 0x27
mov rcx, rax
call fcn.1400051a8
test rax, rax
je 0x14000380c
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000370e
mov eax, 0x16
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400036fd
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003929
jmp 0x1400036b6
test rcx, rcx
je 0x14000370c
call fcn.1400051a8
mov rdi, rax
jmp 0x14000370e
xor edi, edi
mov qword [rbp - 0x51], rdi
mov r8, r14
mov qword [rbp - 0x41], r15
mov rdx, r12
mov qword [rbp - 0x39], rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rdi], 0x20
lea r9, [rbp - 0x11]
mov r14, qword [rbp - 1]
mov byte [rdi + r15], 0
mov r15, qword [rbp + 7]
mov rcx, qword [rbp - 0x39]
cmp r15, 0x10
mov rdi, qword [rbp - 0x11]
mov rax, rcx
mov r12, qword [rbp - 0x41]
cmovae r9, rdi
sub rax, r12
cmp r14, rax
ja 0x140003790
cmp rcx, 0x10
lea rax, [r14 + r12]
lea rbx, [rbp - 0x51]
mov qword [rbp - 0x41], rax
cmovae rbx, qword [rbp - 0x51]
mov r8, r14
mov rdx, r9
lea rcx, [rbx + r12]
call sub.VCRUNTIME140.dll_memmove
lea rax, [r14 + rbx]
mov byte [rax + r12], 0
lea rax, [rbp - 0x51]
jmp 0x1400037a9
mov rdx, r14
mov qword [rsp + 0x20], r14
lea rcx, [rbp - 0x51]
call fcn.1400049f0
mov r15, qword [rbp + 7]
mov rdi, qword [rbp - 0x11]
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x31], xmm0
movdqu xmmword [rbp - 0x21], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x31], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x21], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x39]
cmp rdx, 0x10
jb 0x140003818
mov rcx, qword [rbp - 0x51]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003813
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003813
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400051ec
cmp qword [rbp - 0x19], 0x10
lea rcx, [rbp - 0x31]
cmovae rcx, qword [rbp - 0x31]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 0x19]
cmp rdx, 0x10
jb 0x140003863
mov rcx, qword [rbp - 0x31]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000385e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400038d2
call fcn.1400051ec
movdqa xmm0, xmmword [0x140007d40]
mov byte [rbp - 0x31], 0
movdqu xmmword [rbp - 0x21], xmm0
cmp r15, 0x10
jb 0x1400038a7
lea rdx, [r15 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000389f
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400038d2
mov rcx, rdi
call fcn.1400051ec
cmp r13, 0x10
jb 0x1400038e1
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400038d9
mov rsi, qword [rsi - 8]
add rdx, 0x27
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400038d9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.1400051ec
mov r13, qword [rsp + 0xc8]
xor eax, eax
mov r12, qword [rsp + 0x100]
mov rdi, qword [rsp + 0xf8]
mov rsi, qword [rsp + 0xf0]
mov r15, qword [rsp + 0xc0]
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1400050f0
add rsp, 0xd0
pop r14
pop rbx
pop rbp
ret
call fcn.1400032b0
int3
call fcn.1400031a0
int3