Function at 0x140012950
Capabilities:
Contain obfuscated stackstrings
Create thread
Encode data using xor
Execute command
Terminate process

Disassembly:
push rbp
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0x1d0
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x148], 0xfffffffffffffffe
call fcn.140011f40
mov ecx, 8
call fcn.140018fe4
mov rsi, rax
lea rax, section..text
mov qword [rsi], rax
lea rax, [rbp + 0x118]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
lea r8, [0x140014190]
xor ecx, ecx
xor edx, edx
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x110], rax
test rax, rax
je 0x140013c34
cmp dword [rbp + 0x118], 0
je 0x140013c4c
movups xmm0, xmmword [rbp + 0x110]
movaps xmmword [rbp - 0x20], xmm0
lea rsi, [rbp - 0x20]
mov rcx, rsi
call sub.MSVCP140.dll__Thrd_detach
test eax, eax
jne 0x140013c56
call fcn.140018190
test al, al
je 0x140013c60
call fcn.140001720
mov rax, qword [0x14001c2f8]
mov dword [rbp - 0x20], 0xc
lea rdx, [rbp - 0x1c]
mov ecx, dword [rbp - 0x20]
xor cl, 0x53
mov byte [rbp - 0x1c], cl
mov ecx, dword [rbp - 0x20]
inc cl
xor cl, 0x6f
mov byte [rbp - 0x1b], cl
mov ecx, dword [rbp - 0x20]
add cl, 2
xor cl, 0x66
mov byte [rbp - 0x1a], cl
mov ecx, dword [rbp - 0x20]
add cl, 3
xor cl, 0x74
mov byte [rbp - 0x19], cl
mov ecx, dword [rbp - 0x20]
add cl, 4
xor cl, 0x77
mov byte [rbp - 0x18], cl
mov ecx, dword [rbp - 0x20]
add cl, 5
xor cl, 0x61
mov byte [rbp - 0x17], cl
mov ecx, dword [rbp - 0x20]
add cl, 6
xor cl, 0x72
mov byte [rbp - 0x16], cl
mov ecx, dword [rbp - 0x20]
add cl, 7
xor cl, 0x65
mov byte [rbp - 0x15], cl
mov ecx, dword [rbp - 0x20]
add cl, 8
xor cl, 0x5c
mov byte [rbp - 0x14], cl
mov ecx, dword [rbp - 0x20]
add cl, 9
xor cl, 0x4d
mov byte [rbp - 0x13], cl
mov ecx, dword [rbp - 0x20]
add cl, 0xa
xor cl, 0x61
mov byte [rbp - 0x12], cl
mov ecx, dword [rbp - 0x20]
add cl, 0xb
xor cl, 0x67
mov byte [rbp - 0x11], cl
mov ecx, dword [rbp - 0x20]
add cl, 0xc
xor cl, 0x69
mov byte [rbp - 0x10], cl
mov ecx, dword [rbp - 0x20]
add cl, 0xd
xor cl, 0x73
mov byte [rbp - 0xf], cl
mov ecx, dword [rbp - 0x20]
add cl, 0xe
xor cl, 0x6b
mov byte [rbp - 0xe], cl
mov byte [rbp - 0xd], 0
movzx ecx, byte [rbp - 0x1c]
mov r8d, dword [rbp - 0x20]
xor r8b, cl
mov byte [rbp - 0x1c], r8b
movzx ecx, byte [rbp - 0x1b]
mov r8d, dword [rbp - 0x20]
inc r8b
xor r8b, cl
mov byte [rbp - 0x1b], r8b
movzx ecx, byte [rbp - 0x1a]
mov r8d, dword [rbp - 0x20]
add r8b, 2
xor r8b, cl
mov byte [rbp - 0x1a], r8b
movzx ecx, byte [rbp - 0x19]
mov r8d, dword [rbp - 0x20]
add r8b, 3
xor r8b, cl
mov byte [rbp - 0x19], r8b
movzx ecx, byte [rbp - 0x18]
mov r8d, dword [rbp - 0x20]
add r8b, 4
xor r8b, cl
mov byte [rbp - 0x18], r8b
movzx ecx, byte [rbp - 0x17]
mov r8d, dword [rbp - 0x20]
add r8b, 5
xor r8b, cl
mov byte [rbp - 0x17], r8b
movzx ecx, byte [rbp - 0x16]
mov r8d, dword [rbp - 0x20]
add r8b, 6
xor r8b, cl
mov byte [rbp - 0x16], r8b
movzx ecx, byte [rbp - 0x15]
mov r8d, dword [rbp - 0x20]
add r8b, 7
xor r8b, cl
mov byte [rbp - 0x15], r8b
movzx ecx, byte [rbp - 0x14]
mov r8d, dword [rbp - 0x20]
add r8b, 8
xor r8b, cl
mov byte [rbp - 0x14], r8b
movzx ecx, byte [rbp - 0x13]
mov r8d, dword [rbp - 0x20]
add r8b, 9
xor r8b, cl
mov byte [rbp - 0x13], r8b
movzx ecx, byte [rbp - 0x12]
mov r8d, dword [rbp - 0x20]
add r8b, 0xa
xor r8b, cl
mov byte [rbp - 0x12], r8b
movzx ecx, byte [rbp - 0x11]
mov r8d, dword [rbp - 0x20]
add r8b, 0xb
xor r8b, cl
mov byte [rbp - 0x11], r8b
movzx ecx, byte [rbp - 0x10]
mov r8d, dword [rbp - 0x20]
add r8b, 0xc
xor r8b, cl
mov byte [rbp - 0x10], r8b
movzx ecx, byte [rbp - 0xf]
mov r8d, dword [rbp - 0x20]
add r8b, 0xd
xor r8b, cl
mov byte [rbp - 0xf], r8b
movzx ecx, byte [rbp - 0xe]
mov r8d, dword [rbp - 0x20]
add r8b, 0xe
xor r8b, cl
mov byte [rbp - 0xe], r8b
mov byte [rbp - 0xd], 0
lea rcx, [rbp - 0x28]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x2001f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000001
xor r8d, r8d
xor r9d, r9d
call rax
test eax, eax
je 0x140012d64
cmp byte [0x14001c088], 0
je 0x140012d45
mov dword [rbp - 0x20], 0x7d
lea rdx, [rbp - 0x1c]
mov byte [rbp - 0x1c], 0x26
mov byte [rbp - 0x1b], 0x50
mov byte [rbp - 0x1a], 0x20
mov byte [rbp - 0x19], 0x5d
mov byte [rbp - 0x18], 0x3b
mov byte [rbp - 0x17], 0x1c
mov byte [rbp - 0x16], 0x14
mov byte [rbp - 0x15], 0x11
mov byte [rbp - 0x14], 0x18
mov byte [rbp - 0x13], 0x19
mov byte [rbp - 0x12], 0x5d
mov byte [rbp - 0x11], 9
mov byte [rbp - 0x10], 0x12
mov byte [rbp - 0xf], 0x5d
mov byte [rbp - 0xe], 0x1c
mov byte [rbp - 0xd], 0x1e
mov byte [rbp - 0xc], 0x1e
mov byte [rbp - 0xb], 0x18
mov byte [rbp - 0xa], 0xe
mov byte [rbp - 9], 0xe
mov byte [rbp - 8], 0x5d
mov byte [rbp - 7], 0xf
mov byte [rbp - 6], 0x18
mov byte [rbp - 5], 0x1a
mov byte [rbp - 4], 0x14
mov byte [rbp - 3], 0xe
mov byte [rbp - 2], 9
mov byte [rbp - 1], 0xf
mov byte [rbp], 4
mov byte [rbp + 1], 0x5d
mov byte [rbp + 2], 0x16
mov byte [rbp + 3], 0x18
mov byte [rbp + 4], 4
mov byte [rbp + 5], 0x5c
mov byte [rbp + 6], 0
mov eax, 5
nop word cs:[rax + rax]
movzx ecx, byte [rbp + rax - 0x21]
mov r8d, dword [rbp - 0x20]
xor r8b, cl
mov byte [rbp + rax - 0x21], r8b
movzx ecx, byte [rbp + rax - 0x20]
mov r8d, dword [rbp - 0x20]
xor r8b, cl
mov byte [rbp + rax - 0x20], r8b
add rax, 2
cmp rax, 0x27
jne 0x140012ce0
mov byte [rbp + 6], 0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400014b0
mov rsi, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
add rcx, rsi
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
mov rcx, rsi
mov edx, eax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::put_char____ptr64]
mov rcx, rsi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::flush_void____ptr64]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_getchar]
mov rsi, qword [0x14001c238]
call qword [0x14001c1c8]
mov rcx, rax
xor edx, edx
call rsi
jmp 0x140013c13
mov dword [rbp - 0x2c], 0x100
mov rax, qword [0x14001c2f0]
mov byte [rbp + 0x110], 0x76
mov byte [rbp + 0x111], 0x6d
mov byte [rbp + 0x112], 0x72
mov byte [rbp + 0x113], 0x6b
mov byte [rbp + 0x114], 0x37
mov byte [rbp + 0x115], 0x63
mov byte [rbp + 0x116], 0x79
mov byte [rbp + 0x117], 0x77
mov byte [rbp + 0x118], 0x69
mov byte [rbp + 0x119], 0x76
mov byte [rbp + 0x11a], 0x72
mov byte [rbp + 0x11b], 0x65
mov byte [rbp + 0x11c], 0x71
mov byte [rbp + 0x11d], 0x69
mov byte [rbp + 0x11e], 0
add byte [rbp + 0x110], 0xfc
add byte [rbp + 0x111], 0xfc
add byte [rbp + 0x112], 0xfc
add byte [rbp + 0x113], 0xfc
add byte [rbp + 0x114], 0xfc
add byte [rbp + 0x115], 0xfc
add byte [rbp + 0x116], 0xfc
add byte [rbp + 0x117], 0xfc
add byte [rbp + 0x118], 0xfc
add byte [rbp + 0x119], 0xfc
add byte [rbp + 0x11a], 0xfc
add byte [rbp + 0x11b], 0xfc
add byte [rbp + 0x11c], 0xfc
add byte [rbp + 0x11d], 0xfc
mov rcx, qword [rbp - 0x28]
lea rdx, [rbp - 0x2c]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rsi
lea rsi, [rbp + 0x110]
mov rdx, rsi
xor r8d, r8d
xor r9d, r9d
call rax
test eax, eax
je 0x140013342
movaps xmm0, xmmword [0x14001a1b0]
movaps xmmword [rbp + 0x110], xmm0
movabs rax, 0x5fbb21aa23bf2574
mov qword [rbp + 0x120], rax
mov word [rbp + 0x128], 0x5d5e
xorps xmm0, xmm0
movups xmmword [rbp + 0x12a], xmm0
movabs rdi, 0x7e752d392ed13e97
movabs rbx, 0xcca4aefc7ece6c2f
movabs r14, 0x87a96f29a067bd8b
call fcn.140014310
mov r15, qword [rax]
call fcn.140014320
mov rcx, qword [rax]
xor eax, eax
jmp 0x140012f05
lea r8d, [rax + 0x26cd02fb]
lea r12d, [rax + rdx]
add r12d, 0x26cd02fb
and r8d, edx
add r8d, r8d
sub r12d, r8d
add r12b, 0x23
add rdx, rax
add rdx, rcx
mov rax, rdx
inc rax
cmp rax, 0x2a
jae 0x1400134c4
cmp r15, rax
ja 0x14001349e
movzx r9d, byte [rbp + rax + 0x110]
movzx edx, r9b
lea r8, [rcx + 1]
cmp r15, r8
jae 0x140012f80
lea r10d, [rax - 0x48665457]
lea r12d, [rax + rdx]
add r12d, 0xb799aba9
and r10d, edx
add r10d, r10d
sub r12d, r10d
add r12b, 0x61
cmp rcx, rax
ja 0x1400134bd
lea r10, [rcx + 5]
cmp r15, r10
jae 0x140012fc0
lea r10d, [rax + 0xf9b14dd]
lea r12d, [rax + rdx]
add r12d, 0xf9b14dd
and r10d, edx
add r10d, r10d
sub r12d, r10d
add r12b, 0xf5
jmp 0x140012fe0
je 0x140012ed0
lea r10, [rcx + 2]
cmp r15, r10
jne 0x14001304e
lea r9d, [rax + 0x533b19f]
lea r12d, [rax + rdx]
add r12d, 0x533b19f
and r9d, edx
add r9d, r9d
sub r12d, r9d
add r12b, 0xa7
jmp 0x140013111
cmp r15, r8
jne 0x140012fe0
lea r9, [rax + rbx]
lea r12, [r9 + rdx]
mov ecx, edx
and ecx, r9d
mov r9b, 0xb7
jmp 0x140013252
lea r10, [r15 + rcx]
cmp r10, rax
jbe 0x14001301d
lea r9, [rcx + 9]
cmp r15, r9
jne 0x14001307f
lea r8d, [rax - 0x3d918ebe]
lea r12d, [rax + rdx]
add r12d, 0xc26e7142
and r8d, edx
add r8d, r8d
sub r12d, r8d
add r12b, 0x32
dec rax
jmp 0x140012ef8
lea r11, [rcx + 0xa]
cmp r15, r11
jae 0x1400130bc
lea r11d, [rax - 0x48665457]
lea r12d, [rax + rdx]
add r12d, 0xb799aba9
and r11d, edx
add r11d, r11d
sub r12d, r11d
add r12b, 0x61
jmp 0x1400130e5
lea r10, [rcx + 4]
cmp r15, r10
jne 0x1400131a3
lea r8d, [rax - 0x1c659fbd]
lea r12d, [rax + rdx]
add r12d, 0xe39a6043
and r8d, edx
add r8d, r8d
sub r12d, r8d
add r12b, 0x2b
add r15, rcx
jmp 0x1400130a7
cmp r15, r8
jne 0x1400131d7
lea r8d, [rax + 0x10087738]
lea r12d, [rax + rdx]
add r12d, 0x10087738
and r8d, edx
add r8d, r8d
sub r12d, r8d
add r12b, 0x78
mov r10, r15
movzx edx, r12b
not rdx
add rax, rdx
mov r15, r10
jmp 0x140012ef8
cmp r15, r8
jne 0x1400130e5
lea r8d, [rax + 0x1f3629ba]
lea r12d, [rax + rdx]
add r12d, 0x1f3629ba
and r8d, edx
add r8d, r8d
sub r12d, r8d
add r12b, 0xea
jmp 0x140012eef
cmp r10, 5
jne 0x140013189
lea r9d, [rax + 0x5a113fa]
lea r12d, [rax + rdx]
add r12d, 0x5a113fa
and r9d, edx
add r9d, r9d
sub r12d, r9d
sub r12b, dl
add r12b, 0x2a
lea r9d, [rax - 0x42c5405d]
lea r10d, [rdx + rax]
add r10d, 0xbd3abfa3
and r9d, edx
add r9d, r9d
sub r10d, r9d
add r10b, 0x8b
mov byte [rbp + rax + 0x110], r10b
movzx r9d, r10b
not rcx
add rcx, rax
sub rcx, r9
mov rax, rcx
mov rcx, r8
lea r8d, [rax + 0x74d46b4c]
lea r9d, [rax + rdx]
add r9d, 0x74d46b4c
and r8d, edx
add r8d, r8d
sub r9d, r8d
add r9b, 0xec
mov byte [rbp + rax + 0x110], r9b
sub rax, r15
inc r15
movzx edx, byte [rbp + rax + 0x10e]
add rax, 0xfffffffffffffffe
jmp 0x140012eef
cmp r15, r8
jne 0x140013208
lea r9, [rax + rdi]
lea r12, [r9 + rdx]
mov ecx, edx
and ecx, r9d
mov r9b, 0xdf
jmp 0x140013252
lea r10, [rcx + 6]
cmp r15, r10
jne 0x140013235
lea r8d, [rax - 0x3dfef119]
lea r12d, [rax + rdx]
add r12d, 0xc2010ee7
and r8d, edx
add r8d, r8d
sub r12d, r8d
add r12b, 0xaf
dec rax
jmp 0x140012ef8
lea r8, [rcx + 0x10]
cmp r15, r8
jne 0x14001331f
lea r8d, [rax - 0x1190da24]
lea r12d, [rax + rdx]
add r12d, 0xee6f25dc
and r8d, edx
add r8d, r8d
sub r12d, r8d
add r12b, 0xfc
jmp 0x14001314b
lea r11, [rcx + 3]
cmp r15, r11
jne 0x140013289
lea r9d, [rax - 0x35fab57d]
lea r12d, [rax + rdx]
add r12d, 0xca054a83
and r9d, edx
add r9d, r9d
sub r12d, r9d
add r12b, 0x6b
jmp 0x140013111
lea r10, [rcx + 8]
cmp r15, r10
jne 0x140012f43
lea r9, [rax + r14]
lea r12, [r9 + rdx]
mov ecx, edx
and ecx, r9d
mov r9b, 0x33
add ecx, ecx
sub r12d, ecx
add r12b, r9b
lea ecx, [rax - 0x212bef01]
lea r9d, [rdx + rax]
add r9d, 0xded410ff
and ecx, edx
add ecx, ecx
sub r9d, ecx
add r9b, 7
mov byte [rbp + rax + 0x110], r9b
dec rax
mov rcx, r8
jmp 0x140012ef8
lea r8, [rcx + 9]
cmp r15, r8
jne 0x1400132b6
lea r8d, [rax - 0x579406d9]
lea r12d, [rax + rdx]
add r12d, 0xa86bf927
and r8d, edx
add r8d, r8d
sub r12d, r8d
add r12b, 0xef
jmp 0x140012eef
test r15, r15
je 0x14001330f
lea r8d, [rax - 0x69924358]
lea r11d, [rax + rdx]
add r11d, 0x966dbca8
and r8d, edx
add r8d, r8d
sub r11d, r8d
add r9b, r11b
add r9b, 0x68
lea r8d, [rax + 0x4e076851]
lea r11d, [rax + rdx]
add r11d, 0x4e076851
and r8d, edx
add r8d, r8d
sub r11d, r8d
add r11b, r9b
add r11b, 0xc9
mov byte [rbp + rax + 0x110], r11b
mov r12d, r9d
jmp 0x1400130aa
mov byte [rbp + rax + 0x110], r12b
xor r15d, r15d
jmp 0x140012ef8
mov ecx, eax
add ecx, 0xf3a2d77b
lea r12d, [rax + rdx]
add r12d, 0xf3a2d77b
and ecx, edx
add ecx, ecx
sub r12d, ecx
add r12b, 0xa3
jmp 0x140012eb9
mov byte [rbp + 0x110], 0x62
mov byte [rbp + 0x111], 0x32
mov byte [rbp + 0x112], 0x64
mov byte [rbp + 0x113], 0x27
mov byte [rbp + 0x114], 0x7c
mov byte [rbp + 0x115], 0x6c
mov byte [rbp + 0x116], 0x7a
mov byte [rbp + 0x117], 0x79
mov byte [rbp + 0x118], 0x75
mov byte [rbp + 0x119], 0x68
mov byte [rbp + 0x11a], 0x74
mov byte [rbp + 0x11b], 0x6c
mov byte [rbp + 0x11c], 0x27
mov byte [rbp + 0x11d], 0x6d
mov byte [rbp + 0x11e], 0x79
mov byte [rbp + 0x11f], 0x76
mov byte [rbp + 0x120], 0x74
mov byte [rbp + 0x121], 0x27
mov byte [rbp + 0x122], 0x79
mov byte [rbp + 0x123], 0x6c
mov byte [rbp + 0x124], 0x6e
mov byte [rbp + 0x125], 0x70
mov byte [rbp + 0x126], 0x7a
mov byte [rbp + 0x127], 0x7b
mov byte [rbp + 0x128], 0x79
mov byte [rbp + 0x129], 0x80
mov byte [rbp + 0x12a], 0x41
mov byte [rbp + 0x12b], 0x27
mov byte [rbp + 0x12c], 0x2c
mov byte [rbp + 0x12d], 0x7a
mov byte [rbp + 0x12e], 0x11
mov byte [rbp + 0x12f], 0
mov eax, 3
nop word [rax + rax]
add byte [rbp + rax + 0x10d], 0xf9
add byte [rbp + rax + 0x10e], 0xf9
add byte [rbp + rax + 0x10f], 0xf9
cmp rax, 0x1f
je 0x14001345c
add byte [rbp + rax + 0x110], 0xf9
add rax, 4
jmp 0x140013430
lea rcx, [rbp + 0x110]
lea rsi, [rbp - 0x20]
mov rdx, rsi
call fcn.140006ce0
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rsi, rax
mov rax, qword [0x14001c370]
cmp rax, rsi
jae 0x1400134a7
lea rcx, [0x14001c358]
lea r9, [rbp - 0x20]
mov rdx, rsi
call fcn.1400141e0
jmp 0x140013c09
lea rsi, [rbp + 0x990245]
jmp 0x1400134c4
cmp rax, 0x10
jb 0x140013b81
mov rdi, qword [0x14001c358]
jmp 0x140013b88
lea rsi, [rbp + 0x17f569c]
xorps xmm0, xmm0
movaps xmmword [rbp + 0x100], xmm0
movaps xmmword [rbp + 0xf0], xmm0
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov rdi, rax
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
jae 0x140013fd2
cmp rdi, 7
ja 0x14001352f
mov qword [rbp + 0x100], rdi
mov qword [rbp + 0x108], 7
lea r8, [rdi + rdi]
lea rcx, [rbp + 0xf0]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rdi*2 + 0xf0]
add rax, rbp
jmp 0x1400135c2
mov rax, rdi
or rax, 7
movabs rcx, 0x7ffffffffffffffe
cmp rax, rcx
ja 0x14001400e
cmp rax, 0xb
mov r14d, 0xa
cmovae r14, rax
lea rcx, [r14 + r14]
cmp r14, 0x7ff
jb 0x14001358e
movabs rax, 0x7fffffffffffffec
cmp r14, rax
jae 0x14001400e
add rcx, 0x29
call fcn.140018fe4
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14001359a
add rcx, 2
call fcn.140018fe4
mov rbx, rax
mov qword [rbp + 0xf0], rbx
mov qword [rbp + 0x100], rdi
mov qword [rbp + 0x108], r14
lea r8, [rdi + rdi]
mov rcx, rbx
mov rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbx + rdi*2]
mov word [rax], 0
lea rcx, [rbp + 0xf0]
call fcn.1400187c0
mov edi, eax
mov rax, qword [rbp + 0x108]
cmp rax, 8
jb 0x140013621
mov rcx, qword [rbp + 0xf0]
lea rdx, [rax*2 + 2]
cmp rdx, 0x1000
jb 0x14001361c
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140014013
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140019028
xorps xmm0, xmm0
movaps xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], 0
mov qword [rbp + 0x108], 0xf
lea rsi, [rbp + 0xf0]
mov ecx, edi
mov rdx, rsi
call fcn.1400189e0
test al, al
je 0x140013bc4
mov rdx, qword [rbp + 0x100]
test rdx, rdx
je 0x140013985
mov rax, qword [0x14001c2e8]
inc edx
cmp qword [rbp + 0x108], 0x10
jb 0x140013684
mov rsi, qword [rbp + 0xf0]
mov byte [rbp + 0x110], 0x73
mov byte [rbp + 0x111], 0x6a
mov byte [rbp + 0x112], 0x6f
mov byte [rbp + 0x113], 0x68
mov byte [rbp + 0x114], 0x34
mov byte [rbp + 0x115], 0x60
mov byte [rbp + 0x116], 0x76
mov byte [rbp + 0x117], 0x74
mov byte [rbp + 0x118], 0x66
mov byte [rbp + 0x119], 0x73
mov byte [rbp + 0x11a], 0x6f
mov byte [rbp + 0x11b], 0x62
mov byte [rbp + 0x11c], 0x6e
mov byte [rbp + 0x11d], 0x66
mov byte [rbp + 0x11e], 0
dec byte [rbp + 0x110]
dec byte [rbp + 0x111]
dec byte [rbp + 0x112]
dec byte [rbp + 0x113]
dec byte [rbp + 0x114]
dec byte [rbp + 0x115]
dec byte [rbp + 0x116]
dec byte [rbp + 0x117]
dec byte [rbp + 0x118]
dec byte [rbp + 0x119]
dec byte [rbp + 0x11a]
dec byte [rbp + 0x11b]
dec byte [rbp + 0x11c]
dec byte [rbp + 0x11d]
mov rcx, qword [rbp - 0x28]
mov dword [rsp + 0x28], edx
mov qword [rsp + 0x20], rsi
lea rdx, [rbp + 0x110]
xor r8d, r8d
mov r9d, 1
call rax
mov rdx, qword [rbp + 0xf0]
mov rax, qword [rbp + 0x108]
mov dword [rbp + 0x110], 1
lea rcx, [rbp + 0x114]
mov byte [rbp + 0x114], 0x5a
mov byte [rbp + 0x115], 0x2a
mov byte [rbp + 0x116], 0x5c
mov byte [rbp + 0x117], 0x21
mov byte [rbp + 0x118], 0x74
mov byte [rbp + 0x119], 0x64
mov byte [rbp + 0x11a], 0x72
mov byte [rbp + 0x11b], 0x73
mov byte [rbp + 0x11c], 0x6f
mov byte [rbp + 0x11d], 0x60
mov byte [rbp + 0x11e], 0x6c
mov byte [rbp + 0x11f], 0x64
mov byte [rbp + 0x120], 0x21
mov byte [rbp + 0x121], 0x24
mov byte [rbp + 0x122], 0x72
mov byte [rbp + 0x123], 0x21
mov byte [rbp + 0x124], 0x69
mov byte [rbp + 0x125], 0x60
mov byte [rbp + 0x126], 0x72
mov byte [rbp + 0x127], 0x21
mov byte [rbp + 0x128], 0x63
mov byte [rbp + 0x129], 0x64
mov byte [rbp + 0x12a], 0x64
mov byte [rbp + 0x12b], 0x6f
mov byte [rbp + 0x12c], 0x21
mov byte [rbp + 0x12d], 0x76
mov byte [rbp + 0x12e], 0x73
mov byte [rbp + 0x12f], 0x68
mov byte [rbp + 0x130], 0x75
mov byte [rbp + 0x131], 0x75
mov byte [rbp + 0x132], 0x64
mov byte [rbp + 0x133], 0x6f
mov byte [rbp + 0x134], 0x21
mov byte [rbp + 0x135], 0x75
mov byte [rbp + 0x136], 0x6e
mov byte [rbp + 0x137], 0x21
mov byte [rbp + 0x138], 0x73
mov byte [rbp + 0x139], 0x64
mov byte [rbp + 0x13a], 0x66
mov byte [rbp + 0x13b], 0x68
mov byte [rbp + 0x13c], 0x72
mov byte [rbp + 0x13d], 0x75
mov byte [rbp + 0x13e], 0x73
mov byte [rbp + 0x13f], pe_nt_image_headers64
mov byte [rbp + 0x140], 0xb
mov byte [rbp + 0x141], 0
mov r8d, 6
nop word [rax + rax]
movzx r9d, byte [rbp + r8 + 0x10e]
mov r10d, dword [rbp + 0x110]
xor r10b, r9b
mov byte [rbp + r8 + 0x10e], r10b
movzx r9d, byte [rbp + r8 + 0x10f]
mov r10d, dword [rbp + 0x110]
xor r10b, r9b
mov byte [rbp + r8 + 0x10f], r10b
movzx r9d, byte [rbp + r8 + 0x110]
mov r10d, dword [rbp + 0x110]
xor r10b, r9b
mov byte [rbp + r8 + 0x110], r10b
add r8, 3
cmp r8, 0x33
jne 0x1400138d0
cmp rax, 0x10
lea rsi, [rbp + 0xf0]
cmovb rdx, rsi
mov byte [rbp + 0x141], 0
call fcn.140006ce0
mov rdi, qword [rbp + 0x100]
cmp qword [rbp + 0x108], 0x10
jb 0x14001395e
mov rsi, qword [rbp + 0xf0]
mov rax, qword [0x14001c370]
cmp rax, rdi
jae 0x140013b72
lea rcx, [0x14001c358]
mov rdx, rdi
mov r9, rsi
call fcn.1400141e0
jmp 0x140013bc4
cmp byte [0x14001c088], 0
je 0x140013b56
mov byte [rbp + 0x110], 0x5e
mov byte [rbp + 0x111], 0x30
mov byte [rbp + 0x112], 0x60
mov byte [rbp + 0x113], 0x23
mov byte [rbp + 0x114], 0x49
mov byte [rbp + 0x115], 0x64
mov byte [rbp + 0x116], 0x6c
mov byte [rbp + 0x117], 0x6f
mov byte [rbp + 0x118], 0x68
mov byte [rbp + 0x119], 0x67
mov byte [rbp + 0x11a], 0x23
mov byte [rbp + 0x11b], 0x77
mov byte [rbp + 0x11c], 0x72
mov byte [rbp + 0x11d], 0x23
mov byte [rbp + 0x11e], 0x69
mov byte [rbp + 0x11f], 0x68
mov byte [rbp + 0x120], 0x77
mov byte [rbp + 0x121], 0x66
mov byte [rbp + 0x122], 0x6b
mov byte [rbp + 0x123], 0x23
mov byte [rbp + 0x124], pe_nt_image_headers64
mov byte [rbp + 0x125], 0x76
mov byte [rbp + 0x126], 0x68
mov byte [rbp + 0x127], 0x75
mov byte [rbp + 0x128], 0x71
mov byte [rbp + 0x129], 0x64
mov byte [rbp + 0x12a], 0x70
mov byte [rbp + 0x12b], 0x68
mov byte [rbp + 0x12c], 0x23
mov byte [rbp + 0x12d], 0x69
mov byte [rbp + 0x12e], 0x75
mov byte [rbp + 0x12f], 0x72
mov byte [rbp + 0x130], 0x70
mov byte [rbp + 0x131], 0x23
mov byte [rbp + 0x132], 0x68
mov byte [rbp + 0x133], 0x7b
mov byte [rbp + 0x134], 0x73
mov byte [rbp + 0x135], 0x6f
mov byte [rbp + 0x136], 0x72
mov byte [rbp + 0x137], 0x75
mov byte [rbp + 0x138], 0x68
mov byte [rbp + 0x139], 0x75
mov byte [rbp + 0x13a], 0x31
mov byte [rbp + 0x13b], 0x68
mov byte [rbp + 0x13c], 0x7b
mov byte [rbp + 0x13d], 0x68
mov byte [rbp + 0x13e], 0x23
mov byte [rbp + 0x13f], 0x24
mov byte [rbp + 0x140], 0
mov eax, 3
nop
add byte [rbp + rax + 0x10d], 0xfd
add byte [rbp + rax + 0x10e], 0xfd
add byte [rbp + rax + 0x10f], 0xfd
add byte [rbp + rax + 0x110], 0xfd
add rax, 4
cmp rax, 0x33
jne 0x140013af0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x110]
call fcn.1400014b0
mov rsi, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
add rcx, rsi
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
mov rcx, rsi
mov edx, eax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::put_char____ptr64]
mov rcx, rsi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::flush_void____ptr64]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_getchar]
mov rsi, qword [0x14001c238]
call qword [0x14001c1c8]
mov rcx, rax
xor edx, edx
call rsi
jmp 0x140013bc4
cmp rax, 0x10
jb 0x140013ba4
mov rbx, qword [0x14001c358]
jmp 0x140013bab
lea rdi, [0x14001c358]
mov qword [0x14001c368], rsi
lea rdx, [rbp - 0x20]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rsi], 0
jmp 0x140013c09
lea rbx, [0x14001c358]
mov qword [0x14001c368], rdi
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
mov rax, qword [rbp + 0x108]
cmp rax, 0x10
jb 0x140013c09
mov rcx, qword [rbp + 0xf0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140013c04
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140014013
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140019028
mov rcx, qword [rbp - 0x28]
call qword [0x14001c2e0]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor eax, eax
add rsp, 0x1d0
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
pop rbp
ret
mov qword [rbp - 0x38], rsi
mov dword [rbp + 0x118], 0
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
mov ecx, 1
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
mov ecx, 1
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
lea rdx, [rbp - 0x20]
xor ecx, ecx
mov r8d, 0x104
call qword [0x14001c218]
mov rdi, qword [0x14001c340]
xorps xmm0, xmm0
movaps xmmword [rbp + 0x110], xmm0
movups xmmword [rbp + 0x119], xmm0
mov dword [rbp + 0x110], 0xd2ccc4c2
mov word [rbp + 0x114], 0xb5c7
lea rsi, [rbp + 0x110]
call fcn.140014310
mov rbx, qword [rax]
call fcn.140014320
mov rcx, qword [rax]
xor eax, eax
jmp 0x140013d43
lea r8d, [rax + 0x399a468]
lea r10d, [rax + rdx]
add r10d, 0x399a468
and r8d, edx
add r8d, r8d
sub r10d, r8d
add r10b, 0x28
mov byte [rbp + rax + 0x110], r10b
movzx r8d, r10b
not rcx
add rax, rcx
sub rax, r8
mov rcx, r9
lea r8d, [rax + 0x27858ba0]
lea r9d, [rax + rdx]
add r9d, 0x27858ba0
and r8d, edx
add r8d, r8d
sub r9d, r8d
add r9b, 0xa0
mov byte [rbp + rax + 0x110], r9b
sub rax, rbx
inc rbx
movzx r8d, byte [rbp + rax + 0x10e]
add rax, 0xfffffffffffffffe
movzx edx, r8b
add rax, rcx
add rax, rdx
inc rax
cmp rax, 0x19
jae 0x140013fe7
cmp rbx, rax
ja 0x140013fcb
movzx r8d, byte [rbp + rax + 0x110]
movzx edx, r8b
lea r9, [rcx + 1]
cmp rbx, r9
jae 0x140013db1
cmp rcx, rax
ja 0x140013fd7
lea r11, [rbx + rcx]
cmp r11, rax
jbe 0x140013de8
cmp rbx, r9
mov r9, rbx
je 0x140013f19
lea r8, [rcx + 0xa]
cmp rbx, r8
jne 0x140013ecd
lea r9d, [rax - 0x71436c30]
lea r8d, [rax + rdx]
add r8d, 0x8ebc93d0
and r9d, edx
add r9d, r9d
sub r8d, r9d
add r8b, 0x50
jmp 0x140013ebe
je 0x140013d2c
lea r10, [rcx + 3]
cmp rbx, r10
jne 0x140013e6c
lea r9d, [rax - 0x74dd1098]
lea r8d, [rax + rdx]
add r8d, 0x8b22ef68
and r9d, edx
add r9d, r9d
sub r8d, r9d
add r8b, 0x28
jmp 0x140013ebe
lea r10, [rcx + 0x10]
cmp rbx, r10
jae 0x140013e1c
lea r14d, [rax + 0x23ebe738]
lea r10d, [rax + rdx]
add r10d, 0x23ebe738
and r14d, edx
add r14d, r14d
sub r10d, r14d
add r10b, 0x78
cmp r11, 1
je 0x140013cbb
jmp 0x140013e4e
cmp rbx, r9
je 0x140013d2c
lea r14d, [rax - 0xda60868]
lea r10d, [rax + rdx]
add r10d, 0xf259f798
and r14d, edx
add r14d, r14d
sub r10d, r14d
add r10b, 0xd8
cmp r11, 1
je 0x140013cbb
cmp rbx, r9
je 0x140013ef5
lea r11, [rcx + 2]
cmp rbx, r11
jne 0x140013f24
mov r9, rcx
jmp 0x140013f19
lea r10, [rcx + 4]
cmp rbx, r10
jne 0x140013edf
lea r9d, [rax - 0x2d054228]
lea r8d, [rax + rdx]
add r8d, 0xd2fabdd8
and r9d, edx
add r9d, r9d
sub r8d, r9d
add r8b, 0x18
lea r9d, [rax - 0x443e2a08]
lea r10d, [rdx + rax]
add r10d, 0xbbc1d5f8
and r9d, edx
add r9d, r9d
sub r10d, r9d
add r10b, r8b
add r10b, 0x38
mov byte [rbp + rax + 0x110], r10b
add rbx, rcx
movzx edx, r8b
not rdx
jmp 0x140013d33
lea r8, [rcx + 9]
cmp rbx, r8
je 0x140013cf2
jmp 0x140013ca4
lea r10, [rcx + 2]
cmp rbx, r10
je 0x140013f19
lea r10, [rcx + 9]
cmp rbx, r10
jne 0x140013d62
lea ecx, [rax + 0x73ea0788]
lea r8d, [rdx + rax]
add r8d, 0x73ea0788
and ecx, edx
add ecx, ecx
sub r8d, ecx
add r8b, 0x48
mov byte [rbp + rax + 0x110], r8b
dec rax
mov rcx, r9
jmp 0x140013d36
lea r11, [rcx + 4]
cmp rbx, r11
jne 0x140013f51
lea r9d, [rax - 0x992df78]
lea r8d, [rax + rdx]
add r8d, 0xf66d2088
and r9d, edx
add r9d, r9d
sub r8d, r9d
add r8b, 0x48
jmp 0x140013ebe
lea r11, [rcx + 5]
cmp rbx, r11
jne 0x140013f7e
lea r9d, [rax + 0x3e44eef8]
lea r8d, [rax + rdx]
add r8d, 0x3e44eef8
and r9d, edx
add r9d, r9d
sub r8d, r9d
add r8b, 0x38
jmp 0x140013ec1
lea r11, [rcx + 9]
cmp rbx, r11
je 0x140013d2c
cmp rbx, 2
ja 0x140013fa8
cmp rcx, 4
ja 0x140013ef5
mov byte [rbp + rax + 0x110], r10b
jmp 0x140013d36
mov r9d, eax
or r9d, 0x97d5eec0
lea r10d, [r9 + rdx]
and r9d, edx
add r9d, r9d
sub r10d, r9d
add r8b, r10b
add r8b, 0xc0
jmp 0x140013e94
mov eax, 0xeb40d8
jmp 0x140013fdc
call fcn.140005210
mov eax, 0x17f59a0
lea rsi, [rax + rbp]
add rsi, 0x110
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], 0
lea r8, [rbp - 0x20]
xor ecx, ecx
mov rdx, rsi
xor r9d, r9d
call rdi
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call fcn.140005230
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3