Function at 0x140043400
Capabilities:
Encode data using xor
Parse pe header

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xe0
mov rax, qword [0x14015b040]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov r15, rdx
mov qword [rbp - 0x79], rdx
mov r13, rcx
mov qword [rbp - 0x69], rcx
mov qword [rbp - 0x51], rdx
xor esi, esi
mov rcx, qword [rdx]
mov eax, 0x5a4d
cmp word [rcx], ax
jne 0x14004478d
movsxd r12, dword [rcx + 0x3c]
add r12, rcx
mov qword [rbp - 0x71], r12
cmp dword [r12], 0x4550
jne 0x14004478d
test r12, r12
je 0x14004478d
mov eax, 0x20b
cmp word [r12 + 0x18], ax
jne 0x14004478d
mov eax, dword [r12 + 0x50]
mov dword [rbp - 0x49], eax
mov ebx, eax
lea r9d, [rsi + 4]
mov r8d, 0x3000
mov edx, eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r14, rax
mov qword [rbp - 0x59], rax
mov r8d, ebx
mov rcx, r13
call fcn.1400fd154
mov r13, rax
mov qword [rbp - 0x61], rax
test rax, rax
je 0x140044729
lea edx, [rsi + 0xa]
mov rcx, qword [0x14015be80]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov r8d, dword [r12 + 0x54]
mov rdx, qword [r15]
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
movzx ebx, word [r12 + 0x14]
add rbx, 0x28
xor edx, edx
mov edi, edx
cmp dx, word [r12 + 6]
jae 0x140043525
add rbx, r12
mov qword [rbp - 0x71], r12
mov ecx, dword [rbx - 4]
add rcx, r14
mov r8d, dword [rbx]
mov edx, dword [rbx + 4]
add rdx, qword [r15]
call sub.VCRUNTIME140.dll_memcpy
inc edi
lea rbx, [rbx + 0x28]
movzx eax, word [r12 + 6]
cmp edi, eax
jl 0x1400434ff
xor edx, edx
sub r13, qword [r12 + 0x30]
mov eax, 0x5a4d
cmp word [r14], ax
jne 0x140043571
movsxd rax, dword [r14 + 0x3c]
add rax, r14
cmp dword [rax], 0x4550
jne 0x140043571
test rax, rax
je 0x140043571
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x41], xmm1
mov rdi, rdx
mov qword [rbp - 0x31], rdx
mov ecx, dword [rax + 0xb0]
test ecx, ecx
jne 0x14004364c
lea rcx, [rbp - 0x41]
call fcn.1400448cc
xor edx, edx
mov r15, rdx
mov rsi, rdx
mov rdi, rdx
mov qword [rbp - 0x11], r15
mov qword [rbp - 9], rsi
mov qword [rbp - 1], rdi
cmp r15, rsi
je 0x1400435f3
add r15, 0x10
mov r14d, 0xa
mov r12d, edx
cmp dword [r15], edx
jbe 0x1400435e2
mov ebx, r12d
mov rax, qword [r15 - 8]
movzx edi, word [rax + rbx*2]
shr di, 0xc
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [r15 - 8]
movzx ecx, word [rax + rbx*2]
mov eax, 0xfff
and cx, ax
cmp di, r14w
jne 0x1400435d8
movzx ecx, cx
mov rax, qword [r15 - 0x10]
add qword [rax + rcx], r13
inc r12d
cmp r12d, dword [r15]
jb 0x14004359d
xor edx, edx
add r15, 0x18
lea rax, [r15 - 0x10]
cmp rax, rsi
jne 0x140043595
mov r14, qword [rbp - 0x59]
lea rcx, [rbp - 0x11]
call fcn.1400448cc
mov rdx, r14
lea rcx, [rbp - 0x11]
call fcn.1400f9810
mov rsi, rax
mov qword [rbp - 0x41], rax
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rbx, qword [rsi]
mov r12, qword [rsi + 8]
cmp rbx, r12
je 0x14004372b
mov r13, qword [rbp - 0x69]
mov rcx, rbx
call fcn.1400fb5f8
test rax, rax
je 0x140044640
mov rdi, qword [rbx + 0x20]
mov r15, qword [rbx + 0x28]
jmp 0x140043719
lea rbx, [r14 + rcx]
mov r15d, dword [rax + 0xb4]
add r15, rbx
mov rsi, qword [rbp - 0x39]
mov eax, dword [rbx]
test eax, eax
je 0x1400436cf
mov ecx, eax
cmp rcx, r15
jae 0x1400436cf
cmp dword [rbx + 4], edx
je 0x1400436cf
lea rax, [rcx + r14]
mov qword [rbp - 0x11], rax
lea rax, [rbx + 8]
mov qword [rbp - 9], rax
mov eax, dword [rbx + 4]
sub rax, 8
shr rax, 1
mov dword [rbp - 1], eax
cmp rsi, rdi
je 0x1400436ad
movups xmm0, xmmword [rbp - 0x11]
movups xmmword [rsi], xmm0
movsd xmm1, qword [rbp - 1]
movsd qword [rsi + 0x10], xmm1
add rsi, 0x18
mov qword [rbp - 0x39], rsi
jmp 0x1400436c7
lea r8, [rbp - 0x11]
mov rdx, rsi
lea rcx, [rbp - 0x41]
call fcn.1400f9cb0
mov rdi, qword [rbp - 0x31]
mov rsi, qword [rbp - 0x39]
xor edx, edx
mov eax, dword [rbx + 4]
add rbx, rax
jmp 0x14004365e
mov qword [rbp - 0x31], rdx
mov qword [rbp - 0x39], rdx
mov r15, qword [rbp - 0x41]
mov qword [rbp - 0x41], rdx
lea rcx, [rbp - 0x41]
call fcn.1400448cc
xor edx, edx
jmp 0x14004357a
mov rcx, rbx
call fcn.1400fb5f8
mov rdx, rax
mov r8, rdi
mov rcx, r13
call fcn.1400fd4f0
test rax, rax
je 0x140044620
mov rcx, qword [rdi + 0x20]
mov qword [rcx], rax
add rdi, 0x28
cmp rdi, r15
jne 0x1400436ef
add rbx, 0x38
cmp rbx, r12
jne 0x14004362e
mov bl, 1
xor r12d, r12d
mov edi, 0xa
mov rcx, rsi
call fcn.140044824
mov r13, qword [rbp - 0x61]
test bl, bl
je 0x140044723
mov r9d, dword [rbp - 0x49]
mov r8, r14
mov rdx, r13
mov r15, qword [rbp - 0x69]
mov rcx, r15
call fcn.1400fcf44
test al, al
je 0x140044723
xor edx, edx
mov r8d, 0x8000
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rsi, qword [rbp - 0x71]
mov ebx, dword [rsi + 0x28]
add rbx, r13
mov edx, edi
mov rcx, qword [0x14015be80]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov dword [rbp - 0x49], r12d
mov r8, rbx
lea rdx, [rbp - 0x49]
mov rcx, r15
call fcn.140044a40
test al, al
je 0x140044723
mov r14d, 1
mov ecx, r14d
call qword [sym.imp.USER32.dll_BlockInput]
mov edx, edi
mov rcx, qword [0x14015be80]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov dword [rbp - 0x41], 0x2b
movdqa xmm0, xmmword [0x140153210]
movdqu xmmword [rbp - 0x3d], xmm0
movdqa xmm1, xmmword [0x140152650]
movdqu xmmword [rbp - 0x2d], xmm1
mov dword [rbp - 0x1d], 0x28272625
mov dword [rbp - 0x19], 0x2c2b2a29
mov dword [rbp - 0x15], 0x10542e2d
mov edx, r12d
mov ecx, edx
lea eax, [rdx - 0x1b]
xor byte [rbp + rcx - 0x3d], al
add edx, r14d
cmp edx, dword [rbp - 0x41]
jb 0x140043803
mov eax, dword [rbp - 0x41]
mov byte [rbp + rax - 0x3d], r12b
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 1], xmm1
lea rax, [rbp - 0x3d]
or rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x140043836
lea rdx, [rbp - 0x3d]
lea rcx, [rbp - 0x11]
call fcn.140045210
nop
mov edx, 9
lea rcx, [rbp - 0x11]
call fcn.1400fb330
nop
mov edi, 0x1000
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x140043898
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, rdi
jb 0x140043893
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044619
call fcn.1400fefc0
mov edx, 8
mov rcx, qword [0x14015be80]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov eax, r14d
mov dword [rbp - 0x49], eax
mov dword [rbp - 0x45], 0xe6ce
mov edx, r12d
mov ecx, edx
lea eax, [rdx - 0x1b]
xor byte [rbp + rcx - 0x45], al
add edx, r14d
mov eax, dword [rbp - 0x49]
cmp edx, eax
jb 0x1400438ba
mov byte [rbp + rax - 0x45], r12b
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 1], xmm1
lea rax, [rbp - 0x45]
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x1400438e8
lea rdx, [rbp - 0x45]
lea rcx, [rbp - 0x11]
call fcn.140045210
nop
mov edx, 9
lea rcx, [rbp - 0x11]
call fcn.1400fb330
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x140043945
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, rdi
jb 0x140043940
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044619
call fcn.1400fefc0
mov edx, 0xa
mov rcx, qword [0x14015be80]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov eax, r14d
mov dword [rbp - 0x49], eax
mov dword [rbp - 0x45], 0xe6b8
mov edx, r12d
mov ecx, edx
lea eax, [rdx - 0x1b]
xor byte [rbp + rcx - 0x45], al
add edx, r14d
mov eax, dword [rbp - 0x49]
cmp edx, eax
jb 0x140043967
mov byte [rbp + rax - 0x45], r12b
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 1], xmm1
lea rax, [rbp - 0x45]
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x140043995
lea rdx, [rbp - 0x45]
lea rcx, [rbp - 0x11]
call fcn.140045210
nop
mov edx, 9
lea rcx, [rbp - 0x11]
call fcn.1400fb330
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x1400439f2
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, rdi
jb 0x1400439ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044619
call fcn.1400fefc0
mov dword [rbp - 0x41], 7
mov dword [rbp - 0x3d], 0x8797b5c5
mov dword [rbp - 0x39], 0xeccb8c86
mov edx, r12d
mov ecx, edx
lea eax, [rdx - 0x1b]
xor byte [rbp + rcx - 0x3d], al
add edx, r14d
cmp edx, dword [rbp - 0x41]
jb 0x140043a0a
mov eax, dword [rbp - 0x41]
mov byte [rbp + rax - 0x3d], r12b
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 1], xmm1
lea rax, [rbp - 0x3d]
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x140043a39
lea rdx, [rbp - 0x3d]
lea rcx, [rbp - 0x11]
call fcn.140045210
nop
mov edx, 9
lea rcx, [rbp - 0x11]
call fcn.1400fb330
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x140043a96
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, rdi
jb 0x140043a91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044619
call fcn.1400fefc0
mov edx, 3
mov rcx, qword [0x14015be80]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov eax, 6
mov dword [rbp - 0x41], eax
mov dword [rbp - 0x3d], 0xa1a5abb6
mov dword [rbp - 0x39], 0xebb9a6
mov edx, r12d
test eax, eax
je 0x140043ad8
mov ecx, edx
lea eax, [rdx - 0x1b]
xor byte [rbp + rcx - 0x3d], al
add edx, r14d
mov eax, dword [rbp - 0x41]
cmp edx, eax
jb 0x140043ac5
mov byte [rbp + rax - 0x3d], r12b
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 1], xmm1
lea rax, [rbp - 0x3d]
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x140043af3
lea rdx, [rbp - 0x3d]
lea rcx, [rbp - 0x11]
call fcn.140045210
nop
mov edx, 9
lea rcx, [rbp - 0x11]
call fcn.1400fb330
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x140043b50
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, rdi
jb 0x140043b4b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044619
call fcn.1400fefc0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0xa
mov rcx, qword [0x14015be80]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov dword [rbp - 0x41], 0x2b
movdqa xmm0, xmmword [0x140153210]
movdqu xmmword [rbp - 0x3d], xmm0
movdqa xmm1, xmmword [0x140152650]
movdqu xmmword [rbp - 0x2d], xmm1
mov dword [rbp - 0x1d], 0x28272625
mov dword [rbp - 0x19], 0x2c2b2a29
mov dword [rbp - 0x15], 0x10542e2d
mov edx, r12d
mov ecx, edx
lea eax, [rdx - 0x1b]
xor byte [rbp + rcx - 0x3d], al
add edx, r14d
cmp edx, dword [rbp - 0x41]
jb 0x140043ba6
mov eax, dword [rbp - 0x41]
mov byte [rbp + rax - 0x3d], r12b
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 1], xmm1
lea rax, [rbp - 0x3d]
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x140043bd5
lea rdx, [rbp - 0x3d]
lea rcx, [rbp - 0x11]
call fcn.140045210
nop
mov edx, 9
lea rcx, [rbp - 0x11]
call fcn.1400fb330
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x140043c32
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, rdi
jb 0x140043c2d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044619
call fcn.1400fefc0
mov edx, 8
mov rcx, qword [0x14015be80]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov eax, r14d
mov dword [rbp - 0x49], eax
mov dword [rbp - 0x45], 0xe6ce
mov edx, r12d
mov ecx, edx
lea eax, [rdx - 0x1b]
xor byte [rbp + rcx - 0x45], al
add edx, r14d
mov eax, dword [rbp - 0x49]
cmp edx, eax
jb 0x140043c54
mov byte [rbp + rax - 0x45], r12b
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 1], xmm1
lea rax, [rbp - 0x45]
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x140043c82
lea rdx, [rbp - 0x45]
lea rcx, [rbp - 0x11]
call fcn.140045210
nop
mov edx, 9
lea rcx, [rbp - 0x11]
call fcn.1400fb330
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x140043cdf
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, rdi
jb 0x140043cda
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044619
call fcn.1400fefc0
mov edx, 0xa
mov rcx, qword [0x14015be80]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov eax, r14d
mov dword [rbp - 0x49], eax
mov dword [rbp - 0x45], 0xe6b8
mov edx, r12d
mov ecx, edx
lea eax, [rdx - 0x1b]
xor byte [rbp + rcx - 0x45], al
add edx, r14d
mov eax, dword [rbp - 0x49]
cmp edx, eax
jb 0x140043d01
mov byte [rbp + rax - 0x45], r12b
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 1], xmm1
lea rax, [rbp - 0x45]
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x140043d2f
lea rdx, [rbp - 0x45]
lea rcx, [rbp - 0x11]
call fcn.140045210
nop
mov edx, 9
lea rcx, [rbp - 0x11]
call fcn.1400fb330
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x140043d8c
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, rdi
jb 0x140043d87
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044619
call fcn.1400fefc0
mov dword [rbp - 0x41], 7
mov dword [rbp - 0x3d], 0x8797b5c5
mov dword [rbp - 0x39], 0xeccb8c86
mov edx, r12d
mov ecx, edx
lea eax, [rdx - 0x1b]
xor byte [rbp + rcx - 0x3d], al
add edx, r14d
cmp edx, dword [rbp - 0x41]
jb 0x140043da4
mov eax, dword [rbp - 0x41]
mov byte [rbp + rax - 0x3d], r12b
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 1], xmm1
lea rax, [rbp - 0x3d]
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x140043dd3
lea rdx, [rbp - 0x3d]
lea rcx, [rbp - 0x11]
call fcn.140045210
nop
mov edx, 9
lea rcx, [rbp - 0x11]
call fcn.1400fb330
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x140043e30
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, rdi
jb 0x140043e2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044619
call fcn.1400fefc0
mov edx, 3
mov rcx, qword [0x14015be80]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov dword [rbp - 0x49], 3
mov dword [rbp - 0x45], 0xe8b2b6a6
mov edx, r12d
mov ecx, edx
lea eax, [rdx - 0x1b]
xor byte [rbp + rcx - 0x45], al
add edx, r14d
cmp edx, dword [rbp - 0x49]
jb 0x140043e53
mov eax, dword [rbp - 0x49]
mov byte [rbp + rax - 0x45], r12b
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 1], xmm1
lea rax, [rbp - 0x45]
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x140043e82
lea rdx, [rbp - 0x45]
lea rcx, [rbp - 0x11]
call fcn.140045210
nop
mov edx, 9
lea rcx, [rbp - 0x11]
call fcn.1400fb330
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x140043edf
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, rdi
jb 0x140043eda
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044619
call fcn.1400fefc0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0xa
mov rcx, qword [0x14015be80]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov dword [rbp - 0x41], 0x2b
movdqa xmm0, xmmword [0x140153210]
movdqu xmmword [rbp - 0x3d], xmm0
movdqa xmm1, xmmword [0x140152650]
movdqu xmmword [rbp - 0x2d], xmm1
mov dword [rbp - 0x1d], 0x28272625
mov dword [rbp - 0x19], 0x2c2b2a29
mov dword [rbp - 0x15], 0x10542e2d
mov edx, r12d
mov ecx, edx
lea eax, [rdx - 0x1b]
xor byte [rbp + rcx - 0x3d], al
add edx, r14d
cmp edx, dword [rbp - 0x41]
jb 0x140043f35
mov eax, dword [rbp - 0x41]
mov byte [rbp + rax - 0x3d], r12b
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 1], xmm1
lea rax, [rbp - 0x3d]
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x140043f64
lea rdx, [rbp - 0x3d]
lea rcx, [rbp - 0x11]
call fcn.140045210
nop
mov edx, 9
lea rcx, [rbp - 0x11]
call fcn.1400fb330
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x140043fc1
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, rdi
jb 0x140043fbc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044619
call fcn.1400fefc0
mov edx, 8
mov rcx, qword [0x14015be80]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov eax, r14d
mov dword [rbp - 0x49], eax
mov dword [rbp - 0x45], 0xe6ce
mov edx, r12d
mov ecx, edx
lea eax, [rdx - 0x1b]
xor byte [rbp + rcx - 0x45], al
add edx, r14d
mov eax, dword [rbp - 0x49]
cmp edx, eax
jb 0x140043fe3
mov byte [rbp + rax - 0x45], r12b
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 1], xmm1
lea rax, [rbp - 0x45]
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x140044011
lea rdx, [rbp - 0x45]
lea rcx, [rbp - 0x11]
call fcn.140045210
nop
mov edx, 9
lea rcx, [rbp - 0x11]
call fcn.1400fb330
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x14004406e
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, rdi
jb 0x140044069
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044619
call fcn.1400fefc0
mov edx, 0xa
mov rcx, qword [0x14015be80]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov eax, r14d
mov dword [rbp - 0x49], eax
mov dword [rbp - 0x45], 0xe6b8
mov edx, r12d
mov ecx, edx
lea eax, [rdx - 0x1b]
xor byte [rbp + rcx - 0x45], al
add edx, r14d
mov eax, dword [rbp - 0x49]
cmp edx, eax
jb 0x140044090
mov byte [rbp + rax - 0x45], r12b
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 1], xmm1
lea rax, [rbp - 0x45]
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x1400440be
lea rdx, [rbp - 0x45]
lea rcx, [rbp - 0x11]
call fcn.140045210
nop
mov edx, 9
lea rcx, [rbp - 0x11]
call fcn.1400fb330
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x14004411b
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, rdi
jb 0x140044116
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044619
call fcn.1400fefc0
mov dword [rbp - 0x41], 7
mov dword [rbp - 0x3d], 0x8797b5c5
mov dword [rbp - 0x39], 0xeccb8c86
mov edx, r12d
mov ecx, edx
lea eax, [rdx - 0x1b]
xor byte [rbp + rcx - 0x3d], al
add edx, r14d
cmp edx, dword [rbp - 0x41]
jb 0x140044133
mov eax, dword [rbp - 0x41]
mov byte [rbp + rax - 0x3d], r12b
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 1], xmm1
lea rax, [rbp - 0x3d]
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x140044162
lea rdx, [rbp - 0x3d]
lea rcx, [rbp - 0x11]
call fcn.140045210
nop
mov edx, 9
lea rcx, [rbp - 0x11]
call fcn.1400fb330
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x1400441bf
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, rdi
jb 0x1400441ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044619
call fcn.1400fefc0
mov edx, 3
mov rcx, qword [0x14015be80]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov eax, 0xd
mov dword [rbp - 0x41], eax
movdqa xmm0, xmmword [0x140152540]
movdqu xmmword [rbp - 0x3d], xmm0
mov edx, r12d
test eax, eax
je 0x140044200
mov ecx, edx
lea eax, [rdx - 0x1b]
xor byte [rbp + rcx - 0x3d], al
add edx, r14d
mov eax, dword [rbp - 0x41]
cmp edx, eax
jb 0x1400441ed
mov byte [rbp + rax - 0x3d], r12b
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 1], xmm1
lea rax, [rbp - 0x3d]
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x14004421b
lea rdx, [rbp - 0x3d]
lea rcx, [rbp - 0x11]
call fcn.140045210
nop
mov edx, 9
lea rcx, [rbp - 0x11]
call fcn.1400fb330
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x140044278
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, rdi
jb 0x140044273
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044619
call fcn.1400fefc0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0xa
mov rcx, qword [0x14015be80]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov dword [rbp - 0x41], 0x2b
movdqa xmm0, xmmword [0x140153210]
movdqu xmmword [rbp - 0x3d], xmm0
movdqa xmm1, xmmword [0x140152650]
movdqu xmmword [rbp - 0x2d], xmm1
mov dword [rbp - 0x1d], 0x28272625
mov dword [rbp - 0x19], 0x2c2b2a29
mov dword [rbp - 0x15], 0x10542e2d
mov edx, r12d
mov ecx, edx
lea eax, [rdx - 0x1b]
xor byte [rbp + rcx - 0x3d], al
add edx, r14d
cmp edx, dword [rbp - 0x41]
jb 0x1400442ce
mov eax, dword [rbp - 0x41]
mov byte [rbp + rax - 0x3d], r12b
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 1], xmm1
lea rax, [rbp - 0x3d]
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x1400442fd
lea rdx, [rbp - 0x3d]
lea rcx, [rbp - 0x11]
call fcn.140045210
nop
mov edx, 0xf
lea rcx, [rbp - 0x11]
call fcn.1400fb330
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x14004435a
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, rdi
jb 0x140044355
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044619
call fcn.1400fefc0
mov edx, 8
mov rcx, qword [0x14015be80]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov eax, r14d
mov dword [rbp - 0x49], eax
mov dword [rbp - 0x45], 0xe6ce
mov edx, r12d
mov ecx, edx
lea eax, [rdx - 0x1b]
xor byte [rbp + rcx - 0x45], al
add edx, r14d
mov eax, dword [rbp - 0x49]
cmp edx, eax
jb 0x14004437c
mov byte [rbp + rax - 0x45], r12b
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 1], xmm1
lea rax, [rbp - 0x45]
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x1400443aa
lea rdx, [rbp - 0x45]
lea rcx, [rbp - 0x11]
call fcn.140045210
nop
mov edx, 0xf
lea rcx, [rbp - 0x11]
call fcn.1400fb330
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x140044407
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, rdi
jb 0x140044402
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044619
call fcn.1400fefc0
mov edx, 0xa
mov rcx, qword [0x14015be80]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov eax, r14d
mov dword [rbp - 0x49], eax
mov dword [rbp - 0x45], 0xe6b8
mov edx, r12d
mov ecx, edx
lea eax, [rdx - 0x1b]
xor byte [rbp + rcx - 0x45], al
add edx, r14d
mov eax, dword [rbp - 0x49]
cmp edx, eax
jb 0x140044429
mov byte [rbp + rax - 0x45], r12b
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 1], xmm1
lea rax, [rbp - 0x45]
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x140044457
lea rdx, [rbp - 0x45]
lea rcx, [rbp - 0x11]
call fcn.140045210
nop
mov edx, 0xf
lea rcx, [rbp - 0x11]
call fcn.1400fb330
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x1400444b4
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, rdi
jb 0x1400444af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044619
call fcn.1400fefc0
mov dword [rbp - 0x41], 7
mov dword [rbp - 0x3d], 0x8797b5c5
mov dword [rbp - 0x39], 0xeccb8c86
mov edx, r12d
mov ecx, edx
lea eax, [rdx - 0x1b]
xor byte [rbp + rcx - 0x3d], al
add edx, r14d
cmp edx, dword [rbp - 0x41]
jb 0x1400444cc
mov eax, dword [rbp - 0x41]
mov byte [rbp + rax - 0x3d], r12b
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 1], xmm1
lea rax, [rbp - 0x3d]
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x1400444fb
lea rdx, [rbp - 0x3d]
lea rcx, [rbp - 0x11]
call fcn.140045210
nop
mov edx, 0xf
lea rcx, [rbp - 0x11]
call fcn.1400fb330
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x140044558
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, rdi
jb 0x140044553
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044619
call fcn.1400fefc0
mov edx, 3
mov rcx, qword [0x14015be80]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov eax, 4
mov dword [rbp - 0x41], eax
mov dword [rbp - 0x3d], 0xe2aaa7b7
mov byte [rbp - 0x39], 0xe9
xor ecx, ecx
mov word [rbp - 0x38], cx
mov byte [rbp - 0x36], cl
mov edx, r12d
test eax, eax
je 0x1400445aa
mov ecx, edx
lea eax, [rdx - 0x1b]
xor byte [rbp + rcx - 0x3d], al
add edx, r14d
mov esi, dword [rbp - 0x41]
mov dword [rbp - 0x49], esi
cmp edx, esi
jb 0x14004458d
mov rsi, qword [rbp - 0x71]
mov eax, dword [rbp - 0x49]
mov byte [rbp + rax - 0x3d], r12b
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 1], xmm1
lea rax, [rbp - 0x3d]
inc rbx
cmp byte [rax + rbx], r12b
jne 0x1400445c2
mov r8, rbx
lea rdx, [rbp - 0x3d]
lea rcx, [rbp - 0x11]
call fcn.140045210
nop
mov edx, 0xf
lea rcx, [rbp - 0x11]
call fcn.1400fb330
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x140044663
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, rdi
jb 0x14004465e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004465e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov edi, 0xa
mov edx, edi
mov rcx, qword [0x14015be80]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop
xor r12d, r12d
mov bl, r12b
jmp 0x140043735
mov edx, 0xc
mov rcx, qword [0x14015be80]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop
xor r12d, r12d
mov bl, r12b
jmp 0x140043730
call fcn.1400fefc0
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [rsi + 0x54]
test rax, rax
je 0x1400446c3
mov qword [rbp - 9], r12
and qword [rbp - 1], 0
mov qword [rbp - 0x11], 0x30
mov qword [rbp + 7], r13
mov qword [rbp + 0xf], rax
mov dword [rbp - 0x49], r12d
mov qword [rsp + 0x38], r12
lea rax, [rbp - 0x49]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
mov r9d, 0x28
lea r8, [rbp - 0x11]
mov edx, 0x80862007
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.USER32.dll_BlockInput]
nop
mov rbx, qword [rbp - 0x79]
mov rcx, qword [rbx]
test rcx, rcx
je 0x14004471b
mov rdx, qword [rbx + 0x10]
sub rdx, rcx
cmp rdx, rdi
jb 0x14004470b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400447ef
mov rcx, r8
call fcn.1400fefc0
mov qword [rbx], r12
mov qword [rbx + 8], r12
mov qword [rbx + 0x10], r12
mov rax, r13
jmp 0x1400447c8
mov r15, qword [rbp - 0x79]
jmp 0x14004472c
xor r12d, r12d
xor edx, edx
mov r8d, 0x8000
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rdx, r13
mov rcx, qword [rbp - 0x69]
call fcn.1400fd330
nop
mov rcx, qword [r15]
test rcx, rcx
je 0x1400447c6
mov rdx, qword [r15 + 0x10]
sub rdx, rcx
mov edi, 0x1000
cmp rdx, rdi
jb 0x14004477b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400447ef
mov rcx, r8
call fcn.1400fefc0
mov qword [r15], r12
mov qword [r15 + 8], r12
mov qword [r15 + 0x10], r12
jmp 0x1400447c6
mov rdx, qword [rdx + 0x10]
sub rdx, rcx
mov edi, 0x1000
cmp rdx, rdi
jb 0x1400447b6
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400447ef
mov rcx, r8
call fcn.1400fefc0
mov qword [r15], rsi
mov qword [r15 + 8], rsi
mov qword [r15 + 0x10], rsi
xor eax, eax
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.1400feed0
mov rbx, qword [rsp + 0x130]
add rsp, 0xe0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3