Function at 0x14000cef0
Capabilities:
Encode data using xor
Execute command
Hide graphical window
Log keystrokes via polling
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xb8]
sub rsp, 0x190
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x14005f040]
xor rax, rsp
mov qword [rbp + 0x70], rax
mov rdi, rdx
lea rax, [rbp + 0x10]
mov qword [rbp - 0x40], rax
mov rdx, qword [rdx + 0x10]
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
xor r13d, r13d
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x28], r13
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rdx + r8], r13b
jne 0x14000cf53
lea rcx, [rbp + 0x10]
call fcn.140010e60
nop
lea rax, [rsp + 0x70]
mov qword [rbp + 0x50], rax
mov rdx, qword [rdi + 8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], r13
mov r8, rbx
inc r8
cmp byte [rdx + r8], 0
jne 0x14000cf86
lea rcx, [rsp + 0x70]
call fcn.140010e60
nop
lea rcx, [rbp - 0x30]
call fcn.14000f190
mov rdi, rax
mov rdx, qword [rax + 0x18]
cmp rdx, 0xf
jbe 0x14000cfe1
mov rcx, qword [rax]
inc rdx
cmp rdx, 0x1000
jb 0x14000cfdc
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000d06b
mov rcx, r8
call fcn.14004ae04
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x14000d028
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d023
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d06b
call fcn.14004ae04
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov rdx, qword [rbp + 0x28]
cmp rdx, 0xf
jbe 0x14000d077
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d072
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d072
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004ae04
movabs rdi, 0x4c0ae698d75306f0
mov qword [rbp - 0x50], rdi
movabs r15, 0x3f06445907ae31e4
mov qword [rbp - 0x48], r15
movabs r12, 0x4c0ae698d7004ab3
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r15
movdqa xmm0, xmmword [rbp - 0x40]
xorps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x50], xmm0
lea rcx, [rbp - 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0x4c45e6d4d7414ae5
mov qword [rsp + 0x30], rax
movabs rax, 0x3f52441707ef31b6
mov qword [rsp + 0x38], rax
movabs rax, 0x74a5c74321b70958
mov qword [rsp + 0x40], rax
movabs rax, 0x8ea29dee21610c58
mov qword [rsp + 0x48], rax
movabs rax, 0xc14a3c4ff2b0dcf
mov qword [rsp + 0x50], rax
movabs rax, 0x17495fb248a9e9a1
mov qword [rsp + 0x58], rax
movabs rax, 0x6b7d57a3942ed23c
mov qword [rsp + 0x60], rax
movabs rdx, 0xc50363afb3a1bb02
mov qword [rsp + 0x68], rdx
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], r15
movabs r14, 0x74cbc72a21e00975
mov qword [rbp - 0x20], r14
movabs rsi, 0x8ef19dc321550c6e
mov qword [rbp - 0x18], rsi
movabs rax, 0xc64a3b4ff420da7
mov qword [rbp - 0x10], rax
movabs rcx, 0x17675fd548c7e9c8
mov qword [rbp - 8], rcx
movabs rax, 0x6b7d57c69456d259
mov qword [rbp], rax
mov qword [rbp + 8], rdx
movdqa xmm0, xmmword [rbp - 0x30]
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [rbp - 0x20]
xorps xmm1, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm1
movdqa xmm0, xmmword [rbp - 0x10]
xorps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [rbp]
xorps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm1
lea rdx, [rsp + 0x30]
call fcn.140049090
test rax, rax
jne 0x14000d2b7
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], r15
movabs r14, 0x6c6d88f1a3692be4
movdqa xmm6, xmmword [rbp - 0x50]
movabs rbx, 0x74cbc72a2bce275b
movabs r13, 0x5a6b253e27dc5e82
nop word [rax + rax]
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], r15
movdqa xmm0, xmm6
xorps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x50], xmm0
lea rcx, [rbp - 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rsi
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], r15
movabs rax, 0x74cbc72a21e00975
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rsi
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [rbp + 0x20]
xorps xmm1, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm1
lea rcx, [rsp + 0x70]
call fcn.140001570
xor edx, edx
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_SleepEx]
lea rdx, [rsp + 0x30]
call fcn.140049090
test rax, rax
je 0x14000d210
mov rbx, 0xffffffffffffffff
xor r13d, r13d
movabs r14, 0x74cbc72a21e00975
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r15
movdqa xmm0, xmmword [rbp - 0x40]
xorps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x50], xmm0
lea rcx, [rbp - 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0x342c6eba46538e3
mov qword [rbp - 0x30], rax
movabs rax, 0x48263d3c6c8e74a9
mov qword [rbp - 0x28], rax
movabs rax, 0x11a6a64d018e6c1d
mov qword [rbp - 0x20], rax
movabs rax, 0xe3d1f3aa0126654e
mov qword [rbp - 0x18], rax
movabs rax, 0x790ac6d9df2c64c6
mov qword [rbp - 0x10], rax
movabs rax, 0x17675fd548c7e3e6
mov qword [rbp - 8], rax
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], r15
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x28], rsi
movabs rax, 0xc64a3b4ff420da7
mov qword [rbp + 0x30], rax
movabs rdi, 0x17675fd548c7e9c8
mov qword [rbp + 0x38], rdi
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [rbp + 0x20]
xorps xmm1, xmmword [rbp - 0x20]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmm0, xmmword [rbp + 0x30]
xorps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x10], xmm0
lea rcx, [rbp - 0x30]
call fcn.140001570
mov ecx, 0x24
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000d392
lea rdx, [rsp + 0x30]
call fcn.140049090
mov qword [0x1401a9408], rax
mov qword [rbp - 8], rdi
test rax, rax
jne 0x14000d501
movabs rax, 0x206387def75d67e8
mov qword [rsp + 0x30], rax
movabs rax, 0x5a616436738e5581
mov qword [rsp + 0x38], rax
movabs rax, 0x6bbe74f49942901
mov qword [rsp + 0x40], rax
movabs rax, 0xcab8bdb052306f01
mov qword [rsp + 0x48], rax
movabs rax, 0x2c01cbc0df246287
mov qword [rsp + 0x50], rax
movabs rax, 0x67472bb02fb588bc
mov qword [rsp + 0x58], rax
movabs rax, 0x4a5d24b5f135bd2b
mov qword [rsp + 0x60], rax
movabs rcx, 0xc50363afb3a1bb02
mov qword [rsp + 0x68], rcx
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], rsi
movabs rax, 0xc64a3b4ff420da7
mov qword [rbp - 0x10], rax
movabs rax, 0x6b7d57c69456d259
mov qword [rbp], rax
mov qword [rbp + 8], rcx
movdqa xmm0, xmmword [rbp - 0x30]
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [rbp - 0x20]
xorps xmm1, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm1
movdqa xmm0, xmmword [rbp - 0x10]
xorps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [rsp + 0x60]
xorps xmm1, xmmword [rbp]
movdqa xmmword [rsp + 0x60], xmm1
lea rdx, [rsp + 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400105d0
lea rdx, [0x1400107b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movabs rax, 0x4c0ae6dd84550be3
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r15
movdqa xmm0, xmmword [rbp - 0x40]
xorps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x50], xmm0
lea rcx, [rbp - 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14004a430
int3
movabs rax, 0x2f6594c8f75d61e8
mov qword [rbp - 0x30], rax
movabs rax, 0x5026001027dd4281
mov qword [rbp - 0x28], rax
movabs rax, 0x15bfe74f49942913
mov qword [rbp - 0x20], rax
movabs rax, 0xe183ede355306b1c
mov qword [rbp - 0x18], rax
movabs rax, 0xc64838e8c3168c4
mov qword [rbp - 0x10], rax
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], r15
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x28], rsi
movabs rax, 0xc64a3b4ff420da7
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], rdi
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [rbp + 0x20]
xorps xmm1, xmmword [rbp - 0x20]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmm0, xmmword [rbp + 0x30]
xorps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x10], xmm0
lea rdx, [rbp - 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400105d0
mov rdx, qword [0x1401a9408]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x1400107b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [0x1401a9958]
mov qword [rax + 0x10], 0x440
mov qword [rax + 0x18], 0x448
mov qword [rax + 0x20], 0x498
mov qword [rax + 0x28], 0x520
mov qword [rax + 0x30], 0x5a8
call fcn.140049170
mov rcx, qword [0x1401a9958]
mov qword [rcx + 0x38], rax
test rax, rax
jne 0x14000d904
movabs rax, 0x257394ccf75d6be8
mov qword [rbp - 0x30], rax
movabs rax, 0x4d633035668e568a
mov qword [rbp - 0x28], rax
movabs rax, 0x3eba25c4894681b
mov qword [rbp - 0x20], rax
movabs rax, 0xeb96bdac5575750f
mov qword [rbp - 0x18], rax
movabs rax, 0x7817dac7df232dd3
mov qword [rbp - 0x10], rax
movabs rax, 0x36476c870be784ad
mov qword [rbp - 8], rax
movabs rdx, 0x6b7d57c69456d259
mov qword [rbp], rdx
movabs rcx, 0xc50363afb3a1bb02
mov qword [rbp + 8], rcx
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], r15
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x28], rsi
movabs rax, 0xc64a3b4ff420da7
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], rdi
mov qword [rbp + 0x40], rdx
mov qword [rbp + 0x48], rcx
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [rbp + 0x20]
xorps xmm1, xmmword [rbp - 0x20]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmm0, xmmword [rbp + 0x30]
xorps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [rbp + 0x40]
xorps xmm1, xmmword [rbp]
movdqa xmmword [rbp], xmm1
lea rdx, [rbp - 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400105d0
lea rdx, [0x1400107b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r14, qword [0x1401a9958]
mov ecx, 0x10000
call fcn.14004b488
mov rsi, rax
mov edi, r13d
movsxd rdx, edi
shl rdx, 0x10
mov byte [rsp + 0x20], 0
mov r9d, 0x10000
mov r8, rsi
mov rcx, r14
call fcn.1400496f0
test eax, eax
je 0x14000d7b4
mov edx, r13d
lea rcx, [rsi + 0xa0]
mov r8, 0xffffffffffffff60
sub r8, rsi
movabs r9, 0x1000600e9
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rcx - 0xa0]
and rax, 0xffffffffffff00ff
cmp rax, r9
jne 0x14000d79b
mov rax, qword [rcx - 0x30]
not rax
movabs r10, 0xfffff80000000000
test r10, rax
jne 0x14000d79b
movabs rax, 0xffffff0000000fff
test qword [rcx], rax
je 0x14000d8e0
add edx, 0x1000
add rcx, 0x1000
lea rax, [r8 + rcx]
cmp rax, 0x10000
jl 0x14000d760
inc edi
cmp edi, 0xa
jl 0x14000d714
mov rdi, r13
mov rcx, rsi
call fcn.14004ae04
mov rax, qword [0x1401a9958]
mov qword [rax + 0x38], rdi
test rdi, rdi
jne 0x14000d8f0
movabs rax, 0x206387def75d67e8
mov qword [rbp - 0x30], rax
movabs rax, 0x5a616436738e5581
mov qword [rbp - 0x28], rax
movabs rax, 0xb8be5901812901
mov qword [rbp - 0x20], rax
movabs rax, 0xafd1ae916275610b
mov qword [rbp - 0x18], rax
movabs rdx, 0xc64a3b4ff420da7
mov qword [rbp - 0x10], rdx
movabs rcx, 0x17675fd548c7e9c8
mov qword [rbp - 8], rcx
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], r15
movabs rax, 0x74cbc72a21e00975
mov qword [rbp + 0x20], rax
movabs rax, 0x8ef19dc321550c6e
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x30], rdx
mov qword [rbp + 0x38], rcx
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [rbp + 0x20]
xorps xmm1, xmmword [rbp - 0x20]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmm0, xmmword [rbp + 0x30]
xorps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x10], xmm0
lea rdx, [rbp - 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400105d0
lea rdx, [0x1400107b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movabs rax, 0x4c0ae6dd84550be3
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r15
movdqa xmm0, xmmword [rbp - 0x40]
xorps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x50], xmm0
lea rcx, [rbp - 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14004a430
int3
movsxd rax, edx
mov rdi, qword [rax + rsi + 0xa0]
jmp 0x14000d7c2
movabs rsi, 0x8ef19dc321550c6e
movabs r14, 0x74cbc72a21e00975
movabs rax, 0x38799fcbf75d61e8
mov qword [rsp + 0x70], rax
movabs rax, 0x1f3c770b448e5c81
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], rsi
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], r15
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x28], rsi
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [rbp - 0x80]
xorps xmm1, xmmword [rbp + 0x20]
movdqa xmmword [rbp - 0x80], xmm1
lea rdx, [rsp + 0x70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400105d0
mov rcx, qword [0x1401a9958]
mov rdx, qword [rcx + 0x38]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x1400107b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rsp + 0x30]
call fcn.140049ba0
test eax, eax
jne 0x14000da66
movabs rax, 0x206387def75d67e8
mov qword [rsp + 0x70], rax
movabs rax, 0x5a616436738e5581
mov qword [rsp + 0x78], rax
movabs rax, 0x7aea44553902901
mov qword [rbp - 0x80], rax
movabs rax, 0x8ed0bdf073162c1d
mov qword [rbp - 0x78], rax
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], r15
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x28], rsi
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [rbp + 0x20]
xorps xmm1, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm1
lea rdx, [rsp + 0x70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400105d0
lea rdx, [0x1400107b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movabs rax, 0x4c0ae6dd84550be3
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r15
movdqa xmm0, xmmword [rbp - 0x40]
xorps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x50], xmm0
lea rcx, [rbp - 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x1388
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.140003670
movabs rax, 0x4c799febf96b2dc5
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r15
movdqa xmm0, xmmword [rbp - 0x40]
xorps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x50], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x28], r13
lea rax, [rbp - 0x50]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14000daa6
mov r8, rbx
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x10]
call fcn.140010e60
lea rcx, [rbp + 0x10]
call fcn.140002270
mov rdi, rax
movabs rax, 0x396e89f5f76b2dc5
mov qword [rbp - 0x50], rax
movabs rax, 0x3f0c317c27945488
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r15
movdqa xmm0, xmmword [rbp - 0x40]
xorps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x50], xmm0
mov rdx, rdi
lea rcx, [rbp - 0x50]
call fcn.140001570
mov ebx, dword [0x1401a97c0]
add rbx, rdi
mov rdi, qword [0x1401a9958]
mov qword [rbp + 0x50], r13
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea r8, [rbp + 0x50]
mov rdx, rbx
mov rcx, rdi
call fcn.140049a90
test eax, eax
je 0x14000db53
mov byte [rsp + 0x20], 0
mov r9d, 8
lea r8, [rbp - 0x40]
mov rdx, qword [rbp + 0x50]
mov rcx, rdi
call fcn.1400496f0
movabs rax, 0x392fc6a2bb6f25c3
mov qword [rbp - 0x50], rax
movabs rax, 0x3f06445907ae31ee
mov qword [rbp - 0x48], rax
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], r15
movdqa xmm0, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x50], xmm0
mov rbx, qword [rbp - 0x40]
mov rdx, rbx
lea rcx, [rbp - 0x50]
call fcn.140001570
movabs rcx, 0x17675fd548c7e9c8
mov qword [rbp - 8], rcx
test rbx, rbx
jne 0x14000dcfd
movabs rax, 0x206387def75d67e8
mov qword [rsp + 0x30], rax
movabs rax, 0x5a616436738e5581
mov qword [rsp + 0x38], rax
movabs rax, 0x1ba6e74f49942901
mov qword [rsp + 0x40], rax
movabs rax, 0xea95fce34439790a
mov qword [rsp + 0x48], rax
movabs rax, 0x2c02cc948c3168d5
mov qword [rsp + 0x50], rax
movabs rax, 0x70153ea168a281bc
mov qword [rsp + 0x58], rax
movabs rax, 0xe1e38b4e476a63c
mov qword [rsp + 0x60], rax
movabs rax, 0xc50363af9281c871
mov qword [rsp + 0x68], rax
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], rsi
movabs rax, 0xc64a3b4ff420da7
mov qword [rbp - 0x10], rax
movabs rax, 0x6b7d57c69456d259
mov qword [rbp], rax
movabs rcx, 0xc50363afb3a1bb02
mov qword [rbp + 8], rcx
movdqa xmm0, xmmword [rbp - 0x30]
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [rsp + 0x40]
xorps xmm1, xmmword [rbp - 0x20]
movdqa xmmword [rsp + 0x40], xmm1
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [rsp + 0x60]
xorps xmm1, xmmword [rbp]
movdqa xmmword [rsp + 0x60], xmm1
lea rdx, [rsp + 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400105d0
lea rdx, [0x1400107b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movabs rax, 0x4c0ae6dd84550be3
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r15
movdqa xmm0, xmmword [rbp - 0x50]
xorps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x50], xmm0
lea rcx, [rbp - 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x1388
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movabs rax, 0x297987daf75d61e8
mov qword [rbp - 0x30], rax
movabs rax, 0x4c75212b63ca50c4
mov qword [rbp - 0x28], rax
movabs rax, 0x54aeaf5e01866655
mov qword [rbp - 0x20], rax
movabs rax, 0xfed1e9a646276d1a
mov qword [rbp - 0x18], rax
movabs rax, 0x2c5ed0c79a2162d5
mov qword [rbp - 0x10], rax
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], r15
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x28], rsi
movabs rax, 0xc64a3b4ff420da7
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], rcx
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [rbp + 0x20]
xorps xmm1, xmmword [rbp - 0x20]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmm0, xmmword [rbp + 0x30]
xorps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x10], xmm0
lea rdx, [rbp - 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400105d0
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x1400107b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [0x1401a9400], rbx
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm6, eax
cvtdq2pd xmm6, xmm6
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
xorps xmm3, xmm3
movaps xmm2, xmm6
lea rcx, [rsp + 0x70]
call fcn.140001a80
movups xmm0, xmmword [rax]
movups xmmword [0x1401a9478], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [0x1401a9488], xmm1
lea rdx, [0x14000cbc0]
lea rcx, [rbp - 0x70]
call fcn.140010520
nop
lea rcx, [rbp - 0x70]
call fcn.140001a40
lea rdx, [0x14000b220]
lea rcx, [rbp - 0x60]
call fcn.140010520
nop
lea rcx, [rbp - 0x60]
call fcn.140001a40
cmp byte [0x14005f0c1], 0
je 0x14000e01d
nop
xor edx, edx
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_SleepEx]
mov ecx, 0x23
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x14000e016
lea rcx, [rsp + 0x70]
call fcn.140002070
lea rcx, [rsp + 0x70]
call fcn.140002050
nop
mov rdx, qword [0x1401a9400]
add rdx, 0x60
mov rcx, qword [0x1401a9958]
call fcn.1400107f0
mov rbx, rax
mov rdx, rax
call fcn.1400052f0
mov r15, rax
mov rdx, rbx
call fcn.1400052d0
mov rdx, rax
call fcn.140005310
mov rdi, rax
mov rdx, rax
call fcn.1400054b0
mov rbx, rax
mov rdx, rax
call fcn.1400054d0
mov qword [0x1401a99b0], rax
mov rdx, rbx
call fcn.1400054f0
mov rsi, rax
mov rdx, rbx
call fcn.140005510
mov r14, rax
mov edx, dword [0x1401a97f4]
add rdx, rdi
call fcn.140010320
mov qword [0x1401a99c0], rax
test r14, r14
je 0x14000df56
mov qword [0x1401a9470], r14
mov rdx, r14
call fcn.140005530
mov dword [0x1401a99a8], eax
mov r8, r14
lea rdx, [rbp - 0x50]
call fcn.1400055c0
movsd xmm0, qword [rax]
movsd qword [0x1401a88a8], xmm0
mov eax, dword [rax + 8]
mov dword [0x1401a88b0], eax
mov rdx, r14
call fcn.140005470
test rsi, rsi
je 0x14000dffd
lea rcx, [rbp - 0x40]
call fcn.14000e030
mov r8, r15
lea rdx, [rbp - 0x40]
call fcn.1400053f0
mov esi, r13d
mov r15d, dword [rbp - 0x38]
test r15d, r15d
je 0x14000dfed
movsxd rdx, esi
lea rcx, [rbp - 0x40]
call fcn.14000e040
mov rdi, rax
cmp rax, r14
je 0x14000dfe6
test rax, rax
je 0x14000dfe6
mov rdx, rax
call fcn.140005530
cmp dword [0x1401a99a8], eax
jne 0x14000dfe6
mov qword [rbp + 0x50], rdi
mov rdx, rdi
call fcn.140005470
mov rbx, rax
mov qword [rbp + 0x58], rax
mov edx, dword [0x1401a97b4]
add rdx, rdi
call fcn.140010430
mov byte [rbp + 0x60], al
mov rdx, rbx
call fcn.140005490
mov dword [rbp + 0x64], eax
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.14000f010
inc esi
cmp esi, r15d
jb 0x14000df80
call fcn.14000efa0
lea rdx, [rsp + 0x70]
call fcn.14000efc0
nop
lea rcx, [rsp + 0x70]
call fcn.14000f040
cmp byte [0x14005f0c1], 0
jne 0x14000de60
jmp 0x14000e01d
mov byte [0x14005f0c1], 0
call fcn.14004a430
int3