Function at 0x14000c8b0
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Create thread
Encode data using xor
Enumerate gui resources
Enumerate processes
Execute command
Get token membership
Log keystrokes via polling
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x1790]
mov eax, 0x1890
call fcn.1400729d0
sub rsp, rax
mov rax, qword [0x1400940a8]
xor rax, rsp
mov qword [rbp + 0x1780], rax
xor ebx, ebx
call fcn.140006d30
call fcn.140006ac0
call fcn.140007290
call fcn.140006b70
call fcn.140007310
call fcn.140005040
mov rdi, qword [0x140094bd0]
mov rsi, qword [0x140094bd8]
cmp rdi, rsi
je 0x14000c943
nop dword [rax]
mov rcx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x14000c92d
mov rcx, qword [rdi]
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000c943
add rdi, 0x20
cmp rdi, rsi
jne 0x14000c920
call fcn.1400068e0
call fcn.140006a90
lea rcx, [0x140077e88]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdi, rax
test rax, rax
je 0x14000ca0e
lea rdx, str.NtQueryInformationProcess
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
test rax, rax
je 0x14000c9b6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea rax, [rbp + 0x11d8]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rbp + 0x11c0]
lea edx, [r9 + 0x1b]
call rsi
test eax, eax
js 0x14000c9b6
cmp dword [rbp + 0x11c0], ebx
je 0x14000f0fc
lea rdx, str.NtQueryInformationProcess
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x14000ca0e
mov qword [rbp + 0x1130], rbx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea rax, [rbp + 0x11dc]
mov qword [rsp + 0x20], rax
mov r9d, 8
lea r8, [rbp + 0x1130]
lea edx, [r9 + 0x16]
call rdi
test eax, eax
js 0x14000ca0e
cmp qword [rbp + 0x1130], rbx
jne 0x14000f0fc
xor eax, eax
mov qword [rbp - 0x18], rax
lea ecx, [rax + 8]
call fcn.1400725a4
test rax, rax
je 0x14000ca2d
lea rcx, [0x140005370]
mov qword [rax], rcx
jmp 0x14000ca30
mov rax, rbx
mov qword [rbp - 0x18], rax
lea rcx, [rbp + 0x11d0]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140003090]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x11c8], rax
test rax, rax
je 0x14000f0eb
mov qword [rbp - 0x18], rbx
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x14000f108
xor edx, edx
lea rcx, str.OLLYDBG
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000f108
xor edx, edx
lea rcx, str.WinDbgFrameClass
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000f108
xor edx, edx
lea rcx, str.x64dbg
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14000f108
lea rcx, [0x1400948b0]
call fcn.14001bde0
xor edx, edx
lea rcx, [0x140005630]
call qword [sym.imp.USER32.dll_EnumWindows]
mov dword [rbp + 0x11b8], ebx
mov qword [rbp + 0x1128], rbx
mov dword [rbp + 0x11b0], 0
mov word [rbp + 0x11b4], 0x500
lea rax, [rbp + 0x1128]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x48], ebx
mov dword [rsp + 0x40], ebx
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
mov r9d, 0x220
mov r8d, reloc.WLDAP32.dll_Ordinal_32
mov dl, 2
lea rcx, [rbp + 0x11b0]
call qword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
test eax, eax
je 0x14000cb6d
lea r8, [rbp + 0x11b8]
mov rdx, qword [rbp + 0x1128]
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_CheckTokenMembership]
test eax, eax
jne 0x14000cb60
mov dword [rbp + 0x11b8], ebx
mov rcx, qword [rbp + 0x1128]
call qword [sym.imp.ADVAPI32.dll_FreeSid]
cmp dword [rbp + 0x11b8], 0
jne 0x14000cd14
movdqa xmm0, xmmword [0x1400791d0]
movdqu xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [0x140079250]
movdqu xmmword [rbp], xmm1
mov dword [rbp + 0x10], 0xaeb9bcbf
mov dword [rbp + 0x14], 0xcef1f0
mov byte [rbp + 0x18], 1
mov rdi, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rdx, rbx
lea eax, [rdx - 0x46]
xor byte [rbp + rdx - 0x10], al
inc rdx
cmp rdx, 0x27
jb 0x14000cbb0
mov byte [rbp + 0x18], 0
lea rdx, [rbp - 0x10]
mov rcx, rdi
call fcn.1400027b0
lea rdx, [0x1400035b0]
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1140], xmm0
movups xmmword [rbp + 0x1150], xmm0
movups xmmword [rbp + 0x1160], xmm0
movups xmmword [rbp + 0x1170], xmm0
movups xmmword [rbp + 0x1180], xmm0
movups xmmword [rbp + 0x1190], xmm0
movups xmmword [rbp + 0x11a0], xmm0
mov qword [rbp + 0x1140], reloc.WS2_32.dll_WSASetLastError
mov qword [rbp + 0x1148], rbx
lea rax, str.runas
mov qword [rbp + 0x1150], rax
lea rax, str.yourewelcome.exe
mov qword [rbp + 0x1158], rax
mov dword [rbp + 0x1170], 0xa
lea rcx, [rbp + 0x1140]
call qword [sym.imp.SHELL32.dll_ShellExecuteExA]
test eax, eax
jne 0x14000cd0b
movdqa xmm0, xmmword [0x1400792d0]
movdqu xmmword [rbp - 0x38], xmm0
mov dword [rbp - 0x28], 0xbfbcebaf
mov dword [rbp - 0x24], 0xbdb9b9a7
mov dword [rbp - 0x20], 0xa6b1b4b7
mov word [rbp - 0x1c], 0xf8
mov byte [rbp - 0x1a], 1
mov rdi, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
nop dword [rax]
nop dword [rax + rax]
lea eax, [rbx - 0x46]
xor byte [rbp + rbx - 0x38], al
inc rbx
cmp rbx, 0x1d
jb 0x14000cca0
mov byte [rbp - 0x1a], 0
lea rdx, [rbp - 0x38]
mov rcx, rdi
call fcn.1400027b0
lea rdx, [0x1400035b0]
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
cmp dword [rbp + 0x11d0], 0
jne 0x14000d659
mov eax, 1
mov rcx, qword [rbp + 0x1780]
xor rcx, rsp
call fcn.140072a30
lea r11, [rsp + 0x1890]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140078070]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400794e0]
movdqa xmmword [rbp + 0x110], xmm0
movdqa xmm1, xmmword [0x1400795b0]
movdqa xmmword [rbp + 0x120], xmm1
movdqa xmm0, xmmword [0x140079320]
movdqa xmmword [rbp + 0x130], xmm0
movdqa xmm1, xmmword [0x140079440]
movdqa xmmword [rbp + 0x140], xmm1
movdqa xmm0, xmmword [0x140079070]
movdqa xmmword [rbp + 0x150], xmm0
movdqa xmm1, xmmword [0x1400790c0]
movdqa xmmword [rbp + 0x160], xmm1
mov dword [rbp + 0x170], 0x30313637
mov dword [rbp + 0x174], 0xa0d3233
mov word [rbp + 0x178], Ordinal_46
mov byte [rbp + 0x17a], 1
mov rdx, rbx
lea eax, [rdx - 0x46]
xor byte [rbp + rdx + 0x110], al
inc rdx
cmp rdx, 0x69
jb 0x14000cdb3
mov byte [rbp + 0x17a], 0
lea rdx, [rbp + 0x110]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400027b0
movdqa xmm0, xmmword [0x140079550]
movdqa xmmword [rbp + 0xa0], xmm0
movdqa xmm1, xmmword [0x1400795d0]
movdqa xmmword [rbp + 0xb0], xmm1
movdqa xmm0, xmmword [0x140079430]
movdqa xmmword [rbp + 0xc0], xmm0
movdqa xmm1, xmmword [0x1400792f0]
movdqa xmmword [rbp + 0xd0], xmm1
movdqa xmm0, xmmword [0x1400790b0]
movdqa xmmword [rbp + 0xe0], xmm0
movdqa xmm1, xmmword [0x140079060]
movdqa xmmword [rbp + 0xf0], xmm1
mov dword [rbp + 0x100], 0x27262120
mov dword [rbp + 0x104], 0x5d003f24
mov word [rbp + 0x108], Ordinal_46
mov byte [rbp + 0x10a], 1
mov rdx, rbx
nop word [rax + rax]
lea eax, [rdx - 0x46]
xor byte [rbp + rdx + 0xa0], al
inc rdx
cmp rdx, 0x69
jb 0x14000ce70
mov byte [rbp + 0x10a], 0
lea rdx, [rbp + 0xa0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400027b0
movdqa xmm0, xmmword [0x1400794c0]
movdqa xmmword [rbp + 0x30], xmm0
movdqa xmm1, xmmword [0x1400795e0]
movdqa xmmword [rbp + 0x40], xmm1
movdqa xmm0, xmmword [0x140079420]
movdqa xmmword [rbp + 0x50], xmm0
movdqa xmm1, xmmword [0x140079310]
movdqa xmmword [rbp + 0x60], xmm1
movdqa xmm0, xmmword [0x140079040]
movdqa xmmword [rbp + 0x70], xmm0
movdqa xmm1, xmmword [0x1400790d0]
movdqa xmmword [rbp + 0x80], xmm1
mov dword [rbp + 0x90], 0x3d3c3b3a
mov dword [rbp + 0x94], 0x5d003f3e
mov word [rbp + 0x98], Ordinal_46
mov byte [rbp + 0x9a], 1
mov rdx, rbx
nop word [rax + rax]
lea eax, [rdx - 0x46]
xor byte [rbp + rdx + 0x30], al
inc rdx
cmp rdx, 0x69
jb 0x14000cf20
mov byte [rbp + 0x9a], 0
lea rdx, [rbp + 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400027b0
movdqa xmm0, xmmword [0x140079540]
movdqa xmmword [rbp + 0x180], xmm0
movdqa xmm1, xmmword [0x140079610]
movdqa xmmword [rbp + 0x190], xmm1
movdqa xmm0, xmmword [0x1400793b0]
movdqa xmmword [rbp + 0x1a0], xmm0
movdqa xmm1, xmmword [0x140079480]
movdqa xmmword [rbp + 0x1b0], xmm1
movdqa xmm0, xmmword [0x140079050]
movdqa xmmword [rbp + 0x1c0], xmm0
movdqa xmm1, xmmword [0x140079100]
movdqa xmmword [rbp + 0x1d0], xmm1
mov dword [rbp + 0x1e0], 0x3d3c3b3a
mov dword [rbp + 0x1e4], 0x5d003f3e
mov word [rbp + 0x1e8], Ordinal_46
mov byte [rbp + 0x1ea], 1
mov rdx, rbx
nop
lea eax, [rdx - 0x46]
xor byte [rbp + rdx + 0x180], al
inc rdx
cmp rdx, 0x69
jb 0x14000cfd0
mov byte [rbp + 0x1ea], 0
lea rdx, [rbp + 0x180]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400027b0
movdqa xmm0, xmmword [0x1400794d0]
movdqa xmmword [rbp + 0x420], xmm0
movdqa xmm1, xmmword [0x140079600]
movdqa xmmword [rbp + 0x430], xmm1
movdqa xmm0, xmmword [0x1400793e0]
movdqa xmmword [rbp + 0x440], xmm0
movdqa xmm1, xmmword [0x140079410]
movdqa xmmword [rbp + 0x450], xmm1
movdqa xmm0, xmmword [0x140079090]
movdqa xmmword [rbp + 0x460], xmm0
movdqa xmm1, xmmword [0x140079120]
movdqa xmmword [rbp + 0x470], xmm1
mov dword [rbp + 0x480], 0x3d3c3b3a
mov dword [rbp + 0x484], 0x5d003f3e
mov word [rbp + 0x488], Ordinal_46
mov byte [rbp + 0x48a], 1
mov rdx, rbx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rdx - 0x46]
xor byte [rbp + rdx + 0x420], al
inc rdx
cmp rdx, 0x69
jb 0x14000d090
mov byte [rbp + 0x48a], 0
lea rdx, [rbp + 0x420]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400027b0
movdqa xmm0, xmmword [0x140079570]
movdqa xmmword [rbp + 0x3b0], xmm0
movdqa xmm1, xmmword [0x1400795f0]
movdqa xmmword [rbp + 0x3c0], xmm1
movdqa xmm0, xmmword [0x1400793d0]
movdqa xmmword [rbp + 0x3d0], xmm0
movdqa xmm1, xmmword [0x140079460]
movdqa xmmword [rbp + 0x3e0], xmm1
movdqa xmm0, xmmword [0x140079080]
movdqa xmmword [rbp + 0x3f0], xmm0
movdqa xmm1, xmmword [0x1400790f0]
movdqa xmmword [rbp + 0x400], xmm1
mov dword [rbp + 0x410], 0x3d3c3b3a
mov dword [rbp + 0x414], 0x5d003f3e
mov word [rbp + 0x418], Ordinal_46
mov byte [rbp + 0x41a], 1
mov rdx, rbx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rdx - 0x46]
xor byte [rbp + rdx + 0x3b0], al
inc rdx
cmp rdx, 0x69
jb 0x14000d150
mov byte [rbp + 0x41a], 0
lea rdx, [rbp + 0x3b0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400027b0
movdqa xmm0, xmmword [0x140079560]
movdqa xmmword [rbp + 0x340], xmm0
movdqa xmm1, xmmword [0x140079620]
movdqa xmmword [rbp + 0x350], xmm1
movdqa xmm0, xmmword [0x1400793c0]
movdqa xmmword [rbp + 0x360], xmm0
movdqa xmm1, xmmword [0x140079470]
movdqa xmmword [rbp + 0x370], xmm1
movdqa xmm0, xmmword [0x140079030]
movdqa xmmword [rbp + 0x380], xmm0
movdqa xmm1, xmmword [0x1400790e0]
movdqa xmmword [rbp + 0x390], xmm1
mov dword [rbp + 0x3a0], 0x3d3c3b3a
mov dword [rbp + 0x3a4], 0x5d003f3e
mov word [rbp + 0x3a8], Ordinal_46
mov byte [rbp + 0x3aa], 1
mov rdx, rbx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rdx - 0x46]
xor byte [rbp + rdx + 0x340], al
inc rdx
cmp rdx, 0x69
jb 0x14000d210
mov byte [rbp + 0x3aa], 0
lea rdx, [rbp + 0x340]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400027b0
movdqa xmm0, xmmword [0x140079580]
movdqa xmmword [rbp + 0x2d0], xmm0
movdqa xmm1, xmmword [0x140079630]
movdqa xmmword [rbp + 0x2e0], xmm1
movdqa xmm0, xmmword [0x1400793f0]
movdqa xmmword [rbp + 0x2f0], xmm0
movdqa xmm1, xmmword [0x140079490]
movdqa xmmword [rbp + 0x300], xmm1
movdqa xmm0, xmmword [0x1400790a0]
movdqa xmmword [rbp + 0x310], xmm0
movdqa xmm1, xmmword [0x140079110]
movdqa xmmword [rbp + 0x320], xmm1
mov dword [rbp + 0x330], 0x3d3c3b3a
mov dword [rbp + 0x334], 0x5d003f3e
mov word [rbp + 0x338], Ordinal_46
mov byte [rbp + 0x33a], 1
mov rdx, rbx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rdx - 0x46]
xor byte [rbp + rdx + 0x2d0], al
inc rdx
cmp rdx, 0x69
jb 0x14000d2d0
mov byte [rbp + 0x33a], 0
lea rdx, [rbp + 0x2d0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400027b0
movdqa xmm0, xmmword [0x1400794e0]
movdqa xmmword [rbp + 0x260], xmm0
movdqa xmm1, xmmword [0x1400795b0]
movdqa xmmword [rbp + 0x270], xmm1
movdqa xmm0, xmmword [0x140079320]
movdqa xmmword [rbp + 0x280], xmm0
movdqa xmm1, xmmword [0x140079440]
movdqa xmmword [rbp + 0x290], xmm1
movdqa xmm0, xmmword [0x140079070]
movdqa xmmword [rbp + 0x2a0], xmm0
movdqa xmm1, xmmword [0x1400790c0]
movdqa xmmword [rbp + 0x2b0], xmm1
mov dword [rbp + 0x2c0], 0x30313637
mov dword [rbp + 0x2c4], 0xa0d3233
mov word [rbp + 0x2c8], Ordinal_46
mov byte [rbp + 0x2ca], 1
mov rdx, rbx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rdx - 0x46]
xor byte [rbp + rdx + 0x260], al
inc rdx
cmp rdx, 0x69
jb 0x14000d390
mov byte [rbp + 0x2ca], 0
lea rdx, [rbp + 0x260]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400027b0
mov dword [rsp + 0x68], 0x8f8fe0a1
mov dword [rsp + 0x6c], 0x8385fbd3
mov dword [rsp + 0x70], 0xe5fe8497
mov dword [rsp + 0x74], 0x100cdcc
mov rdx, rbx
lea eax, [rdx - 0x46]
xor byte [rsp + rdx + 0x68], al
inc rdx
cmp rdx, 0xe
jb 0x14000d3e0
mov byte [rsp + 0x77], 0
lea rdx, [rsp + 0x68]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400027b0
xorps xmm0, xmm0
movups xmmword [rbp + 0xff0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1000], xmm1
mov r8d, Ordinal_30
lea rdx, str.e_36mLoading_External_DLLS...
lea rcx, [rbp + 0xff0]
call fcn.140002b10
nop
mov edx, Ordinal_26
lea rcx, [rbp + 0xff0]
call fcn.14000bc40
nop
lea rcx, [rbp + 0xff0]
call fcn.140004510
mov word [rsp + 0x60], 0xa
mov byte [rsp + 0x62], 0
lea rdx, [rsp + 0x60]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400027b0
call fcn.140006d30
call fcn.140006ac0
call fcn.140007290
call fcn.140006b70
call fcn.140007310
call fcn.140005040
call fcn.140006a30
call fcn.1400068e0
call fcn.140006a90
call fcn.14000b1a0
call fcn.14000bd10
lea rcx, [0x1400948b0]
call fcn.140018860
mov dword [rbp + 0x1520], 0x130
xor edx, edx
lea ecx, [rdx + 2]
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rdi, rax
lea rdx, [rbp + 0x1520]
mov rcx, rax
call sub.KERNEL32.dll_Process32First
cmp eax, 1
jne 0x14000d521
lea rdx, [rbp + 0x1520]
mov rcx, rdi
call sub.KERNEL32.dll_Process32Next
cmp eax, 1
jne 0x14000d521
lea rdx, [0x140078198]
lea rcx, [rbp + 0x154c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
mov rcx, rdi
test eax, eax
je 0x14000f102
lea rdx, [rbp + 0x1520]
call sub.KERNEL32.dll_Process32Next
cmp eax, 1
je 0x14000d4f2
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.140008390
lea rdx, [0x14000b360]
lea rcx, [rbp + 0x1210]
call fcn.140002080
nop
lea rcx, [rbp + 0x1210]
call fcn.140007df0
lea rdx, [0x140007a40]
lea rcx, [rbp + 0x1200]
call fcn.140002080
nop
lea rcx, [rbp + 0x1200]
call fcn.140007df0
nop
cmp dword [rbp + 0x1208], 0
je 0x14000d580
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
cmp dword [rbp + 0x1218], 0
je 0x14000d590
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call fcn.140007e30
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x14000f108
call fcn.14000c440
call fcn.140007e30
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x14000f108
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x14000f108
call fcn.14000b670
test al, al
je 0x14000d5e2
cmp dword [rbp + 0x11d0], 0
jne 0x14000d659
xor eax, eax
jmp 0x14000cce3
xor edx, edx
lea ecx, [rdx + 2]
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x14000d647
mov dword [rbp + 0x1650], 0x130
lea rdx, [rbp + 0x1650]
mov rcx, rax
call sub.KERNEL32.dll_Process32First
test eax, eax
je 0x14000d63e
lea rdx, [0x140078198]
lea rcx, [rbp + 0x167c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
mov rcx, rdi
test eax, eax
je 0x14000f10e
lea rdx, [rbp + 0x1650]
call sub.KERNEL32.dll_Process32Next
jmp 0x14000d60e
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.14000b670
test al, al
je 0x14000d660
cmp dword [rbp + 0x11d0], 0
je 0x14000d5db
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1240], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1250], xmm1
mov r8d, 0xa
lea rdx, str.x64gui.dll
lea rcx, [rbp + 0x1240]
call fcn.140002b10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1220], xmm0
movdqa xmm1, xmmword [0x140079000]
movdqu xmmword [rbp + 0x1230], xmm1
mov byte [rbp + 0x1220], 0
lea rdx, [rbp + 0x1220]
lea rcx, [rbp + 0x1240]
call fcn.14000b720
test al, al
jne 0x14000f11a
lea rdx, str.x64dbg.exe
lea rcx, [rbp + 0x11e0]
call fcn.140003e70
nop
lea rcx, [rbp + 0x11e0]
call fcn.140006d90
test al, al
jne 0x14000f120
lea rdx, str.x32dbg.exe
lea rcx, [rbp + 0x14e0]
call fcn.140003e70
nop
lea rcx, [rbp + 0x14e0]
call fcn.140006d90
test al, al
jne 0x14000f0e5
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x14000f0e5
lea rcx, [rbp + 0x14e0]
call fcn.1400076b0
nop
lea rcx, [rbp + 0x11e0]
call fcn.1400076b0
nop
lea rcx, [rbp + 0x1220]
call fcn.140004510
nop
lea rcx, [rbp + 0x1240]
call fcn.140004510
lea rcx, [0x140078070]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400794e0]
movdqa xmmword [rbp + 0x1f0], xmm0
movdqa xmm1, xmmword [0x1400795b0]
movdqa xmmword [rbp + 0x200], xmm1
movdqa xmm0, xmmword [0x140079320]
movdqa xmmword [rbp + 0x210], xmm0
movdqa xmm1, xmmword [0x140079440]
movdqa xmmword [rbp + 0x220], xmm1
movdqa xmm0, xmmword [0x140079070]
movdqa xmmword [rbp + 0x230], xmm0
movdqa xmm1, xmmword [0x1400790c0]
movdqa xmmword [rbp + 0x240], xmm1
mov dword [rbp + 0x250], 0x30313637
mov dword [rbp + 0x254], 0xa0d3233
mov word [rbp + 0x258], Ordinal_46
mov byte [rbp + 0x25a], 1
mov rdx, rbx
lea eax, [rdx - 0x46]
xor byte [rbp + rdx + 0x1f0], al
inc rdx
cmp rdx, 0x69
jb 0x14000d7f0
mov byte [rbp + 0x25a], 0
lea rdx, [rbp + 0x1f0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400027b0
movdqa xmm0, xmmword [0x140079550]
movdqa xmmword [rbp + 0x500], xmm0
movdqa xmm1, xmmword [0x1400795d0]
movdqa xmmword [rbp + 0x510], xmm1
movdqa xmm0, xmmword [0x140079430]
movdqa xmmword [rbp + 0x520], xmm0
movdqa xmm1, xmmword [0x1400792f0]
movdqa xmmword [rbp + 0x530], xmm1
movdqa xmm0, xmmword [0x1400790b0]
movdqa xmmword [rbp + 0x540], xmm0
movdqa xmm1, xmmword [0x140079060]
movdqa xmmword [rbp + 0x550], xmm1
mov dword [rbp + 0x560], 0x27262120
mov dword [rbp + 0x564], 0x5d003f24
mov word [rbp + 0x568], Ordinal_46
mov byte [rbp + 0x56a], 1
lea rdx, [rbp + 0x500]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
movdqa xmm0, xmmword [0x1400794c0]
movdqa xmmword [rbp + 0x570], xmm0
movdqa xmm1, xmmword [0x1400795e0]
movdqa xmmword [rbp + 0x580], xmm1
movdqa xmm0, xmmword [0x140079420]
movdqa xmmword [rbp + 0x590], xmm0
movdqa xmm1, xmmword [0x140079310]
movdqa xmmword [rbp + 0x5a0], xmm1
movdqa xmm0, xmmword [0x140079040]
movdqa xmmword [rbp + 0x5b0], xmm0
movdqa xmm1, xmmword [0x1400790d0]
movdqa xmmword [rbp + 0x5c0], xmm1
mov dword [rbp + 0x5d0], 0x3d3c3b3a
mov dword [rbp + 0x5d4], 0x5d003f3e
mov word [rbp + 0x5d8], Ordinal_46
mov byte [rbp + 0x5da], 1
lea rdx, [rbp + 0x570]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
movdqa xmm0, xmmword [0x140079540]
movdqa xmmword [rbp + 0x5e0], xmm0
movdqa xmm1, xmmword [0x140079610]
movdqa xmmword [rbp + 0x5f0], xmm1
movdqa xmm0, xmmword [0x1400793b0]
movdqa xmmword [rbp + 0x600], xmm0
movdqa xmm1, xmmword [0x140079480]
movdqa xmmword [rbp + 0x610], xmm1
movdqa xmm0, xmmword [0x140079050]
movdqa xmmword [rbp + 0x620], xmm0
movdqa xmm1, xmmword [0x140079100]
movdqa xmmword [rbp + 0x630], xmm1
mov dword [rbp + 0x640], 0x3d3c3b3a
mov dword [rbp + 0x644], 0x5d003f3e
mov word [rbp + 0x648], Ordinal_46
mov byte [rbp + 0x64a], 1
lea rdx, [rbp + 0x5e0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
movdqa xmm0, xmmword [0x1400794d0]
movdqa xmmword [rbp + 0x650], xmm0
movdqa xmm1, xmmword [0x140079600]
movdqa xmmword [rbp + 0x660], xmm1
movdqa xmm0, xmmword [0x1400793e0]
movdqa xmmword [rbp + 0x670], xmm0
movdqa xmm1, xmmword [0x140079410]
movdqa xmmword [rbp + 0x680], xmm1
movdqa xmm0, xmmword [0x140079090]
movdqa xmmword [rbp + 0x690], xmm0
movdqa xmm1, xmmword [0x140079120]
movdqa xmmword [rbp + 0x6a0], xmm1
mov dword [rbp + 0x6b0], 0x3d3c3b3a
mov dword [rbp + 0x6b4], 0x5d003f3e
mov word [rbp + 0x6b8], Ordinal_46
mov byte [rbp + 0x6ba], 1
lea rdx, [rbp + 0x650]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
movdqa xmm0, xmmword [0x140079570]
movdqa xmmword [rbp + 0x6c0], xmm0
movdqa xmm1, xmmword [0x1400795f0]
movdqa xmmword [rbp + 0x6d0], xmm1
movdqa xmm0, xmmword [0x1400793d0]
movdqa xmmword [rbp + 0x6e0], xmm0
movdqa xmm1, xmmword [0x140079460]
movdqa xmmword [rbp + 0x6f0], xmm1
movdqa xmm0, xmmword [0x140079080]
movdqa xmmword [rbp + 0x700], xmm0
movdqa xmm1, xmmword [0x1400790f0]
movdqa xmmword [rbp + 0x710], xmm1
mov dword [rbp + 0x720], 0x3d3c3b3a
mov dword [rbp + 0x724], 0x5d003f3e
mov word [rbp + 0x728], Ordinal_46
mov byte [rbp + 0x72a], 1
lea rdx, [rbp + 0x6c0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
movdqa xmm0, xmmword [0x140079560]
movdqa xmmword [rbp + 0x730], xmm0
movdqa xmm1, xmmword [0x140079620]
movdqa xmmword [rbp + 0x740], xmm1
movdqa xmm0, xmmword [0x1400793c0]
movdqa xmmword [rbp + 0x750], xmm0
movdqa xmm1, xmmword [0x140079470]
movdqa xmmword [rbp + 0x760], xmm1
movdqa xmm0, xmmword [0x140079030]
movdqa xmmword [rbp + 0x770], xmm0
movdqa xmm1, xmmword [0x1400790e0]
movdqa xmmword [rbp + 0x780], xmm1
mov dword [rbp + 0x790], 0x3d3c3b3a
mov dword [rbp + 0x794], 0x5d003f3e
mov word [rbp + 0x798], Ordinal_46
mov byte [rbp + 0x79a], 1
lea rdx, [rbp + 0x730]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
movdqa xmm0, xmmword [0x140079580]
movdqa xmmword [rbp + 0x7a0], xmm0
movdqa xmm1, xmmword [0x140079630]
movdqa xmmword [rbp + 0x7b0], xmm1
movdqa xmm0, xmmword [0x1400793f0]
movdqa xmmword [rbp + 0x7c0], xmm0
movdqa xmm1, xmmword [0x140079490]
movdqa xmmword [rbp + 0x7d0], xmm1
movdqa xmm0, xmmword [0x1400790a0]
movdqa xmmword [rbp + 0x7e0], xmm0
movdqa xmm1, xmmword [0x140079110]
movdqa xmmword [rbp + 0x7f0], xmm1
mov dword [rbp + 0x800], 0x3d3c3b3a
mov dword [rbp + 0x804], 0x5d003f3e
mov word [rbp + 0x808], Ordinal_46
mov byte [rbp + 0x80a], 1
lea rdx, [rbp + 0x7a0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
movdqa xmm0, xmmword [0x1400794e0]
movdqa xmmword [rbp + 0x810], xmm0
movdqa xmm1, xmmword [0x1400795b0]
movdqa xmmword [rbp + 0x820], xmm1
movdqa xmm0, xmmword [0x140079320]
movdqa xmmword [rbp + 0x830], xmm0
movdqa xmm1, xmmword [0x140079440]
movdqa xmmword [rbp + 0x840], xmm1
movdqa xmm0, xmmword [0x140079070]
movdqa xmmword [rbp + 0x850], xmm0
movdqa xmm1, xmmword [0x1400790c0]
movdqa xmmword [rbp + 0x860], xmm1
mov dword [rbp + 0x870], 0x30313637
mov dword [rbp + 0x874], 0xa0d3233
mov word [rbp + 0x878], Ordinal_46
mov byte [rbp + 0x87a], 1
lea rdx, [rbp + 0x810]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
mov dword [rbp - 0x58], 0x8f8fe0a1
mov dword [rbp - 0x54], 0x8385fbd3
mov dword [rbp - 0x50], 0xe5fe8497
mov dword [rbp - 0x4c], 0x100cdcc
lea rdx, [rbp - 0x58]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002ad0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1010], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1020], xmm1
mov r8d, Ordinal_30
lea rdx, str.e_36mConnecting_to_servers...
lea rcx, [rbp + 0x1010]
call fcn.140002b10
nop
mov edx, Ordinal_26
lea rcx, [rbp + 0x1010]
call fcn.14000bc40
nop
lea rcx, [rbp + 0x1010]
call fcn.140004510
mov word [rsp + 0x64], 0xa
mov byte [rsp + 0x66], 0
lea rdx, [rsp + 0x64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400027b0
lea rcx, [0x1400948b0]
call fcn.140018860
mov ecx, 0x60e
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1030], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1040], xmm1
mov r8d, Ordinal_46
lea rdx, str.e_36mSuccessfully_Authenticated_Connection
lea rcx, [rbp + 0x1030]
call fcn.140002b10
nop
mov edx, Ordinal_26
lea rcx, [rbp + 0x1030]
call fcn.14000bc40
nop
lea rcx, [rbp + 0x1030]
call fcn.140004510
mov ecx, 0x60e
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x140094ac0], 0
jne 0x14000de3b
mov dword [rbp - 0x78], 0xc9ef9bb0
mov dword [rbp - 0x74], 0xb2b5cbdf
mov dword [rbp - 0x70], 0x100e3f8
lea rdx, [rbp - 0x78]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a90
lea rdx, [0x140094ac8]
cmp qword [0x140094ae0], 0x10
cmovae rdx, qword [0x140094ac8]
mov r8, qword [0x140094ad8]
mov rcx, rax
call fcn.140002e40
lea rcx, [0x140078070]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1400948b0]
call fcn.140018860
xorps xmm0, xmm0
movups xmmword [rbp + 0x1320], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1330], xmm1
mov r8d, 7
lea rdx, str.success
lea rcx, [rbp + 0x1320]
call fcn.140002b10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x14a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x14b0], xmm1
mov r8d, 7
lea rdx, str.success
lea rcx, [rbp + 0x14a0]
call fcn.140002b10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x12c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x12d0], xmm1
mov r8d, 7
lea rdx, str.success
lea rcx, [rbp + 0x12c0]
call fcn.140002b10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x12e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x12f0], xmm1
mov r8d, 7
lea rdx, str.success
lea rcx, [rbp + 0x12e0]
call fcn.140002b10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1300], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1310], xmm1
mov r8d, 7
lea rdx, str.success
lea rcx, [rbp + 0x1300]
call fcn.140002b10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1340], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1350], xmm1
mov r8d, 7
lea rdx, str.success
lea rcx, [rbp + 0x1340]
call fcn.140002b10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1360], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1370], xmm1
mov r8d, 7
lea rdx, str.success
lea rcx, [rbp + 0x1360]
call fcn.140002b10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1380], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1390], xmm1
mov r8d, 7
lea rdx, str.success
lea rcx, [rbp + 0x1380]
call fcn.140002b10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x13a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x13b0], xmm1
mov r8d, 7
lea rdx, str.success
lea rcx, [rbp + 0x13a0]
call fcn.140002b10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x13e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x13f0], xmm1
mov r8d, 7
lea rdx, str.success
lea rcx, [rbp + 0x13e0]
call fcn.140002b10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1400], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1410], xmm1
mov r8d, 7
lea rdx, str.success
lea rcx, [rbp + 0x1400]
call fcn.140002b10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1280], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1290], xmm1
mov r8d, 7
lea rdx, str.success
lea rcx, [rbp + 0x1280]
call fcn.140002b10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x13c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x13d0], xmm1
mov r8d, 7
lea rdx, str.success
lea rcx, [rbp + 0x13c0]
call fcn.140002b10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x14c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x14d0], xmm1
mov r8d, 7
lea rdx, str.success
lea rcx, [rbp + 0x14c0]
call fcn.140002b10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1480], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1490], xmm1
mov r8d, 7
lea rdx, str.success
lea rcx, [rbp + 0x1480]
call fcn.140002b10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1460], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1470], xmm1
mov r8d, 7
lea rdx, str.success
lea rcx, [rbp + 0x1460]
call fcn.140002b10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1440], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1450], xmm1
mov r8d, 7
lea rdx, str.success
lea rcx, [rbp + 0x1440]
call fcn.140002b10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x12a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x12b0], xmm1
mov r8d, 7
lea rdx, str.success
lea rcx, [rbp + 0x12a0]
call fcn.140002b10
lea rcx, [rbp + 0x12a0]
call fcn.140004510
nop
lea rcx, [rbp + 0x1440]
call fcn.140004510
nop
lea rcx, [rbp + 0x1460]
call fcn.140004510
nop
lea rcx, [rbp + 0x1480]
call fcn.140004510
nop
lea rcx, [rbp + 0x14c0]
call fcn.140004510
nop
lea rcx, [rbp + 0x13c0]
call fcn.140004510
nop
lea rcx, [rbp + 0x1280]
call fcn.140004510
nop
lea rcx, [rbp + 0x1400]
call fcn.140004510
nop
lea rcx, [rbp + 0x13e0]
call fcn.140004510
nop
lea rcx, [rbp + 0x13a0]
call fcn.140004510
nop
lea rcx, [rbp + 0x1380]
call fcn.140004510
nop
lea rcx, [rbp + 0x1360]
call fcn.140004510
nop
lea rcx, [rbp + 0x1340]
call fcn.140004510
nop
lea rcx, [rbp + 0x1300]
call fcn.140004510
nop
lea rcx, [rbp + 0x12e0]
call fcn.140004510
nop
lea rcx, [rbp + 0x12c0]
call fcn.140004510
nop
lea rcx, [rbp + 0x14a0]
call fcn.140004510
nop
lea rcx, [rbp + 0x1320]
call fcn.140004510
xorps xmm0, xmm0
movups xmmword [rbp + 0x1500], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1510], xmm1
xor r8d, r8d
lea rdx, [0x140077fd6]
lea rcx, [rbp + 0x1500]
call fcn.140002b10
nop
lea rcx, [0x140078070]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x1400794e0]
movdqa xmmword [rbp + 0x880], xmm0
movdqa xmm1, xmmword [0x1400795b0]
movdqa xmmword [rbp + 0x890], xmm1
movdqa xmm0, xmmword [0x140079320]
movdqa xmmword [rbp + 0x8a0], xmm0
movdqa xmm1, xmmword [0x140079440]
movdqa xmmword [rbp + 0x8b0], xmm1
movdqa xmm0, xmmword [0x140079070]
movdqa xmmword [rbp + 0x8c0], xmm0
movdqa xmm1, xmmword [0x1400790c0]
movdqa xmmword [rbp + 0x8d0], xmm1
mov dword [rbp + 0x8e0], 0x30313637
mov dword [rbp + 0x8e4], 0xa0d3233
mov word [rbp + 0x8e8], Ordinal_46
mov byte [rbp + 0x8ea], 1
lea rdx, [rbp + 0x880]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
movdqa xmm0, xmmword [0x140079550]
movdqa xmmword [rbp + 0x8f0], xmm0
movdqa xmm1, xmmword [0x1400795d0]
movdqa xmmword [rbp + 0x900], xmm1
movdqa xmm0, xmmword [0x140079430]
movdqa xmmword [rbp + 0x910], xmm0
movdqa xmm1, xmmword [0x1400792f0]
movdqa xmmword [rbp + 0x920], xmm1
movdqa xmm0, xmmword [0x1400790b0]
movdqa xmmword [rbp + 0x930], xmm0
movdqa xmm1, xmmword [0x140079060]
movdqa xmmword [rbp + 0x940], xmm1
mov dword [rbp + 0x950], 0x27262120
mov dword [rbp + 0x954], 0x5d003f24
mov word [rbp + 0x958], Ordinal_46
mov byte [rbp + 0x95a], 1
lea rdx, [rbp + 0x8f0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
movdqa xmm0, xmmword [0x1400794c0]
movdqa xmmword [rbp + 0x960], xmm0
movdqa xmm1, xmmword [0x1400795e0]
movdqa xmmword [rbp + 0x970], xmm1
movdqa xmm0, xmmword [0x140079420]
movdqa xmmword [rbp + 0x980], xmm0
movdqa xmm1, xmmword [0x140079310]
movdqa xmmword [rbp + 0x990], xmm1
movdqa xmm0, xmmword [0x140079040]
movdqa xmmword [rbp + 0x9a0], xmm0
movdqa xmm1, xmmword [0x1400790d0]
movdqa xmmword [rbp + 0x9b0], xmm1
mov dword [rbp + 0x9c0], 0x3d3c3b3a
mov dword [rbp + 0x9c4], 0x5d003f3e
mov word [rbp + 0x9c8], Ordinal_46
mov byte [rbp + 0x9ca], 1
lea rdx, [rbp + 0x960]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
movdqa xmm0, xmmword [0x140079540]
movdqa xmmword [rbp + 0x9d0], xmm0
movdqa xmm1, xmmword [0x140079610]
movdqa xmmword [rbp + 0x9e0], xmm1
movdqa xmm0, xmmword [0x1400793b0]
movdqa xmmword [rbp + 0x9f0], xmm0
movdqa xmm1, xmmword [0x140079480]
movdqa xmmword [rbp + 0xa00], xmm1
movdqa xmm0, xmmword [0x140079050]
movdqa xmmword [rbp + 0xa10], xmm0
movdqa xmm1, xmmword [0x140079100]
movdqa xmmword [rbp + 0xa20], xmm1
mov dword [rbp + 0xa30], 0x3d3c3b3a
mov dword [rbp + 0xa34], 0x5d003f3e
mov word [rbp + 0xa38], Ordinal_46
mov byte [rbp + 0xa3a], 1
lea rdx, [rbp + 0x9d0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
movdqa xmm0, xmmword [0x1400794d0]
movdqa xmmword [rbp + 0xa40], xmm0
movdqa xmm1, xmmword [0x140079600]
movdqa xmmword [rbp + 0xa50], xmm1
movdqa xmm0, xmmword [0x1400793e0]
movdqa xmmword [rbp + 0xa60], xmm0
movdqa xmm1, xmmword [0x140079410]
movdqa xmmword [rbp + 0xa70], xmm1
movdqa xmm0, xmmword [0x140079090]
movdqa xmmword [rbp + 0xa80], xmm0
movdqa xmm1, xmmword [0x140079120]
movdqa xmmword [rbp + 0xa90], xmm1
mov dword [rbp + 0xaa0], 0x3d3c3b3a
mov dword [rbp + 0xaa4], 0x5d003f3e
mov word [rbp + 0xaa8], Ordinal_46
mov byte [rbp + 0xaaa], 1
lea rdx, [rbp + 0xa40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
movdqa xmm0, xmmword [0x140079570]
movdqa xmmword [rbp + 0xab0], xmm0
movdqa xmm1, xmmword [0x1400795f0]
movdqa xmmword [rbp + 0xac0], xmm1
movdqa xmm0, xmmword [0x1400793d0]
movdqa xmmword [rbp + 0xad0], xmm0
movdqa xmm1, xmmword [0x140079460]
movdqa xmmword [rbp + 0xae0], xmm1
movdqa xmm0, xmmword [0x140079080]
movdqa xmmword [rbp + 0xaf0], xmm0
movdqa xmm1, xmmword [0x1400790f0]
movdqa xmmword [rbp + 0xb00], xmm1
mov dword [rbp + 0xb10], 0x3d3c3b3a
mov dword [rbp + 0xb14], 0x5d003f3e
mov word [rbp + 0xb18], Ordinal_46
mov byte [rbp + 0xb1a], 1
lea rdx, [rbp + 0xab0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
movdqa xmm0, xmmword [0x140079560]
movdqa xmmword [rbp + 0xb20], xmm0
movdqa xmm1, xmmword [0x140079620]
movdqa xmmword [rbp + 0xb30], xmm1
movdqa xmm0, xmmword [0x1400793c0]
movdqa xmmword [rbp + 0xb40], xmm0
movdqa xmm1, xmmword [0x140079470]
movdqa xmmword [rbp + 0xb50], xmm1
movdqa xmm0, xmmword [0x140079030]
movdqa xmmword [rbp + 0xb60], xmm0
movdqa xmm1, xmmword [0x1400790e0]
movdqa xmmword [rbp + 0xb70], xmm1
mov dword [rbp + 0xb80], 0x3d3c3b3a
mov dword [rbp + 0xb84], 0x5d003f3e
mov word [rbp + 0xb88], Ordinal_46
mov byte [rbp + 0xb8a], 1
lea rdx, [rbp + 0xb20]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
movdqa xmm0, xmmword [0x140079580]
movdqa xmmword [rbp + 0xb90], xmm0
movdqa xmm1, xmmword [0x140079630]
movdqa xmmword [rbp + 0xba0], xmm1
movdqa xmm0, xmmword [0x1400793f0]
movdqa xmmword [rbp + 0xbb0], xmm0
movdqa xmm1, xmmword [0x140079490]
movdqa xmmword [rbp + 0xbc0], xmm1
movdqa xmm0, xmmword [0x1400790a0]
movdqa xmmword [rbp + 0xbd0], xmm0
movdqa xmm1, xmmword [0x140079110]
movdqa xmmword [rbp + 0xbe0], xmm1
mov dword [rbp + 0xbf0], 0x3d3c3b3a
mov dword [rbp + 0xbf4], 0x5d003f3e
mov word [rbp + 0xbf8], Ordinal_46
mov byte [rbp + 0xbfa], 1
lea rdx, [rbp + 0xb90]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
movdqa xmm0, xmmword [0x1400794e0]
movdqa xmmword [rbp + 0x490], xmm0
movdqa xmm1, xmmword [0x1400795b0]
movdqa xmmword [rbp + 0x4a0], xmm1
movdqa xmm0, xmmword [0x140079320]
movdqa xmmword [rbp + 0x4b0], xmm0
movdqa xmm1, xmmword [0x140079440]
movdqa xmmword [rbp + 0x4c0], xmm1
movdqa xmm0, xmmword [0x140079070]
movdqa xmmword [rbp + 0x4d0], xmm0
movdqa xmm1, xmmword [0x1400790c0]
movdqa xmmword [rbp + 0x4e0], xmm1
mov dword [rbp + 0x4f0], 0x30313637
mov dword [rbp + 0x4f4], 0xa0d3233
mov word [rbp + 0x4f8], Ordinal_46
mov byte [rbp + 0x4fa], 1
lea rdx, [rbp + 0x490]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
mov dword [rsp + 0x78], 0x8f8fe0a1
mov dword [rsp + 0x7c], 0x8385fbd3
mov dword [rbp - 0x80], 0xe5fe8497
mov dword [rbp - 0x7c], 0x100cdcc
nop dword [rax]
nop word [rax + rax]
lea eax, [rbx - 0x46]
xor byte [rsp + rbx + 0x78], al
inc rbx
cmp rbx, 0xe
jb 0x14000e830
mov byte [rbp - 0x79], 0
lea rdx, [rsp + 0x78]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400027b0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1050], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1060], xmm1
mov r8d, Ordinal_41
lea rdx, str._n_e_35mChoose_an_Option_Listed_Below.__n
lea rcx, [rbp + 0x1050]
call fcn.140002b10
nop
mov edx, Ordinal_26
lea rcx, [rbp + 0x1050]
call fcn.14000bc40
nop
lea rcx, [rbp + 0x1050]
call fcn.140004510
xorps xmm0, xmm0
movups xmmword [rbp + 0x1070], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1080], xmm1
mov r8d, reloc.WLDAP32.dll_Ordinal_30
lea rdx, str._n_e_35m1_Allusive_External_n
lea rcx, [rbp + 0x1070]
call fcn.140002b10
nop
mov edx, Ordinal_26
lea rcx, [rbp + 0x1070]
call fcn.14000bc40
nop
lea rcx, [rbp + 0x1070]
call fcn.140004510
xorps xmm0, xmm0
movups xmmword [rbp + 0x1090], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10a0], xmm1
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str._n_e_35mChoice:
lea rcx, [rbp + 0x1090]
call fcn.140002b10
nop
mov edx, Ordinal_26
lea rcx, [rbp + 0x1090]
call fcn.14000bc40
nop
lea rcx, [rbp + 0x1090]
call fcn.140004510
lea rcx, [0x1400948b0]
call fcn.140018860
xorps xmm0, xmm0
movups xmmword [rbp + 0x1260], xmm0
movdqa xmm1, xmmword [0x140079000]
movdqu xmmword [rbp + 0x1270], xmm1
mov byte [rbp + 0x1260], 0
lea rdx, [rbp + 0x11bc]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
cmp dword [rbp + 0x11bc], 1
je 0x14000e9e6
movdqa xmm0, xmmword [0x140079220]
movdqu xmmword [rbp + 0x10b0], xmm0
movdqa xmm1, xmmword [0x1400791f0]
movdqu xmmword [rbp + 0x10c0], xmm1
movdqa xmm0, xmmword [0x140079160]
movdqu xmmword [rbp + 0x10d0], xmm0
mov word [rbp + 0x10e0], 0x100
lea rdx, [rbp + 0x10b0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a10
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [0x140078070]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1420], xmm0
movdqa xmm1, xmmword [0x140079000]
movdqu xmmword [rbp + 0x1430], xmm1
mov byte [rbp + 0x1420], 0
movdqa xmm0, xmmword [0x1400794e0]
movdqa xmmword [rbp + 0xc00], xmm0
movdqa xmm1, xmmword [0x1400795b0]
movdqa xmmword [rbp + 0xc10], xmm1
movdqa xmm0, xmmword [0x140079320]
movdqa xmmword [rbp + 0xc20], xmm0
movdqa xmm1, xmmword [0x140079440]
movdqa xmmword [rbp + 0xc30], xmm1
movdqa xmm0, xmmword [0x140079070]
movdqa xmmword [rbp + 0xc40], xmm0
movdqa xmm1, xmmword [0x1400790c0]
movdqa xmmword [rbp + 0xc50], xmm1
mov dword [rbp + 0xc60], 0x30313637
mov dword [rbp + 0xc64], 0xa0d3233
mov word [rbp + 0xc68], Ordinal_46
mov byte [rbp + 0xc6a], 1
lea rdx, [rbp + 0xc00]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
movdqa xmm0, xmmword [0x140079550]
movdqa xmmword [rbp + 0xc70], xmm0
movdqa xmm1, xmmword [0x1400795d0]
movdqa xmmword [rbp + 0xc80], xmm1
movdqa xmm0, xmmword [0x140079430]
movdqa xmmword [rbp + 0xc90], xmm0
movdqa xmm1, xmmword [0x1400792f0]
movdqa xmmword [rbp + 0xca0], xmm1
movdqa xmm0, xmmword [0x1400790b0]
movdqa xmmword [rbp + 0xcb0], xmm0
movdqa xmm1, xmmword [0x140079060]
movdqa xmmword [rbp + 0xcc0], xmm1
mov dword [rbp + 0xcd0], 0x27262120
mov dword [rbp + 0xcd4], 0x5d003f24
mov word [rbp + 0xcd8], Ordinal_46
mov byte [rbp + 0xcda], 1
lea rdx, [rbp + 0xc70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
movdqa xmm0, xmmword [0x1400794c0]
movdqa xmmword [rbp + 0xce0], xmm0
movdqa xmm1, xmmword [0x1400795e0]
movdqa xmmword [rbp + 0xcf0], xmm1
movdqa xmm0, xmmword [0x140079420]
movdqa xmmword [rbp + 0xd00], xmm0
movdqa xmm1, xmmword [0x140079310]
movdqa xmmword [rbp + 0xd10], xmm1
movdqa xmm0, xmmword [0x140079040]
movdqa xmmword [rbp + 0xd20], xmm0
movdqa xmm1, xmmword [0x1400790d0]
movdqa xmmword [rbp + 0xd30], xmm1
mov dword [rbp + 0xd40], 0x3d3c3b3a
mov dword [rbp + 0xd44], 0x5d003f3e
mov word [rbp + 0xd48], Ordinal_46
mov byte [rbp + 0xd4a], 1
lea rdx, [rbp + 0xce0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
movdqa xmm0, xmmword [0x140079540]
movdqa xmmword [rbp + 0xd50], xmm0
movdqa xmm1, xmmword [0x140079610]
movdqa xmmword [rbp + 0xd60], xmm1
movdqa xmm0, xmmword [0x1400793b0]
movdqa xmmword [rbp + 0xd70], xmm0
movdqa xmm1, xmmword [0x140079480]
movdqa xmmword [rbp + 0xd80], xmm1
movdqa xmm0, xmmword [0x140079050]
movdqa xmmword [rbp + 0xd90], xmm0
movdqa xmm1, xmmword [0x140079100]
movdqa xmmword [rbp + 0xda0], xmm1
mov dword [rbp + 0xdb0], 0x3d3c3b3a
mov dword [rbp + 0xdb4], 0x5d003f3e
mov word [rbp + 0xdb8], Ordinal_46
mov byte [rbp + 0xdba], 1
lea rdx, [rbp + 0xd50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
movdqa xmm0, xmmword [0x1400794d0]
movdqa xmmword [rbp + 0xdc0], xmm0
movdqa xmm1, xmmword [0x140079600]
movdqa xmmword [rbp + 0xdd0], xmm1
movdqa xmm0, xmmword [0x1400793e0]
movdqa xmmword [rbp + 0xde0], xmm0
movdqa xmm1, xmmword [0x140079410]
movdqa xmmword [rbp + 0xdf0], xmm1
movdqa xmm0, xmmword [0x140079090]
movdqa xmmword [rbp + 0xe00], xmm0
movdqa xmm1, xmmword [0x140079120]
movdqa xmmword [rbp + 0xe10], xmm1
mov dword [rbp + 0xe20], 0x3d3c3b3a
mov dword [rbp + 0xe24], 0x5d003f3e
mov word [rbp + 0xe28], Ordinal_46
mov byte [rbp + 0xe2a], 1
lea rdx, [rbp + 0xdc0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
movdqa xmm0, xmmword [0x140079570]
movdqa xmmword [rbp + 0xe30], xmm0
movdqa xmm1, xmmword [0x1400795f0]
movdqa xmmword [rbp + 0xe40], xmm1
movdqa xmm0, xmmword [0x1400793d0]
movdqa xmmword [rbp + 0xe50], xmm0
movdqa xmm1, xmmword [0x140079460]
movdqa xmmword [rbp + 0xe60], xmm1
movdqa xmm0, xmmword [0x140079080]
movdqa xmmword [rbp + 0xe70], xmm0
movdqa xmm1, xmmword [0x1400790f0]
movdqa xmmword [rbp + 0xe80], xmm1
mov dword [rbp + 0xe90], 0x3d3c3b3a
mov dword [rbp + 0xe94], 0x5d003f3e
mov word [rbp + 0xe98], Ordinal_46
mov byte [rbp + 0xe9a], 1
lea rdx, [rbp + 0xe30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
movdqa xmm0, xmmword [0x140079560]
movdqa xmmword [rbp + 0xea0], xmm0
movdqa xmm1, xmmword [0x140079620]
movdqa xmmword [rbp + 0xeb0], xmm1
movdqa xmm0, xmmword [0x1400793c0]
movdqa xmmword [rbp + 0xec0], xmm0
movdqa xmm1, xmmword [0x140079470]
movdqa xmmword [rbp + 0xed0], xmm1
movdqa xmm0, xmmword [0x140079030]
movdqa xmmword [rbp + 0xee0], xmm0
movdqa xmm1, xmmword [0x1400790e0]
movdqa xmmword [rbp + 0xef0], xmm1
mov dword [rbp + 0xf00], 0x3d3c3b3a
mov dword [rbp + 0xf04], 0x5d003f3e
mov word [rbp + 0xf08], Ordinal_46
mov byte [rbp + 0xf0a], 1
lea rdx, [rbp + 0xea0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
movdqa xmm0, xmmword [0x140079580]
movdqa xmmword [rbp + 0xf10], xmm0
movdqa xmm1, xmmword [0x140079630]
movdqa xmmword [rbp + 0xf20], xmm1
movdqa xmm0, xmmword [0x1400793f0]
movdqa xmmword [rbp + 0xf30], xmm0
movdqa xmm1, xmmword [0x140079490]
movdqa xmmword [rbp + 0xf40], xmm1
movdqa xmm0, xmmword [0x1400790a0]
movdqa xmmword [rbp + 0xf50], xmm0
movdqa xmm1, xmmword [0x140079110]
movdqa xmmword [rbp + 0xf60], xmm1
mov dword [rbp + 0xf70], 0x3d3c3b3a
mov dword [rbp + 0xf74], 0x5d003f3e
mov word [rbp + 0xf78], Ordinal_46
mov byte [rbp + 0xf7a], 1
lea rdx, [rbp + 0xf10]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
movdqa xmm0, xmmword [0x1400794e0]
movdqa xmmword [rbp + 0xf80], xmm0
movdqa xmm1, xmmword [0x1400795b0]
movdqa xmmword [rbp + 0xf90], xmm1
movdqa xmm0, xmmword [0x140079320]
movdqa xmmword [rbp + 0xfa0], xmm0
movdqa xmm1, xmmword [0x140079440]
movdqa xmmword [rbp + 0xfb0], xmm1
movdqa xmm0, xmmword [0x140079070]
movdqa xmmword [rbp + 0xfc0], xmm0
movdqa xmm1, xmmword [0x1400790c0]
movdqa xmmword [rbp + 0xfd0], xmm1
mov dword [rbp + 0xfe0], 0x30313637
mov dword [rbp + 0xfe4], 0xa0d3233
mov word [rbp + 0xfe8], Ordinal_46
mov byte [rbp + 0xfea], 1
lea rdx, [rbp + 0xf80]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a50
mov dword [rbp - 0x48], 0x8f8fe0a1
mov dword [rbp - 0x44], 0x8385fbd3
mov dword [rbp - 0x40], 0xe5fe8497
mov dword [rbp - 0x3c], 0x100cdcc
lea rdx, [rbp - 0x48]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002ad0
lea rcx, [0x1400948b0]
call fcn.140018860
lea rdx, str._n_e_35mPlease_enter_your_license_key:
lea rcx, [rbp + 0x11e0]
call fcn.140003c90
nop
mov edx, Ordinal_26
lea rcx, [rbp + 0x11e0]
call fcn.14000bc40
nop
lea rcx, [rbp + 0x11e0]
call fcn.140004510
nop
lea rcx, [rbp + 0x1420]
call fcn.140004510
lea rdx, [rbp + 0x1260]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140002310
lea rdx, [rbp + 0x1260]
lea rcx, [rbp + 0x10e8]
call fcn.140003bd0
mov rdx, rax
lea rcx, [0x1400948b0]
call fcn.14001d7d0
cmp byte [0x140094ac0], 0
jne 0x14000f060
mov dword [rbp - 0x68], 0xc9ef9bb0
mov dword [rbp - 0x64], 0xb2b5cbdf
mov dword [rbp - 0x60], 0x100e3f8
lea rdx, [rbp - 0x68]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002a90
mov rcx, rax
lea rdx, [0x140094ac8]
call fcn.140002550
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, str.new_user_logged_in
lea rcx, [rbp + 0x1108]
call fcn.140003c90
mov rdx, rax
lea rcx, [0x1400948b0]
call fcn.14001ea60
lea rcx, [0x1400948b0]
call fcn.140018860
lea rcx, [0x140078070]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x140077fd6]
lea rcx, [rbp + 0x11e0]
call fcn.140003c90
nop
lea rcx, [0x140078070]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140005cc0
mov ecx, reloc.WS2_32.dll_select
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x14000f0d8
call fcn.140005a00
jmp 0x14000f0c1
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14000f0c1
call fcn.140007930
nop
mov dword [rbp + 0x11d0], ebx
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
call fcn.140007930
nop
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.140007930
int3
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.140007930
nop
call fcn.140007930
nop
call fcn.140007930
int3