Function at 0x1400055a0
Capabilities:
Delete file
Encode data using xor
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x218]
sub rsp, 0x2f0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x1400dc040]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
mov rsi, rcx
mov qword [rbp + 0x30], rcx
xor r12d, r12d
mov qword [rcx], r12
mov qword [rcx + 8], r12
xorps xmm0, xmm0
movups xmmword [rcx + 0x10], xmm0
mov qword [rcx + 0x20], r12
mov qword [rcx + 0x28], 0xf
mov byte [rcx + 0x10], r12b
movups xmmword [rcx + 0x30], xmm0
mov qword [rcx + 0x40], r12
mov qword [rcx + 0x48], 0xf
mov byte [rcx + 0x30], r12b
mov byte [rcx + 0x50], r12b
mov dword [rcx + 0x54], r12d
test dl, dl
jne 0x14000564c
mov dword [rbp + 0x70], 0x9c4
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x30]
call fcn.140011890
mov rcx, rax
call fcn.1400118a0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movups xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], r12
mov qword [rbp + 0x138], r12
xor r8d, r8d
lea rdx, [0x1400a1921]
lea rcx, [rbp + 0x120]
call fcn.1400126c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], r12
mov qword [rbp + 0x158], r12
xor r8d, r8d
lea rdx, [0x1400a1921]
lea rcx, [rbp + 0x140]
call fcn.1400126c0
nop
lea rdx, [rbp + 0x120]
lea rcx, [rsi + 0x10]
call fcn.140007060
lea rcx, [rbp + 0x120]
call fcn.140006fb0
mov eax, dword [str.qvTS]
mov dword [rbp + 0x50], eax
movzx eax, word [0x1400a41b4]
mov word [rbp + 0x54], ax
movsd xmm0, qword [0x1400a4220]
movsd qword [rbp + 0x60], xmm0
movzx eax, word [0x1400a4228]
mov word [rbp + 0x68], ax
movzx r11d, byte [0x1400a422a]
movups xmm0, xmmword [0x1400a41c0]
movups xmmword [rbp + 0x170], xmm0
movups xmm1, xmmword [0x1400a41d0]
movups xmmword [rbp + 0x180], xmm1
movups xmm0, xmmword [0x1400a41e0]
movups xmmword [rbp + 0x190], xmm0
movups xmm1, xmmword [str.__r_Y_tT_r_]
movups xmmword [rbp + 0x1a0], xmm1
movzx eax, byte [0x1400a4200]
mov byte [rbp + 0x1b0], al
mov ecx, dword [0x1400a43b4]
mov dword [rbp + 0x70], ecx
movups xmm0, xmmword [0x1400a4390]
movups xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [0x1400a43a0]
movups xmmword [rbp + 0x130], xmm1
movzx eax, word [0x1400a43b0]
mov word [rbp + 0x140], ax
movzx eax, byte [0x1400a43b2]
mov byte [rbp + 0x142], al
mov r8d, r12d
mov r10d, dword [0x1400dc090]
cmp r10d, 2
jl 0x1400058d1
movdqa xmm5, xmmword [0x1400ca490]
movdqa xmm4, xmmword [0x1400ca770]
movdqa xmm6, xmmword [0x1400ca500]
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rbp + 0x120]
mov r9d, dword [rsp + 0x40]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400ca5c0]
packuswb xmm2, xmm2
movd xmm0, r9d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400ca5c0]
packuswb xmm2, xmm2
movd xmm0, r9d
paddb xmm2, xmm0
movd xmm0, dword [rdx + 4]
xorps xmm2, xmm0
movd dword [rdx + 4], xmm2
add r8d, 8
lea rdx, [rdx + 8]
cmp r8d, 0x20
jl 0x1400057c2
cmp r8d, 0x23
jge 0x140005913
movsxd rax, r8d
lea r9, [rbp + 0x120]
add r9, rax
nop
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x39
movzx eax, r8b
sub al, dl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x23
jl 0x1400058e0
cmp r10d, 2
jl 0x14000599e
movdqa xmm3, xmmword [0x1400ca490]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400ca770]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400ca770]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x1400ca500]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400ca5c0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.8888888888888888]
movd xmm0, ecx
xorps xmm2, xmm0
movd dword [rbp + 0x70], xmm2
jmp 0x1400059e3
lea r9, [rbp + 0x70]
mov r8d, r12d
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x1400059b0
mov r8d, r12d
cmp r10d, 2
jl 0x140005b2e
movdqa xmm5, xmmword [0x1400ca490]
movdqa xmm4, xmmword [0x1400ca770]
movdqa xmm6, xmmword [0x1400ca500]
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp + 0x170]
mov edx, dword [rsp + 0x40]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400ca5c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400ca5c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x40
jl 0x140005a21
cmp r8d, 0x41
jge 0x140005b80
movsxd rax, r8d
lea r9, [rbp + 0x170]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x41
jl 0x140005b40
nop dword [rax]
nop word [rax + rax]
mov byte [rbp + 0x60], 0x47
xor byte [rbp + 0x61], 0x39
xor byte [rbp + 0x62], 0x3a
xor byte [rbp + 0x63], 0x3b
xor byte [rbp + 0x64], 0x3c
xor byte [rbp + 0x65], 0x3d
xor byte [rbp + 0x66], 0x3e
xor byte [rbp + 0x67], 0x3f
xor byte [rbp + 0x68], 0x40
xor byte [rbp + 0x69], 0x41
xor r11b, 0x42
mov byte [rbp + 0x6a], r11b
mov byte [rbp + 0x50], 0x49
xor byte [rbp + 0x51], 0x39
xor byte [rbp + 0x52], 0x3a
xor byte [rbp + 0x53], 0x3b
xor byte [rbp + 0x54], 0x3c
xor byte [rbp + 0x55], 0x3d
mov ecx, 0x278
call fcn.14009aa40
mov rdi, rax
mov qword [rbp + 0x48], rax
xor edx, edx
mov r8d, 0x278
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
lea rax, [rbp + 0x98]
mov qword [rbp + 0x38], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r12
mov qword [rbp + 0xb0], r12
lea rax, [rbp + 0x120]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140005c20
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x98]
call fcn.1400126c0
nop
lea rax, [rbp + 0x78]
mov qword [rbp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
mov qword [rbp + 0x88], r12
mov qword [rbp + 0x90], r12
lea rax, [rbp + 0x70]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140005c62
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x78]
call fcn.1400126c0
nop
lea rax, [rbp + 0xd8]
mov qword [rbp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
mov qword [rbp + 0xe8], r12
mov qword [rbp + 0xf0], r12
lea rax, [rbp + 0x170]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140005cb0
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0xd8]
call fcn.1400126c0
nop
lea rax, [rsp + 0x50]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
lea rax, [rbp + 0x60]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140005cf1
lea rdx, [rbp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.1400126c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], r12
mov qword [rbp + 8], r12
lea rax, [rbp + 0x50]
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140005d20
mov r8, rbx
lea rdx, [rbp + 0x50]
lea rcx, [rbp - 0x10]
call fcn.1400126c0
nop
lea rax, [rbp + 0x98]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x78]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xd8]
lea r8, [rsp + 0x50]
lea rdx, [rbp - 0x10]
mov rcx, rdi
call fcn.140002060
nop
mov rbx, qword [rsi + 8]
mov qword [rsi + 8], rax
test rbx, rbx
je 0x140005d90
mov rcx, rbx
call fcn.14000e5c0
mov edx, 0x278
mov rcx, rbx
call fcn.14009aa84
nop word [rax + rax]
mov rcx, qword [rsi + 8]
call fcn.14008ea00
mov rax, qword [rsi + 8]
cmp byte [rax + 0x210], 0
jne 0x140005dce
mov dword [rbp + 0x70], 0x5dc
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x60]
call fcn.140011890
mov rcx, rax
call fcn.1400118a0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov qword [rbp + 0x160], rax
lea rcx, [rbp + 0x160]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_asctime]
lea r13, str.settings.json
mov qword [rbp + 0x60], r13
mov qword [rbp + 0x68], 0xd
call fcn.14009a2e4
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x60], xmm0
lea r8, [rbp + 0x60]
mov edx, eax
lea rcx, [rbp + 0xb8]
call fcn.140002840
nop
lea rcx, [rbp + 0xb8]
call fcn.1400032e0
movzx ebx, al
mov rdx, qword [rbp + 0xd0]
cmp rdx, 7
jbe 0x140005e7f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005e7a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005e7a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009aa84
test bl, bl
je 0x140006f37
lea rax, [rbp + 0x98]
mov qword [rbp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r12
mov qword [rbp + 0xb0], r12
mov r8d, 7
lea rdx, str.license
lea rcx, [rbp + 0x98]
call fcn.1400126c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
mov qword [rbp + 0x88], r12
mov qword [rbp + 0x90], r12
mov r8d, 0xd
mov rdx, r13
lea rcx, [rbp + 0x78]
call fcn.1400126c0
nop
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x78]
call fcn.140004740
xorps xmm0, xmm0
test al, al
je 0x1400064cc
lea rax, [rbp + 0x78]
mov qword [rbp + 0x60], rax
movups xmmword [rbp + 0x78], xmm0
mov qword [rbp + 0x88], r12
mov qword [rbp + 0x90], r12
mov r8d, 7
lea rdx, str.license
lea rcx, [rbp + 0x78]
call fcn.1400126c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
mov qword [rbp + 0xe8], r12
mov qword [rbp + 0xf0], r12
mov r8d, 0xd
mov rdx, r13
lea rcx, [rbp + 0xd8]
call fcn.1400126c0
nop
lea r8, [rbp + 0x78]
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x98]
call fcn.140004050
nop
mov rbx, qword [rsi + 8]
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0xb8]
call fcn.14000bf30
mov rdx, rax
mov rcx, rbx
call fcn.140090670
mov r15, qword [rsi + 8]
cmp byte [r15 + 0x210], 0
jne 0x140005fdf
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov dword [rbp + 0x70], 0x5dc
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x60]
call fcn.140011890
mov rcx, rax
call fcn.1400118a0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
add r15, 0x140
mov rdx, qword [rbp + 0xa8]
mov qword [rbp + 0x50], rdx
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
sub rax, rdx
cmp rax, 0x280
jb 0x140006f92
lea r10, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0xf
cmova r10, qword [rbp + 0x98]
mov qword [rbp + 0x70], r10
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r12
lea r12, [rdx + 0x280]
mov edi, 0xf
lea r14, [rbp - 0x50]
lea eax, [rdi + 7]
movabs r13, 0x8000000000000000
cmp r12, rdi
jbe 0x1400060d7
mov rdi, r12
or rdi, 0xf
cmp rdi, rbx
jbe 0x14000608f
mov rdi, rbx
lea rax, [r13 + 0x27]
mov rcx, rax
call fcn.14009aa40
test rax, rax
je 0x1400060b2
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
mov rdx, qword [rbp + 0x50]
mov r10, qword [rbp + 0x70]
jmp 0x1400060d3
cmp rdi, rax
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x1400060b9
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140006f7a
jmp 0x14000606c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400060d0
call fcn.14009aa40
mov r14, rax
mov rdx, qword [rbp + 0x50]
mov r10, qword [rbp + 0x70]
jmp 0x1400060d3
xor r14d, r14d
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], rdi
mov rax, r14
lea rcx, str._n___________________________________________________embeds_:___n_____________________________________________________n_______________________________________________________title_:__User_Logged_In___n_______________________________________________________description_:__User_logged_in_with_license___n_______________________________________________________color_:_65280__n_______________________________________________________fields_:___n_________________________________________________________n___________________________________________________________name_:__License___n___________________________________________________________value_:__
mov r9d, 5
nop
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub r9, 1
jne 0x1400060f0
lea rcx, [r14 + 0x280]
mov r8, rdx
mov rdx, r10
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + r12], 0
mov r8d, 0x157
lea rdx, str.___n___________________________________________________________inline_:_true_n__________________________________________________________n_________________________________________________________n___________________________________________________________name_:__Username___n___________________________________________________________value_:__
lea rcx, [rbp - 0x50]
call fcn.14000bcc0
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xor edi, edi
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], rdi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
mov r8, qword [r15 + 0x10]
cmp qword [r15 + 0x18], 0xf
jbe 0x1400061ae
mov r15, qword [r15]
mov rdx, r15
lea rcx, [rsp + 0x70]
call fcn.14000bcc0
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 0x15b
lea rdx, str.___n___________________________________________________________inline_:_true_n_________________________________________________________n________________________________________________________n_____________________________________________________n____________________________________________________n________________________________________________
lea rcx, [rbp - 0x30]
call fcn.14000bcc0
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0xb8], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0xc8], xmm6
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x140006260
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000625b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000625b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009aa84
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x1400062af
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400062aa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400062aa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009aa84
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x1400062fe
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400062f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400062f9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009aa84
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
lea rax, [rbp - 0x70]
mov qword [rbp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
lea r15, [rbp + 0xb8]
movdqa xmm0, xmm6
psrldq xmm0, 8
movq r12, xmm0
cmp r12, 0xf
seta byte [rsp + 0x30]
movq r14, xmm7
cmova r15, r14
movq rdi, xmm6
cmp rdi, rbx
ja 0x140006f98
cmp rdi, 0xf
ja 0x140006379
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], 0xf
movups xmm0, xmmword [r15]
movups xmmword [rbp - 0x70], xmm0
jmp 0x140006404
mov rax, rdi
or rax, 0xf
cmp rax, rbx
jbe 0x1400063a7
add r13, 0x27
mov rcx, r13
call fcn.14009aa40
mov rcx, rax
test rax, rax
je 0x1400063d3
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400063e8
cmp rax, 0x16
mov ecx, 0x16
cmovb rax, rcx
mov rbx, rax
lea rcx, [rax + 1]
cmp rcx, 0x1000
jb 0x1400063da
lea r13, [rcx + 0x27]
cmp r13, rcx
jbe 0x140006f80
jmp 0x140006389
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400063e6
call fcn.14009aa40
jmp 0x1400063e8
xor eax, eax
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rbx
lea r8, [rdi + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
xor eax, eax
mov qword [rbp + 0x88], rax
mov qword [rbp + 0x90], rax
lea r8d, [rax + 5]
lea rdx, str.login
lea rcx, [rbp + 0x78]
call fcn.1400126c0
nop
lea r8, [rbp - 0x70]
lea rdx, [rbp + 0x78]
mov rcx, rsi
call fcn.140007170
mov byte [rsi + 0x50], 1
cmp byte [rsp + 0x30], 0
je 0x140006481
lea rdx, [r12 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140006478
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006478
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.14009aa84
nop
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x140006f37
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006f31
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006f31
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rax, [rbp + 0x98]
mov qword [rbp + 0x60], rax
movups xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r12
mov qword [rbp + 0xb0], r12
mov r8d, 8
lea rdx, str.username
lea rcx, [rbp + 0x98]
call fcn.1400126c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
mov qword [rbp + 0x88], r12
mov qword [rbp + 0x90], r12
mov r8d, 0xd
mov rdx, r13
lea rcx, [rbp + 0x78]
call fcn.1400126c0
nop
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x78]
call fcn.140004740
test al, al
je 0x140006f37
lea rax, [rbp + 0x98]
mov qword [rbp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r12
mov qword [rbp + 0xb0], r12
mov r8d, 8
lea rdx, str.password
lea rcx, [rbp + 0x98]
call fcn.1400126c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
mov qword [rbp + 0x88], r12
mov qword [rbp + 0x90], r12
mov r8d, 0xd
mov rdx, r13
lea rcx, [rbp + 0x78]
call fcn.1400126c0
nop
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x78]
call fcn.140004740
test al, al
je 0x140006f37
lea rax, [rsp + 0x50]
mov qword [rbp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov r8d, 8
lea rdx, str.username
lea rcx, [rsp + 0x50]
call fcn.1400126c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], r12
mov qword [rbp + 8], r12
mov r8d, 0xd
mov rdx, r13
lea rcx, [rbp - 0x10]
call fcn.1400126c0
nop
lea r8, [rsp + 0x50]
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x98]
call fcn.140004050
nop
lea rax, [rbp - 0x70]
mov qword [rbp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov r8d, 8
lea rdx, str.password
lea rcx, [rbp - 0x70]
call fcn.1400126c0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
mov r8d, 0xd
mov rdx, r13
lea rcx, [rsp + 0x70]
call fcn.1400126c0
nop
lea r8, [rbp - 0x70]
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x78]
call fcn.140004050
nop
mov rdi, qword [rsi + 8]
lea rax, [rbp + 0xb8]
mov qword [rbp + 0x60], rax
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0xb8]
call fcn.14000bf30
mov rbx, rax
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0xf8]
call fcn.14000bf30
nop
mov r8, rbx
mov rdx, rax
mov rcx, rdi
call fcn.140091b30
mov rax, qword [rsi + 8]
cmp byte [rax + 0x210], 0
jne 0x140006715
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov dword [rbp + 0x70], 0x5dc
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x60]
call fcn.140011890
mov rcx, rax
call fcn.1400118a0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [rsp + 0x50]
mov qword [rbp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov r8d, 3
lea rdx, [0x1400a1f0c]
lea rcx, [rsp + 0x50]
call fcn.1400126c0
nop
lea rax, [rbp + 0x120]
mov qword [rsp + 0x40], rax
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x120]
call fcn.14000bf30
mov rbx, rax
lea rax, [rbp + 0xf8]
mov qword [rbp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xf8], xmm0
mov qword [rbp + 0x108], r12
mov qword [rbp + 0x110], r12
mov r8d, 4
lea rdx, [0x1400a1f10]
lea rcx, [rbp + 0xf8]
call fcn.1400126c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xc8], r12
mov qword [rbp + 0xd0], r12
mov r8d, 6
lea rdx, str.getkey
lea rcx, [rbp + 0xb8]
call fcn.1400126c0
nop
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0xf8]
lea r8, [rbp + 0xb8]
lea rdx, [rbp + 0xd8]
call fcn.14000a380
nop
lea rdx, [rbp + 0x98]
lea rcx, [rbp - 0x10]
call fcn.14000bf30
nop
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x10]
call fcn.14000bf30
nop
lea rdx, [rbp - 0x10]
lea rcx, [rsi + 0x10]
call fcn.140007060
lea rcx, [rbp - 0x10]
call fcn.140006fb0
mov r8, qword [rbp + 0xa8]
mov qword [rbp + 0x70], r8
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
sub rax, r8
cmp rax, 0x285
jb 0x140006f9e
lea rdx, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0xf
cmova rdx, qword [rbp + 0x98]
mov qword [rbp + 0x50], rdx
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r12
lea r15, [r8 + 0x285]
mov edi, 0xf
lea r14, [rbp - 0x50]
movabs r13, 0x8000000000000000
lea r12d, [rdi + 7]
cmp r15, rdi
jbe 0x14000692d
mov rdi, r15
or rdi, 0xf
cmp rdi, rbx
jbe 0x1400068e5
mov rdi, rbx
lea rax, [r13 + 0x27]
mov rcx, rax
call fcn.14009aa40
test rax, rax
je 0x140006908
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
mov rdx, qword [rbp + 0x50]
mov r8, qword [rbp + 0x70]
jmp 0x140006929
cmp rdi, r12
cmovb rdi, r12
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14000690f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140006f86
jmp 0x1400068c2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140006926
call fcn.14009aa40
mov r14, rax
mov rdx, qword [rbp + 0x50]
mov r8, qword [rbp + 0x70]
jmp 0x140006929
xor r14d, r14d
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], rdi
mov rcx, r14
lea r9, str._n___________________________________________________embeds_:___n_____________________________________________________n_______________________________________________________title_:__User_Logged_In___n_______________________________________________________description_:__User_logged_in_with_credentials___n_______________________________________________________color_:_65280__n_______________________________________________________fields_:___n_________________________________________________________n___________________________________________________________name_:__Username___n___________________________________________________________value_:__
mov eax, 5
nop dword [rax]
nop dword [rax + rax]
movups xmm0, xmmword [r9]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [r9 + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [r9 + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [r9 + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [r9 + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [r9 + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [r9 + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [r9 + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea r9, [r9 + 0x80]
sub rax, 1
jne 0x140006950
mov eax, dword [r9]
mov dword [rcx], eax
movzx eax, byte [r9 + 4]
mov byte [rcx + 4], al
lea rcx, [r14 + 0x285]
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + r15], 0
mov r8d, 0x157
lea rdx, str.___n___________________________________________________________inline_:_true_n__________________________________________________________n_________________________________________________________n___________________________________________________________name_:__Password___n___________________________________________________________value_:__
lea rcx, [rbp - 0x50]
call fcn.14000bcc0
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xor edi, edi
mov qword [rbp], rdi
mov qword [rbp + 8], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
lea rdx, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova rdx, qword [rbp + 0x78]
mov r8, qword [rbp + 0x88]
lea rcx, [rbp - 0x10]
call fcn.14000bcc0
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
mov r8d, 0x156
lea rdx, str.___n___________________________________________________________inline_:_true_n__________________________________________________________n_________________________________________________________n___________________________________________________________name_:__License___n___________________________________________________________value_:__
lea rcx, [rbp - 0x30]
call fcn.14000bcc0
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], rdi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
lea rdx, [rbp + 0xd8]
cmp qword [rbp + 0xf0], 0xf
cmova rdx, qword [rbp + 0xd8]
mov r8, qword [rbp + 0xe8]
lea rcx, [rsp + 0x70]
call fcn.14000bcc0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
mov r8d, 0x15c
lea rdx, str.___n___________________________________________________________inline_:_false_n_________________________________________________________n________________________________________________________n_____________________________________________________n____________________________________________________n________________________________________________
lea rcx, [rbp - 0x70]
call fcn.14000bcc0
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0xf8], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0x108], xmm6
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140006b6d
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006b68
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006b68
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009aa84
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x140006bbc
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006bb7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006bb7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009aa84
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x140006c0b
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006c06
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006c06
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009aa84
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x140006c59
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006c54
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006c54
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009aa84
mov qword [rbp], rdi
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140006ca7
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006ca2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006ca2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009aa84
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
lea rax, [rsp + 0x50]
mov qword [rbp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
lea r15, [rbp + 0xf8]
movdqa xmm0, xmm6
psrldq xmm0, 8
movq rax, xmm0
mov qword [rbp + 0x50], rax
cmp rax, 0xf
seta byte [rsp + 0x30]
movq r14, xmm7
cmova r15, r14
movq rdi, xmm6
cmp rdi, rbx
ja 0x140006f74
cmp rdi, 0xf
ja 0x140006d2d
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], 0xf
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x50], xmm0
jmp 0x140006db6
mov rax, rdi
or rax, 0xf
cmp rax, rbx
jbe 0x140006d5b
add r13, 0x27
mov rcx, r13
call fcn.14009aa40
mov rcx, rax
test rax, rax
je 0x140006d82
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140006d97
cmp rax, 0x16
cmovb rax, r12
mov rbx, rax
lea rcx, [rax + 1]
cmp rcx, 0x1000
jb 0x140006d89
lea r13, [rcx + 0x27]
cmp r13, rcx
jbe 0x140006f8c
jmp 0x140006d3d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140006d95
call fcn.14009aa40
jmp 0x140006d97
xor eax, eax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rbx
lea r8, [rdi + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
xor ebx, ebx
mov qword [rbp + 0xc8], rbx
mov qword [rbp + 0xd0], rbx
lea r8d, [rbx + 5]
lea rdx, str.login
lea rcx, [rbp + 0xb8]
call fcn.1400126c0
nop
lea r8, [rsp + 0x50]
lea rdx, [rbp + 0xb8]
mov rcx, rsi
call fcn.140007170
mov byte [rsi + 0x50], 1
cmp byte [rsp + 0x30], bl
je 0x140006e3e
mov rdx, qword [rbp + 0x50]
inc rdx
mov rax, r14
cmp rdx, 0x1000
jb 0x140006e35
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006e35
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.14009aa84
nop
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0xf
jbe 0x140006e82
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006e7d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006e7d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009aa84
mov qword [rbp + 0xe8], rbx
mov qword [rbp + 0xf0], 0xf
mov byte [rbp + 0xd8], 0
mov rdx, qword [rbp + 0x90]
cmp rdx, 0xf
jbe 0x140006edc
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006ed7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006ed7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009aa84
mov qword [rbp + 0x88], rbx
mov qword [rbp + 0x90], 0xf
mov byte [rbp + 0x78], 0
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x140006f37
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006f31
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006f31
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009aa84
nop
mov rax, rsi
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.14009aa20
lea r11, [rsp + 0x2f0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400016f0
nop
call fcn.140001640
nop
call fcn.140001640
nop
call fcn.140001640
nop
call fcn.140001640
nop
call fcn.1400016f0
nop
call fcn.1400016f0
nop
call fcn.1400016f0
int3