Function at 0x140019670
Capabilities:
Contain obfuscated stackstrings
Create thread
Encode data using xor
Enumerate processes
Link many functions at runtime
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x160]
sub rsp, 0x260
xor r15d, r15d
lea rcx, [rbp - 0x30]
call fcn.14001a850
nop
call fcn.140002fb0
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rdi, rax
lea rdx, [rsp + 0x40]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowRect]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ebx, eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
add eax, 0xfffffe0c
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
lea eax, [rbx - 0x3e8]
cdq
sub eax, edx
sar eax, 1
mov edx, eax
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x1f4
mov r9d, 0x3e8
mov rcx, rdi
call qword [sym.imp.USER32.dll_MoveWindow]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
lea rdx, [rbp + 0x190]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
mov edx, dword [rbp + 0x190]
or edx, 4
mov dword [rbp + 0x190], edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
mov qword [rbp - 0x48], r15
mov r13d, 8
mov qword [rbp - 0x40], r13
mov r12d, 0xf
mov qword [rbp - 0x38], r12
mov rcx, qword [str.06:57:00]
mov qword [rbp - 0x50], rcx
mov byte [rbp - 0x48], r15b
movabs rdx, 0x7fffffffffffffff
lea r14, [rbp - 0x50]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], r15
lea rsi, [r13 + 0xc]
mov rbx, rsi
or rbx, r12
cmp rbx, rdx
jbe 0x1400197c7
mov rbx, rdx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14006f7f0
test rax, rax
je 0x14001a501
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140019801
mov eax, 0x16
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x1400197e1
mov rdi, r15
jmp 0x140019801
cmp rcx, 0x1000
jb 0x1400197f9
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001a733
jmp 0x1400197a8
call fcn.14006f7f0
mov rdi, rax
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], rbx
movsd xmm0, qword [str.Etherium___]
movsd qword [rdi], xmm0
mov ecx, dword [0x140090178]
mov dword [rdi + 8], ecx
lea rcx, [rdi + 0xc]
mov r8, r13
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
mov r8d, 3
lea rcx, str..ATAPORT
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x1400d91d0], rax
test rax, rax
je 0x14001a629
cmp rax, 0xffffffffffffffff
je 0x14001a629
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r12
mov byte [rsp + 0x40], 0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
lea rdx, str._______________________________________________
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001c220
mov edx, 2
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14008f548]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001c220
mov edx, 7
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14008f4f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001c220
nop
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r12
mov byte [rsp + 0x40], 0
mov r9, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [rsp + 0x40], 0x39033bea
mov dword [rsp + 0x44], 0xd7d03f09
mov dword [rsp + 0x48], 0x3f303f31
mov dword [rsp + 0x4c], 0x3822e931
mov dword [rsp + 0x50], 0x83383232
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x54], xmm0
mov dword [rsp + 0x64], eax
mov word [rsp + 0x68], ax
mov qword [rbp + 0x190], r15
mov rax, qword [rbp + 0x190]
movabs r10, 0x8535f090dbd7bd19
nop dword [rax]
nop dword [rax + rax]
mov rcx, qword [rbp + 0x190]
mov rax, qword [rbp + 0x190]
movzx edx, byte [rsp + rax + 0x40]
add rcx, r10
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x51
mov rax, qword [rbp + 0x190]
mov byte [rsp + rax + 0x40], r8b
mov rax, qword [rbp + 0x190]
inc rax
mov qword [rbp + 0x190], rax
mov rax, qword [rbp + 0x190]
cmp rax, 0x2a
jb 0x140019980
lea rdx, [rsp + 0x40]
mov rcx, r9
call fcn.14001c220
lea rdx, [0x14001c400]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r12
mov byte [rsp + 0x40], 0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
lea rdx, str._______________________________________________
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001c220
mov edx, 2
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14008f548]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001c220
mov edx, 7
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14008f4f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001c220
nop
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r12
mov byte [rsp + 0x40], 0
mov r9, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [rsp + 0x40], 0xfe0ffb16
mov dword [rsp + 0x44], 0x240541ff
mov dword [rsp + 0x48], 0x1527111c
mov dword [rsp + 0x4c], 0x3404909
mov dword [rsp + 0x50], 0x14fafb07
mov word [rsp + 0x54], 0x91c5
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x56], xmm0
mov dword [rsp + 0x66], eax
mov word [rsp + 0x6a], ax
mov byte [rsp + 0x6c], al
mov qword [rbp + 0x190], r15
mov rax, qword [rbp + 0x190]
movabs r10, 0x4b01acf69d61f771
mov rcx, qword [rbp + 0x190]
mov rax, qword [rbp + 0x190]
movzx edx, byte [rsp + rax + 0x40]
add rcx, r10
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x17
mov rax, qword [rbp + 0x190]
mov byte [rsp + rax + 0x40], r8b
mov rax, qword [rbp + 0x190]
inc rax
mov qword [rbp + 0x190], rax
mov rax, qword [rbp + 0x190]
cmp rax, 0x2d
jb 0x140019ae0
lea rdx, [rsp + 0x40]
mov rcx, r9
call fcn.14001c220
lea rdx, [0x14001c400]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r12
mov byte [rsp + 0x40], 0
call fcn.140003310
nop
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r12
mov byte [rsp + 0x40], 0
mov r9, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [rsp + 0x40], 0xeffbf2ef
mov dword [rsp + 0x44], 0xbff5ebf9
mov dword [rsp + 0x48], 0xbbeae8f0
mov dword [rsp + 0x4c], 0xdbd6d4f4
mov dword [rsp + 0x50], 0xccdccad0
mov byte [rsp + 0x54], 0xa2
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x55], xmm0
mov dword [rsp + 0x65], eax
mov byte [rsp + 0x69], al
mov qword [rbp + 0x190], r15
mov rax, qword [rbp + 0x190]
movabs r10, 0x68b86f8c089d2913
nop dword [rax + rax]
mov rcx, qword [rbp + 0x190]
mov rax, qword [rbp + 0x190]
movzx edx, byte [rsp + rax + 0x40]
add rcx, r10
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x7b
mov rax, qword [rbp + 0x190]
mov byte [rsp + rax + 0x40], r8b
mov rax, qword [rbp + 0x190]
inc rax
mov qword [rbp + 0x190], rax
mov rax, qword [rbp + 0x190]
cmp rax, 0x2a
jb 0x140019bf0
lea rdx, [rsp + 0x40]
mov rcx, r9
call fcn.14001c220
lea rdx, [0x14001c400]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.140060640
test eax, eax
jne 0x140019d4e
mov r9, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov dword [rsp + 0x40], 0x5f5b2cc6
mov dword [rsp + 0x44], 0x63965555
mov dword [rsp + 0x48], 0x69539567
mov dword [rsp + 0x4c], 0x5e576d51
mov dword [rsp + 0x50], 0x467c5450
mov dword [rsp + 0x54], 0xadaaaa80
mov word [rsp + 0x58], 0xe55f
xor eax, eax
mov qword [rsp + 0x5a], rax
mov byte [rsp + 0x62], al
mov qword [rbp + 0x190], r15
mov rax, qword [rbp + 0x190]
movabs r10, 0xc21ceb0f906f62be
nop
mov rcx, qword [rbp + 0x190]
mov rax, qword [rbp + 0x190]
movzx edx, byte [rsp + rax + 0x40]
add rcx, r10
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x32
mov rax, qword [rbp + 0x190]
mov byte [rsp + rax + 0x40], r8b
mov rax, qword [rbp + 0x190]
inc rax
mov qword [rbp + 0x190], rax
mov rax, qword [rbp + 0x190]
cmp rax, 0x23
jb 0x140019cd0
lea rdx, [rsp + 0x40]
mov rcx, r9
call fcn.14001c220
lea rdx, [0x14001c400]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
call fcn.140003540
lea rcx, str.C:dd43390.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rbx, rax
lea rdx, str.DD_btn
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400d9158], rax
lea rdx, str.DD_key
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400d9048], rax
lea rdx, str.DD_mov
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400d9208], rax
lea rdx, str.DD_str
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400d91a8], rax
lea rdx, str.DD_todc
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400d9260], rax
lea rdx, str.DD_movR
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400d90c0], rax
xor ecx, ecx
call qword [0x1400d9158]
lea rdi, [rbp + 0x188]
movabs rsi, 0xff00ff00ff00ff00
nop word [rax + rax]
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], rdi
mov rbx, qword [rdi]
xor rbx, rsi
mov qword [rsp + 0x40], rbx
mov qword [rdi], r15
mov rax, qword [0x1400d9250]
lea rdx, str.Fortnite
lea rcx, str.UnrealWindow
call rax
nop
xor rbx, rsi
mov qword [rdi], rbx
test rax, rax
je 0x140019e10
lea rdx, [0x14008f4f6]
lea rcx, [rsp + 0x40]
call fcn.14001ba70
nop
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
lea rdx, [0x14008f4fc]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001c220
mov edx, r13d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14008f54c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001c220
mov edx, 7
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14008f4f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001c220
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140019eff
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019efa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140019efa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006f6c8
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r12
mov byte [rsp + 0x40], 0
mov r9, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [rsp + 0x40], 0x4d574e46
mov dword [rsp + 0x44], 0x40483548
mov dword [rsp + 0x48], 0x4a445d42
mov dword [rsp + 0x4c], 0xcf2f5040
xor eax, eax
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x58], eax
mov byte [rsp + 0x5c], al
mov qword [rbp + 0x190], r15
mov rax, qword [rbp + 0x190]
movabs r10, 0x4d731ac7c00fb2a4
nop dword [rax]
mov rcx, qword [rbp + 0x190]
mov rax, qword [rbp + 0x190]
movzx edx, byte [rsp + rax + 0x40]
add rcx, r10
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x7c
mov rax, qword [rbp + 0x190]
mov byte [rsp + rax + 0x40], r8b
mov rax, qword [rbp + 0x190]
inc rax
mov qword [rbp + 0x190], rax
mov rax, qword [rbp + 0x190]
cmp rax, 0x1d
jb 0x140019f60
lea rdx, [rsp + 0x40]
mov rcx, r9
call fcn.14001c220
lea rdx, [0x14001c400]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
mov dword [rbp + 0x30], 0x130
lea rdx, [rbp + 0x30]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x14001a02a
nop dword [rax]
lea rdx, str.FortniteClient_Win64_Shipping.exe
lea rcx, [rbp + 0x5c]
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
mov rcx, rbx
test eax, eax
je 0x14001a443
lea rdx, [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x14001a000
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, r15d
mov dword [0x1400d91d8], eax
mov ecx, 1
call fcn.14006f7f0
mov qword [rbp + 0x190], rax
lea rcx, [rbp - 0x58]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x14001f490]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x60], rax
test rax, rax
je 0x14001a619
mov qword [rbp + 0x190], r15
mov qword [rbp + 0x190], r15
mov dword [rsp + 0x70], 0xe5d9a1
mov eax, dword [0x1400d91d8]
mov dword [rsp + 0x74], eax
lea rax, [rbp + 0x190]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
mov r9d, 0x10
lea r8, [rsp + 0x70]
mov edx, 0x220a00
mov rcx, qword [0x1400d91d0]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp + 0x190]
mov qword [0x1400d9090], rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x1400d9084], eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x1400d9000], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r12
mov byte [rsp + 0x40], 0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
lea rdx, str._______________________________________________
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001c220
mov edx, 2
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14008f548]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001c220
mov edx, 7
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14008f4f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001c220
nop
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r12
mov byte [rsp + 0x40], 0
mov r9, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [rsp + 0x40], 0xd2d5dea0
mov dword [rsp + 0x44], 0xdabf91dc
mov dword [rsp + 0x48], 0x9bdfded5
mov dword [rsp + 0x4c], 0xdac9d8be
mov word [rsp + 0x50], 0x9d82
mov byte [rsp + 0x52], 0x42
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x53], xmm0
mov dword [rsp + 0x63], eax
mov qword [rbp + 0x190], r15
mov rax, qword [rbp + 0x190]
movabs r10, 0x235557adf9b7e0e
nop dword [rax]
mov rcx, qword [rbp + 0x190]
mov rax, qword [rbp + 0x190]
movzx edx, byte [rsp + rax + 0x40]
add rcx, r10
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x62
mov rax, qword [rbp + 0x190]
mov byte [rsp + rax + 0x40], r8b
mov rax, qword [rbp + 0x190]
inc rax
mov qword [rbp + 0x190], rax
mov rax, qword [rbp + 0x190]
cmp rax, 0x27
jb 0x14001a1f0
lea rdx, [rsp + 0x40]
mov rcx, r9
call fcn.14001c220
mov rdx, qword [0x1400d9090]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x14001c400]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edi, r15d
mov esi, r15d
nop word [rax + rax]
movsxd rcx, esi
add rcx, qword [0x1400d9090]
mov qword [0x1400d9050], rcx
add rcx, 0x1215c178
call fcn.14001c7e0
mov rbx, rax
lea rcx, [rax + 0x30]
call fcn.14001c7e0
test rbx, rbx
je 0x14001a2c4
test rax, rax
je 0x14001a2c4
lea rcx, [rax + 0xc0]
call fcn.14001c7e0
cmp rax, rbx
je 0x14001a2d4
inc edi
add esi, 0x1000
cmp edi, 0x7fffffff
jl 0x14001a280
mov ecx, 1
call fcn.14006f7f0
mov qword [rbp + 0x190], rax
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x14001f4b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14001a608
cmp dword [rsp + 0x78], 0
je 0x14001a5fc
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14001a5fc
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x70], xmm0
mov ecx, 1
call fcn.14006f7f0
mov qword [rbp + 0x190], rax
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x14001f4d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14001a5eb
cmp dword [rsp + 0x78], 0
je 0x14001a5df
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14001a5df
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x70], xmm0
mov ecx, 1
call fcn.14006f7f0
mov qword [rbp + 0x190], rax
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x14001f4f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14001a5ce
cmp dword [rsp + 0x78], 0
je 0x14001a5c2
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14001a5c2
call fcn.140013900
call fcn.140013f00
call fcn.140008340
cmp al, 1
je 0x14001a451
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp + 0x38]
jmp 0x14001a036
call fcn.1400149e0
mov rcx, qword [0x1400d9608]
call qword [sym.imp.USER32.dll_DestroyWindow]
lea rcx, [0x140008900]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rsi, qword [0x1400d91a0]
test rsi, rsi
je 0x14001a4c2
lea rbx, [rsi + 8]
mov edi, 0x14
mov rcx, qword [rbx - 8]
cmp rcx, 0xffffffffffffffff
je 0x14001a495
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbx]
test rcx, rcx
je 0x14001a4a3
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rbx, 0x10
sub rdi, 1
jne 0x14001a485
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
cmp dword [rbp - 0x58], 0
je 0x14001a4cf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14001a50d
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a508
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001a508
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006f6c8
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], r12
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x14001a558
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a552
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001a552
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006f6c8
nop
lea rcx, [rbp - 0x10]
call fcn.14001b4c0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x14001a59f
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a59a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001a59a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006f6c8
xor eax, eax
lea r11, [rsp + 0x260]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x78], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x78], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x78], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x58], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea rdx, [0x14008f4f6]
lea rcx, [rsp + 0x40]
call fcn.14001ba70
nop
call fcn.140003380
nop
lea rcx, [rsp + 0x40]
call fcn.14000b750
mov r9, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [rsp + 0x40], 0x42424319
mov dword [rsp + 0x44], 0x470c3d40
mov dword [rsp + 0x48], 0x4730390d
mov dword [rsp + 0x4c], 0x64245e48
mov dword [rsp + 0x50], 0x556b626f
mov word [rsp + 0x54], 0xcd29
xor eax, eax
mov qword [rsp + 0x56], rax
mov word [rsp + 0x5e], ax
mov qword [rbp + 0x190], r15
mov rax, qword [rbp + 0x190]
movabs r10, 0x4a3f09c7aa05623
nop word [rax + rax]
mov r8, qword [rbp + 0x190]
mov rax, qword [rbp + 0x190]
movzx edx, byte [rsp + rax + 0x40]
add r8, r10
movzx eax, r8b
and al, dl
add al, al
sub r8b, al
add r8b, 0xb
add r8b, dl
mov rax, qword [rbp + 0x190]
mov byte [rsp + rax + 0x40], r8b
mov rax, qword [rbp + 0x190]
inc rax
mov qword [rbp + 0x190], rax
mov rax, qword [rbp + 0x190]
cmp rax, 0x20
jb 0x14001a6b0
lea rdx, [rsp + 0x40]
mov rcx, r9
call fcn.14001c220
lea rdx, [0x14001c400]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xc350
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.140002dd0
int3