Function at 0x140002700
Capabilities:
Authenticate hmac
Execute command
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x590]
sub rsp, 0x690
mov rax, qword [0x14000e040]
xor rax, rsp
mov qword [rbp + 0x580], rax
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__fileno]
mov ecx, eax
mov edx, 0x20000
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__setmode]
nop word [rax + rax]
mov byte [rsp + 0x38], 0x64
mov al, 7
mov cl, 8
mov dl, 0x17
xor r8d, r8d
xor al, 0x64
mov byte [rsp + 0x39], al
xor cl, 0x64
mov byte [rsp + 0x3a], cl
xor dl, 0x64
mov byte [rsp + 0x3b], dl
mov byte [rsp + 0x3c], r8b
lea rcx, [rsp + 0x39]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x30]
call fcn.140005180
nop
mov edx, 9
mov rcx, qword [0x1407ed7c0]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140005950
mov edx, 7
mov rcx, qword [0x1407ed7c0]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__fileno]
mov ecx, eax
mov edx, 0x4000
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__setmode]
mov byte [rsp + 0x70], 0x57
mov al, 0xc
mov cl, 0x7c
mov dl, 0xa
mov r8b, 7
mov r9b, 0x25
mov r10b, 0x38
mov r11b, 0x33
mov bl, 0x22
mov dil, 0x34
mov sil, 0x23
mov r14b, 0x6d
mov r15b, 0x77
xor r12d, r12d
xor al, 0x57
mov byte [rsp + 0x71], al
xor cl, 0x57
mov byte [rsp + 0x72], cl
xor dl, 0x57
mov byte [rsp + 0x73], dl
xor r8b, 0x57
mov byte [rsp + 0x74], r8b
xor r9b, 0x57
mov byte [rsp + 0x75], r9b
xor r10b, 0x57
mov byte [rsp + 0x76], r10b
xor r11b, 0x57
mov byte [rsp + 0x77], r11b
xor bl, 0x57
mov byte [rsp + 0x78], bl
xor dil, 0x57
mov byte [rsp + 0x79], dil
xor sil, 0x57
mov byte [rsp + 0x7a], sil
xor r14b, 0x57
mov byte [rsp + 0x7b], r14b
xor r15b, 0x57
mov byte [rsp + 0x7c], r15b
mov byte [rsp + 0x7d], r12b
lea rdx, [rsp + 0x71]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005b20
lea edx, [r12 + 9]
mov rcx, qword [0x1407ed7c0]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x1407ed7c8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005cf0
mov byte [rsp + 0x34], 0x2a
mov cl, 0x20
xor edx, edx
xor cl, 0x2a
mov byte [rsp + 0x35], cl
mov byte [rsp + 0x36], dl
lea rdx, [rsp + 0x35]
mov rcx, rax
call fcn.140005b20
lea edx, [r12 + 7]
mov rcx, qword [0x1407ed7c0]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov byte [rsp + 0x50], 0x14
mov al, 0x4f
mov cl, 0x3f
mov dl, 0x49
mov r8b, 0x47
mov r9b, 0x60
mov r10b, 0x75
movzx r11d, r9b
mov bl, 0x61
mov dil, 0x67
mov sil, 0x2e
mov r14b, 0x34
xor al, 0x14
mov byte [rsp + 0x51], al
xor cl, 0x14
mov byte [rsp + 0x52], cl
xor dl, 0x14
mov byte [rsp + 0x53], dl
xor r8b, 0x14
mov byte [rsp + 0x54], r8b
xor r9b, 0x14
mov byte [rsp + 0x55], r9b
xor r10b, 0x14
mov byte [rsp + 0x56], r10b
xor r11b, 0x14
mov byte [rsp + 0x57], r11b
xor bl, 0x14
mov byte [rsp + 0x58], bl
xor dil, 0x14
mov byte [rsp + 0x59], dil
xor sil, 0x14
mov byte [rsp + 0x5a], sil
xor r14b, 0x14
mov byte [rsp + 0x5b], r14b
mov byte [rsp + 0x5c], r12b
lea rdx, [rsp + 0x51]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005b20
lea edx, [r12 + 0xa]
mov rcx, qword [0x1407ed7c0]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov byte [rbp - 0x80], 6
mov al, 0x53
mov cl, 0x68
mov dl, 0x62
mov r8b, 0x63
mov r9b, 0x72
movzx r10d, r8b
mov r11b, 0x65
movzx ebx, r9b
movzx edi, r8b
movzx esi, dl
mov r14b, 0xc
movzx r15d, r14b
xor al, 6
mov byte [rbp - 0x7f], al
xor cl, 6
mov byte [rbp - 0x7e], cl
xor dl, 6
mov byte [rbp - 0x7d], dl
xor r8b, 6
mov byte [rbp - 0x7c], r8b
xor r9b, 6
mov byte [rbp - 0x7b], r9b
xor r10b, 6
mov byte [rbp - 0x7a], r10b
xor r11b, 6
mov byte [rbp - 0x79], r11b
xor bl, 6
mov byte [rbp - 0x78], bl
xor dil, 6
mov byte [rbp - 0x77], dil
xor sil, 6
mov byte [rbp - 0x76], sil
xor r14b, 6
mov byte [rbp - 0x75], r14b
xor r15b, 6
mov byte [rbp - 0x74], r15b
mov byte [rbp - 0x73], r12b
lea rdx, [rbp - 0x7f]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005b20
lea edx, [r12 + 7]
mov rcx, qword [0x1407ed7c0]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movdqa xmm1, xmmword [0x14000a160]
movdqu xmmword [rbp + 0x10], xmm1
mov dl, 0x25
mov r8b, 0x32
mov r9b, 0x66
mov r10b, 0xd
mov r11b, 0x23
mov bl, 0x3f
mov dil, 0x7c
movzx esi, r9b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x11], al
xor byte [rbp + 0x12], cl
xor byte [rbp + 0x13], cl
xor byte [rbp + 0x14], cl
xor byte [rbp + 0x15], cl
xor byte [rbp + 0x16], cl
xor byte [rbp + 0x17], cl
xor byte [rbp + 0x18], cl
xor byte [rbp + 0x19], cl
xor byte [rbp + 0x1a], cl
xor byte [rbp + 0x1b], cl
xor byte [rbp + 0x1c], cl
xor byte [rbp + 0x1d], cl
xor byte [rbp + 0x1e], cl
xor byte [rbp + 0x1f], cl
xor dl, cl
mov byte [rbp + 0x20], dl
xor r8b, cl
mov byte [rbp + 0x21], r8b
xor r9b, cl
mov byte [rbp + 0x22], r9b
xor r10b, cl
mov byte [rbp + 0x23], r10b
xor r11b, cl
mov byte [rbp + 0x24], r11b
xor bl, cl
mov byte [rbp + 0x25], bl
xor dil, cl
mov byte [rbp + 0x26], dil
xor sil, cl
mov byte [rbp + 0x27], sil
mov byte [rbp + 0x28], r12b
lea rdx, [rbp + 0x11]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005b20
lea rcx, [rbp + 0x10]
call fcn.140005d10
nop
lea rcx, [rbp + 0x10]
call fcn.140002600
movzx ebx, al
lea rcx, [rbp + 0x10]
call fcn.140001c80
test bl, bl
je 0x140002b57
lea rcx, [rbp + 0x70]
call fcn.140003140
lea rcx, [rbp + 0x70]
call fcn.1400046d0
nop
lea rcx, [rbp + 0x70]
call fcn.1400046c0
lea rdx, [rbp + 0x30]
test al, al
jne 0x140002b32
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140005d80
jmp 0x140002b4c
lea rcx, [rbp + 0x70]
call fcn.140005f60
lea rdx, [rbp + 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005cf0
nop
lea rcx, [rbp + 0x70]
call fcn.1400030d0
jmp 0x140002b67
lea rdx, [rbp + 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140005d80
lea rdx, [0x140009ec8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005b20
lea r8, [rbp + 0x180]
lea rdx, [rbp + 0x30]
call fcn.140003150
test eax, eax
jne 0x140002f13
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x10]
call fcn.140005020
nop
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x10]
call fcn.140004ee0
mov rbx, qword [rax]
mov byte [rsp + 0x30], 0xa
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x10]
call fcn.140004ee0
mov r8, qword [rax]
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x10]
call fcn.140004f00
lea r9, [rsp + 0x30]
mov rdx, qword [rax]
lea rcx, [rbp - 0x28]
call fcn.140005fa0
mov r9, rbx
mov r8, qword [rax]
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x10]
call fcn.140004f20
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x10]
call fcn.140004ee0
mov rbx, qword [rax]
mov byte [rsp + 0x30], 0xd
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x10]
call fcn.140004ee0
mov r8, qword [rax]
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x10]
call fcn.140004f00
lea r9, [rsp + 0x30]
mov rdx, qword [rax]
lea rcx, [rbp]
call fcn.140005fa0
mov r9, rbx
mov r8, qword [rax]
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x10]
call fcn.140004f20
mov byte [rsp + 0x40], 0x1e
mov al, 0x45
mov cl, 0x35
mov dl, 0x43
xor r8d, r8d
xor al, 0x1e
mov byte [rsp + 0x41], al
xor cl, 0x1e
mov byte [rsp + 0x42], cl
xor dl, 0x1e
mov byte [rsp + 0x43], dl
mov byte [rsp + 0x44], r8b
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0x10]
call fcn.140004df0
cmp rax, 0xffffffffffffffff
jne 0x140003092
mov byte [rbp - 0x70], 0x44
mov al, 0x14
mov cl, 0x28
mov dl, 0x21
mov r8b, 0x25
mov r9b, 0x37
movzx r10d, dl
mov r11b, 0x64
movzx ebx, r9b
mov dil, 0x30
movzx esi, r8b
mov r14b, 0x36
movzx r15d, dil
xor r12d, r12d
xor al, 0x44
mov byte [rbp - 0x6f], al
xor cl, 0x44
mov byte [rbp - 0x6e], cl
xor dl, 0x44
mov byte [rbp - 0x6d], dl
xor r8b, 0x44
mov byte [rbp - 0x6c], r8b
xor r9b, 0x44
mov byte [rbp - 0x6b], r9b
xor r10b, 0x44
mov byte [rbp - 0x6a], r10b
xor r11b, 0x44
mov byte [rbp - 0x69], r11b
xor bl, 0x44
mov byte [rbp - 0x68], bl
xor dil, 0x44
mov byte [rbp - 0x67], dil
xor sil, 0x44
mov byte [rbp - 0x66], sil
xor r14b, 0x44
mov byte [rbp - 0x65], r14b
xor r15b, 0x44
mov byte [rbp - 0x64], r15b
mov byte [rbp - 0x63], r12b
lea rdx, [rbp - 0x6f]
lea rcx, [rbp + 0x10]
call fcn.140004df0
cmp rax, 0xffffffffffffffff
jne 0x140003092
mov byte [rsp + 0x48], 0x7b
mov al, 0x20
mov cl, 0x56
mov dl, 0x26
xor r8d, r8d
xor al, 0x7b
mov byte [rsp + 0x49], al
xor cl, 0x7b
mov byte [rsp + 0x4a], cl
xor dl, 0x7b
mov byte [rsp + 0x4b], dl
mov byte [rsp + 0x4c], r8b
lea rdx, [rsp + 0x49]
lea rcx, [rbp + 0x10]
call fcn.140004df0
cmp rax, 0xffffffffffffffff
je 0x140002ee2
mov byte [rsp + 0x60], 0x7e
mov al, 0x25
mov cl, 0x53
mov dl, 0x23
mov r8b, 0x5e
mov r9b, 0x3b
mov r10b, 0xc
movzx r11d, r10b
mov bl, 0x11
movzx edi, r10b
mov sil, 0x44
movzx r14d, r8b
xor al, 0x7e
mov byte [rsp + 0x61], al
xor cl, 0x7e
mov byte [rsp + 0x62], cl
xor dl, 0x7e
mov byte [rsp + 0x63], dl
xor r8b, 0x7e
mov byte [rsp + 0x64], r8b
xor r9b, 0x7e
mov byte [rsp + 0x65], r9b
xor r10b, 0x7e
mov byte [rsp + 0x66], r10b
xor r11b, 0x7e
mov byte [rsp + 0x67], r11b
xor bl, 0x7e
mov byte [rsp + 0x68], bl
xor dil, 0x7e
mov byte [rsp + 0x69], dil
xor sil, 0x7e
mov byte [rsp + 0x6a], sil
xor r14b, 0x7e
mov byte [rsp + 0x6b], r14b
mov byte [rsp + 0x6c], r12b
lea rdx, [rsp + 0x61]
lea rcx, [rbp + 0x10]
call fcn.140004df0
lea r8, [rax + 0xb]
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x10]
call fcn.140004d90
nop
lea edx, [r12 + 0xc]
mov rcx, qword [0x1407ed7c0]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov byte [rbp - 0x60], 0x7c
mov al, 0x27
mov cl, 0x51
mov dl, 0x21
mov r8b, 0x5c
mov r9b, 0x39
mov r10b, 0xe
movzx r11d, r10b
mov bl, 0x13
movzx edi, r10b
movzx esi, r8b
mov r14b, 0x46
movzx r15d, r8b
xor al, 0x7c
mov byte [rbp - 0x5f], al
xor cl, 0x7c
mov byte [rbp - 0x5e], cl
xor dl, 0x7c
mov byte [rbp - 0x5d], dl
xor r8b, 0x7c
mov byte [rbp - 0x5c], r8b
xor r9b, 0x7c
mov byte [rbp - 0x5b], r9b
xor r10b, 0x7c
mov byte [rbp - 0x5a], r10b
xor r11b, 0x7c
mov byte [rbp - 0x59], r11b
xor bl, 0x7c
mov byte [rbp - 0x58], bl
xor dil, 0x7c
mov byte [rbp - 0x57], dil
xor sil, 0x7c
mov byte [rbp - 0x56], sil
xor r14b, 0x7c
mov byte [rbp - 0x55], r14b
xor r15b, 0x7c
mov byte [rbp - 0x54], r15b
mov byte [rbp - 0x53], r12b
lea rdx, [rbp - 0x5f]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005b20
lea edx, [r12 + 7]
mov rcx, qword [0x1407ed7c0]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rbp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005cf0
nop
lea rcx, [rbp + 0x50]
call fcn.140004fc0
jmp 0x140002f05
mov edx, 7
mov rcx, qword [0x1407ed7c0]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rbp + 0x10]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005cf0
nop
lea rcx, [rbp + 0x10]
call fcn.140004fc0
jmp 0x140003078
mov edx, 0xc
mov rcx, qword [0x1407ed7c0]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov byte [rbp - 0x50], 0x48
mov al, 0x13
mov cl, 0x65
mov dl, 0x15
mov r8b, 0x68
mov r9b, 0xd
mov r10b, 0x3a
movzx r11d, r10b
mov bl, 0x27
movzx edi, r10b
movzx esi, r8b
mov r14b, 0x72
movzx r15d, r8b
xor r12d, r12d
xor al, 0x48
mov byte [rbp - 0x4f], al
xor cl, 0x48
mov byte [rbp - 0x4e], cl
xor dl, 0x48
mov byte [rbp - 0x4d], dl
xor r8b, 0x48
mov byte [rbp - 0x4c], r8b
xor r9b, 0x48
mov byte [rbp - 0x4b], r9b
xor r10b, 0x48
mov byte [rbp - 0x4a], r10b
xor r11b, 0x48
mov byte [rbp - 0x49], r11b
xor bl, 0x48
mov byte [rbp - 0x48], bl
xor dil, 0x48
mov byte [rbp - 0x47], dil
xor sil, 0x48
mov byte [rbp - 0x46], sil
xor r14b, 0x48
mov byte [rbp - 0x45], r14b
xor r15b, 0x48
mov byte [rbp - 0x44], r15b
mov byte [rbp - 0x43], r12b
lea rdx, [rbp - 0x4f]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005b20
lea edx, [r12 + 7]
mov rcx, qword [0x1407ed7c0]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movdqa xmm1, xmmword [0x14000a150]
movdqu xmmword [rbp + 0x10], xmm1
mov dl, 0x4d
mov r8b, 0x1d
mov r9b, 0x1f
mov r10b, 2
mov r11b, 9
mov bl, 0x18
mov dil, 0xe
mov sil, 0x19
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x11], al
xor byte [rbp + 0x12], cl
xor byte [rbp + 0x13], cl
xor byte [rbp + 0x14], cl
xor byte [rbp + 0x15], cl
xor byte [rbp + 0x16], cl
xor byte [rbp + 0x17], cl
xor byte [rbp + 0x18], cl
xor byte [rbp + 0x19], cl
xor byte [rbp + 0x1a], cl
xor byte [rbp + 0x1b], cl
xor byte [rbp + 0x1c], cl
xor byte [rbp + 0x1d], cl
xor byte [rbp + 0x1e], cl
xor byte [rbp + 0x1f], cl
xor dl, cl
mov byte [rbp + 0x20], dl
xor r8b, cl
mov byte [rbp + 0x21], r8b
xor r9b, cl
mov byte [rbp + 0x22], r9b
xor r10b, cl
mov byte [rbp + 0x23], r10b
xor r11b, cl
mov byte [rbp + 0x24], r11b
xor bl, cl
mov byte [rbp + 0x25], bl
xor dil, cl
mov byte [rbp + 0x26], dil
xor sil, cl
mov byte [rbp + 0x27], sil
mov byte [rbp + 0x28], r12b
lea rdx, [rbp + 0x11]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005b20
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rbp + 0x30]
call fcn.140004fc0
jmp 0x140002760
mov edx, 0xa
mov rcx, qword [0x1407ed7c0]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rbp + 0x10]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005cf0
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3