Function at 0x140001280
Capabilities:
Contain obfuscated stackstrings
Create thread
Inject thread
Set console window title

Disassembly:
push rbp
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0x3d0
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x340], xmm7
movaps xmmword [rbp + 0x330], xmm6
mov qword [rbp + 0x328], 0xfffffffffffffffe
call fcn.140007880
movups xmm0, xmmword [0x140050664]
movaps xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [0x140050654]
movaps xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x20], 0x74
lea rcx, [rbp - 0x40]
mov edx, 0x11
call fcn.140006ec0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov rbx, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff5
call rbx
mov rdi, qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, rax
mov dx, 9
call rdi
movups xmm0, xmmword [0x140050685]
movups xmmword [rbp - 0x31], xmm0
movups xmm0, xmmword [0x140050676]
movaps xmmword [rbp - 0x40], xmm0
lea rcx, [rbp - 0x40]
mov edx, 0x1f
call fcn.140006dd0
lea rsi, [0x14006c700]
mov rcx, rsi
mov rdx, rax
call fcn.140002600
mov rcx, rax
call fcn.1400029f0
mov ecx, 0xfffffff5
call rbx
mov rcx, rax
mov dx, 0xf
call rdi
movups xmm0, xmmword [0x140050695]
movaps xmmword [rbp - 0x40], xmm0
movabs rax, 0x64160c137d021700
mov qword [rbp - 0x31], rax
lea rcx, [rbp - 0x40]
mov edx, 0x17
call fcn.140006dd0
mov rcx, rsi
mov rdx, rax
call fcn.140002600
mov rcx, rax
call fcn.1400029f0
movups xmm0, xmmword [0x1400506bc]
movaps xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [0x1400506ac]
movaps xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x20], 0x5338
lea rcx, [rbp - 0x40]
mov edx, 0x22
call fcn.140006dd0
mov rcx, rsi
mov rdx, rax
call fcn.140002600
mov rcx, rax
call fcn.1400029f0
xor ecx, ecx
call fcn.140006f00
lea rdx, [rax*2 + 2]
inc rax
mov rcx, 0xffffffffffffffff
cmovns rcx, rdx
call fcn.14002e238
mov rsi, rax
mov rcx, rax
call fcn.140006f00
movups xmm0, xmmword [0x1400506de]
movaps xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [0x1400506ce]
movaps xmmword [rbp - 0x40], xmm0
movabs rax, 0x53003f0054000e
mov qword [rbp - 0x22], rax
lea rcx, [rbp - 0x40]
mov edx, 0x13
call fcn.140006ec0
mov rdi, rax
xorps xmm0, xmm0
movaps xmmword [rbp + 0x210], xmm0
mov qword [rbp + 0x220], 0
mov qword [rbp + 0x228], 0xf
mov dword [rbp + 0x2fc], 0
movups xmm0, xmmword [0x14005073e]
movups xmmword [rbp + 0x29a], xmm0
movups xmm0, xmmword [0x140050734]
movaps xmmword [rbp + 0x290], xmm0
movups xmm0, xmmword [0x140050724]
movaps xmmword [rbp + 0x280], xmm0
movups xmm0, xmmword [0x140050714]
movaps xmmword [rbp + 0x270], xmm0
movups xmm0, xmmword [0x140050704]
movaps xmmword [rbp + 0x260], xmm0
movups xmm0, xmmword [0x1400506f4]
movaps xmmword [rbp + 0x250], xmm0
lea rcx, [rbp + 0x250]
mov edx, 0x2d
call fcn.140006ec0
lea rbx, [rbp + 0x230]
mov rcx, rbx
mov rdx, rax
call fcn.140002b50
mov rcx, rsi
call fcn.14003845c
mov rcx, qword [rbp + 0x240]
mov rdx, qword [rbp + 0x248]
mov r8, rdx
sub r8, rcx
cmp r8, rax
jae 0x140001515
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x230]
mov rdx, rax
mov r9, rsi
call fcn.140003410
jmp 0x140001546
lea r14, [rcx + rax]
mov qword [rbp + 0x240], r14
cmp rdx, 8
jb 0x14000152d
mov rbx, qword [rbp + 0x230]
lea rcx, [rbx + rcx*2]
add rax, rax
mov rdx, rsi
mov r8, rax
call fcn.14004d360
mov word [rbx + r14*2], 0
movabs r14, 0x1f00080008005b
mov qword [rbp + 0x250], r14
mov word [rbp + 0x258], 0x68
lea rcx, [rbp + 0x250]
mov edx, 5
call fcn.140006ec0
mov rbx, rax
mov rcx, rax
call fcn.14003845c
mov rcx, qword [rbp + 0x240]
mov rdx, qword [rbp + 0x248]
mov r8, rdx
sub r8, rcx
cmp r8, rax
jae 0x1400015ae
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x230]
mov rdx, rax
mov r9, rbx
call fcn.140003410
jmp 0x1400015e8
lea r15, [rcx + rax]
mov qword [rbp + 0x240], r15
cmp rdx, 8
jb 0x1400015c8
mov r12, qword [rbp + 0x230]
jmp 0x1400015cf
lea r12, [rbp + 0x230]
lea rcx, [r12 + rcx*2]
add rax, rax
mov rdx, rbx
mov r8, rax
call fcn.14004d360
mov word [r12 + r15*2], 0
movups xmm0, xmmword [0x14005078e]
movaps xmmword [rbp + 0x290], xmm0
movups xmm0, xmmword [0x14005077e]
movaps xmmword [rbp + 0x280], xmm0
movups xmm0, xmmword [0x14005076e]
movaps xmmword [rbp + 0x270], xmm0
movups xmm0, xmmword [0x14005075e]
movaps xmmword [rbp + 0x260], xmm0
movups xmm0, xmmword [0x14005074e]
movaps xmmword [rbp + 0x250], xmm0
mov word [rbp + 0x2a0], 0x75
lea rcx, [rbp + 0x250]
mov edx, 0x29
call fcn.140006ec0
lea rcx, [rbp + 0x1d0]
mov rdx, rax
call fcn.140002b50
xor ecx, ecx
mov rdx, rdi
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
test rax, rax
je 0x140001ac5
lea rdx, [rbp + 0x2fc]
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov dx, 9
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov word [rbp + 0x300], 0x6c7f
lea rcx, [rbp + 0x300]
mov edx, 2
call fcn.140006dd0
lea rcx, [0x14006c700]
mov rdx, rax
call fcn.140002600
mov rbx, rax
movups xmm6, xmmword [0x14005087d]
movups xmmword [rbp + 0x25f], xmm6
movups xmm7, xmmword [0x14005086e]
movaps xmmword [rbp + 0x250], xmm7
lea rcx, [rbp + 0x250]
mov edx, 0x1f
call fcn.140006dd0
mov rcx, rbx
mov rdx, rax
call fcn.140002600
mov rbx, rax
mov word [rbp + 0x326], 0x6c7f
lea rcx, [rbp + 0x326]
mov edx, 2
call fcn.140006dd0
mov rcx, rbx
mov rdx, rax
call fcn.140002600
mov rcx, rax
call fcn.1400029f0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov dx, 0xe
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movabs rax, 0x212f08482e4e3755
mov qword [rbp + 0x250], rax
mov dword [rbp + 0x258], 0x4361723c
lea rcx, [rbp + 0x250]
mov edx, 0xc
call fcn.140006dd0
lea rcx, [0x14006c700]
mov rdx, rax
call fcn.140002600
lea rcx, [0x14006c820]
mov rdx, rdi
call fcn.140002c60
mov rdi, rax
mov dword [rbp + 0x250], 0x6c007f
lea rcx, [rbp + 0x250]
mov edx, 2
call fcn.140006ec0
mov rcx, rdi
mov rdx, rax
call fcn.140002c60
movabs rax, 0x3e2b19482e4e3755
mov qword [rbp + 0x250], rax
mov dword [rbp + 0x258], 0x2d2e212a
mov word [rbp + 0x25c], 0x7371
mov byte [rbp + 0x25e], 0x6f
lea rcx, [rbp + 0x250]
mov edx, 0xf
call fcn.140006dd0
lea rcx, [0x14006c700]
mov rdx, rax
call fcn.140002600
mov rdi, rax
mov dword [rbp + 0x300], 0x4b524244
mov byte [rbp + 0x304], 0x68
lea rcx, [rbp + 0x300]
mov edx, 5
call fcn.140006dd0
mov rcx, rdi
mov rdx, rax
call fcn.140002600
mov rcx, rax
call fcn.1400029f0
movabs rax, 0x253b0d482e4e3755
mov qword [rbp + 0x250], rax
mov dword [rbp + 0x258], 0x637b2c35
mov byte [rbp + 0x25c], 0x4b
lea rcx, [rbp + 0x250]
mov edx, 0xd
call fcn.140006dd0
lea rcx, [0x14006c700]
mov rdx, rax
call fcn.140002600
mov rdi, rax
mov dword [rbp + 0x300], 0x4a535d46
mov byte [rbp + 0x304], 0x68
lea rcx, [rbp + 0x300]
mov edx, 5
call fcn.140006dd0
mov rcx, rdi
mov rdx, rax
call fcn.140002600
mov rcx, rax
call fcn.1400029f0
movabs rax, 0x29036f35593f4c7f
mov qword [rbp + 0x250], rax
mov dword [rbp + 0x258], 0x637b3d37
mov byte [rbp + 0x25c], 0x4b
lea rcx, [rbp + 0x250]
mov edx, 0xd
call fcn.140006dd0
lea rcx, [0x14006c700]
mov rdx, rax
call fcn.140002600
lea rcx, [0x14006c820]
mov rdx, rsi
call fcn.140002c60
mov rcx, rax
call fcn.140003060
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov dx, 9
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movups xmmword [rbp + 0x25f], xmm6
movaps xmmword [rbp + 0x250], xmm7
lea rcx, [rbp + 0x250]
mov edx, 0x1f
call fcn.140006dd0
lea rcx, [0x14006c700]
mov rdx, rax
call fcn.140002600
mov rdi, rax
mov word [rbp + 0x300], 0x6c7f
lea rcx, [rbp + 0x300]
mov edx, 2
call fcn.140006dd0
mov rcx, rdi
mov rdx, rax
call fcn.140002600
mov rcx, rax
call fcn.1400029f0
mov qword [rbp + 0x200], 0
mov qword [rbp + 0x208], 0xf
movaps xmm0, xmmword [rbp + 0x210]
movaps xmmword [rbp + 0x1f0], xmm0
mov ecx, dword [rbp + 0x2fc]
lea rdx, [rbp + 0x1f0]
call section..text
mov edi, 1
test al, al
jne 0x140001bf4
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov dx, 0xb
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movups xmm0, xmmword [0x1400508a6]
movups xmmword [rbp + 0x269], xmm0
movups xmm0, xmmword [0x14005089d]
movaps xmmword [rbp + 0x260], xmm0
movups xmm0, xmmword [0x14005088d]
movaps xmmword [rbp + 0x250], xmm0
lea rcx, [rbp + 0x250]
mov edx, 0x29
call fcn.140006dd0
lea rcx, [0x14006c700]
mov rdx, rax
call fcn.140002600
mov rcx, rax
call fcn.1400029f0
movups xmm0, xmmword [0x1400508d0]
movups xmmword [rbp + 0x26a], xmm0
movups xmm0, xmmword [str.80k]
movaps xmmword [rbp + 0x260], xmm0
movups xmm0, xmmword [str.6V8_]
movaps xmmword [rbp + 0x250], xmm0
lea rcx, [rbp + 0x250]
mov edx, 0x15
call fcn.140006ec0
lea rdi, [rbp + 0x300]
mov rcx, rdi
mov rdx, rax
call fcn.140002b50
mov rcx, rsi
call fcn.14003845c
mov rcx, qword [rbp + 0x310]
mov rdx, qword [rbp + 0x318]
mov r8, rdx
sub r8, rcx
cmp r8, rax
jae 0x140001c1b
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x300]
mov rdx, rax
mov r9, rsi
call fcn.140003410
jmp 0x140001c4b
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov dx, 0xc
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov word [rbp + 0x300], 0x6c7f
lea rcx, [rbp + 0x300]
mov edx, 2
call fcn.140006dd0
lea rcx, [0x14006c700]
mov rdx, rax
call fcn.140002600
mov rsi, rax
movups xmm0, xmmword [0x1400507c0]
movaps xmmword [rbp + 0x270], xmm0
movups xmm0, xmmword [0x1400507b0]
movaps xmmword [rbp + 0x260], xmm0
movups xmm0, xmmword [0x1400507a0]
movaps xmmword [rbp + 0x250], xmm0
lea rcx, [rbp + 0x250]
mov edx, 0x30
call fcn.140006dd0
mov rcx, rsi
mov rdx, rax
call fcn.140002600
mov rcx, rax
call fcn.1400029f0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov dx, 0xc
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov dx, 0xf
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x1400507d0]
lea rsi, [rbp + 0x250]
mov r8d, 0x9e
mov rcx, rsi
call fcn.14004d360
mov edx, 0x9e
mov rcx, rsi
call fcn.140006dd0
lea rcx, [0x14006c700]
mov rdx, rax
call fcn.140002600
mov rsi, rax
mov word [rbp + 0x300], 0x6c7f
lea rcx, [rbp + 0x300]
mov edx, 2
call fcn.140006dd0
mov rcx, rsi
mov rdx, rax
call fcn.140002600
mov rcx, rax
call fcn.1400029f0
mov edi, 1
mov rax, qword [rbp + 0x1e8]
cmp rax, 8
jae 0x140002373
mov rax, qword [rbp + 0x248]
cmp rax, 8
jae 0x1400023bb
jmp 0x1400023f6
lea rbx, [rcx + rax]
mov qword [rbp + 0x310], rbx
cmp rdx, 8
jb 0x140001c33
mov rdi, qword [rbp + 0x300]
lea rcx, [rdi + rcx*2]
add rax, rax
mov rdx, rsi
mov r8, rax
call fcn.14004d360
mov word [rdi + rbx*2], 0
mov qword [rbp + 0x250], r14
mov word [rbp + 0x258], 0x68
lea rcx, [rbp + 0x250]
mov edx, 5
call fcn.140006ec0
mov rsi, rax
mov rcx, rax
call fcn.14003845c
mov rcx, qword [rbp + 0x310]
mov rdx, qword [rbp + 0x318]
mov r8, rdx
sub r8, rcx
cmp r8, rax
jae 0x140001cba
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x300]
mov rdx, rax
mov r9, rsi
call fcn.140003410
cmp qword [rbp + 0x318], 8
jb 0x140001cfd
mov rcx, qword [rbp + 0x300]
jmp 0x140001d04
lea rdi, [rcx + rax]
mov qword [rbp + 0x310], rdi
cmp rdx, 8
jb 0x140001cd4
mov rbx, qword [rbp + 0x300]
jmp 0x140001cdb
lea rbx, [rbp + 0x300]
lea rcx, [rbx + rcx*2]
add rax, rax
mov rdx, rsi
mov r8, rax
call fcn.14004d360
mov word [rbx + rdi*2], 0
cmp qword [rbp + 0x318], 8
jae 0x140001cb1
lea rcx, [rbp + 0x300]
lea r8, [rbp - 0x40]
mov edx, 0x104
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_GetFullPathNameW]
test eax, eax
sete bl
jne 0x140001df0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov dx, 0xc
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movups xmm0, xmmword [0x140050920]
movaps xmmword [rbp + 0x290], xmm0
movups xmm0, xmmword [0x140050910]
movaps xmmword [rbp + 0x280], xmm0
movups xmm0, xmmword [0x140050900]
movaps xmmword [rbp + 0x270], xmm0
movups xmm0, xmmword [0x1400508f0]
movaps xmmword [rbp + 0x260], xmm0
movups xmm0, xmmword [0x1400508e0]
movaps xmmword [rbp + 0x250], xmm0
mov word [rbp + 0x2a0], 0x6cf6
lea rcx, [rbp + 0x250]
mov edx, 0x52
call fcn.140006dd0
lea rcx, [0x14006c700]
mov rdx, rax
call fcn.140002600
mov rsi, rax
mov word [rbp + 0x326], 0x6c7f
lea rcx, [rbp + 0x326]
mov edx, 2
call fcn.140006dd0
mov rcx, rsi
mov rdx, rax
call fcn.140002600
mov rcx, rax
call fcn.1400029f0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov dx, 0xf
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov r8d, dword [rbp + 0x2fc]
mov ecx, 0x1fffff
xor edx, edx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
jne 0x140001ecd
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov dx, 0xc
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movups xmm0, xmmword [0x140050952]
movaps xmmword [rbp + 0x270], xmm0
movups xmm0, xmmword [0x140050942]
movaps xmmword [rbp + 0x260], xmm0
movups xmm0, xmmword [0x140050932]
movaps xmmword [rbp + 0x250], xmm0
movabs rax, 0x6fd29ac290fd89ca
mov qword [rbp + 0x27f], rax
lea rcx, [rbp + 0x250]
mov edx, 0x37
call fcn.140006dd0
lea rcx, [0x14006c700]
mov rdx, rax
call fcn.140002600
mov rdi, rax
mov word [rbp + 0x326], 0x6c7f
lea rcx, [rbp + 0x326]
mov edx, 2
call fcn.140006dd0
mov rcx, rdi
mov rdx, rax
call fcn.140002600
mov rcx, rax
call fcn.1400029f0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov bl, 1
mov rcx, rax
mov dx, 0xf
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov dword [rsp + 0x20], 4
mov r8d, 0x104
mov rcx, rsi
xor edx, edx
mov r9d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
test rax, rax
jne 0x140001fb5
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov dx, 0xc
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movups xmm0, xmmword [0x140050989]
movaps xmmword [rbp + 0x270], xmm0
movups xmm0, xmmword [0x140050979]
movaps xmmword [rbp + 0x260], xmm0
movups xmm0, xmmword [0x140050969]
movaps xmmword [rbp + 0x250], xmm0
movabs rax, 0x6fdf9ac190c788f0
mov qword [rbp + 0x27f], rax
lea rcx, [rbp + 0x250]
mov edx, 0x37
call fcn.140006dd0
lea rcx, [0x14006c700]
mov rdx, rax
call fcn.140002600
mov rbx, rax
mov word [rbp + 0x326], 0x6c7f
lea rcx, [rbp + 0x326]
mov edx, 2
call fcn.140006dd0
mov rcx, rbx
mov rdx, rax
call fcn.140002600
mov rcx, rax
call fcn.1400029f0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov bl, 1
mov rcx, rax
mov dx, 0xf
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov qword [rsp + 0x20], 0
lea r8, [rbp - 0x40]
mov r9d, 0x104
mov rcx, rsi
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x140002096
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov dx, 0xc
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movups xmm0, xmmword [0x1400509ce]
movups xmmword [rbp + 0x27e], xmm0
movups xmm0, xmmword [0x1400509c0]
movaps xmmword [rbp + 0x270], xmm0
movups xmm0, xmmword [0x1400509b0]
movaps xmmword [rbp + 0x260], xmm0
movups xmm0, xmmword [0x1400509a0]
movaps xmmword [rbp + 0x250], xmm0
lea rcx, [rbp + 0x250]
mov edx, 0x3e
call fcn.140006dd0
lea rcx, [0x14006c700]
mov rdx, rax
call fcn.140002600
mov rbx, rax
mov word [rbp + 0x326], 0x6c7f
lea rcx, [rbp + 0x326]
mov edx, 2
call fcn.140006dd0
mov rcx, rbx
mov rdx, rax
call fcn.140002600
mov rcx, rax
call fcn.1400029f0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov bl, 1
mov rcx, rax
mov dx, 0xf
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov r9, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rsi
xor edx, edx
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
test rax, rax
jne 0x140002195
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov dx, 0xc
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movups xmm0, xmmword [0x140050a0e]
movaps xmmword [rbp + 0x280], xmm0
movups xmm0, xmmword [0x1400509fe]
movaps xmmword [rbp + 0x270], xmm0
movups xmm0, xmmword [0x1400509ee]
movaps xmmword [rbp + 0x260], xmm0
movups xmm0, xmmword [0x1400509de]
movaps xmmword [rbp + 0x250], xmm0
movabs rax, 0x48e39cf09feaa2da
mov qword [rbp + 0x28e], rax
lea rcx, [rbp + 0x250]
mov edx, 0x46
call fcn.140006dd0
lea rcx, [0x14006c700]
mov rdx, rax
call fcn.140002600
mov rbx, rax
mov word [rbp + 0x326], 0x6c7f
lea rcx, [rbp + 0x326]
mov edx, 2
call fcn.140006dd0
mov rcx, rbx
mov rdx, rax
call fcn.140002600
mov rcx, rax
call fcn.1400029f0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov bl, 1
mov rcx, rax
mov dx, 0xf
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
mov rdx, rdi
xor r8d, r8d
mov r9d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
test bl, bl
je 0x14000226a
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov dx, 0xc
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movups xmm0, xmmword [0x140050a42]
movups xmmword [rbp + 0x26e], xmm0
movups xmm0, xmmword [0x140050a34]
movaps xmmword [rbp + 0x260], xmm0
movups xmm0, xmmword [0x140050a24]
movaps xmmword [rbp + 0x250], xmm0
lea rcx, [rbp + 0x250]
mov edx, 0x2e
call fcn.140006dd0
lea rcx, [0x14006c700]
mov rdx, rax
call fcn.140002600
mov rsi, rax
mov word [rbp + 0x326], 0x6c7f
lea rcx, [rbp + 0x326]
mov edx, 2
call fcn.140006dd0
mov rcx, rsi
mov rdx, rax
call fcn.140002600
mov rcx, rax
call fcn.1400029f0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov dx, 0xf
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
jmp 0x140002314
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov dx, 0xa
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movups xmm0, xmmword [0x140050a6f]
movups xmmword [rbp + 0x26d], xmm0
movups xmm0, xmmword [0x140050a62]
movaps xmmword [rbp + 0x260], xmm0
movups xmm0, xmmword [0x140050a52]
movaps xmmword [rbp + 0x250], xmm0
lea rcx, [rbp + 0x250]
mov edx, 0x2d
call fcn.140006dd0
lea rcx, [0x14006c700]
mov rdx, rax
call fcn.140002600
mov rsi, rax
mov word [rbp + 0x326], 0x6c7f
lea rcx, [rbp + 0x326]
mov edx, 2
call fcn.140006dd0
mov rcx, rsi
mov rdx, rax
call fcn.140002600
mov rcx, rax
call fcn.1400029f0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov dx, 0xf
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rax, qword [rbp + 0x318]
cmp rax, 8
jb 0x140002360
mov rcx, qword [rbp + 0x300]
lea rdx, [rax*2 + 2]
cmp rdx, 0x1000
jb 0x14000235b
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140002422
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.14002e230
xor edi, edi
mov rax, qword [rbp + 0x1e8]
cmp rax, 8
jb 0x140001c05
mov rcx, qword [rbp + 0x1d0]
lea rdx, [rax*2 + 2]
cmp rdx, 0x1000
jb 0x1400023a9
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140002418
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.14002e230
mov rax, qword [rbp + 0x248]
cmp rax, 8
jb 0x1400023f6
mov rcx, qword [rbp + 0x230]
lea rdx, [rax*2 + 2]
cmp rdx, 0x1000
jb 0x1400023f1
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000241d
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.14002e230
mov eax, edi
movaps xmm6, xmmword [rbp + 0x330]
movaps xmm7, xmmword [rbp + 0x340]
add rsp, 0x3d0
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
pop rbp
ret
call fcn.1400383e4
call fcn.1400383e4
call fcn.1400383e4
int3