Function at 0x1400162e0
Capabilities:
Encode data using xor
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x4f8]
sub rsp, 0x5d0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x140104080]
xor rax, rsp
mov qword [rbp + 0x4b0], rax
mov r15, rcx
mov qword [rsp + 0x30], rcx
xor r12d, r12d
mov dword [rsp + 0x38], r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x200], xmm1
lea r8d, [r12 + 0xc]
lea rdx, str.FiveM_Paid_3
lea rcx, [rbp + 0x1f0]
call fcn.140006fc0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1e0], xmm1
lea r8d, [r12 + 0xa]
lea rdx, str.f0Vxn9lrG0
lea rcx, [rbp + 0x1d0]
call fcn.140006fc0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1c0], xmm1
lea r8d, [r12 + 0x40]
lea rdx, str.75507662bb734acfb4f2986c2ce55da158f57ed96adbaa9215e4c02c604fcf3e
lea rcx, [rbp + 0x1b0]
call fcn.140006fc0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1a0], xmm1
lea r8d, [r12 + 3]
lea rdx, [0x1400e8574]
lea rcx, [rbp + 0x190]
call fcn.140006fc0
nop
movups xmm0, xmmword [str.ABGK]
movups xmmword [rsp + 0x40], xmm0
movsd xmm0, qword [0x1400ee6c0]
movsd qword [rsp + 0x50], xmm0
mov eax, dword [0x1400ee6c8]
mov dword [rsp + 0x58], eax
movzx eax, byte [0x1400ee6cc]
mov byte [rsp + 0x5c], al
mov r8d, r12d
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x140016556
movdqa xmm5, xmmword [0x1400f11a0]
movdqa xmm4, xmmword [0x1400f1420]
movdqa xmm6, xmmword [0x1400f1200]
movdqa xmm0, xmmword [0x1400f12d0]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x70]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400f12b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400f12b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140016451
cmp r8d, 0x1d
jge 0x1400165a0
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1d
jl 0x140016570
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x180], xmm1
lea rax, [rsp + 0x40]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1400165c1
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x170]
call fcn.140006fc0
nop
xor edx, edx
mov r8d, 0x278
lea rcx, [rbp + 0x230]
call sub.VCRUNTIME140.dll_memset
lea rax, [rsp + 0x40]
mov qword [rsp + 0x38], rax
lea rdx, [rbp + 0x170]
lea rcx, [rsp + 0x40]
call fcn.14000f040
mov r14, rax
lea rax, [rbp - 0x70]
mov qword [rbp - 0x80], rax
lea rdx, [rbp + 0x190]
lea rcx, [rbp - 0x70]
call fcn.14000f040
mov rsi, rax
lea rax, [rbp - 0x50]
mov qword [rbp - 0x78], rax
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp - 0x50]
call fcn.14000f040
mov rdi, rax
lea rax, [rbp + 0x210]
mov qword [rsp + 0x60], rax
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x210]
call fcn.14000f040
mov rbx, rax
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x130]
call fcn.14000f040
nop
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x230]
call fcn.1400139c0
nop
lea rcx, [rbp + 0x230]
call fcn.14007da00
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rsi, rax
mov edx, 7
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [0x1400f1150]
movdqu xmmword [rbp], xmm1
mov byte [rbp - 0x10], 0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x30], 0
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x10]
call fcn.140015f50
test al, al
je 0x140016747
lea rax, [rbp + 0x130]
mov qword [rsp + 0x70], rax
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x130]
call fcn.14000f040
mov rbx, rax
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x210]
call fcn.14000f040
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x230]
call fcn.14007f4c0
jmp 0x140016d49
mov edx, 4
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x20], xmm1
mov r8d, 5
lea rdx, [0x1400e8578]
lea rcx, [rbp + 0x10]
call fcn.140006fc0
nop
lea rbx, [rbp + 0x10]
cmp qword [rbp + 0x28], 0xf
cmova rbx, qword [rbp + 0x10]
lea rcx, [rbp + 0x10]
cmova rcx, qword [rbp + 0x10]
mov rdi, qword [rbp + 0x20]
add rdi, rcx
cmp rbx, rdi
je 0x1400167e1
mov qword [rsp + 0x38], reloc.WLDAP32.dll_Ordinal_30
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001dfc0
lea rdx, [0x14001e180]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x38]
call fcn.140006e70
inc rbx
cmp rbx, rdi
jne 0x1400167b0
mov edx, 7
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa0], xmm1
mov r8d, 0xa
lea rdx, str.Username:
lea rcx, [rbp + 0x90]
call fcn.140006fc0
nop
lea rbx, [rbp + 0x90]
mov r13, qword [rbp + 0x90]
cmp qword [rbp + 0xa8], 0xf
cmova rbx, r13
lea rcx, [rbp + 0x90]
cmova rcx, r13
mov rdi, qword [rbp + 0xa0]
add rdi, rcx
cmp rbx, rdi
je 0x140016891
mov qword [rsp + 0x38], reloc.WLDAP32.dll_Ordinal_30
nop dword [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001dfc0
lea rdx, [0x14001e180]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x38]
call fcn.140006e70
inc rbx
cmp rbx, rdi
jne 0x140016860
lea rdx, [rbp - 0x10]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.14001e5e0
mov edx, 4
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x80], xmm1
mov r8d, 6
lea rdx, str._n___
lea rcx, [rbp + 0x70]
call fcn.140006fc0
nop
lea rbx, [rbp + 0x70]
mov r12, qword [rbp + 0x70]
cmp qword [rbp + 0x88], 0xf
cmova rbx, r12
lea rcx, [rbp + 0x70]
cmova rcx, r12
mov rdi, qword [rbp + 0x80]
add rdi, rcx
cmp rbx, rdi
je 0x140016941
mov qword [rsp + 0x38], reloc.WLDAP32.dll_Ordinal_30
nop dword [rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001dfc0
lea rdx, [0x14001e180]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x38]
call fcn.140006e70
inc rbx
cmp rbx, rdi
jne 0x140016910
mov edx, 7
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x60], xmm1
mov r8d, 0xa
lea rdx, str.Password:
lea rcx, [rbp + 0x50]
call fcn.140006fc0
nop
lea rbx, [rbp + 0x50]
mov r14, qword [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova rbx, r14
lea rcx, [rbp + 0x50]
cmova rcx, r14
mov rdi, qword [rbp + 0x60]
add rdi, rcx
cmp rbx, rdi
je 0x1400169e1
mov qword [rsp + 0x38], reloc.WLDAP32.dll_Ordinal_30
nop dword [rax]
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001dfc0
lea rdx, [0x14001e180]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x38]
call fcn.140006e70
inc rbx
cmp rbx, rdi
jne 0x1400169b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xor ebx, ebx
mov qword [rsp + 0x50], rbx
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x58], rdi
mov byte [rsp + 0x40], bl
mov dword [rsp + 0x38], 1
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
mov ecx, eax
cmp al, 0xd
je 0x140016aaf
cmp cl, 8
jne 0x140016a51
test rbx, rbx
je 0x140016a9e
lea rcx, [rbx - 1]
lea rax, [rsp + 0x40]
cmp rdi, 0xf
cmova rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rcx
mov byte [rax + rcx], 0
lea rdx, [0x1400e848c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001e1e0
jmp 0x140016a94
cmp rbx, rdi
jae 0x140016a78
lea rax, [rbx + 1]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmp rdi, 0xf
cmova rax, qword [rsp + 0x40]
mov byte [rax + rbx], cl
mov byte [rax + rbx + 1], 0
jmp 0x140016a86
movzx r9d, cl
lea rcx, [rsp + 0x40]
call fcn.1400070c0
mov dl, 0x2a
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001dfc0
mov rbx, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
movzx ecx, al
cmp al, 0xd
jne 0x140016a16
lea rdx, [0x14001e1a0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x140016b01
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016afc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140016afc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d1f8c
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [rbp - 0x30], xmm1
movups xmm2, xmmword [rsp + 0x50]
movups xmmword [rbp - 0x20], xmm2
lea rax, [rsp + 0x40]
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xor edx, edx
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], rdx
movq rdi, xmm2
lea r15, [rbp - 0x30]
movq rcx, xmm1
psrldq xmm2, 8
movq rax, xmm2
cmp rax, 0xf
cmova r15, rcx
movabs rbx, 0x7fffffffffffffff
cmp rdi, rbx
ja 0x140017606
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
cmp rdi, 0xf
ja 0x140016b86
mov qword [rsp + 0x50], rdi
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x40], xmm0
jmp 0x140016c1e
mov rax, rdi
or rax, 0xf
cmp rax, rbx
jbe 0x140016bbe
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400d1f50
mov rcx, rax
test rax, rax
je 0x140016be9
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140016bff
mov rbx, rax
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140016bf0
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001760c
jmp 0x140016ba0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140016bfc
call fcn.1400d1f50
jmp 0x140016bff
mov rax, rdx
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rbx
lea r8, [rdi + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x130]
call fcn.14000f040
nop
lea r8, [rsp + 0x40]
mov rdx, rax
lea rcx, [rbp + 0x230]
call fcn.14007f4c0
nop
mov rax, qword [rbp + 0x68]
cmp rax, 0xf
jbe 0x140016c83
lea rdx, [rax + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140016c7a
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140016c7a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.1400d1f8c
nop
mov rax, qword [rbp + 0x88]
cmp rax, 0xf
jbe 0x140016cc6
lea rdx, [rax + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x140016cbd
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140016cbd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.1400d1f8c
nop
mov rax, qword [rbp + 0xa8]
cmp rax, 0xf
jbe 0x140016d08
lea rdx, [rax + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x140016cff
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140016cff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r13
call fcn.1400d1f8c
nop
mov rax, qword [rbp + 0x28]
cmp rax, 0xf
jbe 0x140016d44
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016d3f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400173be
call fcn.1400d1f8c
mov r15, qword [rsp + 0x30]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400e85a4]
jmp 0x140016d8d
lea rcx, str.grcWindow
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [r15 + 0x18], rax
mov edx, 7
mov rcx, rsi
test rax, rax
jne 0x140016e2f
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov edx, 7
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._n_n____
lea rcx, [rbp + 0x130]
call fcn.140006e30
nop
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0x130]
call fcn.140015ae0
mov edx, 4
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._Unable_to_detect_the_FiveM_process.
lea rcx, [rbp + 0x210]
call fcn.140006e30
nop
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0x210]
call fcn.140015ae0
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [r15 + 8]
mov rcx, qword [r15 + 0x18]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [r15 + 8]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [r15], rax
mov edx, 4
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x40], xmm1
mov r8d, 6
lea rdx, str._n_n___
lea rcx, [rbp + 0x30]
call fcn.140006fc0
nop
lea rbx, [rbp + 0x30]
cmp qword [rbp + 0x48], 0xf
cmova rbx, qword [rbp + 0x30]
lea rcx, [rbp + 0x30]
cmova rcx, qword [rbp + 0x30]
mov rdi, qword [rbp + 0x40]
add rdi, rcx
cmp rbx, rdi
je 0x140016ef1
mov qword [rsp + 0x30], reloc.WS2_32.dll_ntohs
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001dfc0
lea rdx, [0x14001e180]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x30]
call fcn.140006e70
inc rbx
cmp rbx, rdi
jne 0x140016ec0
mov edx, 7
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x120], xmm1
mov r8d, 0xa
lea rdx, str._Welcome_
lea rcx, [rbp + 0x110]
call fcn.140006fc0
nop
lea rbx, [rbp + 0x110]
mov r13, qword [rbp + 0x110]
cmp qword [rbp + 0x128], 0xf
cmova rbx, r13
lea rcx, [rbp + 0x110]
cmova rcx, r13
mov rdi, qword [rbp + 0x120]
add rdi, rcx
cmp rbx, rdi
je 0x140016fa1
mov qword [rsp + 0x30], reloc.WS2_32.dll_ntohs
nop dword [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001dfc0
lea rdx, [0x14001e180]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x30]
call fcn.140006e70
inc rbx
cmp rbx, rdi
jne 0x140016f70
mov edx, 4
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rbp + 0x370]
lea rcx, [rbp + 0x150]
call fcn.14000f040
nop
lea rbx, [rbp + 0x150]
mov r15, qword [rbp + 0x150]
cmp qword [rbp + 0x168], 0xf
cmova rbx, r15
lea rcx, [rbp + 0x150]
cmova rcx, r15
mov rdi, qword [rbp + 0x160]
add rdi, rcx
cmp rbx, rdi
je 0x140017031
mov qword [rsp + 0x30], reloc.WS2_32.dll_ntohs
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001dfc0
lea rdx, [0x14001e180]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x30]
call fcn.140006e70
inc rbx
cmp rbx, rdi
jne 0x140017000
mov edx, 7
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x100], xmm1
mov r8d, 2
lea rdx, [0x1400e85fc]
lea rcx, [rbp + 0xf0]
call fcn.140006fc0
nop
lea rbx, [rbp + 0xf0]
mov r12, qword [rbp + 0xf0]
cmp qword [rbp + 0x108], 0xf
cmova rbx, r12
lea rcx, [rbp + 0xf0]
cmova rcx, r12
mov rdi, qword [rbp + 0x100]
add rdi, rcx
cmp rbx, rdi
je 0x1400170e1
mov qword [rsp + 0x30], reloc.WS2_32.dll_ntohs
nop dword [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001dfc0
lea rdx, [0x14001e180]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x30]
call fcn.140006e70
inc rbx
cmp rbx, rdi
jne 0x1400170b0
mov edx, 2
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe0], xmm1
mov r8d, 4
lea rdx, [0x1400e8600]
lea rcx, [rbp + 0xd0]
call fcn.140006fc0
nop
lea rbx, [rbp + 0xd0]
mov r14, qword [rbp + 0xd0]
cmp qword [rbp + 0xe8], 0xf
cmova rbx, r14
lea rcx, [rbp + 0xd0]
cmova rcx, r14
mov rdi, qword [rbp + 0xe0]
add rdi, rcx
cmp rbx, rdi
je 0x140017191
mov qword [rsp + 0x30], reloc.WS2_32.dll_sendto
nop dword [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001dfc0
lea rdx, [0x14001e180]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x30]
call fcn.140006e70
inc rbx
cmp rbx, rdi
jne 0x140017160
mov edx, 7
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc0], xmm1
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str._Injected_successfully.__n_n
lea rcx, [rbp + 0xb0]
call fcn.140006fc0
nop
lea rbx, [rbp + 0xb0]
mov rdi, qword [rbp + 0xb0]
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
cmova rbx, rdi
lea rcx, [rbp + 0xb0]
cmova rcx, rdi
mov rsi, qword [rbp + 0xc0]
add rsi, rcx
cmp rbx, rsi
je 0x140017248
mov qword [rsp + 0x30], reloc.WS2_32.dll_sendto
nop
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001dfc0
lea rdx, [0x14001e180]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x30]
call fcn.140006e70
inc rbx
cmp rbx, rsi
jne 0x140017210
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x140017282
inc rdx
mov rax, rdi
cmp rdx, 0x1000
jb 0x140017279
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140017279
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1400d1f8c
nop
mov rax, qword [rbp + 0xe8]
cmp rax, 0xf
jbe 0x1400172c4
lea rdx, [rax + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400172bb
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400172bb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.1400d1f8c
nop
mov rax, qword [rbp + 0x108]
cmp rax, 0xf
jbe 0x140017307
lea rdx, [rax + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x1400172fe
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400172fe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.1400d1f8c
nop
mov rax, qword [rbp + 0x168]
cmp rax, 0xf
jbe 0x140017349
lea rdx, [rax + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x140017340
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140017340
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.1400d1f8c
nop
mov rax, qword [rbp + 0x128]
cmp rax, 0xf
jbe 0x14001738b
lea rdx, [rax + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x140017382
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140017382
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r13
call fcn.1400d1f8c
nop
mov rax, qword [rbp + 0x48]
cmp rax, 0xf
jbe 0x1400173cb
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400173c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400173c5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d1f8c
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x140017409
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017404
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140017404
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d1f8c
mov qword [rbp - 0x20], 0
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x14001745b
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017456
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140017456
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d1f8c
movdqa xmm0, xmmword [0x1400f1150]
movdqu xmmword [rbp], xmm0
mov byte [rbp - 0x10], 0
lea rcx, [rbp + 0x230]
call fcn.140017620
nop
mov rdx, qword [rbp + 0x188]
cmp rdx, 0xf
jbe 0x1400174be
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400174b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400174b8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d1f8c
nop
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0xf
jbe 0x140017503
inc rdx
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400174fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400174fd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d1f8c
nop
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0xf
jbe 0x140017548
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017542
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140017542
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d1f8c
nop
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 0xf
jbe 0x14001758d
inc rdx
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017587
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140017587
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d1f8c
nop
mov rdx, qword [rbp + 0x208]
cmp rdx, 0xf
jbe 0x1400175d1
inc rdx
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400175cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400175cc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d1f8c
mov rcx, qword [rbp + 0x4b0]
xor rcx, rsp
call fcn.1400d1f30
lea r11, [rsp + 0x5d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001340
nop
call fcn.1400012a0
int3