Function at 0x140006220
Capabilities:
Create thread
Encode data using xor
Execute command
Hide graphical window
Log keystrokes via polling
Set console window title

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1b8]
sub rsp, 0x280
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
xor esi, esi
mov dword [rbp + 0x1c0], esi
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
lea edx, [rsi + 5]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [0x14000bbd0]
mov qword [rbp + 0x1c8], rax
mov r13d, dword [0x14000e088]
cmp byte [0x14000bbd7], sil
je 0x1400063d3
cmp r13d, 2
jl 0x140006394
movdqa xmm4, xmmword [0x14000bd70]
movdqa xmm2, xmmword [0x14000bd10]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14000bd30]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14000bd50]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.4444444444444444]
movd xmm0, dword [rbp + 0x1c8]
xorps xmm2, xmm0
movd dword [rbp + 0x1c8], xmm2
movdqa xmm3, xmmword [0x14000bd20]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14000bd30]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14000bd50]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.4444444444444444]
movd xmm0, dword [rbp + 0x1cc]
xorps xmm2, xmm0
movd dword [rbp + 0x1cc], xmm2
jmp 0x1400063d3
lea r9, [rbp + 0x1c8]
xor r8d, r8d
nop
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x1400063a0
lea rcx, [rbp + 0x1c8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [str.yTBX_]
movups xmmword [rbp + 0x100], xmm0
movups xmm1, xmmword [0x14000ba00]
movups xmmword [rbp + 0x110], xmm1
movups xmm0, xmmword [0x14000ba10]
movups xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [0x14000ba20]
movups xmmword [rbp + 0x130], xmm1
movups xmm0, xmmword [0x14000ba30]
movups xmmword [rbp + 0x140], xmm0
movups xmm1, xmmword [0x14000ba40]
movups xmmword [rbp + 0x150], xmm1
cmp r13d, 2
jl 0x14000655f
movdqa xmm5, xmmword [0x14000bd10]
xor edx, edx
movdqa xmm4, xmmword [0x14000bd70]
movdqa xmm6, xmmword [0x14000bd30]
movdqa xmm7, xmmword [0x14000bd40]
lea rcx, [rbp + 0x100]
nop word [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add edx, 8
lea rcx, [rcx + 0x10]
cmp edx, 0x30
jl 0x140006470
jmp 0x1400065a7
lea r9, [rbp + 0x100]
xor r8d, r8d
nop dword [rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x39
movzx eax, r8w
sub ax, cx
add ax, 0x34
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x30
jl 0x140006570
lea rcx, [rbp + 0x100]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea r8, [0x140006200]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [str.WYE7]
mov dword [rbp + 0x1c8], eax
cmp byte [0x14000b65b], 0
je 0x1400066d3
cmp r13d, 2
jl 0x14000668c
movdqa xmm3, xmmword [0x14000bd10]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x14000bd70]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x14000bd70]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x14000bd30]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14000bd50]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.4444444444444444]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp + 0x1c8], xmm2
jmp 0x1400066d3
lea r9, [rbp + 0x1c8]
xor r8d, r8d
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x1400066a0
lea rcx, [rbp + 0x1c8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
lea rax, [rbp - 0x80]
mov qword [rbp + 0x1c8], rax
lea rdx, [0x14000b48c]
lea rcx, [rbp - 0x80]
call fcn.1400078a0
mov rbx, rax
lea rdx, str._n____Matox
lea rcx, [rsp + 0x30]
call fcn.1400078a0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1400083a0
nop
lea rax, [rsp + 0x58]
mov qword [rbp - 0x60], rax
lea rax, [rbp - 0x80]
mov qword [rbp - 0x58], rax
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x50]
call fcn.140008200
bts esi, 7
mov dword [rbp + 0x1c0], esi
lea r9, [0x140001e40]
mov edx, 0x28
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.1400092fc
lea rdx, [rbp - 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140008090
btr esi, 7
mov dword [rbp + 0x1c0], esi
lea rcx, [rbp - 0x50]
call fcn.140007610
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x1c8], rax
lea rdx, [0x14000b48c]
lea rcx, [rsp + 0x30]
call fcn.1400078a0
mov rbx, rax
lea rdx, str._n____Best_spoofer_you_ever_bought_
lea rcx, [rbp - 0x80]
call fcn.1400078a0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1400083a0
nop
lea rax, [rsp + 0x58]
mov qword [rbp - 0x40], rax
lea rax, [rbp - 0x80]
mov qword [rbp - 0x38], rax
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x30]
call fcn.140008200
bts esi, 8
mov dword [rbp + 0x1c0], esi
lea r9, [0x140001e40]
mov edx, 0x28
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.1400092fc
lea rdx, [rbp - 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140008090
btr esi, 8
mov dword [rbp + 0x1c0], esi
lea rcx, [rbp - 0x30]
call fcn.140007610
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x1c8], rax
lea rdx, [0x14000b478]
lea rcx, [rsp + 0x30]
call fcn.1400078a0
mov rbx, rax
lea rdx, [0x14000b57c]
lea rcx, [rbp - 0x80]
call fcn.1400078a0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1400083a0
nop
lea rax, [rsp + 0x58]
mov qword [rbp - 0x20], rax
lea rax, [rbp - 0x80]
mov qword [rbp - 0x18], rax
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x10]
call fcn.140008200
bts esi, 9
mov dword [rbp + 0x1c0], esi
lea r9, [0x140001e40]
mov edx, 0x28
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.1400092fc
lea rdx, [rbp - 0x10]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140008090
btr esi, 9
mov dword [rbp + 0x1c0], esi
lea rcx, [rbp - 0x10]
call fcn.140007610
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x1c8], rax
lea rdx, [0x14000b48c]
lea rcx, [rsp + 0x30]
call fcn.1400078a0
mov rbx, rax
lea rdx, str._n__F1__Perm_spoof
lea rcx, [rbp - 0x80]
call fcn.1400078a0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1400083a0
nop
lea rax, [rsp + 0x58]
mov qword [rbp], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 8], rax
lea rdx, [rbp]
lea rcx, [rbp + 0x10]
call fcn.140008200
bts esi, 0xa
mov dword [rbp + 0x1c0], esi
lea r9, [0x140001e40]
mov edx, 0x28
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.1400092fc
lea rdx, [rbp + 0x10]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140008090
btr esi, 0xa
mov dword [rbp + 0x1c0], esi
lea rcx, [rbp + 0x10]
call fcn.140007610
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x1c8], rax
lea rdx, [0x14000b48c]
lea rcx, [rsp + 0x30]
call fcn.1400078a0
mov rbx, rax
lea rdx, str._n__F2__Check_serials
lea rcx, [rbp - 0x80]
call fcn.1400078a0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1400083a0
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x20], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x28], rax
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x30]
call fcn.140008200
or esi, 0x40
mov dword [rbp + 0x1c0], esi
lea r9, [0x140001e40]
mov edx, 0x28
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.1400092fc
lea rdx, [rbp + 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140008090
and esi, 0xffffffbf
mov dword [rbp + 0x1c0], esi
lea rcx, [rbp + 0x30]
call fcn.140007610
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x1c8], rax
lea rdx, [0x14000b478]
lea rcx, [rsp + 0x30]
call fcn.1400078a0
mov rbx, rax
lea rdx, [0x14000b57c]
lea rcx, [rbp - 0x80]
call fcn.1400078a0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1400083a0
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x40], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x48], rax
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x50]
call fcn.140008200
or esi, 0x10
mov dword [rbp + 0x1c0], esi
lea r9, [0x140001e40]
mov edx, 0x28
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.1400092fc
lea rdx, [rbp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140008090
and esi, 0xffffffef
mov dword [rbp + 0x1c0], esi
lea rcx, [rbp + 0x50]
call fcn.140007610
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x1c8], rax
lea rdx, [0x14000b48c]
lea rcx, [rsp + 0x30]
call fcn.1400078a0
mov rbx, rax
lea rdx, str._n____Option__:
lea rcx, [rbp - 0x80]
call fcn.1400078a0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1400083a0
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x60], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x68], rax
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x70]
call fcn.140008200
or esi, 0x20
mov dword [rbp + 0x1c0], esi
lea r9, [0x140001e40]
mov edx, 0x28
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.1400092fc
lea rdx, [rbp + 0x70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140008090
and esi, 0xffffffdf
mov dword [rbp + 0x1c0], esi
lea rcx, [rbp + 0x70]
call fcn.140007610
mov ecx, 0x70
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140006fbc
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.140003740
movups xmm0, xmmword [str.GAWEL]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [0x14000b910]
movups xmmword [rsp + 0x40], xmm1
mov eax, dword [0x14000b920]
mov dword [rsp + 0x50], eax
xor r8d, r8d
cmp r13d, 2
jl 0x140006cff
movdqa xmm5, xmmword [0x14000bd10]
movdqa xmm4, xmmword [0x14000bd70]
movdqa xmm6, xmmword [0x14000bd30]
movdqa xmm0, xmmword [str.4444444444444444]
movdqa xmmword [rbp - 0x80], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rbp - 0x80]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14000bd50]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14000bd50]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140006bf2
cmp r8d, 0x24
jge 0x140006d43
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x24
jl 0x140006d10
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x1c8], rax
lea rdx, [0x14000b48c]
lea rcx, [rsp + 0x30]
call fcn.1400078a0
mov rbx, rax
lea rdx, str._n_Your_PC_Will_Auto_Restart_in_10_Seconds___DONT_PANIC
lea rcx, [rbp - 0x80]
call fcn.1400078a0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1400083a0
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x80], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x88], rax
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x90]
call fcn.140008200
or esi, 1
mov dword [rbp + 0x1c0], esi
lea r9, [0x140001e40]
mov edx, 0x28
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.1400092fc
mov r12, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov r15, qword [rbp + 0x90]
mov rbx, qword [r15]
cmp rbx, r15
je 0x140006e6a
mov r13d, 7
nop word [rax + rax]
mov r14d, dword [rbx + 0x30]
cmp r14d, 0xff
ja 0x140006e25
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rbx + 0x10]
cmp qword [rbx + 0x28], 0xf
jbe 0x140006e34
mov rdx, qword [rbx + 0x10]
mov r8, qword [rbx + 0x20]
mov rcx, r12
call fcn.1400090d0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
jne 0x140006e00
mov r13d, dword [0x14000e088]
and esi, 0xfffffffe
mov dword [rbp + 0x1c0], esi
lea rcx, [rbp + 0x90]
call fcn.140007610
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x1c8], rax
lea rdx, [0x14000b48c]
lea rcx, [rsp + 0x30]
call fcn.1400078a0
mov rbx, rax
lea rdx, str._n_DONT_CLICK_ANYTHING
lea rcx, [rbp - 0x80]
call fcn.1400078a0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1400083a0
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0xa0], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0xa8], rax
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0xb0]
call fcn.140008200
or esi, 2
mov dword [rbp + 0x1c0], esi
lea r9, [0x140001e40]
mov edx, 0x28
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.1400092fc
mov r12, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov r15, qword [rbp + 0xb0]
mov rbx, qword [r15]
cmp rbx, r15
je 0x140006f9a
mov r13d, 7
nop dword [rax + rax]
mov r14d, dword [rbx + 0x30]
cmp r14d, 0xff
ja 0x140006f55
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rbx + 0x10]
cmp qword [rbx + 0x28], 0xf
jbe 0x140006f64
mov rdx, qword [rbx + 0x10]
mov r8, qword [rbx + 0x20]
mov rcx, r12
call fcn.1400090d0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
jne 0x140006f30
mov r13d, dword [0x14000e088]
and esi, 0xfffffffd
mov dword [rbp + 0x1c0], esi
lea rcx, [rbp + 0xb0]
call fcn.140007610
lea rcx, str.C:WindowsSystem32_shutdown__r__t_10
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x74
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14000740c
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.1400021e0
movups xmm0, xmmword [str.GAWEL]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [0x14000b910]
movups xmmword [rsp + 0x40], xmm1
mov eax, dword [0x14000b920]
mov dword [rsp + 0x50], eax
xor ecx, ecx
cmp r13d, 2
jl 0x14000714a
movdqa xmm5, xmmword [0x14000bd10]
movdqa xmm4, xmmword [0x14000bd70]
movdqa xmm6, xmmword [0x14000bd30]
movdqa xmm0, xmmword [str.4444444444444444]
movdqa xmmword [rbp - 0x80], xmm0
lea rdx, [rsp + 0x34]
mov r8d, dword [rbp - 0x80]
nop dword [rax]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14000bd50]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14000bd50]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x20
jl 0x140007040
cmp ecx, 0x24
jge 0x14000718e
movsxd rax, ecx
lea r8, [rsp + 0x30]
add r8, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x39
movzx eax, cl
sub al, dl
add al, 0x34
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x24
jl 0x140007160
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x1c8], rax
lea rdx, [0x14000b48c]
lea rcx, [rsp + 0x30]
call fcn.1400078a0
mov rbx, rax
lea rdx, str._n_Your_PC_Will_Auto_Restart_in_10_Seconds___DONT_PANIC
lea rcx, [rbp - 0x80]
call fcn.1400078a0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1400083a0
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0xc0], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0xc8], rax
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0xd0]
call fcn.140008200
or esi, 4
mov dword [rbp + 0x1c0], esi
lea r9, [0x140001e40]
mov edx, 0x28
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.1400092fc
mov r12, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov r15, qword [rbp + 0xd0]
mov rbx, qword [r15]
cmp rbx, r15
je 0x1400072ba
mov r13d, 7
nop word [rax + rax]
mov r14d, dword [rbx + 0x30]
cmp r14d, 0xff
ja 0x140007275
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rbx + 0x10]
cmp qword [rbx + 0x28], 0xf
jbe 0x140007284
mov rdx, qword [rbx + 0x10]
mov r8, qword [rbx + 0x20]
mov rcx, r12
call fcn.1400090d0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
jne 0x140007250
mov r13d, dword [0x14000e088]
and esi, 0xfffffffb
mov dword [rbp + 0x1c0], esi
lea rcx, [rbp + 0xd0]
call fcn.140007610
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x1c8], rax
lea rdx, [0x14000b48c]
lea rcx, [rsp + 0x30]
call fcn.1400078a0
mov rbx, rax
lea rdx, str._n_DONT_CLICK_ANYTHING
lea rcx, [rbp - 0x80]
call fcn.1400078a0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1400083a0
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0xe0], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0xe8], rax
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0xf0]
call fcn.140008200
or esi, 8
mov dword [rbp + 0x1c0], esi
lea r9, [0x140001e40]
mov edx, 0x28
lea r8d, [rdx - 0x27]
lea rcx, [rsp + 0x58]
call fcn.1400092fc
mov r12, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov r15, qword [rbp + 0xf0]
mov rbx, qword [r15]
cmp rbx, r15
je 0x1400073ea
mov r13d, 7
nop dword [rax + rax]
mov r14d, dword [rbx + 0x30]
cmp r14d, 0xff
ja 0x1400073a5
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rbx + 0x10]
cmp qword [rbx + 0x28], 0xf
jbe 0x1400073b4
mov rdx, qword [rbx + 0x10]
mov r8, qword [rbx + 0x20]
mov rcx, r12
call fcn.1400090d0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
jne 0x140007380
mov r13d, dword [0x14000e088]
and esi, 0xfffffff7
mov dword [rbp + 0x1c0], esi
lea rcx, [rbp + 0xf0]
call fcn.140007610
lea rcx, str.C:WindowsSystem32_shutdown__r__t_10
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x71
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140006b71
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.140004cb0
movups xmm0, xmmword [str.GAWEL]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [0x14000b910]
movups xmmword [rsp + 0x40], xmm1
mov eax, dword [0x14000b920]
mov dword [rsp + 0x50], eax
xor r8d, r8d
cmp r13d, 2
jl 0x14000759d
movdqa xmm5, xmmword [0x14000bd10]
movdqa xmm4, xmmword [0x14000bd70]
movdqa xmm6, xmmword [0x14000bd30]
movdqa xmm0, xmmword [str.4444444444444444]
movdqa xmmword [rbp - 0x80], xmm0
lea rcx, [rsp + 0x34]
mov edx, dword [rbp - 0x80]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14000bd50]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14000bd50]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140007490
cmp r8d, 0x24
jge 0x1400075e3
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x24
jl 0x1400075b0
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x1400065d1