Function at 0x140002560
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Create process suspended
Execute command
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xcb0]
sub rsp, 0xdb0
mov rax, qword [0x14000e040]
xor rax, rsp
mov qword [rbp + 0xca0], rax
xor r13d, r13d
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea rcx, str.kerber.exe
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea ebx, [r13 + 9]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._________________________________________________________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005d30
mov rcx, rax
lea rdx, str.________________::____________________________________________::_________________n
call fcn.140005d30
mov rcx, rax
lea rdx, str._______________:5:::____________________________________:::5:________________n
call fcn.140005d30
mov rcx, rax
lea rdx, str._____________.B_BGP_.7:________________________________:7._PGB_B.______________n
call fcn.140005d30
mov rcx, rax
lea rdx, str.____________.5_B_:B_B57:_____:____________:_____:75B_B:__5______________n
call fcn.140005d30
mov rcx, rax
lea rdx, str.__________5___BGPB______G_.:7Y__________57:._G______GPGB___5___________n
call fcn.140005d30
mov rcx, rax
lea rdx, str.________.P__B__B5___BGB____B.7__.__.___.____BGB___5B__B__P._________n
call fcn.140005d30
mov rcx, rax
lea rdx, str.________75___5_____GGB__5.:GBBG:_5__BGG_____5___57_________n
call fcn.140005d30
mov rcx, rax
lea rdx, str._______7_____________BY_JB________BJ_YB_____________7________n
call fcn.140005d30
mov rcx, rax
lea rdx, str.____:7B_____BGBB_________GB____________________GG_________BBGB_____B7:_____n
call fcn.140005d30
mov rcx, rax
lea rdx, str.___75___P_:__G________YB_5G________G5_BY________G__:_P___57____n
call fcn.140005d30
mov rcx, rax
lea rdx, str.____:G_J:_7:7__P___JJG__7__BB__7__GJJ___P_77:7_:J_G:_____n
call fcn.140005d30
mov rcx, rax
lea rdx, str.______._JP_BB_Y.JBPY7.:B__GBBBBG__B:.7YPBJ.Y_BB_PJ_._______n
call fcn.140005d30
lea ebx, [r13 + 0xe]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.___________PGGY__________J7___BB___7J__________YGGP___________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005d30
mov rcx, rax
lea rdx, str.___________________:5______P_G____G7..7G____G_P______5:____________________n
call fcn.140005d30
mov rcx, rax
lea rdx, str._________________5_______P_YGPB_Y7G77P7Y_BPPY_P_______5__________________n
call fcn.140005d30
mov rcx, rax
lea rdx, str._________________5_________J_YP7___JJJJ___7PY_J__________5__________________n
call fcn.140005d30
mov rcx, rax
lea rdx, str._________________.P_________5_BBPJPPJPBB_5_________P.__________________n
call fcn.140005d30
mov rcx, rax
lea rdx, str.____________________P______B_.J_BGBBGB__._B______P_____________________n
call fcn.140005d30
mov rcx, rax
lea rdx, str._____________________:_J5PB____P._5BB5_.P____BP5J_.______________________n
call fcn.140005d30
mov rcx, rax
lea rdx, str.___________________________Y_____BJ::::JB_____Y____________________________n
call fcn.140005d30
mov rcx, rax
lea rdx, str.____________________________G______GPYYPG______G_____________________________n
call fcn.140005d30
mov rcx, rax
lea rdx, str._______________________________P______________5_______________________________n
call fcn.140005d30
mov rcx, rax
lea rdx, str.________________________________._YB______BY_._________________________________n
call fcn.140005d30
mov rcx, rax
lea rdx, str.____________________________________:7__7:_____________________________________n
call fcn.140005d30
mov rcx, rax
lea rdx, str._________________________________________________________________________________n
call fcn.140005d30
mov rcx, rax
lea rdx, [0x140005f00]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rbp + 0xaa0], xmm0
movups xmmword [rbp + 0xab0], xmm0
movups xmmword [rbp + 0xac0], xmm0
movups xmmword [rbp + 0xad0], xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x60], xmm1
mov r14d, 4
mov r8d, r14d
lea rdx, str.0000
lea rcx, [rsp + 0x50]
call fcn.1400062a0
mov byte [rsp + 0x70], 0x25
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], r13
mov r8d, r14d
lea rdx, str.0001
lea rcx, [rsp + 0x78]
call fcn.1400062a0
mov byte [rbp - 0x68], 0x24
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x50], xmm1
mov r8d, r14d
lea rdx, str.0010
lea rcx, [rbp - 0x60]
call fcn.1400062a0
mov byte [rbp - 0x40], 0x40
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], r13
mov qword [rbp - 0x20], r13
mov r8d, r14d
lea rdx, str.0011
lea rcx, [rbp - 0x38]
call fcn.1400062a0
mov byte [rbp - 0x18], 0x21
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp], xmm1
mov r8d, r14d
lea rdx, str.0100
lea rcx, [rbp - 0x10]
call fcn.1400062a0
mov byte [rbp + 0x10], 0x2a
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r13
mov qword [rbp + 0x30], r13
mov r8d, r14d
lea rdx, str.0101
lea rcx, [rbp + 0x18]
call fcn.1400062a0
mov byte [rbp + 0x38], 0x28
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x50], xmm1
mov r8d, r14d
lea rdx, str.0110
lea rcx, [rbp + 0x40]
call fcn.1400062a0
mov byte [rbp + 0x60], 0x7b
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], r13
mov qword [rbp + 0x80], r13
mov r8d, r14d
lea rdx, str.0111
lea rcx, [rbp + 0x68]
call fcn.1400062a0
mov byte [rbp + 0x88], 0x29
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xa0], xmm1
mov r8d, r14d
lea rdx, str.1000
lea rcx, [rbp + 0x90]
call fcn.1400062a0
mov byte [rbp + 0xb0], 0x7d
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xc8], r13
mov qword [rbp + 0xd0], r13
mov r8d, r14d
lea rdx, str.1001
lea rcx, [rbp + 0xb8]
call fcn.1400062a0
mov byte [rbp + 0xd8], 0x5b
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xf0], xmm1
mov r8d, r14d
lea rdx, str.1010
lea rcx, [rbp + 0xe0]
call fcn.1400062a0
mov byte [rbp + 0x100], 0x5d
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], r13
mov qword [rbp + 0x120], r13
mov r8d, r14d
lea rdx, str.1011
lea rcx, [rbp + 0x108]
call fcn.1400062a0
mov byte [rbp + 0x128], 0x2d
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x140], xmm1
mov r8d, r14d
lea rdx, str.1100
lea rcx, [rbp + 0x130]
call fcn.1400062a0
mov byte [rbp + 0x150], 0x5f
xorps xmm0, xmm0
movups xmmword [rbp + 0x158], xmm0
mov qword [rbp + 0x168], r13
mov qword [rbp + 0x170], r13
mov r8d, r14d
lea rdx, str.1101
lea rcx, [rbp + 0x158]
call fcn.1400062a0
mov byte [rbp + 0x178], 0x2b
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x190], xmm1
mov r8d, r14d
lea rdx, str.1110
lea rcx, [rbp + 0x180]
call fcn.1400062a0
mov byte [rbp + 0x1a0], 0x3d
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a8], xmm0
mov qword [rbp + 0x1b8], r13
mov qword [rbp + 0x1c0], r13
mov r8d, r14d
lea rdx, str.1111
lea rcx, [rbp + 0x1a8]
call fcn.1400062a0
mov byte [rbp + 0x1c8], 0x7e
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1e0], xmm1
lea r8d, [r13 + 2]
lea rdx, [0x140009f94]
lea rcx, [rbp + 0x1d0]
call fcn.1400062a0
mov byte [rbp + 0x1f0], 0x60
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f8], xmm0
mov qword [rbp + 0x208], r13
mov qword [rbp + 0x210], r13
lea r8d, [r13 + 2]
lea rdx, [0x140009f98]
lea rcx, [rbp + 0x1f8]
call fcn.1400062a0
mov byte [rbp + 0x218], 0x3f
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x230], xmm1
lea r8d, [r13 + 2]
lea rdx, [0x140009f9c]
lea rcx, [rbp + 0x220]
call fcn.1400062a0
mov byte [rbp + 0x240], 0x26
xorps xmm0, xmm0
movups xmmword [rbp + 0x248], xmm0
mov qword [rbp + 0x258], r13
mov qword [rbp + 0x260], r13
lea r8d, [r13 + 2]
lea rdx, [0x140009fa0]
lea rcx, [rbp + 0x248]
call fcn.1400062a0
mov byte [rbp + 0x268], 0x22
xorps xmm0, xmm0
movups xmmword [rbp + 0x270], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x280], xmm1
lea r8d, [r13 + 2]
lea rdx, [0x140009fa4]
lea rcx, [rbp + 0x270]
call fcn.1400062a0
mov byte [rbp + 0x290], 0x3c
xorps xmm0, xmm0
movups xmmword [rbp + 0x298], xmm0
mov qword [rbp + 0x2a8], r13
mov qword [rbp + 0x2b0], r13
lea r8d, [r13 + 2]
lea rdx, [0x140009fa8]
lea rcx, [rbp + 0x298]
call fcn.1400062a0
mov byte [rbp + 0x2b8], 0x3a
xorps xmm0, xmm0
movups xmmword [rbp + 0x2c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x2d0], xmm1
lea r8d, [r13 + 2]
lea rdx, [0x140009fac]
lea rcx, [rbp + 0x2c0]
call fcn.1400062a0
mov byte [rbp + 0x2e0], 0x3e
xorps xmm0, xmm0
movups xmmword [rbp + 0x2e8], xmm0
mov qword [rbp + 0x2f8], r13
mov qword [rbp + 0x300], r13
lea r8d, [r13 + 2]
lea rdx, [0x140009fb0]
lea rcx, [rbp + 0x2e8]
call fcn.1400062a0
mov byte [rbp + 0x308], 0x2c
xorps xmm0, xmm0
movups xmmword [rbp + 0x310], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x320], xmm1
lea r8d, [r13 + 2]
lea rdx, [0x140009fb4]
lea rcx, [rbp + 0x310]
call fcn.1400062a0
mov byte [rbp + 0x330], 0x2e
xorps xmm0, xmm0
movups xmmword [rbp + 0x338], xmm0
mov qword [rbp + 0x348], r13
mov qword [rbp + 0x350], r13
lea r8d, [r13 + 2]
lea rdx, [0x140009fb8]
lea rcx, [rbp + 0x338]
call fcn.1400062a0
mov byte [rbp + 0x358], 0x3b
xorps xmm0, xmm0
movups xmmword [rbp + 0x360], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x370], xmm1
lea r8d, [r13 + 2]
lea rdx, [0x140009fbc]
lea rcx, [rbp + 0x360]
call fcn.1400062a0
mov byte [rbp + 0x380], 0x2f
xorps xmm0, xmm0
movups xmmword [rbp + 0x388], xmm0
mov qword [rbp + 0x398], r13
mov qword [rbp + 0x3a0], r13
lea r8d, [r13 + 2]
lea rdx, [0x140009fc0]
lea rcx, [rbp + 0x388]
call fcn.1400062a0
mov byte [rbp + 0x3a8], 0x7c
xorps xmm0, xmm0
movups xmmword [rbp + 0x3b0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x3c0], xmm1
lea r8d, [r13 + 2]
lea rdx, [0x140009fc4]
lea rcx, [rbp + 0x3b0]
call fcn.1400062a0
mov byte [rbp + 0x3d0], 0x5e
xorps xmm0, xmm0
movups xmmword [rbp + 0x3d8], xmm0
mov qword [rbp + 0x3e8], r13
mov qword [rbp + 0x3f0], r13
lea r8d, [r13 + 2]
lea rdx, [0x140009fc8]
lea rcx, [rbp + 0x3d8]
call fcn.1400062a0
mov byte [rbp + 0x3f8], 0x23
xorps xmm0, xmm0
movups xmmword [rbp + 0x400], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x410], xmm1
lea r8d, [r13 + 2]
lea rdx, [0x140009fcc]
lea rcx, [rbp + 0x400]
call fcn.1400062a0
mov byte [rbp + 0x420], 0x5c
xorps xmm0, xmm0
movups xmmword [rbp + 0x428], xmm0
mov qword [rbp + 0x438], r13
mov qword [rbp + 0x440], r13
lea r8d, [r13 + 2]
lea rdx, [0x140009fd0]
lea rcx, [rbp + 0x428]
call fcn.1400062a0
mov byte [rbp + 0x448], 0x27
mov dword [rbp + 0xaa0], r13d
mov qword [rbp + 0xaa8], r13
mov qword [rbp + 0xab0], r13
lea ecx, [rbx + 0x2a]
call fcn.1400077d0
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rbp + 0xaa8], rax
mov qword [rbp + 0xab8], r13
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xac0], xmm0
mov edi, 7
mov qword [rbp + 0xad0], rdi
mov esi, 8
mov qword [rbp + 0xad8], rsi
mov dword [rbp + 0xaa0], 0x3f800000
mov r8, rax
lea edx, [rbx + 2]
lea rcx, [rbp + 0xab8]
call fcn.140005a00
nop
lea rbx, [rsp + 0x50]
mov r8, rbx
lea rdx, [rbp + 0x990]
lea rcx, [rbp + 0xaa0]
call fcn.140006da0
add rbx, 0x28
lea rax, [rbp + 0x450]
cmp rbx, rax
jne 0x140002e46
lea r9, [fcn.140004db0]
mov edx, 0x28
lea r8d, [rdx - 8]
lea rcx, [rsp + 0x50]
call fcn.14000780c
xorps xmm0, xmm0
movups xmmword [rbp + 0xa60], xmm0
movups xmmword [rbp + 0xa70], xmm0
movups xmmword [rbp + 0xa80], xmm0
movups xmmword [rbp + 0xa90], xmm0
mov byte [rbp + 0x450], 0x25
movups xmmword [rbp + 0x458], xmm0
mov qword [rbp + 0x468], r13
mov qword [rbp + 0x470], r13
mov r8, r14
lea rdx, str.0000
lea rcx, [rbp + 0x458]
call fcn.1400062a0
nop
mov byte [rbp + 0x478], 0x24
xorps xmm0, xmm0
movups xmmword [rbp + 0x480], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x490], xmm1
mov r8, r14
lea rdx, str.0001
lea rcx, [rbp + 0x480]
call fcn.1400062a0
nop
mov byte [rbp + 0x4a0], 0x40
xorps xmm0, xmm0
movups xmmword [rbp + 0x4a8], xmm0
mov qword [rbp + 0x4b8], r13
mov qword [rbp + 0x4c0], r13
mov r8, r14
lea rdx, str.0010
lea rcx, [rbp + 0x4a8]
call fcn.1400062a0
nop
mov byte [rbp + 0x4c8], 0x21
xorps xmm0, xmm0
movups xmmword [rbp + 0x4d0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x4e0], xmm1
mov r8, r14
lea rdx, str.0011
lea rcx, [rbp + 0x4d0]
call fcn.1400062a0
nop
mov byte [rbp + 0x4f0], 0x2a
xorps xmm0, xmm0
movups xmmword [rbp + 0x4f8], xmm0
mov qword [rbp + 0x508], r13
mov qword [rbp + 0x510], r13
mov r8, r14
lea rdx, str.0100
lea rcx, [rbp + 0x4f8]
call fcn.1400062a0
nop
mov byte [rbp + 0x518], 0x28
xorps xmm0, xmm0
movups xmmword [rbp + 0x520], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x530], xmm1
mov r8, r14
lea rdx, str.0101
lea rcx, [rbp + 0x520]
call fcn.1400062a0
nop
mov byte [rbp + 0x540], 0x7b
xorps xmm0, xmm0
movups xmmword [rbp + 0x548], xmm0
mov qword [rbp + 0x558], r13
mov qword [rbp + 0x560], r13
mov r8, r14
lea rdx, str.0110
lea rcx, [rbp + 0x548]
call fcn.1400062a0
nop
mov byte [rbp + 0x568], 0x29
xorps xmm0, xmm0
movups xmmword [rbp + 0x570], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x580], xmm1
mov r8, r14
lea rdx, str.0111
lea rcx, [rbp + 0x570]
call fcn.1400062a0
nop
mov byte [rbp + 0x590], 0x7d
xorps xmm0, xmm0
movups xmmword [rbp + 0x598], xmm0
mov qword [rbp + 0x5a8], r13
mov qword [rbp + 0x5b0], r13
mov r8, r14
lea rdx, str.1000
lea rcx, [rbp + 0x598]
call fcn.1400062a0
nop
mov byte [rbp + 0x5b8], 0x5b
xorps xmm0, xmm0
movups xmmword [rbp + 0x5c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x5d0], xmm1
mov r8, r14
lea rdx, str.1001
lea rcx, [rbp + 0x5c0]
call fcn.1400062a0
nop
mov byte [rbp + 0x5e0], 0x5d
xorps xmm0, xmm0
movups xmmword [rbp + 0x5e8], xmm0
mov qword [rbp + 0x5f8], r13
mov qword [rbp + 0x600], r13
mov r8, r14
lea rdx, str.1010
lea rcx, [rbp + 0x5e8]
call fcn.1400062a0
nop
mov byte [rbp + 0x608], 0x2d
xorps xmm0, xmm0
movups xmmword [rbp + 0x610], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x620], xmm1
mov r8, r14
lea rdx, str.1011
lea rcx, [rbp + 0x610]
call fcn.1400062a0
nop
mov byte [rbp + 0x630], 0x5f
xorps xmm0, xmm0
movups xmmword [rbp + 0x638], xmm0
mov qword [rbp + 0x648], r13
mov qword [rbp + 0x650], r13
mov r8, r14
lea rdx, str.1100
lea rcx, [rbp + 0x638]
call fcn.1400062a0
nop
mov byte [rbp + 0x658], 0x2b
xorps xmm0, xmm0
movups xmmword [rbp + 0x660], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x670], xmm1
mov r8, r14
lea rdx, str.1101
lea rcx, [rbp + 0x660]
call fcn.1400062a0
nop
mov byte [rbp + 0x680], 0x3d
xorps xmm0, xmm0
movups xmmword [rbp + 0x688], xmm0
mov qword [rbp + 0x698], r13
mov qword [rbp + 0x6a0], r13
mov r8, r14
lea rdx, str.1110
lea rcx, [rbp + 0x688]
call fcn.1400062a0
nop
mov byte [rbp + 0x6a8], 0x7e
xorps xmm0, xmm0
movups xmmword [rbp + 0x6b0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x6c0], xmm1
mov r8, r14
lea rdx, str.1111
lea rcx, [rbp + 0x6b0]
call fcn.1400062a0
nop
mov byte [rbp + 0x6d0], 0x60
xorps xmm0, xmm0
movups xmmword [rbp + 0x6d8], xmm0
mov qword [rbp + 0x6e8], r13
mov qword [rbp + 0x6f0], r13
mov r8d, 2
lea rdx, [0x140009f94]
lea rcx, [rbp + 0x6d8]
call fcn.1400062a0
nop
mov byte [rbp + 0x6f8], 0x3f
xorps xmm0, xmm0
movups xmmword [rbp + 0x700], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x710], xmm1
mov r8d, 2
lea rdx, [0x140009f98]
lea rcx, [rbp + 0x700]
call fcn.1400062a0
nop
mov byte [rbp + 0x720], 0x26
xorps xmm0, xmm0
movups xmmword [rbp + 0x728], xmm0
mov qword [rbp + 0x738], r13
mov qword [rbp + 0x740], r13
mov r8d, 2
lea rdx, [0x140009f9c]
lea rcx, [rbp + 0x728]
call fcn.1400062a0
nop
mov byte [rbp + 0x748], 0x22
xorps xmm0, xmm0
movups xmmword [rbp + 0x750], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x760], xmm1
mov r8d, 2
lea rdx, [0x140009fa0]
lea rcx, [rbp + 0x750]
call fcn.1400062a0
nop
mov byte [rbp + 0x770], 0x3c
xorps xmm0, xmm0
movups xmmword [rbp + 0x778], xmm0
mov qword [rbp + 0x788], r13
mov qword [rbp + 0x790], r13
mov r8d, 2
lea rdx, [0x140009fa4]
lea rcx, [rbp + 0x778]
call fcn.1400062a0
nop
mov byte [rbp + 0x798], 0x3a
xorps xmm0, xmm0
movups xmmword [rbp + 0x7a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x7b0], xmm1
mov r8d, 2
lea rdx, [0x140009fa8]
lea rcx, [rbp + 0x7a0]
call fcn.1400062a0
nop
mov byte [rbp + 0x7c0], 0x3e
xorps xmm0, xmm0
movups xmmword [rbp + 0x7c8], xmm0
mov qword [rbp + 0x7d8], r13
mov qword [rbp + 0x7e0], r13
mov r8d, 2
lea rdx, [0x140009fac]
lea rcx, [rbp + 0x7c8]
call fcn.1400062a0
nop
mov byte [rbp + 0x7e8], 0x2c
xorps xmm0, xmm0
movups xmmword [rbp + 0x7f0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x800], xmm1
mov r8d, 2
lea rdx, [0x140009fb0]
lea rcx, [rbp + 0x7f0]
call fcn.1400062a0
nop
mov byte [rbp + 0x810], 0x2e
xorps xmm0, xmm0
movups xmmword [rbp + 0x818], xmm0
mov qword [rbp + 0x828], r13
mov qword [rbp + 0x830], r13
mov r8d, 2
lea rdx, [0x140009fb4]
lea rcx, [rbp + 0x818]
call fcn.1400062a0
nop
mov byte [rbp + 0x838], 0x3b
xorps xmm0, xmm0
movups xmmword [rbp + 0x840], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x850], xmm1
mov r8d, 2
lea rdx, [0x140009fb8]
lea rcx, [rbp + 0x840]
call fcn.1400062a0
nop
mov byte [rbp + 0x860], 0x2f
xorps xmm0, xmm0
movups xmmword [rbp + 0x868], xmm0
mov qword [rbp + 0x878], r13
mov qword [rbp + 0x880], r13
mov r8d, 2
lea rdx, [0x140009fbc]
lea rcx, [rbp + 0x868]
call fcn.1400062a0
nop
mov byte [rbp + 0x888], 0x7c
xorps xmm0, xmm0
movups xmmword [rbp + 0x890], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x8a0], xmm1
mov r8d, 2
lea rdx, [0x140009fc0]
lea rcx, [rbp + 0x890]
call fcn.1400062a0
nop
mov byte [rbp + 0x8b0], 0x5e
xorps xmm0, xmm0
movups xmmword [rbp + 0x8b8], xmm0
mov qword [rbp + 0x8c8], r13
mov qword [rbp + 0x8d0], r13
mov r8d, 2
lea rdx, [0x140009fc4]
lea rcx, [rbp + 0x8b8]
call fcn.1400062a0
nop
mov byte [rbp + 0x8d8], 0x23
xorps xmm0, xmm0
movups xmmword [rbp + 0x8e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x8f0], xmm1
mov r8d, 2
lea rdx, [0x140009fc8]
lea rcx, [rbp + 0x8e0]
call fcn.1400062a0
nop
mov byte [rbp + 0x900], 0x5c
xorps xmm0, xmm0
movups xmmword [rbp + 0x908], xmm0
mov qword [rbp + 0x918], r13
mov qword [rbp + 0x920], r13
mov r8d, 2
lea rdx, [0x140009fcc]
lea rcx, [rbp + 0x908]
call fcn.1400062a0
nop
mov byte [rbp + 0x928], 0x27
xorps xmm0, xmm0
movups xmmword [rbp + 0x930], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x940], xmm1
mov r8d, 2
lea rdx, [0x140009fd0]
lea rcx, [rbp + 0x930]
call fcn.1400062a0
nop
mov dword [rbp + 0xa60], 0
mov qword [rbp + 0xa68], r13
mov qword [rbp + 0xa70], r13
mov ecx, 0x38
call fcn.1400077d0
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rbp + 0xa68], rax
mov qword [rbp + 0xa78], r13
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xa80], xmm0
mov qword [rbp + 0xa90], rdi
mov qword [rbp + 0xa98], rsi
mov dword [rbp + 0xa60], 0x3f800000
mov r8, rax
mov edx, 0x10
lea rcx, [rbp + 0xa78]
call fcn.140005a00
nop
lea rbx, [rbp + 0x450]
nop dword [rax + rax]
mov r8, rbx
lea rdx, [rbp + 0x990]
lea rcx, [rbp + 0xa60]
call fcn.140006b10
add rbx, 0x28
lea rax, [rbp + 0x950]
cmp rbx, rax
jne 0x1400035e0
lea r9, [0x140004e20]
mov edx, 0x28
lea r8d, [rdx - 8]
lea rcx, [rbp + 0x450]
call fcn.14000780c
xorps xmm0, xmm0
movups xmmword [rbp + 0x970], xmm0
movdqa xmm1, xmmword [0x14000a300]
movdqu xmmword [rbp + 0x980], xmm1
mov byte [rbp + 0x970], 0
movups xmmword [rbp + 0xb50], xmm0
movdqu xmmword [rbp + 0xb60], xmm1
mov byte [rbp + 0xb50], 0
movups xmmword [rbp + 0x950], xmm0
mov rdi, r13
mov qword [rbp + 0x960], r13
mov r12d, 0xf
mov esi, r12d
mov qword [rbp + 0x968], r12
mov byte [rbp + 0x950], dil
movups xmmword [rbp + 0x9b8], xmm0
movdqu xmmword [rbp + 0x9c8], xmm1
mov byte [rbp + 0x9b8], 0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.____Want:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005d30
mov ecx, 0xfffffff5
lea r15d, [r12 - 5]
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Encrypt_C_or_E
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005d30
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._or
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005d30
lea ebx, [r12 - 3]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Decrypt_D
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005d30
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
mov ebx, eax
lea ecx, [rax - 0x43]
test cl, 0xdd
je 0x1400046be
lea ecx, [rax - 0x44]
test cl, 0xdf
je 0x14000398e
lea rcx, [0x14000a104]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.__Choice__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005d30
mov rcx, rax
movzx edx, bl
call fcn.140005b60
mov rcx, rax
lea rdx, str.___is_Incorrect._For_choose_Encryption_or_Decryption_process._Please_down_try_again.
call fcn.140005d30
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov r8d, 0x104
lea rdx, [rbp + 0xb90]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xae4], xmm0
movups xmmword [rbp + 0xaf4], xmm0
movups xmmword [rbp + 0xb04], xmm0
movups xmmword [rbp + 0xb14], xmm0
movups xmmword [rbp + 0xb24], xmm0
movups xmmword [rbp + 0xb34], xmm0
mov dword [rbp + 0xb44], eax
mov dword [rbp + 0xae0], 0x68
movups xmmword [rbp + 0x990], xmm0
mov qword [rbp + 0x9a0], rax
lea rax, [rbp + 0x990]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0xae0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0xb90]
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x14000395d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea rdx, [0x14000a148]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140005d30
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x140005f00]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0x9d0]
cmp rdx, r12
jbe 0x1400038fb
inc rdx
mov rcx, qword [rbp + 0x9b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400038f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400038f6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140007b1c
movdqa xmm0, xmmword [0x14000a300]
movdqu xmmword [rbp + 0x9c8], xmm0
mov byte [rbp + 0x9b8], 0
mov rdx, qword [rbp + 0x988]
cmp rdx, 0xf
jbe 0x140004600
inc rdx
mov rcx, qword [rbp + 0x970]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400045fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400045fb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov edx, 0xffffffff
mov rcx, qword [rbp + 0x990]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp + 0x990]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x998]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140004abd
lea rcx, str.kerber.exe_d___start
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, 8
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.__Enter_text_to_DECRYPT__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005d30
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._n____
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005d30
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, 7
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
mov rax, qword [rbx]
movsxd rcx, dword [rax + 4]
add rcx, rbx
movzx edx, r15b
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp + 0x970]
mov rcx, rbx
call fcn.1400067b0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea r14, [rbp + 0x970]
mov r8, qword [rbp + 0x970]
mov rdx, qword [rbp + 0x988]
cmp rdx, 0xf
cmova r14, r8
add r14, qword [rbp + 0x980]
lea rbx, [rbp + 0x970]
cmp rdx, 0xf
cmova rbx, r8
add rbx, qword [rbp + 0x980]
lea rcx, [rbp + 0x970]
cmp rdx, 0xf
cmova rcx, r8
mov r8b, 0x20
mov rdx, rbx
call fcn.1400076a0
mov r8, rax
cmp rax, rbx
je 0x140003acb
inc rax
cmp rax, rbx
je 0x140003acb
movzx ecx, byte [rax]
cmp cl, 0x20
je 0x140003ac3
mov byte [r8], cl
inc r8
inc rax
cmp rax, rbx
jne 0x140003ab5
lea rax, [rbp + 0x970]
cmp qword [rbp + 0x988], 0xf
cmova rax, qword [rbp + 0x970]
mov r9, r8
sub r9, rax
sub r14, r8
mov rbx, qword [rbp + 0x980]
mov rax, rbx
sub rax, r9
cmp rax, r14
cmovb r14, rax
lea rcx, [rbp + 0x970]
cmp qword [rbp + 0x988], 0xf
cmova rcx, qword [rbp + 0x970]
add rcx, r9
sub rbx, r14
mov r8, rbx
sub r8, r9
inc r8
lea rdx, [rcx + r14]
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp + 0x980], rbx
lea r8, [rbp + 0xa60]
lea rdx, [rbp + 0x970]
lea rcx, [rbp + 0x9f8]
call fcn.1400023a0
nop
lea r8, [rbp + 0xa60]
lea rdx, [rbp + 0x9f8]
lea rcx, [rbp + 0xa38]
call fcn.1400023a0
nop
lea rdx, [rbp + 0xa38]
lea rcx, [rbp + 0xa18]
call fcn.140001be0
nop
lea rdx, [rbp + 0xa18]
lea rcx, [rbp + 0x9d8]
call fcn.1400018d0
nop
mov eax, dword [rbp + 0x9e8]
sub eax, 1
movsxd r12, eax
js 0x140004201
lea rbx, [0x140000000]
nop dword [rax]
lea rax, [rbp + 0x9d8]
cmp qword [rbp + 0x9f0], 0xf
cmova rax, qword [rbp + 0x9d8]
movsx r14d, byte [rax + r12]
lea eax, [r14 - 0x20]
cmp eax, 0x5e
ja case.0x140003bed.49
cdqe
movzx eax, byte [rbx + rax + 0x4b50]
mov ecx, dword [rbx + rax*4 + 0x4b08]
add rcx, rbx
jmp rcx
cmp rdi, rsi
jae 0x140003c1a
lea rax, [rdi + 1]
mov qword [rbp + 0x960], rax
lea rax, [rbp + 0x950]
cmp rsi, 0xf
cmova rax, qword [rbp + 0x950]
mov word [rax + rdi], 0x5e
jmp 0x140003c29
mov r9b, 0x5e
lea rcx, [rbp + 0x950]
call fcn.140005fa0
sub r12, 1
mov rsi, qword [rbp + 0x968]
js 0x140003fdb
mov rdi, qword [rbp + 0x960]
jmp 0x140003bb0
cmp rdi, rsi
jae 0x140003c71
lea rax, [rdi + 1]
mov qword [rbp + 0x960], rax
lea rax, [rbp + 0x950]
cmp rsi, 0xf
cmova rax, qword [rbp + 0x950]
mov word [rax + rdi], 0x20
jmp 0x140003c29
mov r9b, 0x20
jmp 0x140003c1d
cmp rdi, rsi
jae 0x140003ca1
lea rax, [rdi + 1]
mov qword [rbp + 0x960], rax
lea rax, [rbp + 0x950]
cmp rsi, 0xf
cmova rax, qword [rbp + 0x950]
mov word [rax + rdi], 0x25
jmp 0x140003c29
mov r9b, 0x25
jmp 0x140003c1d
cmp rdi, rsi
jae 0x140003cd7
lea rax, [rdi + 1]
mov qword [rbp + 0x960], rax
lea rax, [rbp + 0x950]
cmp rsi, 0xf
cmova rax, qword [rbp + 0x950]
mov word [rax + rdi], 0x2e
jmp 0x140003c29
mov r9b, 0x2e
jmp 0x140003c1d
cmp rdi, rsi
jae 0x140003d0d
lea rax, [rdi + 1]
mov qword [rbp + 0x960], rax
lea rax, [rbp + 0x950]
cmp rsi, 0xf
cmova rax, qword [rbp + 0x950]
mov word [rax + rdi], 0x2a
jmp 0x140003c29
mov r9b, 0x2a
jmp 0x140003c1d
cmp rdi, rsi
jae 0x140003d43
lea rax, [rdi + 1]
mov qword [rbp + 0x960], rax
lea rax, [rbp + 0x950]
cmp rsi, 0xf
cmova rax, qword [rbp + 0x950]
mov word [rax + rdi], 0x2c
jmp 0x140003c29
mov r9b, 0x2c
jmp 0x140003c1d
cmp rdi, rsi
jae 0x140003d79
lea rax, [rdi + 1]
mov qword [rbp + 0x960], rax
lea rax, [rbp + 0x950]
cmp rsi, 0xf
cmova rax, qword [rbp + 0x950]
mov word [rax + rdi], 0x7e
jmp 0x140003c29
mov r9b, 0x7e
jmp 0x140003c1d
cmp rdi, rsi
jae 0x140003daf
lea rax, [rdi + 1]
mov qword [rbp + 0x960], rax
lea rax, [rbp + 0x950]
cmp rsi, 0xf
cmova rax, qword [rbp + 0x950]
mov word [rax + rdi], 0x3d
jmp 0x140003c29
mov r9b, 0x3d
jmp 0x140003c1d
cmp rdi, rsi
jae 0x140003de5
lea rax, [rdi + 1]
mov qword [rbp + 0x960], rax
lea rax, [rbp + 0x950]
cmp rsi, 0xf
cmova rax, qword [rbp + 0x950]
mov word [rax + rdi], 0x60
jmp 0x140003c29
mov r9b, 0x60
jmp 0x140003c1d
cmp rdi, rsi
jae 0x140003e1b
lea rax, [rdi + 1]
mov qword [rbp + 0x960], rax
lea rax, [rbp + 0x950]
cmp rsi, 0xf
cmova rax, qword [rbp + 0x950]
mov word [rax + rdi], 0x2b
jmp 0x140003c29
mov r9b, 0x2b
jmp 0x140003c1d
cmp rdi, rsi
jae 0x140003e51
lea rax, [rdi + 1]
mov qword [rbp + 0x960], rax
lea rax, [rbp + 0x950]
cmp rsi, 0xf
cmova rax, qword [rbp + 0x950]
mov word [rax + rdi], 0x2f
jmp 0x140003c29
mov r9b, 0x2f
jmp 0x140003c1d
cmp rdi, rsi
jae 0x140003e87
lea rax, [rdi + 1]
mov qword [rbp + 0x960], rax
lea rax, [rbp + 0x950]
cmp rsi, 0xf
cmova rax, qword [rbp + 0x950]
mov word [rax + rdi], 0x2d
jmp 0x140003c29
mov r9b, 0x2d
jmp 0x140003c1d
cmp rdi, rsi
jae 0x140003ebd
lea rax, [rdi + 1]
mov qword [rbp + 0x960], rax
lea rax, [rbp + 0x950]
cmp rsi, 0xf
cmova rax, qword [rbp + 0x950]
mov word [rax + rdi], 0x23
jmp 0x140003c29
mov r9b, 0x23
jmp 0x140003c1d
cmp rdi, rsi
jae 0x140003ef3
lea rax, [rdi + 1]
mov qword [rbp + 0x960], rax
lea rax, [rbp + 0x950]
cmp rsi, 0xf
cmova rax, qword [rbp + 0x950]
mov word [rax + rdi], 0x3a
jmp 0x140003c29
mov r9b, 0x3a
jmp 0x140003c1d
cmp rdi, rsi
jae 0x140003f29
lea rax, [rdi + 1]
mov qword [rbp + 0x960], rax
lea rax, [rbp + 0x950]
cmp rsi, 0xf
cmova rax, qword [rbp + 0x950]
mov word [rax + rdi], 0x26
jmp 0x140003c29
mov r9b, 0x26
jmp 0x140003c1d
cmp rdi, rsi
jae 0x140003f5f
lea rax, [rdi + 1]
mov qword [rbp + 0x960], rax
lea rax, [rbp + 0x950]
cmp rsi, 0xf
cmova rax, qword [rbp + 0x950]
mov word [rax + rdi], 0x3b
jmp 0x140003c29
mov r9b, 0x3b
jmp 0x140003c1d
mov r9d, 0x69
sub r9b, r14b
jmp 0x140003fa6
mov ecx, r14d
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_islower]
test eax, eax
je 0x140003f8a
mov r9d, 0xffffffdb
sub r9b, r14b
jmp 0x140003fa6
mov ecx, r14d
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isupper]
test eax, eax
je 0x140003fa2
mov r9d, 0xffffff9b
sub r9b, r14b
jmp 0x140003fa6
movzx r9d, r14b
cmp rdi, rsi
jae 0x140003c1d
lea rax, [rdi + 1]
mov qword [rbp + 0x960], rax
lea rax, [rbp + 0x950]
cmp rsi, 0xf
cmova rax, qword [rbp + 0x950]
mov byte [rax + rdi + 1], 0
mov byte [rax + rdi], r9b
jmp 0x140003c29
mov rcx, qword [rbp + 0x960]
mov r14, qword [rbp + 0x950]
test rcx, rcx
je 0x140004208
lea rdi, [rbp + 0x950]
cmp rsi, 0xf
cmova rdi, r14
lea r15, [rbp + 0x950]
cmova r15, r14
add r15, rcx
cmp rdi, r15
je 0x14000402d
movsx ecx, byte [rdi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
test eax, eax
je 0x140004208
inc rdi
cmp rdi, r15
jne 0x140004014
lea rdx, [rbp + 0x950]
lea rcx, [rbp + 0x990]
call fcn.140001510
nop
lea rcx, [rbp + 0x990]
call fcn.140005710
mov r14, rax
sub r14d, 1
js 0x140004126
movsxd r15, r14d
nop dword [rax]
mov rdx, r15
lea rcx, [rbp + 0x990]
call fcn.140005720
movsx edi, byte [rax]
lea eax, [rdi - 0x20]
cmp eax, 0x5e
ja case.0x14000408e.49
cdqe
movzx eax, byte [rbx + rax + 0x4bf8]
mov ecx, dword [rbx + rax*4 + 0x4bb0]
add rcx, rbx
jmp rcx
mov al, 0x5e
jmp 0x14000410a
mov al, 0x20
jmp 0x14000410a
mov al, 0x25
jmp 0x14000410a
mov al, 0x2e
jmp 0x14000410a
mov al, 0x2a
jmp 0x14000410a
mov al, 0x2c
jmp 0x14000410a
mov al, 0x7e
jmp 0x14000410a
mov al, 0x3d
jmp 0x14000410a
mov al, 0x60
jmp 0x14000410a
mov al, 0x2b
jmp 0x14000410a
mov al, 0x2f
jmp 0x14000410a
mov al, 0x2d
jmp 0x14000410a
mov al, 0x23
jmp 0x14000410a
mov al, 0x3a
jmp 0x14000410a
mov al, 0x26
jmp 0x14000410a
mov al, 0x3b
jmp 0x14000410a
mov eax, 0x69
sub al, dil
jmp 0x14000410a
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_islower]
test eax, eax
je 0x1400040f0
mov eax, 0xffffffdb
sub al, dil
jmp 0x14000410a
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isupper]
test eax, eax
je 0x140004106
mov eax, 0xffffff9b
sub al, dil
jmp 0x14000410a
movzx eax, dil
movzx edx, al
lea rcx, [rbp + 0x9b8]
call fcn.140005740
dec r15
sub r14d, 1
jns 0x140004060
lea rcx, str.kerber.exe_d___done
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, 0xc
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.____
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005d30
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, 0xe
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rbp + 0x9b8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005f80
mov rcx, rax
lea rdx, [0x140005f00]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, 0xf
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._n__Done._Text_Decrypted.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005d30
mov rcx, rax
lea rdx, [0x140005f00]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop
lea rcx, [rbp + 0x990]
call fcn.140004db0
jmp 0x140004692
mov r14, qword [rbp + 0x950]
lea rcx, [0x14000a104]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov ebx, 4
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._Error__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005d30
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edi, 0xf
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rbp + 0x970]
cmp qword [rbp + 0x988], rdi
cmova rdx, qword [rbp + 0x970]
mov r8, qword [rbp + 0x980]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140006950
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.___is_Incorrect_to_Decryption__Try_again.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005d30
mov rcx, rax
lea rdx, [0x140005f00]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov r8d, 0x104
lea rdx, [rbp + 0xb90]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xae4], xmm0
movups xmmword [rbp + 0xaf4], xmm0
movups xmmword [rbp + 0xb04], xmm0
movups xmmword [rbp + 0xb14], xmm0
movups xmmword [rbp + 0xb24], xmm0
movups xmmword [rbp + 0xb34], xmm0
mov dword [rbp + 0xb44], eax
mov dword [rbp + 0xae0], 0x68
movups xmmword [rbp + 0x990], xmm0
mov qword [rbp + 0x9a0], rax
lea rax, [rbp + 0x990]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0xae0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0xb90]
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x140004665
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea rdx, [0x14000a148]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140005d30
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x140005f00]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0x9f0]
cmp rdx, rdi
jbe 0x140004400
inc rdx
mov rcx, qword [rbp + 0x9d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400043fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400043fb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140007b1c
mov qword [rbp + 0x9e8], r13
mov qword [rbp + 0x9f0], rdi
mov byte [rbp + 0x9d8], 0
mov rdx, qword [rbp + 0xa30]
cmp rdx, 0xf
jbe 0x140004459
inc rdx
mov rcx, qword [rbp + 0xa18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004454
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004454
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140007b1c
movdqa xmm0, xmmword [0x14000a300]
movdqu xmmword [rbp + 0xa28], xmm0
mov byte [rbp + 0xa18], 0
mov rdx, qword [rbp + 0xa50]
cmp rdx, 0xf
jbe 0x1400044b4
inc rdx
mov rcx, qword [rbp + 0xa38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400044af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400044af
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140007b1c
movdqa xmm0, xmmword [0x14000a300]
movdqu xmmword [rbp + 0xa48], xmm0
mov byte [rbp + 0xa38], 0
mov rdx, qword [rbp + 0xa10]
cmp rdx, 0xf
jbe 0x14000450f
inc rdx
mov rcx, qword [rbp + 0x9f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000450a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000450a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140007b1c
movdqa xmm0, xmmword [0x14000a300]
movdqu xmmword [rbp + 0xa08], xmm0
mov byte [rbp + 0x9f8], 0
mov rdx, qword [rbp + 0x9d0]
cmp rdx, 0xf
jbe 0x14000456a
inc rdx
mov rcx, qword [rbp + 0x9b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004565
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004565
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140007b1c
movdqa xmm0, xmmword [0x14000a300]
movdqu xmmword [rbp + 0x9c8], xmm0
mov byte [rbp + 0x9b8], 0
cmp rsi, 0xf
jbe 0x1400045bc
lea rdx, [rsi + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400045b3
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400045b3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.140007b1c
nop
mov rdx, qword [rbp + 0x988]
cmp rdx, 0xf
jbe 0x140004600
inc rdx
mov rcx, qword [rbp + 0x970]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400045fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400045fb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140007b1c
movdqa xmm0, xmmword [0x14000a300]
movdqu xmmword [rbp + 0x980], xmm0
mov byte [rbp + 0x970], 0
lea rcx, [rbp + 0xa60]
call fcn.140004f20
nop
lea rcx, [rbp + 0xaa0]
call fcn.140004ea0
mov eax, 1
mov rcx, qword [rbp + 0xca0]
xor rcx, rsp
call fcn.1400077b0
lea r11, [rsp + 0xdb0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov edx, 0xffffffff
mov rcx, qword [rbp + 0x990]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp + 0x990]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x998]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp + 0x9d8]
call fcn.140004db0
nop
lea rcx, [rbp + 0xa18]
call fcn.140004db0
nop
lea rcx, [rbp + 0xa38]
call fcn.140004db0
nop
jmp 0x140004ab1
lea rcx, str.kerber.exe_e___start
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, 8
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.__Enter_text_to_ENCRYPT__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005d30
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, 0xc
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._n____
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005d30
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, 7
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rbp + 0x970]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140005f40
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rbp + 0x970]
call fcn.140005710
mov r14, rax
lea rbx, [0x140000000]
sub r14d, 1
js 0x140004856
movsxd r15, r14d
nop word [rax + rax]
mov rdx, r15
lea rcx, [rbp + 0x970]
call fcn.140005720
movsx edi, byte [rax]
lea eax, [rdi - 0x20]
cmp eax, 0x5e
ja case.0x1400047be.49
cdqe
movzx eax, byte [rbx + rax + 0x4ca0]
mov ecx, dword [rbx + rax*4 + 0x4c58]
add rcx, rbx
jmp rcx
mov al, 0x5e
jmp 0x14000483a
mov al, 0x20
jmp 0x14000483a
mov al, 0x25
jmp 0x14000483a
mov al, 0x2e
jmp 0x14000483a
mov al, 0x2a
jmp 0x14000483a
mov al, 0x2c
jmp 0x14000483a
mov al, 0x7e
jmp 0x14000483a
mov al, 0x3d
jmp 0x14000483a
mov al, 0x60
jmp 0x14000483a
mov al, 0x2b
jmp 0x14000483a
mov al, 0x2f
jmp 0x14000483a
mov al, 0x2d
jmp 0x14000483a
mov al, 0x23
jmp 0x14000483a
mov al, 0x3a
jmp 0x14000483a
mov al, 0x26
jmp 0x14000483a
mov al, 0x3b
jmp 0x14000483a
mov eax, 0x69
sub al, dil
jmp 0x14000483a
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_islower]
test eax, eax
je 0x140004820
mov eax, 0xffffffdb
sub al, dil
jmp 0x14000483a
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isupper]
test eax, eax
je 0x140004836
mov eax, 0xffffff9b
sub al, dil
jmp 0x14000483a
movzx eax, dil
movzx edx, al
lea rcx, [rbp + 0x950]
call fcn.140005740
dec r15
sub r14d, 1
jns 0x140004790
lea rdx, [rbp + 0x950]
lea rcx, [rbp + 0x9f8]
call fcn.140001220
nop
lea rcx, [rbp + 0x9f8]
call fcn.140005710
mov r14, rax
sub r14d, 1
js 0x140004956
movsxd r15, r14d
nop word [rax + rax]
mov rdx, r15
lea rcx, [rbp + 0x9f8]
call fcn.140005720
movsx edi, byte [rax]
lea eax, [rdi - 0x20]
cmp eax, 0x5e
ja case.0x1400048be.49
cdqe
movzx eax, byte [rbx + rax + 0x4d48]
mov ecx, dword [rbx + rax*4 + 0x4d00]
add rcx, rbx
jmp rcx
mov al, 0x5e
jmp 0x14000493a
mov al, 0x20
jmp 0x14000493a
mov al, 0x25
jmp 0x14000493a
mov al, 0x2e
jmp 0x14000493a
mov al, 0x2a
jmp 0x14000493a
mov al, 0x2c
jmp 0x14000493a
mov al, 0x7e
jmp 0x14000493a
mov al, 0x3d
jmp 0x14000493a
mov al, 0x60
jmp 0x14000493a
mov al, 0x2b
jmp 0x14000493a
mov al, 0x2f
jmp 0x14000493a
mov al, 0x2d
jmp 0x14000493a
mov al, 0x23
jmp 0x14000493a
mov al, 0x3a
jmp 0x14000493a
mov al, 0x26
jmp 0x14000493a
mov al, 0x3b
jmp 0x14000493a
mov eax, 0x69
sub al, dil
jmp 0x14000493a
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_islower]
test eax, eax
je 0x140004920
mov eax, 0xffffffdb
sub al, dil
jmp 0x14000493a
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isupper]
test eax, eax
je 0x140004936
mov eax, 0xffffff9b
sub al, dil
jmp 0x14000493a
movzx eax, dil
movzx edx, al
lea rcx, [rbp + 0x9b8]
call fcn.140005740
dec r15
sub r14d, 1
jns 0x140004890
lea rdx, [rbp + 0x9b8]
lea rcx, [rbp + 0xb70]
call fcn.1400016f0
nop
lea rdx, [rbp + 0xb70]
lea rcx, [rbp + 0x990]
call fcn.1400019f0
nop
lea r8, [rbp + 0xaa0]
lea rdx, [rbp + 0x990]
lea rcx, [rbp + 0xa18]
call fcn.140001e20
nop
lea r8, [rbp + 0xaa0]
lea rdx, [rbp + 0xa18]
lea rcx, [rbp + 0xa38]
call fcn.1400020e0
nop
lea rcx, str.kerber.exe_e___done
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, 0xa
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.____
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005d30
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, 0xe
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rbp + 0xa38]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005f80
mov rcx, rax
lea rdx, [0x140005f00]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r12w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._n__Done._Text_Encrypted.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005d30
mov rcx, rax
lea rdx, [0x140005f00]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop
lea rcx, [rbp + 0xa38]
call fcn.140004db0
nop
lea rcx, [rbp + 0xa18]
call fcn.140004db0
nop
lea rcx, [rbp + 0x990]
call fcn.140004db0
nop
lea rcx, [rbp + 0xb70]
call fcn.140004db0
nop
lea rcx, [rbp + 0x9f8]
call fcn.140004db0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
lea rdx, [rbp + 0x9b0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleCursorInfo]
mov dword [rbp + 0x9b4], r13d
lea rdx, [rbp + 0x9b0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorInfo]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3