Function at 0x140008510
Capabilities:
Create thread
Encode data using xor
Set console window title
Terminate process

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1b8]
sub rsp, 0x290
mov qword [rbp - 0x38], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x14009baf8]
xor rax, rsp
mov qword [rbp + 0x180], rax
xor r14d, r14d
mov dword [rbp - 0x40], r14d
lea rcx, [rbp - 0x30]
call fcn.1400023a0
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x14000859d
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008598
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008598
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140009288
lea rcx, [rbp - 0x30]
call fcn.140002880
lea rcx, [rbp - 0x30]
call fcn.140002fa0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
mov ebx, r14d
movabs rsi, 0x842108421084211
mov r15, 0xffffffffffffffff
lea r12, [0x14009b8c0]
nop dword [rax + rax]
movdqa xmm0, xmmword [0x14000c470]
movdqu xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [0x14000c480]
movdqu xmmword [rsp + 0x70], xmm1
mov dword [rbp - 0x80], 0x17161918
mov word [rbp - 0x7c], 0x14
mov rax, r14
nop dword [rax]
movzx ecx, byte [rsp + 0x60]
xor byte [rsp + rax + 0x61], cl
movzx ecx, byte [rsp + 0x60]
xor byte [rsp + rax + 0x62], cl
add rax, 2
cmp rax, 0x24
jb 0x140008610
mov byte [rbp - 0x7b], r14b
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], r14b
lea rax, [rsp + 0x61]
mov r8, r15
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r14b
jne 0x140008650
lea rdx, [rsp + 0x61]
lea rcx, [rbp - 0x30]
call fcn.140006680
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
and r8d, 0x1f
mov rax, rsi
mul r8
mov ecx, r8d
sub rcx, rdx
shr rcx, 1
add rcx, rdx
shr rcx, 4
imul rcx, rcx, 0x1f
sub r8, rcx
lea rax, [rbp - 0x30]
mov rcx, qword [rbp - 0x30]
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
cmovae rax, rcx
movzx edi, byte [rax + r8 + 1]
jb 0x1400086da
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400086d5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400088df
call fcn.140009288
mov rcx, qword [0x14009b8d0]
mov rdx, qword [0x14009b8d8]
cmp rcx, rdx
jae 0x140008712
lea rax, [rcx + 1]
mov qword [0x14009b8d0], rax
mov rax, r12
cmp rdx, 0x10
cmovae rax, qword [0x14009b8c0]
mov byte [rax + rcx], dil
mov byte [rax + rcx + 1], r14b
jmp 0x140008725
movzx r9d, dil
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, r12
call fcn.140001c40
inc ebx
cmp ebx, 0xa
jb 0x1400085e0
mov rcx, r12
cmp qword [0x14009b8d8], 0x10
cmovae rcx, qword [0x14009b8c0]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, [rbp - 0x30]
call fcn.140002880
lea rcx, [rbp - 0x30]
call fcn.140002fa0
mov dword [0x1400aa89c], 0x32
lea rcx, [rbp - 0x30]
call fcn.140002880
lea rcx, [rbp - 0x30]
call fcn.140002fa0
mov byte [rsp + 0x40], 0x6e
mov al, 0xc
mov cl, 3
mov dl, 2
mov r8b, 7
mov r9b, 0xd
mov r10b, 5
mov r11b, 0x1a
movzx ebx, r8b
mov dil, 0xb
mov sil, 0x1b
xor r13d, r13d
xor al, 0x6e
mov byte [rsp + 0x41], al
xor cl, 0x6e
mov byte [rsp + 0x42], cl
xor dl, 0x6e
mov byte [rsp + 0x43], dl
xor r8b, 0x6e
mov byte [rsp + 0x44], r8b
xor r9b, 0x6e
mov byte [rsp + 0x45], r9b
xor r10b, 0x6e
mov byte [rsp + 0x46], r10b
xor r11b, 0x6e
mov byte [rsp + 0x47], r11b
xor bl, 0x6e
mov byte [rsp + 0x48], bl
xor dil, 0x6e
mov byte [rsp + 0x49], dil
xor sil, 0x6e
mov byte [rsp + 0x4a], sil
mov byte [rsp + 0x4b], r13b
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], r13b
lea rax, [rsp + 0x41]
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x140008810
lea rdx, [rsp + 0x41]
lea rcx, [rbp - 0x30]
call fcn.140006680
nop
mov byte [rsp + 0x40], 0x6e
mov al, 0x32
movzx ecx, al
mov dl, 0x40
movzx r8d, al
xor r9d, r9d
xor al, 0x6e
mov byte [rsp + 0x41], al
xor cl, 0x6e
mov byte [rsp + 0x42], cl
xor dl, 0x6e
mov byte [rsp + 0x43], dl
xor r8b, 0x6e
mov byte [rsp + 0x44], r8b
mov byte [rsp + 0x45], r9b
movdqa xmm0, xmmword [0x14000c410]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], r9b
mov dword [rbp - 0x40], 1
lea rax, [rsp + 0x41]
nop dword [rax]
inc r15
cmp byte [rax + r15], 0
jne 0x140008880
mov rdi, qword [rbp - 0x20]
lea rdx, [r15 + rdi]
cmp rdx, 0x10
jb 0x1400088aa
xor r8d, r8d
lea rcx, [rsp + 0x60]
call fcn.140001f30
mov qword [rsp + 0x70], r14
mov rax, qword [rsp + 0x78]
cmp r15, rax
ja 0x1400088e6
mov qword [rsp + 0x70], r15
lea rbx, [rsp + 0x60]
cmp rax, 0x10
cmovae rbx, qword [rsp + 0x60]
mov r8, r15
lea rdx, [rsp + 0x41]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + r15], 0
jmp 0x140008900
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x41]
xor r8d, r8d
mov rdx, r15
lea rcx, [rsp + 0x60]
call fcn.140001da0
lea r9, [rbp - 0x30]
cmp qword [rbp - 0x18], 0x10
cmovae r9, qword [rbp - 0x30]
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x140008952
lea rax, [rdi + rcx]
mov qword [rsp + 0x70], rax
lea rbx, [rsp + 0x60]
cmp rdx, 0x10
cmovae rbx, qword [rsp + 0x60]
add rbx, rcx
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x140008967
mov qword [rsp + 0x20], rdi
xor r8d, r8d
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.140001da0
lea rcx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0x10
cmovae rcx, qword [rsp + 0x60]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x40000000
lea r8d, [r9 + 2]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x1400aa890], rax
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x1400089ea
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400089de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400089de
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140009288
mov rax, qword [0x1400aa890]
cmp rax, 0xffffffffffffffff
jne 0x140008bb9
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea r8, [0x1400031e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
movdqa xmm1, xmmword [0x14000c530]
movdqu xmmword [rbp - 0x30], xmm1
movdqa xmm2, xmmword [0x14000c510]
movdqu xmmword [rbp - 0x20], xmm2
movdqa xmm3, xmmword [0x14000c4a0]
movdqu xmmword [rbp - 0x10], xmm3
mov cl, 0xb
mov dl, 0x1d
mov r8b, 0x1a
mov r10b, 0xf
mov r11b, 0x1c
movzx ebx, r8b
mov dil, 0x4e
mov sil, 0x3e
mov r14b, 0x2d
movzx r15d, dil
mov r12b, 0x4f
movzx r13d, r12b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r9d, xmm1
xor al, r9b
mov byte [rbp - 0x2f], al
xor byte [rbp - 0x2e], r9b
xor byte [rbp - 0x2d], r9b
xor byte [rbp - 0x2c], r9b
xor byte [rbp - 0x2b], r9b
xor byte [rbp - 0x2a], r9b
xor byte [rbp - 0x29], r9b
xor byte [rbp - 0x28], r9b
xor byte [rbp - 0x27], r9b
xor byte [rbp - 0x26], r9b
xor byte [rbp - 0x25], r9b
xor byte [rbp - 0x24], r9b
xor byte [rbp - 0x23], r9b
xor byte [rbp - 0x22], r9b
xor byte [rbp - 0x21], r9b
movd eax, xmm2
xor al, r9b
mov byte [rbp - 0x20], al
xor byte [rbp - 0x1f], r9b
xor byte [rbp - 0x1e], r9b
xor byte [rbp - 0x1d], r9b
xor byte [rbp - 0x1c], r9b
xor byte [rbp - 0x1b], r9b
xor byte [rbp - 0x1a], r9b
xor byte [rbp - 0x19], r9b
xor byte [rbp - 0x18], r9b
xor byte [rbp - 0x17], r9b
xor byte [rbp - 0x16], r9b
xor byte [rbp - 0x15], r9b
xor byte [rbp - 0x14], r9b
xor byte [rbp - 0x13], r9b
xor byte [rbp - 0x12], r9b
xor byte [rbp - 0x11], r9b
movd eax, xmm3
xor al, r9b
mov byte [rbp - 0x10], al
xor byte [rbp - 0xf], r9b
xor byte [rbp - 0xe], r9b
xor byte [rbp - 0xd], r9b
xor byte [rbp - 0xc], r9b
xor byte [rbp - 0xb], r9b
xor byte [rbp - 0xa], r9b
xor byte [rbp - 9], r9b
xor byte [rbp - 8], r9b
xor byte [rbp - 7], r9b
xor byte [rbp - 6], r9b
xor byte [rbp - 5], r9b
xor byte [rbp - 4], r9b
xor byte [rbp - 3], r9b
xor byte [rbp - 2], r9b
xor byte [rbp - 1], r9b
xor cl, r9b
mov byte [rbp], cl
xor dl, r9b
mov byte [rbp + 1], dl
xor r8b, r9b
mov byte [rbp + 2], r8b
xor r10b, r9b
mov byte [rbp + 3], r10b
xor r11b, r9b
mov byte [rbp + 4], r11b
xor bl, r9b
mov byte [rbp + 5], bl
xor dil, r9b
mov byte [rbp + 6], dil
xor sil, r9b
mov byte [rbp + 7], sil
xor r14b, r9b
mov byte [rbp + 8], r14b
xor r15b, r9b
mov byte [rbp + 9], r15b
xor r12b, r9b
mov byte [rbp + 0xa], r12b
xor r13b, r9b
mov byte [rbp + 0xb], r13b
mov byte [rbp + 0xc], 0
lea rcx, [0x14009b8c0]
call fcn.140006bd0
mov r8, rax
mov r9d, 0x40010
lea rdx, [rbp - 0x2f]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [rsp + 0x60]
call fcn.1400023a0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x140008c01
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008bfc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008bfc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140009288
lea rcx, [rsp + 0x60]
call fcn.1400023a0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x140008c49
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008c44
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008c44
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140009288
lea rcx, [rsp + 0x60]
call fcn.1400023a0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x140008c91
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008c8c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008c8c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140009288
lea rcx, [rsp + 0x60]
call fcn.1400023a0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x140008cd9
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008cd4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008cd4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140009288
lea rcx, [rsp + 0x60]
call fcn.1400023a0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x140008d21
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008d1c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008d1c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140009288
lea rcx, [rsp + 0x60]
call fcn.1400023a0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x140008d69
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008d64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008d64
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140009288
lea rcx, [rsp + 0x60]
call fcn.140002880
lea rcx, [rsp + 0x60]
call fcn.140002fa0
mov ecx, 0xa
call fcn.140005bb0
mov byte [rsp + 0x40], 0x6e
mov al, 0x8e
mov cl, 0xab
mov dl, 0x86
mov r8b, 0xd7
xor r9d, r9d
xor al, 0x6e
mov byte [rsp + 0x41], al
xor cl, 0x6e
mov byte [rsp + 0x42], cl
xor dl, 0x6e
mov byte [rsp + 0x43], dl
xor r8b, 0x6e
mov byte [rsp + 0x44], r8b
mov byte [rsp + 0x45], r9b
lea rdx, [rsp + 0x41]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001140
mov rcx, rax
lea rdx, [0x140002230]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x60]
call fcn.140002880
lea rcx, [rsp + 0x60]
call fcn.140002fa0
mov ecx, 0x7270e0
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
cmp qword [0x14009b8d8], 0x10
cmovae r12, qword [0x14009b8c0]
movdqa xmm0, xmmword [0x14000c520]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [0x14000c500]
movdqa xmmword [rsp + 0x70], xmm1
movdqa xmm0, xmmword [0x14000c430]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x14000c4f0]
movdqa xmmword [rbp - 0x70], xmm1
mov word [rbp - 0x60], 0x4f
mov rcx, r14
nop dword [rax]
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x61], al
movzx eax, byte [rsp + 0x60]
xor byte [rsp + rcx + 0x62], al
add rcx, 2
cmp rcx, 0x40
jb 0x140008e50
mov byte [rbp - 0x5f], 0
mov r9d, 0x40040
mov r8, r12
lea rdx, [rsp + 0x61]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
cmp dword [0x1400aa89c], 0x32
jne 0x140008e9d
lea rdi, [0x140025680]
mov byte [0x14009bc0a], 1
lea rcx, [rsp + 0x60]
call fcn.140002880
lea rcx, [rsp + 0x60]
call fcn.140002fa0
call fcn.140003200
lea rcx, [rsp + 0x60]
call fcn.140002880
lea rcx, [rsp + 0x60]
call fcn.140002fa0
cmp dword [0x1400aa81c], 0
jne 0x140008f99
lea rbx, [0x14009b8a0]
lea rsi, [0x14009b880]
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x14009bc0a], 0
je 0x140008f42
cmp byte [0x140025607], 0
je 0x140008f8c
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdx, rbx
cmp qword [0x14009b8b8], 0x10
cmovae rdx, qword [0x14009b8a0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
lea rdx, [0x1400aa81c]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
test eax, eax
je 0x140008ef9
jmp 0x140008f85
cmp byte [0x140025607], 0
je 0x140008f8c
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rsi
cmp qword [0x14009b898], 0x10
cmovae rcx, qword [0x14009b880]
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowA]
lea rdx, [0x1400aa81c]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
test eax, eax
je 0x140008f42
mov byte [0x140025607], 0
cmp dword [0x1400aa81c], 0
je 0x140008ee5
lea rcx, [rsp + 0x60]
call fcn.140002880
lea rcx, [rsp + 0x60]
call fcn.140002fa0
lea rcx, [rsp + 0x60]
call fcn.140002880
lea rcx, [rsp + 0x60]
call fcn.140002fa0
lea rcx, [rsp + 0x60]
call fcn.140002880
lea rcx, [rsp + 0x60]
call fcn.140002fa0
mov eax, dword [0x1400aa81c]
mov dword [0x1400aa854], eax
call fcn.1400044e0
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.140002880
lea rcx, [rsp + 0x60]
call fcn.140002fa0
movdqa xmm0, xmmword [0x14000c4b0]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x2020a
movzx eax, byte [rsp + 0x40]
xor byte [rsp + r14 + 0x41], al
inc r14
cmp r14, 0x12
jb 0x140009013
mov byte [rsp + 0x53], 0
xor r9d, r9d
mov r8, rbx
mov rdx, rdi
lea rcx, [rsp + 0x41]
call fcn.140005370
lea rcx, [rsp + 0x60]
call fcn.140002880
lea rcx, [rsp + 0x60]
call fcn.140002fa0
mov rcx, qword [0x1400aa890]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x60]
call fcn.140002880
lea rcx, [rsp + 0x60]
call fcn.140002fa0
mov r8d, 0x104
lea rdx, [rbp + 0x70]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rcx, [rbp + 0x30]
call fcn.140002340
nop
mov byte [rsp + 0x40], 0x6e
mov al, 0x1d
mov cl, 0xd
mov dl, 0x4e
movzx r8d, al
mov r9b, 0x1a
mov r10b, 1
mov r11b, 0x1e
movzx ebx, dl
xor edi, edi
xor al, 0x6e
mov byte [rsp + 0x41], al
xor cl, 0x6e
mov byte [rsp + 0x42], cl
xor dl, 0x6e
mov byte [rsp + 0x43], dl
xor r8b, 0x6e
mov byte [rsp + 0x44], r8b
xor r9b, 0x6e
mov byte [rsp + 0x45], r9b
xor r10b, 0x6e
mov byte [rsp + 0x46], r10b
xor r11b, 0x6e
mov byte [rsp + 0x47], r11b
xor bl, 0x6e
mov byte [rsp + 0x48], bl
mov byte [rsp + 0x49], dil
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0x30]
call fcn.140003170
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x30]
call fcn.140003150
lea rcx, [rbp + 0x50]
call fcn.140002340
nop
mov byte [rsp + 0x40], 0x6e
mov al, 0x1d
mov cl, 0xd
mov dl, 0x4e
mov r8b, 0xa
mov r9b, 0xb
mov r10b, 2
movzx r11d, r9b
mov bl, 0x1a
movzx edi, r9b
movzx esi, dl
xor r14d, r14d
xor al, 0x6e
mov byte [rsp + 0x41], al
xor cl, 0x6e
mov byte [rsp + 0x42], cl
xor dl, 0x6e
mov byte [rsp + 0x43], dl
xor r8b, 0x6e
mov byte [rsp + 0x44], r8b
xor r9b, 0x6e
mov byte [rsp + 0x45], r9b
xor r10b, 0x6e
mov byte [rsp + 0x46], r10b
xor r11b, 0x6e
mov byte [rsp + 0x47], r11b
xor bl, 0x6e
mov byte [rsp + 0x48], bl
xor dil, 0x6e
mov byte [rsp + 0x49], dil
xor sil, 0x6e
mov byte [rsp + 0x4a], sil
mov byte [rsp + 0x4b], r14b
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0x50]
call fcn.140003170
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x50]
call fcn.140003150
lea rcx, [rbp + 0x30]
call fcn.140006bd0
mov rcx, rax
call fcn.140005b10
lea rcx, [rbp + 0x50]
call fcn.140006bd0
mov rcx, rax
call fcn.140005b10
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3