Function at 0x140055eb0
Capabilities:
Create thread
Execute command

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x140
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140078080]
xor rax, rsp
mov qword [rbp + 0xe0], rax
call qword [sym.imp.KERNEL32.dll_AllocConsole]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rbx, rax
movabs rax, 0xbb823413a7ebd426
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
movabs rsi, 0x964866966daed206
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
movabs r15, 0xbb823413a7ebd451
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0x10], xmm0
movabs rax, 0xbba66046e8a59b12
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movdqa xmm0, xmmword [rbp + 0xa0]
xorps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0xa0], xmm0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rbx
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0xa0]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
movabs rax, 0xdfac0620d58ea724
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rbx, 0x964866966daebe6a
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movdqa xmm0, xmmword [rbp + 0xa0]
xorps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0xa0], xmm0
lea rcx, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
test rax, rax
je 0x14005686f
movabs rax, 0xdfac5a7cca87a624
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movdqa xmm0, xmmword [rbp + 0xa0]
xorps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0xa0], xmm0
lea rcx, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
test rax, rax
je 0x14005686f
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movabs rax, 0xbbf03476a798d424
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x962c66b86d9cd235
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0xe7eab2edd7495bd7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rcx, 0xaefe1ea81126fb48
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0xe7eab2edd7255bbb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0xa0]
vmovdqu ymmword [rbp + 0x80], ymm1
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x10]
vzeroupper
call fcn.140057880
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.140006dc0
cmp byte [rbp + 0x68], 0
je 0x14005686f
movabs rax, 0xf9e75372d498b11c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
movabs rax, 0x964866966defaa69
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0x10], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
xor r14d, r14d
mov qword [rbp + 0x90], r14
mov qword [rbp + 0x98], r14
lea rax, [rbp + 0x10]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], r14b
jne 0x140056250
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x80]
call fcn.140053d70
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x40]
call fcn.140007060
mov rdi, rax
test rax, rax
je 0x14005686f
lea rcx, str.start___n
call fcn.140006ba0
movups xmm0, xmmword [0x1400780f8]
movups xmmword [rbp + 0x80], xmm0
lea rcx, [rbp + 0x80]
call fcn.140053560
movzx ecx, ax
mov rax, qword [rbp + 0x88]
movabs r12, 0x400000000000000
and rax, r12
mov ebx, 0x12c
mov eax, ebx
mov r13d, 0x96
cmove ax, r13w
cmp cx, ax
jb 0x140056592
lea rcx, str.vm___n
call fcn.140006ba0
movups xmm0, xmmword [0x1400780f8]
movups xmmword [rbp + 0x80], xmm0
lea rcx, [rbp + 0x80]
call fcn.140053560
movzx ecx, ax
mov rax, qword [rbp + 0x88]
and rax, r12
cmove bx, r13w
cmp cx, bx
jb 0x14005631e
mov al, 0x64
jmp 0x14005632c
movzx eax, cl
mov edx, 0x63
cmp ecx, 0x64
cmovae eax, edx
movzx edx, al
cmp edx, 0x50
jbe 0x140056592
lea rcx, str.certain:__d_n
call fcn.140006ba0
movabs rax, 0x8baa1461c899a614
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0xd20b23af2fe8937e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0xe7eab2edd725728b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rdx, 0xaefe1ea81126fb48
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs r8, 0xe7eab2edd7255bbb
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqa ymmword [rbp + 0x80], ymm1
movabs rax, 0xd5ec5570879ebb08
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0xe26808e31f8ea669
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0x8085c09df75632d3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0xcb9a70dd314b9a3a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rax, 0xbde081393e7c1187
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0x3f1eb667d40dda4f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0xf5cd852c7e6d17bd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rcx, 0x8ee7afc442df4a5c
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0xc992e84f1e1d31f5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0x5668d802f461bb3a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0xdbb9eb49130378cf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x40], ymm1
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqa ymmword [rbp + 0x60], ymm1
mov r9d, 0x10
lea r8, [rbp + 0x80]
lea rdx, [rbp + 0x40]
xor ecx, ecx
vzeroupper
call rdi
mov eax, 1
jmp 0x140056871
lea rcx, str.load___n
call fcn.140006ba0
mov ecx, 8
call fcn.14006b4e8
lea rcx, [0x140054b20]
mov qword [rax], rcx
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x14005ebe0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x10], rax
test rax, rax
je 0x1400568ad
cmp dword [rbp + 0x18], 0
je 0x1400568a1
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x80], xmm0
lea rcx, [rbp + 0x80]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400568a1
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x10], xmm0
movabs rax, 0x8baa1461c899a614
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0xa60b23a52be8937e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0xe7eab2edd725728b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rdx, 0xaefe1ea81126fb48
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs r8, 0xe7eab2edd7255bbb
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqa ymmword [rbp + 0x80], ymm1
movabs rax, 0x9bf15d33eea88219
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0xb62c03fa0fcfbc63
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0xc798c782ae0535d4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x8f9b70c179459a25
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rax, 0xacfe8a2e6d7475d5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0x2348b776d415d21a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0xab998e2167231dbc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0x8ec9c2a530b8252e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0xc992e84f1e1d31f5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0x5668d802f461bb3a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0xdbb9eb49130378cf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rcx, 0x8ee7afc442df4a5c
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x40], ymm1
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqa ymmword [rbp + 0x60], ymm1
mov r9d, 0x10
lea r8, [rbp + 0x80]
lea rdx, [rbp + 0x40]
xor ecx, ecx
vzeroupper
call rdi
lea rcx, str.Pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor eax, eax
mov rcx, qword [rbp + 0xe0]
xor rcx, rsp
call fcn.14006b4c0
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov dword [rbp + 0x18], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3