Function at 0x140002f70
Capabilities:
Encode data using xor
Execute command
Hide graphical window
Set console window title
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xf8]
sub rsp, 0x1d0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x140098080]
xor rax, rsp
mov qword [rbp + 0x90], rax
xor r12d, r12d
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea rcx, [rbp - 0x60]
call fcn.140002e90
nop
lea rcx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rcx, qword [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
call fcn.140006c00
lea rcx, [0x140098f80]
call fcn.140015900
mov eax, dword [str.VZD8]
mov dword [rsp + 0x30], eax
lea edi, [r12 + 0x1f]
lea r13d, [r12 + 4]
mov ebx, dword [reloc.WS2_32.dll_accept]
cmp byte [0x14007e5a3], r12b
je 0x1400030f1
cmp ebx, 2
jl 0x1400030ac
movdqa xmm3, xmmword [0x14008ca80]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x14008cb00]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x14008cb00]
shufps xmm2, xmm0, 0xdd
movd xmm0, r13d
psrad xmm2, xmm0
movd xmm0, edi
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x14008cab0]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008cac0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x14008caf0]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rsp + 0x30], xmm2
jmp 0x1400030f1
lea r9, [rsp + 0x30]
mov r8d, r12d
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x35
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, r13d
jl 0x1400030c0
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x40], 0
movups xmm0, xmmword [0x14008c6c0]
movups xmmword [rsp + 0x78], xmm0
movzx eax, word [0x14008c6d0]
mov word [rbp - 0x78], ax
cmp byte [0x14008c6d1], 0
je 0x1400032c2
mov r8d, r12d
cmp ebx, 2
jl 0x140003283
movdqa xmm5, xmmword [0x14008ca80]
movdqa xmm4, xmmword [0x14008cb00]
movd xmm6, r13d
movdqa xmm7, xmmword [0x14008cab0]
movd xmm8, edi
movdqa xmm0, xmmword [0x14008caf0]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rsp + 0x7c]
mov edx, dword [rbp - 0x70]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008cac0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14008cac0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140003180
cmp r8d, 0x12
jge 0x1400032c2
movsxd rax, r8d
lea r9, [rsp + 0x78]
add r9, rax
nop
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x35
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x12
jl 0x140003290
lea rdx, [rsp + 0x78]
mov rcx, qword [0x14006f550]
call fcn.140004450
lea rdx, [rbp - 0x40]
mov rcx, qword [0x14006f4e0]
call fcn.140004620
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
lea rsi, [rbp - 0x40]
mov r14, qword [rbp - 0x40]
mov r15, qword [rbp - 0x28]
cmp r15, 0x10
cmovae rsi, r14
movabs rbx, 0x7fffffffffffffff
mov rdi, qword [rbp - 0x30]
cmp rdi, rbx
ja 0x140003d36
mov qword [rsp + 0x70], reloc.WS2_32.dll_ntohs
cmp rdi, 0x10
jae 0x140003341
mov qword [rsp + 0x68], rdi
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x58], xmm0
jmp 0x1400033d8
mov rax, rdi
or rax, 0xf
cmp rax, rbx
jbe 0x140003379
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14006c380
mov rcx, rax
test rax, rax
je 0x1400033a4
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400033ba
mov rbx, rax
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400033ab
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003d3c
jmp 0x14000335b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400033b7
call fcn.14006c380
jmp 0x1400033ba
mov rax, r12
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x70], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rsp + 0x58]
lea rcx, [0x140098f80]
call fcn.140017250
lea rdx, str.user_logged_in
lea rcx, [rsp + 0x38]
call fcn.140004050
mov rdx, rax
lea rcx, [0x140098f80]
call fcn.1400187a0
mov rsi, qword [0x140099160]
mov r12, qword [0x140099168]
cmp rsi, r12
je 0x140003d22
mov rdx, rsi
lea rcx, [rbp - 0x20]
call fcn.140004170
nop
lea rdx, [rsi + 0x20]
lea rcx, [rbp]
call fcn.140004170
nop
lea rdx, [rbp - 0x20]
mov rdi, qword [rbp - 8]
cmp rdi, 0x10
setae r9b
mov rbx, qword [rbp - 0x20]
cmovae rdx, rbx
mov r8, qword [rbp - 0x10]
xor r10d, r10d
cmp r8, 4
jne 0x140003495
mov ecx, r10d
lea r11, str.Valo
nop word [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r11 + rcx - 1]
jne 0x140003488
cmp rcx, r13
jne 0x140003470
mov eax, r10d
jmp 0x14000348d
sbb eax, eax
or eax, 1
test eax, eax
je 0x140003575
lea rdx, [rbp - 0x20]
test r9b, r9b
cmovne rdx, rbx
cmp r8, 4
jne 0x1400034d5
mov rax, r10
lea r11, str.csgo
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r11 + rax - 1]
jne 0x1400034c8
cmp rax, r13
jne 0x1400034b0
mov eax, r10d
jmp 0x1400034cd
sbb eax, eax
or eax, 1
test eax, eax
je 0x14000385b
lea rcx, [rbp - 0x20]
test r9b, r9b
cmovne rcx, rbx
cmp r8, 8
jne 0x1400034fa
lea rdx, str.valofree
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140003add
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x140003535
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003530
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003d1b
call fcn.14006c60c
cmp rdi, 0x10
jb 0x14000356c
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140003564
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003d1b
mov rcx, rbx
call fcn.14006c60c
add rsi, 0x40
jmp 0x140003417
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r10
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14006c380
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x48], reloc.WS2_32.dll_send
mov qword [rsp + 0x50], Ordinal_33
movups xmm0, xmmword [str.Valo_Premium_Loaded]
movups xmmword [rax], xmm0
movzx ecx, word [0x14007e400]
mov word [rax + 0x10], cx
movzx ecx, byte [0x14007e402]
mov byte [rax + 0x12], cl
mov byte [rax + 0x13], 0
lea rdx, [rsp + 0x38]
lea rcx, [0x140098f80]
call fcn.1400187a0
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rax
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], 6
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov eax, dword [str.461849]
mov dword [rsp + 0x38], eax
movzx eax, word [0x14007e408]
mov word [rsp + 0x3c], ax
mov byte [rsp + 0x3e], 0
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x78]
lea rcx, [0x140098f80]
call fcn.1400132c0
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor r12d, r12d
mov dword [rbp - 0x70], r12d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rax
xorps xmm1, xmm1
movups xmmword [rbp + 0x20], xmm1
movups xmmword [rbp + 0x30], xmm1
movups xmmword [rbp + 0x40], xmm1
movups xmmword [rbp + 0x50], xmm1
movups xmmword [rbp + 0x60], xmm1
movups xmmword [rbp + 0x70], xmm1
mov qword [rbp + 0x80], rax
mov word [rsp + 0x30], r12w
lea r9, [rsp + 0x30]
mov r8, qword [rsp + 0x78]
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x58]
call fcn.140002b80
test eax, eax
jne 0x1400036dc
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rdx, [rbp - 0x70]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [rbp - 0x70]
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14000372a
mov rdx, qword [rbp - 0x78]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003718
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003718
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006c60c
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r12
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x140003761
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000375c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000378c
call fcn.14006c60c
cmp rdi, 0x10
jb 0x14000379c
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140003793
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003793
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.14006c60c
nop
cmp r15, 0x10
jb 0x1400037d7
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400037ce
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400037ce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.14006c60c
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14000381a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003815
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003815
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006c60c
mov eax, esi
mov rcx, qword [rbp + 0x90]
xor rcx, rsp
call fcn.14006c360
lea r11, [rsp + 0x1d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov dword [rsp + 0x44], r10d
mov qword [rsp + 0x48], recv
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.csgo_Loaded]
movsd qword [rsp + 0x38], xmm0
movzx eax, word [0x14007e420]
mov word [rsp + 0x40], ax
movzx eax, byte [0x14007e422]
mov byte [rsp + 0x42], al
mov byte [rsp + 0x43], 0
lea rdx, [rsp + 0x38]
lea rcx, [0x140098f80]
call fcn.1400187a0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rax
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], 6
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov eax, dword [str.998610]
mov dword [rsp + 0x38], eax
movzx eax, word [0x14007e428]
mov word [rsp + 0x3c], ax
mov byte [rsp + 0x3e], 0
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x78]
lea rcx, [0x140098f80]
call fcn.1400132c0
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor r12d, r12d
mov dword [rbp - 0x70], r12d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rax
xorps xmm1, xmm1
movups xmmword [rbp + 0x20], xmm1
movups xmmword [rbp + 0x30], xmm1
movups xmmword [rbp + 0x40], xmm1
movups xmmword [rbp + 0x50], xmm1
movups xmmword [rbp + 0x60], xmm1
movups xmmword [rbp + 0x70], xmm1
mov qword [rbp + 0x80], rax
mov word [rsp + 0x30], r12w
lea r9, [rsp + 0x30]
mov r8, qword [rsp + 0x78]
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x58]
call fcn.140002b80
test eax, eax
jne 0x140003998
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rdx, [rbp - 0x70]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [rbp - 0x70]
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400039e6
mov rdx, qword [rbp - 0x78]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400039d4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400039d4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006c60c
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r12
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x140003a1d
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003a18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a48
call fcn.14006c60c
cmp rdi, 0x10
jb 0x140003a58
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140003a4f
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003a4f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.14006c60c
nop
cmp r15, 0x10
jb 0x140003a93
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140003a8a
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003a8a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.14006c60c
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14000381a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003815
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003815
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rdx, str.Valo_Free_Loaded
lea rcx, [rsp + 0x38]
call fcn.140004050
mov rdx, rax
lea rcx, [0x140098f80]
call fcn.1400187a0
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rax
lea rdx, str.206886
lea rcx, [rsp + 0x38]
call fcn.140004050
mov r8, rax
lea rdx, [rsp + 0x78]
lea rcx, [0x140098f80]
call fcn.1400132c0
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor r12d, r12d
mov dword [rbp - 0x70], r12d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rax
xorps xmm1, xmm1
movups xmmword [rbp + 0x20], xmm1
movups xmmword [rbp + 0x30], xmm1
movups xmmword [rbp + 0x40], xmm1
movups xmmword [rbp + 0x50], xmm1
movups xmmword [rbp + 0x60], xmm1
movups xmmword [rbp + 0x70], xmm1
mov qword [rbp + 0x80], rax
mov word [rsp + 0x30], r12w
lea r9, [rsp + 0x30]
mov r8, qword [rsp + 0x78]
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x58]
call fcn.140002b80
test eax, eax
jne 0x140003bd6
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rdx, [rbp - 0x70]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [rbp - 0x70]
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x140003c24
mov rdx, qword [rbp - 0x78]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003c12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003c12
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006c60c
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r12
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x140003c5b
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003c56
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003c86
call fcn.14006c60c
cmp rdi, 0x10
jb 0x140003c96
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140003c8d
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003c8d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.14006c60c
nop
cmp r15, 0x10
jb 0x140003cd1
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140003cc8
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003cc8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.14006c60c
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14000381a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003815
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003815
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, Ordinal_301
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.140002050
int3
call fcn.140001fb0
int3