Function at 0x1400067e0
Capabilities:
Create thread
Encode data using xor
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x830
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x14009cd00]
xor rax, rsp
mov qword [rbp + 0x7d0], rax
xor r14d, r14d
mov dword [rbp + 0x10], r14d
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movsxd rcx, eax
movabs rax, 0xe38e38e38e38e38f
mul rcx
shr rdx, 3
lea rax, [rdx + rdx*8]
sub rcx, rax
lea rdx, [rcx + 4]
lea rcx, [rbp + 0x5e0]
call fcn.140005b70
cmp qword [rax + 0x18], 0xf
jbe 0x14000686c
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov rdx, qword [rbp + 0x5f8]
cmp rdx, 0xf
jbe 0x1400068b9
inc rdx
mov rcx, qword [rbp + 0x5e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400068b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400068b4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140069ee0
movdqa xmm0, xmmword [0x14006e470]
movdqu xmmword [rbp + 0x5f0], xmm0
mov byte [rbp + 0x5e0], r14b
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 8
call fcn.140069ea4
test rax, rax
je 0x1400068fc
lea rcx, [0x1400049e0]
mov qword [rax], rcx
jmp 0x1400068ff
mov rax, r14
mov qword [rbp + 0x660], rax
lea rcx, [rbp + 0x428]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x1400028b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x420], rax
test rax, rax
je 0x1400083fb
mov qword [rbp + 0x660], r14
mov ecx, 8
call fcn.140069ea4
test rax, rax
je 0x14000695d
lea rcx, [0x140004ba0]
mov qword [rax], rcx
jmp 0x140006960
mov rax, r14
mov qword [rbp + 0x380], rax
mov dword [rbp + 0x10], 3
lea rcx, [rbp + 0x438]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x1400028b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x430], rax
test rax, rax
je 0x1400083e9
mov qword [rbp + 0x380], r14
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
movabs rbx, 0x3926845954f26fd6
mov rsi, 0xffffffffffffffff
movabs r15, 0x2ffbb512d376d913
movabs r13, 0x52b49d3701aac9b4
movabs r12, 0xd039b2e465ea51e5
cmp eax, 1
jne 0x140006b7a
movabs rax, 0x489cc070b632f93b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0x31d5e943408abbd1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0xd039b2cd458e348d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x760], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x768], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x770], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x778], rax
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x760]
vmovdqa ymmword [rbp + 0xa0], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], r14
mov qword [rbp + 0xf8], r14
lea rax, [rbp + 0xa0]
mov r8, rsi
vzeroupper
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140006ac0
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0xe0]
call fcn.140002560
lea rdx, [rbp + 0xe0]
lea rcx, [0x14009d420]
call fcn.140015780
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.ntdll.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.RtlAdjustPrivilege
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
lea rcx, str.ntdll.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtRaiseHardError
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
lea r9, [rbp + 0x370]
xor r8d, r8d
mov dl, 1
lea ecx, [r8 + 0x13]
call rbx
lea rax, [rbp + 0x418]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0xc00002b4
call rdi
movabs rbx, 0x3926845954f26fd6
lea rcx, [0x14009d420]
call fcn.140013ba0
xorps xmm0, xmm0
movups xmmword [rbp + 0x460], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x470], xmm1
mov r8d, 1
lea rdx, reloc.WS2_32.dll_ioctlsocket
lea rcx, [rbp + 0x460]
call fcn.140002560
nop
mov edi, r14d
xorps xmm0, xmm0
movups xmmword [rbp + 0x3b0], xmm0
mov qword [rbp + 0x3c0], r14
mov qword [rbp + 0x3c8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x3b0], dil
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x260]
call sub.VCRUNTIME140.dll_memset
movabs rax, 0x469ddb7d902ae350
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x52b49d4379dee7d3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x680], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x688], rax
movdqa xmm0, xmmword [rbp + 0x80]
xorps xmm0, xmmword [rbp + 0x680]
movdqa xmmword [rbp + 0x80], xmm0
lea rax, [0x14006e398]
mov qword [rbp + 0x260], rax
lea rcx, [rbp + 0x310]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rbp + 0x10], 7
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x260]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0x260]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x260], rax
mov rax, qword [rbp + 0x260]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x25c], edx
lea rcx, [rbp + 0x270]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp + 0x270], rax
mov byte [rbp + 0x2ec], 0
mov byte [rbp + 0x2e1], 0
lea rcx, [rbp + 0x270]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp + 0x2f0], r14
mov rax, qword [0x14009d750]
mov qword [rbp + 0x2e4], rax
mov qword [rbp + 0x2d8], r14
mov r9d, 0x40
lea r8d, [r9 - 0x3f]
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x270]
call fcn.140005750
test rax, rax
jne 0x140006d5d
mov rax, qword [rbp + 0x260]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x260]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp + 0x260]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x260]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::fail_void_const___ptr64]
test al, al
jne 0x140008190
mov rax, qword [rbp + 0x260]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x260]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp + 0x3b0]
lea rcx, [rbp + 0x260]
call fcn.140003030
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
lea r15, [0x14009cc00]
lea r12, [0x14009cc20]
test al, al
je 0x140006ea5
inc edi
cmp edi, 1
jne 0x140006d80
lea r9, [rbp + 0x3b0]
cmp qword [rbp + 0x3c8], 0xf
cmova r9, qword [rbp + 0x3b0]
mov rax, qword [reloc.WS2_32.dll_ntohs]
mov r14, qword [rbp + 0x3c0]
cmp r14, rax
ja 0x140006e36
mov rbx, r15
cmp rax, 0xf
cmova rbx, qword [0x14009cc00]
mov qword [0x14009cc10], r14
mov r8, r14
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [r14 + rbx], 0
jmp 0x140006e50
movzx r8d, byte [rbp + 0x370]
mov rdx, r14
mov rcx, r15
call fcn.140002bb0
nop dword [rax]
mov rax, qword [rbp + 0x260]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x260]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp + 0x3b0]
lea rcx, [rbp + 0x260]
call fcn.140003030
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x140006f6f
inc edi
cmp edi, 2
jne 0x140006e50
jmp 0x140006eae
cmp edi, 2
jne 0x140006f72
lea r9, [rbp + 0x3b0]
cmp qword [rbp + 0x3c8], 0xf
cmova r9, qword [rbp + 0x3b0]
mov rax, qword [reloc.WS2_32.dll_ntohs]
mov r14, qword [rbp + 0x3c0]
cmp r14, rax
ja 0x140006f03
mov rbx, r12
cmp rax, 0xf
cmova rbx, qword [0x14009cc20]
mov qword [0x14009cc30], r14
mov r8, r14
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + r14], 0
jmp 0x140006f16
movzx r8d, byte [rbp + 0x370]
mov rdx, r14
mov rcx, r12
call fcn.140002bb0
cmp edi, 3
je 0x140006f6f
nop dword [rax + rax]
mov rax, qword [rbp + 0x260]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x260]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp + 0x3b0]
lea rcx, [rbp + 0x260]
call fcn.140003030
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x140006f6f
inc edi
cmp edi, 3
jne 0x140006f20
xor r14d, r14d
lea rax, [rbp + 0x240]
mov qword [rbp], rax
mov rdx, r12
lea rcx, [rbp + 0x240]
call fcn.140003520
mov rbx, rax
mov rdx, r15
lea rcx, [rbp + 0x220]
call fcn.140003520
nop
mov r8, rbx
mov rdx, rax
lea rcx, [0x14009d420]
call fcn.140015fb0
cmp byte [0x14009d638], 0
je 0x140007f60
mov qword [0x14009d6b0], r14
lea rax, [0x14009d6a0]
cmp qword [0x14009d6b8], 0xf
cmova rax, qword [0x14009d6a0]
mov byte [rax], 0
mov qword [0x14009d3c8], r14
lea rax, [0x14009d3b8]
cmp qword [0x14009d3d0], 0xf
cmova rax, qword [0x14009d3b8]
mov byte [rax], 0
mov qword [0x14009d6d0], r14
lea rax, [0x14009d6c0]
cmp qword [0x14009d6d8], 0xf
cmova rax, qword [0x14009d6c0]
mov byte [rax], 0
mov qword [0x14009d3a8], r14
lea rax, [0x14009d398]
cmp qword [0x14009d3b0], 0xf
cmova rax, qword [0x14009d398]
mov byte [rax], 0
mov qword [0x14009d408], r14
lea rax, [0x14009d3f8]
cmp qword [0x14009d410], 0xf
cmova rax, qword [0x14009d3f8]
mov byte [rax], 0
mov qword [0x14009cc10], r14
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova r15, qword [0x14009cc00]
mov byte [r15], 0
mov qword [0x14009cc30], r14
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova r12, qword [0x14009cc20]
mov byte [r12], 0
movabs rax, 0x5c9ed671a625f973
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
movabs rax, 0x72fddb722190e9c7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
movabs rax, 0xb94ddc810d9e24a4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
movabs rax, 0x5906ea363d860eb5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
movabs rcx, 0xef4a422602ce01d7
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
movabs rdx, 0x5d4b667b67a211a8
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movabs rax, 0x2ffbb512d376d913
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x720], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x728], rax
movabs rax, 0xd039b2e465ea51e5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x730], rax
movabs rax, 0x3926845954f26fd6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x738], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x740], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x748], rax
vmovdqu ymm0, ymmword [rbp + 0x140]
vpxor ymm1, ymm0, ymmword [rbp + 0x720]
vmovdqa ymmword [rbp + 0x140], ymm1
vmovdqa xmm0, xmmword [rbp + 0x160]
vxorps xmm0, xmm0, xmmword [rbp + 0x740]
vmovdqa xmmword [rbp + 0x160], xmm0
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x1c0], xmm0
mov qword [rbp + 0x1d0], r14
mov qword [rbp + 0x1d8], r14
lea rax, [rbp + 0x140]
mov r8, rsi
vzeroupper
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140007200
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x1c0]
call fcn.140002560
lea rdx, [rbp + 0x1c0]
lea rcx, [0x14009d420]
call fcn.140015780
lea rcx, [rbp + 0x270]
call fcn.1400050b0
test rax, rax
jne 0x140007263
mov rax, qword [rbp + 0x260]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x260]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea rcx, [rbp + 0x440]
call fcn.1400051a0
nop
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov qword [rbp + 0x3f0], rax
lea rdx, [rbp + 0x3f0]
lea rcx, [rbp + 0x4a0]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
lea r9, [rbp + 0x4a0]
lea r8, str._Y__m__d__H__M__S
mov edx, 0x50
lea rcx, [rbp + 0x780]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
mov r13, qword [rbp + 0x450]
movabs r14, 0x7fffffffffffffff
mov rax, r14
sub rax, r13
cmp rax, 1
jae 0x1400072d6
call fcn.140004fe0
int3
lea rax, [rbp + 0x440]
cmp qword [rbp + 0x458], 0xf
cmova rax, qword [rbp + 0x440]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x28], xmm1
lea r15, [r13 + 1]
mov r12d, reloc.WS2_32.dll_ntohs
mov ebx, r12d
lea rdi, [rbp + 0x18]
movabs rcx, 0x8000000000000000
lea edx, [r12 + 7]
cmp r15, rbx
jbe 0x140007399
mov rbx, r15
or rbx, r12
cmp rbx, r14
jbe 0x140007356
mov rbx, r14
lea rax, [rcx + 0x27]
mov rcx, rax
call fcn.140069ea4
test rax, rax
je 0x140007379
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rax, qword [rbp + 0x10]
jmp 0x140007395
cmp rbx, rdx
cmovb rbx, rdx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140007380
lea rax, [rcx + 0x27]
cmp rax, rcx
ja 0x140007337
call fcn.140004f80
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140007393
call fcn.140069ea4
mov rdi, rax
mov rax, qword [rbp + 0x10]
jmp 0x140007395
xor edi, edi
mov qword [rbp + 0x18], rdi
mov qword [rbp + 0x28], r15
mov qword [rbp + 0x30], rbx
mov r8, r13
mov rdx, rax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r13], reloc.WLDAP32.dll_Ordinal_32
mov byte [rdi + r15], 0
mov r15d, r12d
lea rax, [rbp + 0x780]
mov rdi, rsi
inc rdi
cmp byte [rax + rdi], 0
jne 0x1400073c6
mov rcx, qword [rbp + 0x28]
mov rdx, qword [rbp + 0x30]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x140007416
lea rax, [rdi + rcx]
mov qword [rbp + 0x28], rax
lea rbx, [rbp + 0x18]
cmp rdx, 0xf
cmova rbx, qword [rbp + 0x18]
add rbx, rcx
mov r8, rdi
lea rdx, [rbp + 0x780]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
lea rax, [rbp + 0x18]
jmp 0x140007436
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x780]
movzx r8d, byte [rbp + 0x370]
mov rdx, rdi
lea rcx, [rbp + 0x18]
call fcn.140002cf0
xorps xmm0, xmm0
movups xmmword [rbp + 0x3d0], xmm0
xor r13d, r13d
mov qword [rbp + 0x3e0], r13
mov qword [rbp + 0x3e8], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x3d0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x3e0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], r12
mov byte [rax], r13b
or r15d, 0x10
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x1400074b3
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400074ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400074ae
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140069ee0
movdqa xmm0, xmmword [0x14006e470]
movdqu xmmword [rbp + 0x28], xmm0
mov byte [rbp + 0x18], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x390], xmm0
mov qword [rbp + 0x3a0], r13
mov qword [rbp + 0x3a8], r13
mov rbx, qword [rbp + 0x3e0]
lea rdi, [rbp + 0x3d0]
cmp qword [rbp + 0x3e8], 0xf
cmova rdi, qword [rbp + 0x3d0]
cmp rbx, r14
jbe 0x140007505
call fcn.140004fe0
int3
cmp rbx, 0xf
ja 0x140007528
mov qword [rbp + 0x3a0], rbx
mov qword [rbp + 0x3a8], r12
movups xmm0, xmmword [rdi]
movups xmmword [rbp + 0x390], xmm0
jmp 0x1400075d4
mov rax, rbx
or rax, 0xf
cmp rax, r14
jbe 0x140007560
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140069ea4
mov rcx, rax
test rax, rax
je 0x14000758c
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400075a2
mov r14, rax
cmp rax, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb r14, rax
lea rcx, [r14 + 1]
cmp rcx, 0x1000
jb 0x140007593
lea rax, [rcx + 0x27]
cmp rax, rcx
ja 0x140007542
call fcn.140004f80
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000759f
call fcn.140069ea4
jmp 0x1400075a2
mov rax, r13
mov qword [rbp + 0x390], rax
mov qword [rbp + 0x3a0], rbx
mov qword [rbp + 0x3a8], r14
lea r8, [rbx + 1]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov r12, qword [rbp + 0x3a8]
mov rbx, qword [rbp + 0x3a0]
or r15d, 0x20
lea rax, [rbp + 0x390]
cmp r12, 0xf
cmova rax, qword [rbp + 0x390]
lea r8, [rbp + 0x390]
cmova r8, qword [rbp + 0x390]
add r8, rbx
mov rdx, r13
mov rcx, r8
sub rcx, rax
cmp rax, r8
cmova rcx, r13
test rcx, rcx
je 0x14000766f
cmp rcx, 0x40
jb 0x14000766f
and rcx, 0xffffffffffffffc0
movdqa xmm1, xmmword [str.vvvvvvvvvvvvvvvvMZ]
nop dword [rax]
nop dword [rax + rax]
movdqu xmm0, xmmword [rax]
xorps xmm0, xmm1
movdqu xmmword [rax], xmm0
movdqu xmm0, xmmword [rax + 0x10]
xorps xmm0, xmm1
movdqu xmmword [rax + 0x10], xmm0
movdqu xmm0, xmmword [rax + 0x20]
xorps xmm0, xmm1
movdqu xmmword [rax + 0x20], xmm0
movdqu xmm0, xmmword [rax + 0x30]
xorps xmm0, xmm1
movdqu xmmword [rax + 0x30], xmm0
add rax, 0x40
add rdx, 0x40
cmp rdx, rcx
jne 0x140007630
cmp rax, r8
je 0x14000767f
xor byte [rax], 0x76
inc rax
cmp rax, r8
jne 0x140007674
lea rdx, [rbp + 0x390]
lea rcx, [rbp + 0x3f8]
call fcn.140003520
bts r15d, 7
lea r8, [rbp + 0x3f8]
cmp qword [rbp + 0x410], 0xf
cmova r8, qword [rbp + 0x3f8]
lea rcx, [rbp + 0x3f8]
cmova rcx, qword [rbp + 0x3f8]
mov rdx, qword [rbp + 0x408]
add rdx, rcx
mov rcx, r13
mov rax, rdx
sub rax, r8
cmp r8, rdx
cmova rax, r13
test rax, rax
je 0x140007737
cmp rax, 0x40
jb 0x140007737
and rax, 0xffffffffffffffc0
movdqa xmm1, xmmword [str.vvvvvvvvvvvvvvvvMZ]
nop
movdqu xmm0, xmmword [r8]
xorps xmm0, xmm1
movdqu xmmword [r8], xmm0
movdqu xmm0, xmmword [r8 + 0x10]
xorps xmm0, xmm1
movdqu xmmword [r8 + 0x10], xmm0
movdqu xmm0, xmmword [r8 + 0x20]
xorps xmm0, xmm1
movdqu xmmword [r8 + 0x20], xmm0
movdqu xmm0, xmmword [r8 + 0x30]
xorps xmm0, xmm1
movdqu xmmword [r8 + 0x30], xmm0
add r8, 0x40
add rcx, 0x40
cmp rcx, rax
jne 0x1400076f0
cmp r8, rdx
je 0x14000774c
nop dword [rax]
xor byte [r8], 0x76
inc r8
cmp r8, rdx
jne 0x140007740
or r15d, 0x40
mov dword [rbp + 0x10], r15d
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
sub rax, qword [rbp + 0x3f0]
movabs rbx, 0xf89da60a133f973
movabs rdi, 0xef4a422602ce01d7
movabs r14, 0x5d4b667b67a211a8
movabs r12, 0x52b49d3701aac9b4
cmp rax, 5
jle 0x140007944
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0x33f0bd7e47efe98e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0xa250c29c20ca3091
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0x5906a47974d20bb3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0x2ffbb512d376d913
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6a0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x6a8], rax
movabs rax, 0xd039b2e465ea51e5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6b0], rax
movabs rax, 0x3926845954f26fd6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6b8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x6c0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x6c8], rax
vmovdqu ymm0, ymmword [rbp + 0x180]
vpxor ymm1, ymm0, ymmword [rbp + 0x6a0]
vmovdqa ymmword [rbp + 0x180], ymm1
vmovdqa xmm0, xmmword [rbp + 0x1a0]
vxorps xmm0, xmm0, xmmword [rbp + 0x6c0]
vmovdqa xmmword [rbp + 0x1a0], xmm0
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x200], xmm0
mov qword [rbp + 0x210], r13
mov qword [rbp + 0x218], r13
lea rax, [rbp + 0x180]
vzeroupper
nop dword [rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x1400078e0
mov r8, rsi
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x200]
call fcn.140002560
lea rdx, [rbp + 0x200]
lea rcx, [0x14009d420]
call fcn.140015780
lea rdx, str.___Data_has_expired_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002300
lea rdx, [0x140002ff0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movabs r15, 0x5c9ed671a625f973
jmp 0x140007b9f
movabs r15, 0x5c9ed671a625f973
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs rax, 0x72fddb722190e9c7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0xbc58e4c4049e30a1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
movabs rax, 0x5906a47974d20bbf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs rax, 0x2ffbb512d376d913
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6e0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x6e8], rax
movabs rax, 0xd039b2e465ea51e5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6f0], rax
movabs rax, 0x3926845954f26fd6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6f8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x700], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x708], rax
vmovdqu ymm0, ymmword [rbp + 0x100]
vpxor ymm1, ymm0, ymmword [rbp + 0x6e0]
vmovdqa ymmword [rbp + 0x100], ymm1
vmovdqa xmm0, xmmword [rbp + 0x120]
vxorps xmm0, xmm0, xmmword [rbp + 0x700]
vmovdqa xmmword [rbp + 0x120], xmm0
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x1e0], xmm0
mov qword [rbp + 0x1f0], r13
mov qword [rbp + 0x1f8], r13
lea rax, [rbp + 0x100]
vzeroupper
inc rsi
cmp byte [rax + rsi], 0
jne 0x140007a92
mov r8, rsi
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x1e0]
call fcn.140002560
lea rdx, [rbp + 0x1e0]
lea rcx, [0x14009d420]
call fcn.140015780
lea rdx, str.___Original_data:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002300
lea rdx, [rbp + 0x3d0]
cmp qword [rbp + 0x3e8], 0xf
cmova rdx, qword [rbp + 0x3d0]
mov r8, qword [rbp + 0x3e0]
mov rcx, rax
call fcn.140002660
lea rdx, [0x140002ff0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.___Encrypted_data:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002300
lea rdx, [rbp + 0x390]
cmp qword [rbp + 0x3a8], 0xf
cmova rdx, qword [rbp + 0x390]
mov r8, qword [rbp + 0x3a0]
mov rcx, rax
call fcn.140002660
lea rdx, [0x140002ff0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.___Decrypted_data:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002300
lea rdx, [rbp + 0x3f8]
cmp qword [rbp + 0x410], 0xf
cmova rdx, qword [rbp + 0x3f8]
mov r8, qword [rbp + 0x408]
mov rcx, rax
call fcn.140002660
lea rdx, [0x140002ff0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp + 0x390]
lea rcx, [rbp + 0x480]
call fcn.140003520
nop
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x4d0]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x3e]
lea rdx, str.C:_seed.txt
lea rcx, [rbp + 0x4d0]
call fcn.140003310
nop
cmp qword [rbp + 0x558], 0
je 0x140007e33
lea rdx, [rbp + 0x480]
lea rcx, [rbp + 0x4d0]
call fcn.1400022e0
lea rcx, [rbp + 0x4d0]
call fcn.140005160
lea rdx, str.___Seed_Created
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002300
lea rdx, [0x140002ff0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0x72fddb722190e9c7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0xb54bf1c4018f34b6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x5906a4373b9b1bb7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rbx, 0x2ffbb512d376d913
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x620], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x628], rax
movabs rax, 0xd039b2e465ea51e5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x630], rax
movabs rax, 0x3926845954f26fd6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x638], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x640], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x648], rax
vmovdqu ymm0, ymmword [rbp + 0x620]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x40], ymm1
vmovdqa xmm2, xmmword [rbp + 0x60]
vxorps xmm2, xmm2, xmmword [rbp + 0x640]
vmovdqa xmmword [rbp + 0x60], xmm2
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0xc0]
vzeroupper
call fcn.140003640
mov rdx, rax
lea rcx, [0x14009d420]
call fcn.140015780
movabs rcx, 0x2fa8e65790358c40
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x380], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x388], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x600], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x608], rax
movdqa xmm0, xmmword [rbp + 0x380]
xorps xmm0, xmmword [rbp + 0x600]
movdqa xmmword [rbp + 0x380], xmm0
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x660], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x668], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x5e0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x5e8], rax
movdqa xmm0, xmmword [rbp + 0x660]
xorps xmm0, xmmword [rbp + 0x5e0]
movdqa xmmword [rbp + 0x660], xmm0
xor r9d, r9d
lea r8, [rbp + 0x380]
lea rdx, [rbp + 0x660]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0x37e7bd7e47efe98e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0xa458d79626ca3580
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x5906a479749c00bf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x2ffbb512d376d913
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x620], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x628], rax
movabs rax, 0xd039b2e465ea51e5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x630], rax
movabs rax, 0x3926845954f26fd6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x638], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x640], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x648], rax
vmovdqu ymm0, ymmword [rbp + 0x620]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x40], ymm1
vmovdqa xmm2, xmmword [rbp + 0x60]
vxorps xmm2, xmm2, xmmword [rbp + 0x640]
vmovdqa xmmword [rbp + 0x60], xmm2
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0xc0]
vzeroupper
call fcn.140003640
mov rdx, rax
lea rcx, [0x14009d420]
call fcn.140015780
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movabs rbx, 0xf89da60a133f973
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x600], rax
movabs rax, 0x27f5bd7e47efe98e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x608], rax
movabs rax, 0xb15adb900b8f3991
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x610], rax
movabs rax, 0x3926e4793a9d06a2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x618], rax
movabs rdi, 0x2ffbb512d376d913
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x660], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x668], rax
movabs rsi, 0xd039b2e465ea51e5
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x670], rax
movabs rbx, 0x3926845954f26fd6
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x678], rax
vmovdqu ymm0, ymmword [rbp + 0x660]
vpxor ymm1, ymm0, ymmword [rbp + 0x600]
vmovdqa ymmword [rbp + 0x600], ymm1
lea rdx, [rbp + 0x600]
lea rcx, [rbp + 0xc0]
vzeroupper
call fcn.140003640
mov rdx, rax
lea rcx, [0x14009d420]
call fcn.140015780
movabs rax, 0x76bdfc549c398940
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x380], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x388], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x5e0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x5e8], rax
movdqa xmm0, xmmword [rbp + 0x380]
xorps xmm0, xmmword [rbp + 0x5e0]
movdqa xmmword [rbp + 0x380], xmm0
movabs rax, 0x17d89560bc04ab56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x600], rax
movabs rax, 0x26d7fc436fc5aa94
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x608], rax
movabs rax, 0xa44bdd94159f22c5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x610], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x618], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x5e0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x5e8], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x5f0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x5f8], rax
vmovdqu ymm0, ymmword [rbp + 0x5e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x600]
vmovdqa ymmword [rbp + 0x600], ymm1
xor r9d, r9d
lea r8, [rbp + 0x380]
lea rdx, [rbp + 0x600]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
call fcn.140006010
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movabs rax, 0x5c9ed671a625f973
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0x27d7f8642190e9c7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0xbf50e4c41c9e238c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x5906ea363d860eba
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rcx, 0xef4a422602ce01d7
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rdx, 0x5d4b667b67a211a8
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x620], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x628], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x630], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x638], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x640], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x648], rax
vmovdqu ymm0, ymmword [rbp + 0x620]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x40], ymm1
vmovdqa xmm2, xmmword [rbp + 0x60]
vxorps xmm2, xmm2, xmmword [rbp + 0x640]
vmovdqa xmmword [rbp + 0x60], xmm2
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0xc0]
vzeroupper
call fcn.140003640
mov rdx, rax
lea rcx, [0x14009d420]
call fcn.140015780
movabs rax, 0x76bdfc549c398940
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x380], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x388], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x5e0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x5e8], rax
movdqa xmm0, xmmword [rbp + 0x380]
xorps xmm0, xmmword [rbp + 0x5e0]
movdqa xmmword [rbp + 0x380], xmm0
movabs rax, 0x16d89560bc04ab56
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x600], rax
movabs rax, 0x26d7fc436fc5aa94
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x608], rax
movabs rax, 0xa44bdd94159f22c5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x610], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x618], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x5e0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x5e8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x5f0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x5f8], rax
vmovdqu ymm0, ymmword [rbp + 0x5e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x600]
vmovdqa ymmword [rbp + 0x600], ymm1
xor r9d, r9d
lea r8, [rbp + 0x380]
lea rdx, [rbp + 0x600]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
call fcn.140006010
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov dword [rbp + 0x438], r14d
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
mov dword [rbp + 0x428], r14d
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3