Function at 0x140004a80
Capabilities:
Check if file exists
Create http request
Encode data using xor
Enumerate processes
Execute command
Get file attributes
Get graphical window text
Get process image filename
Get system information on windows
Read data from internet
Receive data
Set console window title
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x9e8]
sub rsp, 0xac0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
mov rax, qword [0x140010010]
xor rax, rsp
mov qword [rbp + 0x970], rax
xor r12d, r12d
mov dword [rbp - 0x30], r12d
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
movups xmm0, xmmword [str.aPFPSYkQ_IY]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x14000c6c0]
movups xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [0x14000c6d0]
movups xmmword [rsp + 0x60], xmm0
movsd xmm0, qword [0x14000c6e0]
movsd qword [rsp + 0x70], xmm0
movzx eax, word [0x14000c6e8]
mov word [rsp + 0x78], ax
mov r8d, r12d
lea edi, [r12 + 4]
lea esi, [rdi + 0x1b]
mov ebx, dword [0x140010018]
cmp ebx, 2
jl 0x140004c51
movdqa xmm5, xmmword [0x14000c740]
movdqa xmm4, xmmword [0x14000c7f0]
movd xmm6, edi
movdqa xmm7, xmmword [0x14000c760]
movd xmm8, esi
movdqa xmm9, xmmword [0x14000c770]
lea rcx, [rsp + 0x40]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x18
jl 0x140004b62
cmp r8d, 0x1d
jge 0x140004c95
movsxd rax, r8d
lea r9, [rsp + 0x40]
lea r9, [r9 + rax*2]
nop dword [rax]
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub ax, dx
movzx eax, ax
imul ecx, eax, 0x32
add cx, r8w
xor word [r9], cx
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x1d
jl 0x140004c60
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
xorps xmm0, xmm0
movups xmmword [rbp + 0x88], xmm0
movdqa xmm1, xmmword [0x14000c730]
movdqu xmmword [rbp + 0x98], xmm1
mov byte [rbp + 0x88], r12b
movups xmm0, xmmword [str.ZG_EE_r]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x14000c608]
movups xmmword [rsp + 0x50], xmm1
movzx eax, word [0x14000c618]
mov word [rsp + 0x60], ax
mov r8d, r12d
cmp ebx, 2
jl 0x140004e33
movdqa xmm5, xmmword [0x14000c740]
movdqa xmm4, xmmword [0x14000c7f0]
movd xmm6, edi
movdqa xmm7, xmmword [0x14000c760]
movd xmm8, esi
movdqa xmm0, xmmword [str.2222222222222222]
movdqa xmmword [rbp + 0xb0], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rbp + 0xb0]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14000c7d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14000c7d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140004d30
cmp r8d, 0x22
jge 0x140004e72
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x32
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x22
jl 0x140004e40
lea rax, [rsp + 0x40]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140004e80
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x88]
call fcn.140007f60
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
movsd xmm0, qword [str.aZSXW7]
movsd qword [rbp], xmm0
mov eax, dword [0x14000c710]
mov dword [rbp + 8], eax
cmp word [0x14000c712], 0
je 0x140004ef4
mov eax, 0x53
mov word [rbp], ax
xor word [rbp + 2], 0x33
xor word [rbp + 4], 0x34
xor word [rbp + 6], 0x35
xor word [rbp + 8], 0x36
xor word [rbp + 0xa], 0x37
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
lea rcx, [rbp]
call qword [sym.imp.WININET.dll_InternetOpenW]
mov r13, rax
test rax, rax
jne 0x14000510d
mov dword [rbp], 0x56285928
mov dword [rbp + 4], 0x150b0a32
mov dword [rbp + 8], 0x775d09
mov byte [rbp + 0xc], 1
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx + 0x73]
xor byte [rbp + rcx], al
inc rcx
cmp rcx, 0xb
jb 0x140004f40
mov byte [rbp + 0xc], 0
lea r8, [rbp + 0xb]
lea rdx, [rbp]
lea rcx, [rbp - 0x20]
call fcn.1400035e0
nop
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov edi, r12d
mov r14, qword [rbp - 8]
mov rsi, qword [rbp - 0x20]
mov r15, qword [rbp - 0x10]
test r15, r15
je 0x140004fd5
mov rbx, r12
nop dword [rax]
nop dword [rax + rax]
lea rdx, [rbp - 0x20]
cmp r14, 0x10
cmovae rdx, rsi
movzx edx, byte [rbx + rdx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400080c0
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
lea rbx, [rbx + 1]
movsxd rax, edi
cmp rax, r15
jb 0x140004fa0
mov ebx, 8
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop
cmp r14, 0x10
jb 0x14000502c
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140005024
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005024
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.1400091d4
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140005073
inc rdx
mov rcx, qword [rbp + 0x40]
cmp rdx, 0x1000
mov rax, rcx
jb 0x14000506e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006b5c
call fcn.1400091d4
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0x10
jb 0x1400050c4
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400050bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006bc0
call fcn.1400091d4
mov eax, 1
mov rcx, qword [rbp + 0x970]
xor rcx, rsp
call fcn.140009170
lea r11, [rsp + 0xac0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rdx, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0x10
cmovae rdx, qword [rbp + 0x88]
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov r14, rax
test rax, rax
jne 0x140005270
mov dword [rsp + 0x30], 0x56285928
mov dword [rsp + 0x34], 0x150b0a32
mov dword [rsp + 0x38], 0x775d09
mov byte [rsp + 0x3c], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx + 0x73]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0xb
jb 0x140005170
mov byte [rsp + 0x3c], 0
lea r8, [rsp + 0x3b]
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x20]
call fcn.1400035e0
nop
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov edi, r12d
mov r14, qword [rbp - 8]
mov rsi, qword [rbp - 0x20]
mov r15, qword [rbp - 0x10]
test r15, r15
je 0x140005205
mov rbx, r12
nop word [rax + rax]
lea rdx, [rbp - 0x20]
cmp r14, 0x10
cmovae rdx, rsi
movzx edx, byte [rdx + rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400080c0
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
lea rbx, [rbx + 1]
movsxd rax, edi
cmp rax, r15
jb 0x1400051d0
mov ebx, 8
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop
cmp r14, 0x10
jb 0x14000525c
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140005254
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005254
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.1400091d4
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x14000502c
lea r9, [rbp + 0x60]
mov r8d, 0x400
lea rdx, [rbp + 0x570]
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x1400069fb
mov eax, dword [rbp + 0x60]
test eax, eax
je 0x1400052b2
mov r8d, eax
lea rdx, [rbp + 0x570]
lea rcx, [rbp + 0x40]
call fcn.140007b80
cmp dword [rbp + 0x60], 0
ja 0x140005270
mov dword [rbp - 0x30], 0x455a42
mov byte [rbp - 0x2c], 1
mov rcx, r12
lea eax, [rcx + 0x73]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 3
jb 0x1400052c0
mov byte [rbp - 0x2c], 0
lea rcx, [rbp - 0x30]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x1400052e0
lea rcx, [rbp + 0x40]
cmp qword [rbp + 0x58], 0x10
cmovae rcx, qword [rbp + 0x40]
mov r8, qword [rbp + 0x50]
cmp r8, rax
jne 0x140006852
lea rdx, [rbp - 0x30]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140006852
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
movdqa xmm0, xmmword [0x14000c830]
movdqu xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x14000cbf0]
movdqu xmmword [rsp + 0x50], xmm1
mov dword [rsp + 0x60], 0xf7c5f3fd
mov dword [rsp + 0x64], 0xbaeaf3f4
mov word [rsp + 0x68], 0x91
mov byte [rsp + 0x6a], 1
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x73]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 0x29
jb 0x140005370
mov byte [rsp + 0x6a], 0
lea r8, [rsp + 0x69]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x20]
call fcn.1400035e0
nop
mov ecx, 0xfffffff5
mov r13d, 8
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov edi, r12d
mov r14, qword [rbp - 8]
mov rsi, qword [rbp - 0x20]
mov r15, qword [rbp - 0x10]
test r15, r15
je 0x140005405
mov rbx, r12
nop
lea rdx, [rbp - 0x20]
cmp r14, 0x10
cmovae rdx, rsi
movzx edx, byte [rbx + rdx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400080c0
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
lea rbx, [rbx + 1]
movsxd rax, edi
cmp rax, r15
jb 0x1400053d0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop
cmp r14, 0x10
jb 0x140005458
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140005450
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005450
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.1400091d4
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov edi, r12d
cmp qword [rbp + 0x50], rdi
jbe 0x1400054b8
mov rbx, r12
nop dword [rax]
lea rdx, [rbp + 0x40]
cmp qword [rbp + 0x58], 0x10
cmovae rdx, qword [rbp + 0x40]
movzx edx, byte [rbx + rdx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400080c0
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
lea rbx, [rbx + 1]
movsxd rax, edi
cmp rax, qword [rbp + 0x50]
jb 0x140005480
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ebx, 5
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rbp], 0x19191b10
mov dword [rbp + 4], 0x1c5805
mov byte [rbp + 8], 1
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx + 0x73]
xor byte [rbp + rcx], al
inc rcx
cmp rcx, 7
jb 0x140005500
mov byte [rbp + 8], 0
lea rcx, [rbp]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x30], 0x19191b10
mov dword [rsp + 0x34], 0x185805
mov byte [rsp + 0x38], 1
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x73]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 7
jb 0x140005550
mov byte [rsp + 0x38], 0
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
sub ebx, 1
jne 0x1400054d5
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rbp - 0x30], 0x61810
mov byte [rbp - 0x2c], 1
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x73]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 3
jb 0x1400055a0
mov byte [rbp - 0x2c], 0
lea rcx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x14000c860]
movdqu xmmword [rbp - 0x80], xmm0
mov dword [rbp - 0x70], 0x100aaad
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx + 0x73]
xor byte [rbp + rcx - 0x80], al
inc rcx
cmp rcx, 0x12
jb 0x1400055e0
mov byte [rbp - 0x6d], 0
lea r8, [rbp - 0x6e]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.1400035e0
mov r14d, 0x780
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov edi, r12d
mov r15, qword [rbp - 8]
mov rsi, qword [rbp - 0x20]
mov r12, qword [rbp - 0x10]
test r12, r12
je 0x140005675
xor ebx, ebx
nop dword [rax]
lea rdx, [rbp - 0x20]
cmp r15, 0x10
cmovae rdx, rsi
movzx edx, byte [rbx + rdx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400080c0
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
lea rbx, [rbx + 1]
movsxd rax, edi
cmp rax, r12
jb 0x140005640
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop
cmp r15, 0x10
jb 0x1400056c8
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400056c0
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400056c0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.1400091d4
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rbp - 0x30], 0x61810
mov byte [rbp - 0x2c], 1
xor ecx, ecx
lea eax, [rcx + 0x73]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 3
jb 0x1400056e0
mov byte [rbp - 0x2c], 0
lea rcx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor edx, edx
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowExW]
test rax, rax
mov r12, rax
je 0x14000599c
mov r8d, 0x100
lea rdx, [rbp + 0x300]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextA]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], 0
mov qword [rbp - 8], 0
lea rax, [rbp + 0x300]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140005755
lea rdx, [rbp + 0x300]
lea rcx, [rbp - 0x20]
call fcn.140003710
nop
or r14d, 1
mov dword [rbp - 0x30], r14d
mov rbx, qword [0x140010aa0]
mov rsi, qword [0x140010aa8]
cmp rbx, rsi
je 0x140005825
mov rdi, qword [rbp - 8]
mov r15, qword [rbp - 0x10]
nop word [rax + rax]
mov rax, qword [rbx + 0x10]
mov r9, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x1400057b1
mov r9, qword [rbx]
lea rcx, [rbp - 0x20]
cmp rdi, 0x10
cmovae rcx, qword [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov rdx, r15
call fcn.140008720
cmp rax, 0xffffffffffffffff
jne 0x1400057dc
add rbx, 0x20
cmp rbx, rsi
jne 0x1400057a0
jmp 0x140005829
lea rdx, [rbp - 0x28]
mov rcx, r12
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [rbp - 0x28]
xor edx, edx
mov ecx, 0x1000
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140005825
mov r8d, 0x104
lea rdx, [rbp + 0x400]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_K32GetProcessImageFileNameA]
test eax, eax
jne 0x14000587d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdi, qword [rbp - 8]
xor bl, bl
test r14b, 1
je 0x14000586d
and r14d, 0xfffffffe
cmp rdi, 0x10
jb 0x14000586d
lea rdx, [rdi + 1]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005868
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005995
call fcn.1400091d4
test bl, bl
jne 0x14000599c
mov rdx, r12
jmp 0x140005700
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
xor eax, eax
mov qword [rbp + 0x78], rax
mov qword [rbp + 0x80], rax
lea rax, [rbp + 0x400]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400058a0
lea rdx, [rbp + 0x400]
lea rcx, [rbp + 0x68]
call fcn.140003710
movsd xmm0, qword [str.XRBTA]
movsd qword [rbp], xmm0
movzx eax, word [0x14000c5f0]
mov word [rbp + 8], ax
cmp byte [0x14000c5f1], 0
je 0x140005903
mov byte [rbp], 0x6a
xor byte [rbp + 1], 0x33
xor byte [rbp + 2], 0x34
xor byte [rbp + 3], 0x35
xor byte [rbp + 4], 0x36
xor byte [rbp + 5], 0x37
xor byte [rbp + 6], 0x38
xor byte [rbp + 7], 0x39
xor byte [rbp + 8], 0x3a
xor byte [rbp + 9], 0x3b
lea rcx, [rbp]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x140005910
lea rcx, [rbp + 0x68]
mov rsi, qword [rbp + 0x80]
cmp rsi, 0x10
setae bl
mov rdi, qword [rbp + 0x68]
cmovae rcx, rdi
mov qword [rsp + 0x20], rax
lea r9, [rbp]
mov rdx, qword [rbp + 0x78]
call fcn.140008720
mov r15, rax
test bl, bl
je 0x140005979
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140005971
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000598e
mov rcx, rdi
call fcn.1400091d4
cmp r15, 0xffffffffffffffff
je 0x140005825
mov bl, 1
mov rdi, qword [rbp - 8]
jmp 0x14000582b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movdqa xmm0, xmmword [0x14000ca30]
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0xb7a5aeed
mov dword [rbp - 0xc], 0xa4bfb9a9
mov word [rbp - 8], 0xbe
mov byte [rbp - 6], 1
xor ecx, ecx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x73]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0x19
jb 0x1400059d0
mov byte [rbp - 6], 0
lea rdx, [rbp - 0x20]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140006bc7
movdqa xmm0, xmmword [0x14000ca30]
movdqu xmmword [rbp - 0x80], xmm0
mov word [rbp - 0x70], 0xed
mov byte [rbp - 0x6e], 1
xor ecx, ecx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x73]
xor byte [rbp + rcx - 0x80], al
inc rcx
cmp rcx, 0x11
jb 0x140005a20
mov byte [rbp - 0x6e], 0
lea rdx, [rbp - 0x80]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140006bc7
lea rcx, [0x140010b48]
cmp qword [0x140010b60], 8
cmovae rcx, qword [0x140010b48]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140005a75
shr eax, 1
test al, 1
jne 0x140006c39
movdqa xmm0, xmmword [0x14000c8c0]
movdqu xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x14000cb90]
movdqu xmmword [rsp + 0x50], xmm1
mov dword [rsp + 0x60], 0xb8a4b4a9
mov dword [rsp + 0x64], 0x100a9a7
xor ecx, ecx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x73]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 0x26
jb 0x140005ab0
mov byte [rsp + 0x67], 0
lea rdx, [rsp + 0x40]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140006d85
movdqa xmm0, xmmword [0x14000c8c0]
movdqu xmmword [rbp - 0x58], xmm0
movdqa xmm1, xmmword [0x14000cb90]
movdqu xmmword [rbp - 0x48], xmm1
mov dword [rbp - 0x38], 0xb8a4b4a9
mov dword [rbp - 0x34], 0x100a8a7
xor ecx, ecx
nop word [rax + rax]
lea eax, [rcx + 0x73]
xor byte [rbp + rcx - 0x58], al
inc rcx
cmp rcx, 0x26
jb 0x140005b10
mov byte [rbp - 0x31], 0
lea rdx, [rbp - 0x58]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140006d85
mov rdi, qword [0x1400109d8]
mov dword [rbp + 0xc0], 0x238
xor edx, edx
mov esi, 2
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
lea rdx, [rbp + 0xc0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
cmp eax, 1
jne 0x140005bd0
lea rdx, [rbp + 0xc0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32NextW]
cmp eax, 1
jne 0x140005bd0
nop word [rax + rax]
lea rax, [rbp + 0xec]
mov r8, rdi
sub r8, rax
nop dword [rax]
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x140005bb3
add rax, rsi
test ecx, ecx
jne 0x140005ba0
test edx, edx
je 0x140005d20
lea rdx, [rbp + 0xc0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32NextW]
cmp eax, 1
je 0x140005b90
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov dword [0x1400109a0], eax
test eax, eax
je 0x140006053
movdqa xmm0, xmmword [str._Y_V]
movdqu xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x14000ca50]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmmword [0x14000c900]
movdqu xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x70], 0xd1cacac2
mov dword [rsp + 0x74], 0xcfc0c6c6
mov word [rsp + 0x78], 0xa1
mov byte [rsp + 0x7a], 1
xor ecx, ecx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x73]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 0x39
jb 0x140005c40
mov byte [rsp + 0x7a], 0
lea r8, [rsp + 0x79]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x20]
call fcn.1400035e0
nop
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, 4
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xor edi, edi
mov r14, qword [rbp - 8]
mov rsi, qword [rbp - 0x20]
mov r15, qword [rbp - 0x10]
test r15, r15
je 0x140005cd5
xor ebx, ebx
nop word [rax + rax]
lea rdx, [rbp - 0x20]
cmp r14, 0x10
cmovae rdx, rsi
movzx edx, byte [rbx + rdx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400080c0
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
lea rbx, [rbx + 1]
movsxd rax, edi
cmp rax, r15
jb 0x140005ca0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop
cmp r14, 0x10
jb 0x140005d33
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140005d2b
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005d2b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov eax, dword [rbp + 0xc8]
jmp 0x140005bdb
mov rcx, rsi
call fcn.1400091d4
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x310], xmm0
movups xmmword [rbp + 0x320], xmm0
movups xmmword [rbp + 0x330], xmm0
movups xmmword [rbp + 0x340], xmm0
movups xmmword [rbp + 0x350], xmm0
movups xmmword [rbp + 0x360], xmm0
movups xmmword [rbp + 0x370], xmm0
mov ebx, dword [0x1400109a0]
movdqu xmmword [rbp + 0x300], xmm0
mov qword [rbp + 0x310], rax
mov qword [rbp + 0x380], rax
lea rcx, [rbp + 0x350]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp + 0x348], rax
lea rdx, [0x140010a88]
lea rcx, [rbp + 0x300]
call fcn.140002dc0
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0x68]
call fcn.140003270
nop
mov rbx, qword [rbp + 0x68]
mov r15, qword [rbp + 0x70]
cmp rbx, r15
je 0x14000602b
movsd xmm8, qword [str.sF_Z]
mov eax, dword [0x14000c5d4]
mov dword [rsp + 0x30], eax
movzx eax, word [0x14000c5d8]
mov word [rsp + 0x34], ax
movzx eax, byte [0x14000c5da]
mov byte [rsp + 0x30], 0x32
xor byte [rsp + 0x31], 0x33
xor byte [rsp + 0x32], 0x34
xor byte [rsp + 0x33], 0x35
xor byte [rsp + 0x34], 0x36
xor byte [rsp + 0x35], 0x37
xor al, 0x38
mov byte [rsp + 0x36], al
lea rcx, [rsp + 0x30]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x140005e34
mov rsi, qword [rbx + 0x10]
mov rcx, rbx
mov r14, qword [rbx + 0x18]
cmp r14, 0x10
jb 0x140005e51
mov rcx, qword [rbx]
cmp rsi, rax
jne 0x140005e6b
mov r8, rsi
lea rdx, [rsp + 0x30]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140006cab
movsd qword [rbp], xmm8
mov eax, dword [0x14000c700]
mov dword [rbp + 8], eax
cmp byte [0x14000c703], 0
je 0x140005fe2
xor r8d, r8d
cmp dword [0x140010018], 2
jl 0x140005fa1
movdqa xmm4, xmmword [0x14000c7f0]
mov eax, 4
movd xmm6, eax
mov eax, 0x1f
movd xmm5, eax
movdqa xmm2, xmmword [0x14000c740]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14000c760]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14000c7d0]
packuswb xmm2, xmm2
mov eax, dword [str.2222222222222222]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [str.sF_Z]
xorps xmm2, xmm1
movd dword [rbp], xmm2
movdqa xmm3, xmmword [0x14000c750]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14000c760]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14000c7d0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 4]
xorps xmm2, xmm1
movd dword [rbp + 4], xmm2
mov r8d, r13d
movsxd rax, r8d
lea r9, [rbp]
add r9, rax
nop dword [rax + rax]
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x32
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x140005fb0
lea rcx, [rbp]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140005ff0
mov rcx, rbx
cmp r14, 0x10
jb 0x140006005
mov rcx, qword [rbx]
cmp rsi, rax
jne 0x14000601e
mov r8, rsi
lea rdx, [rbp]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140006cf9
add rbx, 0x28
cmp rbx, r15
jne 0x140005de7
lea rcx, [rbp + 0x68]
call fcn.140003530
nop
mov rcx, qword [rbp + 0x348]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x300]
call fcn.140003530
mov esi, 2
test r12, r12
jne 0x1400060d3
mov dword [rbp - 0x30], 0x61810
mov byte [rbp - 0x2c], 1
lea rcx, [rbp - 0x30]
call fcn.140006e00
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [str._Y_V:]
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0xe9e3a4f7
mov dword [rbp - 0xc], 0x80ede6f2
mov word [rbp - 8], 0x100
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x20]
call fcn.1400071c0
nop
lea edx, [r12 + 4]
lea rcx, [rbp + 0x20]
call fcn.140004930
nop
lea rcx, [rbp + 0x20]
call fcn.1400031c0
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [r12 - 1]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, [rbp - 0x30]
mov rcx, r12
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [rbp - 0x30]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [rbp - 0x28], 0x61810
mov byte [rbp - 0x24], 1
test rax, rax
jne 0x14000615a
lea rcx, [rbp - 0x28]
call fcn.140006e00
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov dword [rbp], 0x56285928
mov dword [rbp + 4], 0x150b0a32
mov dword [rbp + 8], 0x1007609
lea rdx, [rbp + 0x20]
lea rcx, [rbp]
call fcn.1400079b0
nop
mov edx, 4
lea rcx, [rbp + 0x20]
call fcn.140004930
nop
lea rcx, [rbp + 0x20]
call fcn.1400031c0
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor ecx, ecx
nop dword [rax]
lea eax, [rcx + 0x73]
xor byte [rbp + rcx - 0x28], al
inc rcx
cmp rcx, 3
jb 0x140006160
mov byte [rbp - 0x24], 0
lea rcx, [rbp - 0x28]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [str.___V:]
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0xa6e1eaf6
mov dword [rbp - 0xc], 0xe2fde1f0
mov dword [rbp - 8], 0xcac4dcab
mov dword [rbp - 4], 0x100b0b5
xor ecx, ecx
nop dword [rax]
lea eax, [rcx + 0x73]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0x1e
jb 0x1400061b0
mov byte [rbp - 1], 0
lea r8, [rbp - 2]
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x80]
call fcn.1400035e0
nop
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, si
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xor edi, edi
mov r14, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x80]
mov r15, qword [rbp - 0x70]
test r15, r15
je 0x140006245
xor ebx, ebx
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp - 0x80]
cmp r14, 0x10
cmovae rdx, rsi
movzx edx, byte [rdx + rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400080c0
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
lea rbx, [rbx + 1]
movsxd rax, edi
cmp rax, r15
jb 0x140006210
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop
cmp r14, 0x10
jb 0x140006298
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140006290
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006290
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.1400091d4
mov ebx, dword [rbp - 0x30]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov r14d, 2
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, ebx
call fcn.140004660
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [rbp - 0x30], 0
jne 0x140006362
mov dword [rbp - 0x28], 0x61810
mov byte [rbp - 0x24], 1
lea rcx, [rbp - 0x28]
call fcn.140006e00
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [str._Y_V1]
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0xe8ece5f7
mov dword [rbp - 0xc], 0xcec0d8a7
mov word [rbp - 8], 0x100
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x20]
call fcn.1400071c0
nop
lea edx, [r14 + 2]
lea rcx, [rbp + 0x20]
call fcn.140004930
nop
lea rcx, [rbp + 0x20]
call fcn.1400031c0
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [r14 - 3]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rbp - 0x28], 0x61810
mov byte [rbp - 0x24], 1
lea rcx, [rbp - 0x28]
call fcn.140006e00
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [str._748917____6]
movdqu xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x14000c8d0]
movdqu xmmword [rsp + 0x50], xmm1
mov dword [rsp + 0x60], 0xd0d8dc
mov byte [rsp + 0x64], 1
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x40]
call fcn.1400079f0
nop
mov edx, r13d
lea rcx, [rbp + 0x20]
call fcn.140004930
nop
lea rcx, [rbp + 0x20]
call fcn.1400031c0
lea rcx, [rbp + 0x68]
call fcn.140006ec0
lea rdx, [0x140010ad0]
lea rcx, [rbp + 0x400]
call fcn.140007ac0
nop
lea rdx, [0x140010b00]
lea rcx, [rbp + 0x418]
call fcn.140007ac0
nop
lea rdx, [0x1400109c0]
lea rcx, [rbp + 0x430]
call fcn.140007ac0
nop
lea rdx, [0x1400109a8]
lea rcx, [rbp + 0x448]
call fcn.140007ac0
nop
lea rdx, [0x140010ae8]
lea rcx, [rbp + 0x460]
call fcn.140007ac0
nop
lea rdx, [0x140010a70]
lea rcx, [rbp + 0x478]
call fcn.140007ac0
nop
lea rdx, [0x140010a58]
lea rcx, [rbp + 0x490]
call fcn.140007ac0
nop
lea rdx, [0x1400109f8]
lea rcx, [rbp + 0x4a8]
call fcn.140007ac0
nop
lea rdx, [0x140010a10]
lea rcx, [rbp + 0x4c0]
call fcn.140007ac0
nop
lea rdx, [0x140010ab8]
lea rcx, [rbp + 0x4d8]
call fcn.140007ac0
nop
lea rdx, [0x140010b30]
lea rcx, [rbp + 0x4f0]
call fcn.140007ac0
nop
lea rdx, [0x140010a40]
lea rcx, [rbp + 0x508]
call fcn.140007ac0
nop
lea rdx, [0x140010b18]
lea rcx, [rbp + 0x520]
call fcn.140007ac0
nop
lea rdx, [0x140010a28]
lea rcx, [rbp + 0x538]
call fcn.140007ac0
nop
lea rdx, [0x1400109e0]
lea rcx, [rbp + 0x550]
call fcn.140007ac0
nop
lea r8, [rbp + 0x568]
lea rdx, [rbp + 0x400]
lea rcx, [rsp + 0x30]
call fcn.140007010
movups xmm0, xmmword [rax]
movaps xmmword [rbp], xmm0
lea rdx, [rbp]
lea rcx, [rbp + 0x68]
call fcn.140007070
nop
lea r9, [0x140007a50]
mov edx, 0x18
lea r8d, [rdx - 9]
lea rcx, [rbp + 0x400]
call fcn.140009208
lea rcx, [rbp + 0x300]
call fcn.140006e90
mov edx, dword [rbp - 0x30]
lea rcx, [rbp + 0x300]
call fcn.140002d50
nop
lea rcx, [rbp + 0x68]
call fcn.140003240
mov rdi, rax
lea rcx, [rbp + 0x68]
call fcn.140003250
mov rbx, rax
cmp rax, rdi
je 0x1400065a8
nop
mov rdx, rbx
lea rcx, [rbp + 0x300]
call fcn.140002dc0
add rbx, 0x18
cmp rbx, rdi
jne 0x140006590
lea rcx, [rbp + 0xb0]
call fcn.140006f00
lea rcx, [rbp + 0xb0]
call fcn.140006fb0
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x300]
call fcn.140003220
nop
lea rcx, [rbp - 0x20]
call fcn.140003250
mov rdi, rax
lea rcx, [rbp - 0x20]
call fcn.140003240
mov rsi, rax
cmp rdi, rax
je 0x1400066b4
xor ebx, ebx
lea rcx, [rbp + 0x68]
call fcn.140007030
test rax, rax
je 0x1400066a7
nop word [rax + rax]
mov rdx, rbx
lea rcx, [rbp + 0x68]
call fcn.140007020
mov r10, rax
mov rdx, rdi
lea rcx, [rbp]
call fcn.140006e30
mov r8, qword [rax]
lea rdx, [rsp + 0x30]
mov rcx, r10
call fcn.140007a30
mov r9, qword [rax]
lea rdx, [rbp - 0x28]
call fcn.140007a40
mov rdx, r9
mov rcx, qword [rax]
call fcn.140008290
test al, al
jne 0x140006669
inc rbx
lea rcx, [rbp + 0x68]
call fcn.140007030
cmp rbx, rax
jb 0x140006610
jmp 0x1400066a7
mov ecx, ebx
call fcn.140003dd0
lea rcx, [0x140010068]
call fcn.1400033e0
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.140007d40
nop
lea r8, [rbp + 0x20]
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0xb0]
call fcn.140008330
nop
lea rcx, [rbp + 0x20]
call fcn.1400031c0
add rdi, 0x28
cmp rdi, rsi
jne 0x1400065f3
lea rcx, [rbp - 0x20]
call fcn.140003260
lea rcx, [rbp + 0xb0]
call fcn.140006ff0
test al, al
jne 0x140006d47
lea rcx, [rbp + 0x20]
call fcn.140003510
nop
lea rcx, [rbp - 0x20]
call fcn.140003510
nop
movdqa xmm0, xmmword [0x14000c9f0]
movdqu xmmword [rbp - 0x80], xmm0
mov word [rbp - 0x70], 0xa2
mov byte [rbp - 0x6e], 1
lea rdx, [rbp]
lea rcx, [rbp - 0x80]
call fcn.140007930
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140007cb0
lea rcx, [rbp]
call fcn.1400031c0
lea rcx, [rbp]
call fcn.140006f10
lea rdx, [rbp]
lea rcx, [rbp + 0xb0]
call fcn.140007000
lea rcx, [rbp]
call fcn.140006f20
test al, al
jne 0x1400067ff
nop dword [rax + rax]
lea rcx, [rbp]
call fcn.140006fa0
mov r8, rax
mov word [rbp - 0x28], 0x79
mov byte [rbp - 0x26], 1
lea rcx, [rbp - 0x28]
call fcn.140006e70
mov rbx, rax
mov dword [rsp + 0x30], 0x56285928
mov word [rsp + 0x34], 0x100
lea rcx, [rsp + 0x30]
call fcn.140006e40
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.140008360
nop
lea r8, [rbp - 0x20]
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.1400084c0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140008520
nop
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.140007ca0
nop
lea rcx, [rbp - 0x80]
call fcn.1400031c0
nop
lea rcx, [rbp - 0x58]
call fcn.1400031c0
nop
lea rcx, [rsp + 0x40]
call fcn.1400031c0
lea rcx, [rbp]
call fcn.140006f30
lea rcx, [rbp]
call fcn.140006f20
test al, al
je 0x140006750
mov dword [rbp - 0x28], 0x61810
mov byte [rbp - 0x24], 1
lea rcx, [rbp - 0x28]
call fcn.140006e00
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, 4
lea rcx, [rbp + 0x20]
call fcn.140004930
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop
lea rcx, [rbp - 0x20]
call fcn.1400031c0
nop
jmp 0x140006d76
movdqa xmm0, xmmword [str._Y_V__f]
movdqu xmmword [rbp - 0x80], xmm0
mov dword [rbp - 0x70], 0x1008ea2
mov rcx, r12
nop dword [rax]
lea eax, [rcx + 0x73]
xor byte [rbp + rcx - 0x80], al
inc rcx
cmp rcx, 0x12
jb 0x140006870
mov byte [rbp - 0x6d], 0
lea r8, [rbp - 0x6e]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.1400035e0
nop
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov edi, r12d
mov r14, qword [rbp - 8]
mov rsi, qword [rbp - 0x20]
mov r15, qword [rbp - 0x10]
test r15, r15
je 0x140006905
mov rbx, r12
nop dword [rax]
nop dword [rax + rax]
lea rdx, [rbp - 0x20]
cmp r14, 0x10
cmovae rdx, rsi
movzx edx, byte [rdx + rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400080c0
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
lea rbx, [rbx + 1]
movsxd rax, edi
cmp rax, r15
jb 0x1400068d0
mov ebx, 8
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop
cmp r14, 0x10
jb 0x14000695c
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140006954
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006954
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.1400091d4
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x1400069a3
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000699e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006b5c
call fcn.1400091d4
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0x10
jb 0x1400069f4
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400069ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006bc0
call fcn.1400091d4
xor eax, eax
jmp 0x1400050c9
mov dword [rsp + 0x30], 0x56285928
mov dword [rsp + 0x34], 0x150b0a32
mov dword [rsp + 0x38], 0x775d09
mov byte [rsp + 0x3c], 1
mov rcx, r12
nop dword [rax + rax]
lea eax, [rcx + 0x73]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0xb
jb 0x140006a20
mov byte [rsp + 0x3c], 0
lea r8, [rsp + 0x3b]
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x20]
call fcn.1400035e0
nop
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov edi, r12d
mov r15, qword [rbp - 8]
mov rsi, qword [rbp - 0x20]
mov r12, qword [rbp - 0x10]
test r12, r12
je 0x140006ab5
xor ebx, ebx
nop word [rax + rax]
lea rdx, [rbp - 0x20]
cmp r15, 0x10
cmovae rdx, rsi
movzx edx, byte [rbx + rdx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400080c0
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
lea rbx, [rbx + 1]
movsxd rax, edi
cmp rax, r12
jb 0x140006a80
mov ebx, 8
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop
cmp r15, 0x10
jb 0x140006b0c
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140006b04
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006b04
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.1400091d4
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140006b68
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006b63
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006b63
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400091d4
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0x10
jb 0x1400050c4
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400050bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400050bf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov dword [rbp - 0x30], 0x61810
mov byte [rbp - 0x2c], 1
lea rcx, [rbp - 0x30]
call fcn.140006e00
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [str._Y_V9_r_v_t]
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0xf2ebe1ea
mov dword [rbp - 0xc], 0xfeeccca7
mov dword [rbp - 8], 0xebf9efee
mov dword [rbp - 4], 0x1009aeb
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x20]
call fcn.140007240
nop
mov edx, 4
lea rcx, [rbp + 0x20]
call fcn.140004930
nop
lea rcx, [rbp + 0x20]
call fcn.1400031c0
call fcn.1400049d0
int3
mov dword [rbp - 0x30], 0x61810
mov byte [rbp - 0x2c], 1
lea rcx, [rbp - 0x30]
call fcn.140006e00
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [str._Y_V9_r_v_t]
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0xf2ebe1ea
mov dword [rbp - 0xc], 0xfeeccca7
mov dword [rbp - 8], 0xebf9efee
mov dword [rbp - 4], 0x1009aeb
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x20]
call fcn.140007240
nop
mov edx, 4
lea rcx, [rbp + 0x20]
call fcn.140004930
nop
lea rcx, [rbp + 0x20]
call fcn.1400031c0
call fcn.1400049d0
nop
movdqa xmm0, xmmword [0x14000cac0]
movdqu xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x14000c780]
movdqu xmmword [rsp + 0x50], xmm1
mov byte [rsp + 0x60], 1
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x40]
call fcn.140007970
nop
mov edx, 4
lea rcx, [rbp + 0x20]
call fcn.140004930
nop
lea rcx, [rbp + 0x20]
call fcn.1400031c0
call fcn.1400049d0
int3
movdqa xmm0, xmmword [0x14000cac0]
movdqu xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x14000c780]
movdqu xmmword [rsp + 0x50], xmm1
mov byte [rsp + 0x60], 1
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x40]
call fcn.140007970
nop
mov edx, 4
lea rcx, [rbp + 0x20]
call fcn.140004930
nop
lea rcx, [rbp + 0x20]
call fcn.1400031c0
call fcn.1400049d0
nop
movdqa xmm0, xmmword [0x14000c930]
movdqu xmmword [rbp - 0x80], xmm0
mov dword [rbp - 0x70], 0x1008ea2
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x80]
call fcn.140007280
nop
mov edx, r14d
lea rcx, [rbp + 0x20]
call fcn.140004930
nop
lea rcx, [rbp + 0x20]
call fcn.1400031c0
call fcn.1400049d0
nop
mov dword [rbp - 0x30], 0x61810
mov byte [rbp - 0x2c], 1
lea rcx, [rbp - 0x30]
call fcn.140006e00
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [str._Y_V4]
movdqu xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x14000cb40]
movdqu xmmword [rsp + 0x50], xmm1
mov dword [rsp + 0x60], 0x9cf1f1e7
mov word [rsp + 0x64], 0x100
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x40]
call fcn.140007200
nop
mov edx, 4
lea rcx, [rbp + 0x20]
call fcn.140004930
nop
lea rcx, [rbp + 0x20]
call fcn.1400031c0
call fcn.1400049d0
int3