Function at 0x1400054c0
Capabilities:
Delete file
Encode data using xor
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x218]
sub rsp, 0x2f0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x1400d9040]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
mov rsi, rcx
mov qword [rbp + 0x30], rcx
xor r12d, r12d
mov qword [rcx], r12
mov qword [rcx + 8], r12
xorps xmm0, xmm0
movups xmmword [rcx + 0x10], xmm0
mov qword [rcx + 0x20], r12
mov qword [rcx + 0x28], 0xf
mov byte [rcx + 0x10], r12b
movups xmmword [rcx + 0x30], xmm0
mov qword [rcx + 0x40], r12
mov qword [rcx + 0x48], 0xf
mov byte [rcx + 0x30], r12b
mov byte [rcx + 0x50], r12b
mov dword [rcx + 0x54], r12d
test dl, dl
jne 0x14000556c
mov dword [rbp + 0x70], 0x9c4
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x30]
call fcn.140011660
mov rcx, rax
call fcn.140011670
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movups xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], r12
mov qword [rbp + 0x138], r12
xor r8d, r8d
lea rdx, [0x14009e681]
lea rcx, [rbp + 0x120]
call fcn.140012490
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], r12
mov qword [rbp + 0x158], r12
xor r8d, r8d
lea rdx, [0x14009e681]
lea rcx, [rbp + 0x140]
call fcn.140012490
nop
lea rdx, [rbp + 0x120]
lea rcx, [rsi + 0x10]
call fcn.140006f80
lea rcx, [rbp + 0x120]
call fcn.140006ed0
mov eax, dword [0x1400a11e0]
mov dword [rbp + 0x50], eax
movzx eax, word [0x1400a11e4]
mov word [rbp + 0x54], ax
movsd xmm0, qword [str.vJaf_oan_]
movsd qword [rbp + 0x60], xmm0
movzx eax, word [0x1400a11f0]
mov word [rbp + 0x68], ax
movzx r11d, byte [0x1400a11f2]
movups xmm0, xmmword [0x1400a0850]
movups xmmword [rbp + 0x170], xmm0
movups xmm1, xmmword [0x1400a0860]
movups xmmword [rbp + 0x180], xmm1
movups xmm0, xmmword [0x1400a0870]
movups xmmword [rbp + 0x190], xmm0
movups xmm1, xmmword [0x1400a0880]
movups xmmword [rbp + 0x1a0], xmm1
movzx eax, byte [0x1400a0890]
mov byte [rbp + 0x1b0], al
mov ecx, dword [0x1400a11f4]
mov dword [rbp + 0x70], ecx
movups xmm0, xmmword [0x1400a11f8]
movups xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [0x1400a1208]
movups xmmword [rbp + 0x130], xmm1
movzx eax, word [0x1400a1218]
mov word [rbp + 0x140], ax
movzx eax, byte [0x1400a121a]
mov byte [rbp + 0x142], al
mov r8d, r12d
mov r10d, dword [0x1400d9090]
cmp r10d, 2
jl 0x1400057f1
movdqa xmm5, xmmword [0x1400c71b0]
movdqa xmm4, xmmword [0x1400c7490]
movdqa xmm6, xmmword [0x1400c7220]
movdqa xmm0, xmmword [str.1111111111111111]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rbp + 0x120]
mov r9d, dword [rsp + 0x40]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400c72e0]
packuswb xmm2, xmm2
movd xmm0, r9d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400c72e0]
packuswb xmm2, xmm2
movd xmm0, r9d
paddb xmm2, xmm0
movd xmm0, dword [rdx + 4]
xorps xmm2, xmm0
movd dword [rdx + 4], xmm2
add r8d, 8
lea rdx, [rdx + 8]
cmp r8d, 0x20
jl 0x1400056e2
cmp r8d, 0x23
jge 0x140005833
movsxd rax, r8d
lea r9, [rbp + 0x120]
add r9, rax
nop
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x39
movzx eax, r8b
sub al, dl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x23
jl 0x140005800
cmp r10d, 2
jl 0x1400058be
movdqa xmm3, xmmword [0x1400c71b0]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400c7490]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400c7490]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x1400c7220]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400c72e0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.1111111111111111]
movd xmm0, ecx
xorps xmm2, xmm0
movd dword [rbp + 0x70], xmm2
jmp 0x140005903
lea r9, [rbp + 0x70]
mov r8d, r12d
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x1400058d0
mov r8d, r12d
cmp r10d, 2
jl 0x140005a4e
movdqa xmm5, xmmword [0x1400c71b0]
movdqa xmm4, xmmword [0x1400c7490]
movdqa xmm6, xmmword [0x1400c7220]
movdqa xmm0, xmmword [str.1111111111111111]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp + 0x170]
mov edx, dword [rsp + 0x40]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400c72e0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400c72e0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x40
jl 0x140005941
cmp r8d, 0x41
jge 0x140005aa0
movsxd rax, r8d
lea r9, [rbp + 0x170]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x41
jl 0x140005a60
nop dword [rax]
nop word [rax + rax]
mov byte [rbp + 0x60], 0x47
xor byte [rbp + 0x61], 0x32
xor byte [rbp + 0x62], 0x33
xor byte [rbp + 0x63], 0x34
xor byte [rbp + 0x64], 0x35
xor byte [rbp + 0x65], 0x36
xor byte [rbp + 0x66], 0x37
xor byte [rbp + 0x67], 0x38
xor byte [rbp + 0x68], 0x39
xor byte [rbp + 0x69], 0x3a
xor r11b, 0x3b
mov byte [rbp + 0x6a], r11b
mov byte [rbp + 0x50], 0x49
xor byte [rbp + 0x51], 0x32
xor byte [rbp + 0x52], 0x33
xor byte [rbp + 0x53], 0x34
xor byte [rbp + 0x54], 0x35
xor byte [rbp + 0x55], 0x36
mov ecx, 0x278
call fcn.140097980
mov rdi, rax
mov qword [rbp + 0x48], rax
xor edx, edx
mov r8d, 0x278
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
lea rax, [rbp + 0x98]
mov qword [rbp + 0x38], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r12
mov qword [rbp + 0xb0], r12
lea rax, [rbp + 0x120]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140005b40
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x98]
call fcn.140012490
nop
lea rax, [rbp + 0x78]
mov qword [rbp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
mov qword [rbp + 0x88], r12
mov qword [rbp + 0x90], r12
lea rax, [rbp + 0x70]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140005b82
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x78]
call fcn.140012490
nop
lea rax, [rbp + 0xd8]
mov qword [rbp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
mov qword [rbp + 0xe8], r12
mov qword [rbp + 0xf0], r12
lea rax, [rbp + 0x170]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140005bd0
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0xd8]
call fcn.140012490
nop
lea rax, [rsp + 0x50]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
lea rax, [rbp + 0x60]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140005c11
lea rdx, [rbp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.140012490
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], r12
mov qword [rbp + 8], r12
lea rax, [rbp + 0x50]
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140005c40
mov r8, rbx
lea rdx, [rbp + 0x50]
lea rcx, [rbp - 0x10]
call fcn.140012490
nop
lea rax, [rbp + 0x98]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x78]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xd8]
lea r8, [rsp + 0x50]
lea rdx, [rbp - 0x10]
mov rcx, rdi
call fcn.140001fb0
nop
mov rbx, qword [rsi + 8]
mov qword [rsi + 8], rax
test rbx, rbx
je 0x140005cb0
mov rcx, rbx
call fcn.14000e440
mov edx, 0x278
mov rcx, rbx
call fcn.1400979c4
nop word [rax + rax]
mov rcx, qword [rsi + 8]
call fcn.14008c190
mov rax, qword [rsi + 8]
cmp byte [rax + 0x210], 0
jne 0x140005cee
mov dword [rbp + 0x70], 0x5dc
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x60]
call fcn.140011660
mov rcx, rax
call fcn.140011670
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov qword [rbp + 0x160], rax
lea rcx, [rbp + 0x160]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_asctime]
lea r13, str.settings.json
mov qword [rbp + 0x60], r13
mov qword [rbp + 0x68], 0xd
call fcn.1400973f4
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x60], xmm0
lea r8, [rbp + 0x60]
mov edx, eax
lea rcx, [rbp + 0xb8]
call fcn.140002790
nop
lea rcx, [rbp + 0xb8]
call fcn.140003220
movzx ebx, al
mov rdx, qword [rbp + 0xd0]
cmp rdx, 7
jbe 0x140005d9f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005d9a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005d9a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400979c4
test bl, bl
je 0x140006e57
lea rax, [rbp + 0x98]
mov qword [rbp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r12
mov qword [rbp + 0xb0], r12
mov r8d, 7
lea rdx, str.license
lea rcx, [rbp + 0x98]
call fcn.140012490
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
mov qword [rbp + 0x88], r12
mov qword [rbp + 0x90], r12
mov r8d, 0xd
mov rdx, r13
lea rcx, [rbp + 0x78]
call fcn.140012490
nop
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x78]
call fcn.140004670
xorps xmm0, xmm0
test al, al
je 0x1400063ec
lea rax, [rbp + 0x78]
mov qword [rbp + 0x60], rax
movups xmmword [rbp + 0x78], xmm0
mov qword [rbp + 0x88], r12
mov qword [rbp + 0x90], r12
mov r8d, 7
lea rdx, str.license
lea rcx, [rbp + 0x78]
call fcn.140012490
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
mov qword [rbp + 0xe8], r12
mov qword [rbp + 0xf0], r12
mov r8d, 0xd
mov rdx, r13
lea rcx, [rbp + 0xd8]
call fcn.140012490
nop
lea r8, [rbp + 0x78]
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x98]
call fcn.140003f80
nop
mov rbx, qword [rsi + 8]
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0xb8]
call fcn.14000bdb0
mov rdx, rax
mov rcx, rbx
call fcn.14008dd30
mov r15, qword [rsi + 8]
cmp byte [r15 + 0x210], 0
jne 0x140005eff
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov dword [rbp + 0x70], 0x5dc
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x60]
call fcn.140011660
mov rcx, rax
call fcn.140011670
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
add r15, 0x140
mov rdx, qword [rbp + 0xa8]
mov qword [rbp + 0x50], rdx
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
sub rax, rdx
cmp rax, 0x280
jb 0x140006eb2
lea r10, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0xf
cmova r10, qword [rbp + 0x98]
mov qword [rbp + 0x70], r10
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r12
lea r12, [rdx + 0x280]
mov edi, 0xf
lea r14, [rbp - 0x50]
lea eax, [rdi + 7]
movabs r13, 0x8000000000000000
cmp r12, rdi
jbe 0x140005ff7
mov rdi, r12
or rdi, 0xf
cmp rdi, rbx
jbe 0x140005faf
mov rdi, rbx
lea rax, [r13 + 0x27]
mov rcx, rax
call fcn.140097980
test rax, rax
je 0x140005fd2
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
mov rdx, qword [rbp + 0x50]
mov r10, qword [rbp + 0x70]
jmp 0x140005ff3
cmp rdi, rax
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140005fd9
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140006e9a
jmp 0x140005f8c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140005ff0
call fcn.140097980
mov r14, rax
mov rdx, qword [rbp + 0x50]
mov r10, qword [rbp + 0x70]
jmp 0x140005ff3
xor r14d, r14d
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], rdi
mov rax, r14
lea rcx, str._n___________________________________________________embeds_:___n_____________________________________________________n_______________________________________________________title_:__User_Logged_In___n_______________________________________________________description_:__User_logged_in_with_license___n_______________________________________________________color_:_65280__n_______________________________________________________fields_:___n_________________________________________________________n___________________________________________________________name_:__License___n___________________________________________________________value_:__
mov r9d, 5
nop
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub r9, 1
jne 0x140006010
lea rcx, [r14 + 0x280]
mov r8, rdx
mov rdx, r10
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + r12], 0
mov r8d, 0x157
lea rdx, str.___n___________________________________________________________inline_:_true_n__________________________________________________________n_________________________________________________________n___________________________________________________________name_:__Username___n___________________________________________________________value_:__
lea rcx, [rbp - 0x50]
call fcn.14000bb40
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xor edi, edi
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], rdi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
mov r8, qword [r15 + 0x10]
cmp qword [r15 + 0x18], 0xf
jbe 0x1400060ce
mov r15, qword [r15]
mov rdx, r15
lea rcx, [rsp + 0x70]
call fcn.14000bb40
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 0x15b
lea rdx, str.___n___________________________________________________________inline_:_true_n_________________________________________________________n________________________________________________________n_____________________________________________________n____________________________________________________n________________________________________________
lea rcx, [rbp - 0x30]
call fcn.14000bb40
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0xb8], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0xc8], xmm6
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x140006180
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000617b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000617b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400979c4
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x1400061cf
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400061ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400061ca
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400979c4
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x14000621e
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006219
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006219
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400979c4
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
lea rax, [rbp - 0x70]
mov qword [rbp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
lea r15, [rbp + 0xb8]
movdqa xmm0, xmm6
psrldq xmm0, 8
movq r12, xmm0
cmp r12, 0xf
seta byte [rsp + 0x30]
movq r14, xmm7
cmova r15, r14
movq rdi, xmm6
cmp rdi, rbx
ja 0x140006eb8
cmp rdi, 0xf
ja 0x140006299
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], 0xf
movups xmm0, xmmword [r15]
movups xmmword [rbp - 0x70], xmm0
jmp 0x140006324
mov rax, rdi
or rax, 0xf
cmp rax, rbx
jbe 0x1400062c7
add r13, 0x27
mov rcx, r13
call fcn.140097980
mov rcx, rax
test rax, rax
je 0x1400062f3
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140006308
cmp rax, 0x16
mov ecx, 0x16
cmovb rax, rcx
mov rbx, rax
lea rcx, [rax + 1]
cmp rcx, 0x1000
jb 0x1400062fa
lea r13, [rcx + 0x27]
cmp r13, rcx
jbe 0x140006ea0
jmp 0x1400062a9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140006306
call fcn.140097980
jmp 0x140006308
xor eax, eax
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rbx
lea r8, [rdi + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
xor eax, eax
mov qword [rbp + 0x88], rax
mov qword [rbp + 0x90], rax
lea r8d, [rax + 5]
lea rdx, str.login
lea rcx, [rbp + 0x78]
call fcn.140012490
nop
lea r8, [rbp - 0x70]
lea rdx, [rbp + 0x78]
mov rcx, rsi
call fcn.140007090
mov byte [rsi + 0x50], 1
cmp byte [rsp + 0x30], 0
je 0x1400063a1
lea rdx, [r12 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140006398
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006398
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.1400979c4
nop
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x140006e57
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006e51
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006e51
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rax, [rbp + 0x98]
mov qword [rbp + 0x60], rax
movups xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r12
mov qword [rbp + 0xb0], r12
mov r8d, 8
lea rdx, str.username
lea rcx, [rbp + 0x98]
call fcn.140012490
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
mov qword [rbp + 0x88], r12
mov qword [rbp + 0x90], r12
mov r8d, 0xd
mov rdx, r13
lea rcx, [rbp + 0x78]
call fcn.140012490
nop
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x78]
call fcn.140004670
test al, al
je 0x140006e57
lea rax, [rbp + 0x98]
mov qword [rbp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r12
mov qword [rbp + 0xb0], r12
mov r8d, 8
lea rdx, str.password
lea rcx, [rbp + 0x98]
call fcn.140012490
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
mov qword [rbp + 0x88], r12
mov qword [rbp + 0x90], r12
mov r8d, 0xd
mov rdx, r13
lea rcx, [rbp + 0x78]
call fcn.140012490
nop
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x78]
call fcn.140004670
test al, al
je 0x140006e57
lea rax, [rsp + 0x50]
mov qword [rbp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov r8d, 8
lea rdx, str.username
lea rcx, [rsp + 0x50]
call fcn.140012490
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], r12
mov qword [rbp + 8], r12
mov r8d, 0xd
mov rdx, r13
lea rcx, [rbp - 0x10]
call fcn.140012490
nop
lea r8, [rsp + 0x50]
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x98]
call fcn.140003f80
nop
lea rax, [rbp - 0x70]
mov qword [rbp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov r8d, 8
lea rdx, str.password
lea rcx, [rbp - 0x70]
call fcn.140012490
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
mov r8d, 0xd
mov rdx, r13
lea rcx, [rsp + 0x70]
call fcn.140012490
nop
lea r8, [rbp - 0x70]
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x78]
call fcn.140003f80
nop
mov rdi, qword [rsi + 8]
lea rax, [rbp + 0xb8]
mov qword [rbp + 0x60], rax
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0xb8]
call fcn.14000bdb0
mov rbx, rax
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0xf8]
call fcn.14000bdb0
nop
mov r8, rbx
mov rdx, rax
mov rcx, rdi
call fcn.14008f170
mov rax, qword [rsi + 8]
cmp byte [rax + 0x210], 0
jne 0x140006635
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov dword [rbp + 0x70], 0x5dc
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x60]
call fcn.140011660
mov rcx, rax
call fcn.140011670
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [rsp + 0x50]
mov qword [rbp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov r8d, 3
lea rdx, [0x14009ec6c]
lea rcx, [rsp + 0x50]
call fcn.140012490
nop
lea rax, [rbp + 0x120]
mov qword [rsp + 0x40], rax
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x120]
call fcn.14000bdb0
mov rbx, rax
lea rax, [rbp + 0xf8]
mov qword [rbp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xf8], xmm0
mov qword [rbp + 0x108], r12
mov qword [rbp + 0x110], r12
mov r8d, 4
lea rdx, [0x14009ec70]
lea rcx, [rbp + 0xf8]
call fcn.140012490
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xc8], r12
mov qword [rbp + 0xd0], r12
mov r8d, 6
lea rdx, str.getkey
lea rcx, [rbp + 0xb8]
call fcn.140012490
nop
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0xf8]
lea r8, [rbp + 0xb8]
lea rdx, [rbp + 0xd8]
call fcn.14000a2a0
nop
lea rdx, [rbp + 0x98]
lea rcx, [rbp - 0x10]
call fcn.14000bdb0
nop
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x10]
call fcn.14000bdb0
nop
lea rdx, [rbp - 0x10]
lea rcx, [rsi + 0x10]
call fcn.140006f80
lea rcx, [rbp - 0x10]
call fcn.140006ed0
mov r8, qword [rbp + 0xa8]
mov qword [rbp + 0x70], r8
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
sub rax, r8
cmp rax, 0x285
jb 0x140006ebe
lea rdx, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0xf
cmova rdx, qword [rbp + 0x98]
mov qword [rbp + 0x50], rdx
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r12
lea r15, [r8 + 0x285]
mov edi, 0xf
lea r14, [rbp - 0x50]
movabs r13, 0x8000000000000000
lea r12d, [rdi + 7]
cmp r15, rdi
jbe 0x14000684d
mov rdi, r15
or rdi, 0xf
cmp rdi, rbx
jbe 0x140006805
mov rdi, rbx
lea rax, [r13 + 0x27]
mov rcx, rax
call fcn.140097980
test rax, rax
je 0x140006828
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
mov rdx, qword [rbp + 0x50]
mov r8, qword [rbp + 0x70]
jmp 0x140006849
cmp rdi, r12
cmovb rdi, r12
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14000682f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140006ea6
jmp 0x1400067e2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140006846
call fcn.140097980
mov r14, rax
mov rdx, qword [rbp + 0x50]
mov r8, qword [rbp + 0x70]
jmp 0x140006849
xor r14d, r14d
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], rdi
mov rcx, r14
lea r9, str._n___________________________________________________embeds_:___n_____________________________________________________n_______________________________________________________title_:__User_Logged_In___n_______________________________________________________description_:__User_logged_in_with_credentials___n_______________________________________________________color_:_65280__n_______________________________________________________fields_:___n_________________________________________________________n___________________________________________________________name_:__Username___n___________________________________________________________value_:__
mov eax, 5
nop dword [rax]
nop dword [rax + rax]
movups xmm0, xmmword [r9]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [r9 + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [r9 + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [r9 + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [r9 + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [r9 + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [r9 + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [r9 + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea r9, [r9 + 0x80]
sub rax, 1
jne 0x140006870
mov eax, dword [r9]
mov dword [rcx], eax
movzx eax, byte [r9 + 4]
mov byte [rcx + 4], al
lea rcx, [r14 + 0x285]
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + r15], 0
mov r8d, 0x157
lea rdx, str.___n___________________________________________________________inline_:_true_n__________________________________________________________n_________________________________________________________n___________________________________________________________name_:__Password___n___________________________________________________________value_:__
lea rcx, [rbp - 0x50]
call fcn.14000bb40
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xor edi, edi
mov qword [rbp], rdi
mov qword [rbp + 8], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
lea rdx, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova rdx, qword [rbp + 0x78]
mov r8, qword [rbp + 0x88]
lea rcx, [rbp - 0x10]
call fcn.14000bb40
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
mov r8d, 0x156
lea rdx, str.___n___________________________________________________________inline_:_true_n__________________________________________________________n_________________________________________________________n___________________________________________________________name_:__License___n___________________________________________________________value_:__
lea rcx, [rbp - 0x30]
call fcn.14000bb40
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], rdi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
lea rdx, [rbp + 0xd8]
cmp qword [rbp + 0xf0], 0xf
cmova rdx, qword [rbp + 0xd8]
mov r8, qword [rbp + 0xe8]
lea rcx, [rsp + 0x70]
call fcn.14000bb40
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
mov r8d, 0x15c
lea rdx, str.___n___________________________________________________________inline_:_false_n_________________________________________________________n________________________________________________________n_____________________________________________________n____________________________________________________n________________________________________________
lea rcx, [rbp - 0x70]
call fcn.14000bb40
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0xf8], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0x108], xmm6
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140006a8d
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006a88
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006a88
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400979c4
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x140006adc
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006ad7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006ad7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400979c4
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x140006b2b
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006b26
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006b26
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400979c4
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x140006b79
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006b74
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006b74
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400979c4
mov qword [rbp], rdi
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140006bc7
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006bc2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006bc2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400979c4
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
lea rax, [rsp + 0x50]
mov qword [rbp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
lea r15, [rbp + 0xf8]
movdqa xmm0, xmm6
psrldq xmm0, 8
movq rax, xmm0
mov qword [rbp + 0x50], rax
cmp rax, 0xf
seta byte [rsp + 0x30]
movq r14, xmm7
cmova r15, r14
movq rdi, xmm6
cmp rdi, rbx
ja 0x140006e94
cmp rdi, 0xf
ja 0x140006c4d
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], 0xf
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x50], xmm0
jmp 0x140006cd6
mov rax, rdi
or rax, 0xf
cmp rax, rbx
jbe 0x140006c7b
add r13, 0x27
mov rcx, r13
call fcn.140097980
mov rcx, rax
test rax, rax
je 0x140006ca2
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140006cb7
cmp rax, 0x16
cmovb rax, r12
mov rbx, rax
lea rcx, [rax + 1]
cmp rcx, 0x1000
jb 0x140006ca9
lea r13, [rcx + 0x27]
cmp r13, rcx
jbe 0x140006eac
jmp 0x140006c5d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140006cb5
call fcn.140097980
jmp 0x140006cb7
xor eax, eax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rbx
lea r8, [rdi + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
xor ebx, ebx
mov qword [rbp + 0xc8], rbx
mov qword [rbp + 0xd0], rbx
lea r8d, [rbx + 5]
lea rdx, str.login
lea rcx, [rbp + 0xb8]
call fcn.140012490
nop
lea r8, [rsp + 0x50]
lea rdx, [rbp + 0xb8]
mov rcx, rsi
call fcn.140007090
mov byte [rsi + 0x50], 1
cmp byte [rsp + 0x30], bl
je 0x140006d5e
mov rdx, qword [rbp + 0x50]
inc rdx
mov rax, r14
cmp rdx, 0x1000
jb 0x140006d55
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006d55
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.1400979c4
nop
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0xf
jbe 0x140006da2
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006d9d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006d9d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400979c4
mov qword [rbp + 0xe8], rbx
mov qword [rbp + 0xf0], 0xf
mov byte [rbp + 0xd8], 0
mov rdx, qword [rbp + 0x90]
cmp rdx, 0xf
jbe 0x140006dfc
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006df7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006df7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400979c4
mov qword [rbp + 0x88], rbx
mov qword [rbp + 0x90], 0xf
mov byte [rbp + 0x78], 0
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x140006e57
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006e51
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006e51
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400979c4
nop
mov rax, rsi
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.140097960
lea r11, [rsp + 0x2f0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400016f0
nop
call fcn.140001640
nop
call fcn.140001640
nop
call fcn.140001640
nop
call fcn.140001640
nop
call fcn.1400016f0
nop
call fcn.1400016f0
nop
call fcn.1400016f0
int3