Function at 0x140004e50
Capabilities:
Contain obfuscated stackstrings
Hide graphical window

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
mov rbp, rsp
sub rsp, 0x70
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov word [rbp - 0x3f], 0x65
movdqa xmm0, xmmword [0x140086250]
movdqu xmmword [rbp - 0x50], xmm0
mov byte [rbp - 0x40], 0x78
mov byte [rbp - 0x3d], 0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3e]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.14000e6b0
nop
lea rcx, [rbp - 0x20]
call fcn.140004a00
mov rbx, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140004ef4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004eef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004eef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400738dc
test rbx, rbx
jne 0x1400057c2
mov word [rbp - 0x3f], 0x65
movdqa xmm0, xmmword [0x140086240]
movdqu xmmword [rbp - 0x50], xmm0
mov byte [rbp - 0x40], 0x78
mov byte [rbp - 0x3d], bl
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3e]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.14000e6b0
nop
lea rcx, [rbp - 0x20]
call fcn.140004a00
mov rbx, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140004f77
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004f72
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004f72
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400738dc
test rbx, rbx
jne 0x1400057c2
mov dword [rbp - 0x40], 0x657865
movdqa xmm0, xmmword [0x140086210]
movdqu xmmword [rbp - 0x50], xmm0
mov byte [rbp - 0x3c], bl
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3d]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.14000e6b0
nop
lea rcx, [rbp - 0x20]
call fcn.140004a00
mov rbx, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140004ff7
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004ff2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004ff2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400738dc
test rbx, rbx
jne 0x1400057c2
mov dword [rbp - 0x3e], 0x657865
movdqa xmm0, xmmword [0x140086260]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], 0x2e77
mov byte [rbp - 0x3a], bl
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3b]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.14000e6b0
nop
lea rcx, [rbp - 0x20]
call fcn.140004a00
mov rbx, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000507d
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005078
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005078
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400738dc
test rbx, rbx
jne 0x1400057c2
mov word [rbp - 0x40], 0x65
movdqa xmm0, xmmword [0x1400862a0]
movdqu xmmword [rbp - 0x50], xmm0
mov byte [rbp - 0x3e], bl
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3f]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.14000e6b0
nop
lea rcx, [rbp - 0x20]
call fcn.140004a00
mov rbx, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1400050fc
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400050f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400050f7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400738dc
test rbx, rbx
jne 0x1400057c2
mov dword [rbp - 0x48], 0x657865
mov dword [rbp - 0x50], 0x636f7270
mov dword [rbp - 0x4c], 0x2e6e6f6d
mov byte [rbp - 0x44], bl
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x45]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.14000e6b0
nop
lea rcx, [rbp - 0x20]
call fcn.140004a00
mov rbx, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000517d
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005178
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005178
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400738dc
test rbx, rbx
jne 0x1400057c2
mov word [rbp - 0x49], 0x65
mov dword [rbp - 0x50], 0x71616469
mov word [rbp - 0x4c], 0x652e
mov byte [rbp - 0x4a], 0x78
mov byte [rbp - 0x47], bl
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x48]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.14000e6b0
nop
lea rcx, [rbp - 0x20]
call fcn.140004a00
mov rbx, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140005200
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400051fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400051fb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400738dc
test rbx, rbx
jne 0x1400057c2
mov word [rbp - 0x47], 0x65
mov dword [rbp - 0x50], 0x71616469
mov dword [rbp - 0x4c], 0x652e3436
mov byte [rbp - 0x48], 0x78
mov byte [rbp - 0x45], bl
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x46]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.14000e6b0
nop
lea rcx, [rbp - 0x20]
call fcn.140004a00
mov rbx, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140005284
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000527f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000527f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400738dc
test rbx, rbx
jne 0x1400057c2
mov dword [rbp - 0x46], 0x657865
mov dword [rbp - 0x50], 0x65726957
mov dword [rbp - 0x4c], 0x72616873
mov word [rbp - 0x48], 0x2e6b
mov byte [rbp - 0x42], bl
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x43]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.14000e6b0
nop
lea rcx, [rbp - 0x20]
call fcn.140004a00
mov rbx, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000530b
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005306
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005306
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400738dc
test rbx, rbx
jne 0x1400057c2
mov dword [rbp - 0x48], 0x657865
mov dword [rbp - 0x50], 0x64646946
mov dword [rbp - 0x4c], 0x2e72656c
mov byte [rbp - 0x44], bl
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x45]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.14000e6b0
nop
lea rcx, [rbp - 0x20]
call fcn.140004a00
mov rbx, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000538c
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005387
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005387
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400738dc
test rbx, rbx
jne 0x1400057c2
mov dword [rbp - 0x48], 0x657865
mov dword [rbp - 0x50], 0x6f6e6558
mov dword [rbp - 0x4c], 0x2e343673
mov byte [rbp - 0x44], bl
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x45]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.14000e6b0
nop
lea rcx, [rbp - 0x20]
call fcn.140004a00
mov rbx, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000540d
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005408
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005408
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400738dc
test rbx, rbx
jne 0x1400057c2
mov word [rbp - 0x40], bx
movdqa xmm0, xmmword [0x140086270]
movdqu xmmword [rbp - 0x50], xmm0
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.14000e6b0
nop
lea rcx, [rbp - 0x20]
call fcn.140004a00
mov rbx, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140005487
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005482
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005482
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400738dc
test rbx, rbx
jne 0x1400057c2
mov word [rbp - 0x27], 0x65
movdqa xmm0, xmmword [0x140086280]
movdqu xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x140086230]
movdqu xmmword [rbp - 0x40], xmm1
mov dword [rbp - 0x30], 0x69622032
mov dword [rbp - 0x2c], 0x652e2974
mov byte [rbp - 0x28], 0x78
mov byte [rbp - 0x25], bl
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x26]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.14000e6b0
nop
lea rcx, [rbp - 0x20]
call fcn.140004a00
mov rbx, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140005525
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005520
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005520
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400738dc
test rbx, rbx
jne 0x1400057c2
mov word [rbp - 0x45], 0x65
mov dword [rbp - 0x50], 0x7544734b
mov dword [rbp - 0x4c], 0x7265706d
mov word [rbp - 0x48], 0x652e
mov byte [rbp - 0x46], 0x78
mov byte [rbp - 0x43], bl
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x44]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.14000e6b0
nop
lea rcx, [rbp - 0x20]
call fcn.140004a00
mov rbx, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1400055af
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400055aa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400055aa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400738dc
test rbx, rbx
jne 0x1400057c2
mov word [rbp - 0x47], 0x65
mov dword [rbp - 0x50], 0x64343678
mov dword [rbp - 0x4c], 0x652e6762
mov byte [rbp - 0x48], 0x78
mov byte [rbp - 0x45], bl
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x46]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.14000e6b0
nop
lea rcx, [rbp - 0x20]
call fcn.140004a00
mov rbx, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140005633
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000562e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000562e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400738dc
test rbx, rbx
jne 0x1400057c2
mov word [rbp - 0x40], 0x65
movdqa xmm0, xmmword [0x1400862a0]
movdqu xmmword [rbp - 0x50], xmm0
mov byte [rbp - 0x3e], bl
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x3f]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.14000e6b0
nop
lea rcx, [rbp - 0x20]
call fcn.140004a00
mov rbx, rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1400056b2
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400056ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400056ad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400738dc
test rbx, rbx
jne 0x1400057c2
mov word [rbp - 0x40], bx
movdqa xmm0, xmmword [0x140086290]
movdqu xmmword [rbp - 0x50], xmm0
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400057c2
mov dword [rbp - 0x46], 0x726577
mov dword [rbp - 0x50], 0x6f6d654d
mov dword [rbp - 0x4c], 0x56207972
mov word [rbp - 0x48], 0x6569
mov byte [rbp - 0x42], al
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400057c2
mov word [rbp - 0x45], reloc.WS2_32.dll_WSACleanup
mov dword [rbp - 0x50], 0x636f7250
mov dword [rbp - 0x4c], 0x20737365
mov word [rbp - 0x48], 0x694c
mov byte [rbp - 0x46], reloc.WS2_32.dll_WSAStartup
mov byte [rbp - 0x43], al
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400057c2
mov word [rbp - 0x49], WSACleanup
mov dword [rbp - 0x50], 0x7544734b
mov word [rbp - 0x4c], 0x706d
mov byte [rbp - 0x4a], 0x65
mov byte [rbp - 0x47], al
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400057c2
mov dword [rbp - 0x46], 0x726567
mov dword [rbp - 0x50], 0x50545448
mov dword [rbp - 0x4c], 0x62654420
mov word [rbp - 0x48], 0x6775
mov byte [rbp - 0x42], al
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400057c2
mov dword [rbp - 0x4c], 0x676244
mov dword [rbp - 0x50], 0x796c6c4f
mov byte [rbp - 0x48], al
lea rdx, [rbp - 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x1400057c7
call fcn.140004690
mov qword [rbp + 0x10], 0x7d0
lea rcx, [rbp + 0x10]
call fcn.14000dee0
mov rbx, qword [rsp + 0x88]
add rsp, 0x70
pop rbp
ret