Function at 0x140004c00
Capabilities:
Create thread
Encode data using xor
Execute command
Hide graphical window
Log keystrokes via polling
Set console window title

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x168]
sub rsp, 0x230
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
xor esi, esi
mov dword [rbp + 0x170], esi
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
lea edx, [rsi + 5]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [str.R___G]
mov qword [rbp + 0x178], rax
lea edi, [rsi + 1]
lea ebx, [rsi + 0x1f]
mov r13d, dword [0x14000c018]
cmp byte [str.8F_ZW], sil
je 0x140004dbf
cmp r13d, 2
jl 0x140004d80
movdqa xmm4, xmmword [0x140009af0]
movd xmm6, edi
movd xmm5, ebx
movdqa xmm2, xmmword [0x140009aa0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140009ac0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140009ae0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140009b00]
movd xmm0, dword [rbp + 0x178]
xorps xmm2, xmm0
movd dword [rbp + 0x178], xmm2
movdqa xmm3, xmmword [0x140009ab0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140009ac0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140009ae0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140009b00]
movd xmm0, dword [rbp + 0x17c]
xorps xmm2, xmm0
movd dword [rbp + 0x17c], xmm2
jmp 0x140004dbf
lea r9, [rbp + 0x178]
xor r8d, r8d
nop word [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x140004d90
lea rcx, [rbp + 0x178]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x140009998]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [str.jJTS__M_]
movups xmmword [rbp - 0x58], xmm1
pextrw eax, xmm1, 7
test ax, ax
je 0x140004f53
cmp r13d, 2
jl 0x140004f17
movdqa xmm5, xmmword [0x140009aa0]
xor edx, edx
movdqa xmm4, xmmword [0x140009af0]
movd xmm6, edi
movdqa xmm7, xmmword [0x140009ac0]
movd xmm8, ebx
movdqa xmm9, xmmword [0x140009ad0]
lea rcx, [rbp - 0x68]
nop word [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add edx, 8
lea rcx, [rcx + 0x10]
cmp edx, 0x10
jl 0x140004e30
jmp 0x140004f53
lea r9, [rbp - 0x68]
xor r8d, r8d
nop
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x37
movzx eax, r8w
sub ax, cx
add ax, 0x31
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x10
jl 0x140004f20
lea rcx, [rbp - 0x68]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea r8, [0x140004be0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop word [rax + rax]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [str.R_4]
mov dword [rbp + 0x178], eax
cmp byte [0x14000968f], 0
je 0x14000507f
cmp r13d, 2
jl 0x14000503d
movdqa xmm3, xmmword [0x140009aa0]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x140009af0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x140009af0]
shufps xmm2, xmm0, 0xdd
movd xmm0, edi
psrad xmm2, xmm0
movd xmm0, ebx
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x140009ac0]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140009ae0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140009b00]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp + 0x178], xmm2
jmp 0x14000507f
lea r9, [rbp + 0x178]
xor r8d, r8d
nop word [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140005050
lea rcx, [rbp + 0x178]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
lea rax, [rsp + 0x58]
mov qword [rbp + 0x178], rax
lea rdx, [0x140009468]
lea rcx, [rsp + 0x58]
call fcn.140005af0
mov rbx, rax
lea rdx, str._n_Fnttrtx_Spoofer
lea rcx, [rsp + 0x78]
call fcn.140005af0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400066c0
nop
lea rax, [rsp + 0x30]
mov qword [rbp - 0x40], rax
lea rax, [rsp + 0x58]
mov qword [rbp - 0x38], rax
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x30]
call fcn.140006520
bts esi, 7
mov dword [rbp + 0x170], esi
lea r9, [0x140001e60]
mov r8, rdi
mov edx, 0x28
lea rcx, [rsp + 0x30]
call fcn.14000765c
lea rdx, [rbp - 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400063b0
btr esi, 7
mov dword [rbp + 0x170], esi
lea rcx, [rbp - 0x30]
call fcn.1400059d0
nop
lea rax, [rsp + 0x78]
mov qword [rbp + 0x178], rax
lea rdx, [0x14000947c]
lea rcx, [rsp + 0x78]
call fcn.140005af0
mov rbx, rax
lea rdx, [0x140009554]
lea rcx, [rsp + 0x58]
call fcn.140005af0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400066c0
nop
lea rax, [rsp + 0x30]
mov qword [rbp - 0x20], rax
lea rax, [rsp + 0x58]
mov qword [rbp - 0x18], rax
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x10]
call fcn.140006520
bts esi, 8
mov dword [rbp + 0x170], esi
lea r9, [0x140001e60]
mov r8, rdi
mov edx, 0x28
lea rcx, [rsp + 0x30]
call fcn.14000765c
lea rdx, [rbp - 0x10]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400063b0
btr esi, 8
mov dword [rbp + 0x170], esi
lea rcx, [rbp - 0x10]
call fcn.1400059d0
nop
lea rax, [rsp + 0x78]
mov qword [rbp + 0x178], rax
lea rdx, [0x140009468]
lea rcx, [rsp + 0x78]
call fcn.140005af0
mov rbx, rax
lea rdx, str._n_Press_F4_To_Spoof___Random_Serials
lea rcx, [rsp + 0x58]
call fcn.140005af0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400066c0
nop
lea rax, [rsp + 0x30]
mov qword [rbp], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 8], rax
lea rdx, [rbp]
lea rcx, [rbp + 0x10]
call fcn.140006520
bts esi, 9
mov dword [rbp + 0x170], esi
lea r9, [0x140001e60]
mov r8, rdi
mov edx, 0x28
lea rcx, [rsp + 0x30]
call fcn.14000765c
lea rdx, [rbp + 0x10]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400063b0
btr esi, 9
mov dword [rbp + 0x170], esi
lea rcx, [rbp + 0x10]
call fcn.1400059d0
nop
lea rax, [rsp + 0x78]
mov qword [rbp + 0x178], rax
lea rdx, [0x14000947c]
lea rcx, [rsp + 0x78]
call fcn.140005af0
mov rbx, rax
lea rdx, [0x140009554]
lea rcx, [rsp + 0x58]
call fcn.140005af0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400066c0
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x20], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x28], rax
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x30]
call fcn.140006520
or esi, 0x10
mov dword [rbp + 0x170], esi
lea r9, [0x140001e60]
mov r8, rdi
mov edx, 0x28
lea rcx, [rsp + 0x30]
call fcn.14000765c
lea rdx, [rbp + 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400063b0
and esi, 0xffffffef
mov dword [rbp + 0x170], esi
lea rcx, [rbp + 0x30]
call fcn.1400059d0
nop
lea rax, [rsp + 0x78]
mov qword [rbp + 0x178], rax
lea rdx, [0x140009468]
lea rcx, [rsp + 0x78]
call fcn.140005af0
mov rbx, rax
lea rdx, str._n_Process_can_take_some_minutes
lea rcx, [rsp + 0x58]
call fcn.140005af0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400066c0
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x40], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x48], rax
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x50]
call fcn.140006520
or esi, 0x20
mov dword [rbp + 0x170], esi
lea r9, [0x140001e60]
mov r8, rdi
mov edx, 0x28
lea rcx, [rsp + 0x30]
call fcn.14000765c
lea rdx, [rbp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400063b0
and esi, 0xffffffdf
mov dword [rbp + 0x170], esi
lea rcx, [rbp + 0x50]
call fcn.1400059d0
nop
lea rax, [rsp + 0x78]
mov qword [rbp + 0x178], rax
lea rdx, [0x140009468]
lea rcx, [rsp + 0x78]
call fcn.140005af0
mov rbx, rax
lea rdx, str._n_Be_patient...
lea rcx, [rsp + 0x58]
call fcn.140005af0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400066c0
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x60], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x68], rax
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x70]
call fcn.140006520
or esi, 0x40
mov dword [rbp + 0x170], esi
lea r9, [0x140001e60]
mov r8, rdi
mov edx, 0x28
lea rcx, [rsp + 0x30]
call fcn.14000765c
lea rdx, [rbp + 0x70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400063b0
and esi, 0xffffffbf
mov dword [rbp + 0x170], esi
lea rcx, [rbp + 0x70]
call fcn.1400059d0
mov r13d, 7
mov ecx, 0x73
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14000570a
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.140002130
nop
lea rax, [rsp + 0x78]
mov qword [rbp + 0x178], rax
lea rdx, [0x140009468]
lea rcx, [rsp + 0x78]
call fcn.140005af0
mov rbx, rax
lea rdx, str._n_Your_PC_Will_Auto_Restart_in_10_Seconds
lea rcx, [rsp + 0x58]
call fcn.140005af0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400066c0
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0x80], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x88], rax
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x90]
call fcn.140006520
or esi, 4
mov dword [rbp + 0x170], esi
lea r9, [0x140001e60]
mov r8, rdi
mov edx, 0x28
lea rcx, [rsp + 0x30]
call fcn.14000765c
mov r12, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov r15, qword [rbp + 0x90]
mov rbx, qword [r15]
cmp rbx, r15
je 0x1400055b8
nop
mov r14d, dword [rbx + 0x30]
cmp r14d, 0xff
ja 0x140005575
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rbx + 0x10]
cmp qword [rbx + 0x28], 0x10
jb 0x140005584
mov rdx, qword [rbx + 0x10]
mov r8, qword [rbx + 0x20]
mov rcx, r12
call fcn.140007430
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
jne 0x140005550
mov edi, 1
and esi, 0xfffffffb
mov dword [rbp + 0x170], esi
lea rcx, [rbp + 0x90]
call fcn.1400059d0
nop
lea rax, [rsp + 0x78]
mov qword [rbp + 0x178], rax
lea rdx, [0x140009468]
lea rcx, [rsp + 0x78]
call fcn.140005af0
mov rbx, rax
lea rdx, str._n_DONT_CLICK_ANYTHING
lea rcx, [rsp + 0x58]
call fcn.140005af0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400066c0
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0xa0], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0xa8], rax
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0xb0]
call fcn.140006520
or esi, 1
mov dword [rbp + 0x170], esi
lea r9, [0x140001e60]
mov r8, rdi
mov edx, 0x28
lea rcx, [rsp + 0x30]
call fcn.14000765c
mov r12, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov r15, qword [rbp + 0xb0]
mov rbx, qword [r15]
cmp rbx, r15
je 0x1400056e8
nop dword [rax]
nop dword [rax + rax]
mov r14d, dword [rbx + 0x30]
cmp r14d, 0xff
ja 0x1400056a5
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rbx + 0x10]
cmp qword [rbx + 0x28], 0x10
jb 0x1400056b4
mov rdx, qword [rbx + 0x10]
mov r8, qword [rbx + 0x20]
mov rcx, r12
call fcn.140007430
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
jne 0x140005680
mov edi, 1
and esi, 0xfffffffe
mov dword [rbp + 0x170], esi
lea rcx, [rbp + 0xb0]
call fcn.1400059d0
lea rcx, str.C:WindowsSystem32_shutdown__r__t_10
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x74
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140005987
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.140002130
nop
lea rax, [rsp + 0x78]
mov qword [rbp + 0x178], rax
lea rdx, [0x140009468]
lea rcx, [rsp + 0x78]
call fcn.140005af0
mov rbx, rax
lea rdx, str._n_Your_PC_Will_Auto_Restart_in_10_Seconds
lea rcx, [rsp + 0x58]
call fcn.140005af0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400066c0
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0xc0], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0xc8], rax
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0xd0]
call fcn.140006520
or esi, 8
mov dword [rbp + 0x170], esi
lea r9, [0x140001e60]
mov r8, rdi
mov edx, 0x28
lea rcx, [rsp + 0x30]
call fcn.14000765c
mov r12, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov r15, qword [rbp + 0xd0]
mov rbx, qword [r15]
cmp rbx, r15
je 0x140005848
nop word [rax + rax]
mov r14d, dword [rbx + 0x30]
cmp r14d, 0xff
ja 0x140005805
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rbx + 0x10]
cmp qword [rbx + 0x28], 0x10
jb 0x140005814
mov rdx, qword [rbx + 0x10]
mov r8, qword [rbx + 0x20]
mov rcx, r12
call fcn.140007430
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
jne 0x1400057e0
mov edi, 1
and esi, 0xfffffff7
mov dword [rbp + 0x170], esi
lea rcx, [rbp + 0xd0]
call fcn.1400059d0
nop
lea rax, [rsp + 0x78]
mov qword [rbp + 0x178], rax
lea rdx, [0x140009468]
lea rcx, [rsp + 0x78]
call fcn.140005af0
mov rbx, rax
lea rdx, str._n_DONT_CLICK_ANYTHING
lea rcx, [rsp + 0x58]
call fcn.140005af0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400066c0
nop
lea rax, [rsp + 0x30]
mov qword [rbp + 0xe0], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0xe8], rax
lea rdx, [rbp + 0xe0]
lea rcx, [rbp - 0x68]
call fcn.140006520
or esi, 2
mov dword [rbp + 0x170], esi
lea r9, [0x140001e60]
mov r8, rdi
mov edx, 0x28
lea rcx, [rsp + 0x30]
call fcn.14000765c
mov r12, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov r15, qword [rbp - 0x68]
mov rbx, qword [r15]
cmp rbx, r15
je 0x140005968
nop
mov r14d, dword [rbx + 0x30]
cmp r14d, 0xff
ja 0x140005925
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rbx + 0x10]
cmp qword [rbx + 0x28], 0x10
jb 0x140005934
mov rdx, qword [rbx + 0x10]
mov r8, qword [rbx + 0x20]
mov rcx, r12
call fcn.140007430
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
jne 0x140005900
mov edi, 1
and esi, 0xfffffffd
mov dword [rbp + 0x170], esi
lea rcx, [rbp - 0x68]
call fcn.1400059d0
lea rcx, str.C:WindowsSystem32_shutdown__r__t_10
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x75
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140005482
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.140003680
mov r13d, dword [0x14000c018]
mov ebx, 0x1f
jmp 0x140004f80