Function at 0x140019b30
Capabilities:
Access peb ldr_data
Allocate or change rwx memory
Contain obfuscated stackstrings
Encode data using xor
Execute shellcode via indirect call
Hash data using fnv
Manipulate console buffer
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2c8]
sub rsp, 0x3a0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x1400781b0]
xor rax, rsp
mov qword [rbp + 0x270], rax
xor r13d, r13d
mov dword [rsp + 0x50], r13d
call fcn.1400189d0
test al, al
je 0x14001ac34
lea rcx, [0x14005a8d0]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x140019bcd
lea rdx, str.DbgBreakPoint
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
je 0x140019bcd
lea r9, [rbp + 0xb8]
lea edx, [r13 + 1]
lea r8d, [r13 + 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x140019bcd
mov byte [rbx], 0xc3
lea rcx, [0x1400143c0]
call fcn.140011c30
movdqa xmm0, xmmword [0x1400665b0]
movdqu xmmword [rbp + 0x98], xmm0
mov dword [rbp + 0xa8], 0x1f1e061d
mov dword [rbp + 0xac], 0x1003912
mov rcx, r13
lea eax, [rcx + 0x1e]
xor byte [rbp + rcx + 0x98], al
inc rcx
cmp rcx, 0x16
jb 0x140019c00
mov byte [rbp + 0xaf], r13b
lea rcx, [rbp + 0x98]
call fcn.140001970
lea rcx, [rbp - 0x70]
call fcn.14000a300
mov rbx, rax
lea r12, [0x1401c77e8]
cmp r12, rax
je 0x140019cb6
mov rdx, qword [0x1401c7800]
cmp rdx, 0x10
jb 0x140019c7b
mov rcx, qword [0x1401c77e8]
inc rdx
cmp rdx, 0x1000
jb 0x140019c76
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140019ce8
mov rcx, r8
call fcn.14004dbe0
movdqa xmm0, xmmword [0x1400664f0]
movdqu xmmword [0x1401c77f8], xmm0
mov byte [0x1401c77e8], r13b
movups xmm0, xmmword [rbx]
movups xmmword [0x1401c77e8], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x1401c77f8], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], send
mov byte [rbx], r13b
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x140019cf4
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019cef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140019cef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004dbe0
lea rcx, [rbp + 0x1f0]
call fcn.140009da0
nop
lea rax, [rbp + 0x250]
mov rdx, qword [rbp + 0x250]
mov r8, qword [rbp + 0x268]
cmp r8, 0x10
cmovae rax, rdx
movabs r14, 0x7fffffffffffffff
mov rcx, qword [rbp + 0x260]
cmp rcx, 1
jne 0x140019d79
cmp byte [rax], 0x30
jne 0x140019d3f
mov eax, r13d
jmp 0x140019d44
sbb eax, eax
or eax, 1
test eax, eax
jne 0x140019d79
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], send
mov byte [rbp - 0x70], al
xor r8d, r8d
lea rdx, [0x14005a44b]
lea rcx, [rbp - 0x70]
call fcn.14001f770
lea rcx, [rbp - 0x70]
mov ebx, 2
jmp 0x140019dd5
mov rax, r14
sub rax, rcx
cmp rax, 1
jb 0x14001ac3a
lea rax, [rbp + 0x250]
cmp r8, 0x10
cmovae rax, rdx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 1
lea r9, [0x14005b388]
lea r8, [rbp + 0x250]
movzx edx, byte [rbp - 0x78]
lea rcx, [rbp + 0x98]
call fcn.1400245a0
lea rcx, [rbp + 0x98]
mov ebx, 9
mov dword [rsp + 0x50], ebx
lea r8, [rbp + 0x230]
cmp qword [rbp + 0x248], 0x10
cmovae r8, qword [rbp + 0x230]
mov r9, qword [rbp + 0x240]
xor edx, edx
call fcn.1400242a0
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], send
mov byte [rax], 0
or ebx, 0x10
mov rdx, qword [0x1401c77e0]
cmp rdx, 0x10
jb 0x140019e54
mov rcx, qword [0x1401c77c8]
inc rdx
cmp rdx, 0x1000
jb 0x140019e4f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140019ea3
mov rcx, r8
call fcn.14004dbe0
movups xmmword [0x1401c77c8], xmm6
movups xmmword [0x1401c77d8], xmm7
test bl, 2
je 0x140019ebf
and ebx, 0xfffffffd
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x140019eaf
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019eaa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140019eaa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.14004dbe0
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], send
mov byte [rbp - 0x70], 0
test bl, 1
je 0x140019f08
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0x10
jb 0x140019f08
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019f03
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140019f03
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004dbe0
call fcn.140013c10
call fcn.140014120
lea rcx, [0x140012370]
call fcn.140011c30
lea rcx, [0x1400160b0]
call fcn.140011c30
mov qword [rbp + 0xd0], r13
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
mov rdi, qword [0x1401cb728]
lea rsi, [0x1401cb718]
cmp qword [0x1401cb730], 0x10
cmovae rsi, qword [0x1401cb718]
cmp rdi, 0x10
jae 0x140019f77
movups xmm0, xmmword [rsi]
movaps xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe8], socket
jmp 0x140019ff0
mov rbx, rdi
or rbx, 0xf
cmp rbx, r14
cmova rbx, r14
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140019fc4
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001ac40
mov rcx, rax
call fcn.14004de90
mov rcx, rax
test rax, rax
je 0x140019fbd
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140019fd3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140019fd0
call fcn.14004de90
jmp 0x140019fd3
mov rax, r13
mov qword [rbp + 0xd0], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0xe8], rbx
mov qword [rbp + 0xe0], rdi
mov qword [rbp + 0xf0], r13
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x100], xmm0
mov rdi, qword [0x1401c77f8]
mov rsi, r12
cmp qword [0x1401c7800], 0x10
cmovae rsi, qword [0x1401c77e8]
cmp rdi, 0x10
jae 0x14001a040
movups xmm0, xmmword [rsi]
movaps xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x108], socket
jmp 0x14001a0b9
mov rbx, rdi
or rbx, 0xf
cmp rbx, r14
cmova rbx, r14
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14001a08d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001ac46
mov rcx, rax
call fcn.14004de90
mov rcx, rax
test rax, rax
je 0x14001a086
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14001a09c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14001a099
call fcn.14004de90
jmp 0x14001a09c
mov rax, r13
mov qword [rbp + 0xf0], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x108], rbx
mov qword [rbp + 0x100], rdi
mov qword [rbp + 0x110], r13
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x120], xmm0
mov rdi, qword [0x1401cb748]
lea r15, [0x1401cb738]
mov rsi, r15
cmp qword [0x1401cb750], 0x10
cmovae rsi, qword [0x1401cb738]
cmp rdi, 0x10
jae 0x14001a110
movups xmm0, xmmword [rsi]
movaps xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x128], socket
jmp 0x14001a189
mov rbx, rdi
or rbx, 0xf
cmp rbx, r14
cmova rbx, r14
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14001a15d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001ac4c
mov rcx, rax
call fcn.14004de90
mov rcx, rax
test rax, rax
je 0x14001a156
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14001a16c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14001a169
call fcn.14004de90
jmp 0x14001a16c
mov rax, r13
mov qword [rbp + 0x110], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x128], rbx
mov qword [rbp + 0x120], rdi
mov qword [rbp + 0x130], r13
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x140], xmm0
mov rdi, qword [0x1401c77d8]
lea r14, [0x1401c77c8]
mov rsi, r14
cmp qword [0x1401c77e0], 0x10
cmovae rsi, qword [0x1401c77c8]
cmp rdi, 0x10
jae 0x14001a1e3
movups xmm0, xmmword [rsi]
movaps xmmword [rbp + 0x130], xmm0
mov qword [rbp + 0x148], socket
jmp 0x14001a266
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14001a23a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001ac52
mov rcx, rax
call fcn.14004de90
mov rcx, rax
test rax, rax
je 0x14001a233
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14001a249
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14001a246
call fcn.14004de90
jmp 0x14001a249
mov rax, r13
mov qword [rbp + 0x130], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x148], rbx
mov qword [rbp + 0x140], rdi
lea rax, [rbp + 0x150]
mov qword [rbp + 0xb8], rax
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x150]
call fcn.14001d9d0
nop
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0x170]
call fcn.14001d9d0
nop
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x190]
call fcn.14001d9d0
nop
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x1b0]
call fcn.14001d9d0
nop
lea rcx, [rbp + 0x150]
call fcn.14000ccb0
test al, al
je 0x14001ac58
movdqa xmm0, xmmword [str.WqIUKBHLNFN_n]
movdqu xmmword [rbp + 0x98], xmm0
mov dword [rbp + 0xa8], 0x1f1e061d
mov dword [rbp + 0xac], 0x1003912
mov rcx, r13
nop word [rax + rax]
lea eax, [rcx + 0x1e]
xor byte [rbp + rcx + 0x98], al
inc rcx
cmp rcx, 0x16
jb 0x14001a310
mov byte [rbp + 0xaf], 0
lea rcx, [rbp + 0x98]
call fcn.140001970
lea rdx, [0x1401cb718]
lea rcx, [rbp + 0x150]
call fcn.14001d9d0
nop
mov qword [rbp + 0x170], r13
movdqa xmm0, xmmword [0x1400664f0]
movdqa xmmword [rbp + 0x180], xmm0
mov byte [rbp + 0x170], 0
xor r8d, r8d
lea rdx, [0x14005a44b]
lea rcx, [rbp + 0x170]
call fcn.14001f770
nop
mov qword [rbp + 0x190], r13
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1a0], xmm0
mov rdi, qword [0x1401c77f8]
cmp qword [0x1401c7800], 0x10
cmovae r12, qword [0x1401c77e8]
movabs rsi, 0x7fffffffffffffff
cmp rdi, 0x10
jae 0x14001a3d1
movups xmm0, xmmword [r12]
movaps xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a8], socket
jmp 0x14001a44a
mov rbx, rdi
or rbx, 0xf
cmp rbx, rsi
cmova rbx, rsi
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14001a41e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001ac9a
mov rcx, rax
call fcn.14004de90
mov rcx, rax
test rax, rax
je 0x14001a417
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14001a42d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14001a42a
call fcn.14004de90
jmp 0x14001a42d
mov rax, r13
mov qword [rbp + 0x190], rax
lea r8, [rdi + 1]
mov rdx, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x1a8], rbx
mov qword [rbp + 0x1a0], rdi
mov qword [rbp + 0x1b0], r13
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1c0], xmm0
mov rdi, qword [0x1401cb748]
cmp qword [0x1401cb750], 0x10
cmovae r15, qword [0x1401cb738]
cmp rdi, 0x10
jae 0x14001a498
movups xmm0, xmmword [r15]
movaps xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c8], socket
jmp 0x14001a511
mov rbx, rdi
or rbx, 0xf
cmp rbx, rsi
cmova rbx, rsi
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14001a4e5
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001aca0
mov rcx, rax
call fcn.14004de90
mov rcx, rax
test rax, rax
je 0x14001a4de
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14001a4f4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14001a4f1
call fcn.14004de90
jmp 0x14001a4f4
mov rax, r13
mov qword [rbp + 0x1b0], rax
lea r8, [rdi + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x1c8], rbx
mov qword [rbp + 0x1c0], rdi
mov qword [rbp + 0x1d0], r13
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1e0], xmm0
mov rdi, qword [0x1401c77d8]
cmp qword [0x1401c77e0], 0x10
cmovae r14, qword [0x1401c77c8]
cmp rdi, 0x10
jae 0x14001a55f
movups xmm0, xmmword [r14]
movaps xmmword [rbp + 0x1d0], xmm0
mov qword [rbp + 0x1e8], socket
jmp 0x14001a5d8
mov rbx, rdi
or rbx, 0xf
cmp rbx, rsi
cmova rbx, rsi
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14001a5ac
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001aca6
mov rcx, rax
call fcn.14004de90
mov rcx, rax
test rax, rax
je 0x14001a5a5
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14001a5bb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14001a5b8
call fcn.14004de90
jmp 0x14001a5bb
mov rax, r13
mov qword [rbp + 0x1d0], rax
lea r8, [rdi + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x1e8], rbx
mov qword [rbp + 0x1e0], rdi
mov edx, dword [0x1401cb640]
mov rcx, qword [0x1401cb650]
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
mov dword [rsp + 0x40], 0x4454715b
mov dword [rsp + 0x44], 0x406f0350
mov dword [rsp + 0x48], 0x81d5f
mov byte [rsp + 0x4c], 1
mov rcx, r13
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x1e]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 0xb
jb 0x14001a620
mov byte [rsp + 0x4c], 0
lea rcx, [rsp + 0x40]
call fcn.140001970
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
mov rax, qword [rbx]
movsxd rcx, dword [rax + 4]
add rcx, rbx
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp + 0x170]
mov rcx, rbx
call fcn.1400274e0
mov edx, dword [0x1401cb640]
and edx, 0x80
mov rcx, qword [0x1401cb650]
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
lea rax, [rbp - 8]
mov qword [rbp + 0xb8], rax
lea rdx, [rbp + 0x150]
lea rcx, [rbp - 8]
call fcn.14001d9d0
nop
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x18]
call fcn.14001d9d0
nop
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x38]
call fcn.14001d9d0
nop
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x58]
call fcn.14001d9d0
nop
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x78]
call fcn.14001d9d0
nop
lea rcx, [rbp - 8]
call fcn.140010480
test al, al
je 0x14001acac
mov dword [rsp + 0x50], r13d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14001a786
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14001a786
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xa43c78ad
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14001a781
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14001a760
cmp r8d, 0xd503fb62
je 0x14001a78b
test r9d, r9d
jne 0x14001a740
mov rax, qword [rax]
jmp 0x14001a710
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0xfffffff5
call rdx
mov rdi, rax
lea rdx, [rbp + 0x98]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
movsx r8d, word [rbp + 0x9a]
movsx ecx, word [rbp + 0x98]
imul r8d, ecx
lea rax, [rbp + 0xb8]
mov qword [rsp + 0x20], rax
mov ebx, dword [rsp + 0x50]
mov r9d, ebx
mov dl, 0x20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FillConsoleOutputCharacterA]
movsx r8d, word [rbp + 0x9a]
movsx eax, word [rbp + 0x98]
imul r8d, eax
mov edx, 7
lea rax, [rbp + 0xb8]
mov qword [rsp + 0x20], rax
mov r9d, ebx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FillConsoleOutputAttribute]
mov edx, ebx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
call fcn.140019160
test al, al
je 0x14001abf1
movdqa xmm0, xmmword [0x1400667e0]
movdqu xmmword [rbp - 0x70], xmm0
mov dword [rbp - 0x60], 0x1f435c4b
mov dword [rbp - 0x5c], 0x3e131c
mov byte [rbp - 0x58], 1
lea rcx, [rbp - 0x70]
call fcn.1400197f0
mov rcx, rax
call fcn.140001970
mov dword [rbp + 0xc0], r13d
nop dword [rax]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14001a906
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14001a906
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x33de9e13
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14001a901
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14001a8e0
cmp r8d, 0xc7b44c57
je 0x14001a90b
test r9d, r9d
jne 0x14001a8c0
mov rax, qword [rax]
jmp 0x14001a890
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
mov dword [rsp + 0x68], 0x6e6c5e48
mov dword [rsp + 0x6c], 0x716a6270
mov dword [rsp + 0x70], 0x1000706
lea rcx, [rsp + 0x68]
call fcn.140010420
mov rdx, rax
xor ecx, ecx
call r8
mov rsi, rax
test rax, rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
jne 0x14001aa50
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14001a9e6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14001a9e6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov ecx, dword [rcx + rbx]
add rcx, r10
mov r8d, 0x3fe0b1c2
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x14001a9e1
nop dword [rax]
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x14001a9c0
cmp r8d, 0xec7963f6
je 0x14001a9eb
test r9d, r9d
jne 0x14001a9a0
mov rax, qword [rax]
jmp 0x14001a970
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov ebx, dword [rcx + rdx*4]
add rbx, r10
mov dword [rsp + 0x40], 0x6e6c5e48
mov dword [rsp + 0x44], 0x716a6270
mov dword [rsp + 0x48], 0x1000706
lea rcx, [rsp + 0x40]
call fcn.140010420
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
lea rdx, [rbp + 0xc0]
mov rcx, rax
call rbx
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14001a870
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14001aac6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14001aac6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x940e0642
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14001aac1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14001aaa0
cmp r8d, 0x1c8ee876
je 0x14001aacb
test r9d, r9d
jne 0x14001aa80
mov rax, qword [rax]
jmp 0x14001aa50
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
lea rdx, [rbp + 0xc4]
mov rcx, rsi
call r8
mov dword [rsp + 0x78], 0x444a7157
mov dword [rsp + 0x7c], 0x4b4d5741
mov dword [rbp - 0x80], 0x9060941
mov word [rbp - 0x7c], 0x20
mov byte [rbp - 0x7a], 1
lea rcx, [rsp + 0x78]
call fcn.14001acf0
mov rcx, rax
call fcn.140001970
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [rbp + 0xc4]
call fcn.1400186d0
mov edi, eax
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, eax
lea rcx, [rbp - 0x50]
call fcn.140016af0
mov r8, rax
mov dword [rsp + 0x58], 0x55416b4d
mov dword [rsp + 0x5c], 0x51e5057
mov word [rsp + 0x60], 0x100
lea rcx, [rsp + 0x58]
call fcn.1400103f0
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.140020cf0
nop
mov rdx, rax
mov rcx, rbx
call fcn.140021520
lea rdx, [0x140021540]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp - 0x28]
call fcn.14001d930
nop
lea rcx, [rbp - 0x50]
call fcn.14001d930
test edi, edi
je 0x14001abb6
call fcn.140018050
mov rcx, qword [0x1401cb658]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.140019820
mov ecx, 0x3a98
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14001abdf
movdqa xmm0, xmmword [0x140066790]
movdqu xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x140066620]
movdqu xmmword [rbp - 0x40], xmm1
mov dword [rbp - 0x30], 0x1003510
lea rcx, [rbp - 0x50]
call fcn.140010450
mov rcx, rax
call fcn.140001970
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140011dc0
nop
call fcn.140011dc0
nop
call fcn.140001bd0
int3
call fcn.140001b30
nop
call fcn.140001b30
nop
call fcn.140001b30
nop
call fcn.140001b30
nop
mov dword [rsp + 0x40], 0x48585a14
mov dword [rsp + 0x44], 0x424a4a56
mov dword [rsp + 0x48], 0x23080908
mov word [rsp + 0x4c], 0x100
lea rcx, [rsp + 0x40]
call fcn.14000ab90
mov rcx, rax
call fcn.140001970
mov ecx, 0xdac
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140011dc0
nop
call fcn.140001b30
nop
call fcn.140001b30
nop
call fcn.140001b30
nop
mov dword [rsp + 0x40], 0x48585a14
mov dword [rsp + 0x44], 0x424a4a56
mov dword [rsp + 0x48], 0x23080908
mov word [rsp + 0x4c], 0x100
lea rcx, [rsp + 0x40]
call fcn.14000ab90
mov rcx, rax
call fcn.140001970
mov ecx, 0xdac
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140011dc0
int3