Function at 0x140001620
Capabilities:
Contain obfuscated stackstrings
Create http request
Encode data using xor
Execute command
Read data from internet
Receive data
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1098]
mov eax, 0x1198
call fcn.140005a30
sub rsp, rax
mov byte [rbp + 0x10e0], 0x26
mov al, 0x4b
mov cl, 0x47
mov dl, 0x4f
mov r8b, 0x48
xor r9d, r9d
xor al, 0x26
mov byte [rbp + 0x10e1], al
xor cl, 0x26
mov byte [rbp + 0x10e2], cl
xor dl, 0x26
mov byte [rbp + 0x10e3], dl
xor r8b, 0x26
mov byte [rbp + 0x10e4], r8b
mov byte [rbp + 0x10e5], r9b
lea rcx, [rbp + 0x10e1]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectBeginUltra]
mov dword [rbp - 0x80], 0x76617204
mov dword [rbp - 0x7c], 0x6a6b6d77
mov word [rbp - 0x78], 0x2b
xor esi, esi
mov edi, esi
nop word [rax + rax]
mov rdx, rdi
lea rcx, [rbp - 0x7f]
call fcn.1400011d0
movzx ebx, byte [rbp - 0x80]
xor bl, byte [rax]
mov rdx, rdi
lea rcx, [rbp - 0x7f]
call fcn.1400011d0
mov byte [rax], bl
inc rdi
cmp rdi, 8
jb 0x1400016b0
mov edx, 8
lea rcx, [rbp - 0x7f]
call fcn.1400011d0
mov byte [rax], sil
lea rcx, [rbp - 0x7f]
call fcn.1400011c0
mov r8, rax
lea rcx, [rbp + 0x10]
call fcn.140002eb0
nop
mov byte [rbp + 0x10e0], 0x6f
mov al, 0x2e
mov cl, 0x3f
mov dl, 0x26
xor r8d, r8d
xor al, 0x6f
mov byte [rbp + 0x10e1], al
xor cl, 0x6f
mov byte [rbp + 0x10e2], cl
xor dl, 0x6f
mov byte [rbp + 0x10e3], dl
mov byte [rbp + 0x10e4], r8b
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea edx, [r8 + 1]
lea rcx, [rbp + 0x10e1]
call qword [sym.imp.WININET.dll_InternetOpenA]
mov rbx, rax
test rax, rax
jne 0x140001964
mov byte [rsp + 0x30], 0x16
mov al, 0x75
mov cl, 0x79
mov dl, 0x7a
movzx r8d, cl
mov r9b, 0x64
mov r10b, 0x36
mov r11b, 0x74
xor al, 0x16
mov byte [rsp + 0x31], al
xor cl, 0x16
mov byte [rsp + 0x32], cl
xor dl, 0x16
mov byte [rsp + 0x33], dl
xor r8b, 0x16
mov byte [rsp + 0x34], r8b
xor r9b, 0x16
mov byte [rsp + 0x35], r9b
xor r10b, 0x16
mov byte [rsp + 0x36], r10b
xor r11b, 0x16
mov byte [rsp + 0x37], r11b
mov byte [rsp + 0x38], bl
lea rcx, [rsp + 0x31]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm1, xmmword [0x140007030]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x140007070]
movdqu xmmword [rsp + 0x60], xmm2
mov cl, 0x37
mov r8b, 0x3c
mov r9b, 0x3a
mov r10b, 0x2d
mov r11b, 0x30
mov bl, 0x36
movzx edi, cl
mov r14b, 0x78
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd edx, xmm1
xor al, dl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], dl
xor byte [rsp + 0x53], dl
xor byte [rsp + 0x54], dl
xor byte [rsp + 0x55], dl
xor byte [rsp + 0x56], dl
xor byte [rsp + 0x57], dl
xor byte [rsp + 0x58], dl
xor byte [rsp + 0x59], dl
xor byte [rsp + 0x5a], dl
xor byte [rsp + 0x5b], dl
xor byte [rsp + 0x5c], dl
xor byte [rsp + 0x5d], dl
xor byte [rsp + 0x5e], dl
xor byte [rsp + 0x5f], dl
movd eax, xmm2
xor al, dl
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], dl
xor byte [rsp + 0x62], dl
xor byte [rsp + 0x63], dl
xor byte [rsp + 0x64], dl
xor byte [rsp + 0x65], dl
xor byte [rsp + 0x66], dl
xor byte [rsp + 0x67], dl
xor byte [rsp + 0x68], dl
xor byte [rsp + 0x69], dl
xor byte [rsp + 0x6a], dl
xor byte [rsp + 0x6b], dl
xor byte [rsp + 0x6c], dl
xor byte [rsp + 0x6d], dl
xor byte [rsp + 0x6e], dl
xor byte [rsp + 0x6f], dl
xor cl, dl
mov byte [rsp + 0x70], cl
xor r8b, dl
mov byte [rsp + 0x71], r8b
xor r9b, dl
mov byte [rsp + 0x72], r9b
xor r10b, dl
mov byte [rsp + 0x73], r10b
xor r11b, dl
mov byte [rsp + 0x74], r11b
xor bl, dl
mov byte [rsp + 0x75], bl
xor dil, dl
mov byte [rsp + 0x76], dil
xor r14b, dl
mov byte [rsp + 0x77], r14b
mov byte [rsp + 0x78], 0
lea rdx, [rsp + 0x51]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003010
lea rdx, [0x1400031e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x10e0], 0x1c081969
mov word [rbp + 0x10e4], 0xc1a
xor eax, eax
mov byte [rbp + 0x10e6], al
nop dword [rax + rax]
mov rdx, rsi
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
movzx ebx, byte [rax]
xor bl, byte [rbp + 0x10e0]
mov rdx, rsi
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
mov byte [rax], bl
inc rsi
cmp rsi, 5
jb 0x140001900
mov edx, 5
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
mov byte [rax], 0
lea rcx, [rbp + 0x10e1]
call fcn.1400011c0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
lea rdx, [rbp + 0x10]
cmp qword [rbp + 0x28], 0x10
cmovae rdx, qword [rbp + 0x10]
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov r14, rax
test rax, rax
jne 0x140001bc4
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov byte [rsp + 0x30], 0x1b
mov al, 0x78
mov cl, 0x74
mov dl, 0x77
movzx r8d, cl
mov r9b, 0x69
mov r10b, 0x3b
mov r11b, 0x79
xor ebx, ebx
xor al, 0x1b
mov byte [rsp + 0x31], al
xor cl, 0x1b
mov byte [rsp + 0x32], cl
xor dl, 0x1b
mov byte [rsp + 0x33], dl
xor r8b, 0x1b
mov byte [rsp + 0x34], r8b
xor r9b, 0x1b
mov byte [rsp + 0x35], r9b
xor r10b, 0x1b
mov byte [rsp + 0x36], r10b
xor r11b, 0x1b
mov byte [rsp + 0x37], r11b
mov byte [rsp + 0x38], bl
lea rcx, [rsp + 0x31]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm1, xmmword [0x140007080]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x140007050]
movdqu xmmword [rsp + 0x60], xmm2
mov cl, 0x2b
mov r8b, 0x20
mov r9b, 0x26
mov r10b, 0x31
mov r11b, 0x2c
mov bl, 0x2a
movzx edi, cl
mov r14b, 0x64
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd edx, xmm1
xor al, dl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], dl
xor byte [rsp + 0x53], dl
xor byte [rsp + 0x54], dl
xor byte [rsp + 0x55], dl
xor byte [rsp + 0x56], dl
xor byte [rsp + 0x57], dl
xor byte [rsp + 0x58], dl
xor byte [rsp + 0x59], dl
xor byte [rsp + 0x5a], dl
xor byte [rsp + 0x5b], dl
xor byte [rsp + 0x5c], dl
xor byte [rsp + 0x5d], dl
xor byte [rsp + 0x5e], dl
xor byte [rsp + 0x5f], dl
movd eax, xmm2
xor al, dl
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], dl
xor byte [rsp + 0x62], dl
xor byte [rsp + 0x63], dl
xor byte [rsp + 0x64], dl
xor byte [rsp + 0x65], dl
xor byte [rsp + 0x66], dl
xor byte [rsp + 0x67], dl
xor byte [rsp + 0x68], dl
xor byte [rsp + 0x69], dl
xor byte [rsp + 0x6a], dl
xor byte [rsp + 0x6b], dl
xor byte [rsp + 0x6c], dl
xor byte [rsp + 0x6d], dl
xor byte [rsp + 0x6e], dl
xor byte [rsp + 0x6f], dl
xor cl, dl
mov byte [rsp + 0x70], cl
xor r8b, dl
mov byte [rsp + 0x71], r8b
xor r9b, dl
mov byte [rsp + 0x72], r9b
xor r10b, dl
mov byte [rsp + 0x73], r10b
xor r11b, dl
mov byte [rsp + 0x74], r11b
xor bl, dl
mov byte [rsp + 0x75], bl
xor dil, dl
mov byte [rsp + 0x76], dil
xor r14b, dl
mov byte [rsp + 0x77], r14b
mov byte [rsp + 0x78], 0
lea rdx, [rsp + 0x51]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003010
lea rdx, [0x1400031e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x10e0], 0x17031262
mov word [rbp + 0x10e4], 0x711
xor eax, eax
mov byte [rbp + 0x10e6], al
nop dword [rax]
mov rdx, rsi
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
movzx ebx, byte [rax]
xor bl, byte [rbp + 0x10e0]
mov rdx, rsi
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
mov byte [rax], bl
inc rsi
cmp rsi, 5
jb 0x140001b60
mov edx, 5
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
mov byte [rax], 0
lea rcx, [rbp + 0x10e1]
call fcn.1400011c0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea r9, [rbp + 0x10f0]
mov r15d, 0x1000
mov r8d, r15d
lea rdx, [rbp + 0x90]
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x140001c79
nop dword [rax]
mov eax, dword [rbp + 0x10f0]
test eax, eax
je 0x140001c79
mov edi, eax
mov rcx, qword [rbp - 0x20]
mov rdx, qword [rbp - 0x18]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x140001c3f
lea rax, [rdi + rcx]
mov qword [rbp - 0x20], rax
lea rbx, [rbp - 0x30]
cmp rdx, 0x10
cmovae rbx, qword [rbp - 0x30]
add rbx, rcx
mov r8d, edi
lea rdx, [rbp + 0x90]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x140001c57
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x90]
mov rdx, rdi
lea rcx, [rbp - 0x30]
call fcn.140003220
lea r9, [rbp + 0x10f0]
mov r8d, r15d
lea rdx, [rbp + 0x90]
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x140001bf0
lea rcx, [rbp + 0x30]
call fcn.140002bc0
nop
lea rax, [rbp - 0x30]
cmp qword [rbp - 0x18], 0x10
cmovae rax, qword [rbp - 0x30]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x30]
call fcn.1400035c0
cmp dword [rbp + 0x80], 0
je 0x140001e44
mov byte [rsp + 0x30], 0x5a
mov al, 0x39
mov cl, 0x35
mov dl, 0x36
movzx r8d, cl
mov r9b, 0x28
mov r10b, 0x7a
mov r11b, 0x38
xor ebx, ebx
xor al, 0x5a
mov byte [rsp + 0x31], al
xor cl, 0x5a
mov byte [rsp + 0x32], cl
xor dl, 0x5a
mov byte [rsp + 0x33], dl
xor r8b, 0x5a
mov byte [rsp + 0x34], r8b
xor r9b, 0x5a
mov byte [rsp + 0x35], r9b
xor r10b, 0x5a
mov byte [rsp + 0x36], r10b
xor r11b, 0x5a
mov byte [rsp + 0x37], r11b
mov byte [rsp + 0x38], bl
lea rcx, [rsp + 0x31]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x140007020]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x1641060f
mov dword [rsp + 0x44], 0x41150f04
mov dword [rsp + 0x48], 0xf0e1316
mov word [rsp + 0x4c], 0x4006
xor eax, eax
mov byte [rsp + 0x4e], al
mov rdi, rsi
nop dword [rax]
nop dword [rax + rax]
mov rdx, rdi
lea rcx, [rsp + 0x31]
call fcn.1400011d0
movzx ebx, byte [rsp + 0x30]
xor bl, byte [rax]
mov rdx, rdi
lea rcx, [rsp + 0x31]
call fcn.1400011d0
mov byte [rax], bl
inc rdi
cmp rdi, 0x1d
jb 0x140001d60
mov edx, 0x1d
lea rcx, [rsp + 0x31]
call fcn.1400011d0
mov byte [rax], 0
lea rcx, [rsp + 0x31]
call fcn.1400011c0
mov rdx, rax
mov rcx, r14
call fcn.140003010
lea rdx, [0x1400031e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x10e0], 0x20342555
mov word [rbp + 0x10e4], 0x3026
xor eax, eax
mov byte [rbp + 0x10e6], al
nop
mov rdx, rsi
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
movzx ebx, byte [rbp + 0x10e0]
xor bl, byte [rax]
mov rdx, rsi
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
mov byte [rax], bl
inc rsi
cmp rsi, 5
jb 0x140001de0
mov edx, 5
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
mov byte [rax], 0
lea rcx, [rbp + 0x10e1]
call fcn.1400011c0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp word [rbp + 0x3e], 3
jne 0x140002954
mov dword [rbp + 0x10e0], 0x6e7b7c0f
mov dword [rbp + 0x10e4], 0x7c7a7b
mov rdi, rsi
nop word [rax + rax]
mov rdx, rdi
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
movzx ebx, byte [rbp + 0x10e0]
xor bl, byte [rax]
mov rdx, rdi
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
mov byte [rax], bl
inc rdi
cmp rdi, 6
jb 0x140001e70
mov edx, 6
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
mov byte [rax], 0
lea rcx, [rbp + 0x10e1]
call fcn.1400011c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov ecx, 0x405
mov word [rsp + 0x3e], cx
mov r13, qword [rsp + 0x38]
movabs rcx, 0xffff000000000000
and r13, rcx
or r13, rax
mov qword [rsp + 0x38], r13
mov r12, r13
shr r12, 0x30
mov r15, 0xffffffffffffffff
mov r14, r15
nop
inc r14
cmp byte [rax + r14], 0
jne 0x140001f00
mov dword [rsp + 0x30], r14d
movabs r9, 0xffffffffffff
mov rbx, qword [rbp + 0x38]
and rbx, r9
mov edi, dword [rbp + 0x30]
shl rdi, 5
add rdi, rbx
cmp rbx, rdi
je 0x140002954
mov esi, 0x1000
and r12w, si
nop dword [rax]
test r12w, r12w
je 0x140001f56
movsx eax, byte [rsp + 0x3d]
mov r8d, 0xd
sub r8d, eax
jmp 0x140001f59
mov r8d, r14d
mov edx, esi
and dx, word [rbx + 0xe]
je 0x140001f6e
movsx eax, byte [rbx + 0xd]
mov ecx, 0xd
sub ecx, eax
jmp 0x140001f70
mov ecx, dword [rbx]
cmp r8d, ecx
jne 0x140001fb6
test r12w, r12w
je 0x140001f82
lea rcx, [rsp + 0x30]
jmp 0x140001f88
mov rcx, r13
and rcx, r9
test dx, dx
je 0x140001f92
mov rdx, rbx
jmp 0x140001f99
mov rdx, qword [rbx + 8]
and rdx, r9
cmp rcx, rdx
je 0x140001fbf
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete al
test al, al
jne 0x140001fbf
movabs r9, 0xffffffffffff
add rbx, 0x20
cmp rbx, rdi
jne 0x140001f40
xor esi, esi
cmp rbx, rdi
je 0x140002954
mov dword [rbp + 0x10e0], 0x34212655
mov dword [rbp + 0x10e4], 0x262021
mov edi, esi
mov rdx, rdi
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
movzx ebx, byte [rax]
xor bl, byte [rbp + 0x10e0]
mov rdx, rdi
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
mov byte [rax], bl
inc rdi
cmp rdi, 6
jb 0x140001fe0
mov edx, 6
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
mov byte [rax], 0
lea rcx, [rbp + 0x10e1]
call fcn.1400011c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov r12d, 0x405
mov word [rsp + 0x3e], r12w
mov rcx, qword [rsp + 0x38]
movabs r13, 0xffff000000000000
and rcx, r13
or rcx, rax
mov qword [rsp + 0x38], rcx
mov rcx, r15
inc rcx
cmp byte [rax + rcx], 0
jne 0x140002063
mov dword [rsp + 0x30], ecx
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x30]
call fcn.140003420
movzx ecx, word [rax + 0xe]
shr cx, 0xa
test cl, 1
je 0x140002954
mov dword [rbp + 0x10e0], 0x47525526
mov dword [rbp + 0x10e4], 0x555352
mov rdi, rsi
nop word [rax + rax]
mov rdx, rdi
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
movzx ebx, byte [rax]
xor bl, byte [rbp + 0x10e0]
mov rdx, rdi
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
mov byte [rax], bl
inc rdi
cmp rdi, 6
jb 0x1400020b0
mov edx, 6
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
mov byte [rax], 0
lea rcx, [rbp + 0x10e1]
call fcn.1400011c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov word [rsp + 0x3e], r12w
mov rcx, qword [rsp + 0x38]
and rcx, r13
or rcx, rax
mov qword [rsp + 0x38], rcx
mov rcx, r15
inc rcx
cmp byte [rax + rcx], 0
jne 0x140002123
mov dword [rsp + 0x30], ecx
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x30]
call fcn.140003420
mov edi, 0x1000
movabs r14, 0xffffffffffff
test word [rax + 0xe], di
jne 0x14000215a
mov rax, qword [rax + 8]
and rax, r14
mov qword [rbp - 0x10], rsi
mov qword [rbp], rsi
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x140002171
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.140002d50
nop
mov byte [rbp - 0x80], 0x3c
mov al, 0x4a
mov cl, 0x59
mov dl, 0x4e
mov r8b, 0x4f
mov r9b, 0x55
mov r10b, 0x53
mov r11b, 0x52
xor ebx, ebx
xor al, 0x3c
mov byte [rbp - 0x7f], al
xor cl, 0x3c
mov byte [rbp - 0x7e], cl
xor dl, 0x3c
mov byte [rbp - 0x7d], dl
xor r8b, 0x3c
mov byte [rbp - 0x7c], r8b
xor r9b, 0x3c
mov byte [rbp - 0x7b], r9b
xor r10b, 0x3c
mov byte [rbp - 0x7a], r10b
xor r11b, 0x3c
mov byte [rbp - 0x79], r11b
mov byte [rbp - 0x78], bl
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov word [rsp + 0x3e], r12w
mov rax, qword [rsp + 0x38]
and rax, r13
lea rcx, [rbp - 0x7f]
or rax, rcx
mov qword [rsp + 0x38], rax
lea rcx, [rbp - 0x7f]
mov rax, r15
nop dword [rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x140002200
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x30]
call fcn.140003420
test word [rax + 0xe], di
jne 0x140002227
mov rax, qword [rax + 8]
and rax, r14
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x140002242
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.140002d50
nop
mov byte [rsp + 0x30], 0x2e
mov al, 0x5d
mov cl, 0x5b
mov dl, 0x4d
movzx r8d, dl
mov r9b, 0x4b
movzx r10d, al
movzx r11d, al
xor ebx, ebx
xor al, 0x2e
mov byte [rsp + 0x31], al
xor cl, 0x2e
mov byte [rsp + 0x32], cl
xor dl, 0x2e
mov byte [rsp + 0x33], dl
xor r8b, 0x2e
mov byte [rsp + 0x34], r8b
xor r9b, 0x2e
mov byte [rsp + 0x35], r9b
xor r10b, 0x2e
mov byte [rsp + 0x36], r10b
xor r11b, 0x2e
mov byte [rsp + 0x37], r11b
mov byte [rsp + 0x38], bl
lea rcx, [rsp + 0x31]
mov rax, r15
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x1400022c0
lea rcx, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
setae byte [rbp + 0x10e8]
mov r13, qword [rbp - 0x10]
cmovae rcx, r13
mov r8, qword [rbp]
cmp r8, rax
jne 0x1400027d4
lea rdx, [rsp + 0x31]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400027d4
mov dword [rbp + 0x10f8], 0x554b5465
mov word [rbp + 0x10fc], 0x554b
xor eax, eax
mov byte [rbp + 0x10fe], al
mov rdi, rsi
nop dword [rax]
mov rdx, rdi
lea rcx, [rbp + 0x10f9]
call fcn.1400011d0
movzx ebx, byte [rbp + 0x10f8]
xor bl, byte [rax]
mov rdx, rdi
lea rcx, [rbp + 0x10f9]
call fcn.1400011d0
mov byte [rax], bl
inc rdi
cmp rdi, 5
jb 0x140002320
mov edx, 5
lea rcx, [rbp + 0x10f9]
call fcn.1400011d0
mov byte [rax], 0
lea rcx, [rbp + 0x10f9]
call fcn.1400011c0
inc r15
cmp byte [rax + r15], 0
jne 0x140002372
lea rcx, [rsp + 0x50]
mov r12, qword [rsp + 0x68]
cmp r12, 0x10
setae byte [rbp + 0x10e0]
mov r14, qword [rsp + 0x50]
cmovae rcx, r14
mov r8, qword [rsp + 0x60]
cmp r8, r15
jne 0x1400025ad
mov rdx, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400025ad
mov byte [rsp + 0x30], 0x1d
mov al, 0x5e
mov cl, 0x72
mov dl, 0x73
movzx r8d, dl
mov r9b, 0x78
mov r10b, 0x7e
mov r11b, 0x69
movzx ebx, r9b
mov dil, 0x79
xor r15d, r15d
xor al, 0x1d
mov byte [rsp + 0x31], al
xor cl, 0x1d
mov byte [rsp + 0x32], cl
xor dl, 0x1d
mov byte [rsp + 0x33], dl
xor r8b, 0x1d
mov byte [rsp + 0x34], r8b
xor r9b, 0x1d
mov byte [rsp + 0x35], r9b
xor r10b, 0x1d
mov byte [rsp + 0x36], r10b
xor r11b, 0x1d
mov byte [rsp + 0x37], r11b
xor bl, 0x1d
mov byte [rsp + 0x38], bl
xor dil, 0x1d
mov byte [rsp + 0x39], dil
mov byte [rsp + 0x3a], r15b
lea rdx, [rsp + 0x31]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003010
lea rdx, [0x1400031e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.1400013b0
mov byte [rbp + 0x10f8], 0x44
mov al, 0x27
mov cl, 0x28
mov dl, 0x37
xor r8d, r8d
xor al, 0x44
mov byte [rbp + 0x10f9], al
xor cl, 0x44
mov byte [rbp + 0x10fa], cl
xor dl, 0x44
mov byte [rbp + 0x10fb], dl
mov byte [rbp + 0x10fc], r8b
lea rcx, [rbp + 0x10f9]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov ebx, 0x1000
cmp byte [rbp + 0x10e0], r15b
je 0x1400024cc
lea rdx, [r12 + 1]
mov rax, r14
cmp rdx, rbx
jb 0x1400024c3
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400024c3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.14000510c
nop
cmp byte [rbp + 0x10e8], 0
je 0x140002509
mov rdx, qword [rbp + 8]
inc rdx
mov rax, r13
cmp rdx, rbx
jb 0x140002500
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002500
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r13
call fcn.14000510c
nop
lea rcx, [rbp + 0x30]
call fcn.140002ae0
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14000254d
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, rbx
jb 0x140002548
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002548
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000510c
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x140002597
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, rbx
jb 0x140002592
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002592
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000510c
xor eax, eax
add rsp, 0x1198
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov byte [rsp + 0x30], 4
mov al, 0x67
mov cl, 0x6b
mov dl, 0x68
movzx r8d, cl
mov r9b, 0x76
mov r10b, 0x24
mov r11b, 0x66
xor ebx, ebx
xor al, 4
mov byte [rsp + 0x31], al
xor cl, 4
mov byte [rsp + 0x32], cl
xor dl, 4
mov byte [rsp + 0x33], dl
xor r8b, 4
mov byte [rsp + 0x34], r8b
xor r9b, 4
mov byte [rsp + 0x35], r9b
xor r10b, 4
mov byte [rsp + 0x36], r10b
xor r11b, 4
mov byte [rsp + 0x37], r11b
mov byte [rsp + 0x38], bl
lea rcx, [rsp + 0x31]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm1, xmmword [0x1400070b0]
movdqu xmmword [rbp - 0x76], xmm1
movdqa xmm2, xmmword [0x1400070d0]
movdqu xmmword [rbp - 0x66], xmm2
movdqa xmm3, xmmword [0x1400070e0]
movdqu xmmword [rbp - 0x56], xmm3
movdqa xmm4, xmmword [0x1400070a0]
movdqu xmmword [rbp - 0x46], xmm4
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd edx, xmm1
xor al, dl
mov byte [rbp - 0x75], al
xor byte [rbp - 0x74], dl
xor byte [rbp - 0x73], dl
xor byte [rbp - 0x72], dl
xor byte [rbp - 0x71], dl
xor byte [rbp - 0x70], dl
xor byte [rbp - 0x6f], dl
xor byte [rbp - 0x6e], dl
xor byte [rbp - 0x6d], dl
xor byte [rbp - 0x6c], dl
xor byte [rbp - 0x6b], dl
xor byte [rbp - 0x6a], dl
xor byte [rbp - 0x69], dl
xor byte [rbp - 0x68], dl
xor byte [rbp - 0x67], dl
movd eax, xmm2
xor al, dl
mov byte [rbp - 0x66], al
xor byte [rbp - 0x65], dl
xor byte [rbp - 0x64], dl
xor byte [rbp - 0x63], dl
xor byte [rbp - 0x62], dl
xor byte [rbp - 0x61], dl
xor byte [rbp - 0x60], dl
xor byte [rbp - 0x5f], dl
xor byte [rbp - 0x5e], dl
xor byte [rbp - 0x5d], dl
xor byte [rbp - 0x5c], dl
xor byte [rbp - 0x5b], dl
xor byte [rbp - 0x5a], dl
xor byte [rbp - 0x59], dl
xor byte [rbp - 0x58], dl
xor byte [rbp - 0x57], dl
movd eax, xmm3
xor al, dl
mov byte [rbp - 0x56], al
xor byte [rbp - 0x55], dl
xor byte [rbp - 0x54], dl
xor byte [rbp - 0x53], dl
xor byte [rbp - 0x52], dl
xor byte [rbp - 0x51], dl
xor byte [rbp - 0x50], dl
xor byte [rbp - 0x4f], dl
xor byte [rbp - 0x4e], dl
xor byte [rbp - 0x4d], dl
xor byte [rbp - 0x4c], dl
xor byte [rbp - 0x4b], dl
xor byte [rbp - 0x4a], dl
xor byte [rbp - 0x49], dl
xor byte [rbp - 0x48], dl
xor byte [rbp - 0x47], dl
movd eax, xmm4
xor al, dl
mov byte [rbp - 0x46], al
xor byte [rbp - 0x45], dl
xor byte [rbp - 0x44], dl
xor byte [rbp - 0x43], dl
xor byte [rbp - 0x42], dl
xor byte [rbp - 0x41], dl
xor byte [rbp - 0x40], dl
xor byte [rbp - 0x3f], dl
xor byte [rbp - 0x3e], dl
xor byte [rbp - 0x3d], dl
xor byte [rbp - 0x3c], dl
xor byte [rbp - 0x3b], dl
xor byte [rbp - 0x3a], dl
xor byte [rbp - 0x39], dl
xor byte [rbp - 0x38], dl
xor byte [rbp - 0x37], dl
mov byte [rbp - 0x36], bl
lea rdx, [rbp - 0x75]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003010
lea rdx, [0x1400031e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x10e0], 0x43574636
mov word [rbp + 0x10e4], 0x5345
xor eax, eax
mov byte [rbp + 0x10e6], al
nop dword [rax]
nop word [rax + rax]
mov rdx, rsi
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
movzx ebx, byte [rbp + 0x10e0]
xor bl, byte [rax]
mov rdx, rsi
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
mov byte [rax], bl
inc rsi
cmp rsi, 5
jb 0x140002770
mov edx, 5
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
mov byte [rax], 0
lea rcx, [rbp + 0x10e1]
call fcn.1400011c0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov byte [rsp + 0x30], 0x7e
mov al, 0x1d
mov cl, 0x11
mov dl, 0x12
movzx r8d, cl
mov r9b, 0xc
mov r10b, 0x5e
mov r11b, 0x1c
xor al, 0x7e
mov byte [rsp + 0x31], al
xor cl, 0x7e
mov byte [rsp + 0x32], cl
xor dl, 0x7e
mov byte [rsp + 0x33], dl
xor r8b, 0x7e
mov byte [rsp + 0x34], r8b
xor r9b, 0x7e
mov byte [rsp + 0x35], r9b
xor r10b, 0x7e
mov byte [rsp + 0x36], r10b
xor r11b, 0x7e
mov byte [rsp + 0x37], r11b
mov byte [rsp + 0x38], bl
lea rcx, [rsp + 0x31]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x140007040]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x3760272e
mov dword [rsp + 0x44], 0x60342e25
mov dword [rsp + 0x48], 0x2e2f3237
mov word [rsp + 0x4c], 0x6127
xor eax, eax
mov byte [rsp + 0x4e], al
mov rdi, rsi
mov rdx, rdi
lea rcx, [rsp + 0x31]
call fcn.1400011d0
movzx ebx, byte [rsp + 0x30]
xor bl, byte [rax]
mov rdx, rdi
lea rcx, [rsp + 0x31]
call fcn.1400011d0
mov byte [rax], bl
inc rdi
cmp rdi, 0x1d
jb 0x140002870
mov edx, 0x1d
lea rcx, [rsp + 0x31]
call fcn.1400011d0
mov byte [rax], 0
lea rcx, [rsp + 0x31]
call fcn.1400011c0
mov rdx, rax
mov rcx, r14
call fcn.140003010
lea rdx, [0x1400031e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x10e0], 0x1c081969
mov word [rbp + 0x10e4], 0xc1a
xor eax, eax
mov byte [rbp + 0x10e6], al
nop
mov rdx, rsi
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
movzx ebx, byte [rbp + 0x10e0]
xor bl, byte [rax]
mov rdx, rsi
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
mov byte [rax], bl
inc rsi
cmp rsi, 5
jb 0x1400028f0
mov edx, 5
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
mov byte [rax], 0
lea rcx, [rbp + 0x10e1]
call fcn.1400011c0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov byte [rsp + 0x30], 0x4d
mov al, 0x2e
mov cl, 0x22
mov dl, 0x21
movzx r8d, cl
mov r9b, 0x3f
mov r10b, 0x6d
mov r11b, 0x2f
xor ebx, ebx
xor al, 0x4d
mov byte [rsp + 0x31], al
xor cl, 0x4d
mov byte [rsp + 0x32], cl
xor dl, 0x4d
mov byte [rsp + 0x33], dl
xor r8b, 0x4d
mov byte [rsp + 0x34], r8b
xor r9b, 0x4d
mov byte [rsp + 0x35], r9b
xor r10b, 0x4d
mov byte [rsp + 0x36], r10b
xor r11b, 0x4d
mov byte [rsp + 0x37], r11b
mov byte [rsp + 0x38], bl
lea rcx, [rsp + 0x31]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r14, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x140007130]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x6631767f
mov dword [rsp + 0x44], 0x31657f74
mov dword [rsp + 0x48], 0x7f7e6366
mov word [rsp + 0x4c], 0x3076
xor eax, eax
mov byte [rsp + 0x4e], al
mov rdi, rsi
mov rdx, rdi
lea rcx, [rsp + 0x31]
call fcn.1400011d0
movzx ebx, byte [rax]
xor bl, byte [rsp + 0x30]
mov rdx, rdi
lea rcx, [rsp + 0x31]
call fcn.1400011d0
mov byte [rax], bl
inc rdi
cmp rdi, 0x1d
jb 0x1400029f2
mov edx, 0x1d
lea rcx, [rsp + 0x31]
call fcn.1400011d0
mov byte [rax], 0
lea rcx, [rsp + 0x31]
call fcn.1400011c0
mov rdx, rax
mov rcx, r14
call fcn.140003010
lea rdx, [0x1400031e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x10e0], 0x40544535
mov word [rbp + 0x10e4], 0x5046
xor eax, eax
mov byte [rbp + 0x10e6], al
mov rdx, rsi
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
movzx ebx, byte [rax]
xor bl, byte [rbp + 0x10e0]
mov rdx, rsi
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
mov byte [rax], bl
inc rsi
cmp rsi, 5
jb 0x140002a70
mov edx, 5
lea rcx, [rbp + 0x10e1]
call fcn.1400011d0
mov byte [rax], 0
lea rcx, [rbp + 0x10e1]
call fcn.1400011c0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3