Function at 0x14000c1d0
Capabilities:
Authenticate hmac
Create thread
Encode data using xor
Enumerate processes
Execute command
Terminate process

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov qword [r11 + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x2b0
movaps xmmword [r11 - 0x28], xmm6
movaps xmmword [r11 - 0x38], xmm7
movaps xmmword [r11 - 0x48], xmm8
movaps xmmword [r11 - 0x58], xmm9
mov rax, qword [0x140058040]
xor rax, rsp
mov qword [rsp + 0x260], rax
xor ebx, ebx
xorps xmm0, xmm0
movups xmmword [rsp + 0x118], xmm0
lea rcx, [rsp + 0x2c8]
movabs rdx, 0x2e26236aaffffa
mov qword [r11 - 0x1a8], rdx
mov qword [r11 - 0x1a0], rcx
mov rax, qword [rcx]
xor rax, rdx
mov qword [r11 - 0x210], rax
mov qword [r11 - 0x1b0], rax
mov qword [rcx], rbx
mov edx, 1
mov cl, 0x31
call fcn.1400015f0
mov byte [rsp + 0xb7], al
mov edx, 0xb
mov cl, 0x44
call fcn.1400015f0
mov byte [rsp + 0x88], al
mov r15d, 0xc
mov edx, r15d
mov cl, 0x52
call fcn.1400015f0
mov byte [rsp + 0x89], al
mov edx, 0xd
mov cl, 0x49
call fcn.1400015f0
mov byte [rsp + 0x8a], al
mov edx, 0xe
mov cl, 0x56
call fcn.1400015f0
mov byte [rsp + 0x8b], al
mov edx, 0xf
mov cl, 0x45
call fcn.1400015f0
mov byte [rsp + 0x8c], al
mov edx, 0x10
mov cl, 0x52
call fcn.1400015f0
mov byte [rsp + 0x8d], al
mov edx, 0x11
mov cl, 0x20
call fcn.1400015f0
mov byte [rsp + 0x8e], al
mov edx, 0x12
mov cl, 0x5d
call fcn.1400015f0
mov byte [rsp + 0x8f], al
mov edx, 0x13
mov cl, 0xa
call fcn.1400015f0
mov byte [rsp + 0x90], al
xor edx, edx
mov cl, 0x5b
call fcn.1400015f0
movzx r12d, al
mov edx, 1
mov cl, 0x32
call fcn.1400015f0
mov byte [rsp + 0x92], al
mov edx, 2
mov cl, 0x5d
call fcn.1400015f0
movzx esi, al
mov byte [rsp + 0x91], al
mov edx, 3
mov cl, 0x20
call fcn.1400015f0
mov byte [rsp + 0x40], al
mov r14d, 4
mov edx, r14d
mov cl, 0x5b
call fcn.1400015f0
mov byte [rsp + 0x41], al
mov edx, 5
mov cl, 0x20
call fcn.1400015f0
mov byte [rsp + 0x42], al
mov edx, 6
mov cl, 0x49
call fcn.1400015f0
mov byte [rsp + 0x43], al
mov edx, 7
mov cl, 0x4e
call fcn.1400015f0
mov byte [rsp + 0x44], al
mov edi, 8
mov edx, edi
mov cl, 0x49
call fcn.1400015f0
mov byte [rsp + 0x45], al
mov edx, 9
mov cl, 0x54
call fcn.1400015f0
mov byte [rsp + 0x46], al
mov edx, 0xa
mov cl, 0x20
call fcn.1400015f0
mov byte [rsp + 0x47], al
mov edx, 0xb
mov cl, 0x4b
call fcn.1400015f0
mov byte [rsp + 0x93], al
mov edx, r15d
mov cl, 0x6d
call fcn.1400015f0
mov byte [rsp + 0x94], al
mov edx, 0xd
mov cl, 0x53
call fcn.1400015f0
mov byte [rsp + 0x95], al
mov edx, 0xe
mov cl, 0x6f
call fcn.1400015f0
mov byte [rsp + 0x96], al
mov edx, 0xf
mov cl, 0x66
call fcn.1400015f0
mov byte [rsp + 0x97], al
mov edx, 0x10
mov cl, 0x74
call fcn.1400015f0
mov byte [rsp + 0x98], al
mov edx, 0x11
mov cl, 0x57
call fcn.1400015f0
mov byte [rsp + 0x99], al
mov edx, 0x12
mov cl, 0x61
call fcn.1400015f0
mov byte [rsp + 0x9a], al
mov edx, 0x13
mov cl, 0x72
call fcn.1400015f0
mov byte [rsp + 0x9b], al
mov edx, 0x14
mov cl, 0x65
call fcn.1400015f0
mov byte [rsp + 0x9c], al
mov edx, 0x15
mov cl, 0x20
call fcn.1400015f0
mov byte [rsp + 0x9d], al
mov edx, 0x16
mov cl, 0x50
call fcn.1400015f0
mov byte [rsp + 0x9e], al
mov edx, 0x17
mov cl, 0x55
call fcn.1400015f0
mov byte [rsp + 0x9f], al
mov edx, 0x18
mov cl, 0x42
call fcn.1400015f0
mov byte [rsp + 0xa0], al
mov edx, 0x19
mov cl, 0x20
call fcn.1400015f0
mov byte [rsp + 0xa1], al
mov edx, 0x1a
mov cl, 0x5d
call fcn.1400015f0
mov byte [rsp + 0xa2], al
mov edx, 0x1b
mov cl, 0x20
call fcn.1400015f0
mov byte [rsp + 0xa3], al
mov edx, 0x1c
mov cl, 0x28
call fcn.1400015f0
mov byte [rsp + 0xa4], al
mov edx, 0x1d
mov cl, 0x20
call fcn.1400015f0
mov byte [rsp + 0xa5], al
mov edx, 0x1e
mov cl, 0x41
call fcn.1400015f0
mov byte [rsp + 0xa6], al
mov edx, 0x1f
mov cl, 0x70
call fcn.1400015f0
mov byte [rsp + 0xa7], al
mov edx, 0x20
mov cl, 0x65
call fcn.1400015f0
mov byte [rsp + 0x48], al
mov edx, 0x21
mov cl, 0x72
call fcn.1400015f0
mov byte [rsp + 0xa8], al
mov edx, 0x22
mov cl, 0x74
call fcn.1400015f0
mov byte [rsp + 0xa9], al
mov edx, 0x23
mov cl, 0x65
call fcn.1400015f0
mov byte [rsp + 0xaa], al
mov edx, 0x24
mov cl, 0x20
call fcn.1400015f0
mov byte [rsp + 0xab], al
mov edx, 0x25
mov cl, 0x4e
call fcn.1400015f0
mov byte [rsp + 0xac], al
mov edx, 0x26
mov cl, 0x6f
call fcn.1400015f0
mov byte [rsp + 0xad], al
mov edx, 0x27
mov cl, 0x20
call fcn.1400015f0
mov byte [rsp + 0xae], al
mov edx, 0x28
mov cl, 0x4c
call fcn.1400015f0
mov byte [rsp + 0xaf], al
mov edx, 0x29
mov cl, 0x6f
call fcn.1400015f0
mov byte [rsp + 0xb0], al
mov edx, 0x2a
mov cl, 0x62
call fcn.1400015f0
mov byte [rsp + 0xb1], al
mov edx, 0x2b
call fcn.1400015f0
mov byte [rsp + 0xb2], al
mov edx, 0x2c
mov cl, 0x79
call fcn.1400015f0
mov byte [rsp + 0xb3], al
mov edx, 0x2d
mov cl, 0x20
call fcn.1400015f0
mov byte [rsp + 0xb4], al
mov edx, 0x2e
mov cl, 0x29
call fcn.1400015f0
mov byte [rsp + 0xb5], al
mov edx, 0x2f
mov cl, 0xa
call fcn.1400015f0
mov byte [rsp + 0xb6], al
mov r13d, dword [0x140058090]
movdqa xmm6, xmmword [0x14004f990]
movdqa xmm8, xmmword [0x14004fdb0]
movdqa xmm9, xmmword [0x14004fdc0]
movdqa xmm7, xmmword [0x14004fa20]
nop dword [rax]
lea rcx, [0x140049d3c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0xe0], r12b
movzx eax, byte [rsp + 0xb7]
mov byte [rsp + 0xe1], al
mov byte [rsp + 0xe2], sil
movzx eax, byte [rsp + 0x40]
mov byte [rsp + 0xe3], al
movzx eax, byte [rsp + 0x41]
mov byte [rsp + 0xe4], al
movzx eax, byte [rsp + 0x42]
mov byte [rsp + 0xe5], al
movzx eax, byte [rsp + 0x43]
mov byte [rsp + 0xe6], al
movzx eax, byte [rsp + 0x44]
mov byte [rsp + 0xe7], al
movzx eax, byte [rsp + 0x45]
mov byte [rsp + 0xe8], al
movzx eax, byte [rsp + 0x46]
mov byte [rsp + 0xe9], al
movzx eax, byte [rsp + 0x47]
mov byte [rsp + 0xea], al
movzx eax, byte [rsp + 0x88]
mov byte [rsp + 0xeb], al
movzx eax, byte [rsp + 0x89]
mov byte [rsp + 0xec], al
movzx eax, byte [rsp + 0x8a]
mov byte [rsp + 0xed], al
movzx eax, byte [rsp + 0x8b]
mov byte [rsp + 0xee], al
movzx eax, byte [rsp + 0x8c]
mov byte [rsp + 0xef], al
movzx eax, byte [rsp + 0x8d]
mov byte [rsp + 0xf0], al
movzx eax, byte [rsp + 0x8e]
mov byte [rsp + 0xf1], al
movzx eax, byte [rsp + 0x8f]
mov byte [rsp + 0xf2], al
movzx eax, byte [rsp + 0x90]
mov byte [rsp + 0xf3], al
xor eax, eax
mov byte [rsp + 0xf4], al
mov edx, ebx
cmp r13d, 6
jl 0x14000c9df
mov rax, rbx
movdqa xmmword [rsp + 0xd0], xmm9
movdqa xmmword [rsp + 0x100], xmm8
mov ecx, edi
mov r10d, r14d
mov r11d, r15d
mov esi, 0x10
mov r8d, dword [rsp + 0x100]
mov r9d, dword [rsp + 0xd0]
nop dword [rax]
movd xmm1, edx
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
pshufb xmm1, xmm6
movd xmm0, r9d
vpmovzxbw ymm1, xmm1
vpmovzxbw ymm0, xmm0
vpmullw ymm1, ymm1, ymm0
vpmovzxwd zmm2, ymm1
vpmovdb xmm3, zmm2
movd xmm0, r8d
psubb xmm3, xmm0
movd xmm0, dword [rsp + rax + 0xe0]
xorps xmm3, xmm0
movd dword [rsp + rax + 0xe0], xmm3
movsxd rax, ecx
movd xmm1, r10d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
pshufb xmm1, xmm6
movd xmm0, r9d
vpmovzxbw ymm1, xmm1
vpmovzxbw ymm0, xmm0
vpmullw ymm1, ymm1, ymm0
vpmovzxwd zmm2, ymm1
vpmovdb xmm3, zmm2
movd xmm0, r8d
psubb xmm3, xmm0
movd xmm0, dword [rsp + rax + 0xdc]
xorps xmm3, xmm0
movd dword [rsp + rax + 0xdc], xmm3
movsxd rax, ecx
movd xmm1, ecx
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
pshufb xmm1, xmm6
movd xmm0, r9d
vpmovzxbw ymm1, xmm1
vpmovzxbw ymm0, xmm0
vpmullw ymm1, ymm1, ymm0
vpmovzxwd zmm2, ymm1
vpmovdb xmm3, zmm2
movd xmm0, r8d
psubb xmm3, xmm0
movd xmm0, dword [rsp + rax + 0xe0]
xorps xmm3, xmm0
movd dword [rsp + rax + 0xe0], xmm3
movsxd rax, ecx
movd xmm1, r11d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
pshufb xmm1, xmm6
movd xmm0, r9d
vpmovzxbw ymm1, xmm1
vpmovzxbw ymm0, xmm0
vpmullw ymm1, ymm1, ymm0
vpmovzxwd zmm2, ymm1
vpmovdb xmm3, zmm2
movd xmm0, r8d
psubb xmm3, xmm0
movd xmm0, dword [rsp + rax + 0xe4]
xorps xmm3, xmm0
movd dword [rsp + rax + 0xe4], xmm3
movsxd rax, ecx
movd xmm1, esi
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
pshufb xmm1, xmm6
movd xmm0, r9d
vpmovzxbw ymm1, xmm1
vpmovzxbw ymm0, xmm0
vpmullw ymm1, ymm1, ymm0
vpmovzxwd zmm2, ymm1
vpmovdb xmm3, zmm2
movd xmm0, r8d
psubb xmm3, xmm0
movd xmm0, dword [rsp + rax + 0xe8]
xorps xmm3, xmm0
movd dword [rsp + rax + 0xe8], xmm3
add edx, 0x14
add ecx, 0x14
movsxd rax, edx
add r10d, 0x14
add r11d, 0x14
add esi, 0x14
cmp rax, 0x14
jb 0x14000c820
movzx esi, byte [rsp + 0x91]
movsxd r8, edx
cmp r8, 0x14
jae 0x14000ca0c
nop dword [rax + rax]
movsx eax, dl
imul ecx, eax, 0x64
sub cl, 0x5c
xor byte [rsp + r8 + 0xe0], cl
inc edx
movsxd r8, edx
cmp r8, 0x14
jb 0x14000c9f0
mov byte [rsp + 0xf4], 0
lea rdx, [rsp + 0xe0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000eac0
mov byte [rsp + 0x50], r12b
movzx eax, byte [rsp + 0x92]
mov byte [rsp + 0x51], al
mov byte [rsp + 0x52], sil
movzx eax, byte [rsp + 0x40]
mov byte [rsp + 0x53], al
movzx eax, byte [rsp + 0x41]
mov byte [rsp + 0x54], al
movzx eax, byte [rsp + 0x42]
mov byte [rsp + 0x55], al
movzx eax, byte [rsp + 0x43]
mov byte [rsp + 0x56], al
movzx eax, byte [rsp + 0x44]
mov byte [rsp + 0x57], al
movzx eax, byte [rsp + 0x45]
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x46]
mov byte [rsp + 0x59], al
movzx eax, byte [rsp + 0x47]
mov byte [rsp + 0x5a], al
movzx eax, byte [rsp + 0x93]
mov byte [rsp + 0x5b], al
movzx eax, byte [rsp + 0x94]
mov byte [rsp + 0x5c], al
movzx eax, byte [rsp + 0x95]
mov byte [rsp + 0x5d], al
movzx eax, byte [rsp + 0x96]
mov byte [rsp + 0x5e], al
movzx eax, byte [rsp + 0x97]
mov byte [rsp + 0x5f], al
movzx eax, byte [rsp + 0x98]
mov byte [rsp + 0x60], al
movzx eax, byte [rsp + 0x99]
mov byte [rsp + 0x61], al
movzx eax, byte [rsp + 0x9a]
mov byte [rsp + 0x62], al
movzx eax, byte [rsp + 0x9b]
mov byte [rsp + 0x63], al
movzx eax, byte [rsp + 0x9c]
mov byte [rsp + 0x64], al
movzx eax, byte [rsp + 0x9d]
mov byte [rsp + 0x65], al
movzx eax, byte [rsp + 0x9e]
mov byte [rsp + 0x66], al
movzx eax, byte [rsp + 0x9f]
mov byte [rsp + 0x67], al
movzx eax, byte [rsp + 0xa0]
mov byte [rsp + 0x68], al
movzx eax, byte [rsp + 0xa1]
mov byte [rsp + 0x69], al
movzx eax, byte [rsp + 0xa2]
mov byte [rsp + 0x6a], al
movzx eax, byte [rsp + 0xa3]
mov byte [rsp + 0x6b], al
movzx eax, byte [rsp + 0xa4]
mov byte [rsp + 0x6c], al
movzx eax, byte [rsp + 0xa5]
mov byte [rsp + 0x6d], al
movzx eax, byte [rsp + 0xa6]
mov byte [rsp + 0x6e], al
movzx eax, byte [rsp + 0xa7]
mov byte [rsp + 0x6f], al
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0x70], al
movzx eax, byte [rsp + 0xa8]
mov byte [rsp + 0x71], al
movzx eax, byte [rsp + 0xa9]
mov byte [rsp + 0x72], al
movzx eax, byte [rsp + 0xaa]
mov byte [rsp + 0x73], al
movzx eax, byte [rsp + 0xab]
mov byte [rsp + 0x74], al
movzx eax, byte [rsp + 0xac]
mov byte [rsp + 0x75], al
movzx eax, byte [rsp + 0xad]
mov byte [rsp + 0x76], al
movzx eax, byte [rsp + 0xae]
mov byte [rsp + 0x77], al
movzx eax, byte [rsp + 0xaf]
mov byte [rsp + 0x78], al
movzx eax, byte [rsp + 0xb0]
mov byte [rsp + 0x79], al
movzx eax, byte [rsp + 0xb1]
mov byte [rsp + 0x7a], al
movzx eax, byte [rsp + 0xb2]
mov byte [rsp + 0x7b], al
movzx eax, byte [rsp + 0xb3]
mov byte [rsp + 0x7c], al
movzx eax, byte [rsp + 0xb4]
mov byte [rsp + 0x7d], al
movzx eax, byte [rsp + 0xb5]
mov byte [rsp + 0x7e], al
movzx eax, byte [rsp + 0xb6]
mov byte [rsp + 0x7f], al
xor eax, eax
mov byte [rsp + 0x80], al
mov eax, ebx
cmp r13d, 6
jl 0x14000cdcd
mov rcx, rbx
movdqa xmmword [rsp + 0xd0], xmm9
movdqa xmmword [rsp + 0x100], xmm8
mov edx, edi
mov r10d, r14d
mov r11d, r15d
mov r8d, dword [rsp + 0x100]
mov r9d, dword [rsp + 0xd0]
movd xmm1, eax
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
pshufb xmm1, xmm6
movd xmm0, r9d
vpmovzxbw ymm1, xmm1
vpmovzxbw ymm0, xmm0
vpmullw ymm1, ymm1, ymm0
vpmovzxwd zmm2, ymm1
vpmovdb xmm3, zmm2
movd xmm0, r8d
psubb xmm3, xmm0
movd xmm0, dword [rsp + rcx + 0x50]
xorps xmm3, xmm0
movd dword [rsp + rcx + 0x50], xmm3
movsxd rcx, edx
movd xmm1, r10d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
pshufb xmm1, xmm6
movd xmm0, r9d
vpmovzxbw ymm1, xmm1
vpmovzxbw ymm0, xmm0
vpmullw ymm1, ymm1, ymm0
vpmovzxwd zmm2, ymm1
vpmovdb xmm3, zmm2
movd xmm0, r8d
psubb xmm3, xmm0
movd xmm0, dword [rsp + rcx + 0x4c]
xorps xmm3, xmm0
movd dword [rsp + rcx + 0x4c], xmm3
movsxd rcx, edx
movd xmm1, edx
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
pshufb xmm1, xmm6
movd xmm0, r9d
vpmovzxbw ymm1, xmm1
vpmovzxbw ymm0, xmm0
vpmullw ymm1, ymm1, ymm0
vpmovzxwd zmm2, ymm1
vpmovdb xmm3, zmm2
movd xmm0, r8d
psubb xmm3, xmm0
movd xmm0, dword [rsp + rcx + 0x50]
xorps xmm3, xmm0
movd dword [rsp + rcx + 0x50], xmm3
movsxd rcx, edx
movd xmm1, r11d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
pshufb xmm1, xmm6
movd xmm0, r9d
vpmovzxbw ymm1, xmm1
vpmovzxbw ymm0, xmm0
vpmullw ymm1, ymm1, ymm0
vpmovzxwd zmm2, ymm1
vpmovdb xmm3, zmm2
movd xmm0, r8d
psubb xmm3, xmm0
movd xmm0, dword [rsp + rcx + 0x54]
xorps xmm3, xmm0
movd dword [rsp + rcx + 0x54], xmm3
add eax, 0x10
add edx, 0x10
movsxd rcx, eax
add r10d, 0x10
add r11d, 0x10
cmp rcx, 0x30
jb 0x14000cc83
movsxd r8, eax
cmp r8, 0x30
jae 0x14000cdf9
nop word [rax + rax]
movsx ecx, al
imul edx, ecx, 0x64
sub dl, 0x5c
xor byte [rsp + r8 + 0x50], dl
inc eax
movsxd r8, eax
cmp r8, 0x30
jb 0x14000cde0
mov byte [rsp + 0x80], 0
lea rdx, [rsp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000eac0
lea rdx, [rsp + 0x110]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov eax, dword [rsp + 0x110]
cmp eax, 1
jne 0x14000ce5d
lea rcx, [0x140049d3c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x14000c6c0
cmp eax, 2
jne 0x14000c6c0
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
mov r8d, 3
lea rcx, str..HyperionKernelIO_89C7
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r8, rax
mov qword [0x1400fcb90], rax
mov edx, 2
mov cl, 0x72
call fcn.1400015f0
movzx esi, al
mov edx, 5
mov cl, 0x69
call fcn.1400015f0
movzx r12d, al
cmp r8, 0xffffffffffffffff
jne 0x14000d14f
xor edx, edx
mov cl, 0x65
call fcn.1400015f0
mov byte [rsp + 0xb8], al
mov edx, 1
mov cl, 0x72
call fcn.1400015f0
mov byte [rsp + 0xb9], al
mov byte [rsp + 0xba], sil
mov edx, 3
mov cl, 0x6f
call fcn.1400015f0
mov byte [rsp + 0xbb], al
mov edx, r14d
mov cl, 0x20
call fcn.1400015f0
mov byte [rsp + 0xbc], al
mov byte [rsp + 0xbd], r12b
mov edx, 6
mov cl, 0x6e
call fcn.1400015f0
mov byte [rsp + 0xbe], al
mov edx, 7
mov cl, 0x69
call fcn.1400015f0
mov byte [rsp + 0xbf], al
mov edx, edi
mov cl, 0x74
call fcn.1400015f0
mov byte [rsp + 0xc0], al
mov edx, 9
mov cl, 0x20
call fcn.1400015f0
mov byte [rsp + 0xc1], al
mov edx, 0xa
mov cl, 0x64
call fcn.1400015f0
mov byte [rsp + 0xc2], al
mov edx, 0xb
mov cl, 0x72
call fcn.1400015f0
mov byte [rsp + 0xc3], al
mov edx, r15d
mov cl, 0x76
call fcn.1400015f0
mov byte [rsp + 0xc4], al
mov edx, 0xd
mov cl, 0xa
call fcn.1400015f0
mov byte [rsp + 0xc5], al
xor eax, eax
mov byte [rsp + 0xc6], al
mov ecx, ebx
cmp r13d, 6
jl 0x14000d0f6
movdqa xmmword [rsp + 0xd0], xmm9
movdqa xmmword [rsp + 0x100], xmm8
mov edx, dword [rsp + 0x100]
mov r8d, dword [rsp + 0xd0]
nop word [rax + rax]
movd xmm1, ecx
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
pshufb xmm1, xmm6
movd xmm0, r8d
vpmovzxbw ymm1, xmm1
vpmovzxbw ymm0, xmm0
vpmullw ymm1, ymm1, ymm0
vpmovzxwd zmm2, ymm1
vpmovdb xmm3, zmm2
movd xmm0, edx
psubb xmm3, xmm0
movd xmm0, dword [rsp + rbx + 0xb8]
xorps xmm3, xmm0
movd dword [rsp + rbx + 0xb8], xmm3
movsxd rax, edi
movd xmm1, r14d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
pshufb xmm1, xmm6
movd xmm0, r8d
vpmovzxbw ymm1, xmm1
vpmovzxbw ymm0, xmm0
vpmullw ymm1, ymm1, ymm0
vpmovzxwd zmm2, ymm1
vpmovdb xmm3, zmm2
movd xmm0, edx
psubb xmm3, xmm0
movd xmm0, dword [rsp + rax + 0xb4]
xorps xmm3, xmm0
movd dword [rsp + rax + 0xb4], xmm3
movsxd rax, edi
movd xmm1, edi
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
pshufb xmm1, xmm6
movd xmm0, r8d
vpmovzxbw ymm1, xmm1
vpmovzxbw ymm0, xmm0
vpmullw ymm1, ymm1, ymm0
vpmovzxwd zmm2, ymm1
vpmovdb xmm3, zmm2
movd xmm0, edx
psubb xmm3, xmm0
movd xmm0, dword [rsp + rax + 0xb8]
xorps xmm3, xmm0
movd dword [rsp + rax + 0xb8], xmm3
add ecx, r15d
add edi, r15d
movsxd rbx, ecx
add r14d, r15d
cmp rbx, r15
jb 0x14000cff0
movsxd r8, ecx
cmp r8, 0xe
jae 0x14000d11c
nop
movsx eax, cl
imul edx, eax, 0x64
sub dl, 0x5c
xor byte [rsp + r8 + 0xb8], dl
inc ecx
movsxd r8, ecx
cmp r8, 0xe
jb 0x14000d100
mov byte [rsp + 0xc6], 0
lea rdx, [rsp + 0xb8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000eac0
mov ecx, 0x1770
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
mov cl, 0x46
call fcn.1400015f0
mov byte [rsp + 0x50], al
mov edx, 1
mov cl, 0x6f
call fcn.1400015f0
mov byte [rsp + 0x51], al
mov byte [rsp + 0x52], sil
mov edx, 3
mov cl, 0x74
call fcn.1400015f0
mov byte [rsp + 0x53], al
mov edx, r14d
mov cl, 0x6e
call fcn.1400015f0
mov byte [rsp + 0x54], al
mov byte [rsp + 0x55], r12b
mov edx, 6
mov cl, 0x74
call fcn.1400015f0
mov byte [rsp + 0x56], al
mov edx, 7
mov cl, 0x65
call fcn.1400015f0
mov byte [rsp + 0x57], al
mov edx, edi
mov cl, 0x43
call fcn.1400015f0
mov byte [rsp + 0x58], al
mov edx, 9
mov cl, 0x6c
call fcn.1400015f0
mov byte [rsp + 0x59], al
mov edx, 0xa
mov cl, 0x69
call fcn.1400015f0
mov byte [rsp + 0x5a], al
mov edx, 0xb
mov cl, 0x65
call fcn.1400015f0
mov byte [rsp + 0x5b], al
mov edx, r15d
mov cl, 0x6e
call fcn.1400015f0
mov byte [rsp + 0x5c], al
mov edx, 0xd
mov cl, 0x74
call fcn.1400015f0
mov byte [rsp + 0x5d], al
mov edx, 0xe
mov cl, 0x2d
call fcn.1400015f0
mov byte [rsp + 0x5e], al
mov edx, 0xf
mov cl, 0x57
call fcn.1400015f0
mov byte [rsp + 0x5f], al
mov edx, 0x10
mov cl, 0x69
call fcn.1400015f0
mov byte [rsp + 0x60], al
mov edx, 0x11
mov cl, 0x6e
call fcn.1400015f0
mov byte [rsp + 0x61], al
mov edx, 0x12
mov cl, 0x36
call fcn.1400015f0
mov byte [rsp + 0x62], al
mov edx, 0x13
mov cl, 0x34
call fcn.1400015f0
mov byte [rsp + 0x63], al
mov edx, 0x14
mov cl, 0x2d
call fcn.1400015f0
mov byte [rsp + 0x64], al
mov edx, 0x15
mov cl, 0x53
call fcn.1400015f0
mov byte [rsp + 0x65], al
mov edx, 0x16
mov cl, 0x68
call fcn.1400015f0
mov byte [rsp + 0x66], al
mov edx, 0x17
mov cl, 0x69
call fcn.1400015f0
mov byte [rsp + 0x67], al
mov edx, 0x18
mov cl, 0x70
call fcn.1400015f0
mov byte [rsp + 0x68], al
mov edx, 0x19
call fcn.1400015f0
mov byte [rsp + 0x69], al
mov edx, 0x1a
mov cl, 0x69
call fcn.1400015f0
mov byte [rsp + 0x6a], al
mov edx, 0x1b
mov cl, 0x6e
call fcn.1400015f0
mov byte [rsp + 0x6b], al
mov edx, 0x1c
mov cl, 0x67
call fcn.1400015f0
mov byte [rsp + 0x6c], al
mov edx, 0x1d
mov cl, 0x2e
call fcn.1400015f0
mov byte [rsp + 0x6d], al
mov edx, 0x1e
mov cl, 0x65
call fcn.1400015f0
mov byte [rsp + 0x6e], al
mov edx, 0x1f
mov cl, 0x78
call fcn.1400015f0
mov byte [rsp + 0x6f], al
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0x70], al
xor eax, eax
mov byte [rsp + 0x71], al
mov ecx, ebx
cmp r13d, 6
jl 0x14000d4ca
mov rax, rbx
movdqa xmmword [rsp + 0xd0], xmm9
movdqa xmmword [rsp + 0x100], xmm8
mov edx, edi
mov r10d, r14d
mov r8d, dword [rsp + 0x100]
mov r9d, dword [rsp + 0xd0]
nop
movd xmm1, ecx
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
pshufb xmm1, xmm6
movd xmm0, r9d
vpmovzxbw ymm1, xmm1
vpmovzxbw ymm0, xmm0
vpmullw ymm1, ymm1, ymm0
vpmovzxwd zmm2, ymm1
vpmovdb xmm3, zmm2
movd xmm0, r8d
psubb xmm3, xmm0
movd xmm0, dword [rsp + rax + 0x50]
xorps xmm3, xmm0
movd dword [rsp + rax + 0x50], xmm3
movsxd rax, edx
movd xmm1, r10d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
pshufb xmm1, xmm6
movd xmm0, r9d
vpmovzxbw ymm1, xmm1
vpmovzxbw ymm0, xmm0
vpmullw ymm1, ymm1, ymm0
vpmovzxwd zmm2, ymm1
vpmovdb xmm3, zmm2
movd xmm0, r8d
psubb xmm3, xmm0
movd xmm0, dword [rsp + rax + 0x4c]
xorps xmm3, xmm0
movd dword [rsp + rax + 0x4c], xmm3
movsxd rax, edx
movd xmm1, edx
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
pshufb xmm1, xmm6
movd xmm0, r9d
vpmovzxbw ymm1, xmm1
vpmovzxbw ymm0, xmm0
vpmullw ymm1, ymm1, ymm0
vpmovzxwd zmm2, ymm1
vpmovdb xmm3, zmm2
movd xmm0, r8d
psubb xmm3, xmm0
movd xmm0, dword [rsp + rax + 0x50]
xorps xmm3, xmm0
movd dword [rsp + rax + 0x50], xmm3
movsxd rax, edx
movd xmm1, r15d
pshufd xmm1, xmm1, 0
paddd xmm1, xmm7
pshufb xmm1, xmm6
movd xmm0, r9d
vpmovzxbw ymm1, xmm1
vpmovzxbw ymm0, xmm0
vpmullw ymm1, ymm1, ymm0
vpmovzxwd zmm2, ymm1
vpmovdb xmm3, zmm2
movd xmm0, r8d
psubb xmm3, xmm0
movd xmm0, dword [rsp + rax + 0x54]
xorps xmm3, xmm0
movd dword [rsp + rax + 0x54], xmm3
add ecx, 0x10
add edx, 0x10
movsxd rax, ecx
add r10d, 0x10
add r15d, 0x10
cmp rax, 0x20
jb 0x14000d380
movsxd r8, ecx
cmp r8, 0x21
jae 0x14000d4f9
nop dword [rax]
nop word [rax + rax]
movsx eax, cl
imul edx, eax, 0x64
sub dl, 0x5c
xor byte [rsp + r8 + 0x50], dl
inc ecx
movsxd r8, ecx
cmp r8, 0x21
jb 0x14000d4e0
mov byte [rsp + 0x71], 0
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rsi, rax
mov dword [rsp + 0x130], 0x130
lea rdx, [rsp + 0x130]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x14000d560
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x15c]
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
mov rcx, rsi
test eax, eax
je 0x14000d6a6
lea rdx, [rsp + 0x130]
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x14000d530
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, ebx
mov dword [0x1400fcb98], eax
mov qword [rsp + 0x100], rbx
mov dword [rsp + 0xd0], eax
lea rax, [rsp + 0x100]
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r9d, 0x10
lea r8, [rsp + 0xd0]
mov edx, 0x2220ec
mov rcx, qword [0x1400fcb90]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rsp + 0x100]
mov qword [0x1400fcba0], rax
lea rcx, [rsp + 0xe0]
call fcn.140001780
nop
lea rcx, [rsp + 0xe0]
cmp qword [rsp + 0xf8], 0xf
cmova rcx, qword [rsp + 0xe0]
call fcn.140002290
mov rcx, rdi
call fcn.140045538
lea rcx, [0x140004690]
mov qword [rax], rcx
mov qword [rsp + 0x100], rax
lea rcx, [rsp + 0xd8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14000fde0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0xd0], rax
test rax, rax
je 0x14000d848
cmp dword [rsp + 0xd8], 0
je 0x14000d83c
movaps xmm0, xmmword [rsp + 0xd0]
movdqa xmmword [rsp + 0x100], xmm0
lea rcx, [rsp + 0x100]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000d83c
lea rdx, [0x1400fcca8]
mov ecx, 0x20
call qword [sym.imp.d3d9.dll_Direct3DCreate9Ex]
test eax, eax
jns 0x14000d6b8
mov ecx, 3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rsp + 0x138]
jmp 0x14000d56b
mov qword [0x1400fcbbc], rbx
mov qword [0x1400fcbc8], 1
mov qword [0x1400fcbe4], rbx
mov dword [0x1400fcbd8], 1
mov r9, qword [0x1400fcc00]
mov qword [0x1400fcbd0], r9
mov dword [0x1400fcbc4], ebx
mov dword [0x1400fcbb8], 0x15
mov eax, dword [0x1400fccd8]
mov dword [0x1400fcbb0], eax
mov eax, dword [0x1400fccdc]
mov dword [0x1400fcbb4], eax
mov dword [0x1400fcbdc], 1
mov dword [0x1400fcbe0], 0x50
mov dword [0x1400fcbec], 0x80000000
mov rcx, qword [0x1400fcca8]
mov rax, qword [rcx]
lea rdx, [0x1400fcb78]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rbx
lea rdx, [0x1400fcbb0]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x40
xor edx, edx
mov r8d, 1
call qword [rax + 0xa0]
test eax, eax
jns 0x14000d787
mov rcx, qword [0x1400fcca8]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov ecx, r14d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.14000b8d0
nop
mov rdx, qword [rsp + 0xf8]
cmp rdx, 0xf
jbe 0x14000d7d4
inc rdx
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d7ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d7ce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140045410
nop
mov rax, qword [rsp + 0xb8]
movabs rcx, 0x2e26236aaffffa
xor rax, rcx
lea rcx, [rsp + 0x2c8]
mov qword [rcx], rax
xor eax, eax
mov rcx, qword [rsp + 0x260]
xor rcx, rsp
call fcn.1400453f0
lea r11, [rsp + 0x2b0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0xd8], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3