Function at 0x140006330
Capabilities:
Contain obfuscated stackstrings
Delete file
Enumerate gui resources
Execute command
Get common file path
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3a0]
sub rsp, 0x4a0
mov rax, qword [0x1401a4080]
xor rax, rsp
mov qword [rbp + 0x390], rax
xor r12d, r12d
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
mov word [rbp + 0x70], 0x204f
mov byte [rbp + 0x72], r12b
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], r12
mov qword [rbp + 0x118], r12
lea rax, [rbp + 0x71]
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x1400063e6
lea rdx, [rbp + 0x71]
lea rcx, [rbp + 0x100]
call fcn.14000d680
nop
lea rcx, [rbp + 0x100]
cmp qword [rbp + 0x118], 0xf
cmova rcx, qword [rbp + 0x100]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
lea rcx, [0x1401be3e0]
call fcn.1400ee2d0
xor edx, edx
lea rcx, [0x140005c40]
cmp byte [0x1401be5f0], dl
jne 0x140006547
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
lea rcx, [0x140174b88]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x40]
call fcn.1400086c0
lea rdx, [rax + 1]
movzx r8d, byte [rax]
xor byte [rdx], r8b
xor byte [rax + 2], r8b
xor byte [rax + 3], r8b
xor byte [rax + 4], r8b
xor byte [rax + 5], r8b
xor byte [rax + 6], r8b
xor byte [rax + 7], r8b
xor byte [rax + 8], r8b
xor byte [rax + 9], r8b
xor byte [rdx + 9], r8b
mov byte [rdx + 0xa], 0
call fcn.14000c730
mov rcx, rax
lea rdx, [0x1401be5f8]
call fcn.14000c900
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
mov dword [rbp + 0x120], 0x54
lea r8, [rbp + 0x120]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentConsoleFontEx]
mov dword [rbp + 0x128], 0xd000d
lea r8, [rbp + 0x120]
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetCurrentConsoleFontEx]
lea rax, [rbp + 0x180]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, reloc.WLDAP32.dll_Ordinal_26
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
xorps xmm0, xmm0
test eax, eax
js 0x14000669a
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], r12
lea rax, [rbp + 0x180]
mov r8, rdi
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x140006610
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x30]
call fcn.14000d1c0
nop
lea rdx, [rbp + 0x30]
cmp qword [rbp + 0x48], 7
cmova rdx, qword [rbp + 0x30]
mov rax, qword [rbp + 0x40]
lea r8, [rdx + rax*2]
lea rdx, [rbp + 0x30]
cmova rdx, qword [rbp + 0x30]
lea rcx, [rbp + 0x78]
call fcn.14000c280
nop
mov rdx, qword [rbp + 0x48]
cmp rdx, 7
jbe 0x1400066c0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006693
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006693
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401433c4
jmp 0x1400066c0
movups xmmword [rbp + 0x78], xmm0
mov qword [rbp + 0x88], r12
mov qword [rbp + 0x90], r12
xor r8d, r8d
lea rdx, [0x140174a38]
lea rcx, [rbp + 0x78]
call fcn.14000d680
nop
movdqa xmm0, xmmword [0x140187220]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x50], 0x6e6f
mov byte [rsp + 0x52], 0
lea rax, [rsp + 0x41]
mov rcx, rdi
inc rcx
cmp byte [rax + rcx], 0
jne 0x1400066e2
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
mov rdx, qword [rbp + 0x88]
sub rax, rdx
cmp rax, rcx
jb 0x140008655
lea r9, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova r9, qword [rbp + 0x78]
mov qword [rsp + 0x30], rcx
lea rax, [rsp + 0x41]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp + 0x50]
call fcn.14000f230
nop
lea rax, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova rax, qword [rbp + 0x50]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp + 0x60]
mov qword [rsp + 0x48], rax
call fcn.14014289c
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rbp + 0x30]
call fcn.140003250
nop
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0xa0]
call fcn.140003c00
movsd xmm0, qword [rax]
movsd qword [rsp + 0x40], xmm0
mov ecx, dword [rax + 8]
mov dword [rbp + 0xa0], ecx
lea r14, [0x1401a4118]
mov qword [rbp + 0xa8], r14
movaps xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rbp + 0xa0], xmm0
mov eax, dword [rsp + 0x40]
test eax, eax
je 0x140006803
cmp eax, 1
setne bl
mov rdx, qword [rbp + 0x48]
cmp rdx, 7
jbe 0x140006814
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000680f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000680f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor bl, bl
test ecx, ecx
jne 0x140008616
jmp 0x1400067c5
call fcn.1401433c4
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], 7
mov word [rbp + 0x30], r12w
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x140006863
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000685e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000685e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401433c4
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
test bl, bl
je 0x140007175
lea rax, [rbp + 0x30]
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x40], 0x65737578
mov dword [rsp + 0x44], 0x6d616e72
mov word [rsp + 0x48], 0x65
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], r12
lea rax, [rsp + 0x41]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400068f0
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0x30]
call fcn.14000d680
nop
movdqa xmm0, xmmword [0x1401871d0]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x50], 0x6e6f
mov byte [rsp + 0x52], 0
lea rax, [rsp + 0x41]
mov rcx, rdi
nop dword [rax + rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x140006930
mov rax, rsi
mov rdx, qword [rbp + 0x88]
sub rax, rdx
cmp rax, rcx
jb 0x14000865b
lea r9, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova r9, qword [rbp + 0x78]
mov qword [rsp + 0x30], rcx
lea rax, [rsp + 0x41]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp + 0xc0]
call fcn.14000f230
nop
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0xc0]
call fcn.140004d80
xor edx, edx
lea rcx, [0x140005c40]
test al, al
jne 0x140006cbd
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
lea rax, [rbp + 0x30]
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x40], 0x63696c16
mov dword [rsp + 0x44], 0x65736e65
mov byte [rsp + 0x48], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], r12
lea rax, [rsp + 0x41]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140006a20
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0x30]
call fcn.14000d680
nop
movdqa xmm0, xmmword [0x1401871e0]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x50], 0x6e6f
mov byte [rsp + 0x52], 0
lea rax, [rsp + 0x41]
mov rcx, rdi
nop dword [rax + rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x140006a60
mov rax, rsi
mov rdx, qword [rbp + 0x88]
sub rax, rdx
cmp rax, rcx
jb 0x140008661
lea r9, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova r9, qword [rbp + 0x78]
mov qword [rsp + 0x30], rcx
lea rax, [rsp + 0x41]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x68]
call fcn.14000f230
nop
lea r8, [rbp + 0x30]
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0xc0]
call fcn.1400047d0
nop
lea rdx, [rbp + 0xc0]
lea rcx, [rbp - 0x28]
call fcn.140009ec0
mov rdx, rax
lea rcx, [0x1401be3e0]
call fcn.1400ef9c0
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
cmp byte [0x1401be5f0], 0
jne 0x140006bef
lea rcx, [0x140174b88]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x40]
call fcn.1400086e0
movzx edx, byte [rax]
xor byte [rax + 1], dl
xor byte [rax + 2], dl
xor byte [rax + 3], dl
xor byte [rax + 4], dl
xor byte [rax + 5], dl
xor byte [rax + 6], dl
xor byte [rax + 7], dl
xor byte [rax + 8], dl
xor byte [rax + 9], dl
xor byte [rax + 0xa], dl
mov byte [rax + 0xb], 0
lea rcx, [rax + 1]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x40]
call fcn.140008700
lea rdx, [rax + 1]
movzx r8d, byte [rax]
xor byte [rdx], r8b
xor byte [rax + 2], r8b
xor byte [rax + 3], r8b
xor byte [rax + 4], r8b
xor byte [rax + 5], r8b
xor byte [rax + 6], r8b
xor byte [rax + 7], r8b
xor byte [rax + 8], r8b
xor byte [rax + 9], r8b
xor byte [rdx + 9], r8b
mov byte [rdx + 0xa], 0
call fcn.14000c730
mov rcx, rax
lea rdx, [0x1401be5f8]
call fcn.14000c900
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
movdqa xmm0, xmmword [0x140186980]
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rbp - 0x80], 0x67676f6c
mov dword [rbp - 0x7c], 0x69206465
mov word [rbp - 0x78], 0xa6e
mov byte [rbp - 0x76], 0
lea rdx, [rsp + 0x71]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000c730
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x140007ef1
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000716b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000716b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
lea rax, [rbp + 0x50]
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x40], 0x6573752f
mov dword [rsp + 0x44], 0x6d616e72
mov word [rsp + 0x48], 0x65
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], r12
mov qword [rbp + 0x68], r12
lea rax, [rsp + 0x41]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140006d36
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0x50]
call fcn.14000d680
nop
movdqa xmm0, xmmword [0x140187210]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x50], 0x6e6f
mov byte [rsp + 0x52], 0
lea rax, [rsp + 0x41]
mov rcx, rdi
inc rcx
cmp byte [rax + rcx], 0
jne 0x140006d71
mov rax, rsi
mov rdx, qword [rbp + 0x88]
sub rax, rdx
cmp rax, rcx
jb 0x140008667
lea r9, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova r9, qword [rbp + 0x78]
mov qword [rsp + 0x30], rcx
lea rax, [rsp + 0x41]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x68]
call fcn.14000f230
nop
lea r8, [rbp + 0x50]
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0xc0]
call fcn.1400047d0
nop
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x40], 0x73617014
mov dword [rsp + 0x44], 0x726f7773
mov word [rsp + 0x48], 0x64
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], r12
mov qword [rbp + 0xb8], r12
lea rax, [rsp + 0x41]
mov r8, rdi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140006e20
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0xa0]
call fcn.14000d680
nop
movdqa xmm0, xmmword [0x140187230]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x50], 0x6e6f
mov byte [rsp + 0x52], 0
lea rax, [rsp + 0x41]
mov rcx, rdi
nop
inc rcx
cmp byte [rax + rcx], 0
jne 0x140006e60
mov rax, rsi
mov rdx, qword [rbp + 0x88]
sub rax, rdx
cmp rax, rcx
jb 0x14000866d
lea r9, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova r9, qword [rbp + 0x78]
mov qword [rsp + 0x30], rcx
lea rax, [rsp + 0x41]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x48]
call fcn.14000f230
nop
lea r8, [rbp + 0xa0]
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x30]
call fcn.1400047d0
nop
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
lea rax, [rbp - 0x28]
mov qword [rsp + 0x60], rax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x28]
call fcn.140009ec0
mov rbx, rax
lea rdx, [rbp + 0xc0]
lea rcx, [rbp - 0x68]
call fcn.140009ec0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [0x1401be3e0]
call fcn.1400f0f10
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
cmp byte [0x1401be5f0], 0
jne 0x140007057
lea rcx, [0x140174b88]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x40]
call fcn.140008720
movzx edx, byte [rax]
xor byte [rax + 1], dl
xor byte [rax + 2], dl
xor byte [rax + 3], dl
xor byte [rax + 4], dl
xor byte [rax + 5], dl
xor byte [rax + 6], dl
xor byte [rax + 7], dl
xor byte [rax + 8], dl
xor byte [rax + 9], dl
xor byte [rax + 0xa], dl
mov byte [rax + 0xb], 0
lea rcx, [rax + 1]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x40]
call fcn.140008740
lea rdx, [rax + 1]
movzx r8d, byte [rax]
xor byte [rdx], r8b
xor byte [rax + 2], r8b
xor byte [rax + 3], r8b
xor byte [rax + 4], r8b
xor byte [rax + 5], r8b
xor byte [rax + 6], r8b
xor byte [rax + 7], r8b
xor byte [rax + 8], r8b
xor byte [rax + 9], r8b
xor byte [rdx + 9], r8b
mov byte [rdx + 0xa], 0
call fcn.14000c730
mov rcx, rax
lea rdx, [0x1401be5f8]
call fcn.14000c900
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
movdqa xmm0, xmmword [0x140186950]
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rbp - 0x80], 0x67676f6c
mov dword [rbp - 0x7c], 0x69206465
mov word [rbp - 0x78], 0xa6e
mov byte [rbp - 0x76], 0
lea rdx, [rsp + 0x71]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000c730
nop
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x140007118
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007113
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007113
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401433c4
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x30], 0
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x140007ef1
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000716b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000716b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401433c4
jmp 0x140007ef1
movdqa xmm0, xmmword [0x1401870c0]
movdqu xmmword [rbp], xmm0
movdqa xmm1, xmmword [0x140186940]
movdqu xmmword [rbp + 0x10], xmm1
mov dword [rbp + 0x20], 0x6974706f
mov dword [rbp + 0x24], 0x203a6e6f
mov byte [rbp + 0x28], 0
lea rdx, [rbp + 1]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000c730
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x30], 0
movups xmmword [rbp + 0xe0], xmm0
mov r14, r12
mov qword [rbp + 0xf0], r12
mov r15d, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0xf8], r15
mov byte [rbp + 0xe0], r14b
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], r12
mov r13d, r15d
mov qword [rbp + 0x68], r15
mov byte [rbp + 0x50], 0
lea rdx, [rbp + 0x70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov ecx, dword [rbp + 0x70]
sub ecx, 1
je 0x140007604
cmp ecx, 1
lea rcx, [0x140174b88]
je 0x14000731e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x70]
call fcn.140008760
lea rdx, [rax + 1]
movzx r8d, byte [rax]
xor byte [rdx], r8b
xor byte [rax + 2], r8b
xor byte [rax + 3], r8b
xor byte [rax + 4], r8b
xor byte [rax + 5], r8b
xor byte [rax + 6], r8b
xor byte [rax + 7], r8b
xor byte [rax + 8], r8b
xor byte [rax + 9], r8b
xor byte [rax + 0xa], r8b
xor byte [rax + 0xb], r8b
xor byte [rax + 0xc], r8b
xor byte [rax + 0xd], r8b
xor byte [rax + 0xe], r8b
xor byte [rax + 0xf], r8b
xor byte [rax + 0x10], r8b
xor byte [rax + 0x11], r8b
xor byte [rax + 0x12], r8b
xor byte [rax + 0x13], r8b
xor byte [rax + 0x14], r8b
xor byte [rax + 0x15], r8b
xor byte [rax + 0x16], r8b
xor byte [rax + 0x17], r8b
xor byte [rax + 0x18], r8b
xor byte [rax + 0x19], r8b
xor byte [rdx + 0x19], r8b
mov byte [rdx + 0x1a], 0
call fcn.14000c730
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
mov dword [rsp + 0x40], 0x65737519
mov dword [rsp + 0x44], 0x6d616e72
mov dword [rsp + 0x48], 0x203a65
lea rdx, [rsp + 0x41]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000c730
lea rdx, [rbp + 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.14000cb30
mov dword [rsp + 0x40], 0x7361700c
mov dword [rsp + 0x44], 0x726f7773
mov dword [rsp + 0x48], 0x203a64
lea rdx, [rsp + 0x41]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000c730
lea rcx, [rbp + 0xc0]
call fcn.140005950
lea rcx, [rbp + 0xe0]
cmp rcx, rax
je 0x14000740d
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xf0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x140007451
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000744c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000744c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401433c4
mov dword [rsp + 0x60], 0x79656b47
mov word [rsp + 0x64], 0x203a
mov byte [rsp + 0x66], 0
lea rdx, [rsp + 0x61]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000c730
lea rdx, [rbp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.14000cb30
lea rax, [rsp + 0x40]
mov qword [rsp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
xor r8d, r8d
lea rdx, [0x140174a38]
lea rcx, [rsp + 0x40]
call fcn.14000d680
nop
lea rax, [rsp + 0x70]
mov qword [rbp - 8], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
lea r15, [rbp + 0x50]
mov r13, qword [rbp + 0x68]
cmp r13, 0xf
cmova r15, qword [rbp + 0x50]
mov r14, qword [rbp + 0x60]
cmp r14, rsi
ja 0x140008673
cmp r14, 0xf
ja 0x14000750e
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x70], xmm0
jmp 0x1400075a4
mov rbx, r14
or rbx, 0xf
cmp rbx, rsi
jbe 0x140007549
mov rbx, rsi
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140143140
mov rcx, rax
test rax, rax
je 0x14000757b
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140007587
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140007563
mov rax, r12
jmp 0x140007587
cmp rcx, 0x1000
jb 0x140007582
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140008627
jmp 0x14000752b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140143140
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], rbx
lea r8, [r14 + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
lea rax, [rbp - 0x28]
mov qword [rbp - 0x70], rax
lea rdx, [rbp + 0xe0]
lea rcx, [rbp - 0x28]
call fcn.140009ec0
mov rbx, rax
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0xc0]
call fcn.140009ec0
nop
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x70]
mov r8, rbx
mov rdx, rax
lea rcx, [0x1401be3e0]
call fcn.1400f2110
mov r15, qword [rbp + 0xf8]
mov r14, qword [rbp + 0xf0]
jmp 0x140007864
lea rcx, [0x140174b88]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
mov dword [rsp + 0x40], 0x65737558
mov dword [rsp + 0x44], 0x6d616e72
mov dword [rsp + 0x48], 0x203a65
lea rdx, [rsp + 0x41]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000c730
lea rdx, [rbp + 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.14000cb30
mov dword [rsp + 0x40], 0x73617059
mov dword [rsp + 0x44], 0x726f7773
mov dword [rsp + 0x48], 0x203a64
lea rdx, [rsp + 0x41]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000c730
lea rcx, [rbp + 0xc0]
call fcn.140005950
lea rcx, [rbp + 0xe0]
cmp rcx, rax
je 0x14000770d
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xf0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r15, xmm0
movq r14, xmm1
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x140007751
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000774c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000774c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401433c4
lea rax, [rsp + 0x70]
mov qword [rbp + 0xa0], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
lea r12, [rbp + 0xe0]
cmp r15, 0xf
cmova r12, qword [rbp + 0xe0]
cmp r14, rsi
ja 0x140008679
cmp r14, 0xf
ja 0x1400077aa
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [r12]
movups xmmword [rsp + 0x70], xmm0
jmp 0x14000783f
mov rbx, r14
or rbx, 0xf
cmp rbx, rsi
jbe 0x1400077e5
mov rbx, rsi
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140143140
mov rcx, rax
test rax, rax
je 0x140007816
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140007822
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x1400077fe
xor eax, eax
jmp 0x140007822
cmp rcx, 0x1000
jb 0x14000781d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000862d
jmp 0x1400077c7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140143140
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], rbx
lea r8, [r14 + 1]
mov rdx, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x28]
call fcn.140009ec0
nop
lea r8, [rsp + 0x70]
mov rdx, rax
lea rcx, [0x1401be3e0]
call fcn.1400f0f10
xor r12d, r12d
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
cmp byte [0x1401be5f0], 0
jne 0x1400079bc
lea rcx, [0x140174b88]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
lea rdx, [rsp + 0x40]
call fcn.1400087a0
movzx edx, byte [rax]
xor byte [rax + 1], dl
xor byte [rax + 2], dl
xor byte [rax + 3], dl
xor byte [rax + 4], dl
xor byte [rax + 5], dl
xor byte [rax + 6], dl
xor byte [rax + 7], dl
xor byte [rax + 8], dl
xor byte [rax + 9], dl
xor byte [rax + 0xa], dl
mov byte [rax + 0xb], 0
lea rcx, [rax + 1]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x40]
call fcn.1400087c0
lea rdx, [rax + 1]
movzx r8d, byte [rax]
xor byte [rdx], r8b
xor byte [rax + 2], r8b
xor byte [rax + 3], r8b
xor byte [rax + 4], r8b
xor byte [rax + 5], r8b
xor byte [rax + 6], r8b
xor byte [rax + 7], r8b
xor byte [rax + 8], r8b
xor byte [rax + 9], r8b
xor byte [rdx + 9], r8b
mov byte [rdx + 0xa], 0
call fcn.14000c730
mov rcx, rax
lea rdx, [0x1401be5f8]
call fcn.14000c900
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
cmp qword [rbp + 0x40], 0
je 0x140007c39
test r14, r14
je 0x140007c39
lea rcx, [0x140174b88]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
lea rax, [rbp - 0x28]
mov qword [rbp + 0xa0], rax
lea rdx, [rbp + 0xe0]
lea rcx, [rbp - 0x28]
call fcn.140009ec0
mov r14, rax
lea rax, [rsp + 0x70]
mov qword [rbp - 0x70], rax
mov dword [rsp + 0x40], 0x73617052
mov dword [rsp + 0x44], 0x726f7773
mov word [rsp + 0x48], 0x64
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
lea rax, [rsp + 0x41]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140007ad0
lea rdx, [rsp + 0x41]
lea rcx, [rsp + 0x70]
call fcn.14000d680
nop
lea rax, [rbp - 0x68]
mov qword [rbp - 8], rax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x68]
call fcn.140009ec0
mov rbx, rax
lea rax, [rbp - 0x48]
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x40], 0x65737555
mov dword [rsp + 0x44], 0x6d616e72
mov word [rsp + 0x48], 0x65
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], r12
lea rax, [rsp + 0x41]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140007b40
lea rdx, [rsp + 0x41]
lea rcx, [rbp - 0x48]
call fcn.14000d680
nop
movdqa xmm0, xmmword [0x140187200]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x50], 0x6e6f
mov byte [rsp + 0x52], 0
lea rax, [rsp + 0x41]
mov rcx, rdi
nop dword [rax + rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x140007b80
mov rax, rsi
mov rdx, qword [rbp + 0x88]
sub rax, rdx
cmp rax, rcx
jb 0x14000867f
lea r9, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova r9, qword [rbp + 0x78]
mov qword [rsp + 0x30], rcx
lea rax, [rsp + 0x41]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp + 0xc0]
call fcn.14000f230
nop
mov qword [rsp + 0x28], r14
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov r9b, 1
mov r8, rbx
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0xc0]
call fcn.140005130
movdqa xmm0, xmmword [0x140186970]
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rbp - 0x80], 0x67676f6c
mov dword [rbp - 0x7c], 0x69206465
mov word [rbp - 0x78], 0xa6e
mov byte [rbp - 0x76], 0
lea rdx, [rsp + 0x71]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000c730
mov r15, qword [rbp + 0xf8]
jmp 0x140007e31
lea rcx, [0x140174b88]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
lea rax, [rbp - 0x48]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], r12
xor r8d, r8d
lea rdx, [0x140174a38]
lea rcx, [rbp - 0x48]
call fcn.14000d680
nop
lea rax, [rbp - 0x68]
mov qword [rbp + 0xa0], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], r12
xor r8d, r8d
lea rdx, [0x140174a38]
lea rcx, [rbp - 0x68]
call fcn.14000d680
nop
lea rax, [rbp]
mov qword [rbp - 0x70], rax
lea rdx, [rbp + 0x50]
lea rcx, [rbp]
call fcn.140009ec0
mov rbx, rax
lea rax, [rbp + 0xc0]
mov qword [rbp - 8], rax
mov dword [rsp + 0x60], 0x63696c74
mov dword [rsp + 0x64], 0x65736e65
mov byte [rsp + 0x68], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], r12
mov qword [rbp + 0xd8], r12
lea rax, [rsp + 0x61]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140007d43
lea rdx, [rsp + 0x61]
lea rcx, [rbp + 0xc0]
call fcn.14000d680
nop
movdqa xmm0, xmmword [0x1401871f0]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rbp - 0x80], 0x6e6f
mov byte [rbp - 0x7e], 0
lea rax, [rsp + 0x71]
mov rcx, rdi
nop
inc rcx
cmp byte [rax + rcx], 0
jne 0x140007d80
mov rax, rsi
mov rdx, qword [rbp + 0x88]
sub rax, rdx
cmp rax, rcx
jb 0x140008685
lea r9, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova r9, qword [rbp + 0x78]
mov qword [rsp + 0x30], rcx
lea rax, [rsp + 0x71]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x28]
call fcn.14000f230
nop
lea rax, [rbp - 0x48]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8, rbx
lea rdx, [rbp + 0xc0]
lea rcx, [rbp - 0x28]
call fcn.140005130
movdqa xmm0, xmmword [0x140186960]
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rbp - 0x80], 0x67676f6c
mov dword [rbp - 0x7c], 0x69206465
mov word [rbp - 0x78], 0xa6e
mov byte [rbp - 0x76], 0
lea rdx, [rsp + 0x71]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000c730
mov r13, qword [rbp + 0x68]
cmp r13, 0xf
jbe 0x140007e6d
lea rdx, [r13 + 1]
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007e67
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007e67
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401433c4
nop
cmp r15, 0xf
jbe 0x140007eac
lea rdx, [r15 + 1]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007ea6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007ea6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401433c4
nop
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x140007eea
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007ee5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007ee5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401433c4
lea r14, [0x1401a4118]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
mov dword [rsp + 0x60], 0x76655c3a
mov dword [rsp + 0x64], 0x616e65
lea rax, [rsp + 0x61]
mov rcx, rdi
inc rcx
cmp byte [rax + rcx], 0
jne 0x140007f54
mov rax, rsi
mov rdx, qword [rbp + 0x88]
sub rax, rdx
cmp rax, rcx
jb 0x14000868b
lea r9, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova r9, qword [rbp + 0x78]
mov qword [rsp + 0x30], rcx
lea rax, [rsp + 0x61]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp + 0x50]
call fcn.14000f230
nop
lea rax, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova rax, qword [rbp + 0x50]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp + 0x60]
mov qword [rsp + 0x48], rax
call fcn.14014289c
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rbp + 0x30]
call fcn.140003250
nop
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0xa0]
call fcn.140003c00
movsd xmm0, qword [rax]
movsd qword [rsp + 0x40], xmm0
mov ecx, dword [rax + 8]
mov dword [rbp + 0xa0], ecx
mov qword [rbp + 0xa8], r14
movaps xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rbp + 0xa0], xmm0
mov eax, dword [rsp + 0x40]
test eax, eax
je 0x140008064
cmp eax, 1
sete bl
mov rdx, qword [rbp + 0x48]
cmp rdx, 7
jbe 0x140008075
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008070
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008070
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov bl, 1
test ecx, ecx
jne 0x140008633
jmp 0x140008026
call fcn.1401433c4
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], 7
mov word [rbp + 0x30], r12w
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x1400080c4
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400080bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400080bf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401433c4
test bl, bl
je 0x140008220
mov dword [rsp + 0x60], 0x76655c08
mov dword [rsp + 0x64], 0x616e65
lea rax, [rsp + 0x61]
mov rcx, rdi
inc rcx
cmp byte [rax + rcx], 0
jne 0x1400080e4
mov rax, rsi
mov rdx, qword [rbp + 0x88]
sub rax, rdx
cmp rax, rcx
jb 0x140008691
lea r9, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova r9, qword [rbp + 0x78]
mov qword [rsp + 0x30], rcx
lea rax, [rsp + 0x61]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp + 0x50]
call fcn.14000f230
nop
lea rax, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova rax, qword [rbp + 0x50]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp + 0x60]
mov qword [rsp + 0x48], rax
call fcn.14014289c
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rbp + 0x30]
call fcn.140003250
nop
lea rcx, [rbp + 0x30]
cmp qword [rbp + 0x48], 7
cmova rcx, qword [rbp + 0x30]
call fcn.140142afc
shr rax, 0x20
test eax, eax
jne 0x140008697
mov rdx, qword [rbp + 0x48]
cmp rdx, 7
jbe 0x1400081d1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400081cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400081cc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401433c4
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], 7
mov word [rbp + 0x30], r12w
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x140008220
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000821b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000821b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401433c4
movdqa xmm0, xmmword [str.yevenaconfigs]
movdqu xmmword [rsp + 0x40], xmm0
lea rax, [rsp + 0x41]
mov rcx, rdi
inc rcx
cmp byte [rax + rcx], 0
jne 0x140008236
mov rax, rsi
mov rdx, qword [rbp + 0x88]
sub rax, rdx
cmp rax, rcx
jb 0x1400086aa
lea r9, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova r9, qword [rbp + 0x78]
mov qword [rsp + 0x30], rcx
lea rax, [rsp + 0x41]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp + 0x50]
call fcn.14000f230
nop
lea rax, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova rax, qword [rbp + 0x50]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp + 0x60]
mov qword [rsp + 0x48], rax
call fcn.14014289c
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rbp + 0x30]
call fcn.140003250
nop
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0xa0]
call fcn.140003c00
movsd xmm0, qword [rax]
movsd qword [rsp + 0x40], xmm0
mov ecx, dword [rax + 8]
mov dword [rbp + 0xa0], ecx
mov qword [rbp + 0xa8], r14
movaps xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rbp + 0xa0], xmm0
mov eax, dword [rsp + 0x40]
test eax, eax
je 0x140008346
cmp eax, 1
sete bl
mov rdx, qword [rbp + 0x48]
cmp rdx, 7
jbe 0x140008357
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008352
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008352
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov bl, 1
test ecx, ecx
jne 0x140008644
jmp 0x140008308
call fcn.1401433c4
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], 7
mov word [rbp + 0x30], r12w
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x1400083a6
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400083a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400083a1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401433c4
test bl, bl
je 0x1400084fa
movdqa xmm0, xmmword [str.devenaconfigs]
movdqu xmmword [rsp + 0x40], xmm0
lea rax, [rsp + 0x41]
inc rdi
cmp byte [rax + rdi], 0
jne 0x1400083c1
mov rax, qword [rbp + 0x88]
sub rsi, rax
cmp rsi, rdi
jb 0x1400086b0
lea r9, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova r9, qword [rbp + 0x78]
mov qword [rsp + 0x30], rdi
lea rcx, [rsp + 0x41]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x50]
call fcn.14000f230
nop
lea rax, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova rax, qword [rbp + 0x50]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp + 0x60]
mov qword [rsp + 0x48], rax
call fcn.14014289c
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rbp + 0x30]
call fcn.140003250
nop
lea rcx, [rbp + 0x30]
cmp qword [rbp + 0x48], 7
cmova rcx, qword [rbp + 0x30]
call fcn.140142afc
shr rax, 0x20
test eax, eax
jne 0x140008603
mov rdx, qword [rbp + 0x48]
cmp rdx, 7
jbe 0x1400084ab
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400084a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400084a6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401433c4
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], 7
mov word [rbp + 0x30], r12w
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x1400084fa
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400084f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400084f5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401433c4
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
xor edx, edx
lea rcx, [0x140005c40]
call qword [sym.imp.USER32.dll_EnumWindows]
call fcn.1400699d0
nop
mov rdx, qword [rbp + 0x90]
cmp rdx, 0xf
jbe 0x14000858d
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008587
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008587
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401433c4
nop
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x1400085d1
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400085cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400085cc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401433c4
xor eax, eax
mov rcx, qword [rbp + 0x390]
xor rcx, rsp
call fcn.140143120
lea r11, [rsp + 0x4a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea r8, [rbp + 0x30]
mov edx, eax
lea rcx, str.create_directory
call fcn.140003b30
nop
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0xa0]
call fcn.140003ba0
nop
call fcn.140002070
nop
call fcn.140002070
nop
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0xa0]
call fcn.140003ba0
nop
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0xa0]
call fcn.140003ba0
nop
call fcn.140002110
nop
call fcn.140002110
nop
call fcn.140002110
nop
call fcn.140002110
nop
call fcn.140002110
nop
call fcn.140002110
nop
call fcn.140002110
nop
call fcn.140002110
nop
call fcn.140002110
nop
call fcn.140002110
int3
call fcn.140002110
nop
lea r8, [rbp + 0x30]
mov edx, eax
lea rcx, str.create_directory
call fcn.140003b30
nop
call fcn.140002110
int3
call fcn.140002110
int3