Function at 0x7ff670d98530
Capabilities:
Create process on windows
Execute command

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x150]
sub rsp, 0x250
mov r14, rdx
xor r15d, r15d
call qword [sym.imp.kernel32.dll_GetCurrentThread]
mov rcx, rax
lea edx, [r15 + 0xf]
call qword [sym.imp.kernel32.dll_SetThreadPriority]
lea r12, [0x7ff670e43350]
lea r13, [0x7ff670e0c8b0]
nop dword [rax + rax]
cmp byte [0x7ff670e42f48], 1
jne 0x7ff670d99558
mov dword [rbp - 0x10], 0xd4061725
movdqa xmm0, xmmword [0x7ff670e13b60]
movdqu xmmword [rbp - 0xc], xmm0
movdqa xmm1, xmmword [0x7ff670e13c40]
movdqu xmmword [rbp + 4], xmm1
mov dword [rbp + 0x14], 0xe2ad
mov r8d, 0xd4061725
lea rdx, [rbp - 0xc]
lea rcx, [rbp - 0x70]
call fcn.7ff670d995e0
movups xmm1, xmmword [rax]
movups xmmword [rsp + 0x40], xmm1
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm0
movsd xmm1, qword [rax + 0x20]
movsd qword [rsp + 0x60], xmm1
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x80], r15
lea rax, [rsp + 0x44]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x7ff670d98601
lea rdx, [rsp + 0x44]
lea rcx, [rsp + 0x68]
call fcn.7ff670d8a160
lea rcx, [rsp + 0x68]
call fcn.7ff670d98140
cmp byte [0x7ff670e2f66e], 0
je 0x7ff670d98794
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], 0xb
mov qword [rbp - 0x58], 0xf
movsd xmm0, qword [0x7ff670e0b720]
movsd qword [rbp - 0x70], xmm0
movzx eax, word [0x7ff670e0b728]
mov word [rbp - 0x68], ax
movzx eax, byte [0x7ff670e0b72a]
mov byte [rbp - 0x66], al
mov byte [rbp - 0x65], 0
mov dword [rbp - 0x10], 0xd9061725
movdqa xmm0, xmmword [0x7ff670e13b30]
movdqu xmmword [rbp - 0xc], xmm0
movdqa xmm1, xmmword [0x7ff670e13bd0]
movdqu xmmword [rbp + 4], xmm1
mov r8d, 0xd9061725
lea rdx, [rbp - 0xc]
lea rcx, [rbp - 0x48]
call fcn.7ff670d99c00
movups xmm1, xmmword [rax]
movups xmmword [rsp + 0x68], xmm1
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rsp + 0x78], xmm0
mov eax, dword [rax + 0x20]
mov dword [rbp - 0x78], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
lea rax, [rsp + 0x6c]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x7ff670d986e0
lea rdx, [rsp + 0x6c]
lea rcx, [rsp + 0x40]
call fcn.7ff670d8a160
nop
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x40]
call fcn.7ff670d97e20
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x7ff670d98746
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670d98741
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff670d99568
call fcn.7ff670dbdfe4
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x7ff670d98794
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670d9878f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff670d9956f
call fcn.7ff670dbdfe4
cmp byte [0x7ff670e2f6a4], 0
je 0x7ff670d988fd
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], 0xb
mov qword [rbp - 0x30], 0xf
movsd xmm0, qword [0x7ff670e0b720]
movsd qword [rbp - 0x48], xmm0
movzx eax, word [0x7ff670e0b728]
mov word [rbp - 0x40], ax
movzx eax, byte [0x7ff670e0b72a]
mov byte [rbp - 0x3e], al
mov byte [rbp - 0x3d], 0
mov dword [rsp + 0x40], 0xde061725
movdqa xmm0, xmmword [0x7ff670e13c00]
movdqu xmmword [rsp + 0x44], xmm0
mov dword [rsp + 0x54], 0x252c33c
mov dword [rsp + 0x58], 0x67bed4fb
mov dword [rsp + 0x5c], 0xc7af
mov r8d, 0xde061725
lea rdx, [rsp + 0x44]
lea rcx, [rbp - 0x10]
call fcn.7ff670d9a1c0
movups xmm1, xmmword [rax]
movups xmmword [rsp + 0x68], xmm1
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x70], xmm1
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], r15
lea rax, [rsp + 0x6c]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x7ff670d98850
lea rdx, [rsp + 0x6c]
lea rcx, [rbp - 0x70]
call fcn.7ff670d8a160
nop
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x70]
call fcn.7ff670d97e20
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x7ff670d988b2
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670d988ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff670d99576
call fcn.7ff670dbdfe4
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x7ff670d988fd
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670d988f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff670d9957d
call fcn.7ff670dbdfe4
cmp byte [0x7ff670e2f6a6], 0
je 0x7ff670d98a62
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], 0xb
mov qword [rbp - 0x30], 0xf
movsd xmm0, qword [0x7ff670e0b720]
movsd qword [rbp - 0x48], xmm0
movzx eax, word [0x7ff670e0b728]
mov word [rbp - 0x40], ax
movzx eax, byte [0x7ff670e0b72a]
mov byte [rbp - 0x3e], al
mov byte [rbp - 0x3d], 0
mov dword [rsp + 0x40], 0xc3061725
movdqa xmm0, xmmword [0x7ff670e13be0]
movdqu xmmword [rsp + 0x44], xmm0
mov dword [rsp + 0x54], 0xf9ccd9f1
mov dword [rsp + 0x58], 0x65704156
mov dword [rsp + 0x5c], 0x35e7c7
mov r8d, 0xc3061725
lea rdx, [rsp + 0x44]
lea rcx, [rbp - 0x10]
call fcn.7ff670d9a660
movups xmm1, xmmword [rax]
movups xmmword [rsp + 0x68], xmm1
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x70], xmm1
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], r15
lea rax, [rsp + 0x6c]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x7ff670d989b5
lea rdx, [rsp + 0x6c]
lea rcx, [rbp - 0x70]
call fcn.7ff670d8a160
nop
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x70]
call fcn.7ff670d97e20
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x7ff670d98a17
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670d98a12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff670d99584
call fcn.7ff670dbdfe4
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x7ff670d98a62
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670d98a5d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff670d9958b
call fcn.7ff670dbdfe4
cmp byte [0x7ff670e2f66c], 0
je 0x7ff670d98bcd
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], 0xb
mov qword [rbp - 0x30], 0xf
movsd xmm0, qword [0x7ff670e0b720]
movsd qword [rbp - 0x48], xmm0
movzx eax, word [0x7ff670e0b728]
mov word [rbp - 0x40], ax
movzx eax, byte [0x7ff670e0b72a]
mov byte [rbp - 0x3e], al
mov byte [rbp - 0x3d], 0
mov dword [rsp + 0x40], 0xc8061725
movdqa xmm0, xmmword [0x7ff670e13b80]
movdqu xmmword [rsp + 0x44], xmm0
mov dword [rsp + 0x54], 0xfb7bba86
mov dword [rsp + 0x58], 0xa3b03131
mov dword [rsp + 0x5c], 0x6e37ec72
mov r8d, 0xc8061725
lea rdx, [rsp + 0x44]
lea rcx, [rbp - 0x10]
call fcn.7ff670d9ab30
movups xmm1, xmmword [rax]
movups xmmword [rsp + 0x68], xmm1
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x70], xmm1
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], r15
lea rax, [rsp + 0x6c]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x7ff670d98b20
lea rdx, [rsp + 0x6c]
lea rcx, [rbp - 0x70]
call fcn.7ff670d8a160
nop
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x70]
call fcn.7ff670d97e20
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x7ff670d98b82
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670d98b7d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff670d99592
call fcn.7ff670dbdfe4
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x7ff670d98bcd
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670d98bc8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff670d99599
call fcn.7ff670dbdfe4
cmp byte [0x7ff670e2f66f], 0
je 0x7ff670d98d32
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], 0xb
mov qword [rbp - 0x30], 0xf
movsd xmm0, qword [0x7ff670e0b720]
movsd qword [rbp - 0x48], xmm0
movzx eax, word [0x7ff670e0b728]
mov word [rbp - 0x40], ax
movzx eax, byte [0x7ff670e0b72a]
mov byte [rbp - 0x3e], al
mov byte [rbp - 0x3d], 0
mov dword [rsp + 0x40], 0xcd061725
movdqa xmm0, xmmword [0x7ff670e13b90]
movdqu xmmword [rsp + 0x44], xmm0
mov dword [rsp + 0x54], 0xbcc0accd
mov dword [rsp + 0x58], 0x186c144a
mov dword [rsp + 0x5c], 0xd774
mov r8d, 0xcd061725
lea rdx, [rsp + 0x44]
lea rcx, [rbp - 0x10]
call fcn.7ff670d9a1c0
movups xmm1, xmmword [rax]
movups xmmword [rsp + 0x68], xmm1
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x70], xmm1
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], r15
lea rax, [rsp + 0x6c]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x7ff670d98c85
lea rdx, [rsp + 0x6c]
lea rcx, [rbp - 0x70]
call fcn.7ff670d8a160
nop
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x70]
call fcn.7ff670d97e20
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x7ff670d98ce7
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670d98ce2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff670d995a0
call fcn.7ff670dbdfe4
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x7ff670d98d32
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670d98d2d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff670d995a7
call fcn.7ff670dbdfe4
lea rcx, [rbp + 0x18]
call fcn.7ff670da2090
nop
lea rax, [rbp + 0x130]
mov qword [rbp + 0x1a0], rax
mov dword [rbp - 0x20], 0x6c0c2e4d
mov dword [rbp - 0x1c], 0xf6ec571e
mov dword [rbp - 0x18], 0xd7ff76c8
mov dword [rbp - 0x14], 0x46a6a40e
mov r8d, 0x6c0c2e4d
lea rdx, [rbp - 0x1c]
lea rcx, [rbp + 0x140]
call fcn.7ff670d9b2b0
movups xmm1, xmmword [rax]
movups xmmword [rbp - 0x48], xmm1
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x80], r15
lea rax, [rbp - 0x44]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x7ff670d98da0
lea rdx, [rbp - 0x44]
lea rcx, [rsp + 0x68]
call fcn.7ff670d8a160
nop
xor eax, eax
mov qword [rbp + 0x38], rax
mov byte [rbp + 0x30], 3
lea ecx, [rax + 0x20]
call fcn.7ff670dbe3bc
movups xmm0, xmmword [rsp + 0x68]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rsp + 0x78]
movups xmmword [rax + 0x10], xmm1
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x80], 0xf
mov byte [rsp + 0x68], 0
mov qword [rbp + 0x38], rax
lea rax, [rbp + 0x30]
mov qword [rbp + 0x40], rax
mov byte [rbp + 0x48], 1
xor eax, eax
mov qword [rbp + 0x58], rax
mov byte [rbp + 0x50], 3
lea ecx, [rax + 0x20]
call fcn.7ff670dbe3bc
mov rbx, rax
lea rax, [rbp + 0x190]
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x98], rbx
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], r15
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [r12 + r8], 0
jne 0x7ff670d98e40
mov rdx, r12
mov rcx, rbx
call fcn.7ff670d8a160
mov qword [rbp + 0x98], r15
mov qword [rbp + 0x58], rbx
lea rax, [rbp + 0x50]
mov qword [rbp + 0x60], rax
mov byte [rbp + 0x68], 1
mov byte [rbp + 0x70], 0
xor eax, eax
mov qword [rbp + 0x78], rax
lea rdx, [0x7ff670e2a9d8]
lea rcx, [rbp + 0x70]
call fcn.7ff670da9e10
movzx eax, byte [rbp + 0x70]
cmp al, 1
jne 0x7ff670d98eb3
cmp qword [rbp + 0x78], 0
jne 0x7ff670d98f01
mov r8d, 0x3d13
lea rdx, [0x7ff670e0b090]
lea rcx, [0x7ff670e0c580]
call qword [sym.imp.ucrtbase.dll__wassert]
movzx eax, byte [rbp + 0x70]
cmp al, 2
jne 0x7ff670d98edc
cmp qword [rbp + 0x78], 0
jne 0x7ff670d98f01
mov r8d, 0x3d14
lea rdx, [0x7ff670e0b090]
lea rcx, [0x7ff670e0c5f0]
call qword [sym.imp.ucrtbase.dll__wassert]
movzx eax, byte [rbp + 0x70]
cmp al, 3
jne 0x7ff670d98f01
cmp qword [rbp + 0x78], 0
jne 0x7ff670d98f01
mov r8d, 0x3d15
lea rdx, [0x7ff670e0b090]
lea rcx, [0x7ff670e0c660]
call qword [sym.imp.ucrtbase.dll__wassert]
lea rax, [rbp + 0x70]
mov qword [rbp + 0x80], rax
mov byte [rbp + 0x88], 1
lea rax, [rbp + 0x30]
mov qword [rbp + 0xa0], rax
lea rax, [rbp + 0x90]
mov qword [rbp + 0xa8], rax
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x130]
call fcn.7ff670da1dc0
mov rsi, rax
mov dword [rbp - 0x70], 0x6c0c2e4d
movdqa xmm0, xmmword [0x7ff670e13b00]
movdqu xmmword [rbp - 0x6c], xmm0
mov r8d, 0x6c0c2e4d
lea rdx, [rbp - 0x6c]
lea rcx, [rsp + 0x40]
call fcn.7ff670d9b030
movups xmm1, xmmword [rax]
movups xmmword [rbp - 0x48], xmm1
mov eax, dword [rax + 0x10]
mov dword [rbp - 0x38], eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], r15
mov qword [rbp + 8], r15
lea rax, [rbp - 0x44]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x7ff670d98f91
lea rdx, [rbp - 0x44]
lea rcx, [rbp - 0x10]
call fcn.7ff670d8a160
nop
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x18]
call fcn.7ff670da19a0
mov rdi, rax
mov rcx, rsi
call fcn.7ff670da41c0
movzx edx, byte [rdi]
movzx ecx, byte [rsi]
mov byte [rdi], cl
mov byte [rsi], dl
mov rdx, qword [rdi + 8]
mov r8, qword [rsi + 8]
mov qword [rdi + 8], r8
mov qword [rsi + 8], rdx
mov rcx, rdi
call fcn.7ff670da41c0
mov rcx, rsi
call fcn.7ff670da41c0
movzx edx, byte [rsi]
lea rcx, [rsi + 8]
call fcn.7ff670da3ae0
nop
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x7ff670d99033
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670d9902e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff670d995ae
call fcn.7ff670dbdfe4
mov qword [rbp], r15
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
lea r9, [fcn.7ff670d9c040]
mov edx, 0x20
lea r8d, [rdx - 0x1d]
lea rcx, [rbp + 0x30]
call fcn.7ff670dbdf14
nop
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x18]
call fcn.7ff670da1a90
nop
lea rax, [rsp + 0x68]
cmp qword [rbp - 0x80], 0xf
cmova rax, qword [rsp + 0x68]
mov qword [rbp + 0xb0], rax
mov rax, qword [rsp + 0x78]
mov qword [rbp + 0xb8], rax
lea rdx, [rbp + 0xb0]
mov rcx, r14
call fcn.7ff670da5ed0
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x7ff670d990db
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670d990d6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff670d995b5
call fcn.7ff670dbdfe4
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
lea rbx, [0x7ff670e2f6b0]
mov qword [rbp - 0x68], rbx
mov dword [rbp - 0x70], 0x13898
mov qword [rbp - 0x60], 0x13898
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], rax
mov byte [rsp + 0x28], 0
mov r9d, 1
lea r8, [rbp - 0x70]
movzx edx, byte [r14 + 0x10]
mov rcx, qword [r14 + 8]
call fcn.7ff670d91fd0
lea rax, [0x7ff670e0c860]
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], r13
mov dword [rbp - 0x60], 0x3f2
mov dword [rbp - 0x5c], 0x1a
mov rax, qword [rsp + 0x50]
test al, 1
je 0x7ff670d99169
cmp rax, 1
jne 0x7ff670d995bc
cmp dword [rsp + 0x40], 0
setne al
test al, al
jne 0x7ff670d995bc
mov edx, 0x13898
mov rcx, rbx
call fcn.7ff670dacde0
mov dword [rsp + 0x40], 0x760c2e4d
movdqa xmm0, xmmword [0x7ff670e13bc0]
movdqu xmmword [rsp + 0x44], xmm0
movdqa xmm1, xmmword [0x7ff670e13b40]
movdqu xmmword [rsp + 0x54], xmm1
mov r8d, 0x760c2e4d
lea rdx, [rsp + 0x44]
lea rcx, [rbp - 0x70]
call fcn.7ff670d99c00
movups xmm1, xmmword [rax]
movups xmmword [rbp - 0x10], xmm1
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp], xmm0
mov eax, dword [rax + 0x20]
mov dword [rbp + 0x10], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x80], r15
lea rax, [rbp - 0xc]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x7ff670d991e0
lea rdx, [rbp - 0xc]
lea rcx, [rsp + 0x68]
call fcn.7ff670d8a160
lea rcx, [rsp + 0x68]
call fcn.7ff670d98140
mov dword [rsp + 0x40], 0x780c2e4d
movdqa xmm0, xmmword [0x7ff670e13b70]
movdqu xmmword [rsp + 0x44], xmm0
mov dword [rsp + 0x54], 0x91a69e70
mov r8d, 0x780c2e4d
lea rdx, [rsp + 0x44]
lea rcx, [rbp - 0x48]
call fcn.7ff670d9b4d0
movups xmm1, xmmword [rax]
movups xmmword [rbp - 0x70], xmm1
movsd xmm0, qword [rax + 0x10]
movsd qword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x68], xmm1
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x80], r15
lea rax, [rbp - 0x6c]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x7ff670d99261
lea rdx, [rbp - 0x6c]
lea rcx, [rsp + 0x68]
call fcn.7ff670d8a160
lea rcx, [rsp + 0x68]
call fcn.7ff670d98140
mov dword [rsp + 0x40], 0x7a0c2e4d
movdqa xmm0, xmmword [0x7ff670e13bf0]
movdqu xmmword [rsp + 0x44], xmm0
mov dword [rsp + 0x54], 0xbaa20359
mov byte [rsp + 0x58], 0xee
xor eax, eax
mov word [rsp + 0x59], ax
mov byte [rsp + 0x5b], al
mov r8d, 0x7a0c2e4d
lea rdx, [rsp + 0x44]
lea rcx, [rbp - 0x48]
call fcn.7ff670d9b860
movups xmm1, xmmword [rax]
movups xmmword [rbp - 0x70], xmm1
movsd xmm0, qword [rax + 0x10]
movsd qword [rbp - 0x60], xmm0
mov eax, dword [rax + 0x18]
mov dword [rbp - 0x58], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x80], r15
lea rax, [rbp - 0x6c]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x7ff670d99300
lea rdx, [rbp - 0x6c]
lea rcx, [rsp + 0x68]
call fcn.7ff670d8a160
lea rcx, [rsp + 0x68]
call fcn.7ff670d98140
mov dword [rsp + 0x40], 0x7c0c2e4d
movdqa xmm0, xmmword [0x7ff670e13b50]
movdqu xmmword [rsp + 0x44], xmm0
mov dword [rsp + 0x54], 0x256d28e
mov dword [rsp + 0x58], 0x69e2fd
mov r8d, 0x7c0c2e4d
lea rdx, [rsp + 0x44]
lea rcx, [rbp - 0x48]
call fcn.7ff670d9bc20
movups xmm1, xmmword [rax]
movups xmmword [rbp - 0x70], xmm1
movsd xmm0, qword [rax + 0x10]
movsd qword [rbp - 0x60], xmm0
mov eax, dword [rax + 0x18]
mov dword [rbp - 0x58], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x80], r15
lea rax, [rbp - 0x6c]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x7ff670d99390
lea rdx, [rbp - 0x6c]
lea rcx, [rsp + 0x68]
call fcn.7ff670d8a160
lea rcx, [rsp + 0x68]
call fcn.7ff670d98140
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
movups xmmword [rbp + 0x110], xmm0
movups xmmword [rbp + 0x120], xmm0
mov dword [rbp + 0xc0], 0x70
mov dword [rbp + 0xc4], 0x40
mov qword [rbp + 0xc8], r15
lea rax, [0x7ff670e09810]
mov qword [rbp + 0xd0], rax
lea rax, [0x7ff670e0b730]
mov qword [rbp + 0xd8], rax
lea rax, [0x7ff670e0b740]
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0xe8], r15
mov dword [rbp + 0xf0], 5
mov qword [rbp + 0xf8], r15
lea rcx, [rbp + 0xc0]
call qword [sym.imp.shell32.dll_ShellExecuteExA]
test eax, eax
je 0x7ff670d99475
mov edx, 0xffffffff
mov rcx, qword [rbp + 0x128]
call qword [sym.imp.kernel32.dll_WaitForSingleObject]
mov rcx, qword [rbp + 0x128]
call qword [sym.imp.kernel32.dll_CloseHandle]
jmp 0x7ff670d9947b
call qword [sym.imp.kernel32.dll_GetLastError]
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x80], r15
mov ecx, 0x20
call fcn.7ff670dbe3bc
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x78], 0x14
mov qword [rbp - 0x80], 0x1f
movups xmm0, xmmword [0x7ff670e0b750]
movups xmmword [rax], xmm0
mov ecx, dword [0x7ff670e0b760]
mov dword [rax + 0x10], ecx
mov byte [rax + 0x14], 0
lea r8, [rsp + 0x68]
call fcn.7ff670d983b0
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x7ff670d9950a
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff670d99505
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff670d995ce
call fcn.7ff670dbdfe4
mov ecx, 0x5dc
call qword [sym.imp.kernel32.dll_Sleep]
lea rcx, [0x7ff670e0b750]
call qword [sym.imp.ucrtbase.dll_system]
mov byte [0x7ff670e42f48], 0
lea rdx, [0x7ff670e0b768]
lea rcx, [0x7ff670e0b780]
call fcn.7ff670d96d00
nop
lea rcx, [rbp + 0x18]
call fcn.7ff670da41c0
movzx edx, byte [rbp + 0x18]
lea rcx, [rbp + 0x20]
call fcn.7ff670da3ae0
jmp 0x7ff670d98580
mov ecx, 0x32
call qword [sym.imp.kernel32.dll_Sleep]
jmp 0x7ff670d98580
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
lea r8, [rbp - 0x70]
mov rdx, r13
lea rcx, [rsp + 0x40]
call fcn.7ff670d8fbe0
int3
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3