Function at 0x1400012a0
Capabilities:
Encode data using xor
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x6a8]
sub rsp, 0x780
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x140009040]
xor rax, rsp
mov qword [rbp + 0x650], rax
xor r15d, r15d
movups xmm0, xmmword [str.q_thb_YVMH_nGL4__pv]
movups xmmword [rbp + 0x608], xmm0
movups xmm1, xmmword [0x140005a90]
movups xmmword [rbp + 0x618], xmm1
movzx eax, word [0x140005aa0]
mov word [rbp + 0x628], ax
movzx eax, byte [0x140005aa2]
mov byte [rbp + 0x62a], al
movups xmm0, xmmword [0x140005a40]
movups xmmword [rbp + 0x5e0], xmm0
movups xmm1, xmmword [0x140005a50]
movups xmmword [rbp + 0x5f0], xmm1
movzx eax, word [0x140005a60]
mov word [rbp + 0x600], ax
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x4c0]
call sub.VCRUNTIME140.dll_memset
mov r8d, r15d
mov ebx, dword [0x140009088]
cmp ebx, 2
jl 0x1400014ad
movdqa xmm5, xmmword [0x140005ae0]
movdqa xmm4, xmmword [0x140005b20]
movdqa xmm6, xmmword [str.9999]
movdqa xmm0, xmmword [str.2222222222222222]
movdqa xmmword [rbp + 0x5d0], xmm0
lea rcx, [rbp + 0x60c]
mov edx, dword [rbp + 0x5d0]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140005b00]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140005b00]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x1400013a0
cmp r8d, 0x23
jge 0x1400014f3
movsxd rax, r8d
lea r9, [rbp + 0x608]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x23
jl 0x1400014c0
lea rdx, [rbp + 0x608]
lea rcx, [rbp + 0x4c0]
call fcn.140003130
nop
mov rax, qword [rbp + 0x4c0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x4c0]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x14000155d
lea rdx, str._1__An_error_has_occurred._Please_relaunch_the_application.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
mov rcx, rax
lea rdx, [0x140003840]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x3b0]
call sub.VCRUNTIME140.dll_memset
cmp byte [rbp + 0x601], 0
je 0x140001713
mov r8d, r15d
cmp ebx, 2
jl 0x1400016cd
movdqa xmm5, xmmword [0x140005ae0]
movdqa xmm4, xmmword [0x140005b20]
movdqa xmm6, xmmword [str.9999]
movdqa xmm0, xmmword [str.2222222222222222]
movdqa xmmword [rbp + 0x5d0], xmm0
lea rcx, [rbp + 0x5e4]
mov edx, dword [rbp + 0x5d0]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140005b00]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140005b00]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x1400015c0
cmp r8d, 0x22
jge 0x140001713
movsxd rax, r8d
lea r9, [rbp + 0x5e0]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x22
jl 0x1400016e0
lea rdx, [rbp + 0x5e0]
lea rcx, [rbp + 0x3b0]
call fcn.140003130
nop
mov rax, qword [rbp + 0x3b0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x3b0]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x14000177d
lea rdx, str._2__An_error_has_occurred._Please_relaunch_the_application.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
mov rcx, rax
lea rdx, [0x140003840]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rbp + 0x180], r15
lea r8, str.USERPROFILE
lea rdx, [rbp + 0x5d0]
lea rcx, [rbp + 0x180]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__dupenv_s]
mov rsi, qword [rbp + 0x180]
test eax, eax
je 0x1400017b6
test rsi, rsi
jne 0x1400017b6
mov esi, 9
jmp 0x1400017c0
add rsi, 9
je 0x14000236e
cmp byte [rsi], 0
je 0x14000236e
lea rax, str.WDAGUtilityAccount
mov qword [rbp - 0x60], rax
lea rax, str.3W1GJT
mov qword [rbp - 0x58], rax
lea rax, str.QZSBJVWM
mov qword [rbp - 0x50], rax
lea rax, str.5ISYH9SH
mov qword [rbp - 0x48], rax
lea rax, str.Abby
mov qword [rbp - 0x40], rax
lea rax, str.hmarc
mov qword [rbp - 0x38], rax
lea rax, str.patex
mov qword [rbp - 0x30], rax
lea rax, str.RDhJ0CNFevzX
mov qword [rbp - 0x28], rax
lea rax, str.kEecfMwgj
mov qword [rbp - 0x20], rax
lea rax, str.Frank
mov qword [rbp - 0x18], rax
lea rax, str.8Nl0ColNQ5bq
mov qword [rbp - 0x10], rax
lea rax, str.Lisa
mov qword [rbp - 8], rax
lea rax, str.John
mov qword [rbp], rax
lea rax, str.george
mov qword [rbp + 8], rax
lea rax, str.PxmdUOpVyx
mov qword [rbp + 0x10], rax
lea rax, str.8VizSM
mov qword [rbp + 0x18], rax
lea rax, str.w0fjuOVmCcP5A
mov qword [rbp + 0x20], rax
lea rax, str.lmVwjj9b
mov qword [rbp + 0x28], rax
lea rax, str.PqONjHVwexsS
mov qword [rbp + 0x30], rax
lea rax, str.3u2v9m8
mov qword [rbp + 0x38], rax
lea rax, str.Julia
mov qword [rbp + 0x40], rax
lea rax, str.HEUeRzl
mov qword [rbp + 0x48], rax
lea rax, str.fred
mov qword [rbp + 0x50], rax
lea rax, str.BvJChRPnsxn
mov qword [rbp + 0x58], rax
lea rax, str.Harry_Johnson
mov qword [rbp + 0x60], rax
lea rax, str.SqgFOf3G
mov qword [rbp + 0x68], rax
lea rax, str.mike
mov qword [rbp + 0x70], rax
lea rax, str.PateX
mov qword [rbp + 0x78], rax
lea rax, str.h7dk1xPr
mov qword [rbp + 0x80], rax
lea rax, str.Louise
mov qword [rbp + 0x88], rax
lea rax, str.User01
mov qword [rbp + 0x90], rax
lea rax, str.RGzcBUyrznReg
mov qword [rbp + 0x98], rax
lea rax, str.vishwnha
mov qword [rbp + 0xa0], rax
lea rax, str.Ij2uYLRiM7iY
mov qword [rbp + 0xa8], rax
lea rax, str.scQK1
mov qword [rbp + 0xb0], rax
lea rax, str.VFw4qbgFvbCk
mov qword [rbp + 0xb8], rax
lea rax, str.Vlbl6Iln6DB
mov qword [rbp + 0xc0], rax
lea rax, str.azure
mov qword [rbp + 0xc8], rax
lea rax, str.r.vult
mov qword [rbp + 0xd0], rax
lea rax, str.05h00Gi0
mov qword [rbp + 0xd8], rax
lea rax, str.43By4
mov qword [rbp + 0xe0], rax
lea rax, str.4tgiizsLimS
mov qword [rbp + 0xe8], rax
lea rax, str.6O4KyHhJXBiR
mov qword [rbp + 0xf0], rax
lea rax, str.7wjlGX7PjlW4
mov qword [rbp + 0xf8], rax
lea rax, [0x140005808]
mov qword [rbp + 0x100], rax
lea rax, str.AppOnFlySupport
mov qword [rbp + 0x108], rax
lea rax, str.ASPNET
mov qword [rbp + 0x110], rax
lea rax, str.BUiA1hkm
mov qword [rbp + 0x118], rax
lea rax, str.cM0uEGN4do
mov qword [rbp + 0x120], rax
lea rax, str.cMkNdS6
mov qword [rbp + 0x128], rax
lea rax, str.DefaultAccount
mov qword [rbp + 0x130], rax
lea rax, str.DVrzi
mov qword [rbp + 0x138], rax
lea rax, str.e60UW
mov qword [rbp + 0x140], rax
lea rax, str.ecVtZ5wE
mov qword [rbp + 0x148], rax
lea rax, str.EGG0p
mov qword [rbp + 0x150], rax
lea rax, str.G2DbYLDgzz8Y
mov qword [rbp + 0x158], rax
lea rax, str.GjBsjb
mov qword [rbp + 0x160], rax
lea rax, str.h86LHD
mov qword [rbp + 0x168], rax
lea rax, str.tHiF2T
mov qword [rbp + 0x170], rax
lea rax, str.Of20XqH4VL
mov qword [rbp + 0x178], rax
mov r9, r15
mov rax, rsi
mov r8, qword [rbp + r9*8 - 0x60]
sub r8, rsi
nop dword [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140001ae3
inc rax
test ecx, ecx
jne 0x140001ad0
test edx, edx
je 0x140002337
inc r9
cmp r9, 0x27
jl 0x140001ac0
mov rdx, rsi
lea rcx, [rbp - 0x80]
call fcn.140003380
mov rbx, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 9
jb 0x140001b9c
lea rax, [r8 + 9]
mov qword [rbx + 0x10], rax
mov rdi, rbx
cmp rcx, 0xf
jbe 0x140001b2f
mov rdi, qword [rbx]
lea rax, [0x140005919]
lea r12, str.C:Users_
cmp rax, rdi
jbe 0x140001b5d
lea rax, [rdi + r8]
cmp r12, rax
ja 0x140001b5d
cmp rdi, r12
ja 0x140001b55
mov r14, r15
jmp 0x140001b63
mov r14, rdi
sub r14, r12
jmp 0x140001b63
mov r14d, 9
lea rcx, [rdi + 9]
inc r8
mov rdx, rdi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
mov rdx, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rdi + r14]
mov r8d, 9
sub r8, r14
lea rdx, [r12 + 9]
add rdx, r14
call sub.VCRUNTIME140.dll_memcpy
jmp 0x140001bb5
mov qword [rsp + 0x28], 9
mov edx, 9
mov rcx, rbx
call fcn.140003d10
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rbx + 0x10], r15
mov edi, 0xf
mov qword [rbx + 0x18], rdi
mov byte [rbx], 0
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
mov rax, rdx
sub rax, rcx
cmp rax, 9
jb 0x140001c35
lea rax, [rcx + 9]
mov qword [rsp + 0x40], rax
lea rbx, [rsp + 0x30]
cmp rdx, rdi
cmova rbx, qword [rsp + 0x30]
add rbx, rcx
lea r8d, [rdi - 6]
lea rdx, str.Desktop_
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 9], 0
lea rax, [rsp + 0x30]
jmp 0x140001c4d
mov qword [rsp + 0x20], 9
mov edx, 9
lea rcx, [rsp + 0x30]
call fcn.140003af0
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0x630], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0x640], xmm6
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], rdi
mov byte [rax], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x140001cad
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001ca8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001ca8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000418c
movdqa xmm0, xmmword [0x140005ad0]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140001cfe
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001cf9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001cf9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000418c
movdqa xmm0, xmmword [0x140005ad0]
movdqu xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x80], 0
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x2a0]
call sub.VCRUNTIME140.dll_memset
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
movq r15, xmm6
sub rax, r15
cmp rax, 0x16
jb 0x1400023a5
lea rdx, [rbp + 0x630]
movq r12, xmm7
psrldq xmm6, 8
movq rax, xmm6
mov qword [rsp + 0x78], rax
cmp rax, 0xf
cmova rdx, r12
mov qword [rsp + 0x50], rdx
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
lea r13, [r15 + 0x16]
mov rbx, rdi
lea r14, [rsp + 0x58]
movabs rax, 0x8000000000000000
mov r8d, 0x16
cmp r13, rbx
jbe 0x140001e15
mov rbx, r13
or rbx, 0xf
cmp rbx, rcx
jbe 0x140001dcf
mov rbx, rcx
add rax, 0x27
mov rcx, rax
call fcn.140003f10
test rax, rax
je 0x140001df2
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
mov rdx, qword [rsp + 0x50]
jmp 0x140001e10
cmp rbx, r8
cmovb rbx, r8
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140001df9
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400023ab
jmp 0x140001daf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140001e0d
call fcn.140003f10
mov r14, rax
mov rdx, qword [rsp + 0x50]
jmp 0x140001e10
xor r14d, r14d
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], rbx
mov r8, r15
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.Acrobat_Reader_DC.link]
movups xmmword [r15 + r14], xmm0
mov eax, dword [0x140005930]
mov dword [r15 + r14 + 0x10], eax
movzx eax, word [0x140005934]
mov word [r15 + r14 + 0x14], ax
mov byte [r14 + r13], 0
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova rdx, qword [rsp + 0x58]
lea rcx, [rbp + 0x2a0]
call fcn.140003130
mov rax, qword [rbp + 0x2a0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x29c], edx
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x140001ee2
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001edd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001edd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000418c
movdqa xmm0, xmmword [0x140005ad0]
movdqu xmmword [rsp + 0x68], xmm0
mov byte [rsp + 0x58], 0
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x190]
call sub.VCRUNTIME140.dll_memset
lea rax, [rbp + 0x630]
mov r13, qword [rsp + 0x78]
cmp r13, 0xf
cmova rax, r12
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
lea r14, [r15 + 0x15]
lea rbx, [rsp + 0x30]
cmp r14, 0xf
jbe 0x140001fd8
mov rdi, r14
or rdi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
jbe 0x140001f8d
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140003f10
test rax, rax
je 0x140001fb6
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
mov rax, qword [rsp + 0x50]
jmp 0x140001fd3
cmp rdi, 0x16
mov ecx, 0x16
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140001fbd
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400023b1
jmp 0x140001f6d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140001fd1
call fcn.140003f10
mov rbx, rax
mov rax, qword [rsp + 0x50]
jmp 0x140001fd3
xor ebx, ebx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], rdi
mov r8, r15
mov rdx, rax
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.VLC_media_player.link]
movups xmmword [r15 + rbx], xmm0
mov eax, dword [0x140005948]
mov dword [r15 + rbx + 0x10], eax
movzx eax, byte [0x14000594c]
mov byte [r15 + rbx + 0x14], al
mov byte [rbx + r14], 0
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rdx, qword [rsp + 0x30]
lea rcx, [rbp + 0x190]
call fcn.140003130
mov rax, qword [rbp + 0x190]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x190], rbx
mov rax, qword [rbp + 0x190]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x18c], edx
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x1400020a7
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400020a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400020a2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000418c
movdqa xmm0, xmmword [0x140005ad0]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov rax, qword [rbp + 0x2a0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x2a0]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x14000212f
mov rax, qword [rbp + 0x190]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x190]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x14000212f
lea rdx, str._5__An_error_has_occurred._Please_relaunch_the_application.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
mov rcx, rax
lea rdx, [0x140003840]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rdx, rsi
lea rcx, [rbp - 0x80]
call fcn.140003380
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14000217a
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002174
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002174
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000418c
nop
mov rax, qword [rbp + 0x190]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x190], rbx
mov rax, qword [rbp + 0x190]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x18c], edx
lea rcx, [rbp + 0x1a0]
call fcn.140003050
lea rcx, [rbp + 0x1a8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x240]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rax, qword [rbp + 0x2a0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x2a0], rbx
mov rax, qword [rbp + 0x2a0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x29c], edx
lea rcx, [rbp + 0x2b0]
call fcn.140003050
lea rcx, [rbp + 0x2b8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x350]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
cmp r13, 0xf
jbe 0x14000225a
lea rdx, [r13 + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x140002251
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002251
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.14000418c
nop
mov rax, qword [rbp + 0x3b0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x3b0], rbx
mov rax, qword [rbp + 0x3b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x3ac], edx
lea rcx, [rbp + 0x3c0]
call fcn.140003050
lea rcx, [rbp + 0x3c8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x460]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rax, qword [rbp + 0x4c0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x4c0], rbx
mov rax, qword [rbp + 0x4c0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x4bc], edx
lea rcx, [rbp + 0x4d0]
call fcn.140003050
lea rcx, [rbp + 0x4d8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x570]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rcx, qword [rbp + 0x650]
xor rcx, rsp
call fcn.140003ef0
lea r11, [rsp + 0x780]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rdx, str._4__An_error_has_occurred._Please_relaunch_the_application.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
mov rcx, rax
lea rdx, [0x140003840]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, str._3__An_error_has_occurred._Please_relaunch_the_application.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003670
mov rcx, rax
lea rdx, [0x140003840]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.1400011c0
int3
call fcn.140001120
nop
call fcn.140001120
int3