Function at 0x18000d9b0
Capabilities:
Contain obfuscated stackstrings
Create thread
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x370]
sub rsp, 0x470
mov rax, qword [0x1800ec0f8]
xor rax, rsp
mov qword [rbp + 0x368], rax
xor r12d, r12d
lea rdi, [r12 - 1]
cmp byte [0x1800ee3c1], r12b
je 0x18000dcd6
call qword [sym.imp.kernel32.dll_AllocConsole]
mov dword [rbp + 0x90], 0xece814f3
mov dword [rbp + 0x94], 0xcba8ee1c
mov dword [rbp + 0x98], 0xda17ebe5
mov dword [rbp + 0x9c], 0x2521f492
mov dword [rbp + 0xa0], 0xd0d82423
mov byte [rbp + 0xa4], 0xba
xor eax, eax
mov qword [rbp + 0xa5], rax
mov dword [rbp + 0xad], eax
mov byte [rbp + 0xb1], al
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movabs r9, 0x4d6131085d870595
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x90]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x13
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x90], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x22
jb 0x18000da65
mov qword [rbp + 0x290], r12
mov qword [rbp + 0x2a0], r12
mov qword [rbp + 0x2a8], 0xf
lea rax, [rbp + 0x90]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x18000dad6
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x290]
call fcn.180010660
lea rdx, [rbp + 0x290]
cmp qword [rbp + 0x2a8], 0x10
cmovae rdx, qword [rbp + 0x290]
mov r8, qword [rbp + 0x2a0]
inc r8
lea rcx, [rbp + 0x338]
call qword [sym.imp.ucrtbase.dll_mbstowcs]
lea rcx, [rbp + 0x338]
call qword [sym.imp.kernel32.dll_SetConsoleTitleW]
mov ecx, 0xfffffff5
call qword [sym.imp.kernel32.dll_GetStdHandle]
mov ecx, 1
call qword [sym.imp.ucrtbase.dll___acrt_iob_func]
mov r9, rax
mov word [rbp + 0x1a0], 0x910f
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1a2], xmm0
mov qword [rbp + 0x1b2], rax
mov word [rbp + 0x1ba], ax
mov byte [rbp + 0x1bc], al
mov qword [rsp + 0x30], r12
mov rcx, qword [rsp + 0x30]
movabs r10, 0x5bbef7e78e07b843
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x1a0]
add rcx, r10
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x2b
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x1a0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1d
jb 0x18000db84
mov dword [rbp + 0x120], 0x98989ee3
mov dword [rbp + 0x124], 0x17fa9595
xor eax, eax
mov qword [rbp + 0x128], rax
mov dword [rbp + 0x130], eax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movabs r10, 0x501420297d3be8da
nop dword [rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x120]
add rcx, r10
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0xa
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x120], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x14
jb 0x18000dc10
lea r8, [rbp + 0x1a0]
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x268]
call qword [sym.imp.ucrtbase.dll_freopen_s]
mov rdx, qword [rbp + 0x2a8]
cmp rdx, 0x10
jb 0x18000dcbd
inc rdx
mov rcx, qword [rbp + 0x290]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000dcb8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000dcb8
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800b1570
mov qword [rbp + 0x2a0], r12
mov qword [rbp + 0x2a8], 0xf
mov byte [rbp + 0x290], 0
cmp dword [0x1800ee3c4], 0
je 0x18000dd11
lea rdx, [rbp + 0x27c]
mov rcx, qword [0x1800ee3d8]
call qword [sym.imp.kernel32.dll_GetExitCodeProcess]
cmp dword [rbp + 0x27c], 0x103
je 0x18000df83
mov byte [0x1800ee3c0], 0
mov dword [0x1800ee3c4], r12d
mov dword [rbp - 0x20], 0x9f849e7a
mov dword [rbp - 0x1c], 0x9b76a993
mov dword [rbp - 0x18], 0x8d9fac85
mov dword [rbp - 0x14], 0x9e8a9c7e
mov dword [rbp - 0x10], 0x96ba984e
mov byte [rbp - 0xc], 0x30
xor eax, eax
mov qword [rbp - 0xb], rax
mov word [rbp - 3], ax
mov byte [rbp - 1], al
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movabs r9, 0x5fd573c997abb386
nop dword [rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax - 0x20]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x56
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax - 0x20], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x20
jb 0x18000dd60
mov qword [rbp + 0x2d8], r12
mov qword [rbp + 0x2e8], r12
mov qword [rbp + 0x2f0], 0xf
lea rax, [rbp - 0x20]
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18000ddd0
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x2d8]
call fcn.180010660
lea rcx, [rbp + 0x2d8]
call fcn.180008600
mov r15d, eax
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.kernel32.dll_OpenProcess]
mov rsi, rax
test rax, rax
jne 0x18000e06b
call qword [sym.imp.kernel32.dll_GetLastError]
mov dword [rbp + 0x140], 0xf8e4e391
mov word [rbp + 0x144], 0x69e6
xor eax, eax
mov qword [rbp + 0x146], rax
mov dword [rbp + 0x14e], eax
mov byte [rbp + 0x152], al
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movabs r9, 0x2aaf37ef34e39532
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x140]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x5e
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x140], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x13
jb 0x18000de60
mov dword [rbp + 0xf0], 0x62676d50
mov dword [rbp + 0xf4], 0x68a66077
mov dword [rbp + 0xf8], 0xab646c78
mov dword [rbp + 0xfc], 0x434c425e
mov word [rbp + 0x100], 0x495f
mov byte [rbp + 0x102], 0x92
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x103], xmm0
mov dword [rbp + 0x113], eax
mov byte [rbp + 0x117], al
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movabs r9, 0x1a658104eb1f2bc0
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0xf0]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x40
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0xf0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x28
jb 0x18000df12
mov r9d, 0x10
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0xf0]
xor ecx, ecx
call qword [sym.imp.user32.dll_MessageBoxA]
xor bl, bl
jmp 0x18000e4a6
mov dword [rbp], 0xcafefec3
mov dword [rbp + 4], 0xfe06c8e6
mov dword [rbp + 8], 0xf7c305eb
mov dword [rbp + 0xc], 0xc3fffcee
mov dword [rbp + 0x10], 0xc9c33dd5
mov dword [rbp + 0x14], 0xdbc9c4ce
mov dword [rbp + 0x18], 0x5300c9c9
xor eax, eax
mov qword [rbp + 0x1c], rax
mov dword [rbp + 0x24], eax
mov word [rbp + 0x28], ax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movabs r9, 0x27405dbb632f9952
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x3e
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x2a
jb 0x18000dfe0
xor r9d, r9d
lea r8, [rbp]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.user32.dll_MessageBoxA]
mov al, 1
mov rcx, qword [rbp + 0x368]
xor rcx, rsp
call fcn.1800b1550
lea r11, [rsp + 0x470]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov edx, r15d
lea rcx, [rbp + 0x1f8]
call fcn.18000cc40
mov rdx, rax
lea rcx, [rbp + 0x318]
call fcn.18000d170
mov rdx, qword [rbp + 0x210]
cmp rdx, 0x10
jb 0x18000e0cd
inc rdx
mov rcx, qword [rbp + 0x1f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e0c8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000e0c8
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800b1570
mov qword [rbp + 0x208], r12
mov qword [rbp + 0x210], 0xf
mov byte [rbp + 0x1f8], 0
mov dword [rbp + 0x30], 0x8888b486
mov dword [rbp + 0x34], 0x529092ad
mov dword [rbp + 0x38], 0x505fac5d
mov dword [rbp + 0x3c], 0xa350a050
mov dword [rbp + 0x40], 0xa6565aaa
mov dword [rbp + 0x44], 0xda292928
mov byte [rbp + 0x48], 0x70
xor eax, eax
mov qword [rbp + 0x49], rax
mov dword [rbp + 0x51], eax
mov word [rbp + 0x55], ax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movabs r9, 0x4c7381cd564b37ac
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x30]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x4c
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x30], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x27
jb 0x18000e140
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x190], r12
mov qword [rbp + 0x198], 0xf
lea rax, [rbp + 0x30]
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18000e1b0
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x180]
call fcn.180010660
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x2f8]
call fcn.18000d170
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x18000e221
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e21c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000e21c
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800b1570
mov qword [rbp + 0x190], r12
mov qword [rbp + 0x198], 0xf
mov byte [rbp + 0x180], 0
lea r8, [rbp + 0x2f8]
cmp qword [rbp + 0x310], 0x10
cmovae r8, qword [rbp + 0x2f8]
lea rax, [rbp + 0x318]
cmp qword [rbp + 0x330], 0x10
cmovae rax, qword [rbp + 0x318]
sub r8, rax
nop dword [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18000e283
inc rax
test ecx, ecx
jne 0x18000e270
test edx, edx
je 0x18000e4f1
mov dword [rsp + 0x40], 0x2f382eca
mov dword [rsp + 0x44], 0x59865d53
mov dword [rsp + 0x48], 0x4a51534d
mov dword [rsp + 0x4c], 0x5a8e5b5b
mov dword [rsp + 0x50], 0x4a5f5a41
mov dword [rsp + 0x54], 0x965e5648
mov dword [rsp + 0x58], 0x4f5bbc90
mov dword [rsp + 0x5c], 0x9f4c5054
mov dword [rsp + 0x60], 0x5a4e4eab
mov dword [rsp + 0x64], 0x6ea66476
mov dword [rsp + 0x68], 0x6272a173
mov dword [rsp + 0x6c], 0x62666e70
mov dword [rsp + 0x70], 0x7caabd64
mov dword [rsp + 0x74], 0x606fb566
mov dword [rsp + 0x78], 0x7e64b16d
mov dword [rsp + 0x7c], 0x63be7171
mov dword [rbp - 0x80], 0x6867b96f
mov dword [rbp - 0x7c], 0x93644589
mov dword [rbp - 0x78], 0x9f919997
mov dword [rbp - 0x74], 0x4f9e8c9e
mov dword [rbp - 0x70], 0x854a9e94
mov dword [rbp - 0x6c], 0x9a958783
mov dword [rbp - 0x68], 0x8e858850
mov dword [rbp - 0x64], 0x8b938e8e
mov dword [rbp - 0x60], 0x8d8d5996
mov dword [rbp - 0x5c], 0xbb66b2b8
mov dword [rbp - 0x58], 0x5762aca8
mov dword [rbp - 0x54], 0x6f435345
mov dword [rbp - 0x50], 0xbdaba1ab
mov dword [rbp - 0x4c], 0x77a2b8a2
mov dword [rbp - 0x48], 0x73bea7b1
mov dword [rbp - 0x44], 0xa9b7b0ae
mov dword [rbp - 0x40], 0xafbba5ab
mov dword [rbp - 0x3c], 0x303405d0
mov dword [rbp - 0x38], 0x3b353522
mov word [rbp - 0x34], 0x6d1a
xor eax, eax
mov qword [rbp - 0x32], rax
mov dword [rbp - 0x2a], eax
mov byte [rbp - 0x26], al
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movabs r9, 0xd7b4af6458a15cbc
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rsp + rax + 0x40]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x24
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x40], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x9b
jb 0x18000e3c0
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x40]
xor ecx, ecx
call qword [sym.imp.user32.dll_MessageBoxA]
mov rcx, rsi
call qword [sym.imp.kernel32.dll_CloseHandle]
xor bl, bl
mov rdx, qword [rbp + 0x310]
cmp rdx, 0x10
jb 0x18000e469
inc rdx
mov rcx, qword [rbp + 0x2f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e464
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e4ea
call fcn.1800b1570
mov rdx, qword [rbp + 0x330]
cmp rdx, 0x10
jb 0x18000e4a6
inc rdx
mov rcx, qword [rbp + 0x318]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e4a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e4ea
call fcn.1800b1570
mov rdx, qword [rbp + 0x2f0]
cmp rdx, 0x10
jb 0x18000eb2b
inc rdx
mov rcx, qword [rbp + 0x2d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000eb26
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000eb26
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
mov qword [0x1800ee3d8], rsi
mov rdx, qword [0x1800ee3d0]
add rdx, 0x5706d40
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x2c0]
mov rcx, rsi
call qword [sym.imp.kernel32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x2c0]
add rdx, 0x2f0
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x270]
mov rcx, qword [0x1800ee3d8]
call qword [sym.imp.kernel32.dll_ReadProcessMemory]
cmp dword [rbp + 0x270], 4
sete dl
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.msvcp140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___bool____ptr64]
lea rdx, [0x180011190]
mov rcx, rax
call qword [sym.imp.msvcp140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___class_std::basic_istream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_istream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdx, qword [0x1800ee3d0]
add rdx, 0x5706d40
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x2c8]
mov rcx, qword [0x1800ee3d8]
call qword [sym.imp.kernel32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x2c8]
add rdx, 0x2f0
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x274]
mov rcx, qword [0x1800ee3d8]
call qword [sym.imp.kernel32.dll_ReadProcessMemory]
cmp dword [rbp + 0x274], 4
je 0x18000e5e8
cmp byte [0x1800ee3c0], 0
je 0x18000e5e8
mov bl, 1
jmp 0x18000e428
mov r9, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [rbp + 0xc0], 0x1be704eb
mov dword [rbp + 0xc4], 0xd5d2f618
mov dword [rbp + 0xc8], 0x283424d9
mov dword [rbp + 0xcc], 0xe9e62c2c
mov word [rbp + 0xd0], 0xe7e8
mov byte [rbp + 0xd2], 0xc8
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xd3], xmm0
mov qword [rbp + 0xe3], rax
mov dword [rbp + 0xeb], eax
mov byte [rbp + 0xef], al
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movabs r10, 0x31ca5bceffb3cff7
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0xc0]
add rcx, r10
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x3f
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0xc0], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x30
jb 0x18000e660
lea rdx, [rbp + 0xc0]
mov rcx, r9
call fcn.180010fc0
lea rdx, [0x180011190]
mov rcx, rax
call qword [sym.imp.msvcp140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___class_std::basic_istream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_istream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r14, r12
mov rbx, r12
movabs r13, 0x7fffffff0000
nop dword [rax]
xorps xmm0, xmm0
movups xmmword [rbp + 0x238], xmm0
movups xmmword [rbp + 0x248], xmm0
movups xmmword [rbp + 0x258], xmm0
mov r9d, 0x30
lea r8, [rbp + 0x238]
mov rdx, rbx
mov rcx, rsi
call qword [sym.imp.kernel32.dll_VirtualQueryEx]
mov rcx, qword [rbp + 0x250]
test rax, rax
je 0x18000e73e
cmp dword [rbp + 0x248], 0x80
jne 0x18000e73e
cmp dword [rbp + 0x260], 0x40000
jne 0x18000e73e
cmp rcx, 0x1000
je 0x18000e754
mov eax, 0x1000
test rcx, rcx
cmovne rax, rcx
add rbx, rax
cmp rbx, r13
jae 0x18000e75b
jmp 0x18000e6e0
mov r14, qword [rbp + 0x240]
mov qword [0x1800ee3d0], r14
mov rdx, rsi
lea rcx, [rbp + 0x1e0]
call fcn.180005830
mov rdx, rax
call fcn.18000fab0
mov rcx, qword [rbp + 0x1e0]
test rcx, rcx
je 0x18000e7da
mov rax, qword [rbp + 0x1f0]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e7c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000e7c3
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800b1570
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1e0], xmm0
mov qword [rbp + 0x1f0], r12
mov dword [0x1800ee3c8], r15d
mov rdx, qword [0x1800ee3d0]
add rdx, 0x5706d40
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x2d0]
mov rcx, qword [0x1800ee3d8]
call qword [sym.imp.kernel32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x2d0]
add rdx, 0x2f0
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x278]
mov rcx, qword [0x1800ee3d8]
call qword [sym.imp.kernel32.dll_ReadProcessMemory]
cmp dword [rbp + 0x278], 4
jne 0x18000e850
call fcn.18000a110
mov bl, 1
jmp 0x18000e428
mov eax, dword [0x1800ee3c8]
mov dword [0x1800ee3cc], eax
mov dword [rbp + 0x60], 0xaf5baf75
mov dword [rbp + 0x64], 0x5b7baf59
mov dword [rbp + 0x68], 0xb1b1b555
mov dword [rbp + 0x6c], 0x48b5b752
mov dword [rbp + 0x70], 0x2bbdbdb6
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x74], xmm0
mov qword [rbp + 0x84], rax
mov word [rbp + 0x8c], ax
mov byte [rbp + 0x8e], al
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movabs r9, 0xeef7edb4d1910b27
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x60]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x11
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x60], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x2f
jb 0x18000e8b0
mov qword [rbp + 0x218], r12
mov qword [rbp + 0x228], r12
mov qword [rbp + 0x230], 0xf
lea rax, [rbp + 0x60]
inc rdi
cmp byte [rax + rdi], 0
jne 0x18000e915
mov r8, rdi
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x218]
call fcn.180010660
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0x1c0]
call fcn.180005c90
mov rcx, qword [rbp + 0x1c0]
test rcx, rcx
jne 0x18000e9f7
mov dword [rbp + 0x160], 0x4a72736d
mov word [rbp + 0x164], 0x291d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x166], xmm0
mov qword [rbp + 0x176], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
movabs r9, 0xc4612baeb465f725
nop
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x160]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 3
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x160], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1e
jb 0x18000e990
xor r9d, r9d
lea r8, [rbp + 0x160]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.user32.dll_MessageBoxA]
jmp 0x18000e426
call fcn.180006f50
mov ecx, 0x10
call fcn.1800b15a4
mov qword [rax], rsi
lea rcx, [0x1800091b0]
mov qword [rax + 8], rcx
lea rcx, [rbp + 0x288]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1800144f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ucrtbase.dll__beginthreadex]
mov qword [rbp + 0x280], rax
test rax, rax
je 0x18000eb52
cmp dword [rbp + 0x288], 0
je 0x18000eb46
movaps xmm0, xmmword [rbp + 0x280]
movdqa xmmword [rbp + 0x1d0], xmm0
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.msvcp140.dll__Thrd_detach]
test eax, eax
je 0x18000ea7f
mov ecx, eax
call qword [sym.imp.msvcp140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x280], xmm0
mov ecx, 0x10
call fcn.1800b15a4
mov qword [rax], rsi
lea rcx, [0x18000a040]
mov qword [rax + 8], rcx
lea rcx, [rbp + 0x2b8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1800144f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ucrtbase.dll__beginthreadex]
mov qword [rbp + 0x2b0], rax
test rax, rax
je 0x18000eb33
cmp dword [rbp + 0x2b8], 0
je 0x18000eb46
movaps xmm0, xmmword [rbp + 0x2b0]
movdqa xmmword [rbp + 0x1d0], xmm0
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.msvcp140.dll__Thrd_detach]
test eax, eax
je 0x18000eb05
mov ecx, eax
call qword [sym.imp.msvcp140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x2b0], xmm0
mov bl, 1
cmp dword [rbp + 0x288], 0
je 0x18000e428
call qword [sym.imp.ucrtbase.dll_terminate]
int3
call fcn.1800b1570
movzx eax, bl
jmp 0x18000e03b
mov dword [rbp + 0x2b8], r12d
mov ecx, 6
call qword [sym.imp.msvcp140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.msvcp140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov dword [rbp + 0x288], r12d
mov ecx, 6
call qword [sym.imp.msvcp140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3