Function at 0x140026de0
Capabilities:
Create process on windows
Create thread
Set console window title

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x230
movaps xmmword [rax - 0x38], xmm6
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140100010]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
xor ebx, ebx
lea rcx, [0x1400b4688]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
movabs r12, 0x5ee0944741a68e68
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs r13, 0xbf3fb42176e985fd
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x76795908dc08ff03
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0x8c3350e9227c60ee
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0xd5ec8060582f569a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x4249521cfbdbb9e7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs r14, 0x5e85942941cf8e25
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rsi, 0xbf59b440769b859e
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs r15, 0x7610595fdc26ff77
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
movabs rdi, 0x8c44508622186080
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
movabs rax, 0xd5948005580156e9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
movabs rax, 0x4249521cfbdbb982
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x120]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovdqa xmm0, xmmword [rbp + 0x80]
vxorps xmm0, xmm0, xmmword [rbp + 0x140]
vmovdqa xmmword [rbp + 0x80], xmm0
lea rcx, [rbp + 0x60]
vzeroupper
call fcn.1400276e0
test eax, eax
jne 0x140027194
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x763f5970dc1cff03
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x160]
vmovdqu ymmword [rbp + 0x20], ymm1
movabs rax, 0x5eeb944c41bf8e4a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
vmovdqa xmm0, xmmword [rbp + 0x40]
vxorps xmm0, xmm0, xmmword [rbp + 0x100]
vmovdqa xmmword [rbp + 0x40], xmm0
mov dword [rsp + 0x28], 0xa
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x40]
xor ecx, ecx
vzeroupper
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp eax, 0x20
jge 0x140027183
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x38e4e64a24a1e768
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0xd03794250efeabea
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x7c74372ab340df03
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm1
lea rdx, [rbp + 0x20]
vzeroupper
call fcn.1400017d0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
xor eax, eax
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.14008d7f0
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov qword [rbp + 8], 0x1388
lea rcx, [rbp + 8]
call fcn.140001470
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x38e4e64a24a1e768
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xe0], rax
movabs rax, 0xd03f94250efeabea
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xe8], rax
movabs rax, 0x7610595fd6429102
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xf0], rax
mov qword [rbp + 8], rdi
mov rax, qword [rbp + 8]
mov qword [rbp + 0xf8], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x180], rax
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x188], rax
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x190], rax
mov qword [rbp + 8], rdi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x198], rax
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x180]
vmovdqa ymmword [rbp + 0xe0], ymm1
lea rdx, [rbp + 0xe0]
vzeroupper
call fcn.1400017d0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe0], xmm1
mov qword [rbp + 0xf0], rbx
mov ecx, 0x20
call fcn.14008d810
mov qword [rbp + 0xf0], rbx
mov qword [rbp + 0xe8], rbx
mov qword [rbp + 0xe0], rbx
mov qword [rax], rbx
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbx
lea rcx, [0x140085cd0]
mov qword [rax + 0x18], rcx
mov qword [rbp + 0xa0], rax
lea rcx, [rbp + 0xd0]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140027540]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xc8], rax
test rax, rax
je 0x140027402
lea rcx, [rbp + 0xe0]
call fcn.140027430
xorps xmm6, xmm6
xor eax, eax
mov qword [rbp + 0x1b0], rax
lea ecx, [rax + 0x40]
call fcn.14008d810
movups xmmword [rax], xmm6
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax + 0x20], xmm6
movsd xmm0, qword [rbp + 0x1b0]
movsd qword [rax + 0x30], xmm0
lea rcx, [0x140001610]
mov qword [rax + 0x38], rcx
mov qword [rbp + 0xa0], rax
lea rcx, [rbp + 0xc0]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140027580]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xb8], rax
test rax, rax
je 0x1400273f0
mov ecx, 0x10
call fcn.14008d810
lea rcx, [0x140001010]
mov qword [rax + 8], rcx
mov qword [rbp + 0xa0], rax
lea rcx, [rbp + 0xb0]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x1400275b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xa8], rax
test rax, rax
je 0x1400273de
call fcn.14007df30
nop
cmp dword [rbp + 0xb0], 0
je 0x1400273ba
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
cmp dword [rbp + 0xc0], 0
je 0x1400273ca
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
cmp dword [rbp + 0xd0], 0
je 0x14002714c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov dword [rbp + 0xb0], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xc0], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xd0], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3