Function at 0x140001310
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x260]
sub rsp, 0x360
mov rax, qword [0x14000b040]
xor rax, rsp
mov qword [rbp + 0x250], rax
mov rsi, rdx
mov rdi, rcx
xor r12d, r12d
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x110]
call sub.VCRUNTIME140.dll_memset
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x14000136a
mov rdx, qword [rsi]
lea rcx, [rbp + 0x110]
call fcn.140003f00
mov rax, qword [rbp + 0x110]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x110], rax
mov rax, qword [rbp + 0x110]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x10c], edx
mov rax, qword [rbp + 0x110]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x110]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator__void_const___ptr64]
test al, al
je 0x14000157f
mov r15, qword [rsi + 0x10]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r15
cmp rax, 0x1d
jb 0x140002b72
cmp qword [rsi + 0x18], 0xf
jbe 0x1400013f3
mov rsi, qword [rsi]
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf8], xmm1
lea r14, [r15 + 0x1d]
mov ebx, 0xf
lea rdi, [rbp + 0xe8]
cmp r14, rbx
jbe 0x14000149a
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x140001459
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140005410
test rax, rax
je 0x140001578
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140001493
mov ecx, 0x16
cmp rbx, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140001473
mov rdi, r12
jmp 0x140001493
cmp rcx, 0x1000
jb 0x14000148b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002b6c
jmp 0x14000143a
call fcn.140005410
mov rdi, rax
mov qword [rbp + 0xe8], rdi
mov qword [rbp + 0xf8], r14
mov qword [rbp + 0x100], rbx
movups xmm0, xmmword [str.Failed_to_open_the_DLL_file:]
movups xmmword [rdi], xmm0
movsd xmm0, qword [0x1400075b8]
movsd qword [rdi + 0x10], xmm0
mov eax, dword [0x1400075c0]
mov dword [rdi + 0x18], eax
movzx eax, byte [0x1400075c4]
mov byte [rdi + 0x1c], al
lea rcx, [rdi + 0x1d]
mov r8, r15
mov rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r14], 0
lea rdx, str._ERROR_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004f90
lea rdx, [rbp + 0xe8]
cmp qword [rbp + 0x100], 0xf
cmova rdx, qword [rbp + 0xe8]
mov r8, qword [rbp + 0xf8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400051e0
lea rdx, [0x140004ea0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0x100]
cmp rdx, 0xf
jbe 0x1400016a0
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000169b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000169b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x110]
call qword [sym.imp.MSVCP140.dll_public:_class_std::fpos_struct__Mbstatet____cdecl_std::basic_istream_char__struct_std::char_traits_char__::tellg_void____ptr64]
mov rsi, qword [rbp + 0x240]
add rsi, qword [rbp + 0x238]
xorps xmm0, xmm0
cmp rsi, 0x1000
jge 0x1400016a7
movups xmmword [rbp + 0xe8], xmm0
mov qword [rbp + 0xf8], r12
mov qword [rbp + 0x100], r12
mov ecx, 0x20
call fcn.140005410
mov qword [rbp + 0xe8], rax
mov qword [rbp + 0xf8], 0x15
mov qword [rbp + 0x100], 0x1f
movups xmm0, xmmword [str.Invalid_DLL_file_size]
movups xmmword [rax], xmm0
mov ecx, dword [0x1400075d8]
mov dword [rax + 0x10], ecx
movzx ecx, byte [0x1400075dc]
mov byte [rax + 0x14], cl
mov byte [rax + 0x15], 0
lea rdx, str._ERROR_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004f90
lea rdx, [rbp + 0xe8]
cmp qword [rbp + 0x100], 0xf
cmova rdx, qword [rbp + 0xe8]
mov r8, qword [rbp + 0xf8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400051e0
lea rdx, [0x140004ea0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0x100]
cmp rdx, 0xf
jbe 0x1400016a0
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000169b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000169b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005454
xor bl, bl
jmp 0x140002b2d
movdqu xmmword [rbp + 0x220], xmm0
mov qword [rbp + 0x230], r12
movabs rcx, 0x7fffffffffffffff
cmp rsi, rcx
ja 0x140002b78
cmp rsi, 0x1000
jb 0x1400016fe
lea rcx, [rsi + 0x27]
cmp rcx, rsi
jbe 0x140002b66
call fcn.140005410
mov rcx, rax
test rax, rax
je 0x140002b0f
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140001706
mov rcx, rsi
call fcn.140005410
mov qword [rbp + 0x220], rax
lea rbx, [rax + rsi]
mov qword [rbp + 0x230], rbx
mov r8, rsi
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x228], rbx
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x110]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::seekg_long_long___int64___int____ptr64]
mov r8, qword [rbp + 0x240]
add r8, qword [rbp + 0x238]
mov rdx, qword [rbp + 0x220]
lea rcx, [rbp + 0x110]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::read_char____ptr64__long_long___int64_____ptr64]
lea rcx, [rbp + 0x120]
call fcn.140003e40
test rax, rax
jne 0x140001794
mov rax, qword [rbp + 0x110]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x110]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov ecx, 0x5a4d
mov rax, qword [rbp + 0x220]
cmp word [rax], cx
je 0x140001899
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
mov qword [rbp + 0xf8], r12
mov qword [rbp + 0x100], r12
mov ecx, 0x20
call fcn.140005410
mov qword [rbp + 0xe8], rax
mov qword [rbp + 0xf8], 0x11
mov qword [rbp + 0x100], 0x1f
movups xmm0, xmmword [str.Invalid_DLL_file_]
movups xmmword [rax], xmm0
movzx ecx, byte [0x1400075f0]
mov byte [rax + 0x10], cl
mov byte [rax + 0x11], 0
lea rdx, str._ERROR_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004f90
lea rdx, [rbp + 0xe8]
cmp qword [rbp + 0x100], 0xf
cmova rdx, qword [rbp + 0xe8]
mov r8, qword [rbp + 0xf8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400051e0
lea rdx, [0x140004ea0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0x100]
cmp rdx, 0xf
jbe 0x140002ad6
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001bd6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001bd6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movsxd r14, dword [rax + 0x3c]
add r14, rax
mov eax, 0x8664
cmp word [r14 + 4], ax
je 0x1400019ab
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
mov qword [rbp + 0xf8], r12
mov qword [rbp + 0x100], r12
mov ecx, 0x20
call fcn.140005410
mov qword [rbp + 0xe8], rax
mov ecx, 0x16
mov qword [rbp + 0xf8], rcx
mov qword [rbp + 0x100], 0x1f
movups xmm0, xmmword [str.DLL_platform_mismatch_]
movups xmmword [rax], xmm0
mov ecx, dword [0x140007608]
mov dword [rax + 0x10], ecx
movzx ecx, word [0x14000760c]
mov word [rax + 0x14], cx
mov byte [rax + 0x16], 0
lea rdx, str._ERROR_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004f90
lea rdx, [rbp + 0xe8]
cmp qword [rbp + 0x100], 0xf
cmova rdx, qword [rbp + 0xe8]
mov r8, qword [rbp + 0xf8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400051e0
lea rdx, [0x140004ea0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0x100]
cmp rdx, 0xf
jbe 0x140002ad6
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001bd6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001bd6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r8d, dword [r14 + 0x50]
mov dword [rsp + 0x20], 0x40
xor edx, edx
mov r9d, 0x3000
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r15, rax
test rax, rax
jne 0x140001be0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea r9, [rbp + 0xfd]
nop dword [rax]
nop dword [rax + rax]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx ecx, dl
shl cl, 2
lea eax, [rcx + rdx]
add al, al
sub r8b, al
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x1400019f0
lea r8, [rbp + 0xfd]
mov rdx, r9
lea rcx, [rbp + 0x28]
call fcn.1400044f0
nop
mov r8, qword [rbp + 0x38]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
sub rax, r8
mov r14d, 0x2d
lea rsi, str.Failed_to_allocate_memory_in_target_process:
cmp rax, r14
jb 0x140001ac6
lea rax, [r8 + 0x2d]
mov qword [rbp + 0x38], rax
lea rbx, [rbp + 0x28]
cmp rcx, 0xf
cmova rbx, qword [rbp + 0x28]
lea rax, [0x14000763d]
cmp rax, rbx
jbe 0x140001a8a
lea rax, [rbx + r8]
cmp rsi, rax
ja 0x140001a8a
cmp rbx, rsi
ja 0x140001a82
mov rdi, r12
jmp 0x140001a8d
mov rdi, rbx
sub rdi, rsi
jmp 0x140001a8d
mov rdi, r14
inc r8
lea rcx, [rbx + 0x2d]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
sub r14, rdi
lea rdx, [rsi + 0x2d]
add rdx, rdi
lea rcx, [rbx + rdi]
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 0x28]
jmp 0x140001adc
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
mov rdx, r14
lea rcx, [rbp + 0x28]
call fcn.140004620
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x48], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x48], xmm1
mov qword [rax + 0x10], r12
mov ebx, 0xf
mov qword [rax + 0x18], rbx
mov byte [rax], 0
lea rdx, str._ERROR_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004f90
lea rdx, [rbp - 0x58]
cmp qword [rbp - 0x40], rbx
cmova rdx, qword [rbp - 0x58]
mov r8, qword [rbp - 0x48]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400051e0
lea rdx, [0x140004ea0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, rbx
jbe 0x140001b88
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001b83
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001b83
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005454
movdqa xmm0, xmmword [0x1400079e0]
movdqu xmmword [rbp - 0x48], xmm0
mov byte [rbp - 0x58], 0
mov rdx, qword [rbp + 0x40]
cmp rdx, 0xf
jbe 0x140002ad6
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001bd6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001bd6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005454
jmp 0x140002ad6
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rbp + 0xe8], rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0xf0], rax
xor eax, eax
mov qword [rbp + 0xf8], rax
movzx ebx, word [r14 + 0x14]
add rbx, 0x2c
mov esi, r12d
cmp r12w, word [r14 + 6]
jae 0x140001c5f
add rbx, r14
nop dword [rax + rax]
mov eax, dword [rbx - 4]
test eax, eax
je 0x140001c50
mov r9d, eax
mov r8d, dword [rbx]
add r8, qword [rbp + 0x220]
mov edx, dword [rbx - 8]
add rdx, r15
mov qword [rsp + 0x20], r12
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x140001d67
inc esi
add rbx, 0x28
movzx eax, word [r14 + 6]
cmp esi, eax
jb 0x140001c20
mov rax, qword [rbp + 0x220]
movups xmm0, xmmword [rbp + 0xe8]
movups xmmword [rax], xmm0
movsd xmm1, qword [rbp + 0xf8]
movsd qword [rax + 0x10], xmm1
mov qword [rsp + 0x20], r12
mov r9d, 0x1000
mov r8, qword [rbp + 0x220]
mov rdx, r15
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x1400020d3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea r9, [rbp + 0xfd]
nop dword [rax]
nop word [rax + rax]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx ecx, dl
shl cl, 2
lea eax, [rcx + rdx]
add al, al
sub r8b, al
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x140001cc0
lea r8, [rbp + 0xfd]
mov rdx, r9
lea rcx, [rbp + 0x68]
call fcn.1400044f0
nop
mov r8, qword [rbp + 0x78]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
sub rax, r8
mov r12d, 0x2a
lea r14, str.Failed_to_write_headers_and_mapping_data:
cmp rax, r12
jb 0x140001fb5
lea rax, [r8 + 0x2a]
mov qword [rbp + 0x78], rax
lea rbx, [rbp + 0x68]
cmp rcx, 0xf
cmova rbx, qword [rbp + 0x68]
lea rax, [0x14000768a]
cmp rax, rbx
jbe 0x140001f79
lea rax, [rbx + r8]
cmp r14, rax
ja 0x140001f79
cmp rbx, r14
ja 0x140001f71
xor esi, esi
jmp 0x140001f7c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea r9, [rbp + 0xfd]
nop word [rax + rax]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx ecx, dl
shl cl, 2
lea eax, [rcx + rdx]
add al, al
sub r8b, al
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x140001d80
lea r8, [rbp + 0xfd]
mov rdx, r9
lea rcx, [rbp + 0x48]
call fcn.1400044f0
nop
mov r8, qword [rbp + 0x58]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
sub rax, r8
mov r12d, 0x1e
lea r14, str.Failed_to_write_section_data:
cmp rax, r12
jb 0x140001e55
lea rax, [r8 + 0x1e]
mov qword [rbp + 0x58], rax
lea rbx, [rbp + 0x48]
cmp rcx, 0xf
cmova rbx, qword [rbp + 0x48]
lea rax, [0x14000765e]
cmp rax, rbx
jbe 0x140001e19
lea rax, [rbx + r8]
cmp r14, rax
ja 0x140001e19
cmp rbx, r14
ja 0x140001e11
xor esi, esi
jmp 0x140001e1c
mov rsi, rbx
sub rsi, r14
jmp 0x140001e1c
mov rsi, r12
inc r8
lea rcx, [rbx + 0x1e]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rsi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
sub r12, rsi
lea rdx, [r14 + 0x1e]
add rdx, rsi
lea rcx, [rbx + rsi]
mov r8, r12
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 0x48]
jmp 0x140001e6b
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r14
mov rdx, r12
lea rcx, [rbp + 0x48]
call fcn.140004620
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x28], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x28], xmm1
xor r12d, r12d
mov qword [rax + 0x10], r12
mov ebx, 0xf
mov qword [rax + 0x18], rbx
mov byte [rax], r12b
lea rdx, str._ERROR_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004f90
lea rdx, [rbp - 0x38]
cmp qword [rbp - 0x20], rbx
cmova rdx, qword [rbp - 0x38]
mov r8, qword [rbp - 0x28]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400051e0
lea rdx, [0x140004ea0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, rbx
jbe 0x140001f1a
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001f15
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001f15
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005454
movdqa xmm0, xmmword [0x1400079e0]
movdqu xmmword [rbp - 0x28], xmm0
mov byte [rbp - 0x38], 0
mov rdx, qword [rbp + 0x60]
cmp rdx, 0xf
jbe 0x140001f69
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001f64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001f64
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005454
mov rdx, r15
jmp 0x140002ac4
mov rsi, rbx
sub rsi, r14
jmp 0x140001f7c
mov rsi, r12
inc r8
lea rcx, [rbx + 0x2a]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rsi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
sub r12, rsi
lea rdx, [r14 + 0x2a]
add rdx, rsi
lea rcx, [rbx + rsi]
mov r8, r12
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 0x68]
jmp 0x140001fcb
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r14
mov rdx, r12
lea rcx, [rbp + 0x68]
call fcn.140004620
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x18], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 8], xmm1
xor r12d, r12d
mov qword [rax + 0x10], r12
mov ebx, 0xf
mov qword [rax + 0x18], rbx
mov byte [rax], r12b
lea rdx, str._ERROR_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004f90
lea rdx, [rbp - 0x18]
cmp qword [rbp], rbx
cmova rdx, qword [rbp - 0x18]
mov r8, qword [rbp - 8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400051e0
lea rdx, [0x140004ea0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp]
cmp rdx, rbx
jbe 0x14000207a
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002075
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002075
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005454
movdqa xmm0, xmmword [0x1400079e0]
movdqu xmmword [rbp - 8], xmm0
mov byte [rbp - 0x18], 0
mov rdx, qword [rbp + 0x80]
cmp rdx, 0xf
jbe 0x140001f69
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001f64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001f64
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov dword [rsp + 0x20], 0x40
xor edx, edx
mov r9d, 0x3000
mov r8d, 0x1000
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r13, rax
test rax, rax
jne 0x140002322
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea r9, [rbp + 0xfd]
nop
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx ecx, dl
shl cl, 2
lea eax, [rcx + rdx]
add al, al
sub r8b, al
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x140002110
lea r8, [rbp + 0xfd]
mov rdx, r9
lea rcx, [rbp + 0x88]
call fcn.1400044f0
nop
mov r8, qword [rbp + 0x98]
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
sub rax, r8
mov r12d, 0x29
lea r14, str.Failed_to_allocate_memory_for_shellcode:
cmp rax, r12
jb 0x1400021fe
lea rax, [r8 + 0x29]
mov qword [rbp + 0x98], rax
lea rbx, [rbp + 0x88]
cmp rcx, 0xf
cmova rbx, qword [rbp + 0x88]
lea rax, [0x1400076b9]
cmp rax, rbx
jbe 0x1400021bf
lea rax, [rbx + r8]
cmp r14, rax
ja 0x1400021bf
cmp rbx, r14
ja 0x1400021b7
xor esi, esi
jmp 0x1400021c2
mov rsi, rbx
sub rsi, r14
jmp 0x1400021c2
mov rsi, r12
inc r8
lea rcx, [rbx + 0x29]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rsi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
sub r12, rsi
lea rdx, [r14 + 0x29]
add rdx, rsi
lea rcx, [rbx + rsi]
mov r8, r12
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 0x88]
jmp 0x140002217
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r14
mov rdx, r12
lea rcx, [rbp + 0x88]
call fcn.140004620
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x18], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x18], xmm1
xor r12d, r12d
mov qword [rax + 0x10], r12
mov ebx, 0xf
mov qword [rax + 0x18], rbx
mov byte [rax], r12b
lea rdx, str._ERROR_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004f90
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], rbx
cmova rdx, qword [rbp + 8]
mov r8, qword [rbp + 0x18]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400051e0
lea rdx, [0x140004ea0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0x20]
cmp rdx, rbx
jbe 0x1400022c6
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400022c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400022c1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005454
movdqa xmm0, xmmword [0x1400079e0]
movdqu xmmword [rbp + 0x18], xmm0
mov byte [rbp + 8], 0
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0xf
jbe 0x140001f69
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001f64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001f64
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov qword [rsp + 0x20], r12
mov r9d, 0x1000
lea r8, [0x140002c40]
mov rdx, r13
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x14000257e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea r9, [rbp + 0xfd]
nop dword [rax + rax]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx ecx, dl
shl cl, 2
lea eax, [rcx + rdx]
add al, al
sub r8b, al
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x140002360
lea r8, [rbp + 0xfd]
mov rdx, r9
lea rcx, [rbp + 0xa8]
call fcn.1400044f0
nop
mov r8, qword [rbp + 0xb8]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
sub rax, r8
mov r12d, 0x1b
lea r14, str.Failed_to_write_shellcode:
cmp rax, r12
jb 0x14000244e
lea rax, [r8 + 0x1b]
mov qword [rbp + 0xb8], rax
lea rbx, [rbp + 0xa8]
cmp rcx, 0xf
cmova rbx, qword [rbp + 0xa8]
lea rax, [0x1400076db]
cmp rax, rbx
jbe 0x14000240f
lea rax, [rbx + r8]
cmp r14, rax
ja 0x14000240f
cmp rbx, r14
ja 0x140002407
xor esi, esi
jmp 0x140002412
mov rsi, rbx
sub rsi, r14
jmp 0x140002412
mov rsi, r12
inc r8
lea rcx, [rbx + 0x1b]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rsi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
sub r12, rsi
lea rdx, [r14 + 0x1b]
add rdx, rsi
lea rcx, [rbx + rsi]
mov r8, r12
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 0xa8]
jmp 0x140002467
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r14
mov rdx, r12
lea rcx, [rbp + 0xa8]
call fcn.140004620
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
xor r12d, r12d
mov qword [rax + 0x10], r12
mov ebx, 0xf
mov qword [rax + 0x18], rbx
mov byte [rax], r12b
lea rdx, str._ERROR_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004f90
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], rbx
cmova rdx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400051e0
lea rdx, [0x140004ea0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, rbx
jbe 0x140002520
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000251b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000251b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005454
movdqa xmm0, xmmword [0x1400079e0]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0xf
jbe 0x140002aac
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002aa7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002aa7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rcx, str.ntdll.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
jne 0x14000266c
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], r12
mov ecx, 0x30
call fcn.140005410
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x70], 0x22
mov qword [rbp - 0x68], 0x2f
movups xmm0, xmmword [str.Failed_to_get_handle_for_ntdll.dll]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140007700]
movups xmmword [rax + 0x10], xmm1
movzx ecx, word [0x140007710]
mov word [rax + 0x20], cx
mov byte [rax + 0x22], 0
lea rdx, str._ERROR_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004f90
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rdx, qword [rbp - 0x80]
mov r8, qword [rbp - 0x70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400051e0
lea rdx, [0x140004ea0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140002aac
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002aa7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002aa7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rdx, str.NtCreateThreadEx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x14000278c
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
mov ecx, 0x30
call fcn.140005410
mov rcx, rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], 0x2f
mov qword [rsp + 0x78], 0x2f
movups xmm0, xmmword [str.Failed_to_get_NtCreateThreadEx_function_address]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140007740]
movups xmmword [rax + 0x10], xmm1
movsd xmm0, qword [0x140007750]
movsd qword [rax + 0x20], xmm0
mov eax, dword [0x140007758]
mov dword [rcx + 0x28], eax
movzx eax, word [0x14000775c]
mov word [rcx + 0x2c], ax
movzx eax, byte [0x14000775e]
mov byte [rcx + 0x2e], al
mov byte [rcx + 0x2f], 0
lea rdx, str._ERROR_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004f90
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rdx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400051e0
lea rdx, [0x140004ea0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140002aac
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002aa7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002aa7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov qword [rbp + 0x108], r12
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r13
mov r9, rdi
xor r8d, r8d
mov edx, 0x1fffff
lea rcx, [rbp + 0x108]
call rax
mov r8d, eax
test eax, eax
jne 0x140002847
mov rcx, qword [rbp + 0x108]
test rcx, rcx
je 0x140002847
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xe8], xmm0
mov qword [rbp + 0xf8], rax
mov qword [rsp + 0x20], r12
mov r9d, 0x18
lea r8, [rbp + 0xe8]
mov rdx, r15
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp + 0xf8]
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
test rbx, rbx
je 0x1400027e3
mov r9d, 0x8000
xor r8d, r8d
mov rdx, r13
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov bl, 1
jmp 0x140002ad8
lea r9, [rbp + 0xfd]
test r8d, r8d
jns 0x1400028a0
neg r8d
nop word [rax + rax]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x140002860
dec r9
mov byte [r9], 0x2d
jmp 0x1400028ca
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x1400028a0
lea r8, [rbp + 0xfd]
mov rdx, r9
lea rcx, [rbp + 0xc8]
call fcn.1400044f0
nop
mov r8, qword [rbp + 0xd8]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
sub rax, r8
mov ebx, 0x20
lea r12, str.Failed_to_create_remote_thread:
cmp rax, rbx
jb 0x14000298f
lea rax, [r8 + 0x20]
mov qword [rbp + 0xd8], rax
lea rsi, [rbp + 0xc8]
cmp rcx, 0xf
cmova rsi, qword [rbp + 0xc8]
lea rax, [0x140007780]
cmp rax, rsi
jbe 0x14000294f
lea rax, [rsi + r8]
cmp r12, rax
ja 0x14000294f
cmp rsi, r12
ja 0x140002947
xor r14d, r14d
jmp 0x140002952
mov r14, rsi
sub r14, r12
jmp 0x140002952
mov r14, rbx
inc r8
lea rcx, [rsi + 0x20]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
mov rdx, r12
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
sub rbx, r14
lea rdx, [r12 + 0x20]
add rdx, r14
lea rcx, [rsi + r14]
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 0xc8]
jmp 0x1400029a8
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r12
mov rdx, rbx
lea rcx, [rbp + 0xc8]
call fcn.140004620
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
xor r12d, r12d
mov qword [rax + 0x10], r12
mov ebx, 0xf
mov qword [rax + 0x18], rbx
mov byte [rax], r12b
lea rdx, str._ERROR_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004f90
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], rbx
cmova rdx, qword [rbp - 0x80]
mov r8, qword [rbp - 0x70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400051e0
lea rdx, [0x140004ea0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, rbx
jbe 0x140002a57
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002a52
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002a52
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005454
movdqa xmm0, xmmword [0x1400079e0]
movdqu xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0xf
jbe 0x140002aac
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002aa7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002aa7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005454
mov r9d, 0x8000
xor r8d, r8d
mov rdx, r15
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rdx, r13
mov r9d, 0x8000
xor r8d, r8d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
xor bl, bl
mov rcx, qword [rbp + 0x220]
test rcx, rcx
je 0x140002b2d
mov rdx, qword [rbp + 0x230]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002b16
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002b16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005454
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x220], xmm0
mov qword [rbp + 0x230], r12
lea rcx, [rbp + 0x110]
call fcn.140002b80
movzx eax, bl
mov rcx, qword [rbp + 0x250]
xor rcx, rsp
call fcn.1400053f0
mov rbx, qword [rsp + 0x3b0]
add rsp, 0x360
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140001110
nop
call fcn.140001110
int3
call fcn.1400011b0
int3
call fcn.1400044d0
int3