Function at 0x7ff7010c1b10
Capabilities:
Enumerate process modules
Enumerate processes
Execute command
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x330]
sub rsp, 0x430
mov rax, qword [0x7ff7010cc040]
xor rax, rsp
mov qword [rbp + 0x320], rax
xor r12d, r12d
mov dword [rbp + 0x60], r12d
lea rcx, [0x7ff7010c77b8]
call qword [sym.imp.kernel32.dll_SetConsoleTitleA]
mov ecx, 0x7d0
call qword [sym.imp.kernel32.dll_Sleep]
lea rdx, [0x7ff7010c77e0]
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.7ff7010c4320
lea rdx, [0x7ff7010c7ac0]
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.7ff7010c4320
lea rdx, [0x7ff7010c7ae0]
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.7ff7010c4320
mov qword [rbp + 0x70], r12
lea ecx, [r12 + 0x20]
call fcn.7ff7010c4fc8
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x78], 0x14
mov qword [rbp + 0x80], 0x1f
movups xmm0, xmmword [0x7ff7010c7af8]
movups xmmword [rax], xmm0
mov ecx, dword [0x7ff7010c7b08]
mov dword [rax + 0x10], ecx
mov byte [rax + 0x14], r12b
mov esi, r12d
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.kernel32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x7ff7010c1c58
mov dword [rbp + 0xf0], 0x130
lea rdx, [rbp + 0xf0]
mov rcx, rax
call qword [sym.imp.kernel32.dll_Process32First]
test eax, eax
je 0x7ff7010c1c4f
lea rdx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0xf
cmova rdx, qword [rbp + 0x68]
lea rcx, [rbp + 0x11c]
call qword [sym.imp.ucrtbase.dll__stricmp]
test eax, eax
je 0x7ff7010c1c49
lea rdx, [rbp + 0xf0]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_Process32Next]
test eax, eax
jne 0x7ff7010c1c11
jmp 0x7ff7010c1c4f
mov esi, dword [rbp + 0xf8]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_CloseHandle]
mov rdx, qword [rbp + 0x80]
cmp rdx, 0xf
jbe 0x7ff7010c1c99
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7010c1c94
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7010c1c94
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7010c4fc0
mov r8d, esi
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.kernel32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x7ff7010c27f5
lea rdx, [rbp + 0x60]
mov rcx, rax
call qword [sym.imp.kernel32.dll_GetExitCodeProcess]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_CloseHandle]
cmp dword [rbp + 0x60], 0x103
jne 0x7ff7010c27f5
mov ecx, esi
call fcn.7ff7010c14b0
mov r15, rax
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
cmp rax, 0xffffffffffffffff
lea rdx, [0x7ff7010c7b38]
jne 0x7ff7010c1cfd
lea rdx, [0x7ff7010c7b58]
call fcn.7ff7010c4320
mov r8d, esi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.kernel32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x7ff7010c1d72
lea r9, [rbp + 0x60]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.kernel32.dll_K32EnumProcessModules]
test eax, eax
je 0x7ff7010c1d69
mov eax, dword [rbp + 0x60]
test eax, eax
je 0x7ff7010c1d69
mov edx, eax
mov ecx, 0x40
call qword [sym.imp.kernel32.dll_LocalAlloc]
mov rdi, rax
test rax, rax
je 0x7ff7010c1d69
lea r9, [rbp + 0x60]
mov r8d, dword [rbp + 0x60]
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.kernel32.dll_K32EnumProcessModules]
mov rcx, rdi
call qword [sym.imp.kernel32.dll_LocalFree]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_CloseHandle]
call qword [sym.imp.kernel32.dll_GetConsoleWindow]
mov rcx, rax
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, [r9 - 1]
call qword [sym.imp.user32.dll_SetWindowPos]
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x220]
call sub.VCRUNTIME140.dll_memset
lea r14, [0x7ff7010c0000]
lea rax, [r14 + 0x7e50]
mov qword [rbp + 0x220], rax
lea rax, [0x7ff7010c7d80]
mov qword [rbp + 0x230], rax
lea rcx, [rbp + 0x2b8]
call qword [sym.imp.msvcp140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rbp + 0x60], 1
xor r8d, r8d
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x220]
call qword [sym.imp.msvcp140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
nop
mov rax, qword [rbp + 0x220]
movsxd rcx, dword [rax + 4]
lea rax, [0x7ff7010c7e40]
mov qword [rbp + rcx + 0x220], rax
mov rax, qword [rbp + 0x220]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x21c], edx
lea rcx, [rbp + 0x238]
call qword [sym.imp.msvcp140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, [0x7ff7010c7dc0]
mov qword [rbp + 0x238], rax
mov qword [rbp + 0x2a0], r12
mov dword [rbp + 0x2a8], r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], r12
mov qword [rbp + 0xa8], 0xf
mov byte [rbp + 0x90], 0
lea rdx, [0x7ff7010c7b78]
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.7ff7010c4320
xorps xmm0, xmm0
movups xmmword [rbp + 0xc8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd8], xmm1
mov ecx, 0x20
call fcn.7ff7010c4fc8
mov rbx, rax
mov qword [rbp + 0xc8], rax
movdqa xmm0, xmmword [0x7ff7010c7e90]
movdqu xmmword [rbp + 0xd8], xmm0
movups xmm1, xmmword [0x7ff7010c7b98]
movups xmmword [rax], xmm1
mov byte [rax + 0x10], 0
xor edx, edx
mov r8d, 0x110
lea rcx, [rsp + 0x50]
call sub.VCRUNTIME140.dll_memset
lea rax, [r14 + 0x7e48]
mov qword [rsp + 0x50], rax
lea rcx, [rbp]
call qword [sym.imp.msvcp140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rbp + 0x60], 3
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
call qword [sym.imp.msvcp140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea rdi, [0x7ff7010c7e60]
mov qword [rsp + rcx + 0x50], rdi
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0x4c], edx
lea rcx, [rsp + 0x60]
call qword [sym.imp.msvcp140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea r13, [0x7ff7010c7d08]
mov qword [rsp + 0x60], r13
mov byte [rbp - 0x24], 0
mov byte [rbp - 0x2f], 0
lea rcx, [rsp + 0x60]
call qword [sym.imp.msvcp140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp - 0x20], r12
mov rax, qword [0x7ff7010ccb30]
mov qword [rbp - 0x2c], rax
mov qword [rbp - 0x38], r12
mov r8d, 1
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.7ff7010c40d0
test rax, rax
jne 0x7ff7010c1fbc
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x50]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.msvcp140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x50], rdi
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0x4c], edx
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x50]
add rcx, rax
call qword [sym.imp.msvcp140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x7ff7010c21b9
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], r12
mov qword [rbp + 0x80], 0xf
mov byte [rbp + 0x68], 0
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x50]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.msvcp140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp + 0x68]
lea rcx, [rsp + 0x50]
call fcn.7ff7010c4b90
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.msvcp140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x7ff7010c2141
nop dword [rax]
lea rdx, [0x7ff7010c7bb0]
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.7ff7010c4320
lea rdx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0xf
cmova rdx, qword [rbp + 0x68]
mov r8, qword [rbp + 0x78]
mov rcx, rax
call fcn.7ff7010c4d30
lea rdx, [0x7ff7010c44f0]
mov rcx, rax
call qword [sym.imp.msvcp140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___class_std::basic_istream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_istream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdi, qword [rbp + 0x78]
lea r9, [rbp + 0x68]
cmp qword [rbp + 0x80], 0xf
cmova r9, qword [rbp + 0x68]
mov rax, qword [rbp + 0xa8]
cmp rdi, rax
ja 0x7ff7010c20ef
lea rbx, [rbp + 0x90]
cmp rax, 0xf
cmova rbx, qword [rbp + 0x90]
mov qword [rbp + 0xa0], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy_1
mov byte [rbx + rdi], 0
jmp 0x7ff7010c20fe
mov rdx, rdi
lea rcx, [rbp + 0x90]
call fcn.7ff7010c4990
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x50]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.msvcp140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp + 0x68]
lea rcx, [rsp + 0x50]
call fcn.7ff7010c4b90
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.msvcp140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
jne 0x7ff7010c2060
lea rcx, [rsp + 0x60]
call fcn.7ff7010c4010
test rax, rax
jne 0x7ff7010c216f
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x50]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.msvcp140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rdx, qword [rbp + 0x80]
cmp rdx, 0xf
jbe 0x7ff7010c23fc
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7010c21af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7010c21af
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7010c4fc0
jmp 0x7ff7010c23fc
lea rdx, [rbp + 0x90]
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.7ff7010c4530
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0xf0]
call sub.VCRUNTIME140.dll_memset
lea rbx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 0xf
cmova rbx, qword [rbp + 0xc8]
lea rax, [r14 + 0x7db0]
mov qword [rbp + 0xf0], rax
lea rcx, [rbp + 0x198]
call qword [sym.imp.msvcp140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rbp + 0x60], 7
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0xf8]
lea rcx, [rbp + 0xf0]
call qword [sym.imp.msvcp140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0xf0]
movsxd rcx, dword [rax + 4]
lea rdi, [0x7ff7010c7d90]
mov qword [rbp + rcx + 0xf0], rdi
mov rax, qword [rbp + 0xf0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0xec], edx
lea rcx, [rbp + 0xf8]
call qword [sym.imp.msvcp140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
mov qword [rbp + 0xf8], r13
mov byte [rbp + 0x174], 0
mov byte [rbp + 0x169], 0
lea rcx, [rbp + 0xf8]
call qword [sym.imp.msvcp140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp + 0x178], r12
mov rax, qword [0x7ff7010ccb30]
mov qword [rbp + 0x16c], rax
mov qword [rbp + 0x160], r12
mov r8d, 2
mov rdx, rbx
lea rcx, [rbp + 0xf8]
call fcn.7ff7010c40d0
test rax, rax
jne 0x7ff7010c22ef
mov rax, qword [rbp + 0xf0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0xf0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.msvcp140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp + 0xf0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0xf0], rdi
mov rax, qword [rbp + 0xf0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0xec], edx
mov rax, qword [rbp + 0xf0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0xf0]
add rcx, rax
call qword [sym.imp.msvcp140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x7ff7010c23bf
lea rdx, [rbp + 0x90]
cmp qword [rbp + 0xa8], 0xf
cmova rdx, qword [rbp + 0x90]
mov r8, qword [rbp + 0xa0]
lea rcx, [rbp + 0xf0]
call fcn.7ff7010c4d30
lea rcx, [rbp + 0xf8]
call fcn.7ff7010c4010
test rax, rax
jne 0x7ff7010c239a
mov rax, qword [rbp + 0xf0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0xf0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.msvcp140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea rdx, [0x7ff7010c7bc8]
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.7ff7010c4320
lea rdx, [0x7ff7010c44f0]
mov rcx, rax
call qword [sym.imp.msvcp140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___class_std::basic_istream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_istream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x7ff7010c23f0
lea rdx, [0x7ff7010c7be0]
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.7ff7010c4320
lea rdx, [0x7ff7010c44f0]
mov rcx, rax
call qword [sym.imp.msvcp140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___class_std::basic_istream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_istream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x7ff7010c7bf8]
call qword [sym.imp.ucrtbase.dll_system]
nop
lea rcx, [rbp + 0xf0]
call fcn.7ff7010c2950
lea rdx, [0x7ff7010c7c00]
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.7ff7010c4320
lea rdx, [rbp + 0xb8]
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.msvcp140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov ecx, esi
call fcn.7ff7010c17f0
mov ecx, 0x3e8
call qword [sym.imp.kernel32.dll_Sleep]
mov ecx, esi
call fcn.7ff7010c1980
lea rdx, [0x7ff7010c7c28]
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.7ff7010c4320
lea rdx, [rbp + 0xb0]
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.msvcp140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
lea rdx, [0x7ff7010c7c50]
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.7ff7010c4320
lea rdx, [0x7ff7010c7c80]
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.7ff7010c4320
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], r12
mov qword [rbp + 0x80], r12
mov rdi, qword [rbp + 0xa0]
lea r14, [rbp + 0x90]
cmp qword [rbp + 0xa8], 0xf
cmova r14, qword [rbp + 0x90]
movabs rbx, 0x7fffffffffffffff
cmp rdi, rbx
ja 0x7ff7010c2818
cmp rdi, 0xf
ja 0x7ff7010c24ee
mov qword [rbp + 0x78], rdi
mov qword [rbp + 0x80], 0xf
movups xmm0, xmmword [r14]
movups xmmword [rbp + 0x68], xmm0
jmp 0x7ff7010c2585
mov rax, rdi
or rax, 0xf
cmp rax, rbx
jbe 0x7ff7010c2526
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.7ff7010c4fc8
mov rcx, rax
test rax, rax
je 0x7ff7010c2551
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x7ff7010c2567
mov rbx, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x7ff7010c2558
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x7ff7010c281e
jmp 0x7ff7010c2508
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x7ff7010c2564
call fcn.7ff7010c4fc8
jmp 0x7ff7010c2567
mov rax, r12
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x78], rdi
mov qword [rbp + 0x80], rbx
lea r8, [rdi + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rdx, r15
lea rcx, [rbp + 0x68]
call fcn.7ff7010c1290
mov ecx, esi
call fcn.7ff7010c17f0
mov ecx, 0xbb8
call qword [sym.imp.kernel32.dll_Sleep]
mov ecx, esi
call fcn.7ff7010c1980
lea rdx, [0x7ff7010c7ca0]
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.7ff7010c4320
lea rdx, [0x7ff7010c7cb8]
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.7ff7010c4320
lea rdx, [0x7ff7010c7cd8]
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.7ff7010c4320
lea rdx, [0x7ff7010c7cfc]
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.7ff7010c4320
movd xmm0, dword [rbp + 0xb0]
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0xb4], xmm0
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rbp + 0xb4]
mov rdx, qword [0x7ff7010ccb10]
mov rcx, r15
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
movd xmm0, dword [rbp + 0xb8]
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x88], xmm0
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rbp + 0x88]
mov rdx, qword [0x7ff7010ccae8]
mov rcx, r15
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rbp + 0x88]
mov rdx, qword [0x7ff7010ccb08]
mov rcx, r15
call qword [sym.imp.kernel32.dll_WriteProcessMemory]
mov ecx, 0xe56b35b9
call qword [sym.imp.kernel32.dll_Sleep]
nop
lea rcx, [rsp + 0x50]
call fcn.7ff7010c2890
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0xf
jbe 0x7ff7010c26f2
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7010c26ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7010c26ed
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7010c4fc0
movdqa xmm0, xmmword [0x7ff7010c7e80]
movdqu xmmword [rbp + 0xd8], xmm0
mov byte [rbp + 0xc8], 0
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x7ff7010c274d
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7010c2748
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7010c2748
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff7010c4fc0
mov qword [rbp + 0xa0], r12
mov qword [rbp + 0xa8], 0xf
mov byte [rbp + 0x90], 0
mov rcx, qword [rbp + 0x220]
movsxd rdx, dword [rcx + 4]
lea rax, [0x7ff7010c7e40]
mov qword [rbp + rdx + 0x220], rax
mov rcx, qword [rbp + 0x220]
movsxd rdx, dword [rcx + 4]
lea r8d, [rdx - 0x98]
mov dword [rbp + rdx + 0x21c], r8d
lea rcx, [rbp + 0x238]
call fcn.7ff7010c3c10
lea rcx, [rbp + 0x240]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x2b8]
call qword [sym.imp.msvcp140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov eax, 1
mov rcx, qword [rbp + 0x320]
xor rcx, rsp
call fcn.7ff7010c4fa0
lea r11, [rsp + 0x430]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov r9d, 0x40000
lea r8, [0x7ff7010c7b10]
lea rdx, [0x7ff7010c7b18]
xor ecx, ecx
call qword [sym.imp.user32.dll_MessageBoxA]
call qword [sym.imp.ucrtbase.dll_abort]
nop
call fcn.7ff7010c11b0
nop
call fcn.7ff7010c1110
int3