Function at 0x140001300
Capabilities:
Create process on windows
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x580]
sub rsp, 0x680
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x570], rax
xor r14d, r14d
mov dword [rsp + 0x50], r14d
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
mov r8d, 0x104
lea rdx, [rbp + 0x250]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x140001df6
lea r9, [rbp + 0x250]
lea r8, str.cmd.exe__C_Del__f__q___s_
mov edx, 0x208
lea rcx, [rbp + 0x360]
call fcn.140001020
test eax, eax
js 0x140001df6
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b8], xmm0
mov qword [rbp + 0x1c8], r14
mov qword [rbp + 0x1d0], r14
lea rax, [rbp + 0x250]
mov rbx, 0xffffffffffffffff
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], r14b
jne 0x1400013c0
movabs rdi, 0x7fffffffffffffff
cmp rbx, rdi
ja 0x140001f2a
mov qword [rbp + 0x1d0], 0xf
cmp rbx, 0xf
ja 0x140001417
mov qword [rbp + 0x1c8], rbx
mov r8, rbx
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x1b8]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx + 0x1b8], r14b
jmp 0x1400014b8
mov rax, rbx
or rax, 0xf
cmp rax, rdi
jbe 0x140001450
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140003c30
test rax, rax
je 0x140001f23
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14000148d
mov rdi, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14000147b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001f30
jmp 0x140001431
test rcx, rcx
je 0x14000148a
call fcn.140003c30
mov rsi, rax
jmp 0x14000148d
mov rsi, r14
mov qword [rbp + 0x1b8], rsi
mov qword [rbp + 0x1c8], rbx
mov qword [rbp + 0x1d0], rdi
mov r8, rbx
lea rdx, [rbp + 0x250]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rbx], r14b
xorps xmm0, xmm0
movups xmmword [rbp + 0x198], xmm0
mov qword [rbp + 0x1a8], r14
mov qword [rbp + 0x1b0], 0xf
mov byte [rbp + 0x198], 0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x84210843
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x3e
sub r8d, ecx
movsxd rax, r8d
lea rsi, [0x140000000]
movzx r9d, byte [rax + rsi + 0x5638]
mov rcx, qword [rbp + 0x1a8]
mov rdx, qword [rbp + 0x1b0]
cmp rcx, rdx
jae 0x14000154e
lea rax, [rcx + 1]
mov qword [rbp + 0x1a8], rax
lea rax, [rbp + 0x198]
cmp rdx, 0xf
cmova rax, qword [rbp + 0x198]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14000155a
lea rcx, [rbp + 0x198]
call fcn.1400038d0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x84210843
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x3e
sub r8d, ecx
movsxd rax, r8d
movzx r9d, byte [rax + rsi + 0x5638]
mov rcx, qword [rbp + 0x1a8]
mov rdx, qword [rbp + 0x1b0]
cmp rcx, rdx
jae 0x1400015c6
lea rax, [rcx + 1]
mov qword [rbp + 0x1a8], rax
lea rax, [rbp + 0x198]
cmp rdx, 0xf
cmova rax, qword [rbp + 0x198]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400015d2
lea rcx, [rbp + 0x198]
call fcn.1400038d0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x84210843
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x3e
sub r8d, ecx
movsxd rax, r8d
movzx r9d, byte [rax + rsi + 0x5638]
mov rcx, qword [rbp + 0x1a8]
mov rdx, qword [rbp + 0x1b0]
cmp rcx, rdx
jae 0x14000163e
lea rax, [rcx + 1]
mov qword [rbp + 0x1a8], rax
lea rax, [rbp + 0x198]
cmp rdx, 0xf
cmova rax, qword [rbp + 0x198]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14000164a
lea rcx, [rbp + 0x198]
call fcn.1400038d0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x84210843
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x3e
sub r8d, ecx
movsxd rax, r8d
movzx r9d, byte [rax + rsi + 0x5638]
mov rcx, qword [rbp + 0x1a8]
mov rdx, qword [rbp + 0x1b0]
cmp rcx, rdx
jae 0x1400016b6
lea rax, [rcx + 1]
mov qword [rbp + 0x1a8], rax
lea rax, [rbp + 0x198]
cmp rdx, 0xf
cmova rax, qword [rbp + 0x198]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400016c2
lea rcx, [rbp + 0x198]
call fcn.1400038d0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x84210843
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x3e
sub r8d, ecx
movsxd rax, r8d
movzx r9d, byte [rax + rsi + 0x5638]
mov rcx, qword [rbp + 0x1a8]
mov rdx, qword [rbp + 0x1b0]
cmp rcx, rdx
jae 0x14000172e
lea rax, [rcx + 1]
mov qword [rbp + 0x1a8], rax
lea rax, [rbp + 0x198]
cmp rdx, 0xf
cmova rax, qword [rbp + 0x198]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14000173a
lea rcx, [rbp + 0x198]
call fcn.1400038d0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x84210843
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x3e
sub r8d, ecx
movsxd rax, r8d
movzx r9d, byte [rax + rsi + 0x5638]
mov rcx, qword [rbp + 0x1a8]
mov rdx, qword [rbp + 0x1b0]
cmp rcx, rdx
jae 0x1400017a6
lea rax, [rcx + 1]
mov qword [rbp + 0x1a8], rax
lea rax, [rbp + 0x198]
cmp rdx, 0xf
cmova rax, qword [rbp + 0x198]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400017b2
lea rcx, [rbp + 0x198]
call fcn.1400038d0
mov rcx, qword [rbp + 0x1a8]
mov rdx, qword [rbp + 0x1b0]
mov rax, rdx
sub rax, rcx
cmp rax, 4
jb 0x1400017f8
lea rax, [rcx + 4]
mov qword [rbp + 0x1a8], rax
lea rax, [rbp + 0x198]
cmp rdx, 0xf
cmova rax, qword [rbp + 0x198]
mov dword [rax + rcx], 0x6578652e
mov byte [rax + rcx + 4], 0
jmp 0x140001812
mov qword [rsp + 0x20], 4
mov edx, 4
lea rcx, [rbp + 0x198]
call fcn.140003a40
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x70]
call sub.VCRUNTIME140.dll_memset
lea rbx, [rbp + 0x1b8]
cmp qword [rbp + 0x1d0], 0xf
cmova rbx, qword [rbp + 0x1b8]
lea rax, [rsi + 0x57c0]
mov qword [rbp + 0x70], rax
lea rcx, [rbp + 0x120]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rsp + 0x50], 1
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x70]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea r13, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x70], r13
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x6c], edx
lea rcx, [rbp + 0x80]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea r15, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp + 0x80], r15
mov byte [rbp + 0xfc], 0
mov byte [rbp + 0xf1], 0
lea rcx, [rbp + 0x80]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp + 0x100], r14
mov rax, qword [0x1400099a8]
mov qword [rbp + 0xf4], rax
mov qword [rbp + 0xe8], r14
mov r8d, 0x21
mov rdx, rbx
lea rcx, [rbp + 0x80]
call fcn.1400032a0
test rax, rax
jne 0x140001922
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x70]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x70], r13
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x6c], edx
xor edx, edx
mov r8d, 0x108
lea rcx, [rsp + 0x60]
call sub.VCRUNTIME140.dll_memset
lea rbx, [rbp + 0x198]
cmp qword [rbp + 0x1b0], 0xf
cmova rbx, qword [rbp + 0x198]
lea rax, [rsi + 0x57b8]
mov qword [rsp + 0x60], rax
lea rcx, [rbp + 8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rsp + 0x50], 3
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea r12, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x60], r12
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x5c], edx
lea rcx, [rsp + 0x68]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
mov qword [rsp + 0x68], r15
mov byte [rbp - 0x1c], 0
mov byte [rbp - 0x27], 0
lea rcx, [rsp + 0x68]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp - 0x18], r14
mov rax, qword [0x1400099a8]
mov qword [rbp - 0x24], rax
mov qword [rbp - 0x30], r14
mov r8d, 0x22
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.1400032a0
test rax, rax
jne 0x140001a35
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x60]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x60], r12
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x5c], edx
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x70]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator__void_const___ptr64]
test al, al
jne 0x140001e49
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x60]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator__void_const___ptr64]
test al, al
jne 0x140001e49
lea rdx, [rbp + 0x80]
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
mov ebx, 0x64
mov edi, ebx
nop dword [rax + rax]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x84210843
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x3e
sub r8d, ecx
movsxd rdx, r8d
movzx edx, byte [rdx + rsi + 0x5638]
lea rcx, [rsp + 0x60]
call fcn.1400035f0
sub rdi, 1
jne 0x140001ab0
lea rdx, [0x1400035b0]
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x84210843
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x3e
sub r8d, ecx
movsxd rdx, r8d
movzx edx, byte [rdx + rsi + 0x5698]
lea rcx, [rsp + 0x60]
call fcn.1400035f0
sub rbx, 1
jne 0x140001b01
lea rdx, [0x1400035b0]
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x80]
call fcn.1400031b0
test rax, rax
jne 0x140001b7e
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x70]
add rcx, rax
xor r8d, r8d
lea edx, [rbx + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea rcx, [rsp + 0x68]
call fcn.1400031b0
test rax, rax
jne 0x140001bab
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x60]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov dword [rbp + 0x1e0], 0x68
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e8], xmm0
movups xmmword [rbp + 0x1f8], xmm0
movups xmmword [rbp + 0x208], xmm0
movups xmmword [rbp + 0x218], xmm0
movups xmmword [rbp + 0x228], xmm0
movups xmmword [rbp + 0x238], xmm0
lea rax, [rbp + 0x180]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x1e0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x360]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x140001e26
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x60], r12
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x5c], edx
mov qword [rsp + 0x68], r15
cmp qword [rbp - 0x18], 0
je 0x140001c82
mov rax, qword [rbp - 0x80]
lea rcx, [rbp - 0x28]
cmp qword [rax], rcx
jne 0x140001c82
mov rdx, qword [rbp - 8]
mov rcx, qword [rbp - 0x10]
mov qword [rax], rcx
mov rax, qword [rbp - 0x60]
mov qword [rax], rcx
sub edx, ecx
mov rax, qword [rbp - 0x48]
mov dword [rax], edx
cmp byte [rbp - 0x1c], 0
je 0x140001c92
lea rcx, [rsp + 0x68]
call fcn.1400031b0
lea rcx, [rsp + 0x68]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x70], r13
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x6c], edx
mov qword [rbp + 0x80], r15
cmp qword [rbp + 0x100], 0
je 0x140001d1d
mov rax, qword [rbp + 0x98]
lea rcx, [rbp + 0xf0]
cmp qword [rax], rcx
jne 0x140001d1d
mov rdx, qword [rbp + 0x110]
mov rcx, qword [rbp + 0x108]
mov qword [rax], rcx
mov rax, qword [rbp + 0xb8]
mov qword [rax], rcx
sub edx, ecx
mov rax, qword [rbp + 0xd0]
mov dword [rax], edx
cmp byte [rbp + 0xfc], 0
je 0x140001d32
lea rcx, [rbp + 0x80]
call fcn.1400031b0
lea rcx, [rbp + 0x80]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x88]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x120]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x1b0]
cmp rdx, 0xf
jbe 0x140001d9c
inc rdx
mov rcx, qword [rbp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001d97
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001eba
call fcn.140003c74
mov qword [rbp + 0x1a8], r14
mov qword [rbp + 0x1b0], 0xf
mov byte [rbp + 0x198], 0
mov rdx, qword [rbp + 0x1d0]
cmp rdx, 0xf
jbe 0x140001df6
inc rdx
mov rcx, qword [rbp + 0x1b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001df1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001f23
call fcn.140003c74
mov rcx, qword [rbp + 0x570]
xor rcx, rsp
call fcn.140003c10
lea r11, [rsp + 0x680]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rcx, qword [rbp + 0x188]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x180]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rdx, str.Error_opening_files.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400033e0
lea rdx, [0x1400035b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rsp + 0x60]
call fcn.140002000
nop
lea rcx, [rbp + 0x70]
call fcn.140001f40
nop
mov rdx, qword [rbp + 0x1b0]
cmp rdx, 0xf
jbe 0x140001ec6
inc rdx
mov rcx, qword [rbp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001ec1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001ec1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003c74
mov qword [rbp + 0x1a8], r14
mov qword [rbp + 0x1b0], 0xf
mov byte [rbp + 0x198], 0
mov rdx, qword [rbp + 0x1d0]
cmp rdx, 0xf
jbe 0x140001df6
inc rdx
mov rcx, qword [rbp + 0x1b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001df1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001df1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140001220
int3
call fcn.140001180
int3