Function at 0x14003dab0
Capabilities:
Create process on windows
Create process suspended
Create thread
Inject thread
Resume thread
Use process replacement

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xac0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
mov rax, qword [0x140055040]
xor rax, rsp
mov qword [rsp + 0xa60], rax
mov esi, r9d
mov rdi, rcx
xor r13d, r13d
mov r12d, r13d
mov dword [rsp + 0x64], r13d
mov r14d, 4
xor edx, edx
lea ecx, [rdx + 0xa]
call fcn.140030d20
test eax, eax
je 0x14003db8d
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [r14 + rcx]
cmp dword [0x140055a24], eax
jle 0x14003db66
lea rcx, [0x140055a24]
call fcn.140043b00
cmp dword [0x140055a24], 0xffffffff
jne 0x14003db66
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x140055a10], rax
lea rcx, [0x140055a24]
call fcn.140043a94
lea rdx, str.SetThreadDpiAwarenessContext
mov rcx, qword [0x140055a10]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14003db8d
mov rcx, 0xfffffffffffffffc
call rax
jmp 0x14003dc13
mov edx, 3
lea ecx, [rdx + 3]
call fcn.140030d20
test eax, eax
je 0x14003dc0d
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [r14 + rcx]
cmp dword [0x140055a20], eax
jle 0x14003dbeb
lea rcx, [0x140055a20]
call fcn.140043b00
cmp dword [0x140055a20], 0xffffffff
jne 0x14003dbeb
lea rcx, str.shcore.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x140055a18], rax
lea rcx, [0x140055a20]
call fcn.140043a94
lea rdx, str.SetProcessDpiAwareness
mov rcx, qword [0x140055a18]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14003dc0d
mov ecx, 2
call rax
jmp 0x14003dc13
call qword [sym.imp.USER32.dll_SetProcessDPIAware]
mov dword [rsp + 0x520], 0x50
mov dword [rsp + 0x524], 0x40
lea rax, [0x14003d570]
mov qword [rsp + 0x528], rax
mov qword [rsp + 0x530], r13
mov qword [rsp + 0x538], rdi
mov qword [rsp + 0x540], r13
mov edx, 0x7f00
mov rcx, rdi
call qword [sym.imp.USER32.dll_LoadCursorA]
mov qword [rsp + 0x548], rax
xor ecx, ecx
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [rsp + 0x550], rax
mov qword [rsp + 0x558], r13
lea rax, str.class001
mov qword [rsp + 0x560], rax
mov qword [rsp + 0x568], r13
lea rcx, [rsp + 0x520]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [r14 + rbx]
cmp dword [0x140055a34], eax
jle 0x14003dcf4
lea rcx, [0x140055a34]
call fcn.140043b00
cmp dword [0x140055a34], 0xffffffff
jne 0x14003dcf4
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
sub eax, 0x12c
cdq
sub eax, edx
sar eax, 1
mov dword [0x140055a30], eax
lea rcx, [0x140055a34]
call fcn.140043a94
mov eax, dword [r14 + rbx]
cmp dword [0x140055a2c], eax
jle 0x14003dd3c
lea rcx, [0x140055a2c]
call fcn.140043b00
cmp dword [0x140055a2c], 0xffffffff
jne 0x14003dd3c
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
sub eax, 0xbe
cdq
sub eax, edx
sar eax, 1
mov dword [0x140055a28], eax
lea rcx, [0x140055a2c]
call fcn.140043a94
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x38], 0xbe
mov dword [rsp + 0x30], 0x12c
mov eax, dword [0x140055a28]
mov dword [rsp + 0x28], eax
mov eax, dword [0x140055a30]
mov dword [rsp + 0x20], eax
mov r9d, 0x80000000
xor r8d, r8d
mov rdx, qword [rsp + 0x560]
lea ecx, [r8 + 0x20]
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov r15, rax
mov qword [rsp + 0x80], rax
mov ecx, 0x20
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov rcx, rax
mov qword [0x1400559a8], rax
test rax, rax
je 0x140040cd5
mov qword [0x1400559b0], r13
mov qword [0x1400559bc], r13
mov dword [0x1400559c4], r13d
mov qword [0x1400559cc], r13
mov dword [0x1400559d4], r13d
mov qword [0x1400559e4], r13
mov dword [0x1400559d8], 1
mov dword [0x1400559c8], 1
mov dword [0x1400559b8], r13d
mov dword [0x1400559dc], 1
mov dword [0x1400559e0], 0x50
mov dword [0x1400559ec], 1
mov rax, qword [rax]
lea rdx, [0x1400559f0]
mov qword [rsp + 0x30], rdx
lea rdx, [0x1400559b0]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x40
mov r9, r15
xor edx, edx
lea r8d, [rdx + 1]
call qword [rax + 0x80]
test eax, eax
js 0x140040cce
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, r15
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov edx, esi
mov rcx, r15
call qword [sym.imp.USER32.dll_ShowWindow]
mov rbx, qword [0x140055970]
mov rdx, qword [0x140055960]
mov ecx, 0x6270
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov r8, rax
mov rdi, qword [0x140055970]
test rdi, rdi
je 0x14003def9
mov r9d, dword [rdi + 0x3f68]
movsx rax, word [rdi + 0x60e0]
lea rdx, [rdi + 0x60e4]
lea rdx, [rdx + rax*8]
cmp dword [rdx], r9d
je 0x14003deef
lea ecx, [rax + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [rdi + 0x60e0], cx
movsx rax, cx
lea rdx, [rdi + 0x60e4]
lea rdx, [rdx + rax*8]
mov dword [rdx], r9d
mov dword [rdx + 4], r13d
inc word [rdx + 4]
inc dword [rdi + 0x60d8]
mov qword [rsp + 0x78], r8
lea rax, [rsp + 0x70]
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xb0], r8
test r8, r8
je 0x14003df24
xor edx, edx
mov rcx, r8
call fcn.140001450
jmp 0x14003df27
mov rax, r13
mov qword [0x140055970], rax
call fcn.140005a00
test rbx, rbx
je 0x14003df41
mov qword [0x140055970], rbx
jmp 0x14003df48
mov rbx, qword [0x140055970]
mov qword [rbx + 0x20], r13
xor ecx, ecx
call fcn.140024f60
mov rcx, r15
call fcn.14002ed00
mov r14, qword [0x1400559f0]
mov rsi, qword [0x140055970]
mov rdx, qword [0x140055960]
mov ecx, 0x28
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov rdi, rax
mov r8, qword [0x140055970]
test r8, r8
je 0x14003dfe9
mov r9d, dword [r8 + 0x3f68]
movsx rdx, word [r8 + 0x60e0]
lea rax, [r8 + 0x60e4]
lea rax, [rax + rdx*8]
cmp dword [rax], r9d
je 0x14003dfde
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x60e0], cx
movsx rax, cx
lea rax, [rax*8 + 0x60e4]
add rax, r8
mov dword [rax], r9d
mov dword [rax + 4], r13d
inc word [rax + 4]
inc dword [r8 + 0x60d8]
xor r15d, r15d
test rdi, rdi
je 0x14003e010
mov qword [rdi], r15
mov qword [rdi + 8], r15
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], r15
mov dword [rdi + 0x20], 0x1388
mov dword [rdi + 0x24], 0x2710
jmp 0x14003e013
mov rdi, r15
mov qword [rsi + 0x98], rdi
lea rax, str.imgui_impl_dx9
mov qword [rsi + 0x88], rax
or dword [rsi + 0xc], 8
mov qword [rdi], r14
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 8]
mov rbx, qword [rbx + 0x38]
mov qword [rsp + 0x120], r15
lea r8, [rsp + 0x120]
lea rsi, str.C:WindowsFonts_segoeui.ttf
mov rcx, rsi
call fcn.140003720
mov rdi, rax
movss xmm10, dword [0x14004cba4]
test rax, rax
je 0x14003e2a3
xorps xmm1, xmm1
movups xmmword [rsp + 0x350], xmm1
movups xmmword [rsp + 0x360], xmm1
movaps xmmword [rsp + 0x370], xmm1
movaps xmmword [rsp + 0x380], xmm1
movups xmmword [rsp + 0x390], xmm1
movups xmmword [rsp + 0x3a0], xmm1
movaps xmmword [rsp + 0x3b0], xmm1
movaps xmmword [rsp + 0x3c0], xmm1
movaps xmmword [rsp + 0x3d0], xmm1
mov byte [rsp + 0x35c], 1
mov dword [rsp + 0x368], 2
mov dword [rsp + 0x36c], 1
mov dword [rsp + 0x394], 0x7f7fffff
mov dword [rsp + 0x3a0], 0x3f800000
mov dword [rsp + 0x3a4], 0x3f800000
mov eax, 0xffff
mov word [rsp + 0x3a8], ax
movaps xmm3, xmmword [rsp + 0x350]
movaps xmmword [rsp + 0x760], xmm3
movaps xmm4, xmmword [rsp + 0x360]
movaps xmmword [rsp + 0x770], xmm4
movaps xmmword [rsp + 0x780], xmm1
xorps xmm5, xmm5
movaps xmmword [rsp + 0x790], xmm5
movaps xmm6, xmmword [rsp + 0x390]
movaps xmmword [rsp + 0x7a0], xmm6
movaps xmm2, xmmword [rsp + 0x3a0]
movaps xmmword [rsp + 0x7b0], xmm2
xorps xmm7, xmm7
movaps xmmword [rsp + 0x7c0], xmm7
xorps xmm8, xmm8
movaps xmmword [rsp + 0x7d0], xmm8
xorps xmm9, xmm9
movaps xmmword [rsp + 0x7e0], xmm9
movdqa xmm0, xmm2
psrldq xmm0, 0xa
movd eax, xmm0
test al, al
jne 0x14003e228
lea r9, [0x14004c7ec]
nop dword [rax + rax]
lea rcx, [r9 - 1]
movzx eax, byte [rcx]
cmp al, 0x2f
je 0x14003e1b7
cmp al, 0x5c
je 0x14003e1b7
mov r9, rcx
cmp rcx, rsi
ja 0x14003e1a0
movsd xmm0, qword [0x14004cbc0]
movsd qword [rsp + 0x20], xmm0
lea r8, str._s___.0fpx
mov edx, 0x28
lea rcx, [rsp + 0x7ba]
call fcn.1400032a0
movaps xmm9, xmmword [rsp + 0x7e0]
movaps xmm8, xmmword [rsp + 0x7d0]
movaps xmm7, xmmword [rsp + 0x7c0]
movaps xmm2, xmmword [rsp + 0x7b0]
movaps xmm6, xmmword [rsp + 0x7a0]
movaps xmm5, xmmword [rsp + 0x790]
movaps xmm1, xmmword [rsp + 0x780]
movaps xmm4, xmmword [rsp + 0x770]
movaps xmm3, xmmword [rsp + 0x760]
movaps xmmword [rsp + 0x430], xmm3
movaps xmmword [rsp + 0x440], xmm4
movaps xmmword [rsp + 0x450], xmm1
movaps xmmword [rsp + 0x460], xmm5
movaps xmmword [rsp + 0x470], xmm6
movaps xmmword [rsp + 0x480], xmm2
movaps xmmword [rsp + 0x490], xmm7
movaps xmmword [rsp + 0x4a0], xmm8
movaps xmmword [rsp + 0x4b0], xmm9
mov qword [rsp + 0x430], rdi
mov eax, dword [rsp + 0x120]
mov dword [rsp + 0x438], eax
mov dword [rsp + 0x444], 0x41900000
lea rdx, [rsp + 0x430]
mov rcx, rbx
call fcn.140029760
xorps xmm0, xmm0
movups xmmword [rsp + 0x920], xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x930], xmm1
movups xmmword [rsp + 0x940], xmm1
movups xmmword [rsp + 0x610], xmm0
mov qword [rsp + 0x620], r15
mov qword [rsp + 0x628], r15
xor r8d, r8d
lea rdx, [0x140046897]
lea rcx, [rsp + 0x610]
call fcn.140041f10
nop
mov byte [rsp + 0x5c8], 1
xor sil, sil
mov byte [rsp + 0x60], sil
lea r14, [0x14004c818]
lea rbx, [0x14003d620]
lea rdi, str.Select_fortnite_build_9.41
cmp byte [rsp + 0x5c8], 0
je 0x1400409bd
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x810]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14003e3a8
nop word [rax + rax]
lea rcx, [rsp + 0x810]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x810]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rsp + 0x818], 0x12
jne 0x14003e386
cmp byte [rsp + 0x5c8], 0
sete byte [rsp + 0x5c8]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x810]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x14003e350
cmp byte [rsp + 0x5c8], 0
je 0x1400409bd
mov ecx, dword [0x1400559a0]
test ecx, ecx
je 0x14003e3e9
mov eax, dword [0x1400559a4]
test eax, eax
je 0x14003e3e9
mov dword [0x1400559b0], ecx
mov dword [0x1400559b4], eax
mov dword [0x1400559a4], r15d
mov dword [0x1400559a0], r15d
call fcn.14003d4a0
mov rax, qword [0x140055970]
test rax, rax
je 0x14003e3fe
mov rcx, qword [rax + 0x98]
jmp 0x14003e401
mov rcx, r15
cmp qword [rcx + 0x18], 0
jne 0x14003e424
test rax, rax
je 0x14003e424
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x14003e424
cmp qword [rcx], 0
je 0x14003e424
call fcn.14002e9c0
call fcn.14002f710
call fcn.1400083e0
mov rax, qword [0x140055970]
mov qword [rax + 0x4a28], 0
mov qword [rax + 0x4a30], 0
mov dword [rax + 0x4a1c], 1
or dword [rax + 0x4a18], 3
mov dword [rax + 0x4a38], 0x43960000
mov dword [rax + 0x4a3c], 0x433e0000
mov dword [rax + 0x4a20], 1
mov r8d, 0x26
lea rdx, [rsp + 0x5c8]
lea rcx, str.janlauncher
call fcn.14000dac0
mov dword [rsp + 0x128], 0x438e8000
mov dword [rsp + 0x12c], 0x42200000
lea rdx, [rsp + 0x128]
lea rcx, str.set_fortnite_directory
call fcn.140033140
test al, al
je 0x14003e632
mov qword [rsp + 0x570], r15
mov qword [rsp + 0x578], r15
mov qword [rsp + 0x580], r15
mov qword [rsp + 0x590], 0x41
mov qword [rsp + 0x5a8], r15
mov qword [rsp + 0x588], rdi
mov qword [rsp + 0x598], rbx
mov qword [rsp + 0x5a0], r14
lea rcx, [rsp + 0x570]
call qword [sym.imp.SHELL32.dll_SHBrowseForFolderA]
mov rdi, rax
test rax, rax
je 0x14003e574
lea rdx, [rsp + 0x950]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_SHGetPathFromIDListA]
mov qword [rsp + 0x518], r15
lea rcx, [rsp + 0x518]
call qword [sym.imp.SHELL32.dll_SHGetMalloc]
test eax, eax
js 0x14003e56a
mov rcx, qword [rsp + 0x518]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + 0x28]
mov rcx, qword [rsp + 0x518]
mov rax, qword [rcx]
call qword [rax + 0x10]
lea r9, [rsp + 0x950]
jmp 0x14003e57b
lea r9, [0x140046897]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [r9 + rbx], 0
jne 0x14003e582
mov rax, qword [rsp + 0x628]
cmp rbx, rax
ja 0x14003e5ca
lea rdi, [rsp + 0x610]
cmp rax, 0xf
cmova rdi, qword [rsp + 0x610]
mov qword [rsp + 0x620], rbx
mov r8, rbx
mov rdx, r9
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x14003e5da
mov rdx, rbx
lea rcx, [rsp + 0x610]
call fcn.1400426c0
lea rcx, [rsp + 0x610]
cmp qword [rsp + 0x628], 0xf
cmova rcx, qword [rsp + 0x610]
mov r8, qword [rsp + 0x620]
test r8, r8
jne 0x14003e7f1
lea rdx, [0x140046897]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14003e7f1
xor r9d, r9d
lea r8, str.janlauncher
lea rdx, str.invalid_path
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov qword [rsp + 0xb0], 0
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x20], rax
mov r9d, 0x10
lea r8, [rsp + 0x920]
xor edx, edx
lea rcx, str.username
call fcn.140036aa0
mov qword [rsp + 0xb8], 0
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x8000
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x20], rax
mov r9d, 0x20
lea r8, [rsp + 0x930]
xor edx, edx
lea rcx, str.password
call fcn.140036aa0
test sil, sil
je 0x1400408aa
mov dword [rsp + 0x78], 0x438e8000
mov dword [rsp + 0x7c], 0x42480000
lea rdx, [rsp + 0x78]
lea rcx, str.LAUNCH
call fcn.140033140
test al, al
je 0x1400408aa
xorps xmm0, xmm0
movups xmmword [rsp + 0x2c0], xmm0
mov qword [rsp + 0x2d0], r15
mov qword [rsp + 0x2d8], r15
mov r8d, 0x14
lea rdx, [0x14004c860]
lea rcx, [rsp + 0x2c0]
call fcn.140041f10
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x2e0], xmm0
mov qword [rsp + 0x2f0], r15
mov qword [rsp + 0x2f8], r15
mov r8d, 0x21
lea rdx, [0x14004c878]
lea rcx, [rsp + 0x2e0]
call fcn.140041f10
nop
lea rax, [rsp + 0x2c0]
mov qword [rsp + 0x250], rax
lea rax, [rsp + 0x300]
mov qword [rsp + 0x258], rax
lea rdx, [rsp + 0x250]
lea rcx, [rsp + 0x3e0]
call fcn.140040e70
nop
lea rcx, [rsp + 0x3e0]
call fcn.14003d710
nop
lea rcx, [rsp + 0x3e0]
call fcn.140041290
nop
lea r9, [fcn.1400410d0]
mov edx, 0x20
lea r8d, [rdx - 0x1e]
lea rcx, [rsp + 0x2c0]
call fcn.140043df4
mov rsi, qword [rsp + 0x620]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rsi
cmp rax, 0x1c
jb 0x140040d63
jmp 0x14003eeee
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x710], xmm0
mov qword [rsp + 0x720], rax
movups xmmword [rsp + 0x300], xmm0
mov qword [rsp + 0x310], r15
mov qword [rsp + 0x318], r15
lea r8d, [rax + 0xc]
lea rdx, str.FortniteGame
lea rcx, [rsp + 0x300]
call fcn.140041f10
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x320], xmm0
mov qword [rsp + 0x330], r15
mov qword [rsp + 0x338], r15
mov r8d, 6
lea rdx, str.Engine
lea rcx, [rsp + 0x320]
call fcn.140041f10
nop
lea rax, [rsp + 0x300]
mov qword [rsp + 0x210], rax
lea rax, [rsp + 0x340]
mov qword [rsp + 0x218], rax
lea rdx, [rsp + 0x210]
lea rcx, [rsp + 0x710]
call fcn.140040e70
nop
lea r9, [fcn.1400410d0]
mov edx, 0x20
lea r8d, [rdx - 0x1e]
lea rcx, [rsp + 0x300]
call fcn.140043df4
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x680], xmm1
mov qword [rsp + 0x690], r15
mov rbx, qword [rsp + 0x620]
lea rdi, [rsp + 0x610]
cmp qword [rsp + 0x628], 0xf
cmova rdi, qword [rsp + 0x610]
call fcn.140044730
mov qword [rsp + 0x220], rdi
mov qword [rsp + 0x228], rbx
lea r8, [rsp + 0x220]
mov edx, eax
lea rcx, [rsp + 0x1e8]
call fcn.14003b980
or r12d, 0x180000
mov dword [rsp + 0x68], r12d
mov dword [rsp + 0x64], r12d
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x670], xmm0
lea rdx, [rsp + 0x1e8]
lea rcx, [rsp + 0x670]
call fcn.1400415b0
test eax, eax
jne 0x140040d69
mov rdx, qword [rsp + 0x200]
cmp rdx, 7
jbe 0x14003e9a7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e9a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003e9a2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043a8c
xorps xmm0, xmm0
movups xmmword [rsp + 0x6c0], xmm0
mov r15, qword [rsp + 0x678]
test r15, r15
je 0x14003e9d6
lock inc dword [r15 + 8]
mov r15, qword [rsp + 0x678]
mov r12d, dword [rsp + 0x64]
mov dword [rsp + 0x68], r12d
movaps xmm0, xmmword [rsp + 0x670]
movdqa xmmword [rsp + 0x6c0], xmm0
test r15, r15
je 0x14003ea03
lock inc dword [r15 + 8]
mov r15, qword [rsp + 0x678]
mov r12d, dword [rsp + 0x64]
mov dword [rsp + 0x68], r12d
xorps xmm0, xmm0
movups xmmword [rsp + 0x748], xmm0
xor ebx, ebx
mov qword [rsp + 0x748], rbx
mov qword [rsp + 0x750], rbx
test r15, r15
je 0x14003ea79
mov eax, 0xffffffff
lock xadd dword [r15 + 8], eax
cmp eax, 1
jne 0x14003ea67
mov rdi, qword [rsp + 0x678]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x14003ea67
mov r15, qword [rsp + 0x678]
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 8]
jmp 0x14003ea6f
mov r15, qword [rsp + 0x678]
mov r12d, dword [rsp + 0x64]
mov dword [rsp + 0x68], r12d
nop dword [rax]
mov r14, qword [rsp + 0x6c0]
test r14, r14
je 0x14003ed4b
lea rdx, [r14 + 0x20]
lea rcx, [rsp + 0x4d0]
call fcn.14003d3c0
movsd xmm0, qword [rax]
movsd qword [rsp + 0x1b8], xmm0
mov edx, dword [rax + 8]
mov ecx, dword [rsp + 0x1b8]
test edx, edx
je 0x14003eacb
lea eax, [rcx - 1]
test eax, 0xfffffff7
jne 0x140040d80
cmp ecx, 3
jne 0x14003ed31
lea rcx, [r14 + 0x20]
cmp qword [r14 + 0x38], 7
jbe 0x14003eae3
mov rcx, qword [r14 + 0x20]
mov rax, qword [r14 + 0x30]
lea r10, [rcx + rax*2]
mov rdi, r10
mov rdx, r10
call fcn.14003bad0
cmp rax, r10
je 0x14003eb3b
nop dword [rax + rax]
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x14003eb0f
cmp cx, 0x2f
jne 0x14003eb18
add rax, 2
cmp rax, r10
jne 0x14003eb00
cmp rax, r10
je 0x14003eb3b
nop dword [rax]
lea rdx, [rdi - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x14003eb3b
cmp cx, 0x2f
je 0x14003eb3b
mov rdi, rdx
cmp rax, rdx
jne 0x14003eb20
mov qword [rsp + 0x230], rdi
sub r10, rdi
sar r10, 1
mov qword [rsp + 0x238], r10
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0x198]
call fcn.1400429e0
or r12d, 1
lea rax, [rsp + 0x198]
cmp qword [rsp + 0x1b0], 7
cmova rax, qword [rsp + 0x198]
mov qword [rsp + 0x240], rax
mov rax, qword [rsp + 0x1a8]
mov qword [rsp + 0x248], rax
call fcn.140044730
movaps xmm0, xmmword [rsp + 0x240]
movdqa xmmword [rsp + 0x400], xmm0
lea r8, [rsp + 0x400]
mov edx, eax
lea rcx, [rsp + 0x728]
call fcn.140043120
or r12d, 0xe
mov dword [rsp + 0x68], r12d
mov dword [rsp + 0x64], r12d
mov rdx, qword [rsp + 0x1b0]
cmp rdx, 7
jbe 0x14003ec22
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ec1d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003ec1d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043a8c
mov qword [rsp + 0x1a8], rbx
mov qword [rsp + 0x1b0], 7
mov word [rsp + 0x198], bx
mov rdi, qword [rsp + 0x710]
mov rbx, qword [rsp + 0x718]
cmp rdi, rbx
je 0x14003ece9
mov rsi, qword [rsp + 0x738]
nop
lea rdx, [rsp + 0x728]
cmp qword [rsp + 0x740], 0xf
cmova rdx, qword [rsp + 0x728]
mov r8, qword [rdi + 0x10]
mov rcx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x14003ec8b
mov rcx, qword [rdi]
cmp r8, rsi
jne 0x14003ecdc
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14003ecdc
cmp rdi, rbx
je 0x14003ece9
lea r8, [r14 + 0x20]
mov rax, qword [rsp + 0x688]
cmp rax, qword [rsp + 0x690]
je 0x14003ecca
mov rdx, r8
mov rcx, rax
call fcn.14003bf60
add qword [rsp + 0x688], 0x20
jmp 0x14003ece9
mov rdx, rax
lea rcx, [rsp + 0x680]
call fcn.140042b30
jmp 0x14003ece9
add rdi, 0x20
cmp rdi, rbx
jne 0x14003ec60
mov rdx, qword [rsp + 0x740]
cmp rdx, 0xf
jbe 0x14003ed2f
inc rdx
mov rcx, qword [rsp + 0x728]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ed2a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003ed2a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043a8c
xor ebx, ebx
lea rcx, [rsp + 0x6c0]
call fcn.14003ce40
test eax, eax
jne 0x140040d90
jmp 0x14003ea80
mov rcx, qword [rsp + 0x6c8]
test rcx, rcx
je 0x14003eda4
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14003ed94
mov rdi, qword [rsp + 0x6c8]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x14003ed94
mov rcx, qword [rsp + 0x6c8]
mov rax, qword [rcx]
call qword [rax + 8]
mov eax, dword [rsp + 0x64]
mov dword [rsp + 0x68], eax
mov r15, qword [rsp + 0x678]
test r15, r15
je 0x14003eded
mov eax, 0xffffffff
lock xadd dword [r15 + 8], eax
cmp eax, 1
jne 0x14003ede6
mov rdi, qword [rsp + 0x678]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x14003ede6
mov rcx, qword [rsp + 0x678]
mov rax, qword [rcx]
call qword [rax + 8]
mov r12d, dword [rsp + 0x64]
jmp 0x14003edf2
mov r12d, dword [rsp + 0x68]
mov rcx, qword [rsp + 0x680]
mov rdx, qword [rsp + 0x688]
cmp rcx, rdx
jne 0x14003ee37
xor r9d, r9d
lea r8, str.janlauncher
lea rdx, str.invalid_path
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rdx, qword [rsp + 0x688]
mov rcx, qword [rsp + 0x680]
movzx esi, byte [rsp + 0x60]
jmp 0x14003ee3f
mov sil, 1
mov byte [rsp + 0x60], sil
test rcx, rcx
je 0x14003eea6
call fcn.140042010
mov rdx, qword [rsp + 0x690]
mov rcx, qword [rsp + 0x680]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ee88
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003ee88
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043a8c
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x680], xmm0
xor r15d, r15d
mov qword [rsp + 0x690], r15
jmp 0x14003eea9
xor r15d, r15d
lea rcx, [rsp + 0x710]
call fcn.140041290
jmp 0x14003e632
lea r15, [rsp + 0x610]
cmp qword [rsp + 0x628], 0xf
cmova r15, qword [rsp + 0x610]
xorps xmm0, xmm0
movups xmmword [rsp + 0x5d0], xmm0
xor r13d, r13d
mov qword [rsp + 0x5e0], r13
mov qword [rsp + 0x5e8], r13
lea r14, [rsi + 0x1c]
mov ebx, 0xf
lea rdi, [rsp + 0x5d0]
cmp r14, rbx
jbe 0x14003efc2
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x14003ef78
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140043db8
test rax, rax
je 0x14003efa1
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14003efba
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14003efa8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140040d98
jmp 0x14003ef5d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14003efb7
call fcn.140043db8
mov rdi, rax
jmp 0x14003efba
mov rdi, r13
mov qword [rsp + 0x5d0], rdi
mov qword [rsp + 0x5e0], r14
mov qword [rsp + 0x5e8], rbx
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.FortniteGameBinariesWin64]
movups xmmword [rdi + rsi], xmm0
movsd xmm0, qword [0x14004c8b0]
movsd qword [rdi + rsi + 0x10], xmm0
mov eax, dword [0x14004c8b8]
mov dword [rdi + rsi + 0x18], eax
mov byte [rdi + r14], r13b
bts r12d, 0xa
mov rsi, qword [rsp + 0x5e0]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rsi
cmp rax, 0x15
jb 0x140040d9e
lea r15, [rsp + 0x5d0]
cmp qword [rsp + 0x5e8], 0xf
cmova r15, qword [rsp + 0x5d0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x650], xmm0
mov qword [rsp + 0x660], r13
mov qword [rsp + 0x668], r13
lea r14, [rsi + 0x15]
mov ebx, 0xf
lea rdi, [rsp + 0x650]
cmp r14, rbx
jbe 0x14003f0ff
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x14003f0b5
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140043db8
test rax, rax
je 0x14003f0de
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14003f0f7
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14003f0e5
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140040da4
jmp 0x14003f09a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14003f0f4
call fcn.140043db8
mov rdi, rax
jmp 0x14003f0f7
mov rdi, r13
mov qword [rsp + 0x650], rdi
mov qword [rsp + 0x660], r14
mov qword [rsp + 0x668], rbx
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.FortniteLauncher.exe]
movups xmmword [rdi + rsi], xmm0
mov eax, dword [0x14004c8d0]
mov dword [rdi + rsi + 0x10], eax
movzx eax, byte [0x14004c8d4]
mov byte [rdi + rsi + 0x14], al
mov byte [rdi + r14], 0
or r12d, 0x10
mov rsi, qword [rsp + 0x5e0]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rsi
cmp rax, 0x22
jb 0x140040daa
lea r15, [rsp + 0x5d0]
cmp qword [rsp + 0x5e8], 0xf
cmova r15, qword [rsp + 0x5d0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x6d0], xmm0
mov qword [rsp + 0x6e0], r13
mov qword [rsp + 0x6e8], r13
lea r14, [rsi + 0x22]
mov ebx, 0xf
lea rdi, [rsp + 0x6d0]
cmp r14, rbx
jbe 0x14003f239
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x14003f1ef
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140043db8
test rax, rax
je 0x14003f218
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14003f231
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14003f21f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140040db0
jmp 0x14003f1d4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14003f22e
call fcn.140043db8
mov rdi, rax
jmp 0x14003f231
mov rdi, r13
mov qword [rsp + 0x6d0], rdi
mov qword [rsp + 0x6e0], r14
mov qword [rsp + 0x6e8], rbx
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.FortniteClient_Win64_Shipping.exe]
movups xmmword [rdi + rsi], xmm0
movups xmm1, xmmword [0x14004c8e8]
movups xmmword [rdi + rsi + 0x10], xmm1
movzx eax, word [0x14004c8f8]
mov word [rdi + rsi + 0x20], ax
mov byte [rdi + r14], 0
or r12d, 0x20
mov dword [rsp + 0x68], r12d
mov dword [rsp + 0x840], 0x68
xorps xmm0, xmm0
movups xmmword [rsp + 0x848], xmm0
movups xmmword [rsp + 0x858], xmm0
movups xmmword [rsp + 0x868], xmm0
movups xmmword [rsp + 0x878], xmm0
movups xmmword [rsp + 0x888], xmm0
movups xmmword [rsp + 0x898], xmm0
lea rax, [rsp + 0x5d0]
cmp qword [rsp + 0x5e8], 0xf
cmova rax, qword [rsp + 0x5d0]
lea rcx, [rsp + 0x650]
cmp qword [rsp + 0x668], 0xf
cmova rcx, qword [rsp + 0x650]
lea rdx, [rsp + 0x5b0]
mov qword [rsp + 0x48], rdx
lea rdx, [rsp + 0x840]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov rcx, qword [rsp + 0x5b0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x5b8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rsp + 0x6f0], xmm0
mov qword [rsp + 0x700], r13
mov qword [rsp + 0x708], r13
lea rax, [rsp + 0x920]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14003f380
lea rdx, [rsp + 0x920]
lea rcx, [rsp + 0x6f0]
call fcn.140041f10
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x698], xmm0
mov qword [rsp + 0x6a8], r13
mov qword [rsp + 0x6b0], r13
lea rax, [rsp + 0x930]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14003f3d0
lea rdx, [rsp + 0x930]
lea rcx, [rsp + 0x698]
call fcn.140041f10
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r15, qword [rsp + 0x6e0]
sub rax, r15
cmp rax, 1
jb 0x140040db6
lea r12, [rsp + 0x6d0]
mov r14, qword [rsp + 0x6d0]
mov r13, qword [rsp + 0x6e8]
cmp r13, 0xf
cmova r12, r14
xorps xmm0, xmm0
movups xmmword [rsp + 0x178], xmm0
xor eax, eax
mov qword [rsp + 0x188], rax
mov qword [rsp + 0x190], rax
lea rsi, [r15 + 1]
mov ebx, 0xf
lea rdi, [rsp + 0x178]
cmp rsi, rbx
jbe 0x14003f4e2
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x14003f49d
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140043db8
test rax, rax
je 0x14003f4c6
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14003f4da
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14003f4cd
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140040dbc
jmp 0x14003f482
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14003f4d7
call fcn.140043db8
mov rdi, rax
mov qword [rsp + 0x178], rdi
mov qword [rsp + 0x188], rsi
mov qword [rsp + 0x190], rbx
mov byte [rdi], 0x22
lea rcx, [rdi + 1]
mov r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
mov r12d, dword [rsp + 0x68]
or r12d, 0x40
mov r8d, 0x79
lea rdx, str.___epicappFortnite__epicenvProd__epiclocaleen_us__epicportal__nobe__skippatchcheck__noeac__AUTH_LOGIN__AUTH_PASSWORD
lea rcx, [rsp + 0x178]
call fcn.140041370
xorps xmm0, xmm0
movups xmmword [rsp + 0x158], xmm0
xor r15d, r15d
mov qword [rsp + 0x168], r15
mov qword [rsp + 0x170], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x158], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x168], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
bts r12d, 7
lea rdx, [rsp + 0x698]
cmp qword [rsp + 0x6b0], 0xf
cmova rdx, qword [rsp + 0x698]
mov r8, qword [rsp + 0x6a8]
lea rcx, [rsp + 0x158]
call fcn.140041370
xorps xmm0, xmm0
movups xmmword [rsp + 0x138], xmm0
mov qword [rsp + 0x148], r15
mov qword [rsp + 0x150], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x138], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x148], xmm1
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], r15
mov byte [rax], r15b
bts r12d, 8
lea r8d, [r15 + 0x10]
lea rdx, str.__AUTH_TYPEepic
lea rcx, [rsp + 0x138]
call fcn.140041370
xorps xmm0, xmm0
movups xmmword [rsp + 0x630], xmm0
mov qword [rsp + 0x640], r15
mov qword [rsp + 0x648], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x630], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x640], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
bts r12d, 9
mov rdx, qword [rsp + 0x150]
cmp rdx, 0xf
jbe 0x14003f68d
inc rdx
mov rcx, qword [rsp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f688
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f688
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043a8c
mov qword [rsp + 0x148], r15
mov qword [rsp + 0x150], 0xf
mov byte [rsp + 0x138], 0
mov rdx, qword [rsp + 0x170]
cmp rdx, 0xf
jbe 0x14003f6ef
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f6ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f6ea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043a8c
mov qword [rsp + 0x168], r15
mov qword [rsp + 0x170], 0xf
mov byte [rsp + 0x158], 0
mov rdx, qword [rsp + 0x190]
cmp rdx, 0xf
jbe 0x14003f751
inc rdx
mov rcx, qword [rsp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f74c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f74c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043a8c
mov dword [rsp + 0x8b0], 0x68
xorps xmm0, xmm0
movups xmmword [rsp + 0x8b8], xmm0
movups xmmword [rsp + 0x8c8], xmm0
movups xmmword [rsp + 0x8d8], xmm0
movups xmmword [rsp + 0x8e8], xmm0
movups xmmword [rsp + 0x8f8], xmm0
movups xmmword [rsp + 0x908], xmm0
lea rax, [rsp + 0x5d0]
cmp qword [rsp + 0x5e8], 0xf
cmova rax, qword [rsp + 0x5d0]
lea rdx, [rsp + 0x630]
cmp qword [rsp + 0x648], 0xf
cmova rdx, qword [rsp + 0x630]
lea rcx, [rsp + 0x500]
mov qword [rsp + 0x48], rcx
lea rcx, [rsp + 0x8b0]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
cmp byte [0x140055969], 0
je 0x1400406a7
xorps xmm0, xmm0
movups xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0xa0], r15
mov qword [rsp + 0xa8], 7
mov word [rsp + 0x90], r15w
bts r12d, 0xc
mov dword [rsp + 0x64], r12d
mov edx, 0x104
mov r9d, edx
lea rcx, [rsp + 0x90]
call fcn.1400421d0
nop word [rax + rax]
mov esi, dword [rsp + 0xa0]
lea rdx, [rsp + 0x90]
cmp qword [rsp + 0xa8], 7
cmova rdx, qword [rsp + 0x90]
mov ecx, esi
call fcn.140044a44
mov rbx, rax
mov qword [rsp + 0x68], rax
mov edi, eax
mov edx, eax
mov r8, qword [rsp + 0xa0]
cmp rdx, r8
ja 0x14003f8ca
mov qword [rsp + 0xa0], rdx
lea rax, [rsp + 0x90]
cmp qword [rsp + 0xa8], 7
cmova rax, qword [rsp + 0x90]
mov word [rax + rdx*2], r15w
jmp 0x14003f92b
sub rdx, r8
mov rcx, qword [rsp + 0xa8]
mov rax, rcx
sub rax, r8
cmp rdx, rax
ja 0x14003f91b
mov qword [rsp + 0xa0], rdi
lea r9, [rsp + 0x90]
cmp rcx, 7
cmova r9, qword [rsp + 0x90]
lea rdi, [r9 + r8*2]
test rdx, rdx
je 0x14003f910
movzx eax, r15w
mov rcx, rdx
rep stosw word [rdi], ax
lea rax, [rdx + r8]
mov word [r9 + rax*2], r15w
jmp 0x14003f92b
mov r9, rdx
lea rcx, [rsp + 0x90]
call fcn.1400421d0
cmp ebx, esi
jae 0x14003f860
mov eax, dword [rsp + 0x6c]
mov dword [rsp + 0x260], eax
lea rsi, [0x1400550c8]
mov qword [rsp + 0x268], rsi
movaps xmm0, xmmword [rsp + 0x260]
movdqa xmmword [rsp + 0x800], xmm0
btr r12d, 0xc
bts r12d, 0xb
mov dword [rsp + 0x64], r12d
test eax, eax
jne 0x140040dc2
lea rax, [rsp + 0x90]
cmp qword [rsp + 0xa8], 7
cmova rax, qword [rsp + 0x90]
mov qword [rsp + 0x270], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x278], rax
call fcn.140044730
movaps xmm0, xmmword [rsp + 0x270]
movdqa xmmword [rsp + 0x410], xmm0
lea r8, [rsp + 0x410]
mov edx, eax
lea rcx, [rsp + 0x1c8]
call fcn.140043120
or r12d, 0xe000
mov dword [rsp + 0x64], r12d
mov r8d, 8
lea rdx, str.jan.dll
lea rcx, [rsp + 0x1c8]
call fcn.140041370
xorps xmm0, xmm0
movups xmmword [rsp + 0x5f0], xmm0
mov qword [rsp + 0x600], r15
mov qword [rsp + 0x608], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x5f0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x600], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r12d, 0x10
mov rdx, qword [rsp + 0x1e0]
cmp rdx, 0xf
jbe 0x14003fa86
inc rdx
mov rcx, qword [rsp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003fa81
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003fa81
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043a8c
mov qword [rsp + 0x1d8], r15
mov qword [rsp + 0x1e0], 0xf
mov byte [rsp + 0x1c8], 0
btr r12d, 0xb
mov rdx, qword [rsp + 0xa8]
cmp rdx, 7
jbe 0x14003faf2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003faed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003faed
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043a8c
mov qword [rsp + 0xa0], r15
mov qword [rsp + 0xa8], 7
mov word [rsp + 0x90], r15w
mov rbx, qword [rsp + 0x600]
lea rdi, [rsp + 0x5f0]
cmp qword [rsp + 0x608], 0xf
cmova rdi, qword [rsp + 0x5f0]
call fcn.140044730
mov qword [rsp + 0x280], rdi
mov qword [rsp + 0x288], rbx
lea r8, [rsp + 0x280]
mov edx, eax
lea rcx, [rsp + 0x2a0]
call fcn.14003b980
or r12d, 0x60000
lea rdx, [rsp + 0x2a0]
lea rcx, [rsp + 0x4c0]
call fcn.14003d3c0
movsd xmm0, qword [rax]
movsd qword [rsp + 0x340], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x290], ecx
mov qword [rsp + 0x298], rsi
movaps xmm0, xmmword [rsp + 0x290]
movdqa xmmword [rsp + 0x7f0], xmm0
mov eax, dword [rsp + 0x340]
test eax, eax
je 0x14003fc01
cmp eax, 1
sete dil
mov rdx, qword [rsp + 0x2b8]
cmp rdx, 7
jbe 0x14003fc13
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003fc0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003fc0e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov dil, 1
test ecx, ecx
jne 0x140040dd0
jmp 0x14003fbbb
call fcn.140043a8c
mov rcx, qword [rsp + 0x500]
test dil, dil
je 0x14003ff99
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x508]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rsp + 0xe0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0xf0], xmm1
mov r8d, 0x14
lea rdx, [0x14004c860]
lea rcx, [rsp + 0xe0]
call fcn.140041f10
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x100], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x110], xmm1
mov r8d, 0x21
lea rdx, [0x14004c878]
lea rcx, [rsp + 0x100]
call fcn.140041f10
nop
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x80], rax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x88], rax
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0xc0]
call fcn.140040e70
nop
lea rcx, [rsp + 0xc0]
call fcn.14003d710
nop
lea rcx, [rsp + 0xc0]
call fcn.140041290
nop
lea r9, [fcn.1400410d0]
mov edx, 0x20
lea r8d, [rdx - 0x1e]
lea rcx, [rsp + 0xe0]
call fcn.140043df4
nop
mov rdx, qword [rsp + 0x608]
cmp rdx, 0xf
jbe 0x14003fd4f
inc rdx
mov rcx, qword [rsp + 0x5f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003fd4a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004049a
call fcn.140043a8c
mov qword [rsp + 0x600], r15
mov qword [rsp + 0x608], 0xf
mov byte [rsp + 0x5f0], 0
mov rdx, qword [rsp + 0x648]
cmp rdx, 0xf
jbe 0x14003fdae
inc rdx
mov rcx, qword [rsp + 0x630]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003fda9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400404fc
call fcn.140043a8c
mov qword [rsp + 0x640], r15
mov qword [rsp + 0x648], 0xf
mov byte [rsp + 0x630], 0
mov rdx, qword [rsp + 0x6b0]
cmp rdx, 0xf
jbe 0x14003fe0e
inc rdx
mov rcx, qword [rsp + 0x698]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003fe08
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400401a3
call fcn.140043a8c
nop
mov rdx, qword [rsp + 0x708]
cmp rdx, 0xf
jbe 0x14003fe52
inc rdx
mov rcx, qword [rsp + 0x6f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003fe4c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400401ea
call fcn.140043a8c
nop
cmp r13, 0xf
jbe 0x14003fe8a
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x14003fe81
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040222
mov rcx, r14
call fcn.140043a8c
nop
mov rdx, qword [rsp + 0x668]
cmp rdx, 0xf
jbe 0x14003fecd
inc rdx
mov rcx, qword [rsp + 0x650]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003fec8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004026c
call fcn.140043a8c
mov qword [rsp + 0x660], r15
mov qword [rsp + 0x668], 0xf
mov byte [rsp + 0x650], 0
mov rdx, qword [rsp + 0x5e8]
cmp rdx, 0xf
jbe 0x14003ff2c
inc rdx
mov rcx, qword [rsp + 0x5d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ff27
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400402ce
call fcn.140043a8c
mov qword [rsp + 0x5e0], r15
mov qword [rsp + 0x5e8], 0xf
mov byte [rsp + 0x5d0], 0
mov rdx, qword [rsp + 0x628]
cmp rdx, 0xf
jbe 0x140040577
inc rdx
mov rcx, qword [rsp + 0x610]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ff8a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004033c
call fcn.140043a8c
mov eax, 1
jmp 0x140040d1d
mov dword [rsp + 0x20], 4
xor edx, edx
mov r9d, 0x3000
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
test rax, rax
jne 0x140040343
mov rcx, qword [rsp + 0x500]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x508]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rsp + 0xe0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0xf0], xmm1
lea r8d, [rdi + 0x14]
lea rdx, [0x14004c860]
lea rcx, [rsp + 0xe0]
call fcn.140041f10
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x100], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x110], xmm1
lea r8d, [rdi + 0x21]
lea rdx, [0x14004c878]
lea rcx, [rsp + 0x100]
call fcn.140041f10
nop
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x80], rax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x88], rax
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0xc0]
call fcn.140040e70
nop
lea rcx, [rsp + 0xc0]
call fcn.14003d710
nop
lea rcx, [rsp + 0xc0]
call fcn.140041290
nop
lea r9, [fcn.1400410d0]
lea edx, [rdi + 0x20]
lea r8d, [rdi + 2]
lea rcx, [rsp + 0xe0]
call fcn.140043df4
nop
mov rdx, qword [rsp + 0x608]
cmp rdx, 0xf
jbe 0x1400400ee
inc rdx
mov rcx, qword [rsp + 0x5f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400400e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004049a
call fcn.140043a8c
mov qword [rsp + 0x600], r15
mov qword [rsp + 0x608], 0xf
mov byte [rsp + 0x5f0], 0
mov rdx, qword [rsp + 0x648]
cmp rdx, 0xf
jbe 0x14004014d
inc rdx
mov rcx, qword [rsp + 0x630]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040148
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400404fc
call fcn.140043a8c
mov qword [rsp + 0x640], r15
mov qword [rsp + 0x648], 0xf
mov byte [rsp + 0x630], 0
mov rdx, qword [rsp + 0x6b0]
cmp rdx, 0xf
jbe 0x1400401b0
inc rdx
mov rcx, qword [rsp + 0x698]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400401aa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400401aa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043a8c
nop
mov rdx, qword [rsp + 0x708]
cmp rdx, 0xf
jbe 0x1400401f7
inc rdx
mov rcx, qword [rsp + 0x6f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400401f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400401f1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043a8c
nop
cmp r13, 0xf
jbe 0x140040232
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140040229
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140040229
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.140043a8c
nop
mov rdx, qword [rsp + 0x668]
cmp rdx, 0xf
jbe 0x140040278
inc rdx
mov rcx, qword [rsp + 0x650]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040273
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140040273
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043a8c
mov qword [rsp + 0x660], r15
mov qword [rsp + 0x668], 0xf
mov byte [rsp + 0x650], 0
mov rdx, qword [rsp + 0x5e8]
cmp rdx, 0xf
jbe 0x1400402da
inc rdx
mov rcx, qword [rsp + 0x5d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400402d5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400402d5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043a8c
mov qword [rsp + 0x5e0], r15
mov qword [rsp + 0x5e8], 0xf
mov byte [rsp + 0x5d0], 0
mov rdx, qword [rsp + 0x628]
cmp rdx, 0xf
jbe 0x140040577
inc rdx
mov rcx, qword [rsp + 0x610]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ff8a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003ff8a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rcx, [rsp + 0x5f0]
cmp qword [rsp + 0x608], 0xf
seta r10b
mov rdx, qword [rsp + 0x5f0]
cmova rcx, rdx
mov r9, 0xffffffffffffffff
nop dword [rax + rax]
inc r9
cmp byte [rcx + r9], 0
jne 0x140040370
inc r9
lea r8, [rsp + 0x5f0]
test r10b, r10b
cmovne r8, rdx
mov qword [rsp + 0x20], r15
mov rdx, rdi
mov rcx, qword [rsp + 0x500]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rsp + 0x500]
test eax, eax
jne 0x140040581
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x508]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [0x14004c860]
lea rcx, [rsp + 0xe0]
call fcn.140041130
nop
lea rdx, [0x14004c878]
lea rcx, [rsp + 0x100]
call fcn.140041130
nop
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x80], rax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x88], rax
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0xc0]
call fcn.140040e70
nop
lea rcx, [rsp + 0xc0]
call fcn.14003d710
nop
lea rcx, [rsp + 0xc0]
call fcn.140041290
nop
lea r9, [fcn.1400410d0]
mov edx, 0x20
lea r8d, [rdx - 0x1e]
lea rcx, [rsp + 0xe0]
call fcn.140043df4
nop
mov rdx, qword [rsp + 0x608]
cmp rdx, 0xf
jbe 0x1400404a6
inc rdx
mov rcx, qword [rsp + 0x5f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400404a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400404a1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043a8c
mov qword [rsp + 0x600], r15
mov qword [rsp + 0x608], 0xf
mov byte [rsp + 0x5f0], 0
mov rdx, qword [rsp + 0x648]
cmp rdx, 0xf
jbe 0x140040508
inc rdx
mov rcx, qword [rsp + 0x630]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040503
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140040503
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043a8c
mov qword [rsp + 0x640], r15
mov qword [rsp + 0x648], 0xf
mov byte [rsp + 0x630], 0
lea rcx, [rsp + 0x698]
call fcn.1400410d0
nop
lea rcx, [rsp + 0x6f0]
call fcn.1400410d0
nop
lea rcx, [rsp + 0x6d0]
call fcn.1400410d0
nop
lea rcx, [rsp + 0x650]
call fcn.1400410d0
nop
lea rcx, [rsp + 0x5d0]
call fcn.1400410d0
nop
lea rcx, [rsp + 0x610]
call fcn.1400410d0
mov eax, 1
jmp 0x140040d1d
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rdi
mov r9, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov rdi, rax
test rax, rax
jne 0x140040682
mov rcx, qword [rsp + 0x500]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x508]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [0x14004c860]
lea rcx, [rsp + 0xe0]
call fcn.140041130
nop
lea rdx, [0x14004c878]
lea rcx, [rsp + 0x100]
call fcn.140041130
nop
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x80], rax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x88], rax
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0xc0]
call fcn.140040e70
nop
lea rcx, [rsp + 0xc0]
call fcn.14003d710
nop
lea rcx, [rsp + 0xc0]
call fcn.140041290
nop
lea r9, [fcn.1400410d0]
lea edx, [rdi + 0x20]
lea r8d, [rdi + 2]
lea rcx, [rsp + 0xe0]
call fcn.140043df4
nop
lea rcx, [rsp + 0x5f0]
call fcn.1400410d0
nop
lea rcx, [rsp + 0x630]
call fcn.1400410d0
jmp 0x140040524
mov edx, 0xffffffff
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rsp + 0x5f0]
call fcn.1400410d0
mov rcx, qword [rsp + 0x508]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, qword [rsp + 0x500]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x508]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0x648]
cmp rdx, 0xf
jbe 0x140040718
inc rdx
mov rcx, qword [rsp + 0x630]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040713
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140040713
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043a8c
mov qword [rsp + 0x640], r15
mov qword [rsp + 0x648], 0xf
mov byte [rsp + 0x630], 0
mov rdx, qword [rsp + 0x6b0]
cmp rdx, 0xf
jbe 0x14004077b
inc rdx
mov rcx, qword [rsp + 0x698]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040775
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140040775
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043a8c
nop
mov rdx, qword [rsp + 0x708]
cmp rdx, 0xf
jbe 0x1400407c2
inc rdx
mov rcx, qword [rsp + 0x6f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400407bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400407bc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043a8c
nop
cmp r13, 0xf
jbe 0x1400407fd
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400407f4
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400407f4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.140043a8c
nop
mov rdx, qword [rsp + 0x668]
cmp rdx, 0xf
jbe 0x140040843
inc rdx
mov rcx, qword [rsp + 0x650]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004083e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004083e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043a8c
mov qword [rsp + 0x660], r15
mov qword [rsp + 0x668], 0xf
mov byte [rsp + 0x650], 0
mov rdx, qword [rsp + 0x5e8]
cmp rdx, 0xf
jbe 0x1400408a5
inc rdx
mov rcx, qword [rsp + 0x5d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400408a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400408a0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043a8c
movzx esi, byte [rsp + 0x60]
call fcn.14000fff0
call fcn.140009f20
mov rcx, qword [0x1400559f0]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x1400559f0]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x1400559f0]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0xae
call qword [rax + 0x1c8]
mov rcx, qword [0x1400559f0]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r15d
movss dword [rsp + 0x28], xmm10
mov dword [rsp + 0x20], r15d
mov r9d, 1
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x1400559f0]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x140040973
call fcn.14000a2d0
mov rax, qword [0x140055970]
mov rcx, qword [rax + 0x4b28]
mov rax, qword [rcx]
add rax, 0x48
mov rcx, r15
cmp byte [rax], 0
cmovne rcx, rax
call fcn.14002e400
mov rcx, qword [0x1400559f0]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x1400559f0]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14003e301
mov rcx, qword [0x1400559f0]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x14003e301
call fcn.14003d4a0
jmp 0x14003e301
mov rdi, qword [0x140055970]
test rdi, rdi
je 0x1400409d2
mov r14, qword [rdi + 0x98]
jmp 0x1400409d5
mov r14, r15
lea rsi, [rdi + 8]
test rdi, rdi
je 0x140040a46
mov rbx, qword [rdi + 0x98]
test rbx, rbx
je 0x140040a46
cmp qword [rbx], 0
je 0x140040a46
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140040a0a
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbx + 8], r15
mov rdi, qword [0x140055970]
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140040a24
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbx + 0x10], r15
mov rdi, qword [0x140055970]
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x140040a46
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbx + 0x18], r15
mov rdi, qword [0x140055970]
mov rax, qword [rdi + 0x38]
mov qword [rax + 8], r15
mov rcx, qword [r14]
test rcx, rcx
je 0x140040a5b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rdi, qword [0x140055970]
mov qword [rsi + 0x80], r15
mov qword [rsi + 0x90], r15
and dword [rsi + 4], 0xfffffff7
test rdi, rdi
je 0x140040ad3
mov r8d, dword [rdi + 0x3f68]
movsx rdx, word [rdi + 0x60e0]
lea rcx, [rdx*8 + 0x60e4]
add rcx, rdi
cmp dword [rcx], r8d
je 0x140040ac9
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [rdi + 0x60e0], cx
movsx rax, cx
lea rcx, [rax*8 + 0x60e4]
add rcx, rdi
mov dword [rcx], r8d
mov dword [rcx + 4], 0
inc word [rcx + 6]
inc dword [rdi + 0x60dc]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rdi, qword [0x140055970]
test rdi, rdi
je 0x140040af1
mov rsi, qword [rdi + 0x90]
jmp 0x140040af4
mov rsi, r15
lea rbx, [rdi + 8]
mov rcx, qword [rsi + 0x38]
test rcx, rcx
je 0x140040b0e
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rdi, qword [0x140055970]
mov qword [rbx + 0x78], r15
mov qword [rbx + 0x88], r15
and dword [rbx + 4], 0xfffffff8
test rdi, rdi
je 0x140040b83
mov r8d, dword [rdi + 0x3f68]
movsx rdx, word [rdi + 0x60e0]
lea rcx, [rdx*8 + 0x60e4]
add rcx, rdi
cmp dword [rcx], r8d
je 0x140040b79
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [rdi + 0x60e0], cx
movsx rax, cx
lea rcx, [rax*8 + 0x60e4]
add rcx, rdi
mov dword [rcx], r8d
mov dword [rcx + 4], 0
inc word [rcx + 6]
inc dword [rdi + 0x60dc]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x140055970]
mov qword [0x140055970], rbx
call fcn.140005f10
mov qword [0x140055970], r15
test rbx, rbx
je 0x140040c2a
mov rcx, rbx
call fcn.14001d340
mov rdi, qword [0x140055970]
test rdi, rdi
je 0x140040c21
mov r8d, dword [rdi + 0x3f68]
movsx r9, word [rdi + 0x60e0]
lea rdx, [rdi + 0x60e4]
lea rdx, [rdx + r9*8]
cmp dword [rdx], r8d
je 0x140040c17
lea ecx, [r9 + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [rdi + 0x60e0], cx
movsx rax, cx
lea rdx, [rdi + 0x60e4]
lea rdx, [rdx + rax*8]
mov dword [rdx], r8d
mov dword [rdx + 4], 0
inc word [rdx + 6]
inc dword [rdi + 0x60dc]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x1400559f0]
test rcx, rcx
je 0x140040c43
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1400559f0], r15
mov rcx, qword [0x1400559a8]
test rcx, rcx
je 0x140040c5c
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1400559a8], r15
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rsp + 0x538]
mov rcx, qword [rsp + 0x560]
call qword [sym.imp.USER32.dll_UnregisterClassW]
nop
mov rdx, qword [rsp + 0x628]
cmp rdx, 0xf
jbe 0x140040577
inc rdx
mov rcx, qword [rsp + 0x610]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ff8a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003ff8a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, qword [0x1400559a8]
mov rdx, qword [0x1400559f0]
test rdx, rdx
je 0x140040cf8
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 0x10]
mov qword [0x1400559f0], r13
mov rcx, qword [0x1400559a8]
test rcx, rcx
je 0x140040d0a
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1400559a8], r13
mov rdx, rdi
mov rcx, qword [rsp + 0x560]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
mov rcx, qword [rsp + 0xa60]
xor rcx, rsp
call fcn.1400438f0
lea r11, [rsp + 0xac0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.14003b2d0
nop
lea r8, [rsp + 0x1e8]
mov edx, eax
lea rcx, str.recursive_directory_iterator::recursive_directory_iterator
call fcn.14003c9e0
nop
lea r8, [r14 + 0x20]
lea rcx, str.status
call fcn.14003c9e0
mov edx, eax
call fcn.14003c8f0
nop
call fcn.14003b230
nop
call fcn.14003b2d0
int3
call fcn.14003b230
nop
call fcn.14003b2d0
int3
call fcn.14003b230
nop
call fcn.14003b2d0
int3
call fcn.14003b230
nop
lea rdx, [rsp + 0x800]
call fcn.14003ca50
nop
lea r8, [rsp + 0x2a0]
lea rdx, [rsp + 0x7f0]
call fcn.14003cab0
int3