Function at 0x140003d30
Capabilities:
Create process on windows
Write and execute a file
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1b0]
sub rsp, 0x2b0
mov rax, qword [0x1400ad388]
xor rax, rsp
mov qword [rbp + 0x1a0], rax
mov r15, r8
mov r12, rdx
mov rdi, rcx
xor r13d, r13d
lea rcx, str.PROGRAMDATA
call fcn.14005bd58
mov qword [rbp + 0x160], r13
mov qword [rbp + 0x170], r13
mov qword [rbp + 0x178], 0xf
mov byte [rbp + 0x160], r13b
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140003da0
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.140006540
nop
mov qword [rsp + 0x48], r13
movdqa xmm0, xmmword [0x1400976d0]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], 0
mov r8d, 0x14
lea rdx, str.MicrosoftSettings_
lea rcx, [rsp + 0x48]
call fcn.140006540
nop
lea r8, [rbp + 0x160]
cmp qword [rbp + 0x178], 0x10
cmovae r8, qword [rbp + 0x160]
mov r9, qword [rbp + 0x170]
xor edx, edx
lea rcx, [rsp + 0x48]
call fcn.140007b00
mov qword [rbp + 0x140], r13
mov qword [rbp + 0x150], r13
mov qword [rbp + 0x158], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x140], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x150], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rsp + 0x48]
call fcn.140006220
lea rdx, [rbp + 0x140]
lea rcx, [rsp + 0x68]
call fcn.140006bf0
nop
lea rcx, [rsp + 0x68]
call fcn.140002960
movzx ebx, al
lea rcx, [rsp + 0x68]
call fcn.140002060
test bl, bl
jne 0x140003eab
lea rdx, [rbp + 0x140]
lea rcx, [rsp + 0x68]
call fcn.140006bf0
nop
lea rcx, [rsp + 0x68]
call fcn.140002d30
nop
lea rcx, [rsp + 0x68]
call fcn.140002060
lea rcx, [rbp + 0x60]
call fcn.140006350
nop
mov rdx, qword [r15]
lea rcx, [rbp + 0x40]
call fcn.1400060a0
nop
lea rcx, [rbp + 0x180]
call fcn.1400060e0
nop
lea rdx, [rbp]
lea rcx, [rbp + 0x40]
call fcn.140005f80
mov rbx, qword [rax]
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x40]
call fcn.140005fa0
mov r8, rbx
mov rdx, qword [rax]
lea rcx, [rbp + 0x20]
call fcn.140006a50
nop
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x48]
call fcn.140006370
lea r8, [rbp + 0x60]
mov rdx, rax
call fcn.140005c40
mov r8d, 0x155
mov rdx, rdi
call fcn.140005af0
lea rdx, [0x140094f28]
mov rcx, rdi
call fcn.140006200
mov r8, rdi
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x80]
call fcn.140006830
nop
cmp qword [rbp + 0x70], 9
jne 0x140003f71
lea rdx, [0x140094f30]
lea rcx, [rbp + 0x40]
call fcn.140006050
lea rdx, str..exe
lea rcx, [rbp + 0x60]
call fcn.140006200
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x180]
call fcn.140006070
lea rdx, [0x140094f44]
lea rcx, [rbp + 0x40]
call fcn.140006050
mov r14d, 1
cmp dword [r12], r14d
jle 0x140004194
add r15, 8
lea rsi, [0x140094f4a]
lea rbx, [0x140094f48]
mov rdx, qword [r15]
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], 7
mov word [rbp - 0x20], r13w
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], 0
jne 0x140003fd2
lea rcx, [rbp - 0x20]
call fcn.1400064b0
nop
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rbp - 8]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x140004099
lea r8, [rcx + 1]
mov qword [rbp - 0x10], r8
lea rdi, [rbp - 0x20]
cmp rdx, 8
cmovae rdi, qword [rbp - 0x20]
cmp rsi, rdi
jbe 0x140004037
lea rax, [rdi + rcx*2]
cmp rbx, rax
ja 0x140004037
cmp rdi, rbx
ja 0x14000402c
mov rsi, r13
jmp 0x14000403c
mov rsi, rdi
sub rsi, rbx
sar rsi, 1
jmp 0x14000403c
mov esi, 1
lea rcx, [rdi + 2]
add r8, r8
mov rdx, rdi
call fcn.14004e9f0
lea rbx, [rsi + rsi]
mov r8, rbx
lea rdx, [0x140094f48]
mov rcx, rdi
call fcn.14004e9f0
lea rdx, [0x140094f48]
lea rdx, [rdx + 2]
lea rdx, [rdx + rsi*2]
lea rcx, [rdi + rbx]
mov r8d, 1
sub r8, rsi
add r8, r8
call fcn.14004e9f0
lea rax, [rbp - 0x20]
lea rbx, [0x140094f48]
lea rsi, [0x140094f4a]
jmp 0x1400040b0
mov qword [rsp + 0x28], 1
mov edx, 1
lea rcx, [rbp - 0x20]
call fcn.140007f00
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x58], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
lea rdx, [rsp + 0x48]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 8
cmovae rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x40]
call fcn.140005fc0
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x140004143
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000413d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004da0
call fcn.14004c5ac
nop
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x140004183
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000417e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004da6
call fcn.14004c5ac
inc r14d
add r15, 8
cmp r14d, dword [r12]
jl 0x140003fb3
lea rax, [rbp + 0x20]
cmp qword [rbp + 0x38], 0x10
cmovae rax, qword [rbp + 0x20]
mov qword [rbp + 0x30], r13
mov byte [rax], 0
lea rcx, [rbp + 0x40]
mov rax, qword [rbp + 0x50]
cmp qword [rbp + 0x58], 8
jb 0x1400041c2
mov rsi, qword [rbp + 0x40]
lea rbx, [rsi + rax*2]
jmp 0x1400041ca
lea rbx, [rcx + rax*2]
lea rsi, [rbp + 0x40]
mov qword [rbp], r13
mov rcx, r13
mov qword [rbp + 0x10], rcx
mov r8d, 0xf
mov qword [rbp + 0x18], r8
mov rdx, rbx
sub rdx, rsi
sar rdx, 1
cmp rdx, r8
jbe 0x140004201
lea rcx, [rbp]
call fcn.140007180
mov rcx, r13
mov qword [rbp + 0x10], rcx
mov r8, qword [rbp + 0x18]
lea rax, [rbp]
mov qword [rbp - 0x20], rax
cmp rsi, rbx
je 0x140004261
movzx edi, byte [rsp + 0x40]
movzx r9d, byte [rsi]
cmp rcx, r8
jae 0x14000423c
lea rax, [rcx + 1]
mov qword [rbp + 0x10], rax
lea rax, [rbp]
cmp r8, 0x10
cmovae rax, qword [rbp]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14000424e
movzx r8d, dil
mov edx, 1
lea rcx, [rbp]
call fcn.1400072d0
add rsi, 2
cmp rsi, rbx
je 0x140004261
mov r8, qword [rbp + 0x18]
mov rcx, qword [rbp + 0x10]
jmp 0x140004213
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x14000429c
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004297
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004dac
call fcn.14004c5ac
movups xmm0, xmmword [rbp]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rbp + 0x10]
movups xmmword [rbp + 0x30], xmm1
lea rax, [rbp + 0x80]
cmp qword [rbp + 0x98], 0x10
cmovae rax, qword [rbp + 0x80]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp + 0x90]
mov qword [rbp - 0x18], rax
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x48]
call fcn.140008480
nop
mov r8d, 3
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x38]
call fcn.1400029f0
movsd xmm0, qword [rax]
movsd qword [rbp - 0x20], xmm0
mov ecx, dword [rax + 8]
mov dword [rbp], ecx
lea rax, [0x1400adfd0]
mov qword [rbp + 8], rax
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp], xmm0
mov eax, dword [rbp - 0x20]
test eax, eax
je 0x140004d79
cmp eax, 1
sete bl
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x14000436b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004366
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004db2
call fcn.14004c5ac
test bl, bl
je 0x140004b17
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
mov r8d, 1
lea rdx, [0x140094f4c]
lea rcx, [rbp - 0x20]
call fcn.140006540
nop
mov qword [rbp + 0x100], r13
mov qword [rbp + 0x110], r13
mov qword [rbp + 0x118], 0xf
mov byte [rbp + 0x100], 0
mov r8d, 0x11
lea rdx, [0x140094f50]
lea rcx, [rbp + 0x100]
call fcn.140006540
nop
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xf0], r13
mov qword [rbp + 0xf8], 0xf
mov byte [rbp + 0xe0], 0
mov r8d, 6
lea rdx, str.:BEGIN
lea rcx, [rbp + 0xe0]
call fcn.140006540
nop
movabs rax, 0x7fffffffffffffff
mov rcx, qword [rbp + 0x70]
sub rax, rcx
cmp rax, 0x23
jb 0x140004db8
lea rax, [rbp + 0x60]
cmp qword [rbp + 0x78], 0x10
cmovae rax, qword [rbp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x23
lea r9, str.TASKLIST__NUL_FINDSTR__B__L__I__C:
lea r8, [rbp + 0x60]
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.140007c00
nop
mov r8d, 0x2f
lea rdx, str.__SET_X1_nTASKLIST__NUL_FINDSTR__B__L__I__C:
lea rcx, [rsp + 0x48]
call fcn.1400066a0
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x80], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x78], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x60]
cmp qword [rbp + 0x78], 0x10
cmovae rdx, qword [rbp + 0x60]
mov r8, qword [rbp + 0x70]
lea rcx, [rsp + 0x68]
call fcn.1400066a0
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x48], r13
mov qword [rbp - 0x40], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x48], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 0x18
lea rdx, str.__START__b____cmd__c__
lea rcx, [rbp - 0x58]
call fcn.1400066a0
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x68], r13
mov qword [rbp - 0x60], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x68], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0x10
cmovae rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x30]
lea rcx, [rbp - 0x78]
call fcn.1400066a0
mov qword [rbp + 0xc0], r13
mov qword [rbp + 0xd0], r13
mov qword [rbp + 0xd8], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xd0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x1400045c3
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400045be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004dbe
call fcn.14004c5ac
mov qword [rbp - 0x68], r13
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], 0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x14000460e
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004609
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004dc4
call fcn.14004c5ac
mov qword [rbp - 0x48], r13
mov qword [rbp - 0x40], 0xf
mov byte [rbp - 0x58], 0
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x14000465a
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004655
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004dca
call fcn.14004c5ac
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x80], 0xf
mov byte [rsp + 0x68], 0
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x1400046a9
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400046a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004dd0
call fcn.14004c5ac
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x60], 0xf
mov byte [rsp + 0x48], 0
mov qword [rbp + 0xa0], r13
mov qword [rbp + 0xb0], r13
mov qword [rbp + 0xb8], 0xf
mov byte [rbp + 0xa0], 0
mov r8d, 0x55
lea rdx, str.IF__X__EQU_0__TIMEOUT__T_1__NOBREAK_NUL__ELSE__START__b____cmd__c_DEL___f0_EXIT__b_
lea rcx, [rbp + 0xa0]
call fcn.140006540
nop
mov qword [rbp + 0x120], r13
mov qword [rbp + 0x130], r13
mov qword [rbp + 0x138], 0xf
mov r8d, 0xb
lea rdx, str.GOTO_:BEGIN
lea rcx, [rbp + 0x120]
call fcn.140006540
lea rcx, [rbp + 0x80]
cmp qword [rbp + 0x98], 0x10
cmovae rcx, qword [rbp + 0x80]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x2000004
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov edx, 0x40000000
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbx, rax
lea rdx, [rbp + 0x100]
cmp qword [rbp + 0x118], 0x10
cmovae rdx, qword [rbp + 0x100]
mov qword [rsp + 0x20], r13
lea r9, [rbp]
mov r8d, dword [rbp + 0x110]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rdx, qword [rbp - 0x20]
mov qword [rsp + 0x20], r13
lea r9, [rbp]
mov r8d, 1
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rdx, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 0x10
cmovae rdx, qword [rbp + 0xe0]
mov qword [rsp + 0x20], r13
lea r9, [rbp]
mov r8d, dword [rbp + 0xf0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rdx, qword [rbp - 0x20]
mov qword [rsp + 0x20], r13
lea r9, [rbp]
mov r8d, 1
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rdx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0x10
cmovae rdx, qword [rbp + 0xc0]
mov qword [rsp + 0x20], r13
lea r9, [rbp]
mov r8d, dword [rbp + 0xd0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rdx, qword [rbp - 0x20]
mov qword [rsp + 0x20], r13
lea r9, [rbp]
mov r8d, 1
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rdx, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0x10
cmovae rdx, qword [rbp + 0xa0]
mov qword [rsp + 0x20], r13
lea r9, [rbp]
mov r8d, dword [rbp + 0xb0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rdx, qword [rbp - 0x20]
mov qword [rsp + 0x20], r13
lea r9, [rbp]
mov r8d, 1
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rdx, [rbp + 0x120]
cmp qword [rbp + 0x138], 0x10
cmovae rdx, qword [rbp + 0x120]
mov qword [rsp + 0x20], r13
lea r9, [rbp]
mov r8d, dword [rbp + 0x130]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x80]
cmp qword [rbp + 0x98], 0x10
cmovae rcx, qword [rbp + 0x80]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_WinExec]
mov rdx, qword [rbp + 0x138]
cmp rdx, 0x10
jb 0x14000495a
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004955
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004dd6
call fcn.14004c5ac
mov qword [rbp + 0x130], r13
mov qword [rbp + 0x138], 0xf
mov byte [rbp + 0x120], 0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0x10
jb 0x1400049b4
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400049af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ddc
call fcn.14004c5ac
mov qword [rbp + 0xb0], r13
mov qword [rbp + 0xb8], 0xf
mov byte [rbp + 0xa0], 0
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0x10
jb 0x140004a0e
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004a09
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004de2
call fcn.14004c5ac
mov qword [rbp + 0xd0], r13
mov qword [rbp + 0xd8], 0xf
mov byte [rbp + 0xc0], 0
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0x10
jb 0x140004a68
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004a63
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004de8
call fcn.14004c5ac
mov qword [rbp + 0xf0], r13
mov qword [rbp + 0xf8], 0xf
mov byte [rbp + 0xe0], 0
mov rdx, qword [rbp + 0x118]
cmp rdx, 0x10
jb 0x140004ac2
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004abd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004dee
call fcn.14004c5ac
mov qword [rbp + 0x110], r13
mov qword [rbp + 0x118], 0xf
mov byte [rbp + 0x100], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x140004b17
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004b11
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004df4
call fcn.14004c5ac
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x140004b58
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004b53
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004dfa
call fcn.14004c5ac
mov qword [rbp + 0x90], r13
mov qword [rbp + 0x98], 0xf
mov byte [rbp + 0x80], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x140004bac
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004ba7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004e00
call fcn.14004c5ac
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x198]
cmp rdx, 8
jb 0x140004c02
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004bfd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004e06
call fcn.14004c5ac
mov qword [rbp + 0x190], r13
mov qword [rbp + 0x198], 7
mov word [rbp + 0x180], r13w
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x140004c5c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004c57
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004e0c
call fcn.14004c5ac
mov qword [rbp + 0x50], r13
mov qword [rbp + 0x58], 7
mov word [rbp + 0x40], r13w
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x140004ca8
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004ca3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004e12
call fcn.14004c5ac
mov qword [rbp + 0x70], r13
mov qword [rbp + 0x78], 0xf
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp + 0x158]
cmp rdx, 0x10
jb 0x140004cf9
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004cf4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004e18
call fcn.14004c5ac
mov qword [rbp + 0x150], r13
mov qword [rbp + 0x158], 0xf
mov byte [rbp + 0x140], 0
mov rdx, qword [rbp + 0x178]
cmp rdx, 0x10
jb 0x140004d4f
inc rdx
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004d4a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004d84
call fcn.14004c5ac
mov rcx, qword [rbp + 0x1a0]
xor rcx, rsp
call fcn.14004c550
mov rbx, qword [rsp + 0x2f8]
add rsp, 0x2b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov bl, 1
test ecx, ecx
jne 0x140004d8a
jmp 0x140004329
call fcn.14005bae0
nop
lea r8, [rsp + 0x48]
lea rdx, [rbp]
lea rcx, str.exists
call fcn.140002900
nop
call fcn.14005bae0
nop
call fcn.14005bae0
int3
call fcn.14005bae0
int3
call fcn.14005bae0
nop
call fcn.140001720
nop
call fcn.14005bae0
nop
call fcn.14005bae0
nop
call fcn.14005bae0
nop
call fcn.14005bae0
nop
call fcn.14005bae0
nop
call fcn.14005bae0
nop
call fcn.14005bae0
nop
call fcn.14005bae0
nop
call fcn.14005bae0
nop
call fcn.14005bae0
nop
call fcn.14005bae0
nop
call fcn.14005bae0
nop
call fcn.14005bae0
nop
call fcn.14005bae0
nop
call fcn.14005bae0
nop
call fcn.14005bae0
int3