Function at 0x140002940
Capabilities:
Enumerate processes
Execute command

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x3d0
movaps xmmword [rax - 0x28], xmm6
mov rax, qword [0x14000a008]
xor rax, rsp
mov qword [rsp + 0x3b0], rax
xor esi, esi
mov dword [rsp + 0x68], esi
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1400077d0]
movdqu xmmword [rsp + 0x50], xmm1
mov word [rsp + 0x40], si
mov dword [rsp + 0x68], 1
lea rcx, [rsp + 0x40]
call fcn.1400027f0
test eax, eax
jne 0x140003abd
lea rax, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rax, qword [rsp + 0x40]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0xa8], rax
call fcn.140005284
movaps xmm0, xmmword [rsp + 0xa0]
movdqa xmmword [rsp + 0xa0], xmm0
lea r8, [rsp + 0xa0]
mov edx, eax
lea rcx, [rsp + 0x130]
call fcn.1400050d0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x140002a5c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002a57
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002a57
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005c04
movdqa xmm0, xmmword [0x1400077d0]
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x40], si
xorps xmm0, xmm0
movups xmmword [rsp + 0xd0], xmm0
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0xe8], rsi
mov r8d, 0x18
lea rdx, str.ChroniclesOfMadrigal.exe
lea rcx, [rsp + 0xd0]
call fcn.140004510
nop
mov r13, qword [rsp + 0x140]
movabs r14, 0x7fffffffffffffff
mov rax, r14
sub rax, r13
cmp rax, 1
jb 0x140003ac5
lea r12, [rsp + 0x130]
cmp qword [rsp + 0x148], 0x10
cmovae r12, qword [rsp + 0x130]
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x88], xmm1
lea r15, [r13 + 1]
mov ebx, 0xf
lea rdi, [rsp + 0x78]
cmp r15, rbx
jbe 0x140002b86
mov rbx, r15
or rbx, 0xf
cmp rbx, r14
jbe 0x140002b19
mov rbx, r14
jmp 0x140002b25
mov eax, 0x16
cmp rbx, rax
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x140002b6f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003acb
mov rcx, rax
call fcn.140005bc0
test rax, rax
je 0x140002b68
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140002b81
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140002b7e
call fcn.140005bc0
mov rdi, rax
jmp 0x140002b81
mov rdi, rsi
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x88], r15
mov qword [rsp + 0x90], rbx
mov r8, r13
mov rdx, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r13], 0x5c
mov byte [rdi + r15], 0
lea rdx, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 0x10
cmovae rdx, qword [rsp + 0xd0]
mov r8, qword [rsp + 0xe0]
lea rcx, [rsp + 0x78]
call fcn.140003d40
xorps xmm0, xmm0
movups xmmword [rsp + 0xb0], xmm0
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xc8], rsi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xb0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xc0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x90]
cmp rdx, 0x10
jb 0x140002c5e
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c59
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c59
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005c04
movdqa xmm0, xmmword [0x1400077e0]
movdqu xmmword [rsp + 0x88], xmm0
mov byte [rsp + 0x78], 0
mov r15, qword [rsp + 0xc0]
mov rax, r14
sub rax, r15
cmp rax, 4
jb 0x140003ad1
lea r13, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 0x10
cmovae r13, qword [rsp + 0xb0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea r12, [r15 + 4]
mov ebx, 0xf
lea rdi, [rsp + 0x40]
cmp r12, rbx
jbe 0x140002d46
mov rbx, r12
or rbx, 0xf
cmp rbx, r14
jbe 0x140002cdb
mov rbx, r14
jmp 0x140002ce8
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x140002d2f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003ad7
mov rcx, rax
call fcn.140005bc0
test rax, rax
je 0x140002f0d
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140002d41
test rcx, rcx
je 0x140002d3e
call fcn.140005bc0
mov rdi, rax
jmp 0x140002d41
mov rdi, rsi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], rbx
mov r8, r15
mov rdx, r13
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov dword [rdi + r15], 0x706d742e
mov byte [rdi + r12], 0
mov rdi, qword [rsp + 0x50]
lea rbx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rbx, qword [rsp + 0x40]
call fcn.140005284
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], rdi
lea r8, [rsp + 0xa0]
mov edx, eax
lea rcx, [rsp + 0x20]
call fcn.1400018e0
nop
lea rcx, [rsp + 0x20]
cmp qword [rsp + 0x38], 8
cmovae rcx, qword [rsp + 0x20]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rsp + 0x150]
call fcn.140005520
mov ecx, eax
test eax, eax
jne 0x140002e1b
mov edx, dword [rsp + 0x160]
bt edx, 0xa
jae 0x140002e0d
mov eax, dword [rsp + 0x164]
cmp eax, 0xa000000c
jne 0x140002dfb
lea eax, [rcx + 4]
jmp 0x140002e3e
cmp eax, 0xa0000003
jne 0x140002e0d
mov r12d, 0xa
mov eax, r12d
jmp 0x140002e44
movzx eax, dl
and eax, 0x10
or eax, 0x20
shr eax, 4
jmp 0x140002e3e
mov dword [rsp + 0x6c], 0xffff
sub eax, 2
je 0x140002e39
sub eax, 1
je 0x140002e39
sub eax, 0x32
je 0x140002e39
cmp eax, 0x46
mov eax, esi
jne 0x140002e3e
mov eax, 1
mov r12d, 0xa
mov dword [rsp + 0xa0], ecx
lea rdx, [0x14000a050]
mov qword [rsp + 0xa8], rdx
movaps xmm0, xmmword [rsp + 0xa0]
movdqa xmmword [rsp + 0xa0], xmm0
test eax, eax
je 0x140002eb5
cmp eax, 1
sete bl
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x140002ec6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002ec1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002ec1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov bl, 1
test ecx, ecx
jne 0x140003add
jmp 0x140002e75
call fcn.140005c04
movdqa xmm0, xmmword [0x1400077d0]
movdqu xmmword [rsp + 0x30], xmm0
mov word [rsp + 0x20], si
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140002f19
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002f14
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002f14
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005c04
test bl, bl
je 0x14000305e
mov rdx, qword [rsp + 0xc8]
cmp rdx, 0x10
jb 0x140002f64
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002f5f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400039e6
call fcn.140005c04
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xc8], 0xf
mov byte [rsp + 0xb0], 0
mov rdx, qword [rsp + 0xe8]
cmp rdx, 0x10
jb 0x140002fc3
inc rdx
mov rcx, qword [rsp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002fbe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a48
call fcn.140005c04
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0xe8], 0xf
mov byte [rsp + 0xd0], 0
mov rdx, qword [rsp + 0x148]
cmp rdx, 0x10
jb 0x140003022
inc rdx
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000301d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003ab6
call fcn.140005c04
mov eax, 1
mov rcx, qword [rsp + 0x3b0]
xor rcx, rsp
call fcn.140005ba0
lea r11, [rsp + 0x3d0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
ret
lea rdx, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 0x10
cmovae rdx, qword [rsp + 0xd0]
mov r15, qword [rsp + 0xe0]
add r15, rdx
lea rdi, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 0x10
cmovae rdi, qword [rsp + 0xd0]
xorps xmm0, xmm0
movups xmmword [rsp + 0xf0], xmm0
cmp rdi, r15
jne 0x1400030ce
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], si
jmp 0x14000320f
mov rax, r15
sub rax, rdi
mov rdx, rsi
mov qword [rsp + 0x100], rdx
mov ebx, 7
mov qword [rsp + 0x108], rbx
movabs rcx, 0x7ffffffffffffffe
cmp rax, rcx
ja 0x140003af0
cmp rax, 8
jb 0x1400031b0
mov rbx, rax
or rbx, 7
cmp rbx, rcx
jbe 0x14000311a
mov rbx, rcx
jmp 0x140003122
cmp rbx, 0xa
cmovb rbx, r12
mov rax, rbx
add rax, 1
mov rcx, 0xffffffffffffffff
cmovb rax, rcx
cmp rax, r14
ja 0x140003af6
lea rcx, [rax + rax]
cmp rcx, 0x1000
jb 0x140003181
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003af6
mov rcx, rax
call fcn.140005bc0
mov rcx, rax
test rax, rax
je 0x140003984
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov rdx, qword [rsp + 0x100]
jmp 0x140003198
test rcx, rcx
je 0x140003195
call fcn.140005bc0
mov rdx, qword [rsp + 0x100]
jmp 0x140003198
mov rax, rsi
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0x108], rbx
nop dword [rax + rax]
lea rcx, [rsp + 0xf0]
cmp rbx, 8
cmovae rcx, qword [rsp + 0xf0]
movsx eax, byte [rdi]
mov word [rcx + rdx*2], ax
mov rdx, qword [rsp + 0x100]
inc rdx
mov qword [rsp + 0x100], rdx
inc rdi
cmp rdi, r15
je 0x1400031f1
mov rbx, qword [rsp + 0x108]
jmp 0x1400031b0
lea rax, [rsp + 0xf0]
cmp qword [rsp + 0x108], 8
cmovae rax, qword [rsp + 0xf0]
mov word [rax + rdx*2], si
movabs r13, 0x7ffffffff4143dfe
movabs r15, 0x311cdad160000
movabs r12, 0x112e0be826d694b3
movsd xmm6, qword [0x1400077c0]
lea rdi, [rsp + 0xf0]
cmp qword [rsp + 0x108], 8
cmovae rdi, qword [rsp + 0xf0]
mov dword [rsp + 0x170], 0x238
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
lea rdx, [rsp + 0x170]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x1400033b2
mov rdx, rdi
lea rcx, [rsp + 0x19c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov rcx, rbx
test eax, eax
je 0x1400032a9
lea rdx, [rsp + 0x170]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
jmp 0x140003279
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x1400032cd
imul rax, rax, 0x64
jmp 0x1400032eb
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rcx, rcx, 0x3b9aca00
add rax, rcx
cmp rax, r13
lea rdi, [rax + 0xbebc200]
jle 0x140003300
mov rdi, r14
nop word [rax + rax]
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14000331e
imul rbx, rax, 0x64
jmp 0x14000333f
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
mov rbx, rax
imul rax, rcx, 0x3b9aca00
add rbx, rax
cmp rdi, rbx
je 0x140003235
jl 0x140003235
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
imul rcx, rax, 0x64
mov rax, rdi
sub rax, rbx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
comisd xmm0, xmm6
jbe 0x140003371
add rcx, r15
jmp 0x140003374
add rcx, rax
mov rax, r12
imul rcx
sar rdx, 0x1a
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rsp + 0xa0], rdx
imul eax, edx, 0x3b9aca00
sub ecx, eax
mov dword [rsp + 0xa8], ecx
lea rcx, [rsp + 0xa0]
call qword [sym.imp.MSVCP140.dll__Thrd_sleep]
jmp 0x140003300
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdi, qword [rsp + 0xc0]
lea rbx, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 0x10
cmovae rbx, qword [rsp + 0xb0]
call fcn.140005284
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], rdi
lea r8, [rsp + 0xa0]
mov edx, eax
lea rcx, [rsp + 0x20]
call fcn.1400018e0
nop
lea rcx, [rsp + 0x20]
cmp qword [rsp + 0x38], 8
cmovae rcx, qword [rsp + 0x20]
call fcn.1400058a0
mov rbx, rax
shr rax, 0x20
test eax, eax
jne 0x140003afc
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x140003472
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000346d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000346d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005c04
test bl, bl
je 0x140003723
mov rdi, qword [rsp + 0xc0]
lea rbx, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 0x10
cmovae rbx, qword [rsp + 0xb0]
call fcn.140005284
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], rdi
lea r8, [rsp + 0xa0]
mov edx, eax
lea rcx, [rsp + 0x78]
call fcn.1400018e0
nop
mov r15, qword [rsp + 0xc0]
mov rax, r14
sub rax, r15
cmp rax, 4
jb 0x140003b09
lea r13, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 0x10
cmovae r13, qword [rsp + 0xb0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea r12, [r15 + 4]
mov ebx, 0xf
lea rdi, [rsp + 0x40]
cmp r12, rbx
jbe 0x140003598
mov rbx, r12
or rbx, 0xf
cmp rbx, r14
jbe 0x14000352d
mov rbx, r14
jmp 0x14000353a
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x140003581
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003b0e
mov rcx, rax
call fcn.140005bc0
test rax, rax
je 0x1400036bb
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140003593
test rcx, rcx
je 0x140003590
call fcn.140005bc0
mov rdi, rax
jmp 0x140003593
mov rdi, rsi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], rbx
mov r8, r15
mov rdx, r13
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov dword [rdi + r15], 0x706d742e
mov byte [rdi + r12], 0
mov rdi, qword [rsp + 0x50]
lea rbx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rbx, qword [rsp + 0x40]
call fcn.140005284
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], rdi
lea r8, [rsp + 0xa0]
mov edx, eax
lea rcx, [rsp + 0x20]
call fcn.1400018e0
nop
lea rdx, [rsp + 0x78]
cmp qword [rsp + 0x90], 8
cmovae rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0x20]
cmp qword [rsp + 0x38], 8
cmovae rcx, qword [rsp + 0x20]
call fcn.140005ac4
test eax, eax
jne 0x140003b14
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x140003674
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000366f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000366f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005c04
movdqa xmm0, xmmword [0x1400077d0]
movdqu xmmword [rsp + 0x30], xmm0
mov word [rsp + 0x20], si
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1400036c7
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400036c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400036c2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005c04
movdqa xmm0, xmmword [0x1400077e0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
mov rdx, qword [rsp + 0x90]
cmp rdx, 8
jb 0x140003723
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000371d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000371d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005c04
nop
jmp 0x140003731
mov rdx, 0xffffffffffffffff
lea ecx, [rdx + 0x17]
mov r13, qword [rsp + 0xe0]
mov rax, r14
sub rax, r13
cmp rax, 6
jb 0x140003b26
lea r12, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 0x10
cmovae r12, qword [rsp + 0xd0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
lea r15, [r13 + 6]
mov edi, 0xf
lea rbx, [rsp + 0x20]
cmp r15, rdi
jbe 0x140003801
mov rdi, r15
or rdi, 0xf
cmp rdi, r14
jbe 0x1400037a2
mov rdi, r14
jmp 0x1400037aa
cmp rdi, 0x16
cmovb rdi, rcx
mov rcx, rdi
add rcx, 1
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x1400037ea
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003b2c
mov rcx, rax
call fcn.140005bc0
test rax, rax
je 0x1400038ba
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1400037fc
test rcx, rcx
je 0x1400037f9
call fcn.140005bc0
mov rbx, rax
jmp 0x1400037fc
mov rbx, rsi
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], rdi
mov eax, dword [str.start]
mov dword [rbx], eax
movzx eax, word [0x1400076dc]
mov word [rbx + 4], ax
lea rcx, [rbx + 6]
mov r8, r13
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + r15], 0
mov r8d, 6
lea rdx, str.___nul
lea rcx, [rsp + 0x20]
call fcn.140003d40
xorps xmm0, xmm0
movups xmmword [rsp + 0x110], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x120], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x110], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x120], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x1400038c6
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400038c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400038c1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005c04
lea rcx, [rsp + 0x110]
cmp qword [rsp + 0x128], 0x10
cmovae rcx, qword [rsp + 0x110]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rsp + 0x128]
cmp rdx, 0x10
jb 0x14000392c
inc rdx
mov rcx, qword [rsp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003927
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003927
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005c04
movdqa xmm0, xmmword [0x1400077e0]
movdqu xmmword [rsp + 0x120], xmm0
mov byte [rsp + 0x110], 0
mov rdx, qword [rsp + 0x108]
cmp rdx, 8
jb 0x140003990
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000398b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000398b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005c04
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], si
mov rdx, qword [rsp + 0xc8]
cmp rdx, 0x10
jb 0x1400039f2
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400039ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400039ed
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005c04
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xc8], 0xf
mov byte [rsp + 0xb0], 0
mov rdx, qword [rsp + 0xe8]
cmp rdx, 0x10
jb 0x140003a54
inc rdx
mov rcx, qword [rsp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003a4f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003a4f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005c04
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0xe8], 0xf
mov byte [rsp + 0xd0], 0
mov rdx, qword [rsp + 0x148]
cmp rdx, 0x10
jb 0x140003022
inc rdx
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000301d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000301d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov edx, eax
call fcn.1400025b0
nop
call fcn.1400011a0
int3
call fcn.140001100
nop
call fcn.1400011a0
int3
call fcn.140001100
nop
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0xa0]
call fcn.140002790
nop
call fcn.1400011a0
int3
call fcn.140001100
nop
lea r8, [rsp + 0x20]
mov edx, eax
call fcn.1400026a0
nop
call fcn.1400011a0
call fcn.140001100
nop
lea r9, [rsp + 0x78]
lea r8, [rsp + 0x20]
mov edx, eax
call fcn.140002710
nop
call fcn.1400011a0
int3
call fcn.140001100
int3