Function at 0x1400b6b20
Capabilities:
Enumerate gui resources
Enumerate process modules
Enumerate processes
Set console window title
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f8]
sub rsp, 0x6d0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x14016c040]
xor rax, rsp
mov qword [rbp + 0x5a0], rax
xor r13d, r13d
mov dword [rbp + 0x270], r13d
mov dword [rbp + 0x270], r13d
mov dword [rbp + 0x250], r13d
call qword [sym.imp.KERNEL32.dll_AllocConsole]
test eax, eax
je 0x1400b6be4
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rax
lea rdx, [0x140152894]
lea rcx, str.CONIN_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rax
lea rdx, [0x1401528c0]
lea rcx, str.CONOUT_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rax
lea rdx, [0x1401528c0]
lea rcx, str.CONOUT_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
call fcn.1400c2cc0
test eax, eax
je 0x1400b915e
lea rdx, [rbp + 0x230]
lea rcx, [0x140170f90]
call fcn.1400038a0
lea rcx, [rbp + 0x230]
cmp qword [rbp + 0x248], 0xf
cmova rcx, qword [rbp + 0x230]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, [rbp + 0x230]
call fcn.140007360
call fcn.1400c2cc0
test eax, eax
je 0x1400b915e
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
mov edx, 2
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
call fcn.1400c2cc0
test eax, eax
jne 0x1400b6c71
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, [rbp + 0x230]
lea rcx, [0x140171528]
call fcn.1400038a0
mov edi, 0x80000001
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x60]
lea rcx, [0x140171278]
call fcn.140003690
nop
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rdx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x70]
mov rcx, rbx
call fcn.14000e0c0
nop
lea rcx, [rsp + 0x60]
call fcn.140007360
mov r15d, 0xf
cmp qword [0x140174f28], 0
jne 0x1400b794d
lea rsi, [0x140171609]
lea r14, [0x140170f69]
lea r12, [0x140171027]
lea rdx, [rbp + 0x230]
lea rcx, [rsp + 0x60]
call fcn.1400071c0
mov rcx, rax
call fcn.1400c2ac0
movsxd rcx, eax
mov qword [0x140174f28], rcx
test eax, eax
jne 0x1400b6ddd
lea rdx, [rsp + 0x60]
lea rcx, [0x140171148]
call fcn.1400038a0
or edi, 0x20
lea rcx, [rsp + 0x60]
call fcn.1400c2ac0
movsxd rcx, eax
mov qword [0x140174f28], rcx
test eax, eax
je 0x1400b6ddd
lea rdx, [rsp + 0x60]
lea rcx, str.__.ZA_n
call fcn.1400038a0
bts edi, 0x11
mov rdx, qword [rbp + 0x248]
cmp rdx, 0xf
jbe 0x1400b6da5
inc rdx
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b6da0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b7b00
call fcn.1400c4b4c
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x230], xmm0
movups xmm1, xmmword [rsp + 0x70]
movups xmmword [rbp + 0x240], xmm1
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r15
mov byte [rsp + 0x60], 0
lea rcx, [rsp + 0x60]
call fcn.140007360
mov rcx, qword [0x140174f28]
test rcx, rcx
jne 0x1400b794d
lea rax, [rsp + 0x60]
mov qword [rbp + 0x250], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov rcx, r13
mov qword [rsp + 0x70], rcx
mov rdx, r15
mov qword [rsp + 0x78], rdx
mov byte [rsp + 0x60], cl
bts edi, 8
mov dword [rbp + 0x270], edi
lea rbx, [0x1401715e8]
nop
movzx r9d, byte [rbx]
xor r9b, 0x44
cmp rcx, rdx
jae 0x1400b6e50
lea rax, [rcx + 1]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x60]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400b6e5a
lea rcx, [rsp + 0x60]
call fcn.1400077b0
inc rbx
cmp rbx, rsi
je 0x1400b6e6e
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
jmp 0x1400b6e20
btr edi, 8
bts edi, 7
lea rcx, [rsp + 0x60]
call fcn.1400c2ac0
movsxd rcx, eax
mov qword [0x140174f28], rcx
test eax, eax
je 0x1400b6f96
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov rcx, r13
mov qword [rsp + 0x70], rcx
mov rdx, r15
mov qword [rsp + 0x78], rdx
mov byte [rsp + 0x60], cl
bts edi, 0x13
mov dword [rbp + 0x270], edi
lea rbx, [0x140170f48]
nop
movzx r9d, byte [rbx]
xor r9b, 0x44
cmp rcx, rdx
jae 0x1400b6ef0
lea rax, [rcx + 1]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x60]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400b6efa
lea rcx, [rsp + 0x60]
call fcn.1400077b0
inc rbx
cmp rbx, r14
je 0x1400b6f0e
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
jmp 0x1400b6ec0
btr edi, 0x13
bts edi, 0x12
mov rdx, qword [rbp + 0x248]
cmp rdx, 0xf
jbe 0x1400b6f57
inc rdx
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b6f52
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b7b07
call fcn.1400c4b4c
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x230], xmm0
movups xmm1, xmmword [rsp + 0x70]
movups xmmword [rbp + 0x240], xmm1
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r15
mov byte [rsp + 0x60], 0
lea rcx, [rsp + 0x60]
call fcn.140007360
mov byte [0x140174e96], 1
mov rcx, qword [0x140174f28]
test rcx, rcx
jne 0x1400b794d
lea rdx, [rsp + 0x60]
lea rcx, [0x1401714a8]
call fcn.140025050
bts edi, 0xe
lea rcx, [rsp + 0x60]
call fcn.1400c2ac0
movsxd rcx, eax
mov qword [0x140174f28], rcx
test eax, eax
je 0x1400b7065
lea rdx, [rsp + 0x60]
lea rcx, [0x140170e78]
call fcn.140025050
bts edi, 0x14
mov rdx, qword [rbp + 0x248]
cmp rdx, 0xf
jbe 0x1400b7026
inc rdx
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b7021
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b7b0e
call fcn.1400c4b4c
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x230], xmm0
movups xmm1, xmmword [rsp + 0x70]
movups xmmword [rbp + 0x240], xmm1
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r15
mov byte [rsp + 0x60], 0
lea rcx, [rsp + 0x60]
call fcn.140007360
mov byte [0x140174e96], 1
mov rcx, qword [0x140174f28]
test rcx, rcx
jne 0x1400b794d
lea rdx, [rsp + 0x60]
lea rcx, [0x140171418]
call fcn.140025050
or edi, 4
lea rcx, [rsp + 0x60]
call fcn.1400c2ac0
movsxd rcx, eax
mov qword [0x140174f28], rcx
test eax, eax
je 0x1400b7133
lea rdx, [rsp + 0x60]
lea rcx, [0x140170f70]
call fcn.140025050
bts edi, 0x15
mov rdx, qword [rbp + 0x248]
cmp rdx, 0xf
jbe 0x1400b70f4
inc rdx
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b70ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b7b15
call fcn.1400c4b4c
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x230], xmm0
movups xmm1, xmmword [rsp + 0x70]
movups xmmword [rbp + 0x240], xmm1
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r15
mov byte [rsp + 0x60], 0
lea rcx, [rsp + 0x60]
call fcn.140007360
mov byte [0x140174e96], 1
mov rcx, qword [0x140174f28]
test rcx, rcx
jne 0x1400b794d
lea rdx, [rsp + 0x60]
lea rcx, [0x140170ee8]
call fcn.140025050
or edi, 0x40
lea rcx, [rsp + 0x60]
call fcn.1400c2ac0
movsxd rcx, eax
mov qword [0x140174f28], rcx
test eax, eax
je 0x1400b7201
lea rdx, [rsp + 0x60]
lea rcx, [0x140171398]
call fcn.140025050
bts edi, 0x16
mov rdx, qword [rbp + 0x248]
cmp rdx, 0xf
jbe 0x1400b71c2
inc rdx
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b71bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b7b1c
call fcn.1400c4b4c
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x230], xmm0
movups xmm1, xmmword [rsp + 0x70]
movups xmmword [rbp + 0x240], xmm1
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r15
mov byte [rsp + 0x60], 0
lea rcx, [rsp + 0x60]
call fcn.140007360
mov byte [0x140174e96], 1
mov rcx, qword [0x140174f28]
test rcx, rcx
jne 0x1400b794d
lea rdx, [rsp + 0x60]
lea rcx, [0x140171068]
call fcn.140025050
bts edi, 0xd
lea rcx, [rsp + 0x60]
call fcn.1400c2ac0
movsxd rcx, eax
mov qword [0x140174f28], rcx
test eax, eax
je 0x1400b72d0
lea rdx, [rsp + 0x60]
lea rcx, [0x140171458]
call fcn.140025050
bts edi, 0x17
mov rdx, qword [rbp + 0x248]
cmp rdx, 0xf
jbe 0x1400b7291
inc rdx
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b728c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b7b23
call fcn.1400c4b4c
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x230], xmm0
movups xmm1, xmmword [rsp + 0x70]
movups xmmword [rbp + 0x240], xmm1
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r15
mov byte [rsp + 0x60], 0
lea rcx, [rsp + 0x60]
call fcn.140007360
mov byte [0x140174e96], 1
mov rcx, qword [0x140174f28]
test rcx, rcx
jne 0x1400b794d
lea rdx, [rsp + 0x60]
lea rcx, [0x1401713b8]
call fcn.140025050
or edi, 2
lea rcx, [rsp + 0x60]
call fcn.1400c2ac0
movsxd rcx, eax
mov qword [0x140174f28], rcx
test eax, eax
je 0x1400b739e
lea rdx, [rsp + 0x60]
lea rcx, [0x140170f08]
call fcn.140025050
bts edi, 0x18
mov rdx, qword [rbp + 0x248]
cmp rdx, 0xf
jbe 0x1400b735f
inc rdx
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b735a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b7b2a
call fcn.1400c4b4c
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x230], xmm0
movups xmm1, xmmword [rsp + 0x70]
movups xmmword [rbp + 0x240], xmm1
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r15
mov byte [rsp + 0x60], 0
lea rcx, [rsp + 0x60]
call fcn.140007360
mov byte [0x140174e96], 1
mov rcx, qword [0x140174f28]
test rcx, rcx
jne 0x1400b794d
lea rdx, [rsp + 0x60]
lea rcx, [0x1401714c8]
call fcn.140025050
bts edi, 0xf
lea rcx, [rsp + 0x60]
call fcn.1400c2ac0
movsxd rcx, eax
mov qword [0x140174f28], rcx
test eax, eax
je 0x1400b7466
lea rdx, [rsp + 0x60]
lea rcx, [0x140171318]
call fcn.140025050
bts edi, 0x19
mov rdx, qword [rbp + 0x248]
cmp rdx, 0xf
jbe 0x1400b742e
inc rdx
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b7429
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b7b31
call fcn.1400c4b4c
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x230], xmm0
movups xmm1, xmmword [rsp + 0x70]
movups xmmword [rbp + 0x240], xmm1
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r15
mov byte [rsp + 0x60], 0
lea rcx, [rsp + 0x60]
call fcn.140007360
mov rcx, qword [0x140174f28]
test rcx, rcx
jne 0x1400b794d
lea rax, [rsp + 0x60]
mov qword [rbp + 0x250], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov rcx, r13
mov qword [rsp + 0x70], rcx
mov rdx, r15
mov qword [rsp + 0x78], rdx
mov byte [rsp + 0x60], cl
bts edi, 0xc
mov dword [rbp + 0x270], edi
lea rbx, [0x140171008]
nop dword [rax + rax]
movzx r9d, byte [rbx]
xor r9b, 0x46
cmp rcx, rdx
jae 0x1400b74e0
lea rax, [rcx + 1]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x60]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400b74ea
lea rcx, [rsp + 0x60]
call fcn.1400077b0
inc rbx
cmp rbx, r12
je 0x1400b74fe
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
jmp 0x1400b74b0
btr edi, 0xc
bts edi, 0xb
lea rcx, [rsp + 0x60]
call fcn.1400c2ac0
movsxd rcx, eax
mov qword [0x140174f28], rcx
test eax, eax
je 0x1400b7626
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov rcx, r13
mov qword [rsp + 0x70], rcx
mov rdx, r15
mov qword [rsp + 0x78], rdx
mov byte [rsp + 0x60], cl
bts edi, 0x1b
mov dword [rbp + 0x270], edi
lea rbx, [0x140171338]
nop
movzx r9d, byte [rbx]
xor r9b, 0x46
cmp rcx, rdx
jae 0x1400b7580
lea rax, [rcx + 1]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x60]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400b758a
lea rcx, [rsp + 0x60]
call fcn.1400077b0
inc rbx
lea rax, [0x140171357]
cmp rbx, rax
je 0x1400b75a5
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
jmp 0x1400b7550
btr edi, 0x1b
bts edi, 0x1a
mov rdx, qword [rbp + 0x248]
cmp rdx, 0xf
jbe 0x1400b75ee
inc rdx
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b75e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b7b38
call fcn.1400c4b4c
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x230], xmm0
movups xmm1, xmmword [rsp + 0x70]
movups xmmword [rbp + 0x240], xmm1
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r15
mov byte [rsp + 0x60], 0
lea rcx, [rsp + 0x60]
call fcn.140007360
mov rcx, qword [0x140174f28]
test rcx, rcx
jne 0x1400b794d
lea rdx, [rsp + 0x60]
lea rcx, [0x140171108]
call fcn.140025050
bts edi, 0xa
lea rcx, [rsp + 0x60]
call fcn.1400c2ac0
movsxd rcx, eax
mov qword [0x140174f28], rcx
test eax, eax
je 0x1400b76ee
lea rdx, [rsp + 0x60]
lea rcx, [0x140171478]
call fcn.140025050
bts edi, 0x1c
mov rdx, qword [rbp + 0x248]
cmp rdx, 0xf
jbe 0x1400b76b6
inc rdx
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b76b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b7b3f
call fcn.1400c4b4c
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x230], xmm0
movups xmm1, xmmword [rsp + 0x70]
movups xmmword [rbp + 0x240], xmm1
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r15
mov byte [rsp + 0x60], 0
lea rcx, [rsp + 0x60]
call fcn.140007360
mov rcx, qword [0x140174f28]
test rcx, rcx
jne 0x1400b794d
lea rdx, [rsp + 0x60]
lea rcx, [0x1401710c8]
call fcn.140025050
bts edi, 9
lea rcx, [rsp + 0x60]
call fcn.1400c2ac0
movsxd rcx, eax
mov qword [0x140174f28], rcx
test eax, eax
je 0x1400b77b6
lea rdx, [rsp + 0x60]
lea rcx, [0x140171598]
call fcn.140025050
bts edi, 0x1d
mov rdx, qword [rbp + 0x248]
cmp rdx, 0xf
jbe 0x1400b777e
inc rdx
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b7779
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b7b46
call fcn.1400c4b4c
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x230], xmm0
movups xmm1, xmmword [rsp + 0x70]
movups xmmword [rbp + 0x240], xmm1
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r15
mov byte [rsp + 0x60], 0
lea rcx, [rsp + 0x60]
call fcn.140007360
mov rcx, qword [0x140174f28]
test rcx, rcx
jne 0x1400b794d
lea rdx, [rsp + 0x60]
lea rcx, [0x1401711b8]
call fcn.140025050
or edi, 0x10
lea rcx, [rsp + 0x60]
call fcn.1400c2ac0
movsxd rcx, eax
mov qword [0x140174f28], rcx
test eax, eax
je 0x1400b787d
lea rdx, [rsp + 0x60]
lea rcx, [0x140171128]
call fcn.140025050
bts edi, 0x1e
mov rdx, qword [rbp + 0x248]
cmp rdx, 0xf
jbe 0x1400b7845
inc rdx
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b7840
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b7b4d
call fcn.1400c4b4c
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x230], xmm0
movups xmm1, xmmword [rsp + 0x70]
movups xmmword [rbp + 0x240], xmm1
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r15
mov byte [rsp + 0x60], 0
lea rcx, [rsp + 0x60]
call fcn.140007360
mov rcx, qword [0x140174f28]
test rcx, rcx
jne 0x1400b794d
lea rdx, [rsp + 0x60]
lea rcx, [0x140171288]
call fcn.140003ab0
or edi, 8
lea rcx, [rsp + 0x60]
call fcn.1400c2ac0
movsxd rcx, eax
mov qword [0x140174f28], rcx
test eax, eax
je 0x1400b7944
lea rdx, [rsp + 0x60]
lea rcx, [0x140171408]
call fcn.140003ab0
bts edi, 0x10
mov rdx, qword [rbp + 0x248]
cmp rdx, 0xf
jbe 0x1400b790c
inc rdx
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b7907
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b7b54
call fcn.1400c4b4c
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x230], xmm0
movups xmm1, xmmword [rsp + 0x70]
movups xmmword [rbp + 0x240], xmm1
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r15
mov byte [rsp + 0x60], 0
lea rcx, [rsp + 0x60]
call fcn.140007360
mov rcx, qword [0x140174f28]
test rcx, rcx
je 0x1400b6cf4
lea rdx, [rbp + 0x230]
lea rcx, [rsp + 0x60]
call fcn.1400071c0
mov rcx, rax
call fcn.140015300
mov rdx, qword [0x140174f28]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x78], r15
mov byte [rsp + 0x60], 0
mov dword [rbp + 0x270], 0x11
movzx ecx, byte [0x140170f04]
xor cl, 0x64
mov qword [rsp + 0x70], 1
lea rdx, [rsp + 0x60]
mov byte [rdx], cl
mov byte [rdx + 1], 0
mov edi, 9
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rdx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x70]
mov rcx, rax
call fcn.14000e0c0
nop
lea rcx, [rsp + 0x60]
call fcn.140007360
mov eax, dword [0x140174f28]
mov dword [rbp + 0x250], eax
mov qword [rbp + 0x258], r13
lea rdx, [rbp + 0x250]
lea rcx, [0x1400c2c40]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rax, qword [rbp + 0x258]
mov qword [0x140174f10], rax
mov r8d, dword [0x140174f28]
xor edx, edx
mov ecx, 0x38
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x140174f88], rax
mov r14d, 4
mov rax, qword gs:[0x58]
add r14, qword [rax]
mov eax, dword [r14]
cmp dword [0x140174b48], eax
jle 0x1400b7a82
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x1400b7a82
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
lea rsi, [rbp + 0x230]
cmp qword [rbp + 0x248], 0xf
cmova rsi, qword [rbp + 0x230]
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], r13
mov edx, dword [0x140174f28]
mov ecx, 0x18
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x1400b7b5b
mov r8, rsi
lea rdx, str.Failed_to_get__s__invalid_handle_value
lea rcx, [rbp + 0x3f0]
call fcn.1400b64e0
xor r9d, r9d
lea r8, str.ERROR
lea rdx, [rbp + 0x3f0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
movsd xmm6, qword [rbp - 0x70]
movups xmm7, xmmword [rbp - 0x80]
jmp 0x1400b7bc0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov dword [rbp - 0x10], 0x238
lea rdx, [rbp - 0x10]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32First]
test eax, eax
je 0x1400b7bae
mov rdx, rsi
lea rcx, [rbp + 0x20]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
test eax, eax
je 0x1400b7b97
lea rdx, [rbp - 0x10]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
jne 0x1400b7b73
jmp 0x1400b7bae
mov rax, qword [rbp + 8]
mov qword [rbp - 0x80], rax
mov rax, qword [rbp + 0x18]
mov qword [rbp - 0x78], rax
mov eax, dword [rbp + 0x10]
mov qword [rbp - 0x70], rax
movups xmm7, xmmword [rbp - 0x80]
movsd xmm6, qword [rbp - 0x70]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movups xmmword [0x140174f38], xmm7
movsd qword [0x140174f48], xmm6
lea rcx, [rbp + 0x520]
call qword [sym.imp.ADVAPI32.dll_GetCurrentHwProfileA]
test eax, eax
je 0x1400b7c1d
lea rdx, [rsp + 0x60]
lea rcx, str.____VLI
call fcn.140003950
mov edi, 0x10009
lea rcx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rcx, qword [rsp + 0x60]
lea rdx, [rbp + 0x524]
call fcn.140002f80
lea rcx, [rsp + 0x60]
call fcn.140007360
call fcn.1400c2cc0
test eax, eax
jne 0x1400b7c2f
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xorps xmm0, xmm0
movups xmmword [rbp + 0x280], xmm0
movups xmmword [rbp + 0x290], xmm0
movups xmmword [rbp + 0x2a0], xmm0
movups xmmword [rbp + 0x2b0], xmm0
lea rbx, [rbp + 0x230]
cmp qword [rbp + 0x248], 0xf
cmova rbx, qword [rbp + 0x230]
movups xmmword [rbp + 0x298], xmm0
mov qword [rbp + 0x2a8], r13
mov qword [rbp + 0x2b0], r15
mov byte [rbp + 0x298], 0
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x1400b7cf1
mov dword [rbp + 0x3f0], 0x130
lea rdx, [rbp + 0x3f0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
jne 0x1400b7cc0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, rbx
lea rcx, [rbp + 0x41c]
call qword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x1400b7ce8
lea rdx, [rbp + 0x3f0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x1400b7cc0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [rbp + 0x3f8]
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x1400b7d5b
mov dword [rbp - 0x10], 0x238
lea rdx, [rbp - 0x10]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32First]
test eax, eax
jne 0x1400b7d30
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax]
mov rdx, rbx
lea rcx, [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x1400b7d52
lea rdx, [rbp - 0x10]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
jne 0x1400b7d30
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, [rbp + 0x120]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400b7d70
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x298]
call fcn.1400073c0
mov rax, qword [rbp + 8]
mov qword [rbp + 0x290], rax
mov r8d, dword [rbp - 8]
mov dword [rbp + 0x288], r8d
mov eax, dword [rbp + 0x10]
mov qword [rbp + 0x2b8], rax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp + 0x280], rax
mov rsi, qword [0x140174f88]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov rcx, r13
mov qword [rsp + 0x70], rcx
mov rdx, r15
mov qword [rsp + 0x78], rdx
mov byte [rsp + 0x60], cl
or edi, 0x40
mov dword [rbp + 0x270], edi
lea rbx, str.rjr_bjz
lea r12, [0x140171403]
nop dword [rax + rax]
movzx r9d, byte [rbx]
xor r9b, 0x4a
cmp rcx, rdx
jae 0x1400b7e30
lea rax, [rcx + 1]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x60]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400b7e3a
lea rcx, [rsp + 0x60]
call fcn.1400077b0
inc rbx
cmp rbx, r12
je 0x1400b7e4e
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
jmp 0x1400b7e00
and edi, 0xffffffbf
or edi, 0x20
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rdx, qword [rsp + 0x60]
mov r8, rsi
lea rcx, [rbp + 0x280]
call fcn.1400b60f0
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.140007360
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
lea rdx, [rbx + 3]
lea r8, [rbp - 0x80]
lea rcx, [rbp + 0x280]
call fcn.1400b9580
movsxd rcx, eax
lea rax, [rbx + 7]
add rax, rcx
mov qword [0x140174ee8], rax
mov eax, dword [r14]
cmp dword [0x140174b48], eax
jle 0x1400b7eef
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x1400b7eef
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp + 0x250]
mov rdx, qword [0x140174ee8]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x250]
mov qword [0x140174ee8], rax
mov rbx, qword [0x140174f88]
lea rdx, [rsp + 0x60]
lea rcx, str.H_D8LICCCCL:_K_M
call fcn.14003c0c0
bts edi, 8
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rdx, qword [rsp + 0x60]
mov r8, rbx
lea rcx, [rbp + 0x280]
call fcn.1400b60f0
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.140007360
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
lea rdx, [rbx + 3]
lea r8, [rbp - 0x80]
lea rcx, [rbp + 0x280]
call fcn.1400b9580
movsxd rcx, eax
lea rax, [rbx + 7]
add rax, rcx
mov qword [0x140174f00], rax
mov rbx, qword [0x140174f88]
lea rdx, [rbp + 0x250]
lea rcx, [0x140171370]
call fcn.14003bf60
bts edi, 0xb
lea rdx, [rbp + 0x250]
cmp qword [rbp + 0x268], 0xf
cmova rdx, qword [rbp + 0x250]
mov r8, rbx
lea rcx, [rbp + 0x280]
call fcn.1400b60f0
mov qword [0x140174f60], rax
lea rcx, [rbp + 0x250]
call fcn.140007360
mov rsi, qword [0x140174f88]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov rcx, r13
mov qword [rsp + 0x70], rcx
mov rdx, r15
mov qword [rsp + 0x78], rdx
mov byte [rsp + 0x60], cl
bts edi, 0xd
mov dword [rbp + 0x270], edi
lea rbx, [0x140171028]
lea r12, [0x140171040]
nop
movzx r9d, byte [rbx]
xor r9b, 0x7f
cmp rcx, rdx
jae 0x1400b8060
lea rax, [rcx + 1]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x60]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400b806a
lea rcx, [rsp + 0x60]
call fcn.1400077b0
inc rbx
cmp rbx, r12
je 0x1400b807e
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
jmp 0x1400b8030
btr edi, 0xd
bts edi, 0xc
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rdx, qword [rsp + 0x60]
mov r8, rsi
lea rcx, [rbp + 0x280]
call fcn.1400b60f0
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.140007360
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
lea rdx, [rbx + 3]
lea r8, [rbp - 0x80]
lea rcx, [rbp + 0x280]
call fcn.1400b9580
mov rsi, qword [0x140174f88]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov rcx, r13
mov qword [rsp + 0x70], rcx
mov rdx, r15
mov qword [rsp + 0x78], rdx
mov byte [rsp + 0x60], cl
bts edi, 0xf
mov dword [rbp + 0x270], edi
lea rbx, str.yumu
lea r12, [0x1401715e2]
nop
movzx r9d, byte [rbx]
xor r9b, 0x4d
cmp rcx, rdx
jae 0x1400b8140
lea rax, [rcx + 1]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x60]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400b814a
lea rcx, [rsp + 0x60]
call fcn.1400077b0
inc rbx
cmp rbx, r12
je 0x1400b815e
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
jmp 0x1400b8110
btr edi, 0xf
bts edi, 0xe
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rdx, qword [rsp + 0x60]
mov r8, rsi
lea rcx, [rbp + 0x280]
call fcn.1400b60f0
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.140007360
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
lea rdx, [rbx + 3]
lea r8, [rbp - 0x80]
lea rcx, [rbp + 0x280]
call fcn.1400b9580
movsxd rcx, eax
lea rax, [rbx + 7]
add rax, rcx
mov qword [0x140174ee0], rax
mov eax, dword [r14]
cmp dword [0x140174b48], eax
jle 0x1400b8201
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x1400b8201
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp + 0x250]
mov rdx, qword [0x140174ee0]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x250]
mov qword [0x140174ee0], rax
mov rsi, qword [0x140174f88]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov rcx, r13
mov qword [rsp + 0x70], rcx
mov rdx, r15
mov qword [rsp + 0x78], rdx
mov byte [rsp + 0x60], cl
bts edi, 0xa
mov dword [rbp + 0x270], edi
lea rbx, str.DGS_0S5_SC5SBCSGFS6Ds
lea r12, [0x1401711ec]
movzx r9d, byte [rbx]
xor r9b, 0x73
cmp rcx, rdx
jae 0x1400b82a0
lea rax, [rcx + 1]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x60]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400b82aa
lea rcx, [rsp + 0x60]
call fcn.1400077b0
inc rbx
cmp rbx, r12
je 0x1400b82be
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
jmp 0x1400b8270
btr edi, 0xa
bts edi, 9
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rdx, qword [rsp + 0x60]
mov r8, rsi
lea rcx, [rbp + 0x280]
call fcn.1400b60f0
mov qword [0x140174f30], rax
lea rcx, [rsp + 0x60]
call fcn.140007360
mov rbx, qword [0x140174f88]
lea rdx, [rbp - 0x80]
lea rcx, str.I3Q_DQNQNQNQNQE_Q77Q27q
call fcn.140024f60
bts edi, 7
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rdx, qword [rbp - 0x80]
mov r8, rbx
lea rcx, [rbp + 0x280]
call fcn.1400b60f0
mov rbx, rax
lea rcx, [rbp - 0x80]
call fcn.140007360
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
lea rax, [rbp - 0x80]
mov qword [rbp + 0x270], rax
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x60]
call fcn.1400b6400
lea rdx, [rbx + 2]
mov r8, rax
lea rcx, [rbp + 0x280]
call fcn.1400b6290
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x250]
mov rdx, rax
mov rcx, qword [rbp + 0x280]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov esi, dword [rbp + 0x250]
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x1400b83f0
mov rax, qword [rbp - 0x70]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b83df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400b83df
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c4b4c
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
lea rcx, [rsi + 6]
add rcx, rbx
mov qword [0x140174f78], rcx
jne 0x1400b846d
lea rcx, str.cant_find_FrameCount
call fcn.140002f80
nop
mov rcx, qword [rbp + 0x280]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x298]
call fcn.140007360
nop
lea rcx, [rbp + 0x230]
call fcn.140007360
mov rcx, qword [rbp + 0x5a0]
xor rcx, rsp
call fcn.1400c4790
lea r11, [rsp + 0x6d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rsi, qword [0x140174f88]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov rcx, r13
mov qword [rsp + 0x70], rcx
mov rdx, r15
mov qword [rsp + 0x78], rdx
mov byte [rsp + 0x60], cl
bts edi, 0x18
mov dword [rbp + 0x270], edi
lea rbx, str.6:_:F_2F_____6:_:__F5_G:_____6:_:F_2F_____:C_F:_G:_____:6_F__57_31_6:_:F_2F____
lea r12, [0x140171003]
nop dword [rax + rax]
movzx r9d, byte [rbx]
xor r9b, 2
cmp rcx, rdx
jae 0x1400b84e0
lea rax, [rcx + 1]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x60]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400b84ea
lea rcx, [rsp + 0x60]
call fcn.1400077b0
inc rbx
cmp rbx, r12
je 0x1400b84fe
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
jmp 0x1400b84b0
btr edi, 0x18
bts edi, 0x17
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rdx, qword [rsp + 0x60]
mov r8, rsi
lea rcx, [rbp + 0x280]
call fcn.1400b60f0
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.140007360
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
lea rdx, [rbx + 3]
lea r8, [rbp - 0x80]
lea rcx, [rbp + 0x280]
call fcn.1400b9580
movsxd rcx, eax
lea rax, [rbx + 7]
add rax, rcx
mov qword [0x140174ef0], rax
mov eax, dword [r14]
cmp dword [0x140174b48], eax
jle 0x1400b85a1
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x1400b85a1
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp + 0x250]
mov rdx, qword [0x140174ef0]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x250]
mov qword [0x140174ef0], rax
mov rsi, qword [0x140174f88]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov rcx, r13
mov qword [rsp + 0x70], rcx
mov rdx, r15
mov qword [rsp + 0x78], rdx
mov byte [rsp + 0x60], cl
bts edi, 0x1a
mov dword [rbp + 0x270], edi
lea rbx, str.0F_2F_35_________0F_86_________0F_28_05_________48_8D_4D_B0_41_0F_28_D9_48_8B_D3_0F_28_D7_0F_29_45_A0
lea r12, [0x140171255]
movzx r9d, byte [rbx]
cmp rcx, rdx
jae 0x1400b863c
lea rax, [rcx + 1]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x60]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400b8646
lea rcx, [rsp + 0x60]
call fcn.1400077b0
inc rbx
cmp rbx, r12
je 0x1400b865a
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
jmp 0x1400b8610
btr edi, 0x1a
bts edi, 0x19
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rdx, qword [rsp + 0x60]
mov r8, rsi
lea rcx, [rbp + 0x280]
call fcn.1400b60f0
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.140007360
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
lea rdx, [rbx + 3]
lea r8, [rbp - 0x80]
lea rcx, [rbp + 0x280]
call fcn.1400b9580
movsxd rcx, eax
lea rax, [rbx + 7]
add rax, rcx
mov qword [0x140174f18], rax
mov rsi, qword [0x140174f88]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov rcx, r13
mov qword [rsp + 0x70], rcx
mov rdx, r15
mov qword [rsp + 0x78], rdx
mov byte [rsp + 0x60], cl
bts edi, 0x1c
mov dword [rbp + 0x270], edi
lea rbx, str.OC_C9_KN_D_D_D_D_O:_C9_J8_K
lea r12, [0x140171174]
nop dword [rax + rax]
movzx r9d, byte [rbx]
xor r9b, 0x7b
cmp rcx, rdx
jae 0x1400b8730
lea rax, [rcx + 1]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x60]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400b873a
lea rcx, [rsp + 0x60]
call fcn.1400077b0
inc rbx
cmp rbx, r12
je 0x1400b874e
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
jmp 0x1400b8700
btr edi, 0x1c
bts edi, 0x1b
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rdx, qword [rsp + 0x60]
mov r8, rsi
lea rcx, [rbp + 0x280]
call fcn.1400b60f0
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.140007360
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
lea rdx, [rbx + 3]
lea r8, [rbp - 0x80]
lea rcx, [rbp + 0x280]
call fcn.1400b9580
movsxd rcx, eax
lea rax, [rbx + 7]
add rax, rcx
mov qword [0x140174f80], rax
cmp byte [0x140174e96], 0
jne 0x1400b8801
cmp rax, 7
je 0x1400b87cd
cmp qword [0x140174f00], 7
jne 0x1400b8801
lea rdx, [rbp + 0x250]
call fcn.1400b9170
mov rcx, rax
call fcn.140007110
mov rdx, rax
mov r9d, 1
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rbp + 0x250]
call fcn.140007360
mov rsi, qword [0x140174f88]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov rcx, r13
mov qword [rsp + 0x70], rcx
mov rdx, r15
mov qword [rsp + 0x78], rdx
mov byte [rsp + 0x60], cl
bts edi, 0x1e
mov dword [rbp + 0x270], edi
lea rbx, [0x1401712d8]
lea rdi, [0x140171310]
nop dword [rax]
movzx r9d, byte [rbx]
xor r9b, 0x5f
cmp rcx, rdx
jae 0x1400b8870
lea rax, [rcx + 1]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x60]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400b887a
lea rcx, [rsp + 0x60]
call fcn.1400077b0
inc rbx
cmp rbx, rdi
je 0x1400b888e
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
jmp 0x1400b8840
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rdx, qword [rsp + 0x60]
mov r8, rsi
lea rcx, [rbp + 0x280]
call fcn.1400b60f0
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.140007360
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
lea rdx, [rbx + 3]
lea r8, [rbp - 0x80]
lea rcx, [rbp + 0x280]
call fcn.1400b9580
movsxd rcx, eax
add rbx, rcx
mov eax, dword [r14]
cmp dword [0x140174b48], eax
jle 0x1400b891e
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x1400b891e
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp + 0x270]
lea rdx, [rbx + 7]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdi, qword [0x140174f88]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov rcx, r13
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], r15
mov byte [rsp + 0x60], cl
mov dword [rbp + 0x250], 1
lea rbx, [0x140170ea0]
lea rsi, [0x140170ee4]
nop dword [rax]
movzx r9d, byte [rbx]
xor r9b, 0x23
cmp rcx, r15
jae 0x1400b89b0
lea rax, [rcx + 1]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
cmp r15, 0xf
cmova rax, qword [rsp + 0x60]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400b89ba
lea rcx, [rsp + 0x60]
call fcn.1400077b0
inc rbx
cmp rbx, rsi
je 0x1400b89ce
mov r15, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
jmp 0x1400b8980
lea rcx, [rsp + 0x60]
call fcn.140007110
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0x280]
call fcn.1400b60f0
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.140007360
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
lea rdx, [rbx + 3]
lea r8, [rbp - 0x80]
lea rcx, [rbp + 0x280]
call fcn.1400b9580
movsxd rcx, eax
lea rax, [rbx + 7]
add rax, rcx
mov qword [0x140174f58], rax
mov rbx, qword [0x140174f88]
lea rdx, [rsp + 0x60]
call fcn.1400b9190
nop
mov rcx, rax
call fcn.140007110
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x280]
call fcn.1400b60f0
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.140007360
mov qword [0x140174f20], rbx
cmp byte [0x140174e96], 0
je 0x1400b8aa9
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x60]
call fcn.1400b91b0
nop
mov rdx, rax
mov rcx, rbx
call fcn.14000d1b0
lea rdx, [0x14002a750]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rsp + 0x60]
call fcn.140007360
lea rdx, [rsp + 0x60]
call fcn.1400b9260
mov rdx, rax
lea rcx, [rbp + 0x230]
call fcn.14002a790
movzx ebx, al
lea rcx, [rsp + 0x60]
call fcn.140007360
test bl, bl
je 0x1400b8af2
call fcn.140003630
mov rdx, qword [0x140174f38]
add rdx, 0x1efd4c8
call fcn.1400075b0
mov qword [0x140174ef0], rax
lea rdx, [rsp + 0x60]
call fcn.1400b9280
mov rdx, rax
lea rcx, [rbp + 0x230]
call fcn.14002a790
movzx ebx, al
lea rcx, [rsp + 0x60]
call fcn.140007360
test bl, bl
je 0x1400b8b3b
call fcn.140003630
mov rdx, qword [0x140174f38]
add rdx, 0x1ec3828
call fcn.1400075b0
mov qword [0x140174ef0], rax
lea rdx, [rsp + 0x60]
call fcn.1400b92a0
mov rdx, rax
lea rcx, [rbp + 0x230]
call fcn.14002a790
movzx ebx, al
lea rcx, [rsp + 0x60]
call fcn.140007360
test bl, bl
je 0x1400b8b84
call fcn.140003630
mov rdx, qword [0x140174f38]
add rdx, 0x1ee18a8
call fcn.1400075b0
mov qword [0x140174ef0], rax
lea rdx, [rsp + 0x60]
call fcn.1400b92c0
mov rdx, rax
lea rcx, [rbp + 0x230]
call fcn.14002a790
movzx ebx, al
lea rcx, [rsp + 0x60]
call fcn.140007360
test bl, bl
je 0x1400b8bcd
call fcn.140003630
mov rdx, qword [0x140174f38]
add rdx, 0x1f05208
call fcn.1400075b0
mov qword [0x140174ef0], rax
lea rdx, [rsp + 0x60]
call fcn.1400b92e0
mov rdx, rax
lea rcx, [rbp + 0x230]
call fcn.14002a790
movzx ebx, al
lea rcx, [rsp + 0x60]
call fcn.140007360
test bl, bl
je 0x1400b8c16
call fcn.140003630
mov rdx, qword [0x140174f38]
add rdx, 0x1f2e7a8
call fcn.1400075b0
mov qword [0x140174ef0], rax
lea rdx, [rsp + 0x60]
call fcn.1400b9300
mov rdx, rax
lea rcx, [rbp + 0x230]
call fcn.14002a790
movzx ebx, al
lea rcx, [rsp + 0x60]
call fcn.140007360
test bl, bl
je 0x1400b8c5f
call fcn.140003630
mov rdx, qword [0x140174f38]
add rdx, 0x1f77ef0
call fcn.1400075b0
mov qword [0x140174ef0], rax
lea rdx, [rsp + 0x60]
call fcn.1400b9320
mov rdx, rax
lea rcx, [rbp + 0x230]
call fcn.14002a790
movzx ebx, al
lea rcx, [rsp + 0x60]
call fcn.140007360
test bl, bl
je 0x1400b8ca8
call fcn.140003630
mov rdx, qword [0x140174f38]
add rdx, 0x20304c8
call fcn.1400075b0
mov qword [0x140174ef0], rax
lea rdx, [rsp + 0x60]
call fcn.1400b9340
mov rdx, rax
lea rcx, [rbp + 0x230]
call fcn.14002a790
movzx ebx, al
lea rcx, [rsp + 0x60]
call fcn.140007360
test bl, bl
je 0x1400b8cf1
call fcn.140003630
mov rdx, qword [0x140174f38]
add rdx, 0x1f5b820
call fcn.1400075b0
mov qword [0x140174ef0], rax
lea rdx, [rsp + 0x60]
call fcn.1400b9360
mov rdx, rax
lea rcx, [rbp + 0x230]
call fcn.14002a790
movzx ebx, al
lea rcx, [rsp + 0x60]
call fcn.140007360
test bl, bl
je 0x1400b8d3a
call fcn.140003630
mov rdx, qword [0x140174f38]
add rdx, 0x1804f24
call fcn.1400075b0
mov qword [0x140174ef0], rax
lea rdx, [rsp + 0x60]
call fcn.1400b9380
mov rdx, rax
lea rcx, [rbp + 0x230]
call fcn.14002a790
movzx ebx, al
lea rcx, [rsp + 0x60]
call fcn.140007360
test bl, bl
je 0x1400b8d83
call fcn.140003630
mov rdx, qword [0x140174f38]
add rdx, 0x1f42068
call fcn.1400075b0
mov qword [0x140174ef0], rax
lea rdx, [rsp + 0x60]
call fcn.1400b93a0
mov rdx, rax
lea rcx, [rbp + 0x230]
call fcn.14002a790
movzx ebx, al
lea rcx, [rsp + 0x60]
call fcn.140007360
test bl, bl
je 0x1400b8dcc
call fcn.140003630
mov rdx, qword [0x140174f38]
add rdx, 0x1f58b58
call fcn.1400075b0
mov qword [0x140174ef0], rax
lea rdx, [rsp + 0x60]
call fcn.1400b93c0
mov rdx, rax
lea rcx, [rbp + 0x230]
call fcn.14002a790
movzx ebx, al
lea rcx, [rsp + 0x60]
call fcn.140007360
test bl, bl
je 0x1400b8e15
call fcn.140003630
mov rdx, qword [0x140174f38]
add rdx, 0x1ee18a8
call fcn.1400075b0
mov qword [0x140174ef0], rax
lea rdx, [rsp + 0x60]
call fcn.1400b9470
mov rdx, rax
lea rcx, [rbp + 0x230]
call fcn.14002a790
movzx ebx, al
lea rcx, [rsp + 0x60]
call fcn.140007360
test bl, bl
je 0x1400b8e5e
call fcn.140003630
mov rdx, qword [0x140174f38]
add rdx, 0x1f5b820
call fcn.1400075b0
mov qword [0x140174ef0], rax
lea rcx, [rbp + 0x310]
call fcn.1400b9570
lea rcx, [rbp + 0x310]
call fcn.1400b9650
nop
lea rcx, [rbp + 0x328]
call fcn.1400b9570
lea rcx, [rbp + 0x328]
call fcn.1400b9710
nop
lea rcx, [rbp + 0x340]
call fcn.1400b9570
lea rcx, [rbp + 0x340]
call fcn.1400b97d0
nop
lea rcx, [rbp + 0x358]
call fcn.1400b9570
lea rcx, [rbp + 0x358]
call fcn.1400b9890
nop
lea rcx, [rbp + 0x370]
call fcn.1400b9570
lea rcx, [rbp + 0x370]
call fcn.1400b9950
nop
lea rcx, [rbp + 0x388]
call fcn.1400b9570
lea rcx, [rbp + 0x388]
call fcn.1400b9a10
nop
lea rcx, [rbp + 0x3a0]
call fcn.1400b9570
lea rcx, [rbp + 0x3a0]
call fcn.1400b9ad0
nop
lea rcx, [rbp + 0x3b8]
call fcn.1400b9570
lea rcx, [rbp + 0x3b8]
call fcn.1400b9b90
nop
lea rcx, [rbp + 0x3d0]
call fcn.1400b9570
lea rcx, [rbp + 0x3d0]
call fcn.1400b9c50
nop
lea rdx, [rbp + 0x2c0]
call fcn.1400b9550
nop
mov qword [rbp - 0x50], r13
mov dword [rbp - 0x60], 0x50
mov dword [rbp - 0x5c], 3
lea rax, [0x1400c2f40]
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x48], r13
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov qword [rbp - 0x38], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconA]
mov qword [rbp - 0x40], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconA]
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x30], r13
lea rcx, [rbp + 0x2c0]
call fcn.140007110
mov qword [rbp - 0x20], rax
lea rcx, [rbp + 0x2c0]
call fcn.140007110
mov qword [rbp - 0x28], rax
lea rcx, [rbp - 0x60]
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov rcx, qword [0x140174f10]
test rcx, rcx
je 0x1400b90d7
lea rdx, [rbp + 0x270]
call qword [sym.imp.USER32.dll_GetClientRect]
lea rdx, [0x140174eb0]
mov rcx, qword [0x140174f10]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov r10d, dword [0x140174eb8]
mov r11d, dword [0x140174eb0]
sub r10d, r11d
mov dword [0x140174f54], r10d
mov edx, dword [0x140174ebc]
mov r9d, dword [0x140174eb4]
sub edx, r9d
mov dword [0x140174f50], edx
lea rcx, [rbp + 0x2c0]
call fcn.140007110
mov r8, rax
lea rcx, [rbp + 0x2c0]
call fcn.140007110
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x38], edx
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], r9d
mov dword [rsp + 0x20], r11d
mov r9d, 0x90000000
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov qword [0x140174ec0], rax
movdqa xmm0, xmmword [0x1401534e0]
movdqu xmmword [rbp + 0x250], xmm0
lea rdx, [rbp + 0x250]
mov rcx, rax
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov r9d, 2
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x140174ec0]
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov edx, 0xffffffec
mov r8d, 0x800a0
mov rcx, qword [0x140174ec0]
call qword [sym.imp.USER32.dll_SetWindowLongA]
call fcn.1400b67e0
xorps xmm0, xmm0
movups xmmword [rbp + 0x2e0], xmm0
movups xmmword [rbp + 0x2f0], xmm0
movups xmmword [rbp + 0x300], xmm0
nop dword [rax]
nop dword [rax + rax]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x1400b9100
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x1400b9121
jmp 0x1400b9100
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3