Function at 0x1400018c0
Capabilities:
Create process on windows
Create thread
Get common file path
Schedule task via at

Disassembly:
push rbp
push rbx
push r14
lea rbp, [rsp - 0x530]
sub rsp, 0x630
mov rax, qword [0x140009040]
xor rax, rsp
mov qword [rbp + 0x520], rax
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
test rax, rax
je 0x1400018fb
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
lea rdx, [rbp + 0x310]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
xorps xmm0, xmm0
lea rax, [rbp + 0x310]
movups xmmword [rsp + 0x50], xmm0
mov rbx, 0xffffffffffffffff
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140001923
movabs r14, 0x7ffffffffffffffe
cmp rbx, r14
ja 0x1400032af
mov qword [rsp + 0x650], rsi
mov qword [rsp + 0x658], rdi
mov qword [rsp + 0x660], r12
mov r12d, 0xa
mov qword [rsp + 0x668], r15
movabs r15, 0x7fffffffffffffff
cmp rbx, 7
ja 0x1400019a7
mov qword [rsp + 0x60], rbx
lea rdx, [rbp + 0x310]
add rbx, rbx
mov qword [rsp + 0x68], 7
mov r8, rbx
lea rcx, [rsp + 0x50]
call sub.VCRUNTIME140.dll_memcpy
xor edi, edi
mov word [rsp + rbx + 0x50], di
jmp 0x140001a44
mov rax, rbx
xor edi, edi
or rax, 7
cmp rax, r14
jbe 0x1400019bb
lea rcx, [r15 + r15]
jmp 0x1400019de
cmp rax, r12
cmovb rax, r12
mov r14, rax
lea rcx, [rax + 1]
cmp rcx, r15
ja 0x1400032b5
add rcx, rcx
cmp rcx, 0x1000
jb 0x140001a0a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400032b5
mov rcx, rax
call fcn.1400043c0
test rax, rax
je 0x140001b0a
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140001a1c
test rcx, rcx
je 0x140001a19
call fcn.1400043c0
mov rsi, rax
jmp 0x140001a1c
mov rsi, rdi
mov qword [rsp + 0x60], rbx
lea rdx, [rbp + 0x310]
add rbx, rbx
mov qword [rsp + 0x50], rsi
mov r8, rbx
mov qword [rsp + 0x68], r14
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov word [rbx + rsi], di
mov rcx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov rax, rcx
sub rax, rsi
cmp rax, 0xd
jb 0x140001a94
cmp rcx, 7
lea rax, [rsi + 0xd]
lea rbx, [rsp + 0x50]
mov qword [rsp + 0x60], rax
cmova rbx, qword [rsp + 0x50]
lea rdx, str.loadgame.exe
mov r8d, 0x1a
lea rcx, [rbx + rsi*2]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rsp + 0x50]
mov word [rbx + rsi*2 + 0x1a], di
jmp 0x140001ab3
lea r9, str.loadgame.exe
mov qword [rsp + 0x20], 0xd
mov edx, 0xd
lea rcx, [rsp + 0x50]
call fcn.140003b40
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 7
mov word [rax], di
mov rdx, qword [rsp + 0x68]
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm1
cmp rdx, 7
jbe 0x140001b16
mov rcx, qword [rsp + 0x50]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001b11
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001b11
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000463c
lea rdx, str.access_tcp___hostname_1.audition.nexus___url_127.0.0.1:18505
lea rcx, [rbp + 0x2f0]
call fcn.1400033e0
lea rdx, str.access_tcp___hostname_2.audition.nexus___url_127.0.0.1:18506
lea rcx, [rbp + 0x2d0]
call fcn.1400033e0
lea rdx, str.access_tcp___hostname_3.audition.nexus___url_127.0.0.1:18507
lea rcx, [rbp + 0x2b0]
call fcn.1400033e0
lea rdx, str.access_tcp___hostname_4.audition.nexus___url_127.0.0.1:25575
lea rcx, [rbp + 0x290]
call fcn.1400033e0
lea rdx, str.access_tcp___hostname_14.audition.nexus___url_127.0.0.1:20540
lea rcx, [rbp + 0x270]
call fcn.1400033e0
lea rdx, str.access_tcp___hostname_6.audition.nexus___url_127.0.0.1:18600
lea rcx, [rbp + 0x250]
call fcn.1400033e0
lea rdx, str.access_tcp___hostname_15.audition.nexus___url_127.0.0.1:18573
lea rcx, [rbp + 0x230]
call fcn.1400033e0
lea rdx, str.access_tcp___hostname_8.audition.nexus___url_127.0.0.1:18512
lea rcx, [rbp + 0x210]
call fcn.1400033e0
lea rdx, str.access_tcp___hostname_9.audition.nexus___url_127.0.0.1:18511
lea rcx, [rbp + 0x1f0]
call fcn.1400033e0
lea rdx, str.access_tcp___hostname_10.audition.nexus___url_127.0.0.1:18510
lea rcx, [rbp + 0x1d0]
call fcn.1400033e0
lea rdx, str.access_tcp___hostname_11.audition.nexus___url_127.0.0.1:15555
lea rcx, [rbp + 0x1b0]
call fcn.1400033e0
lea rdx, str.access_tcp___hostname_12.audition.nexus___url_127.0.0.2:18506
lea rcx, [rbp + 0x190]
call fcn.1400033e0
lea rdx, str.access_tcp___hostname_13.audition.nexus___url_127.0.0.2:18510
lea rcx, [rbp + 0x170]
call fcn.1400033e0
lea rdx, str.cloudflared.exe
lea rcx, [rbp + 0xe0]
call fcn.1400033e0
lea rcx, [rbp + 0xe0]
call fcn.140001320
mov rdx, qword [rbp + 0xf8]
movzx ebx, al
cmp rdx, 7
jbe 0x140001c75
mov rcx, qword [rbp + 0xe0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001c70
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003266
call fcn.14000463c
test bl, bl
jne 0x140002af7
mov ecx, 0x50
call fcn.1400043c0
lea rdx, [rbp + 0x2f0]
mov rbx, rax
lea rcx, [rax + 8]
mov dword [rax], 1
call fcn.140004260
lea rcx, [rbx + 0x28]
lea rdx, [rbp - 0x50]
call fcn.140004260
lea rax, [rbp + 0x88]
mov r9, rbx
mov qword [rsp + 0x28], rax
lea rsi, [0x140001490]
lea r8, [0x1400041f0]
mov dword [rsp + 0x20], edi
xor edx, edx
mov qword [rbx + 0x48], rsi
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x80], rax
test rax, rax
je 0x140002ae5
mov ecx, 0x50
call fcn.1400043c0
lea rdx, [rbp + 0x2d0]
mov rbx, rax
lea rcx, [rax + 8]
mov dword [rax], 2
call fcn.140004260
lea rcx, [rbx + 0x28]
lea rdx, [rbp - 0x50]
call fcn.140004260
lea rax, [rbp + 0x78]
mov qword [rbx + 0x48], rsi
mov qword [rsp + 0x28], rax
lea r8, [0x1400041f0]
mov r9, rbx
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x70], rax
test rax, rax
je 0x140002ad6
mov ecx, 0x50
call fcn.1400043c0
lea rdx, [rbp + 0x2b0]
mov rbx, rax
lea rcx, [rax + 8]
mov dword [rax], 3
call fcn.140004260
lea rcx, [rbx + 0x28]
lea rdx, [rbp - 0x50]
call fcn.140004260
lea rax, [rbp + 0x68]
mov qword [rbx + 0x48], rsi
mov qword [rsp + 0x28], rax
lea r8, [0x1400041f0]
mov r9, rbx
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x60], rax
test rax, rax
je 0x140002ac7
mov ecx, 0x50
call fcn.1400043c0
lea rdx, [rbp + 0x290]
mov rbx, rax
lea rcx, [rax + 8]
mov dword [rax], 4
call fcn.140004260
lea rcx, [rbx + 0x28]
lea rdx, [rbp - 0x50]
call fcn.140004260
lea rax, [rbp + 0x58]
mov qword [rbx + 0x48], rsi
mov qword [rsp + 0x28], rax
lea r8, [0x1400041f0]
mov r9, rbx
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x50], rax
test rax, rax
je 0x140002ab8
mov ecx, 0x50
call fcn.1400043c0
lea rdx, [rbp + 0x270]
mov rbx, rax
lea rcx, [rax + 8]
mov dword [rax], 5
call fcn.140004260
lea rcx, [rbx + 0x28]
lea rdx, [rbp - 0x50]
call fcn.140004260
lea rax, [rbp + 0x48]
mov qword [rbx + 0x48], rsi
mov qword [rsp + 0x28], rax
lea r8, [0x1400041f0]
mov r9, rbx
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x40], rax
test rax, rax
je 0x140002aa9
mov ecx, 0x50
call fcn.1400043c0
lea rdx, [rbp + 0x250]
mov rbx, rax
lea rcx, [rax + 8]
mov dword [rax], 6
call fcn.140004260
lea rcx, [rbx + 0x28]
lea rdx, [rbp - 0x50]
call fcn.140004260
lea rax, [rbp + 0x38]
mov qword [rbx + 0x48], rsi
mov qword [rsp + 0x28], rax
lea r8, [0x1400041f0]
mov r9, rbx
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x30], rax
test rax, rax
je 0x140002a9a
mov ecx, 0x50
call fcn.1400043c0
lea rdx, [rbp + 0x230]
mov rbx, rax
lea rcx, [rax + 8]
mov dword [rax], 7
call fcn.140004260
lea rcx, [rbx + 0x28]
lea rdx, [rbp - 0x50]
call fcn.140004260
lea rax, [rbp + 0x28]
mov qword [rbx + 0x48], rsi
mov qword [rsp + 0x28], rax
lea r8, [0x1400041f0]
mov r9, rbx
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x20], rax
test rax, rax
je 0x140002a8b
mov ecx, 0x50
call fcn.1400043c0
lea rdx, [rbp + 0x210]
mov rbx, rax
lea rcx, [rax + 8]
mov dword [rax], 8
call fcn.140004260
lea rcx, [rbx + 0x28]
lea rdx, [rbp - 0x50]
call fcn.140004260
lea rax, [rbp + 0x18]
mov qword [rbx + 0x48], rsi
mov qword [rsp + 0x28], rax
lea r8, [0x1400041f0]
mov r9, rbx
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x10], rax
test rax, rax
je 0x140002a7c
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x70], rdi
call fcn.140004070
lea rax, [rsp + 0x70]
mov dword [rsp + 0x70], 9
lea r9, [rbp + 0x1f0]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x50]
lea rcx, [rbp + 0x90]
call fcn.1400039e0
mov ecx, 0x50
call fcn.1400043c0
lea rdx, [rbp + 0x1d0]
mov rbx, rax
lea rcx, [rax + 8]
mov dword [rax], r12d
call fcn.140004260
lea rcx, [rbx + 0x28]
lea rdx, [rbp - 0x50]
call fcn.140004260
lea rax, [rbp + 8]
mov qword [rbx + 0x48], rsi
mov qword [rsp + 0x28], rax
lea r8, [0x1400041f0]
mov r9, rbx
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp], rax
test rax, rax
je 0x140002a6d
mov ecx, 0x50
call fcn.1400043c0
lea rdx, [rbp + 0x1b0]
mov rbx, rax
lea rcx, [rax + 8]
mov dword [rax], 0xb
call fcn.140004260
lea rcx, [rbx + 0x28]
lea rdx, [rbp - 0x50]
call fcn.140004260
lea rax, [rbp - 8]
mov qword [rbx + 0x48], rsi
mov qword [rsp + 0x28], rax
lea r8, [0x1400041f0]
mov r9, rbx
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x10], rax
test rax, rax
je 0x140002a5e
mov ecx, 0x50
call fcn.1400043c0
lea rdx, [rbp + 0x190]
mov rbx, rax
lea rcx, [rax + 8]
mov dword [rax], 0xc
call fcn.140004260
lea rcx, [rbx + 0x28]
lea rdx, [rbp - 0x50]
call fcn.140004260
lea rax, [rbp - 0x18]
mov qword [rbx + 0x48], rsi
mov qword [rsp + 0x28], rax
lea r8, [0x1400041f0]
mov r9, rbx
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x20], rax
test rax, rax
je 0x140002a4f
mov ecx, 0x50
call fcn.1400043c0
lea rdx, [rbp + 0x170]
mov rbx, rax
lea rcx, [rax + 8]
mov dword [rax], 0xd
call fcn.140004260
lea rcx, [rbx + 0x28]
lea rdx, [rbp - 0x50]
call fcn.140004260
lea rax, [rbp - 0x28]
mov qword [rbx + 0x48], rsi
mov qword [rsp + 0x28], rax
lea r8, [0x1400041f0]
mov r9, rbx
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x30], rax
test rax, rax
je 0x140002a40
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
mov r9, rax
cmp rbx, 0x989680
jne 0x140002178
imul rax, r9, 0x64
jmp 0x1400021f1
cmp rbx, 0x16e3600
jne 0x1400021d6
movabs r10, 0xb2f4fc0794908cf3
mov rax, r10
imul r9
mov rax, r10
add rdx, r9
sar rdx, 0x18
mov rcx, rdx
shr rcx, 0x3f
add rdx, rcx
imul rcx, rdx, 0x16e3600
imul r8, rdx, 0x3b9aca00
sub r9, rcx
imul rcx, r9, 0x3b9aca00
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rax, rdx
add rax, r8
jmp 0x1400021f1
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
movabs rcx, 0x7fffffffc46535ff
cmp rax, rcx
jge 0x14000220d
add rax, 0x3b9aca00
mov qword [rsp + 0x70], rax
jmp 0x140002212
mov qword [rsp + 0x70], r15
lea rcx, [rsp + 0x70]
call fcn.140003d10
lea rdx, [rbp + 0x310]
lea rcx, [rsp + 0x70]
call fcn.1400033e0
mov rbx, rax
mov rdx, qword [rax + 0x18]
mov rcx, qword [rax + 0x10]
mov rax, rdx
sub rax, rcx
cmp rax, 0xf
jb 0x140002275
lea r14, [rcx + 0xf]
mov rsi, rbx
mov qword [rbx + 0x10], r14
cmp rdx, 7
jbe 0x140002258
mov rsi, qword [rbx]
lea rcx, [rsi + rcx*2]
mov r8d, 0x1e
lea rdx, str.launch_eac.exe
call sub.VCRUNTIME140.dll_memmove
mov word [rsi + r14*2], di
jmp 0x140002295
lea r9, str.launch_eac.exe
mov qword [rsp + 0x20], 0xf
mov edx, 0xf
mov rcx, rbx
call fcn.140003b40
mov rbx, rax
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
mov rdx, qword [rbp - 0x78]
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm1
cmp rdx, 7
jbe 0x1400022fd
mov rcx, qword [rsp + 0x70]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400022f8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400022f8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000463c
lea rdx, str._t3enter_0F007E346F540C55641C5A7E074364
lea rcx, [rbp + 0xc0]
call fcn.1400033e0
xorps xmm0, xmm0
mov dword [rbp + 0x100], 0x68
xor eax, eax
lea rdx, [rbp + 0xe0]
lea rcx, [rsp + 0x70]
mov dword [rbp + 0x164], eax
movups xmmword [rbp + 0x104], xmm0
mov qword [rsp + 0x60], rax
movups xmmword [rbp + 0x114], xmm0
movups xmmword [rbp + 0x124], xmm0
movups xmmword [rbp + 0x134], xmm0
movups xmmword [rbp + 0x144], xmm0
movups xmmword [rbp + 0x154], xmm0
movups xmmword [rsp + 0x50], xmm0
call fcn.1400035a0
mov r12, qword [rbp + 0xd8]
lea r9, [rbp + 0xc0]
mov rsi, qword [rbp + 0xc0]
cmp r12, 7
mov rdx, qword [rbp + 0xd0]
mov rbx, rax
mov r8, qword [rax + 0x18]
cmova r9, rsi
mov rcx, qword [rax + 0x10]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x1400023cf
lea r15, [rcx + rdx]
mov r14, rbx
mov qword [rbx + 0x10], r15
cmp r8, 7
jbe 0x1400023b8
mov r14, qword [rbx]
lea r8, [rdx + rdx]
mov rdx, r9
lea rcx, [r14 + rcx*2]
call sub.VCRUNTIME140.dll_memmove
mov word [r14 + r15*2], di
jmp 0x1400023ed
mov rcx, rbx
mov qword [rsp + 0x20], rdx
call fcn.140003b40
mov r12, qword [rbp + 0xd8]
mov rbx, rax
mov rsi, qword [rbp + 0xc0]
mov qword [rbp - 0x60], rdi
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x58], rdi
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x14000245e
mov rcx, qword [rsp + 0x70]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002459
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002459
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000463c
cmp qword [rbp - 0x58], 7
lea rax, [rsp + 0x50]
mov qword [rsp + 0x48], rax
lea rdx, [rbp - 0x70]
cmova rdx, qword [rbp - 0x70]
lea rax, [rbp + 0x100]
mov qword [rsp + 0x40], rax
xor r9d, r9d
mov qword [rsp + 0x38], rdi
xor r8d, r8d
mov qword [rsp + 0x30], rdi
xor ecx, ecx
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x1400024ce
mov rcx, qword [rsp + 0x50]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140002504
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_create_eac_launch.exe_process:
mov ebx, eax
call fcn.1400037d0
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x1400039a0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 8
call fcn.1400043c0
lea rcx, [0x140001770]
mov r9, rax
lea r8, [0x140004230]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0xb8]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], edi
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xb0], rax
test rax, rax
je 0x140002a2e
cmp dword [rbp + 0xb8], 0
je 0x140002a22
movaps xmm0, xmmword [rbp + 0xb0]
lea rcx, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140002a22
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xb0], xmm0
cmp dword [rbp + 0x88], eax
je 0x140002a22
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x88], eax
je 0x140002a16
movaps xmm0, xmmword [rbp + 0x80]
lea rcx, [rsp + 0x70]
xor edx, edx
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x140002a0a
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x80], xmm0
cmp dword [rbp + 0x78], eax
je 0x140002a22
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x78], eax
je 0x140002a16
movaps xmm0, xmmword [rbp + 0x70]
lea rcx, [rsp + 0x70]
xor edx, edx
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x140002a0a
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x70], xmm0
cmp dword [rbp + 0x68], eax
je 0x140002a22
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x68], eax
je 0x140002a16
movaps xmm0, xmmword [rbp + 0x60]
lea rcx, [rsp + 0x70]
xor edx, edx
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x140002a0a
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x60], xmm0
cmp dword [rbp + 0x58], eax
je 0x140002a22
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x58], eax
je 0x140002a16
movaps xmm0, xmmword [rbp + 0x50]
lea rcx, [rsp + 0x70]
xor edx, edx
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x140002a0a
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x50], xmm0
cmp dword [rbp + 0x48], eax
je 0x140002a22
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x48], eax
je 0x140002a16
movaps xmm0, xmmword [rbp + 0x40]
lea rcx, [rsp + 0x70]
xor edx, edx
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x140002a0a
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x40], xmm0
cmp dword [rbp + 0x38], eax
je 0x140002a22
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x38], eax
je 0x140002a16
movaps xmm0, xmmword [rbp + 0x30]
lea rcx, [rsp + 0x70]
xor edx, edx
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x140002a0a
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x30], xmm0
cmp dword [rbp + 0x28], eax
je 0x140002a22
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x28], eax
je 0x140002a16
movaps xmm0, xmmword [rbp + 0x20]
lea rcx, [rsp + 0x70]
xor edx, edx
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x140002a0a
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x20], xmm0
cmp dword [rbp + 0x18], eax
je 0x140002a22
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x18], eax
je 0x140002a16
movaps xmm0, xmmword [rbp + 0x10]
lea rcx, [rsp + 0x70]
xor edx, edx
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x140002a0a
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x10], xmm0
cmp dword [rbp + 0x98], eax
je 0x140002a22
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x98], eax
je 0x140002a16
movaps xmm0, xmmword [rbp + 0x90]
lea rcx, [rsp + 0x70]
xor edx, edx
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x140002a0a
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x90], xmm0
cmp dword [rbp + 8], eax
je 0x140002a22
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 8], eax
je 0x140002a16
movaps xmm0, xmmword [rbp]
lea rcx, [rsp + 0x70]
xor edx, edx
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x140002a0a
xorps xmm0, xmm0
movdqa xmmword [rbp], xmm0
cmp dword [rbp - 8], eax
je 0x140002a22
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp - 8], eax
je 0x140002a16
movaps xmm0, xmmword [rbp - 0x10]
lea rcx, [rsp + 0x70]
xor edx, edx
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x140002a0a
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x10], xmm0
cmp dword [rbp - 0x18], eax
je 0x140002a22
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp - 0x18], eax
je 0x140002a16
movaps xmm0, xmmword [rbp - 0x20]
lea rcx, [rsp + 0x70]
xor edx, edx
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x140002a0a
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x20], xmm0
cmp dword [rbp - 0x28], eax
je 0x140002a22
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp - 0x28], eax
je 0x140002a16
movaps xmm0, xmmword [rbp - 0x30]
lea rcx, [rsp + 0x70]
xor edx, edx
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x140002a0a
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x30], xmm0
cmp dword [rbp + 0xb8], eax
jne 0x140002a03
mov rdx, qword [rbp - 0x58]
cmp rdx, 7
jbe 0x14000291b
mov rcx, qword [rbp - 0x70]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002916
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000299f
call fcn.14000463c
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], di
cmp r12, 7
jbe 0x140002962
lea rdx, [r12*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14000295a
mov rsi, qword [rsi - 8]
add rdx, 0x27
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000299f
mov rcx, rsi
call fcn.14000463c
mov rdx, qword [rbp + 0xf8]
cmp rdx, 7
jbe 0x1400029ab
mov rcx, qword [rbp + 0xe0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400029a6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400029a6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000463c
cmp dword [rbp - 0x28], 0
jne 0x140002a03
cmp dword [rbp - 0x18], 0
jne 0x140002a03
cmp dword [rbp - 8], 0
jne 0x140002a03
cmp dword [rbp + 8], 0
jne 0x140002a03
cmp dword [rbp + 0x98], 0
jne 0x140002a03
cmp dword [rbp + 0x18], 0
jne 0x140002a03
cmp dword [rbp + 0x28], 0
jne 0x140002a03
cmp dword [rbp + 0x38], 0
jne 0x140002a03
cmp dword [rbp + 0x48], 0
jne 0x140002a03
cmp dword [rbp + 0x58], 0
jne 0x140002a03
cmp dword [rbp + 0x68], 0
jne 0x140002a03
cmp dword [rbp + 0x78], 0
jne 0x140002a03
cmp dword [rbp + 0x88], 0
je 0x140002ea9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov ecx, 2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0xb8], edi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp - 0x28], edi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp - 0x18], edi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp - 8], edi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 8], edi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x18], edi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x28], edi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x38], edi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x48], edi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x58], edi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x68], edi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x78], edi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x88], edi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
lea rdx, [rbp + 0x310]
lea rcx, [rbp + 0x90]
call fcn.1400033e0
mov rbx, rax
mov rdx, qword [rax + 0x18]
mov rcx, qword [rax + 0x10]
mov rax, rdx
sub rax, rcx
cmp rax, 0xf
jb 0x140002b52
lea r14, [rcx + 0xf]
mov rsi, rbx
mov qword [rbx + 0x10], r14
cmp rdx, 7
jbe 0x140002b35
mov rsi, qword [rbx]
lea rcx, [rsi + rcx*2]
mov r8d, 0x1e
lea rdx, str.launch_eac.exe
call sub.VCRUNTIME140.dll_memmove
mov word [rsi + r14*2], di
jmp 0x140002b72
lea r9, str.launch_eac.exe
mov qword [rsp + 0x20], 0xf
mov edx, 0xf
mov rcx, rbx
call fcn.140003b40
mov rbx, rax
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
mov rdx, qword [rbp + 0xa8]
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm1
cmp rdx, 7
jbe 0x140002bdf
mov rcx, qword [rbp + 0x90]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002bda
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002bda
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000463c
lea rdx, str._t3enter_0F007E346F540C55641C5A7E074364
lea rcx, [rbp + 0xc0]
call fcn.1400033e0
xorps xmm0, xmm0
mov dword [rbp + 0x100], 0x68
xor eax, eax
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x90]
mov dword [rbp + 0x164], eax
movups xmmword [rbp + 0x104], xmm0
mov qword [rsp + 0x60], rax
movups xmmword [rbp + 0x114], xmm0
movups xmmword [rbp + 0x124], xmm0
movups xmmword [rbp + 0x134], xmm0
movups xmmword [rbp + 0x144], xmm0
movups xmmword [rbp + 0x154], xmm0
movups xmmword [rsp + 0x50], xmm0
call fcn.1400035a0
mov r15, qword [rbp + 0xd8]
lea r9, [rbp + 0xc0]
mov rsi, qword [rbp + 0xc0]
cmp r15, 7
mov rdx, qword [rbp + 0xd0]
mov rbx, rax
mov r8, qword [rax + 0x18]
cmova r9, rsi
mov rcx, qword [rax + 0x10]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x140002cb3
lea r12, [rcx + rdx]
mov r14, rbx
mov qword [rbx + 0x10], r12
cmp r8, 7
jbe 0x140002c9c
mov r14, qword [rbx]
lea r8, [rdx + rdx]
mov rdx, r9
lea rcx, [r14 + rcx*2]
call sub.VCRUNTIME140.dll_memmove
mov word [r14 + r12*2], di
jmp 0x140002cd1
mov rcx, rbx
mov qword [rsp + 0x20], rdx
call fcn.140003b40
mov r15, qword [rbp + 0xd8]
mov rbx, rax
mov rsi, qword [rbp + 0xc0]
mov qword [rbp - 0x60], rdi
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x58], rdi
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
mov rdx, qword [rbp + 0xa8]
cmp rdx, 7
jbe 0x140002d47
mov rcx, qword [rbp + 0x90]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002d42
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002d42
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000463c
cmp qword [rbp - 0x58], 7
lea rax, [rsp + 0x50]
mov qword [rsp + 0x48], rax
lea rdx, [rbp - 0x70]
cmova rdx, qword [rbp - 0x70]
lea rax, [rbp + 0x100]
mov qword [rsp + 0x40], rax
xor r9d, r9d
mov qword [rsp + 0x38], rdi
xor r8d, r8d
mov qword [rsp + 0x30], rdi
xor ecx, ecx
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x140002ddd
mov rcx, qword [rsp + 0x50]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x90]
call fcn.140003ab0
lea rcx, [rbp + 0x90]
call fcn.1400012e0
cmp dword [rbp + 0x98], 0
je 0x140002e13
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_create_eac_launch.exe_process:
mov ebx, eax
call fcn.1400037d0
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x1400039a0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdx, qword [rbp - 0x58]
cmp rdx, 7
jbe 0x140002e4f
mov rcx, qword [rbp - 0x70]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002e4a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002e8e
call fcn.14000463c
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], di
cmp r15, 7
jbe 0x140002e9d
lea rdx, [r15*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140002e95
mov rsi, qword [rsi - 8]
add rdx, 0x27
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002e95
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.14000463c
lea rcx, [rbp + 0xe0]
call fcn.140003370
mov rdx, qword [rbp + 0x188]
cmp rdx, 7
jbe 0x140002eef
mov rcx, qword [rbp + 0x170]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002eea
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003266
call fcn.14000463c
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 7
jbe 0x140002f35
mov rcx, qword [rbp + 0x190]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002f30
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003266
call fcn.14000463c
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 7
jbe 0x140002f7b
mov rcx, qword [rbp + 0x1b0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002f76
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003266
call fcn.14000463c
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 7
jbe 0x140002fc1
mov rcx, qword [rbp + 0x1d0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002fbc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003266
call fcn.14000463c
mov rdx, qword [rbp + 0x208]
cmp rdx, 7
jbe 0x140003007
mov rcx, qword [rbp + 0x1f0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003002
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003266
call fcn.14000463c
mov rdx, qword [rbp + 0x228]
cmp rdx, 7
jbe 0x14000304d
mov rcx, qword [rbp + 0x210]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003048
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003266
call fcn.14000463c
mov rdx, qword [rbp + 0x248]
cmp rdx, 7
jbe 0x140003093
mov rcx, qword [rbp + 0x230]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000308e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003266
call fcn.14000463c
mov rdx, qword [rbp + 0x268]
cmp rdx, 7
jbe 0x1400030d9
mov rcx, qword [rbp + 0x250]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400030d4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003266
call fcn.14000463c
mov rdx, qword [rbp + 0x288]
cmp rdx, 7
jbe 0x14000311f
mov rcx, qword [rbp + 0x270]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000311a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003266
call fcn.14000463c
mov rdx, qword [rbp + 0x2a8]
cmp rdx, 7
jbe 0x140003165
mov rcx, qword [rbp + 0x290]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003160
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003266
call fcn.14000463c
mov rdx, qword [rbp + 0x2c8]
cmp rdx, 7
jbe 0x1400031ab
mov rcx, qword [rbp + 0x2b0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400031a6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003266
call fcn.14000463c
mov rdx, qword [rbp + 0x2e8]
cmp rdx, 7
jbe 0x1400031ed
mov rcx, qword [rbp + 0x2d0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400031e8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003266
call fcn.14000463c
mov rdx, qword [rbp + 0x308]
cmp rdx, 7
jbe 0x14000322f
mov rcx, qword [rbp + 0x2f0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000322a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003266
call fcn.14000463c
mov rdx, qword [rbp - 0x38]
cmp rdx, 7
jbe 0x140003272
mov rcx, qword [rbp - 0x50]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000326d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000326d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000463c
mov r12, qword [rsp + 0x660]
xor eax, eax
mov rdi, qword [rsp + 0x658]
mov rsi, qword [rsp + 0x650]
mov r15, qword [rsp + 0x668]
mov rcx, qword [rbp + 0x520]
xor rcx, rsp
call fcn.1400043a0
add rsp, 0x630
pop r14
pop rbx
pop rbp
ret
call fcn.1400011e0
int3
call fcn.140001140
int3