Function at 0x1400409a0
Capabilities:
Create process on windows
Resume thread
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x578
movaps xmmword [rsp + 0x560], xmm7
movaps xmmword [rsp + 0x550], xmm6
mov r14, r9
mov rdi, r8
mov rsi, rdx
mov rbp, rcx
mov r12, qword [rsp + 0x5f0]
mov rax, qword [0x14019ac40]
xor rax, rsp
mov qword [rsp + 0x548], rax
mov word [rsp + 0x290], 0x105
mov qword [rsp + 0x280], rdx
lea rcx, [rsp + 0x280]
call fcn.140037b00
test al, al
je 0x140040b34
lea r15, [rsp + 0x508]
mov qword [rsp + 0x4f0], r15
movaps xmm0, xmmword [0x14016ea30]
movups xmmword [rsp + 0x4f8], xmm0
mov word [rsp + 0x290], 0x105
mov qword [rsp + 0x280], rsi
lea rcx, [rsp + 0x190]
lea rdx, [rsp + 0x280]
xor r8d, r8d
call fcn.1400378e0
cmp dword [rsp + 0x190], 0
je 0x140040aa4
mov word [rsp + 0x290], 0x305
mov qword [rsp + 0x280], rsi
lea rax, str..exe
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x280]
lea rdx, [rsp + 0x4f0]
call fcn.140040450
movups xmm0, xmmword [rsp + 0x4f0]
movups xmmword [rsi], xmm0
movdqu xmm0, xmmword [rdi]
movdqa xmmword [rsp + 0x180], xmm0
lea rdi, [rsp + 0x4c8]
lea rdx, [rsp + 0x180]
mov rcx, rdi
call fcn.140043150
mov bl, byte [rsp + 0x4e8]
test bl, 1
jne 0x140040b64
mov eax, dword [0x14019c710]
mov ecx, dword [0x14019dd7c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 0x14]
jle 0x140040c10
lea rcx, [0x14019c710]
call fcn.14016a3dc
cmp dword [0x14019c710], 0xffffffff
jne 0x140040c10
lea rcx, [0x140044060]
call fcn.14016a724
lea rcx, [0x14019c710]
call fcn.14016a37c
jmp 0x140040c10
test r12, r12
je 0x140040c5a
cmp qword [r12 + 0x18], 0x16
jae 0x140040caa
lea r9, str.program_not_executable
mov edx, 0x16
mov rcx, r12
call fcn.1400058f0
xor esi, esi
jmp 0x140041b78
mov ecx, dword [rsp + 0x4c8]
test ecx, ecx
je 0x140040c10
call qword [sym.imp.KERNEL32.dll_SetLastError]
movdqa xmm0, xmmword [0x14016c7a0]
movdqu xmmword [rsp + 0x290], xmm0
mov byte [rsp + 0x280], 0
lea r9, str.Unable_to_convert_command_line_to_UTF_16
lea rsi, [rsp + 0x280]
mov edx, 0x28
mov rcx, rsi
call fcn.1400058f0
mov rcx, r12
mov rdx, rsi
call fcn.1400428e0
mov rax, qword [rsp + 0x298]
cmp rax, 0x10
jb 0x140040c00
mov rcx, qword [rsp + 0x280]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140040bfb
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x140041bae
add rax, 0x28
mov rdx, rax
mov rcx, rbp
call fcn.14016a23c
xor esi, esi
test bl, 1
je 0x140041b0f
jmp 0x140041b65
mov qword [rsp + 0x58], rbp
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x4b0], xmm0
mov rbp, qword [rsp + 0x4d8]
cmp qword [rsp + 0x4e0], 7
jbe 0x140040c3d
mov rdi, qword [rsp + 0x4c8]
cmp rbp, 7
ja 0x140040c61
movdqu xmm0, xmmword [rdi]
movdqa xmmword [rsp + 0x4a0], xmm0
mov ebx, 7
jmp 0x140040d03
xor esi, esi
jmp 0x140041b78
movabs rax, 0x7ffffffffffffffe
mov rbx, rbp
or rbx, 7
cmp rbx, rax
cmovae rbx, rax
lea rcx, [rbx + rbx]
cmp rbx, 0x7ff
jb 0x140040cdc
add rax, 0xffffffffffffffee
cmp rbx, rax
jae 0x140041bb4
add rcx, 0x29
call fcn.14016a7a4
lea rcx, [rax + 0x27]
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x140040ce8
mov rax, qword [r12]
mov qword [r12 + 0x10], 0x16
movabs rcx, 0x656c626174756365
mov qword [rax + 0xe], rcx
movdqu xmm0, xmmword [str.program_not_executable]
movdqu xmmword [rax], xmm0
mov byte [rax + 0x16], 0
xor esi, esi
jmp 0x140041b78
add rcx, 2
call fcn.14016a7a4
mov rcx, rax
mov qword [rsp + 0x4a0], rcx
lea r8, [rbp + 2]
add r8, rbp
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x4b0], rbp
mov qword [rsp + 0x4b8], rbx
xorps xmm6, xmm6
movaps xmmword [rsp + 0x160], xmm6
mov qword [rsp + 0x170], 0
cmp byte [r14 + 0x10], 0
je 0x140040f88
mov r13, qword [r14 + 8]
test r13, r13
je 0x140040e6c
mov qword [rsp + 0x50], rsi
mov r15, qword [r14]
lea r12, [rsp + 0x298]
shl r13, 4
xor r14d, r14d
movaps xmm7, xmmword [0x14016f070]
lea rsi, [rsp + 0x260]
lea rbx, [rsp + 0x150]
lea rdi, [rsp + 0x280]
lea rbp, [rsp + 0x160]
jmp 0x140040d9d
add r14, 0x10
cmp r13, r14
je 0x140040f2f
movdqu xmm0, xmmword [r15 + r14]
movdqa xmmword [rsp + 0xe0], xmm0
mov qword [rsp + 0x280], r12
movups xmmword [rsp + 0x288], xmm7
movdqa xmmword [rsp + 0x150], xmm0
mov rcx, rsi
mov rdx, rbx
mov r8, rdi
call fcn.140036220
mov ecx, dword [rsp + 0x260]
test ecx, ecx
jne 0x140040e7d
mov r8, qword [rsp + 0x280]
mov rax, qword [rsp + 0x288]
lea r9, [r8 + rax*2]
mov rdx, qword [rsp + 0x168]
mov rcx, rbp
call fcn.14003aac0
mov word [rsp + 0x190], 0
mov rdx, qword [rsp + 0x168]
cmp rdx, qword [rsp + 0x170]
je 0x140040e40
mov word [rdx], 0
add qword [rsp + 0x168], 2
jmp 0x140040e50
mov rcx, rbp
lea r8, [rsp + 0x190]
call fcn.140027520
mov rcx, qword [rsp + 0x280]
cmp rcx, r12
je 0x140040d90
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x140040d90
mov word [rsp + 0x280], 0
xor edx, edx
jmp 0x140040f73
call qword [sym.imp.KERNEL32.dll_SetLastError]
movaps xmm0, xmmword [0x14016c7a0]
movups xmmword [rsp + 0x1a0], xmm0
mov byte [rsp + 0x190], 0
lea r9, str.Unable_to_convert_environment_variable_to_UTF_16
lea rsi, [rsp + 0x190]
mov edx, 0x30
mov rcx, rsi
call fcn.1400058f0
mov rcx, qword [rsp + 0x5f0]
mov rdx, rsi
call fcn.1400428e0
mov rax, qword [rsp + 0x1a8]
cmp rax, 0x10
jb 0x140040f0d
mov rcx, qword [rsp + 0x190]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140040f08
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x140041bae
add rax, 0x28
mov rdx, rax
mov rcx, rbp
call fcn.14016a23c
mov rcx, qword [rsp + 0x280]
cmp rcx, r12
je 0x140040f20
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor esi, esi
lea r15, [rsp + 0x508]
jmp 0x140041a73
mov rax, qword [rsp + 0x168]
mov rdx, qword [rsp + 0x170]
mov word [rsp + 0x280], 0
cmp rax, rdx
lea r15, [rsp + 0x508]
mov r12, qword [rsp + 0x5f0]
mov rsi, qword [rsp + 0x50]
je 0x140040f73
mov word [rax], 0
add qword [rsp + 0x168], 2
jmp 0x140040f88
lea rcx, [rsp + 0x160]
lea r8, [rsp + 0x280]
call fcn.140027520
mov rdi, qword [rsp + 0x5e0]
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0x120], xmm6
movaps xmmword [rsp + 0x110], xmm6
movaps xmmword [rsp + 0x100], xmm6
movaps xmmword [rsp + 0xf0], xmm6
mov dword [rsp + 0xe0], 0x68
pcmpeqd xmm0, xmm0
movdqa xmmword [rsp + 0x130], xmm0
mov qword [rsp + 0x140], 0xffffffffffffffff
cmp qword [rdi + 8], 0
je 0x1400410ec
mov dword [rsp + 0x11c], 0x100
mov rax, qword [rdi]
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0xd0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0xc0], xmm0
lea rcx, [rsp + 0xc0]
xor edx, edx
mov r8, r12
call fcn.140043a30
mov qword [rsp + 0x130], rax
cmp rax, 0xffffffffffffffff
je 0x14004121e
mov rax, qword [rdi]
mov rcx, qword [rax + 0x28]
mov qword [rsp + 0xb0], rcx
movdqu xmm0, xmmword [rax + 0x18]
movdqa xmmword [rsp + 0xa0], xmm0
lea rcx, [rsp + 0xa0]
mov edx, 1
mov r8, r12
call fcn.140043a30
mov qword [rsp + 0x138], rax
cmp rax, 0xffffffffffffffff
je 0x140041282
mov rdi, qword [rdi]
cmp byte [rdi + 0x28], 0
je 0x1400410ab
cmp byte [rdi + 0x40], 0
je 0x1400410ab
mov r8, qword [rdi + 0x38]
cmp qword [rdi + 0x20], r8
jne 0x1400410ab
test r8, r8
je 0x140041707
mov rdx, qword [rdi + 0x30]
mov rcx, qword [rdi + 0x18]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140041707
mov rax, qword [rdi + 0x40]
mov qword [rsp + 0x90], rax
movdqu xmm0, xmmword [rdi + 0x30]
movdqa xmmword [rsp + 0x80], xmm0
lea rcx, [rsp + 0x80]
mov edx, 2
mov r8, r12
call fcn.140043a30
mov qword [rsp + 0x140], rax
cmp rax, 0xffffffffffffffff
je 0x140041303
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], 0
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 1
call rbx
mov rdi, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, rax
call rdi
mov ecx, 2
call rbx
mov rcx, rax
call rdi
lea rbx, [rsp + 0x298]
mov qword [rsp + 0x280], rbx
movdqa xmm0, xmmword [0x14016f070]
movdqu xmmword [rsp + 0x288], xmm0
mov word [rsp + 0x1a0], 0x105
mov qword [rsp + 0x190], rsi
lea rcx, [rsp + 0x260]
lea rdx, [rsp + 0x190]
lea r8, [rsp + 0x280]
mov r9d, 0x104
call fcn.140035ea0
mov ecx, dword [rsp + 0x260]
test ecx, ecx
je 0x140041250
call qword [sym.imp.KERNEL32.dll_SetLastError]
movdqa xmm0, xmmword [0x14016c7a0]
movdqu xmmword [rsp + 0x1a0], xmm0
mov byte [rsp + 0x190], 0
lea r9, str.Unable_to_convert_application_name_to_UTF_16
lea rsi, [rsp + 0x190]
mov edx, 0x2c
mov rcx, rsi
call fcn.1400058f0
mov rcx, r12
mov rdx, rsi
call fcn.1400428e0
mov rax, qword [rsp + 0x1a8]
cmp rax, 0x10
jb 0x140041217
mov rcx, qword [rsp + 0x190]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140041212
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x140041bae
add rax, 0x28
mov rdx, rax
mov rcx, rbp
call fcn.14016a23c
xor esi, esi
jmp 0x140041a60
movdqa xmm0, xmmword [0x14016c7a0]
movdqu xmmword [rsp + 0x290], xmm0
mov byte [rsp + 0x280], 0
lea r9, str.cant_redirect_stdin
lea rsi, [rsp + 0x280]
mov edx, 0x14
jmp 0x14004134b
xor r14d, r14d
cmp qword [rsp + 0x5f8], 0
setne bl
mov rbp, qword [rsp + 0x4b0]
mov rdi, rbp
inc rdi
jne 0x1400412b5
mov r13, rsi
xor ecx, ecx
mov r8, 0xffffffffffffffff
xor eax, eax
jmp 0x1400413db
mov rcx, qword [rsp + 0x130]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movdqa xmm0, xmmword [0x14016c7a0]
movdqu xmmword [rsp + 0x290], xmm0
mov byte [rsp + 0x280], 0
lea r9, str.cant_redirect_stdout
jmp 0x14004133e
test rdi, rdi
js 0x140041bb9
lea rcx, [rdi + rdi]
cmp rdi, 0x800
jb 0x1400413ac
movabs rax, 0x7ffffffffffffffe
add rax, 0xffffffffffffffef
cmp rdi, rax
jae 0x140041bb4
mov r13, rsi
add rcx, 0x27
call fcn.14016a7a4
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1400413b7
mov rcx, qword [rsp + 0x130]
mov rsi, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rsi
mov rcx, qword [rsp + 0x138]
call rsi
movdqa xmm0, xmmword [0x14016c7a0]
movdqu xmmword [rsp + 0x290], xmm0
mov byte [rsp + 0x280], 0
lea r9, str.cant_redirect_stderr
lea rsi, [rsp + 0x280]
mov edx, 0x15
mov rcx, rsi
call fcn.1400058f0
mov rcx, r12
mov rdx, rsi
call fcn.1400428e0
mov rax, qword [rsp + 0x298]
cmp rax, 0x10
jb 0x1400413a5
mov rcx, qword [rsp + 0x280]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x1400413a0
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x140041bae
add rax, 0x28
mov rdx, rax
mov rcx, rbp
call fcn.14016a23c
xor esi, esi
jmp 0x140041a73
mov r13, rsi
call fcn.14016a7a4
mov rsi, rax
lea r8, [rbp + 2]
add r8, rbp
mov rcx, rsi
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rax, rsi
lea rcx, [rsi + rdi*2]
mov r8, qword [rsp + 0x4b0]
mov qword [rsp + 0x50], rcx
mov r14b, bl
lea esi, [r14*4 + 0x400]
cmp qword [rsp + 0x4b8], 7
mov rbp, qword [rsp + 0x58]
jbe 0x140041405
mov rdx, qword [rsp + 0x4a0]
jmp 0x14004140d
lea rdx, [rsp + 0x4a0]
mov r14, rax
add r8, r8
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov rax, qword [rsp + 0x160]
xor ecx, ecx
cmp rax, qword [rsp + 0x168]
cmove rax, rcx
mov rcx, qword [rsp + 0x280]
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x48], rdx
lea rdx, [rsp + 0xe0]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x20], 1
mov rdx, r14
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov rcx, qword [rsp + 0x130]
mov rbx, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rbx
mov rcx, qword [rsp + 0x138]
call rbx
mov rcx, qword [rsp + 0x140]
call rbx
test edi, edi
je 0x14004165b
mov esi, dword [rsp + 0x5e8]
mov eax, dword [rsp + 0x70]
mov dword [rbp], eax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 8], rax
mov rdi, qword [rsp + 0x68]
test esi, esi
je 0x1400416aa
xor ecx, ecx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateJobObjectW]
mov rbp, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rbp, 0xffffffffffffffff
lea rbx, [rsp + 0x298]
je 0x14004159f
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x1a0], xmm0
movdqa xmmword [rsp + 0x200], xmm0
movdqa xmmword [rsp + 0x210], xmm0
movdqa xmmword [rsp + 0x1f0], xmm0
movdqa xmmword [rsp + 0x1e0], xmm0
movdqa xmmword [rsp + 0x1d0], xmm0
movdqa xmmword [rsp + 0x1c0], xmm0
movdqa xmmword [rsp + 0x1b0], xmm0
movdqa xmmword [rsp + 0x190], xmm0
mov dword [rsp + 0x1a0], 0x100
mov eax, esi
shl rax, 0x14
mov qword [rsp + 0x200], rax
lea r8, [rsp + 0x190]
mov rcx, rbp
mov edx, 9
mov r9d, 0x90
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
test eax, eax
je 0x14004159f
mov rdx, qword [rsp + 0x60]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
test eax, eax
jne 0x1400416b4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
movdqa xmm0, xmmword [0x14016c7a0]
movdqu xmmword [rsp + 0x1a0], xmm0
mov byte [rsp + 0x190], 0
lea r9, str.Unable_to_set_memory_limit
lea rsi, [rsp + 0x190]
mov edx, 0x1a
mov rcx, rsi
call fcn.1400058f0
mov rcx, r12
mov rdx, rsi
call fcn.1400428e0
mov rax, qword [rsp + 0x1a8]
cmp rax, 0x10
jb 0x140041634
mov rcx, qword [rsp + 0x190]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14004162f
mov rsi, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rsi
cmp rcx, 0x20
jae 0x140041bae
add rax, 0x28
mov rdx, rax
mov rcx, rsi
call fcn.14016a23c
mov rcx, qword [rsp + 0x60]
mov edx, 1
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, qword [rsp + 0x60]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
xor esi, esi
jmp 0x1400416e0
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r9, qword [r13]
test r9, r9
je 0x1400417a4
mov rsi, qword [r13 + 8]
movaps xmm0, xmmword [0x14016c7a0]
movups xmmword [rsp + 0x250], xmm0
mov byte [rsp + 0x240], 0
cmp rsi, 0xf
jbe 0x1400417bd
lea rcx, [rsp + 0x240]
mov rdx, rsi
call fcn.1400058f0
jmp 0x1400417e0
xor ebp, ebp
lea rbx, [rsp + 0x298]
mov sil, 1
mov rax, qword [rsp + 0x5f8]
test rax, rax
je 0x1400416e0
mov rax, qword [rax]
mov rdx, qword [rax]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_SetProcessAffinityMask]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
cmp rbp, 0xffffffffffffffff
je 0x1400416ef
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, 0xffffffffffffffff
je 0x140041a26
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140041a26
lea r14, [rsp + 0x140]
mov rbp, qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
call rbp
mov rdi, rax
mov rbx, qword [rsp + 0x138]
call rbp
mov dword [rsp + 0x30], 2
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0
mov rcx, rax
mov rdx, rbx
mov r8, rdi
mov r9, r14
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
jne 0x1400410ec
mov rcx, qword [rsp + 0x130]
mov rsi, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rsi
mov rcx, qword [rsp + 0x138]
call rsi
movdqa xmm0, xmmword [0x14016c7a0]
movdqu xmmword [rsp + 0x290], xmm0
mov byte [rsp + 0x280], 0
lea r9, str.cant_dup_stderr_to_stdout
lea rsi, [rsp + 0x280]
mov edx, 0x1a
jmp 0x14004134b
movaps xmm0, xmmword [0x14016c7a0]
movups xmmword [rsp + 0x250], xmm0
mov byte [rsp + 0x240], 0
jmp 0x1400417e0
mov qword [rsp + 0x250], rsi
lea rcx, [rsp + 0x240]
mov rdx, r9
mov r8, rsi
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + rsi + 0x240], 0
lea rbx, [rsp + 0x298]
movaps xmm6, xmmword [0x14016c7a0]
movups xmmword [rsp + 0x230], xmm6
mov byte [rsp + 0x220], 0
lea r9, str.Couldnt_execute_program_
lea rdi, [rsp + 0x220]
mov edx, 0x1a
mov rcx, rdi
call fcn.1400058f0
lea rsi, [rsp + 0x260]
lea r9, [rsp + 0x240]
mov rcx, rsi
mov r8, rdi
call fcn.140022610
mov rdx, qword [rsp + 0x270]
mov rax, qword [rsp + 0x278]
cmp rax, rdx
jne 0x14004187a
mov qword [rsp + 0x20], 1
lea r9, [0x14016d780]
lea rcx, [rsp + 0x260]
mov edx, 1
call fcn.1400078e0
mov rsi, rax
add rax, 0x18
lea rcx, [rsi + 0x10]
jmp 0x1400418ae
lea rcx, [rdx + 1]
mov qword [rsp + 0x270], rcx
mov rbp, rsi
cmp rax, 0xf
jbe 0x140041897
mov rbp, qword [rsp + 0x260]
lea rax, [rsp + 0x278]
lea rcx, [rsp + 0x270]
mov word [rbp + rdx], 0x27
movdqu xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x1a0], xmm1
movdqa xmmword [rsp + 0x190], xmm0
mov qword [rcx], 0
mov qword [rax], 0xf
mov byte [rsi], 0
lea rdx, [rsp + 0x190]
mov rcx, r12
call fcn.1400428e0
mov rax, qword [rsp + 0x1a8]
cmp rax, 0x10
jb 0x14004192f
mov rcx, qword [rsp + 0x190]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14004192a
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x140041bae
add rax, 0x28
mov rdx, rax
mov rcx, rbp
call fcn.14016a23c
movaps xmmword [rsp + 0x1a0], xmm6
mov byte [rsp + 0x190], 0
mov rax, qword [rsp + 0x278]
cmp rax, 0x10
jb 0x140041986
mov rcx, qword [rsp + 0x260]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140041981
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x140041bae
add rax, 0x28
mov rdx, rax
mov rcx, rbp
call fcn.14016a23c
movups xmmword [rsp + 0x270], xmm6
mov byte [rsp + 0x260], 0
mov rax, qword [rsp + 0x238]
cmp rax, 0x10
jb 0x1400419dd
mov rcx, qword [rsp + 0x220]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x1400419d8
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x140041bae
add rax, 0x28
mov rdx, rax
mov rcx, rbp
call fcn.14016a23c
mov rax, qword [rsp + 0x258]
cmp rax, 0x10
jb 0x140041a24
mov rcx, qword [rsp + 0x240]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140041a1f
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x140041bae
add rax, 0x28
mov rdx, rax
mov rcx, rbp
call fcn.14016a23c
xor esi, esi
test r14, r14
mov rdx, qword [rsp + 0x50]
je 0x140041a60
sub rdx, r14
cmp rdx, 0x1000
jb 0x140041a58
mov rax, qword [r14 - 8]
add r14, 0xfffffffffffffff8
sub r14, rax
cmp r14, 0x20
jae 0x140041bae
add rdx, 0x27
mov r14, rax
mov rcx, r14
call fcn.14016a23c
mov rcx, qword [rsp + 0x280]
cmp rcx, rbx
je 0x140041a73
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rsp + 0x160]
test rcx, rcx
je 0x140041ab5
mov rdx, qword [rsp + 0x170]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140041ab0
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x140041bae
add rdx, 0x27
mov rcx, rax
call fcn.14016a23c
mov rax, qword [rsp + 0x4b8]
cmp rax, 8
jb 0x140041b03
mov rcx, qword [rsp + 0x4a0]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x140041afe
mov rdx, rcx
add rdx, 0xfffffffffffffff8
mov rcx, qword [rcx - 8]
sub rdx, rcx
cmp rdx, 0x20
jae 0x140041bae
add rax, rax
add rax, 0x29
mov rdx, rax
call fcn.14016a23c
mov bl, byte [rsp + 0x4e8]
test bl, 1
jne 0x140041b65
mov rax, qword [rsp + 0x4e0]
cmp rax, 8
jb 0x140041b59
mov rcx, qword [rsp + 0x4c8]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x140041b54
mov rdx, rcx
add rdx, 0xfffffffffffffff8
mov rcx, qword [rcx - 8]
sub rdx, rcx
cmp rdx, 0x20
jae 0x140041bae
add rax, rax
add rax, 0x29
mov rdx, rax
call fcn.14016a23c
mov qword [rsp + 0x4d8], 0
mov rcx, qword [rsp + 0x4f0]
cmp rcx, r15
je 0x140041b78
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rsp + 0x548]
xor rcx, rsp
call fcn.14016a260
mov eax, esi
movaps xmm6, xmmword [rsp + 0x550]
movaps xmm7, xmmword [rsp + 0x560]
add rsp, 0x578
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
call fcn.140005280
call fcn.140027500
int3