Function at 0x140053b00
Capabilities:
Create thread
Inject thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x780]
sub rsp, 0x880
mov rax, qword [0x14011d040]
xor rax, rsp
mov qword [rbp + 0x770], rax
xor r12d, r12d
mov ebx, r12d
mov dword [rsp + 0x40], ebx
lea rdi, [0x140120288]
cmp qword [0x1401202a0], 7
cmova rdi, qword [0x140120288]
mov rsi, qword [0x140120298]
lea r14, str.non_zero_size_null_string_view
lea r15, [0x1401062b4]
test rsi, rsi
je 0x140053bc5
test rdi, rdi
jne 0x140053bc5
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov r8d, 0x4b9
lea rdx, [0x14010bce0]
lea ecx, [rdi + 2]
call fcn.140094790
cmp eax, 1
jne 0x140053ba0
int3
mov qword [rsp + 0x20], r12
mov r9d, 0x4b9
lea r8, str.C:Program_FilesMicrosoft_Visual_Studio2022CommunityVCToolsMSVC14.39.33519includexstring
lea rdx, [0x14010bc64]
lea rcx, str._non_zero_size_null_string_view_
call fcn.140094d90
mov qword [rbp + 0x128], r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
mov qword [rbp + 0x140], r12
mov qword [rbp + 0x148], r12
mov r8, rsi
mov rdx, rdi
lea rcx, [rbp + 0x128]
call fcn.14004da20
or ebx, 0x30
mov dword [rsp + 0x40], ebx
mov r8d, 3
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0x3c0]
call fcn.14004d940
movsd xmm0, qword [rax]
movsd qword [rbp + 0x488], xmm0
mov ecx, dword [rax + 8]
mov dword [rbp + 0x310], ecx
lea rdx, [0x14011dcf0]
mov qword [rbp + 0x318], rdx
movaps xmm0, xmmword [rbp + 0x310]
movdqa xmmword [rbp + 0x540], xmm0
mov eax, dword [rbp + 0x488]
test eax, eax
je 0x140053d4a
cmp eax, 1
sete dil
lea rcx, [rbp + 0x128]
call fcn.14004c5f0
mov r8, qword [rbp + 0x148]
cmp r8, 7
jbe 0x140053c89
mov rdx, qword [rbp + 0x130]
lea rcx, [rbp + 0x128]
call fcn.14004f190
movdqa xmm0, xmmword [0x140110cc0]
movdqu xmmword [rbp + 0x140], xmm0
mov word [rbp + 0x130], r12w
mov rcx, qword [rbp + 0x128]
mov qword [rbp + 0x128], r12
mov edx, 0x10
call fcn.1400650c0
test dil, dil
je 0x140053d5a
mov qword [rbp + 0x10], r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r12
mov qword [rbp + 0x30], r12
mov r8d, 0x15
lea rdx, str.ImAuto.dll_not_found_
lea rcx, [rbp + 0x10]
call fcn.14004f650
nop
lea rdx, [rbp + 0x18]
cmp qword [rbp + 0x30], 0xf
cmova rdx, qword [rbp + 0x18]
mov r8, qword [rbp + 0x28]
call fcn.140055cf0
mov dword [0x14011dcc8], 0xe60000ff
lea rcx, [rbp + 0x10]
call fcn.14004c5f0
mov r8, qword [rbp + 0x30]
cmp r8, 0xf
jbe 0x140053d2d
mov rdx, qword [rbp + 0x18]
lea rcx, [rbp + 0x10]
call fcn.14004f270
mov qword [rbp + 0x28], r12
mov qword [rbp + 0x30], 0xf
mov byte [rbp + 0x18], 0
mov rcx, qword [rbp + 0x10]
mov qword [rbp + 0x10], r12
jmp 0x140055598
mov dil, 1
test ecx, ecx
jne 0x1400555d2
jmp 0x140053c5d
mov eax, dword [0x14012017c]
test eax, eax
jne 0x140053e02
mov qword [rbp + 0x218], r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x230], xmm1
lea r8d, [rax + 0x16]
lea rdx, str.QtWebEngineProcess.exe
lea rcx, [rbp + 0x218]
call fcn.14004da20
nop
lea rcx, [rbp + 0x218]
call fcn.1400639f0
mov r13d, eax
lea rcx, [rbp + 0x218]
call fcn.14004c5f0
mov r8, qword [rbp + 0x238]
cmp r8, 7
jbe 0x140053dd7
mov rdx, qword [rbp + 0x220]
lea rcx, [rbp + 0x218]
call fcn.14004f190
movdqa xmm0, xmmword [0x140110cc0]
movdqu xmmword [rbp + 0x230], xmm0
mov word [rbp + 0x220], r12w
mov rcx, qword [rbp + 0x218]
mov qword [rbp + 0x218], r12
jmp 0x140053ea0
cmp eax, 1
jne 0x140055503
mov qword [rbp + 0x1f0], r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x208], xmm1
lea r8d, [rax + 0x1d]
lea rdx, str.CefSharp.BrowserSubprocess.exe
lea rcx, [rbp + 0x1f0]
call fcn.14004da20
nop
lea rcx, [rbp + 0x1f0]
call fcn.1400639f0
mov r13d, eax
lea rcx, [rbp + 0x1f0]
call fcn.14004c5f0
mov r8, qword [rbp + 0x210]
cmp r8, 7
jbe 0x140053e7a
mov rdx, qword [rbp + 0x1f8]
lea rcx, [rbp + 0x1f0]
call fcn.14004f190
movdqa xmm0, xmmword [0x140110cc0]
movdqu xmmword [rbp + 0x208], xmm0
mov word [rbp + 0x1f8], r12w
mov rcx, qword [rbp + 0x1f0]
mov qword [rbp + 0x1f0], r12
mov edx, 0x10
call fcn.1400650c0
test r13d, r13d
je 0x140055503
mov r8d, r13d
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
jne 0x140053f2e
mov qword [rbp + 0x410], r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x418], xmm0
mov qword [rbp + 0x428], r12
mov qword [rbp + 0x430], r12
lea ecx, [rax + 0x10]
call fcn.140065190
mov qword [rax + 8], r12
mov qword [rbp + 0x410], rax
lea rcx, [rbp + 0x410]
mov qword [rax], rcx
mov rdi, r12
mov qword [rbp + 0x428], r12
mov eax, 7
mov qword [rbp + 0x430], rax
mov word [rbp + 0x418], r12w
mov ebx, dword [rsp + 0x40]
jmp 0x140054020
mov dword [rbp + 0x400], 0x104
lea r9, [rbp + 0x400]
lea r8, [rbp + 0x560]
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_QueryFullProcessImageNameW]
mov rcx, rdi
test eax, eax
jne 0x140053fc1
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov qword [rbp + 0x410], r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x418], xmm0
mov qword [rbp + 0x428], r12
mov qword [rbp + 0x430], r12
mov ecx, 0x10
call fcn.140065190
mov qword [rax + 8], r12
mov qword [rbp + 0x410], rax
lea rcx, [rbp + 0x410]
mov qword [rax], rcx
mov rdi, r12
mov qword [rbp + 0x428], r12
mov eax, 7
mov qword [rbp + 0x430], rax
mov word [rbp + 0x418], r12w
mov ebx, dword [rsp + 0x40]
jmp 0x140054020
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp + 0x410], r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x418], xmm0
mov qword [rbp + 0x428], r12
mov qword [rbp + 0x430], r12
lea rax, [rbp + 0x560]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x140053ff4
lea rdx, [rbp + 0x560]
lea rcx, [rbp + 0x410]
call fcn.14004da20
mov rax, qword [rbp + 0x430]
mov rdi, qword [rbp + 0x428]
or ebx, 0x40
test rdi, rdi
jne 0x1400540b2
mov qword [rbp - 0x18], r12
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], r12
mov qword [rbp + 8], r12
lea r8d, [rdi + 0x19]
lea rdx, str.Target_process_not_found.
lea rcx, [rbp - 0x18]
call fcn.14004f650
nop
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 0xf
cmova rdx, qword [rbp - 0x10]
mov r8, qword [rbp]
call fcn.140055cf0
mov dword [0x14011dcc8], 0xe60000ff
lea rcx, [rbp - 0x18]
call fcn.14004c5f0
mov r8, qword [rbp + 8]
cmp r8, 0xf
jbe 0x140054095
mov rdx, qword [rbp - 0x10]
lea rcx, [rbp - 0x18]
call fcn.14004f270
mov qword [rbp], r12
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
mov rcx, qword [rbp - 0x18]
mov qword [rbp - 0x18], r12
jmp 0x14005549f
lea rsi, [rbp + 0x418]
cmp rax, 7
cmova rsi, qword [rbp + 0x418]
test rsi, rsi
jne 0x140054117
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov r8d, 0x4b9
lea rdx, [0x14010bce0]
lea ecx, [rsi + 2]
call fcn.140094790
cmp eax, 1
jne 0x1400540f2
int3
mov qword [rsp + 0x20], r12
mov r9d, 0x4b9
lea r8, str.C:Program_FilesMicrosoft_Visual_Studio2022CommunityVCToolsMSVC14.39.33519includexstring
lea rdx, [0x14010bc64]
lea rcx, str._non_zero_size_null_string_view_
call fcn.140094d90
mov qword [rbp + 0x498], r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x4a0], xmm0
mov qword [rbp + 0x4b0], r12
mov qword [rbp + 0x4b8], r12
mov r8, rdi
mov rdx, rsi
lea rcx, [rbp + 0x498]
call fcn.14004da20
or ebx, 0x180
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0x498]
call fcn.140051af0
nop
mov rdx, rax
lea rcx, [rbp + 0x4c0]
call fcn.14004ed40
bts ebx, 9
mov dword [rsp + 0x40], ebx
lea rcx, [rbp + 0x240]
call fcn.14004c5f0
mov r8, qword [rbp + 0x260]
cmp r8, 7
jbe 0x1400541a5
mov rdx, qword [rbp + 0x248]
lea rcx, [rbp + 0x240]
call fcn.14004f190
movdqa xmm0, xmmword [0x140110cc0]
movdqu xmmword [rbp + 0x258], xmm0
mov word [rbp + 0x248], r12w
mov rcx, qword [rbp + 0x240]
mov qword [rbp + 0x240], r12
mov edx, 0x10
call fcn.1400650c0
lea rdx, [rbp + 0x4c0]
lea rcx, [rbp + 0x3d0]
call fcn.140057d80
mov qword [rbp + 0x270], 1
mov qword [rbp + 0x278], rax
lea rax, str.libcurl.dll
mov qword [rbp + 0x280], rax
mov qword [rbp + 0x288], 0xe
movaps xmm0, xmmword [rbp + 0x270]
movdqa xmmword [rbp + 0x350], xmm0
movaps xmm1, xmmword [rbp + 0x280]
movdqa xmmword [rbp + 0x340], xmm1
lea r8, [rbp + 0x350]
lea rdx, [rbp + 0x340]
lea rcx, [rbp + 0x460]
call fcn.140058e40
nop
lea rdx, [rbp + 0x4c0]
lea rcx, [rbp + 0x3e8]
call fcn.140057d80
mov qword [rbp + 0x290], 1
mov qword [rbp + 0x298], rax
lea rax, str.zlib1.dll
mov qword [rbp + 0x2a0], rax
mov qword [rbp + 0x2a8], 0xc
movaps xmm0, xmmword [rbp + 0x290]
movdqa xmmword [rbp + 0x330], xmm0
movaps xmm1, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp + 0x320], xmm1
lea r8, [rbp + 0x330]
lea rdx, [rbp + 0x320]
lea rcx, [rbp + 0x438]
call fcn.140058e40
or ebx, 0xc00
lea r12, [0x140120260]
mov rdi, r12
cmp qword [0x140120278], 7
cmova rdi, qword [0x140120260]
mov rsi, qword [0x140120270]
test rsi, rsi
je 0x140054345
test rdi, rdi
jne 0x140054345
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov r8d, 0x4b9
lea rdx, [0x14010bce0]
lea ecx, [rdi + 2]
call fcn.140094790
cmp eax, 1
jne 0x14005431b
int3
xor r14d, r14d
mov qword [rsp + 0x20], r14
mov r9d, 0x4b9
lea r8, str.C:Program_FilesMicrosoft_Visual_Studio2022CommunityVCToolsMSVC14.39.33519includexstring
lea rdx, [0x14010bc64]
lea rcx, str._non_zero_size_null_string_view_
call fcn.140094d90
jmp 0x140054348
xor r14d, r14d
mov qword [rbp + 0xd8], r14
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], r14
mov qword [rbp + 0xf8], r14
mov r8, rsi
mov rdx, rdi
lea rcx, [rbp + 0xd8]
call fcn.14004da20
or ebx, 0x3000
or ebx, 1
mov dword [rsp + 0x40], ebx
mov r8d, 3
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x3a0]
call fcn.14004d940
movsd xmm0, qword [rax]
movsd qword [rbp + 0x400], xmm0
mov edx, dword [rax + 8]
mov dword [rbp + 0x2b0], edx
lea r8, [0x14011dcf0]
mov qword [rbp + 0x2b8], r8
movaps xmm0, xmmword [rbp + 0x2b0]
movdqa xmmword [rbp + 0x530], xmm0
mov eax, dword [rbp + 0x400]
test eax, eax
je 0x140054521
cmp eax, 1
setne cl
mov esi, ebx
mov edi, ebx
mov eax, ebx
lea r15, [0x140120210]
test cl, cl
je 0x14005453c
mov rdi, r15
cmp qword [0x140120228], 7
cmova rdi, qword [0x140120210]
mov rsi, qword [0x140120220]
test rsi, rsi
je 0x140054479
test rdi, rdi
jne 0x140054479
lea rax, str.non_zero_size_null_string_view
mov qword [rsp + 0x28], rax
lea rax, [0x1401062b4]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x4b9
lea rdx, [0x14010bce0]
lea ecx, [rdi + 2]
call fcn.140094790
cmp eax, 1
jne 0x140054454
int3
mov qword [rsp + 0x20], r14
mov r9d, 0x4b9
lea r8, str.C:Program_FilesMicrosoft_Visual_Studio2022CommunityVCToolsMSVC14.39.33519includexstring
lea rdx, [0x14010bc64]
lea rcx, str._non_zero_size_null_string_view_
call fcn.140094d90
mov qword [rbp + 0x100], r14
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], r14
mov qword [rbp + 0x120], r14
mov r8, rsi
mov rdx, rdi
lea rcx, [rbp + 0x100]
call fcn.14004da20
or ebx, 0xc000
or ebx, 2
mov edi, ebx
mov esi, ebx
mov dword [rsp + 0x40], ebx
mov r8d, 3
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x390]
call fcn.14004d940
movsd xmm0, qword [rax]
movsd qword [rbp + 0x400], xmm0
mov edx, dword [rax + 8]
mov dword [rbp + 0x2c0], edx
lea r8, [0x14011dcf0]
mov qword [rbp + 0x2c8], r8
movaps xmm0, xmmword [rbp + 0x2c0]
movdqa xmmword [rbp + 0x520], xmm0
mov eax, dword [rbp + 0x400]
test eax, eax
je 0x140054530
cmp eax, 1
setne cl
mov eax, ebx
test cl, cl
je 0x14005453c
xor r14b, r14b
jmp 0x14005453f
xor cl, cl
test edx, edx
jne 0x1400555e6
jmp 0x1400543e5
xor cl, cl
test edx, edx
jne 0x1400555fa
jmp 0x140054516
mov r14b, 1
test sil, 2
je 0x1400545a9
mov ebx, edi
and ebx, 0xfffffffd
lea rcx, [rbp + 0x100]
call fcn.14004c5f0
mov r8, qword [rbp + 0x120]
cmp r8, 7
jbe 0x140054576
mov rdx, qword [rbp + 0x108]
lea rcx, [rbp + 0x100]
call fcn.14004f190
movdqa xmm0, xmmword [0x140110cc0]
movdqu xmmword [rbp + 0x118], xmm0
xor edi, edi
mov word [rbp + 0x108], di
mov rcx, qword [rbp + 0x100]
mov qword [rbp + 0x100], rdi
lea edx, [rdi + 0x10]
call fcn.1400650c0
mov eax, ebx
jmp 0x1400545ab
xor edi, edi
test al, 1
je 0x14005460d
and ebx, 0xfffffffe
lea rcx, [rbp + 0xd8]
call fcn.14004c5f0
mov r8, qword [rbp + 0xf8]
cmp r8, 7
jbe 0x1400545de
mov rdx, qword [rbp + 0xe0]
lea rcx, [rbp + 0xd8]
call fcn.14004f190
movdqa xmm0, xmmword [0x140110cc0]
movdqu xmmword [rbp + 0xf0], xmm0
mov word [rbp + 0xe0], di
mov rcx, qword [rbp + 0xd8]
mov qword [rbp + 0xd8], rdi
mov edx, 0x10
call fcn.1400650c0
test r14b, r14b
je 0x1400546a0
xor r12d, r12d
mov qword [rbp - 0x40], r12
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x20], r12
lea r8d, [r12 + 0x14]
lea rdx, str.DLL_Files_not_found.
lea rcx, [rbp - 0x40]
call fcn.14004f650
nop
lea rdx, [rbp - 0x38]
cmp qword [rbp - 0x20], 0xf
cmova rdx, qword [rbp - 0x38]
mov r8, qword [rbp - 0x28]
call fcn.140055cf0
mov dword [0x14011dcc8], 0xe60000ff
lea rcx, [rbp - 0x40]
call fcn.14004c5f0
mov r8, qword [rbp - 0x20]
cmp r8, 0xf
jbe 0x140054683
mov rdx, qword [rbp - 0x38]
lea rcx, [rbp - 0x40]
call fcn.14004f270
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x20], 0xf
mov byte [rbp - 0x38], 0
mov rcx, qword [rbp - 0x40]
mov qword [rbp - 0x40], r12
jmp 0x140055327
lea rdi, [rbp + 0x468]
cmp qword [rbp + 0x480], 7
cmova rdi, qword [rbp + 0x468]
mov rsi, qword [rbp + 0x478]
test rsi, rsi
je 0x140054728
test rdi, rdi
jne 0x140054728
lea rax, str.non_zero_size_null_string_view
mov qword [rsp + 0x28], rax
lea rax, [0x1401062b4]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x4b9
lea rdx, [0x14010bce0]
lea ecx, [rdi + 2]
call fcn.140094790
cmp eax, 1
jne 0x1400546fe
int3
xor r14d, r14d
mov qword [rsp + 0x20], r14
mov r9d, 0x4b9
lea r8, str.C:Program_FilesMicrosoft_Visual_Studio2022CommunityVCToolsMSVC14.39.33519includexstring
lea rdx, [0x14010bc64]
lea rcx, str._non_zero_size_null_string_view_
call fcn.140094d90
jmp 0x14005472b
xor r14d, r14d
mov qword [rbp + 0xb0], r14
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xc8], r14
mov qword [rbp + 0xd0], r14
mov r8, rsi
mov rdx, rdi
lea rcx, [rbp + 0xb0]
call fcn.14004da20
or ebx, 0x30000
mov r8d, 3
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x380]
call fcn.14004d940
movsd xmm0, qword [rax]
movsd qword [rbp + 0x400], xmm0
mov ecx, dword [rax + 8]
mov dword [rbp + 0x300], ecx
lea rdx, [0x14011dcf0]
mov qword [rbp + 0x308], rdx
movaps xmm0, xmmword [rbp + 0x300]
movdqa xmmword [rbp + 0x510], xmm0
mov eax, dword [rbp + 0x400]
test eax, eax
je 0x140054a68
cmp eax, 1
sete dil
lea rcx, [rbp + 0xb0]
call fcn.14004c5f0
mov r8, qword [rbp + 0xd0]
cmp r8, 7
jbe 0x1400547ee
mov rdx, qword [rbp + 0xb8]
lea rcx, [rbp + 0xb0]
call fcn.14004f190
movdqa xmm0, xmmword [0x140110cc0]
movdqu xmmword [rbp + 0xc8], xmm0
mov word [rbp + 0xb8], r14w
mov rcx, qword [rbp + 0xb0]
mov qword [rbp + 0xb0], r14
mov edx, 0x10
call fcn.1400650c0
test dil, dil
je 0x140054a78
lea rdi, [rbp + 0x468]
cmp qword [rbp + 0x480], 7
cmova rdi, qword [rbp + 0x468]
mov rsi, qword [rbp + 0x478]
test rsi, rsi
je 0x1400548aa
test rdi, rdi
jne 0x1400548aa
lea rax, str.non_zero_size_null_string_view
mov qword [rsp + 0x28], rax
lea rax, [0x1401062b4]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x4b9
lea rdx, [0x14010bce0]
lea ecx, [rdi + 2]
call fcn.140094790
cmp eax, 1
jne 0x140054885
int3
mov qword [rsp + 0x20], r14
mov r9d, 0x4b9
lea r8, str.C:Program_FilesMicrosoft_Visual_Studio2022CommunityVCToolsMSVC14.39.33519includexstring
lea rdx, [0x14010bc64]
lea rcx, str._non_zero_size_null_string_view_
call fcn.140094d90
mov qword [rbp + 0x178], r14
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
mov qword [rbp + 0x190], r14
mov qword [rbp + 0x198], r14
mov r8, rsi
mov rdx, rdi
lea rcx, [rbp + 0x178]
call fcn.14004da20
or ebx, 0xc00000
cmp qword [0x140120278], 7
cmova r12, qword [0x140120260]
mov rdi, qword [0x140120270]
test rdi, rdi
je 0x14005495f
test r12, r12
jne 0x14005495f
lea rax, str.non_zero_size_null_string_view
mov qword [rsp + 0x28], rax
lea rax, [0x1401062b4]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x4b9
lea rdx, [0x14010bce0]
lea ecx, [r12 + 2]
call fcn.140094790
cmp eax, 1
jne 0x14005493a
int3
mov qword [rsp + 0x20], r14
mov r9d, 0x4b9
lea r8, str.C:Program_FilesMicrosoft_Visual_Studio2022CommunityVCToolsMSVC14.39.33519includexstring
lea rdx, [0x14010bc64]
lea rcx, str._non_zero_size_null_string_view_
call fcn.140094d90
mov qword [rbp + 0x1a0], r14
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a8], xmm0
mov qword [rbp + 0x1b8], r14
mov qword [rbp + 0x1c0], r14
mov r8, rdi
mov rdx, r12
lea rcx, [rbp + 0x1a0]
call fcn.14004da20
or ebx, 0x3000000
lea rdx, [rbp + 0x178]
lea rcx, [rbp + 0x1a0]
call fcn.140053420
nop
lea rcx, [rbp + 0x1a0]
call fcn.14004c5f0
mov r8, qword [rbp + 0x1c0]
cmp r8, 7
jbe 0x1400549d6
mov rdx, qword [rbp + 0x1a8]
lea rcx, [rbp + 0x1a0]
call fcn.14004f190
movdqa xmm0, xmmword [0x140110cc0]
movdqu xmmword [rbp + 0x1b8], xmm0
xor r12d, r12d
mov word [rbp + 0x1a8], r12w
mov rcx, qword [rbp + 0x1a0]
mov qword [rbp + 0x1a0], r12
lea edx, [r12 + 0x10]
call fcn.1400650c0
nop
lea rcx, [rbp + 0x178]
call fcn.14004c5f0
mov r8, qword [rbp + 0x198]
cmp r8, 7
jbe 0x140054a36
mov rdx, qword [rbp + 0x180]
lea rcx, [rbp + 0x178]
call fcn.14004f190
movdqa xmm0, xmmword [0x140110cc0]
movdqu xmmword [rbp + 0x190], xmm0
mov word [rbp + 0x180], r12w
mov rcx, qword [rbp + 0x178]
mov qword [rbp + 0x178], r12
mov edx, 0x10
call fcn.1400650c0
jmp 0x140054a7b
mov dil, 1
test ecx, ecx
jne 0x14005560e
jmp 0x1400547c2
xor r12d, r12d
lea rdi, [rbp + 0x440]
cmp qword [rbp + 0x458], 7
cmova rdi, qword [rbp + 0x440]
mov rsi, qword [rbp + 0x450]
lea r14, str.non_zero_size_null_string_view
test rsi, rsi
je 0x140054afe
test rdi, rdi
jne 0x140054afe
mov qword [rsp + 0x28], r14
lea rax, [0x1401062b4]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x4b9
lea rdx, [0x14010bce0]
lea ecx, [rdi + 2]
call fcn.140094790
cmp eax, 1
jne 0x140054ad9
int3
mov qword [rsp + 0x20], r12
mov r9d, 0x4b9
lea r8, str.C:Program_FilesMicrosoft_Visual_Studio2022CommunityVCToolsMSVC14.39.33519includexstring
lea rdx, [0x14010bc64]
lea rcx, str._non_zero_size_null_string_view_
call fcn.140094d90
mov qword [rbp + 0x88], r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], r12
mov qword [rbp + 0xa8], r12
mov r8, rsi
mov rdx, rdi
lea rcx, [rbp + 0x88]
call fcn.14004da20
or ebx, 0xc0000
mov r8d, 3
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x3b0]
call fcn.14004d940
movsd xmm0, qword [rax]
movsd qword [rbp + 0x400], xmm0
mov ecx, dword [rax + 8]
mov dword [rbp + 0x2d0], ecx
lea rdx, [0x14011dcf0]
mov qword [rbp + 0x2d8], rdx
movaps xmm0, xmmword [rbp + 0x2d0]
movdqa xmmword [rbp + 0x500], xmm0
mov eax, dword [rbp + 0x400]
test eax, eax
je 0x140055046
cmp eax, 1
sete dil
lea rcx, [rbp + 0x88]
call fcn.14004c5f0
mov r8, qword [rbp + 0xa8]
cmp r8, 7
jbe 0x140054bc1
mov rdx, qword [rbp + 0x90]
lea rcx, [rbp + 0x88]
call fcn.14004f190
movdqa xmm0, xmmword [0x140110cc0]
movdqu xmmword [rbp + 0xa0], xmm0
mov word [rbp + 0x90], r12w
mov rcx, qword [rbp + 0x88]
mov qword [rbp + 0x88], r12
mov edx, 0x10
call fcn.1400650c0
test dil, dil
je 0x140054e27
lea rdi, [rbp + 0x440]
cmp qword [rbp + 0x458], 7
cmova rdi, qword [rbp + 0x440]
mov rsi, qword [rbp + 0x450]
test rsi, rsi
je 0x140054c76
test rdi, rdi
jne 0x140054c76
mov qword [rsp + 0x28], r14
lea rax, [0x1401062b4]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x4b9
lea rdx, [0x14010bce0]
lea ecx, [rdi + 2]
call fcn.140094790
cmp eax, 1
jne 0x140054c51
int3
mov qword [rsp + 0x20], r12
mov r9d, 0x4b9
lea r8, str.C:Program_FilesMicrosoft_Visual_Studio2022CommunityVCToolsMSVC14.39.33519includexstring
lea rdx, [0x14010bc64]
lea rcx, str._non_zero_size_null_string_view_
call fcn.140094d90
mov qword [rbp + 0x150], r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x158], xmm0
mov qword [rbp + 0x168], r12
mov qword [rbp + 0x170], r12
mov r8, rsi
mov rdx, rdi
lea rcx, [rbp + 0x150]
call fcn.14004da20
or ebx, 0xc000000
cmp qword [0x140120228], 7
cmova r15, qword [0x140120210]
mov rdi, qword [0x140120220]
test rdi, rdi
je 0x140054d23
test r15, r15
jne 0x140054d23
mov qword [rsp + 0x28], r14
lea rax, [0x1401062b4]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x4b9
lea rdx, [0x14010bce0]
lea ecx, [r15 + 2]
call fcn.140094790
cmp eax, 1
jne 0x140054cfe
int3
mov qword [rsp + 0x20], r12
mov r9d, 0x4b9
lea r8, str.C:Program_FilesMicrosoft_Visual_Studio2022CommunityVCToolsMSVC14.39.33519includexstring
lea rdx, [0x14010bc64]
lea rcx, str._non_zero_size_null_string_view_
call fcn.140094d90
mov qword [rbp + 0x1c8], r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
mov qword [rbp + 0x1e0], r12
mov qword [rbp + 0x1e8], r12
mov r8, rdi
mov rdx, r15
lea rcx, [rbp + 0x1c8]
call fcn.14004da20
or ebx, 0x30000000
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x1c8]
call fcn.140053420
nop
lea rcx, [rbp + 0x1c8]
call fcn.14004c5f0
mov r8, qword [rbp + 0x1e8]
cmp r8, 7
jbe 0x140054d9a
mov rdx, qword [rbp + 0x1d0]
lea rcx, [rbp + 0x1c8]
call fcn.14004f190
movdqa xmm0, xmmword [0x140110cc0]
movdqu xmmword [rbp + 0x1e0], xmm0
mov word [rbp + 0x1d0], r12w
mov rcx, qword [rbp + 0x1c8]
mov qword [rbp + 0x1c8], r12
mov edx, 0x10
call fcn.1400650c0
nop
lea rcx, [rbp + 0x150]
call fcn.14004c5f0
mov r8, qword [rbp + 0x170]
cmp r8, 7
jbe 0x140054df7
mov rdx, qword [rbp + 0x158]
lea rcx, [rbp + 0x150]
call fcn.14004f190
movdqa xmm0, xmmword [0x140110cc0]
movdqu xmmword [rbp + 0x168], xmm0
mov word [rbp + 0x158], r12w
mov rcx, qword [rbp + 0x150]
mov qword [rbp + 0x150], r12
mov edx, 0x10
call fcn.1400650c0
lea rdi, [rbp + 0x468]
cmp qword [rbp + 0x480], 7
cmova rdi, qword [rbp + 0x468]
mov rsi, qword [rbp + 0x478]
lea r15, [0x1401062b4]
test rsi, rsi
je 0x140054ea3
test rdi, rdi
jne 0x140054ea3
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov r8d, 0x4b9
lea rdx, [0x14010bce0]
lea ecx, [rdi + 2]
call fcn.140094790
cmp eax, 1
jne 0x140054e7e
int3
mov qword [rsp + 0x20], r12
mov r9d, 0x4b9
lea r8, str.C:Program_FilesMicrosoft_Visual_Studio2022CommunityVCToolsMSVC14.39.33519includexstring
lea rdx, [0x14010bc64]
lea rcx, str._non_zero_size_null_string_view_
call fcn.140094d90
mov qword [rbp + 0x38], r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], r12
mov r8, rsi
mov rdx, rdi
lea rcx, [rbp + 0x38]
call fcn.14004da20
or ebx, 0x300000
or ebx, 4
mov dword [rsp + 0x40], ebx
mov r8d, 3
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0x370]
call fcn.14004d940
movsd xmm0, qword [rax]
movsd qword [rbp + 0x400], xmm0
mov ecx, dword [rax + 8]
mov dword [rbp + 0x2e0], ecx
lea rdx, [0x14011dcf0]
mov qword [rbp + 0x2e8], rdx
movaps xmm0, xmmword [rbp + 0x2e0]
movdqa xmmword [rbp + 0x4f0], xmm0
mov eax, dword [rbp + 0x400]
test eax, eax
je 0x140055056
cmp eax, 1
setne al
mov esi, ebx
mov edi, ebx
test al, al
je 0x140055071
lea rdi, [rbp + 0x440]
cmp qword [rbp + 0x458], 7
cmova rdi, qword [rbp + 0x440]
mov rsi, qword [rbp + 0x450]
test rsi, rsi
je 0x140054faf
test rdi, rdi
jne 0x140054faf
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov r8d, 0x4b9
lea rdx, [0x14010bce0]
lea ecx, [rdi + 2]
call fcn.140094790
cmp eax, 1
jne 0x140054f8a
int3
mov qword [rsp + 0x20], r12
mov r9d, 0x4b9
lea r8, str.C:Program_FilesMicrosoft_Visual_Studio2022CommunityVCToolsMSVC14.39.33519includexstring
lea rdx, [0x14010bc64]
lea rcx, str._non_zero_size_null_string_view_
call fcn.140094d90
mov qword [rbp + 0x60], r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], r12
mov qword [rbp + 0x80], r12
mov r8, rsi
mov rdx, rdi
lea rcx, [rbp + 0x60]
call fcn.14004da20
or ebx, 0xc0000000
or ebx, 8
mov esi, ebx
mov dword [rsp + 0x40], ebx
mov r8d, 3
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x360]
call fcn.14004d940
movsd xmm0, qword [rax]
movsd qword [rbp + 0x400], xmm0
mov ecx, dword [rax + 8]
mov dword [rbp + 0x2f0], ecx
lea rdx, [0x14011dcf0]
mov qword [rbp + 0x2f8], rdx
movaps xmm0, xmmword [rbp + 0x2f0]
movdqa xmmword [rbp + 0x550], xmm0
mov eax, dword [rbp + 0x400]
test eax, eax
je 0x140055065
cmp eax, 1
setne al
mov edi, ebx
test al, al
je 0x140055071
xor r14b, r14b
jmp 0x140055074
mov dil, 1
test ecx, ecx
jne 0x140055622
jmp 0x140054b95
xor al, al
test ecx, ecx
jne 0x140055636
jmp 0x140054f2e
xor al, al
test ecx, ecx
jne 0x140055647
jmp 0x14005503b
mov r14b, 1
test bl, 8
je 0x1400550c6
mov edi, esi
and edi, 0xfffffff7
lea rcx, [rbp + 0x60]
call fcn.14004c5f0
mov r8, qword [rbp + 0x80]
cmp r8, 7
jbe 0x1400550a1
mov rdx, qword [rbp + 0x68]
lea rcx, [rbp + 0x60]
call fcn.14004f190
movdqa xmm0, xmmword [0x140110cc0]
movdqu xmmword [rbp + 0x78], xmm0
mov word [rbp + 0x68], r12w
mov rcx, qword [rbp + 0x60]
mov qword [rbp + 0x60], r12
mov edx, 0x10
call fcn.1400650c0
nop
test dil, 4
je 0x140055110
lea rcx, [rbp + 0x38]
call fcn.14004c5f0
mov r8, qword [rbp + 0x58]
cmp r8, 7
jbe 0x1400550ec
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x38]
call fcn.14004f190
movdqa xmm0, xmmword [0x140110cc0]
movdqu xmmword [rbp + 0x50], xmm0
mov word [rbp + 0x40], r12w
mov rcx, qword [rbp + 0x38]
mov qword [rbp + 0x38], r12
mov edx, 0x10
call fcn.1400650c0
test r14b, r14b
je 0x1400551a1
mov qword [rbp - 0x68], r12
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], r12
mov r8d, 0x16
lea rdx, str.Copy_operation_failed.
lea rcx, [rbp - 0x68]
call fcn.14004f650
nop
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], 0xf
cmova rdx, qword [rbp - 0x60]
mov r8, qword [rbp - 0x50]
call fcn.140055cf0
mov dword [0x14011dcc8], 0xe60000ff
lea rcx, [rbp - 0x68]
call fcn.14004c5f0
mov r8, qword [rbp - 0x48]
cmp r8, 0xf
jbe 0x140055184
mov rdx, qword [rbp - 0x60]
lea rcx, [rbp - 0x68]
call fcn.14004f270
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
mov rcx, qword [rbp - 0x68]
mov qword [rbp - 0x68], r12
jmp 0x140055327
mov r8d, r13d
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140055299
mov dword [rsp + 0x20], 4
xor edx, edx
mov r9d, 0x3000
mov r8d, 0x400
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
test rax, rax
je 0x140055290
mov qword [rbp + 0x488], r12
mov rcx, qword [0x140120298]
lea r9, [rcx*2 + 2]
cmp qword [0x1401202a0], 7
lea r8, [0x140120288]
cmova r8, qword [0x140120288]
lea rcx, [rbp + 0x488]
mov qword [rsp + 0x20], rcx
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x140055290
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], rdi
mov r9, qword [sym.imp.KERNEL32.dll_LoadLibraryW]
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov rdi, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rdi, rdi
je 0x140055299
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, 0x25
lea rdx, str.ImAuto_has_been_started_successfully.
call fcn.140055cf0
mov dword [0x14011dcc8], 0xe62fffad
jmp 0x140055332
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x70], r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], r12
mov r8d, 0x17
lea rdx, str.ImAuto_failed_to_start.
lea rcx, [rsp + 0x70]
call fcn.14004f650
nop
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 0xf
cmova rdx, qword [rsp + 0x78]
mov r8, qword [rbp - 0x78]
call fcn.140055cf0
mov dword [0x14011dcc8], 0xe60000ff
lea rcx, [rsp + 0x70]
call fcn.14004c5f0
mov r8, qword [rbp - 0x70]
cmp r8, 0xf
jbe 0x14005530c
mov rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0x70]
call fcn.14004f270
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], 0xf
mov byte [rsp + 0x78], 0
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x70], r12
mov edx, 0x10
call fcn.1400650c0
nop
lea rcx, [rbp + 0x438]
call fcn.14004c5f0
mov r8, qword [rbp + 0x458]
cmp r8, 7
jbe 0x14005535e
mov rdx, qword [rbp + 0x440]
lea rcx, [rbp + 0x438]
call fcn.14004f190
mov qword [rbp + 0x450], r12
mov qword [rbp + 0x458], 7
mov word [rbp + 0x440], r12w
mov rcx, qword [rbp + 0x438]
mov qword [rbp + 0x438], r12
mov edx, 0x10
call fcn.1400650c0
nop
lea rcx, [rbp + 0x460]
call fcn.14004c5f0
mov r8, qword [rbp + 0x480]
cmp r8, 7
jbe 0x1400553bd
mov rdx, qword [rbp + 0x468]
lea rcx, [rbp + 0x460]
call fcn.14004f190
mov qword [rbp + 0x478], r12
mov qword [rbp + 0x480], 7
mov word [rbp + 0x468], r12w
mov rcx, qword [rbp + 0x460]
mov qword [rbp + 0x460], r12
mov edx, 0x10
call fcn.1400650c0
nop
lea rcx, [rbp + 0x4c0]
call fcn.14004c5f0
mov r8, qword [rbp + 0x4e0]
cmp r8, 7
jbe 0x14005541c
mov rdx, qword [rbp + 0x4c8]
lea rcx, [rbp + 0x4c0]
call fcn.14004f190
movdqa xmm0, xmmword [0x140110cc0]
movdqu xmmword [rbp + 0x4d8], xmm0
mov word [rbp + 0x4c8], r12w
mov rcx, qword [rbp + 0x4c0]
mov qword [rbp + 0x4c0], r12
mov edx, 0x10
call fcn.1400650c0
nop
lea rcx, [rbp + 0x498]
call fcn.14004c5f0
mov r8, qword [rbp + 0x4b8]
cmp r8, 7
jbe 0x140055479
mov rdx, qword [rbp + 0x4a0]
lea rcx, [rbp + 0x498]
call fcn.14004f190
movdqa xmm0, xmmword [0x140110cc0]
movdqu xmmword [rbp + 0x4b0], xmm0
mov word [rbp + 0x4a0], r12w
mov rcx, qword [rbp + 0x498]
mov qword [rbp + 0x498], r12
mov edx, 0x10
call fcn.1400650c0
nop
lea rcx, [rbp + 0x410]
call fcn.14004c5f0
mov r8, qword [rbp + 0x430]
cmp r8, 7
jbe 0x1400554d6
mov rdx, qword [rbp + 0x418]
lea rcx, [rbp + 0x410]
call fcn.14004f190
mov qword [rbp + 0x428], r12
mov qword [rbp + 0x430], 7
mov word [rbp + 0x418], r12w
mov rcx, qword [rbp + 0x410]
mov qword [rbp + 0x410], r12
jmp 0x140055598
mov qword [rsp + 0x48], r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov r8d, 0x12
lea rdx, str.Process_not_found.
lea rcx, [rsp + 0x48]
call fcn.14004f650
nop
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0xf
cmova rdx, qword [rsp + 0x50]
mov r8, qword [rsp + 0x60]
call fcn.140055cf0
mov dword [0x14011dcc8], 0xe60000ff
lea rcx, [rsp + 0x48]
call fcn.14004c5f0
mov r8, qword [rsp + 0x68]
cmp r8, 0xf
jbe 0x14005557b
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.14004f270
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x48], r12
mov edx, 0x10
call fcn.1400650c0
mov rcx, qword [rbp + 0x770]
xor rcx, rsp
call fcn.140064540
lea r11, [rsp + 0x880]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea r8, [rbp + 0x128]
lea rdx, [rbp + 0x540]
call fcn.14004d8e0
nop
lea r8, [rbp + 0xd8]
lea rdx, [rbp + 0x530]
call fcn.14004d8e0
nop
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0x520]
call fcn.14004d8e0
nop
lea r8, [rbp + 0xb0]
lea rdx, [rbp + 0x510]
call fcn.14004d8e0
nop
lea r8, [rbp + 0x88]
lea rdx, [rbp + 0x500]
call fcn.14004d8e0
nop
lea r8, [rbp + 0x38]
lea rdx, [rbp + 0x4f0]
call fcn.14004d8e0
nop
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0x550]
call fcn.14004d8e0
int3