Function at 0x14004a3d0
Capabilities:
Create process on windows
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2d8]
sub rsp, 0x3a0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
mov r13, rcx
xor edi, edi
lea rcx, [rbp - 0x40]
call fcn.140049350
nop
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.140048e00
mov rbx, rax
lea rsi, [r13 + 0x108]
cmp rsi, rax
je 0x14004a484
mov rdx, qword [rsi + 0x18]
cmp rdx, 0xf
jbe 0x14004a458
mov rcx, qword [rsi]
inc rdx
cmp rdx, 0x1000
jb 0x14004a453
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14004a4b6
mov rcx, r8
call fcn.1400df3b0
mov qword [rsi + 0x10], rdi
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
movups xmm0, xmmword [rbx]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsi + 0x10], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x14004a4c2
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a4bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004a4bd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400df3b0
movdqa xmm0, xmmword [0x140114360]
movdqu xmmword [rbp - 0x50], xmm0
mov byte [rbp - 0x60], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x14004a511
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a50c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004a50c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400df3b0
cmp qword [r13 + 0x30], 0xa
jne 0x14004b32a
cmp qword [r13 + 0x50], 0x40
jne 0x14004b32a
lea rdx, [r13 + 0x20]
lea rcx, [rbp - 0x40]
call fcn.140049160
mov r15, rax
mov rdx, r13
lea rcx, [rbp + 0x160]
call fcn.140049160
mov r14, rax
lea rax, [rbp + 0x218]
mov qword [rbp + 0x2e0], rax
lea rdx, [0x14019adc0]
lea rcx, [rbp + 0x218]
call fcn.14005bc00
mov rdi, rax
lea rax, [rbp + 0x238]
mov qword [rbp + 0x2e8], rax
lea rdx, [r13 + 0x40]
lea rcx, [rbp + 0x238]
call fcn.14005bc00
mov rbx, rax
mov rdx, rsi
lea rcx, [rbp + 0x258]
call fcn.14005bc00
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x140]
call fcn.140049480
mov rsi, rax
lea rax, [rbp + 0x1b8]
mov qword [rbp + 0x2e0], rax
lea rdx, [0x14019adc0]
lea rcx, [rbp + 0x1b8]
call fcn.14005bc00
mov rdi, rax
lea rax, [rbp + 0x180]
mov qword [rbp + 0x2e8], rax
lea rdx, [r13 + 0x40]
lea rcx, [rbp + 0x180]
call fcn.14005bc00
mov rbx, rax
lea rdx, [r13 + 0x60]
lea rcx, [rbp - 0x20]
call fcn.14005bc00
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x120]
call fcn.140049480
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [0x140114380]
movdqu xmmword [rsp + 0x40], xmm1
mov dword [rsp + 0x30], 0x74696e69
mov byte [rsp + 0x34], 0
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x100]
call fcn.140049160
nop
mov r9d, 5
lea r8, str.type
xor edx, edx
mov rcx, rax
call fcn.1400616f0
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
xor edi, edi
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
lea r8d, [rdi + 5]
lea rdx, str.ver
lea rcx, [rbp + 0x20]
call fcn.14005bac0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xf0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
mov r9, rbx
lea r8, [rbp + 0xe0]
movzx edx, byte [rbp + 0x2e0]
lea rcx, [rbp - 0x60]
call fcn.140061800
nop
lea r8d, [rdi + 8]
lea rdx, str.enckey
lea rcx, [rbp - 0x60]
call fcn.14005bac0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xd0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
mov r9, rsi
lea r8, [rbp + 0xc0]
movzx edx, byte [rbp + 0x2e0]
lea rcx, [rbp + 0x80]
call fcn.140061800
nop
lea r8d, [rdi + 6]
lea rdx, [0x140110cec]
lea rcx, [rbp + 0x80]
call fcn.14005bac0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xa0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xb0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
mov r9, r14
lea r8, [rbp + 0xa0]
movzx edx, byte [rbp + 0x2e0]
lea rcx, [rbp + 0x60]
call fcn.140061800
nop
lea r8d, [rdi + 9]
lea rdx, str.ownerid
lea rcx, [rbp + 0x60]
call fcn.14005bac0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
mov r9, r15
lea r8, [rsp + 0x50]
movzx edx, byte [rbp + 0x2e0]
lea rcx, [rbp + 0x40]
call fcn.140061800
nop
lea r8d, [rdi + 9]
lea rdx, str.init_iv
lea rcx, [rbp + 0x40]
call fcn.14005bac0
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
lea rdx, [0x14019adc0]
cmp qword [0x14019add8], 0xf
cmova rdx, qword [0x14019adc0]
mov r8, qword [0x14019add0]
lea rcx, [rbp]
call fcn.14005bac0
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0x1f8], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0x208], xmm6
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x14004a8b2
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a8ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004a8ad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400df3b0
movdqa xmm0, xmmword [0x140114360]
movdqu xmmword [rbp + 0x10], xmm0
mov byte [rbp], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x14004a901
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a8fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004a8fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400df3b0
movdqa xmm0, xmmword [0x140114360]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x14004a953
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a94d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004a94d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400df3b0
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x14004a991
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a98c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004a98c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400df3b0
movdqa xmm0, xmmword [0x140114360]
movdqu xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x14004a9e7
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a9e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004a9e1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400df3b0
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x14004aa2b
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004aa26
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004aa26
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400df3b0
movdqa xmm0, xmmword [0x140114360]
movdqu xmmword [rbp + 0x90], xmm0
mov byte [rbp + 0x80], 0
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x14004aa87
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004aa81
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004aa81
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400df3b0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x14004aac5
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004aac0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004aac0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400df3b0
movdqa xmm0, xmmword [0x140114360]
movdqu xmmword [rbp - 0x50], xmm0
mov byte [rbp - 0x60], 0
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x14004ab1b
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ab15
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004ab15
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400df3b0
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x14004ab59
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ab54
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004ab54
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400df3b0
movdqa xmm0, xmmword [0x140114360]
movdqu xmmword [rbp + 0x30], xmm0
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x14004abae
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004aba9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004aba9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400df3b0
movdqa xmm0, xmmword [0x140114360]
movdqu xmmword [rbp + 0x110], xmm0
mov byte [rbp + 0x100], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14004ac05
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ac00
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004ac00
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400df3b0
movdqa xmm0, xmmword [0x140114360]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov rdx, qword [rbp + 0x138]
cmp rdx, 0xf
jbe 0x14004ac5c
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ac57
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004ac57
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400df3b0
movdqa xmm0, xmmword [0x140114360]
movdqu xmmword [rbp + 0x130], xmm0
mov byte [rbp + 0x120], 0
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x14004acb7
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004acb2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004acb2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400df3b0
movdqa xmm0, xmmword [0x140114360]
movdqu xmmword [rbp + 0x150], xmm0
mov byte [rbp + 0x140], 0
mov rdx, qword [rbp + 0x178]
cmp rdx, 0xf
jbe 0x14004ad12
inc rdx
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ad0d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004ad0d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400df3b0
movdqa xmm0, xmmword [0x140114360]
movdqu xmmword [rbp + 0x170], xmm0
mov byte [rbp + 0x160], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x14004ad67
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ad62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004ad62
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400df3b0
movdqa xmm0, xmmword [0x140114360]
movdqu xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x40], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
lea r14, [rbp + 0x1f8]
movq rsi, xmm7
movdqa xmm0, xmm6
psrldq xmm0, 8
movq r15, xmm0
cmp r15, 0xf
cmova r14, rsi
movabs rbx, 0x7fffffffffffffff
movq rdi, xmm6
cmp rdi, rbx
ja 0x14004b39a
cmp rdi, 0xf
ja 0x14004ade6
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], 0xf
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x50], xmm0
jmp 0x14004ae7c
mov rax, rdi
or rax, 0xf
cmp rax, rbx
jbe 0x14004ae1e
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400df134
mov rcx, rax
test rax, rax
je 0x14004ae49
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14004ae5e
mov rbx, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14004ae50
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14004b394
jmp 0x14004ae00
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14004ae5c
call fcn.1400df134
jmp 0x14004ae5e
xor eax, eax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rbx
lea r8, [rdi + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x80]
call fcn.14004f8e0
nop
lea rax, [rbp - 0x20]
mov qword [rbp + 0x2e0], rax
lea rdx, [0x14019adc0]
lea rcx, [rbp - 0x20]
call fcn.14005bc00
mov rdi, rax
lea rax, [rbp + 0x180]
mov qword [rbp + 0x2e8], rax
lea rdx, [r13 + 0x40]
lea rcx, [rbp + 0x180]
call fcn.14005bc00
mov rbx, rax
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x1b8]
call fcn.14005bc00
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.140049810
mov rbx, rax
lea rax, [rbp - 0x80]
cmp rax, rbx
je 0x14004af64
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14004af30
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004af2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004af99
call fcn.1400df3b0
movdqa xmm0, xmmword [0x140114360]
movdqu xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x80], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x70], xmm1
xor r14d, r14d
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r14b
jmp 0x14004af67
xor r14d, r14d
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x14004afa5
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004afa0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004afa0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400df3b0
mov qword [rbp + 0x1f0], r14
lea r8, [rbp + 0x1b8]
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x70]
call fcn.14005e780
nop
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x40], 7
mov qword [rsp + 0x48], 0xf
mov rax, qword [str.success]
mov dword [rsp + 0x30], eax
movzx eax, word [0x140110d1c]
mov word [rsp + 0x34], ax
movzx eax, byte [0x140110d1e]
mov byte [rsp + 0x36], al
mov byte [rsp + 0x37], 0
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x70]
call fcn.1400614d0
cmp byte [rax], 4
jne 0x14004b3a0
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x70]
cmp byte [rax + 8], 0
mov qword [rsp + 0x48], 0xf
je 0x14004b15d
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], 9
movsd xmm0, qword [0x140110d20]
movsd qword [rsp + 0x30], xmm0
movzx eax, byte [0x140110d28]
mov byte [rsp + 0x38], al
mov byte [rsp + 0x39], 0
call fcn.1400614d0
cmp byte [rax], 3
jne 0x14004b351
mov r8, qword [rax + 8]
mov rdx, r8
cmp qword [r8 + 0x18], 0xf
jbe 0x14004b083
mov rdx, qword [r8]
lea rcx, [r13 + 0xe8]
mov r8, qword [r8 + 0x10]
call fcn.14005d050
nop
lea rcx, [rsp + 0x70]
call fcn.14005ce90
nop
movzx edx, byte [rsp + 0x70]
lea rcx, [rsp + 0x78]
call fcn.14005d3e0
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14004b0ed
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b0e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004b0e8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400df3b0
movdqa xmm0, xmmword [0x140114360]
movdqu xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x80], 0
cmp r15, 0xf
jbe 0x14004b138
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14004b130
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004b130
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.1400df3b0
lea r11, [rsp + 0x3a0]
mov rbx, qword [r11 + 0x58]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x40], 7
mov rax, qword [str.message]
mov dword [rsp + 0x30], eax
movzx eax, word [0x140110d44]
mov word [rsp + 0x34], ax
movzx eax, byte [0x140110d46]
mov byte [rsp + 0x36], al
mov byte [rsp + 0x37], 0
call fcn.1400614d0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xor eax, eax
mov qword [rsp + 0x58], rax
movzx edx, byte [rsp + 0x50]
lea rcx, [rsp + 0x58]
call fcn.14005d3e0
mov byte [rsp + 0x50], 3
mov ecx, 0x20
call fcn.1400df134
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], r14
mov r8d, 0xa
lea rdx, str.invalidver
mov rcx, rax
call fcn.140031f00
mov qword [rsp + 0x58], rbx
test rbx, rbx
jne 0x14004b257
mov r8d, 0x2ae
lea rdx, str.C:_vcpkg_vcpkginstalledx64_windowsinclude_nlohmannjson.hpp
lea rcx, str.m_data.m_type___value_t::string__m_data.m_value.string___nullptr
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r8d, 0x2ae
lea rdx, str.C:_vcpkg_vcpkginstalledx64_windowsinclude_nlohmannjson.hpp
lea rcx, str.m_data.m_type___value_t::string__m_data.m_value.string___nullptr
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rdx, [rsp + 0x50]
mov rcx, rdi
call fcn.140061070
movzx ebx, al
mov r8d, 0x2ae
lea rdx, str.C:_vcpkg_vcpkginstalledx64_windowsinclude_nlohmannjson.hpp
lea rcx, str.m_data.m_type___value_t::string__m_data.m_value.string___nullptr
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
jmp 0x14004b267
lea rdx, [rsp + 0x50]
mov rcx, rdi
call fcn.140061070
movzx ebx, al
mov dl, 3
lea rcx, [rsp + 0x58]
call fcn.14005d3e0
nop
test bl, bl
je 0x14004b2c9
lea rdx, str.download
lea rcx, [rsp + 0x70]
call fcn.14005e8a0
lea rdx, [rbp - 0x20]
mov rcx, rax
call fcn.14005e8f0
lea rcx, [rbp - 0x20]
call fcn.140031df0
mov r8, rax
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, [0x140110d5c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14005e5b0
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.message
lea rcx, [rsp + 0x70]
call fcn.14005e8a0
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14005e9a0
nop
mov rdx, rax
mov rcx, rbx
call fcn.14005ea30
nop
lea rcx, [rbp - 0x20]
call fcn.140031e00
mov ecx, 0x1194
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
lea rdx, str._n_n_Application_Not_Setup_Correctly._Please_Watch_Video_Linked_in_Main.cpp
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14005e5b0
mov ecx, 0x1194
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rcx, rax
call fcn.14005ce00
mov qword [rbp + 0x2e0], rax
lea r8, [rbp + 0x2e0]
lea rcx, [rbp - 0x20]
call fcn.14006fc30
nop
mov r8, rax
lea rcx, [rbp + 0x180]
call fcn.14006fce0
lea rdx, [0x14012c3d8]
lea rcx, [rbp + 0x180]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.140002ef0
int3
call fcn.14002d3e0
nop
mov rcx, rax
call fcn.14005ce00
mov qword [rbp + 0x2e0], rax
lea r8, [rbp + 0x2e0]
lea rcx, [rbp - 0x20]
call fcn.14006fef0
nop
mov r8, rax
lea rcx, [rbp + 0x180]
call fcn.14006fce0
lea rdx, [0x14012c3d8]
lea rcx, [rbp + 0x180]
call sub.VCRUNTIME140.dll__CxxThrowException
int3