Function at 0x14000ac10
Capabilities:
Encode data using xor
Get session user name

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1d8]
sub rsp, 0x2b0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x1402a5080]
xor rax, rsp
mov qword [rbp + 0x180], rax
xor ebx, ebx
mov ecx, 3
call fcn.140053760
call fcn.1400534d0
mov r12, rax
test rax, rax
jne 0x14000ac72
call fcn.140053720
jmp 0x14000b892
movups xmm0, xmmword [str.UTQQ]
movups xmmword [rbp - 0x30], xmm0
psrldq xmm0, 0xf
movd eax, xmm0
test al, al
je 0x14000adf0
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x14000adb3
movdqa xmm4, xmmword [0x140296500]
mov edx, ebx
movdqa xmm3, xmmword [0x140296890]
movdqa xmm5, xmmword [0x140296530]
movdqa xmm0, xmmword [0x140296550]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x2c]
movdqa xmm6, xmmword [0x140296540]
mov r8d, dword [rbp - 0x20]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x10
jl 0x14000acd2
jmp 0x14000adf0
lea r9, [rbp - 0x30]
mov r8d, ebx
nop word [rax + rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x10
jl 0x14000adc0
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x40]
call fcn.140002b20
nop
mov dword [rbp - 0x30], 0x101
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x100]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
lea rax, [rbp + 0x100]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000ae33
movabs r14, 0x7fffffffffffffff
cmp rdi, r14
ja 0x14000b8cc
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rdi, 0xf
ja 0x14000ae8f
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov r8, rdi
lea rdx, [rbp + 0x100]
lea rcx, [rbp - 0x20]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rdi - 0x20], 0
mov r14, qword [rbp - 8]
mov rdi, qword [rbp - 0x10]
mov rsi, qword [rbp - 0x20]
jmp 0x14000af25
mov rax, rdi
or rax, 0xf
cmp rax, r14
jbe 0x14000aec4
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400a4180
test rax, rax
je 0x14000aef4
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14000af03
mov r14, rax
cmp rax, rcx
cmovb r14, rcx
lea rcx, [r14 + 1]
test rcx, rcx
jne 0x14000aedc
mov rsi, rbx
jmp 0x14000af03
cmp rcx, 0x1000
jb 0x14000aefb
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000b8d2
jmp 0x14000aea9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a4180
mov rsi, rax
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], r14
mov r8, rdi
lea rdx, [rbp + 0x100]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rdi], 0
movabs rax, 0x32a5a8101a5baedb
mov qword [rbp + 0x60], rax
movabs r13, 0xf6be56b96f3ed17c
mov qword [rbp + 0x68], r13
movabs r15, 0x6536a10a95a184c5
mov qword [rbp + 0x70], r15
movabs rbx, 0x9d22b73dd87e63e
mov qword [rbp + 0x78], rbx
movabs rax, 0x1d8a92636a2fdab3
mov qword [rbp], rax
movabs rax, 0x90d726d04157a11d
mov qword [rbp + 8], rax
movabs rax, 0x6536a16de7ceaabc
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rbx
movups xmm0, xmmword [rbp]
movups xmm1, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp], xmm0
xorps xmm1, xmmword [rbp + 0x70]
movdqa xmmword [rbp + 0x10], xmm1
lea rdx, [rbp]
lea rcx, [rbp - 0x50]
call fcn.140002b20
mov rdx, rax
lea rcx, [rbp]
call fcn.140005210
nop
movabs rax, 0x32a5a8101a5baedb
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x88], r13
mov qword [rbp + 0x90], r15
mov qword [rbp + 0x98], rbx
movabs rax, 0xe0c315ac5428ae2f
mov qword [rbp + 0xa0], rax
movabs rax, 0x64806f05015547d0
mov qword [rbp + 0xa8], rax
movabs rax, 0x526f31f61c8a3049
mov qword [rbp + 0xb0], rax
movabs rax, 0x871cce8fcd8b7392
mov qword [rbp + 0xb8], rax
movabs rax, 0xc59ebcb8f29184c3
mov qword [rbp + 0xc0], rax
movabs rax, 0xe2cce741a8ff0524
mov qword [rbp + 0xc8], rax
movabs rax, 0x80cd2d529f9fdecd
mov qword [rbp + 0xd0], rax
movabs rax, 0xab96f41b9ac32266
mov qword [rbp + 0xd8], rax
movabs rax, 0xdd157554f50747f7
mov qword [rbp + 0xe0], rax
movabs rax, 0xa367a84d0eb9b438
mov qword [rbp + 0xe8], rax
movabs rax, 0x366bcf5e805fc0f1
mov qword [rbp + 0xf0], rax
movabs rax, 0xea32b977a166b99a
mov qword [rbp + 0xf8], rax
movabs rax, 0x1d8a92636a2fdab3
mov qword [rbp + 0x100], rax
movabs rax, 0xd8da24d60c4db818
mov qword [rbp + 0x108], rax
movabs rax, 0x4a5fd16bbacceba6
mov qword [rbp + 0x110], rax
movabs rax, 0x7ab9441cb5e58349
mov qword [rbp + 0x118], rax
movabs rax, 0xd2f72495601a9f00
mov qword [rbp + 0x120], rax
movabs rax, 0x52b25733326571e0
mov qword [rbp + 0x128], rax
movabs rax, 0x33277ad928b80370
mov qword [rbp + 0x130], rax
movabs rax, 0xff59a4fb88c727a4
mov qword [rbp + 0x138], rax
movabs rax, 0xf4fcc688bfe9e281
mov qword [rbp + 0x140], rax
movabs rax, 0xb3a4b331deb87752
mov qword [rbp + 0x148], rax
movabs rax, 0xb9aa4817e6ecb9f5
mov qword [rbp + 0x150], rax
movabs rax, 0xe8c08c23f2b96752
mov qword [rbp + 0x158], rax
movabs rax, 0xb5512c1eaa6200b2
mov qword [rbp + 0x160], rax
movabs rax, 0xeb51f22459f6e673
mov qword [rbp + 0x168], rax
movabs rax, 0xf0ea62de914afc9
mov qword [rbp + 0x170], rax
movabs rax, 0xea32b977a166b9fd
mov qword [rbp + 0x178], rax
movups xmm0, xmmword [rbp + 0x100]
movups xmm1, xmmword [rbp + 0x110]
movups xmm2, xmmword [rbp + 0x120]
movups xmm3, xmmword [rbp + 0x130]
movups xmm4, xmmword [rbp + 0x140]
movups xmm5, xmmword [rbp + 0x150]
movups xmm6, xmmword [rbp + 0x160]
movups xmm7, xmmword [rbp + 0x170]
xorps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0x100], xmm0
xorps xmm1, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x110], xmm1
xorps xmm2, xmmword [rbp + 0xa0]
movdqa xmmword [rbp + 0x120], xmm2
xorps xmm3, xmmword [rbp + 0xb0]
movdqa xmmword [rbp + 0x130], xmm3
xorps xmm4, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0x140], xmm4
xorps xmm5, xmmword [rbp + 0xd0]
movdqa xmmword [rbp + 0x150], xmm5
xorps xmm6, xmmword [rbp + 0xe0]
movdqa xmmword [rbp + 0x160], xmm6
xorps xmm7, xmmword [rbp + 0xf0]
movdqa xmmword [rbp + 0x170], xmm7
lea r8, [rbp + 0x40]
lea rcx, [rbp - 0x70]
call fcn.140003170
mov r15, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x19
jb 0x14000b2c8
lea rax, [rcx + 0x19]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0xf
jbe 0x14000b2a9
mov rax, qword [r15]
lea rbx, [rax + rcx]
mov r8d, Ordinal_27
lea rdx, str.___description_:___User:
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x19], 0
jmp 0x14000b2e8
mov qword [rsp + 0x20], Ordinal_32
lea r9, str.___description_:___User:
mov edx, Ordinal_27
mov rcx, r15
call fcn.140003590
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x70], xmm1
movups xmm0, xmmword [r15]
movups xmmword [rbp + 0x60], xmm0
movups xmm1, xmmword [r15 + 0x10]
movups xmmword [rbp + 0x70], xmm1
xor r13d, r13d
mov qword [r15 + 0x10], r13
mov qword [r15 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r15], r13b
lea r9, [rbp - 0x20]
cmp r14, 0xf
cmova r9, rsi
mov rcx, qword [rbp + 0x70]
mov rdx, qword [rbp + 0x78]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x14000b369
lea rax, [rdi + rcx]
mov qword [rbp + 0x70], rax
lea rbx, [rbp + 0x60]
cmp rdx, 0xf
cmova rbx, qword [rbp + 0x60]
add rbx, rcx
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], r13b
lea rax, [rbp + 0x60]
jmp 0x14000b382
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp + 0x60]
call fcn.140003590
mov r14, qword [rbp - 8]
mov rsi, qword [rbp - 0x20]
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x78]
mov rax, rdx
sub rax, rcx
cmp rax, 7
jb 0x14000b3ff
lea rax, [rcx + 7]
mov qword [rbp - 0x80], rax
lea rbx, [rsp + 0x70]
cmp rdx, 0xf
cmova rbx, qword [rsp + 0x70]
add rbx, rcx
mov r8d, 7
lea rdx, str._n_IP:
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 7], 0
lea rax, [rsp + 0x70]
jmp 0x14000b41e
mov qword [rsp + 0x20], 7
lea r9, str._n_IP:
mov edx, 7
lea rcx, [rsp + 0x70]
call fcn.140003590
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rbp]
mov rdi, qword [rbp]
mov rax, qword [rbp + 0x18]
mov qword [rbp - 0x30], rax
cmp rax, 0xf
cmova r9, rdi
mov r13, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
sub rax, r13
mov r15, qword [rbp + 0x10]
cmp r15, rax
ja 0x14000b4bb
lea rax, [r15 + r13]
mov qword [rsp + 0x60], rax
lea rbx, [rsp + 0x50]
cmp rcx, 0xf
cmova rbx, qword [rsp + 0x50]
lea rcx, [rbx + r13]
mov r8, r15
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + r13]
mov byte [rax + r15], 0
lea rax, [rsp + 0x50]
mov r15, qword [rbp - 0x30]
jmp 0x14000b4d5
mov qword [rsp + 0x20], r15
mov rdx, r15
lea rcx, [rsp + 0x50]
call fcn.140003590
mov r15, qword [rbp + 0x18]
mov rdi, qword [rbp]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x40], xmm1
xor r13d, r13d
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r13b
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
mov rax, rdx
sub rax, rcx
cmp rax, 0x16
jb 0x14000b55a
lea rax, [rcx + 0x16]
mov qword [rsp + 0x40], rax
lea rbx, [rsp + 0x30]
cmp rdx, 0xf
cmova rbx, qword [rsp + 0x30]
add rbx, rcx
mov r8d, reloc.WLDAP32.dll_Ordinal_22
lea rdx, str.___color_:_10181046_
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x16], r13b
lea rax, [rsp + 0x30]
jmp 0x14000b579
mov qword [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_22
lea r9, str.___color_:_10181046_
mov edx, reloc.WLDAP32.dll_Ordinal_22
lea rcx, [rsp + 0x30]
call fcn.140003590
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14000b5e6
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b5e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b5e1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a41c4
movdqa xmm0, xmmword [0x1402964a0]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x14000b641
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b634
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b634
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a41c4
movdqa xmm0, xmmword [0x1402964a0]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x14000b693
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b686
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b686
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a41c4
movdqa xmm0, xmmword [0x1402964a0]
movdqu xmmword [rbp - 0x80], xmm0
mov byte [rsp + 0x70], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x14000b6e3
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b6d6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b6d6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a41c4
movdqa xmm0, xmmword [0x1402964a0]
movdqu xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x14000b72a
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b725
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b725
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a41c4
lea rdx, str.Content_Type:_application_json
xor ecx, ecx
call fcn.140053870
mov rbx, rax
lea r8, [rbp + 0x100]
mov edx, 0x2712
mov rcx, r12
call fcn.140056230
mov r8, rbx
mov edx, 0x2727
mov rcx, r12
call fcn.140056230
lea r8, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova r8, qword [rbp + 0x20]
mov edx, 0x271f
mov rcx, r12
call fcn.140056230
mov rcx, r12
call fcn.140053590
mov rcx, r12
call fcn.1400534b0
call fcn.140053720
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x14000b7cd
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b7c8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b7c8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a41c4
movdqa xmm0, xmmword [0x1402964a0]
movdqu xmmword [rbp + 0x30], xmm0
mov byte [rbp + 0x20], 0
cmp r15, 0xf
jbe 0x14000b819
lea rdx, [r15 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000b810
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b810
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1400a41c4
nop
cmp r14, 0xf
jbe 0x14000b854
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14000b84b
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b84b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.1400a41c4
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x14000b892
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b88d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b88d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a41c4
mov rcx, qword [rbp + 0x180]
xor rcx, rsp
call fcn.1400a4160
lea r11, [rsp + 0x2b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001cf0
nop
call fcn.140001c50
int3