Function at 0x140008a80
Capabilities:
Contain obfuscated stackstrings
Create directory
Download url
Receive data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x310]
sub rsp, 0x410
mov rax, qword [0x14002d140]
xor rax, rsp
mov qword [rbp + 0x300], rax
xor esi, esi
mov r12d, esi
mov dword [rbp - 0x70], esi
mov dword [rsp + 0x67], 0x19001954
mov cl, 0x19
mov dword [rsp + 0x63], 0x7c6f705f
mov dword [rsp + 0x5f], 0x7c72785f
mov dword [rsp + 0x5b], 0x45786d78
mov dword [rsp + 0x57], 0x5d74786b
mov dword [rsp + 0x53], 0x7e766b49
mov word [rsp + 0x51], 0x4523
mov byte [rsp + 0x50], 0x5a
lea rax, [rsp + 0x50]
nop dword [rax]
nop word [rax + rax]
xor byte [rax], cl
inc rax
lea rcx, [rsp + 0x69]
cmp rax, rcx
je 0x140008b26
movzx ecx, byte [rsp + 0x6a]
jmp 0x140008b10
mov byte [rsp + 0x69], 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1d8], xmm1
lea rax, [rsp + 0x50]
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], sil
jne 0x140008b50
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x1c8]
call fcn.14000e410
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x148], xmm0
mov qword [rbp + 0x158], rsi
mov qword [rbp + 0x160], rsi
mov r8d, 3
lea rdx, [0x140025278]
lea rcx, [rbp + 0x148]
call fcn.14000e410
nop
lea rcx, [rbp + 0x1c8]
cmp qword [rbp + 0x1e0], 0xf
cmova rcx, qword [rbp + 0x1c8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
jne 0x140008bc6
call qword [sym.imp.KERNEL32.dll_GetLastError]
xorps xmm0, xmm0
movups xmmword [rbp + 0x188], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x198], xmm1
mov r8d, 0x21
lea rdx, str.https:__pastebin.com_raw_akc32Qtv
lea rcx, [rbp + 0x188]
call fcn.14000e410
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x168], xmm0
mov qword [rbp + 0x178], rsi
mov r13d, 0xf
mov qword [rbp + 0x180], r13
mov byte [rbp + 0x168], 0
movups xmmword [rbp + 0x1a8], xmm0
movdqa xmm1, xmmword [0x140025fd0]
movdqu xmmword [rbp + 0x1b8], xmm1
mov byte [rbp + 0x1a8], 0
call qword [sym.imp.libcurl.dll_curl_easy_init]
mov r14, rax
mov r15, qword [rbp + 0x148]
test rax, rax
je 0x140009984
lea r8, [rbp + 0x188]
cmp qword [rbp + 0x1a0], r13
cmova r8, qword [rbp + 0x188]
mov edx, 0x2712
mov rcx, rax
call qword [sym.imp.libcurl.dll_curl_easy_setopt]
lea r8, [0x140005690]
mov edx, 0x4e2b
mov rcx, r14
call qword [sym.imp.libcurl.dll_curl_easy_setopt]
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], rsi
mov qword [rbp + 0x120], r13
mov byte [rbp + 0x108], 0
lea r8, [rbp + 0x108]
mov edx, 0x2711
mov rcx, r14
call qword [sym.imp.libcurl.dll_curl_easy_setopt]
mov rcx, r14
call qword [sym.imp.libcurl.dll_curl_easy_perform]
test eax, eax
je 0x140008d09
mov ecx, eax
call qword [sym.imp.libcurl.dll_curl_easy_strerror]
mov rbx, rax
lea rdx, str.Failed_to_download:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14000dc20
mov rcx, rax
mov rdx, rbx
call fcn.14000dc20
mov rcx, rax
lea rdx, [0x14000ddf0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140008e26
lea rsi, [rbp + 0x108]
mov r13, qword [rbp + 0x108]
cmp qword [rbp + 0x120], 0xf
cmova rsi, r13
mov r15, qword [rbp + 0x118]
test r15, r15
je 0x140008d4c
mov r8, r15
mov edx, 0xa
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x140008d4c
sub rbx, rsi
jmp 0x140008d4f
mov rbx, rdi
cmp rbx, 0xffffffffffffffff
je 0x140008e1d
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov r8, rbx
cmp r15, rbx
cmovb r8, r15
lea rdx, [rbp + 0x108]
cmp qword [rbp + 0x120], 0xf
cmova rdx, r13
lea rcx, [rsp + 0x30]
call fcn.14000e410
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [rbp + 0x168], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [rbp + 0x178], xmm1
inc rbx
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov rax, qword [rbp + 0x118]
cmp rax, rbx
jb 0x140009c69
sub rax, rbx
cmp rax, 0xffffffffffffffff
cmovb rdi, rax
lea rdx, [rbp + 0x108]
cmp qword [rbp + 0x120], 0xf
cmova rdx, qword [rbp + 0x108]
add rdx, rbx
mov r8, rdi
lea rcx, [rsp + 0x30]
call fcn.14000e410
mov r12d, 0xc
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [rbp + 0x1a8], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [rbp + 0x1b8], xmm1
xor esi, esi
mov r15, qword [rbp + 0x148]
mov rcx, r14
call qword [sym.imp.libcurl.dll_curl_easy_cleanup]
nop
mov byte [rbp + 0xa8], 0
mov qword [rbp + 0xb0], rsi
lea rax, [rbp + 0xb8]
mov qword [rbp - 0x70], rax
mov byte [rbp + 0xb8], 0
xor eax, eax
mov qword [rbp + 0xc0], rax
xor edx, edx
lea rcx, [rbp + 0xc0]
call fcn.14000c970
mov byte [rbp + 0xb8], 3
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
mov ecx, 0x20
call fcn.14001f710
mov rbx, rax
lea rax, [rbp + 0xa0]
mov qword [rbp + 0xe8], rax
mov qword [rbp + 0xf0], rbx
lea rdx, [rbp + 0x168]
mov rcx, rbx
call fcn.14000bb50
nop
mov qword [rbp + 0xc0], rbx
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov r8d, 4
lea rdx, str.link
lea rcx, [rsp + 0x30]
call fcn.14000e410
lea rax, [rsp + 0x30]
mov qword [rbp + 0xe8], rax
movzx ecx, byte [rbp + 0xa8]
test cl, cl
jne 0x140008f0d
mov byte [rbp + 0xa8], 1
call fcn.14000f230
mov qword [rbp + 0xb0], rax
movzx ecx, byte [rbp + 0xa8]
jmp 0x140008f14
mov rax, qword [rbp + 0xb0]
cmp cl, 1
jne 0x140009c0f
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0xd8]
mov rcx, rax
call fcn.1400103a0
mov rbx, qword [rbp + 0xd8]
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x140008f78
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008f73
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008f73
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001f98c
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
movzx ecx, byte [rbx + 0x40]
movzx eax, byte [rbp + 0xb8]
mov byte [rbx + 0x40], al
mov byte [rbp + 0xb8], cl
mov rax, qword [rbx + 0x48]
mov rcx, qword [rbp + 0xc0]
mov qword [rbx + 0x48], rcx
mov qword [rbp + 0xc0], rax
movzx edx, byte [rbp + 0xb8]
lea rcx, [rbp + 0xc0]
call fcn.14000c970
nop
lea rax, [rbp + 0xb8]
mov qword [rbp + 0xe8], rax
mov byte [rbp + 0xb8], 0
xor eax, eax
mov qword [rbp + 0xc0], rax
xor edx, edx
lea rcx, [rbp + 0xc0]
call fcn.14000c970
mov byte [rbp + 0xb8], 3
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
mov ecx, 0x20
call fcn.14001f710
mov rbx, rax
lea rax, [rbp + 0xa0]
mov qword [rbp + 0xd8], rax
mov qword [rbp + 0xe0], rbx
lea rdx, [rbp + 0x1a8]
mov rcx, rbx
call fcn.14000bb50
nop
mov qword [rbp + 0xc0], rbx
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov r8d, 7
lea rdx, str.version
lea rcx, [rsp + 0x30]
call fcn.14000e410
lea rax, [rsp + 0x30]
mov qword [rbp - 0x70], rax
movzx ecx, byte [rbp + 0xa8]
test cl, cl
jne 0x140009098
mov byte [rbp + 0xa8], 1
call fcn.14000f230
mov qword [rbp + 0xb0], rax
movzx ecx, byte [rbp + 0xa8]
jmp 0x14000909f
mov rax, qword [rbp + 0xb0]
cmp cl, 1
jne 0x140009d1a
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0xd8]
mov rcx, rax
call fcn.1400103a0
mov rbx, qword [rbp + 0xd8]
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x140009103
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400090fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400090fe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001f98c
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
movzx ecx, byte [rbx + 0x40]
movzx eax, byte [rbp + 0xb8]
mov byte [rbx + 0x40], al
mov byte [rbp + 0xb8], cl
mov rax, qword [rbx + 0x48]
mov rcx, qword [rbp + 0xc0]
mov qword [rbx + 0x48], rcx
mov qword [rbp + 0xc0], rax
movzx edx, byte [rbp + 0xb8]
lea rcx, [rbp + 0xc0]
call fcn.14000c970
nop
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x1f0]
call sub.VCRUNTIME140.dll_memset
movdqa xmm0, xmmword [0x140026050]
movdqa xmm1, xmmword [0x140026040]
mov dword [rbp - 0x18], 0xb270b515
mov word [rbp - 0x14], 0xbde3
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov qword [rbp + 0xd8], rcx
mov edx, 0x1b4
mov eax, dword [rdx + rcx]
mov ebx, 0x1c8
add rbx, rcx
test al, 1
jne 0x140009205
or eax, 1
mov dword [rdx + rcx], eax
mov byte [rbx + 0x26], 1
lea rax, [rbx + 0x25]
lea rcx, [rbp - 0x13]
cmp rbx, rcx
ja 0x1400091e3
lea rcx, [rbp - 0x38]
cmp rax, rcx
jb 0x1400091e3
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
mov eax, dword [rbp - 0x18]
mov dword [rbx + 0x20], eax
movzx eax, word [rbp - 0x14]
mov word [rbx + 0x24], ax
jmp 0x1400091f8
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
mov eax, dword [rbp - 0x18]
mov dword [rbx + 0x20], eax
movzx eax, word [rbp - 0x14]
mov word [rbx + 0x24], ax
lea rcx, [0x140021770]
call fcn.14001fa68
nop
cmp byte [rbx + 0x26], 0
je 0x1400092aa
xor byte [rbx], 0x3b
xor byte [rbx + 1], 0xdf
xor byte [rbx + 2], 3
xor byte [rbx + 3], 0xdd
xor byte [rbx + 4], 0x8d
xor byte [rbx + 5], 0xbd
xor byte [rbx + 6], 0xc3
xor byte [rbx + 7], 0x77
xor byte [rbx + 8], 0x3b
xor byte [rbx + 9], 0xdf
xor byte [rbx + 0xa], 3
xor byte [rbx + 0xb], 0xdd
xor byte [rbx + 0xc], 0x8d
xor byte [rbx + 0xd], 0xbd
xor byte [rbx + 0xe], 0xc3
xor byte [rbx + 0xf], 0x77
xor byte [rbx + 0x10], 0x3b
xor byte [rbx + 0x11], 0xdf
xor byte [rbx + 0x12], 3
xor byte [rbx + 0x13], 0xdd
xor byte [rbx + 0x14], 0x8d
xor byte [rbx + 0x15], 0xbd
xor byte [rbx + 0x16], 0xc3
xor byte [rbx + 0x17], 0x77
xor byte [rbx + 0x18], 0x3b
xor byte [rbx + 0x19], 0xdf
xor byte [rbx + 0x1a], 3
xor byte [rbx + 0x1b], 0xdd
xor byte [rbx + 0x1c], 0x8d
xor byte [rbx + 0x1d], 0xbd
xor byte [rbx + 0x1e], 0xc3
xor byte [rbx + 0x1f], 0x77
xor byte [rbx + 0x20], 0x3b
xor byte [rbx + 0x21], 0xdf
xor byte [rbx + 0x22], 3
xor byte [rbx + 0x23], 0xdd
xor byte [rbx + 0x24], 0x8d
xor byte [rbx + 0x25], 0xbd
mov byte [rbx + 0x26], 0
mov rdx, rbx
lea rcx, [rbp + 0x1f0]
call fcn.14000b880
nop
mov edx, 4
lea rcx, [rbp + 0xb8]
call qword [sym.imp.MSVCP140.dll_struct_std::_Smanip_long_long___int64_____cdecl_std::setw_long_long___int64__]
mov rcx, qword [rbp + 0x1f0]
movsxd r8, dword [rcx + 4]
lea rcx, [rbp + 0x1f0]
add rcx, r8
mov rdx, qword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0xa8]
lea rcx, [rbp + 0x1f0]
call fcn.14000a8d0
mov rcx, rax
lea rdx, [0x14000ddf0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1f8]
call fcn.14000cfb0
test rax, rax
jne 0x14000933d
mov rax, qword [rbp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1f0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov r8d, 7
lea rdx, str.version
lea rcx, [rsp + 0x30]
call fcn.14000e410
lea rax, [rsp + 0x30]
mov qword [rbp + 0xe8], rax
movzx ecx, byte [rbp + 0xa8]
test cl, cl
jne 0x140009399
mov byte [rbp + 0xa8], 1
call fcn.14000f230
mov qword [rbp + 0xb0], rax
movzx ecx, byte [rbp + 0xa8]
jmp 0x1400093a0
mov rax, qword [rbp + 0xb0]
cmp cl, 1
jne 0x140009cc6
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0xb8]
mov rcx, rax
call fcn.1400103a0
mov rbx, qword [rbp + 0xb8]
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x140009404
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400093ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400093ff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001f98c
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x128], xmm0
mov r8, rsi
mov qword [rbp + 0x138], rsi
mov esi, 0xf
mov qword [rbp + 0x140], rsi
mov byte [rbp + 0x128], 0
or r12d, 2
mov dword [rbp - 0x70], r12d
cmp byte [rbx + 0x40], 3
jne 0x140009c6f
mov rax, qword [rbx + 0x48]
lea rcx, [rbp + 0x128]
cmp rcx, rax
je 0x1400094b1
mov r9, rax
cmp qword [rax + 0x18], rsi
jbe 0x14000946c
mov r9, qword [rax]
mov rbx, qword [rax + 0x10]
lea rcx, [rbp + 0x128]
cmp rbx, rsi
ja 0x140009498
mov qword [rbp + 0x138], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx + 0x128], 0
jmp 0x1400094a3
xor r8d, r8d
mov rdx, rbx
call fcn.14000eb80
mov r8, qword [rbp + 0x138]
mov rsi, qword [rbp + 0x140]
lea rdx, [rbp + 0x148]
cmp qword [rbp + 0x160], 0xf
cmova rdx, r15
lea rcx, [rbp + 0x128]
mov r15, qword [rbp + 0x128]
cmp rsi, 0xf
cmova rcx, r15
mov r13, qword [rbp + 0x180]
mov r14, qword [rbp + 0x168]
cmp r8, qword [rbp + 0x158]
jne 0x140009504
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140009504
call fcn.140007f50
jmp 0x140009892
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc8], xmm1
lea r12, [rbp + 0x168]
cmp r13, 0xf
cmova r12, r14
movabs rbx, 0x7fffffffffffffff
mov rdi, qword [rbp + 0x178]
cmp rdi, rbx
ja 0x140009cc0
cmp rdi, 0xf
ja 0x14000956b
mov qword [rbp + 0xc8], rdi
mov qword [rbp + 0xd0], 0xf
movups xmm0, xmmword [r12]
movups xmmword [rbp + 0xb8], xmm0
jmp 0x140009605
mov rax, rdi
or rax, 0xf
cmp rax, rbx
jbe 0x1400095a7
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14001f710
mov rcx, rax
test rax, rax
je 0x140009885
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400095e0
mov rbx, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400095d2
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140009c63
jmp 0x140009585
test rcx, rcx
je 0x1400095de
call fcn.14001f710
jmp 0x1400095e0
xor eax, eax
mov qword [rbp + 0xb8], rax
mov qword [rbp + 0xc8], rdi
mov qword [rbp + 0xd0], rbx
lea r8, [rdi + 1]
mov rdx, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf8], xmm1
mov r8d, 0xa
lea rdx, str.Loader.rar
lea rcx, [rbp + 0xe8]
call fcn.14000e410
nop
lea r8, [rbp + 0xe8]
cmp qword [rbp + 0x100], 0xf
cmova r8, qword [rbp + 0xe8]
lea rdx, [rbp + 0xb8]
cmp qword [rbp + 0xd0], 0xf
cmova rdx, qword [rbp + 0xb8]
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movdqa xmm0, xmmword [0x1400260d0]
movdqa xmm1, xmmword [0x140026210]
mov dword [rbp - 0x48], 0xb1a33023
mov dword [rbp - 0x44], 0x8548c7e6
mov word [rbp - 0x40], 0x4b2d
mov ecx, 0x294
mov rdi, qword [rbp + 0xd8]
mov eax, dword [rcx + rdi]
mov ebx, 0x200
test al, 1
jne 0x14000971f
or eax, 1
mov dword [rcx + rdi], eax
lea rcx, [rdi + rbx]
mov byte [rcx + 0x2b], 1
lea rax, [rcx + 0x2a]
lea rdx, [rbp - 0x3e]
cmp rcx, rdx
ja 0x1400096f5
lea rdx, [rbp - 0x68]
cmp rax, rdx
jb 0x1400096f5
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
movsd xmm0, qword [rbp - 0x48]
movsd qword [rcx + 0x20], xmm0
movzx eax, word [rbp - 0x40]
mov word [rcx + 0x28], ax
mov byte [rcx + 0x2a], 0xd3
jmp 0x140009712
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
movsd xmm0, qword [rbp - 0x48]
movsd qword [rcx + 0x20], xmm0
movzx eax, word [rbp - 0x40]
mov word [rcx + 0x28], ax
mov byte [rcx + 0x2a], 0xd3
lea rcx, [0x140021740]
call fcn.14001fa68
nop
lea rdx, [rbx + rdi]
cmp byte [rdx + 0x2b], 0
je 0x1400097dc
xor byte [rdx], 3
xor byte [rdx + 1], 0x65
xor byte [rdx + 2], 0xd3
xor byte [rdx + 3], 0xd5
xor byte [rdx + 4], 0x87
xor byte [rdx + 5], 0xb3
xor byte [rdx + 6], 0x2d
xor byte [rdx + 7], 0xab
xor byte [rdx + 8], 3
xor byte [rdx + 9], 0x65
xor byte [rdx + 0xa], 0xd3
xor byte [rdx + 0xb], 0xd5
xor byte [rdx + 0xc], 0x87
xor byte [rdx + 0xd], 0xb3
xor byte [rdx + 0xe], 0x2d
xor byte [rdx + 0xf], 0xab
xor byte [rdx + 0x10], 3
xor byte [rdx + 0x11], 0x65
xor byte [rdx + 0x12], 0xd3
xor byte [rdx + 0x13], 0xd5
xor byte [rdx + 0x14], 0x87
xor byte [rdx + 0x15], 0xb3
xor byte [rdx + 0x16], 0x2d
xor byte [rdx + 0x17], 0xab
xor byte [rdx + 0x18], 3
xor byte [rdx + 0x19], 0x65
xor byte [rdx + 0x1a], 0xd3
xor byte [rdx + 0x1b], 0xd5
xor byte [rdx + 0x1c], 0x87
xor byte [rdx + 0x1d], 0xb3
xor byte [rdx + 0x1e], 0x2d
xor byte [rdx + 0x1f], 0xab
xor byte [rdx + 0x20], 3
xor byte [rdx + 0x21], 0x65
xor byte [rdx + 0x22], 0xd3
xor byte [rdx + 0x23], 0xd5
xor byte [rdx + 0x24], 0x87
xor byte [rdx + 0x25], 0xb3
xor byte [rdx + 0x26], 0x2d
xor byte [rdx + 0x27], 0xab
xor byte [rdx + 0x28], 3
xor byte [rdx + 0x29], 0x65
xor byte [rdx + 0x2a], 0xd3
mov byte [rdx + 0x2b], 0
mov r9d, 0x10
lea r8, str.error
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rdx, qword [rbp + 0x100]
cmp rdx, 0xf
jbe 0x140009836
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009831
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009831
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001f98c
movdqa xmm0, xmmword [0x140025fd0]
movdqu xmmword [rbp + 0xf8], xmm0
mov byte [rbp + 0xe8], 0
mov rdx, qword [rbp + 0xd0]
cmp rdx, 0xf
jbe 0x140009892
inc rdx
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000988c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000988c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001f98c
nop
cmp rsi, 0xf
jbe 0x1400098cd
lea rdx, [rsi + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x1400098c4
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400098c4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.14001f98c
nop
lea rcx, [rbp + 0x1f0]
call fcn.140004a30
nop
movzx edx, byte [rbp + 0xa8]
lea rcx, [rbp + 0xb0]
call fcn.14000c970
nop
mov rdx, qword [rbp + 0x120]
cmp rdx, 0xf
jbe 0x140009932
inc rdx
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000992d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000992d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001f98c
mov r15, qword [rbp + 0x148]
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0xf
jbe 0x140009ac3
inc rdx
mov rcx, qword [rbp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009abd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009abd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
movdqa xmm0, xmmword [0x1400261a0]
mov dword [rbp - 0x80], 0x6e4918bb
mov dword [rbp - 0x7c], 0x9d76a695
mov word [rbp - 0x78], 0x5f9b
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov ecx, 0x330
mov eax, dword [rcx + rdi]
mov ebx, 0x170
test al, 1
jne 0x140009a23
or eax, 1
mov dword [rcx + rdi], eax
lea rcx, [rdi + rbx]
mov byte [rcx + 0x1b], 1
lea rax, [rcx + 0x1a]
lea rdx, [rbp - 0x76]
cmp rcx, rdx
ja 0x1400099fd
lea rdx, [rsp + 0x70]
cmp rax, rdx
jb 0x1400099fd
movups xmmword [rcx], xmm0
movsd xmm0, qword [rbp - 0x80]
movsd qword [rcx + 0x10], xmm0
movzx eax, word [rbp - 0x78]
mov word [rcx + 0x18], ax
mov byte [rcx + 0x1a], 0x33
jmp 0x140009a16
movups xmmword [rcx], xmm0
movsd xmm0, qword [rbp - 0x80]
movsd qword [rcx + 0x10], xmm0
movzx eax, word [rbp - 0x78]
mov word [rcx + 0x18], ax
mov byte [rcx + 0x1a], 0x33
lea rcx, [0x140021710]
call fcn.14001fa68
nop
lea rdx, [rdi + rbx]
cmp byte [rdx + 0x1b], 0
je 0x140009a9c
xor byte [rdx], 0xd7
xor byte [rdx + 1], 0x71
xor byte [rdx + 2], 0x33
xor byte [rdx + 3], 0xb
xor byte [rdx + 4], 0xb5
xor byte [rdx + 5], 0xe5
xor byte [rdx + 6], 0x23
xor byte [rdx + 7], 0xcf
xor byte [rdx + 8], 0xd7
xor byte [rdx + 9], 0x71
xor byte [rdx + 0xa], 0x33
xor byte [rdx + 0xb], 0xb
xor byte [rdx + 0xc], 0xb5
xor byte [rdx + 0xd], 0xe5
xor byte [rdx + 0xe], 0x23
xor byte [rdx + 0xf], 0xcf
xor byte [rdx + 0x10], 0xd7
xor byte [rdx + 0x11], 0x71
xor byte [rdx + 0x12], 0x33
xor byte [rdx + 0x13], 0xb
xor byte [rdx + 0x14], 0xb5
xor byte [rdx + 0x15], 0xe5
xor byte [rdx + 0x16], 0x23
xor byte [rdx + 0x17], 0xcf
xor byte [rdx + 0x18], 0xd7
xor byte [rdx + 0x19], 0x71
xor byte [rdx + 0x1a], 0x33
mov byte [rdx + 0x1b], 0
mov r9d, 0x10
lea r8, str.error
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov r14, qword [rbp + 0x168]
jmp 0x140009939
call fcn.14001f98c
nop
cmp r13, 0xf
jbe 0x140009afe
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140009af5
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009af5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.14001f98c
nop
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 0xf
jbe 0x140009b42
inc rdx
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009b3d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009b3d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001f98c
movdqa xmm0, xmmword [0x140025fd0]
movdqu xmmword [rbp + 0x198], xmm0
mov byte [rbp + 0x188], 0
mov rax, qword [rbp + 0x160]
cmp rax, 0xf
jbe 0x140009b9b
lea rdx, [rax + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x140009b92
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009b92
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.14001f98c
nop
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 0xf
jbe 0x140009bdf
inc rdx
mov rcx, qword [rbp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009bda
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009bda
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001f98c
mov rcx, qword [rbp + 0x300]
xor rcx, rsp
call fcn.14001f5d0
lea r11, [rsp + 0x410]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [rbp + 0xa8]
call fcn.14000f8f0
mov qword [rbp + 0xd8], rax
lea r8, [rbp + 0xd8]
lea rdx, str.cannot_use_operator___with_a_string_argument_with
lea rcx, [rbp + 0x28]
call fcn.14000ff90
nop
lea r9, [rbp + 0xa8]
mov r8, rax
mov edx, 0x131
lea rcx, [rbp - 0x10]
call fcn.14000ef90
lea rdx, [0x14002ad18]
lea rcx, [rbp - 0x10]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.140001570
nop
call fcn.14000daf0
nop
lea rcx, [rbx + 0x40]
call fcn.14000f8f0
mov qword [rbp + 0xd8], rax
lea r8, [rbp + 0xd8]
lea rdx, str.type_must_be_string__but_is
lea rcx, [rbp + 0x80]
call fcn.14000ff90
nop
lea r9, [rbx + 0x40]
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x48]
call fcn.14000ef90
lea rdx, [0x14002ad18]
lea rcx, [rbp + 0x48]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.140001610
nop
lea rcx, [rbp + 0xa8]
call fcn.14000f8f0
mov qword [rbp + 0xd8], rax
lea r8, [rbp + 0xd8]
lea rdx, str.cannot_use_operator___with_a_string_argument_with
lea rcx, [rbp + 0x28]
call fcn.14000ff90
nop
lea r9, [rbp + 0xa8]
mov r8, rax
mov edx, 0x131
lea rcx, [rbp - 0x10]
call fcn.14000ef90
lea rdx, [0x14002ad18]
lea rcx, [rbp - 0x10]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
lea rcx, [rbp + 0xa8]
call fcn.14000f8f0
mov qword [rbp + 0xd8], rax
lea r8, [rbp + 0xd8]
lea rdx, str.cannot_use_operator___with_a_string_argument_with
lea rcx, [rbp + 0x28]
call fcn.14000ff90
nop
lea r9, [rbp + 0xa8]
mov r8, rax
mov edx, 0x131
lea rcx, [rbp - 0x10]
call fcn.14000ef90
lea rdx, [0x14002ad18]
lea rcx, [rbp - 0x10]
call sub.VCRUNTIME140.dll__CxxThrowException
int3