Function at 0x1400145c0
Capabilities:
Delete file
Execute command
Move file

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x190]
sub rsp, 0x290
lea rcx, [0x140084540]
xor r13d, r13d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [str.716322]
lea r8, [rsp + 0x30]
vmovdqu xmm1, xmmword [0x140085a50]
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x30], eax
lea rdx, [rbp + 8]
movzx eax, word [0x140084558]
lea rcx, [0x1400a1b80]
mov word [rsp + 0x34], ax
vmovdqu xmmword [rsp + 0x40], xmm1
mov byte [rsp + 0x36], r13b
call fcn.140024720
mov eax, dword [str.567655]
lea r8, [rsp + 0x30]
vmovdqu xmm1, xmmword [0x140085a50]
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x30], eax
lea rdx, [rbp - 0x10]
movzx eax, word [0x140084560]
lea rcx, [0x1400a1b80]
mov word [rsp + 0x34], ax
vmovdqu xmmword [rsp + 0x40], xmm1
mov byte [rsp + 0x36], r13b
call fcn.140024720
mov rax, qword [rbp + 0x10]
cmp qword [rbp + 8], rax
je 0x1400150d4
mov rax, qword [rbp - 8]
cmp qword [rbp - 0x10], rax
je 0x1400150d4
lea edx, [r13 + 0xa]
lea rcx, [rbp + 0x170]
call fcn.140013560
mov rsi, qword [0x1400a1af0]
mov r13, rax
movabs rax, 0x7fffffffffffffff
mov rcx, rax
sub rcx, rsi
cmp rcx, 1
jb 0x1400151b9
cmp qword [0x1400a1af8], 0xf
lea r12, [0x1400a1ae0]
mov ebx, reloc.WS2_32.dll_ntohs
lea r14, [rsi + 1]
mov r15, r12
lea rdi, [rsp + 0x30]
cmova r15, qword [0x1400a1ae0]
movabs rcx, 0x8000000000000000
vpxor xmm0, xmm0, xmm0
lea edx, [rbx + 7]
vmovups xmmword [rsp + 0x30], xmm0
cmp r14, rbx
jbe 0x140014786
mov rbx, r14
or rbx, 0xf
cmp rbx, rax
jbe 0x14001474d
mov rbx, rax
lea rax, [rcx + 0x27]
mov rcx, rax
call fcn.14007fcec
test rax, rax
je 0x140014911
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140014781
cmp rbx, rdx
cmovb rbx, rdx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140014770
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001519e
jmp 0x14001472e
test rcx, rcx
je 0x14001477f
call fcn.14007fcec
mov rdi, rax
jmp 0x140014781
xor edi, edi
mov qword [rsp + 0x30], rdi
mov r8, rsi
mov qword [rsp + 0x40], r14
mov rdx, r15
mov qword [rsp + 0x48], rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movzx edx, byte [rbp + 0x1c0]
lea r8, [rsp + 0x30]
mov byte [rdi + rsi], 0x5c
lea rcx, [rbp - 0x70]
mov r9, r13
mov byte [rdi + r14], 0
call fcn.140009c40
mov rdx, qword [rbp - 0x58]
mov rcx, qword [rbp - 0x60]
mov rax, rdx
sub rax, rcx
cmp rax, 4
jb 0x1400147fa
lea rax, [rcx + 4]
cmp rdx, 0xf
mov qword [rbp - 0x60], rax
lea rax, [rbp - 0x70]
cmova rax, qword [rbp - 0x70]
mov dword [rax + rcx], 0x6578652e
mov byte [rax + rcx + 4], 0
lea rax, [rbp - 0x70]
jmp 0x140014820
movzx r8d, byte [rbp + 0x1c0]
lea r9, str..exe
mov edx, 4
mov qword [rsp + 0x20], 4
lea rcx, [rbp - 0x70]
call fcn.1400047f0
xor r13d, r13d
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], r13
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x70], xmm0
vmovups ymm0, ymmword [rax]
vmovups ymmword [rsp + 0x70], ymm0
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r13b
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x14001488c
mov rcx, qword [rbp - 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014884
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140014911
vzeroupper
call fcn.14007fd28
mov rdx, qword [rsp + 0x48]
mov byte [rbp - 0x70], r13b
vmovdqu xmm0, xmmword [0x140085a30]
vmovdqu xmmword [rbp - 0x60], xmm0
cmp rdx, 0xf
jbe 0x1400148d9
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400148d1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140014911
vzeroupper
call fcn.14007fd28
mov rdx, qword [rbp + 0x188]
cmp rdx, 0xf
jbe 0x140014923
mov rcx, qword [rbp + 0x170]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001491b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001491b
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
vzeroupper
call fcn.14007fd28
mov rsi, qword [0x1400a1af0]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rsi
cmp rax, 0xa
jb 0x1400151bf
cmp qword [0x1400a1af8], 0xf
lea r14, [rsi + 0xa]
mov r15, r12
mov qword [rsp + 0x60], r13
cmova r15, qword [0x1400a1ae0]
lea rdi, [rsp + 0x50]
mov ebx, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x68], r13
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x50], xmm0
cmp r14, rbx
jbe 0x140014a04
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x1400149c1
movabs rax, 0x8000000000000000
mov rbx, rcx
add rax, 0x27
mov rcx, rax
vzeroupper
call fcn.14007fcec
test rax, rax
je 0x14001516b
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400149ff
cmp rbx, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400149ea
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400151a4
jmp 0x14001499f
test rcx, rcx
je 0x1400149fc
vzeroupper
call fcn.14007fcec
mov rdi, rax
jmp 0x1400149ff
mov rdi, r13
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], r14
mov r8, rsi
mov qword [rsp + 0x68], rbx
mov rdx, r15
mov rcx, rdi
vzeroupper
call sub.VCRUNTIME140.dll_memcpy
vmovsd xmm0, qword [str.cheat.dll]
vmovsd qword [rdi + rsi], xmm0
movzx eax, word [0x1400845a0]
movabs r15, 0x7fffffffffffffff
mov word [rdi + rsi + 8], ax
mov rax, r15
mov byte [rdi + r14], r13b
mov r14, qword [0x1400a1af0]
sub rax, r14
cmp rax, 1
jb 0x1400151c8
cmp qword [0x1400a1af8], 0xf
lea rsi, [r14 + 1]
mov ebx, reloc.WS2_32.dll_ntohs
lea rdi, [rbp + 0x20]
cmova r12, qword [0x1400a1ae0]
vpxor xmm0, xmm0, xmm0
vpxor xmm1, xmm1, xmm1
vmovups xmmword [rbp + 0x20], xmm0
vmovdqu xmmword [rbp + 0x30], xmm1
cmp rsi, rbx
jbe 0x140014b0c
mov rbx, rsi
or rbx, 0xf
cmp rbx, r15
jbe 0x140014acd
movabs rax, 0x8000000000000000
mov rbx, r15
add rax, 0x27
mov rcx, rax
call fcn.14007fcec
test rax, rax
je 0x140014bae
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140014b08
cmp rbx, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140014af6
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400151ad
jmp 0x140014aae
test rcx, rcx
je 0x140014b05
call fcn.14007fcec
mov rdi, rax
jmp 0x140014b08
mov rdi, r13
mov qword [rbp + 0x20], rdi
mov r8, r14
mov qword [rbp + 0x30], rsi
mov rdx, r12
mov qword [rbp + 0x38], rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r14], 0x5c
lea rdx, [0x1400a1b00]
mov byte [rdi + rsi], r13b
lea rcx, [rbp + 0x20]
cmp qword [0x1400a1b18], 0xf
mov r8, qword [0x1400a1b10]
cmova rdx, qword [0x1400a1b00]
call fcn.14000e6c0
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp - 0x30], xmm0
vpxor xmm1, xmm1, xmm1
vmovdqu xmmword [rbp - 0x20], xmm1
vmovups ymm0, ymmword [rax]
vmovups ymmword [rbp - 0x30], ymm0
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r13b
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x140014bc0
mov rcx, qword [rbp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014bb8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140014bb8
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
vzeroupper
call fcn.14007fd28
cmp qword [rbp - 0x78], 0xf
lea rbx, [rsp + 0x70]
lea rax, [0x140084538]
cmova rbx, qword [rsp + 0x70]
lea rcx, [rbp + 0x108]
mov qword [rbp + 0x60], rax
vzeroupper
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
xor r9d, r9d
lea rdx, [rbp + 0x68]
xor r8d, r8d
lea rcx, [rbp + 0x60]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
mov rax, qword [rbp + 0x60]
lea r12, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x60], r12
mov rax, qword [rbp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x5c], edx
lea rcx, [rbp + 0x68]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov byte [rbp + 0xe4], r13b
lea rcx, [rbp + 0x68]
mov qword [rbp + 0x68], rax
mov byte [rbp + 0xd9], r13b
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov rax, qword [0x1400a2300]
lea rcx, [rbp + 0x68]
mov r9d, 0x40
mov qword [rbp + 0xe8], r13
mov rdx, rbx
mov qword [rbp + 0xdc], rax
mov qword [rbp + 0xd0], r13
lea r8d, [r9 - 0x1e]
call fcn.140017720
test rax, rax
jne 0x140014ca5
mov rax, qword [rbp + 0x60]
xor r8d, r8d
movsxd rcx, dword [rax + 4]
lea edx, [r8 + 2]
lea rax, [rbp + 0x60]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov rax, qword [rbp + 0x60]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x60], r12
mov rax, qword [rbp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x5c], edx
cmp qword [rbp + 0xe8], r13
je 0x140014f87
mov r8, qword [rbp + 0x10]
lea rcx, [rbp + 0x60]
mov rdx, qword [rbp + 8]
sub r8, rdx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rbp + 0x68]
call fcn.140010d50
test rax, rax
jne 0x140014d10
mov rax, qword [rbp + 0x60]
xor r8d, r8d
movsxd rcx, dword [rax + 4]
lea edx, [r8 + 2]
lea rax, [rbp + 0x60]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov rsi, qword [rbp - 0x80]
mov rax, r15
sub rax, rsi
cmp rax, 1
jb 0x140015198
cmp qword [rbp - 0x78], 0xf
lea r15, [rsp + 0x70]
lea r14, [rsi + 1]
mov ebx, reloc.WS2_32.dll_ntohs
cmova r15, qword [rsp + 0x70]
lea rdi, [rbp + 0x40]
vpxor xmm0, xmm0, xmm0
vpxor xmm1, xmm1, xmm1
vmovups xmmword [rbp + 0x40], xmm0
vmovdqu xmmword [rbp + 0x50], xmm1
cmp r14, rbx
jbe 0x140014de1
mov rbx, r14
movabs rcx, 0x7fffffffffffffff
or rbx, 0xf
cmp rbx, rcx
jbe 0x140014da2
movabs rax, 0x8000000000000000
mov rbx, rcx
add rax, 0x27
mov rcx, rax
call fcn.14007fcec
test rax, rax
je 0x140014e7a
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140014ddd
cmp rbx, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140014dcb
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400151b3
jmp 0x140014d83
test rcx, rcx
je 0x140014dda
call fcn.14007fcec
mov rdi, rax
jmp 0x140014ddd
mov rdi, r13
mov qword [rbp + 0x40], rdi
mov r8, rsi
mov qword [rbp + 0x50], r14
mov rdx, r15
mov qword [rbp + 0x58], rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], reloc.WLDAP32.dll_Ordinal_32
lea rdx, [rsp + 0x50]
mov byte [rdi + r14], r13b
lea rcx, [rbp + 0x40]
cmp qword [rsp + 0x68], 0xf
mov r8, qword [rsp + 0x60]
cmova rdx, qword [rsp + 0x50]
call fcn.14000e6c0
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp - 0x50], xmm0
vpxor xmm1, xmm1, xmm1
vmovdqu xmmword [rbp - 0x40], xmm1
vmovups ymm0, ymmword [rax]
vmovups ymmword [rbp - 0x50], ymm0
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r13b
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x140014e8c
mov rcx, qword [rbp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014e84
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140014e84
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
vzeroupper
call fcn.14007fd28
cmp qword [rbp - 0x38], 0xf
lea rcx, [rbp - 0x50]
cmova rcx, qword [rbp - 0x50]
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp qword [rbp - 0x78], 0xf
lea rcx, [rsp + 0x70]
cmova rcx, qword [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
test eax, eax
je 0x140014ee0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_remove_loader_file.
call fcn.140001df0
lea rdx, [0x140006060]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp qword [rbp - 0x18], 0xf
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x50]
cmova rdx, qword [rbp - 0x30]
cmp qword [rsp + 0x68], 0xf
cmova rcx, qword [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_rename]
test eax, eax
je 0x140014f2c
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_rename_DLL_file.
call fcn.140001df0
lea rdx, [0x140006060]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x140084540]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140014f74
mov rcx, qword [rbp - 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014f6f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001516b
call fcn.14007fd28
vmovdqu xmm0, xmmword [0x140085a30]
vmovdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x50], r13b
jmp 0x140014faa
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_open_loader_file_for_writing.
call fcn.140001df0
lea rdx, [0x140006060]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [rbp + 0x60]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x60], r12
mov rax, qword [rbp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x5c], edx
lea rcx, [rbp + 0x68]
call fcn.14000acf0
lea rcx, [rbp + 0x70]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x108]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x140015024
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001501f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001516b
call fcn.14007fd28
mov rdx, qword [rsp + 0x68]
mov byte [rbp - 0x30], r13b
vmovdqu xmm0, xmmword [0x140085a30]
vmovdqu xmmword [rbp - 0x20], xmm0
cmp rdx, 0xf
jbe 0x140015072
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001506d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001516b
call fcn.14007fd28
mov rdx, qword [rbp - 0x78]
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x50], r13b
cmp rdx, 0xf
jbe 0x1400150c1
mov rcx, qword [rsp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400150bc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001516b
call fcn.14007fd28
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x70], r13b
jmp 0x1400150f7
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_download_loader_or_DLL.
call fcn.140001df0
lea rdx, [0x140006060]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp - 0x10]
test rcx, rcx
je 0x14001513a
mov rdx, qword [rbp]
mov rax, rcx
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140015128
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001516b
call fcn.14007fd28
vpxor xmm0, xmm0, xmm0
vmovdqu xmmword [rbp - 8], xmm0
mov qword [rbp - 0x10], r13
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x140015177
mov rdx, qword [rbp + 0x18]
mov rax, rcx
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140015172
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140015172
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007fd28
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14000e610
int3
call fcn.14000e260
int3
vzeroupper
call fcn.14000e260
int3
call fcn.14000e260
int3
call fcn.14000e260
int3
call fcn.14000e610
int3
vzeroupper
call fcn.14000e610
int3
call fcn.14000e610
int3