Function at 0x18004ee90
Capabilities:
Create process on windows
Encode data using xor
Terminate process

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x338]
sub rsp, 0x3f8
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
mov r13, rcx
xor edi, edi
lea rcx, [rbp - 8]
call fcn.18004ddb0
nop
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.18004d870
mov rbx, rax
lea rsi, [r13 + 0x108]
cmp rsi, rax
je 0x18004ef41
mov rdx, qword [rsi + 0x18]
cmp rdx, 0xf
jbe 0x18004ef15
mov rcx, qword [rsi]
inc rdx
cmp rdx, 0x1000
jb 0x18004ef10
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18004ef73
mov rcx, r8
call fcn.180096ef4
mov qword [rsi + 0x10], rdi
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
movups xmm0, xmmword [rbx]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsi + 0x10], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x18004ef7f
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004ef7a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004ef7a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180096ef4
movdqa xmm0, xmmword [0x1800b7290]
movdqu xmmword [rbp - 0x18], xmm0
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x18004efce
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004efc9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004efc9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180096ef4
cmp qword [r13 + 0x30], 0xa
jne 0x180050026
cmp qword [r13 + 0x50], 0x40
jne 0x180050026
mov dword [rsp + 0x48], 0x1214105e
mov dword [rsp + 0x4c], 0x9172208
mov word [rsp + 0x50], 0xbd
mov byte [rsp + 0x52], 1
mov rcx, rdi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x78]
xor byte [rsp + rcx + 0x48], al
inc rcx
cmp rcx, 9
jb 0x18004f010
mov byte [rsp + 0x52], 0
lea rdx, [r13 + 0x20]
lea rcx, [rbp - 8]
call fcn.18004dbc0
mov r15, rax
mov dword [rsp + 0x3a], 0x150d165e
mov dword [rsp + 0x3e], 0x1b170f19
mov word [rsp + 0x42], 0xbd
mov byte [rsp + 0x44], 1
mov rcx, rdi
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x78]
xor byte [rsp + rcx + 0x3a], al
inc rcx
cmp rcx, 9
jb 0x18004f060
mov byte [rsp + 0x44], 0
mov rdx, r13
lea rcx, [rbp + 0x1e8]
call fcn.18004dbc0
mov r14, rax
mov dword [rbp + 0x350], 0x161b175e
mov dword [rbp + 0x354], 0x1004019
mov rcx, rdi
nop
lea eax, [rcx + 0x78]
xor byte [rbp + rcx + 0x350], al
inc rcx
cmp rcx, 6
jb 0x18004f0a0
mov byte [rbp + 0x357], 0
lea rax, [rbp + 0x268]
mov qword [rbp + 0x340], rax
lea rdx, [0x18032b8a8]
lea rcx, [rbp + 0x268]
call fcn.180069280
mov rdi, rax
lea rax, [rbp + 0x288]
mov qword [rbp + 0x348], rax
lea rdx, [r13 + 0x40]
lea rcx, [rbp + 0x288]
call fcn.180069280
mov rbx, rax
mov rdx, rsi
lea rcx, [rbp + 0x2a8]
call fcn.180069280
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1c8]
call fcn.18004dee0
mov rsi, rax
mov dword [rsp + 0x30], 0x18141c5e
mov dword [rsp + 0x34], 0x42071817
mov word [rsp + 0x38], 0x100
xor ecx, ecx
lea eax, [rcx + 0x78]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 8
jb 0x18004f140
mov byte [rsp + 0x39], 0
lea rax, [rbp + 0x208]
mov qword [rbp + 0x340], rax
lea rdx, [0x18032b8a8]
lea rcx, [rbp + 0x208]
call fcn.180069280
mov rdi, rax
lea rax, [rbp + 0x18]
mov qword [rbp + 0x348], rax
lea rdx, [r13 + 0x40]
lea rcx, [rbp + 0x18]
call fcn.180069280
mov rbx, rax
lea rdx, [r13 + 0x60]
lea rcx, [rbp + 0x68]
call fcn.180069280
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1a8]
call fcn.18004dee0
mov rdi, rax
mov dword [rbp + 0x348], 0x91f0f5e
mov word [rbp + 0x34c], 0x41
mov byte [rbp + 0x34e], 1
xor ecx, ecx
nop word [rax + rax]
lea eax, [rcx + 0x78]
xor byte [rbp + rcx + 0x348], al
inc rcx
cmp rcx, 5
jb 0x18004f1e0
mov byte [rbp + 0x34e], 0
mov dword [rbp + 0x340], 0xf131711
mov word [rbp + 0x344], 0x100
xor ecx, ecx
nop
lea eax, [rcx + 0x78]
xor byte [rbp + rcx + 0x340], al
inc rcx
cmp rcx, 4
jb 0x18004f210
mov byte [rbp + 0x345], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x58], xmm1
lea rax, [rbp + 0x340]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18004f250
lea rdx, [rbp + 0x340]
lea rcx, [rbp - 0x68]
call fcn.18003e720
nop
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x188]
call fcn.18004dbc0
mov r10, rax
mov dword [rbp + 0x340], 0x1e0a000c
mov word [rbp + 0x344], 0x41
mov byte [rbp + 0x346], 1
xor ecx, ecx
nop word [rax + rax]
lea eax, [rcx + 0x78]
xor byte [rbp + rcx + 0x340], al
inc rcx
cmp rcx, 5
jb 0x18004f2a0
mov byte [rbp + 0x346], 0
lea rax, [rbp + 0x340]
mov r9, rbx
inc r9
cmp byte [rax + r9], 0
jne 0x18004f2c4
lea r8, [rbp + 0x340]
xor edx, edx
mov rcx, r10
call fcn.18003eb80
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x78], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rbp + 0x348]
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x18004f320
lea rdx, [rbp + 0x348]
lea rcx, [rsp + 0x68]
call fcn.18003de90
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x168], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x178], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, rdi
lea r8, [rbp + 0x168]
movzx edx, byte [rbp + 0x340]
lea rcx, [rbp - 0x28]
call fcn.18006e090
nop
lea rax, [rsp + 0x30]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x18004f386
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x28]
call fcn.18003de90
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x148], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x158], xmm1
xor edi, edi
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
mov r9, rsi
lea r8, [rbp + 0x148]
movzx edx, byte [rbp + 0x340]
lea rcx, [rbp + 0xe8]
call fcn.18006e090
nop
lea rax, [rbp + 0x350]
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18004f3f0
lea rdx, [rbp + 0x350]
lea rcx, [rbp + 0xe8]
call fcn.18003de90
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x128], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x138], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, r14
lea r8, [rbp + 0x128]
movzx edx, byte [rbp + 0x340]
lea rcx, [rbp + 0xc8]
call fcn.18006e090
nop
lea rax, [rsp + 0x3a]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18004f460
lea rdx, [rsp + 0x3a]
lea rcx, [rbp + 0xc8]
call fcn.18003de90
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x108], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x118], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, r15
lea r8, [rbp + 0x108]
movzx edx, byte [rbp + 0x340]
lea rcx, [rbp + 0xa8]
call fcn.18006e090
nop
lea rax, [rsp + 0x48]
inc rbx
cmp byte [rax + rbx], 0
jne 0x18004f4c2
mov r8, rbx
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0xa8]
call fcn.18003de90
xorps xmm0, xmm0
movups xmmword [rbp + 0x88], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x98], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x88], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x98], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [0x18032b8a8]
cmp qword [0x18032b8c0], 0xf
cmova rdx, qword [0x18032b8a8]
mov r8, qword [0x18032b8b8]
lea rcx, [rbp + 0x88]
call fcn.18003de90
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0x248], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0x258], xmm6
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0xf
jbe 0x18004f5aa
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004f5a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004f5a5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180096ef4
movdqa xmm0, xmmword [0x1800b7290]
movdqu xmmword [rbp + 0x98], xmm0
mov byte [rbp + 0x88], 0
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0xf
jbe 0x18004f605
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004f600
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004f600
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180096ef4
movdqa xmm0, xmmword [0x1800b7290]
movdqu xmmword [rbp + 0xb8], xmm0
mov byte [rbp + 0xa8], 0
mov rdx, qword [rbp + 0x120]
cmp rdx, 0xf
jbe 0x18004f661
inc rdx
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004f65b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004f65b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180096ef4
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0xf
jbe 0x18004f6a5
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004f6a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004f6a0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180096ef4
movdqa xmm0, xmmword [0x1800b7290]
movdqu xmmword [rbp + 0xd8], xmm0
mov byte [rbp + 0xc8], 0
mov rdx, qword [rbp + 0x140]
cmp rdx, 0xf
jbe 0x18004f701
inc rdx
mov rcx, qword [rbp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004f6fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004f6fb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180096ef4
nop
mov rdx, qword [rbp + 0x100]
cmp rdx, 0xf
jbe 0x18004f745
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004f740
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004f740
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180096ef4
movdqa xmm0, xmmword [0x1800b7290]
movdqu xmmword [rbp + 0xf8], xmm0
mov byte [rbp + 0xe8], 0
mov rdx, qword [rbp + 0x160]
cmp rdx, 0xf
jbe 0x18004f7a1
inc rdx
mov rcx, qword [rbp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004f79b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004f79b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180096ef4
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x18004f7df
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004f7da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004f7da
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180096ef4
movdqa xmm0, xmmword [0x1800b7290]
movdqu xmmword [rbp - 0x18], xmm0
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp + 0x180]
cmp rdx, 0xf
jbe 0x18004f835
inc rdx
mov rcx, qword [rbp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004f82f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004f82f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180096ef4
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x18004f874
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004f86f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004f86f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180096ef4
movdqa xmm0, xmmword [0x1800b7290]
movdqu xmmword [rsp + 0x78], xmm0
mov byte [rsp + 0x68], 0
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 0xf
jbe 0x18004f8cb
inc rdx
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004f8c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004f8c6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180096ef4
movdqa xmm0, xmmword [0x1800b7290]
movdqu xmmword [rbp + 0x198], xmm0
mov byte [rbp + 0x188], 0
mov rdx, qword [rbp - 0x50]
cmp rdx, 0xf
jbe 0x18004f920
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004f91b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004f91b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180096ef4
movdqa xmm0, xmmword [0x1800b7290]
movdqu xmmword [rbp - 0x58], xmm0
mov byte [rbp - 0x68], 0
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0xf
jbe 0x18004f975
inc rdx
mov rcx, qword [rbp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004f970
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004f970
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180096ef4
movdqa xmm0, xmmword [0x1800b7290]
movdqu xmmword [rbp + 0x1b8], xmm0
mov byte [rbp + 0x1a8], 0
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 0xf
jbe 0x18004f9d0
inc rdx
mov rcx, qword [rbp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004f9cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004f9cb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180096ef4
movdqa xmm0, xmmword [0x1800b7290]
movdqu xmmword [rbp + 0x1d8], xmm0
mov byte [rbp + 0x1c8], 0
mov rdx, qword [rbp + 0x200]
cmp rdx, 0xf
jbe 0x18004fa2b
inc rdx
mov rcx, qword [rbp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004fa26
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004fa26
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180096ef4
movdqa xmm0, xmmword [0x1800b7290]
movdqu xmmword [rbp + 0x1f8], xmm0
mov byte [rbp + 0x1e8], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x18004fa80
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004fa7b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004fa7b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180096ef4
movdqa xmm0, xmmword [0x1800b7290]
movdqu xmmword [rbp + 8], xmm0
mov byte [rbp - 8], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], rdi
lea r14, [rbp + 0x248]
movq rsi, xmm7
movdqa xmm0, xmm6
psrldq xmm0, 8
movq r15, xmm0
cmp r15, 0xf
cmova r14, rsi
movabs rbx, 0x7fffffffffffffff
movq rdi, xmm6
cmp rdi, rbx
ja 0x1800500d9
mov qword [rsp + 0x60], 0xf
cmp rdi, 0xf
ja 0x18004faff
mov qword [rsp + 0x58], rdi
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x48], xmm0
jmp 0x18004fb95
mov rax, rdi
or rax, 0xf
cmp rax, rbx
jbe 0x18004fb37
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.180096a78
mov rcx, rax
test rax, rax
je 0x18004fb62
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x18004fb77
mov rbx, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18004fb69
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800500d3
jmp 0x18004fb19
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x18004fb75
call fcn.180096a78
jmp 0x18004fb77
xor eax, eax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], rbx
lea r8, [rdi + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x48]
call fcn.1800541a0
nop
lea rax, [rbp + 0x68]
mov qword [rbp + 0x340], rax
lea rdx, [0x18032b8a8]
lea rcx, [rbp + 0x68]
call fcn.180069280
mov rdi, rax
lea rax, [rbp + 0x18]
mov qword [rbp + 0x348], rax
lea rdx, [r13 + 0x40]
lea rcx, [rbp + 0x18]
call fcn.180069280
mov rbx, rax
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x208]
call fcn.180069280
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 8]
call fcn.18004e270
mov rbx, rax
lea rax, [rbp - 0x48]
cmp rax, rbx
je 0x18004fc77
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x18004fc43
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004fc3e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004fcac
call fcn.180096ef4
movdqa xmm0, xmmword [0x1800b7290]
movdqu xmmword [rbp - 0x38], xmm0
mov byte [rbp - 0x48], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x38], xmm1
xor r14d, r14d
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r14b
jmp 0x18004fc7a
xor r14d, r14d
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x18004fcb8
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004fcb3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004fcb3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180096ef4
mov qword [rbp + 0x240], r14
lea r8, [rbp + 0x208]
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x78]
call fcn.18006b520
nop
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 7
mov qword [rbp - 0x80], 0xf
mov rax, qword [str.success]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1800b3cb4]
mov word [rsp + 0x6c], ax
movzx eax, byte [0x1800b3cb6]
mov byte [rsp + 0x6e], al
mov byte [rsp + 0x6f], 0
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x78]
call fcn.18006de70
cmp byte [rax], 4
jne 0x1800500df
lea rcx, [rbp - 0x78]
cmp byte [rax + 8], 0
je 0x18004fe60
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], 9
mov qword [rbp - 0x50], 0xf
movsd xmm0, qword [str.sessionid]
movsd qword [rbp - 0x68], xmm0
movzx eax, byte [0x1800b3cc0]
mov byte [rbp - 0x60], al
mov byte [rbp - 0x5f], 0
lea rdx, [rbp - 0x68]
call fcn.18006de70
cmp byte [rax], 3
jne 0x180050096
mov r8, qword [rax + 8]
mov rdx, r8
cmp qword [r8 + 0x18], 0xf
jbe 0x18004fd8b
mov rdx, qword [r8]
lea rcx, [r13 + 0xe8]
mov r8, qword [r8 + 0x10]
call fcn.18003dd20
nop
lea rcx, [rbp - 0x78]
call fcn.18006a820
movzx edx, byte [rbp - 0x78]
lea rcx, [rbp - 0x70]
call fcn.18006a1e0
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x18004fdf1
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004fdec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004fdec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180096ef4
movdqa xmm0, xmmword [0x1800b7290]
movdqu xmmword [rbp - 0x38], xmm0
mov byte [rbp - 0x48], 0
cmp r15, 0xf
jbe 0x18004fe3c
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x18004fe34
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004fe34
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.180096ef4
movaps xmm6, xmmword [rsp + 0x3e0]
movaps xmm7, xmmword [rsp + 0x3d0]
add rsp, 0x3f8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 7
mov qword [rbp - 0x80], 0xf
mov rax, qword [str.message]
mov dword [rsp + 0x68], eax
movzx eax, word [0x1800b0774]
mov word [rsp + 0x6c], ax
movzx eax, byte [0x1800b0776]
mov byte [rsp + 0x6e], al
mov byte [rsp + 0x6f], 0
lea rdx, [rsp + 0x68]
call fcn.18006de70
mov rdi, rax
mov byte [rsp + 0x48], 0
xor eax, eax
mov qword [rsp + 0x50], rax
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.18006a1e0
mov byte [rsp + 0x48], 3
mov ecx, 0x20
call fcn.180096a78
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], r14
mov r8d, 0xa
lea rdx, str.invalidver
mov rcx, rax
call fcn.18003e720
mov qword [rsp + 0x50], rbx
test rbx, rbx
jne 0x18004ff35
mov r8d, 0x4d8e
lea rdx, str.C:UsersOS_55DesktopProyectosProyectos_DLLProyectos_DLLDLL_Famas69_ValenciaNew_Imguiexamplespackages_nlohmann.json.3.11.2_build_nativeinclude_nlohmannjson.hpp
lea rcx, str.m_type___value_t::string__m_value.string___nullptr
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r8d, 0x4d8e
lea rdx, str.C:UsersOS_55DesktopProyectosProyectos_DLLProyectos_DLLDLL_Famas69_ValenciaNew_Imguiexamplespackages_nlohmann.json.3.11.2_build_nativeinclude_nlohmannjson.hpp
lea rcx, str.m_type___value_t::string__m_value.string___nullptr
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rdx, [rsp + 0x48]
mov rcx, rdi
call fcn.18006da10
movzx edi, al
test rbx, rbx
jne 0x18004ff64
mov r8d, 0x4d8e
lea rdx, str.C:UsersOS_55DesktopProyectosProyectos_DLLProyectos_DLLDLL_Famas69_ValenciaNew_Imguiexamplespackages_nlohmann.json.3.11.2_build_nativeinclude_nlohmannjson.hpp
lea rcx, str.m_type___value_t::string__m_value.string___nullptr
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov dl, 3
lea rcx, [rsp + 0x50]
call fcn.18006a1e0
nop
test dil, dil
je 0x18004ffc6
lea rdx, str.download
lea rcx, [rbp - 0x78]
call fcn.18006b640
lea rdx, [rbp + 0x68]
mov rcx, rax
call fcn.18006b690
lea rcx, [rbp + 0x68]
call fcn.18003dae0
mov r8, rax
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, [0x1800b3cec]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.18006b350
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.message
lea rcx, [rbp - 0x78]
call fcn.18006b640
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.18006b740
nop
mov rdx, rax
mov rcx, rbx
call fcn.18006b7d0
nop
lea rcx, [rbp + 0x68]
call fcn.18003db10
mov ecx, 0x1194
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movdqa xmm0, xmmword [str.rsZ:_f_r]
movdqu xmmword [rbp + 0x18], xmm0
movdqa xmm1, xmmword [0x1800b7900]
movdqu xmmword [rbp + 0x28], xmm1
movdqa xmm0, xmmword [0x1800b78d0]
movdqu xmmword [rbp + 0x38], xmm0
movdqa xmm1, xmmword [0x1800b78e0]
movdqu xmmword [rbp + 0x48], xmm1
mov dword [rbp + 0x58], 0xd2dbf498
mov dword [rbp + 0x5c], 0xcfdd93d2
mov word [rbp + 0x60], 0xb0
mov byte [rbp + 0x62], 1
lea rdx, [rbp + 0x18]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.180050120
mov ecx, 0x1194
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rcx, rax
call fcn.18006a5d0
mov qword [rbp + 0x340], rax
lea r8, [rbp + 0x340]
lea rcx, [rbp + 0x68]
call fcn.18007c5b0
nop
mov r8, rax
lea rcx, [rbp + 0x18]
call fcn.18007c660
lea rdx, [0x1800c8498]
lea rcx, [rbp + 0x18]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.180002910
int3
call fcn.180032200
nop
mov rcx, rax
call fcn.18006a5d0
mov qword [rbp + 0x340], rax
lea r8, [rbp + 0x340]
lea rcx, [rbp + 0x68]
call fcn.18007c870
nop
mov r8, rax
lea rcx, [rbp + 0x18]
call fcn.18007c660
lea rdx, [0x1800c8498]
lea rcx, [rbp + 0x18]
call sub.VCRUNTIME140.dll__CxxThrowException
int3