Function at 0x140070310
Capabilities:
Create thread
Encode data using xor
Execute command
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0x3b8]
sub rsp, 0x4a0
movaps xmmword [rax - 0x28], xmm6
mov rax, qword [0x140193f80]
xor rax, rsp
mov qword [rbp + 0x380], rax
xor ebx, ebx
mov dword [rbp + 8], ebx
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
je 0x1400703a5
lea rdx, [0x14014e6b0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400035f0
lea eax, [rbx + 1]
mov rcx, qword [rbp + 0x380]
xor rcx, rsp
call fcn.140116b20
lea r11, [rsp + 0x4a0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov ecx, 8
call fcn.140116b40
lea rcx, [0x140002680]
mov qword [rax], rcx
mov qword [rbp + 8], rax
lea rcx, [rbp + 0xb8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14007fbf0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xb0], rax
test rax, rax
je 0x140070fd0
mov word [rbp + 0x5e], bx
mov qword [rbp + 0x60], reloc.WS2_32.dll_ntohl
mov qword [rbp + 0x68], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.methodistfivem]
movsd qword [rbp + 0x50], xmm0
mov eax, dword [0x140151000]
mov dword [rbp + 0x58], eax
movzx eax, word [0x140151004]
mov word [rbp + 0x5c], ax
mov byte [rbp + 0x5e], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], 0xa
mov qword [rbp + 0xa8], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.vVB21QYQG9]
movsd qword [rbp + 0x90], xmm0
movzx eax, word [0x140151010]
mov word [rbp + 0x98], ax
mov byte [rbp + 0x9a], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov ecx, 0x50
call fcn.140116b40
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xd0], 0x40
mov qword [rbp + 0xd8], reloc.WLDAP32.dll_Ordinal_79
movups xmm0, xmmword [str.afcca1cbcba8d74225edca58c50263c65491896e07ce2be06a35528f0ee5f108]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140151030]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x140151040]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [0x140151050]
movups xmmword [rax + 0x30], xmm1
mov byte [rax + 0x40], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], 3
mov qword [rbp + 0x88], reloc.WS2_32.dll_ntohs
mov eax, dword [0x140151064]
mov word [rbp + 0x70], ax
movzx eax, byte [0x140151066]
mov byte [rbp + 0x72], al
mov byte [rbp + 0x73], 0
movups xmm0, xmmword [str._LMJH]
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x1401521f8]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [0x140152200]
mov dword [rsp + 0x48], eax
movzx eax, byte [0x140152204]
mov byte [rsp + 0x4c], al
mov r8d, ebx
mov r12d, dword [reloc.WS2_32.dll_accept]
cmp r12d, 2
jl 0x14007068d
movdqa xmm5, xmmword [0x140153600]
movdqa xmm4, xmmword [0x140153930]
movdqa xmm6, xmmword [0x140153650]
movdqa xmm0, xmmword [str.7777777777777777]
movdqa xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x30]
mov edx, dword [rsp + 0x50]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140153740]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140153740]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140070580
cmp r8d, 0x1d
jge 0x1400706d3
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x37
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1d
jl 0x1400706a0
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0xe0]
call fcn.1400028c0
nop
xor edx, edx
mov r8d, 0x278
lea rcx, [rbp + 0x100]
call sub.VCRUNTIME140.dll_memset
lea rax, [rsp + 0x30]
mov qword [rbp + 8], rax
lea rdx, [rbp + 0xe0]
lea rcx, [rsp + 0x30]
call fcn.1400034d0
mov r15, rax
lea rax, [rbp - 0x38]
mov qword [rbp - 0x68], rax
lea rdx, [rbp + 0x70]
lea rcx, [rbp - 0x38]
call fcn.1400034d0
mov r14, rax
lea rax, [rbp - 0x18]
mov qword [rbp - 0x60], rax
lea rdx, [rbp + 0xc0]
lea rcx, [rbp - 0x18]
call fcn.1400034d0
mov rsi, rax
lea rax, [rbp - 0x58]
mov qword [rsp + 0x60], rax
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x58]
call fcn.1400034d0
mov rdi, rax
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x68]
call fcn.1400034d0
nop
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r14
mov r9, rsi
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0x100]
call fcn.14005ec70
nop
lea rcx, [rbp + 0x100]
call fcn.1400c1060
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rdi, rax
mov edx, 7
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov edx, 9
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], rbx
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x30], 0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rbx
mov qword [rbp + 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x10], 0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x30]
call fcn.1400700d0
test al, al
je 0x140070934
mov eax, dword [0x14015240c]
mov dword [rbp + 8], eax
cmp byte [0x14015240f], 0
je 0x1400708f3
cmp r12d, 2
jl 0x1400708ab
movdqa xmm3, xmmword [0x140153600]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x140153930]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x140153930]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x140153650]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140153740]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.7777777777777777]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp + 8], xmm2
jmp 0x1400708f3
lea r9, [rbp + 8]
mov r8d, ebx
nop dword [rax]
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x38
movzx eax, r8b
sub al, dl
add al, 0x37
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x1400708c0
lea rdx, [rbp + 8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400035f0
lea rax, [rsp + 0x68]
mov qword [rsp + 0x50], rax
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x68]
call fcn.1400034d0
mov rdi, rax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.1400034d0
nop
mov r8, rdi
jmp 0x140070bc4
lea rdx, str._n_n__1__Enter_Username:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400035f0
lea rdx, [rbp + 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140077bf0
lea rdx, str._n_n__2__Enter_Password:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400035f0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov rdi, rbx
mov qword [rsp + 0x40], rbx
mov esi, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x48], rsi
mov byte [rsp + 0x30], dil
mov dword [rbp + 8], 3
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
mov ecx, eax
cmp al, 0xd
je 0x140070a43
cmp cl, 8
jne 0x1400709e0
test rdi, rdi
je 0x140070a32
lea rcx, [rdi - 1]
lea rax, [rsp + 0x30]
cmp rsi, 0xf
cmova rax, qword [rsp + 0x30]
mov qword [rsp + 0x40], rcx
mov byte [rax + rcx], 0
lea rdx, [0x140150f90]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400035f0
jmp 0x140070a28
cmp rdi, rsi
jae 0x140070a07
lea rax, [rdi + 1]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x30]
cmp rsi, 0xf
cmova rax, qword [rsp + 0x30]
mov byte [rax + rdi], cl
mov byte [rax + rdi + 1], 0
jmp 0x140070a1c
movzx r9d, cl
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rsp + 0x30]
call fcn.140002b40
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140077960
mov rdi, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
movzx ecx, al
cmp al, 0xd
jne 0x1400709a1
lea rdx, [0x1400777e0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdx, qword [rbp + 0x28]
cmp rdx, 0xf
jbe 0x140070a95
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070a90
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140070a90
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140116b7c
movups xmm1, xmmword [rsp + 0x30]
movups xmmword [rbp + 0x10], xmm1
movups xmm2, xmmword [rsp + 0x40]
movups xmmword [rbp + 0x20], xmm2
lea rax, [rsp + 0x30]
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rbx
movq rdi, xmm2
lea r14, [rbp + 0x10]
movq rcx, xmm1
psrldq xmm2, 8
movq rax, xmm2
cmp rax, 0xf
cmova r14, rcx
movabs rsi, 0x7fffffffffffffff
cmp rdi, rsi
ja 0x140070fe2
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
cmp rdi, 0xf
ja 0x140070b18
mov qword [rsp + 0x40], rdi
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x30], xmm0
jmp 0x140070bb0
mov rax, rdi
or rax, 0xf
cmp rax, rsi
jbe 0x140070b50
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140116b40
mov rcx, rax
test rax, rax
je 0x140070b7b
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140070b91
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rax, rcx
cmovb rax, rcx
mov rsi, rax
lea rcx, [rax + 1]
cmp rcx, 0x1000
jb 0x140070b82
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140070fe8
jmp 0x140070b32
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140070b8e
call fcn.140116b40
jmp 0x140070b91
mov rax, rbx
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rsi
lea r8, [rdi + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x68]
call fcn.1400034d0
nop
lea r8, [rsp + 0x30]
mov rdx, rax
lea rcx, [rbp + 0x100]
call fcn.1400c2ec0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140151098]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp byte [rbp + 0x310], 0
jne 0x140070dad
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x68]
call fcn.140070ff0
mov r9, rax
cmp byte [rax + 0x2d], 0
je 0x140070d8e
cmp r12d, 2
jl 0x140070d5a
movdqa xmm5, xmmword [0x140153600]
movdqa xmm4, xmmword [0x140153930]
movdqa xmm6, xmmword [0x140153650]
movdqa xmm0, xmmword [str.7777777777777777]
movdqa xmmword [rsp + 0x50], xmm0
mov rcx, rax
mov edx, dword [rsp + 0x50]
nop dword [rax]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140153740]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rbx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140153740]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add ebx, 8
mov eax, ebx
lea rcx, [rcx + 8]
cmp ebx, 0x28
jl 0x140070c50
cmp eax, 0x2e
jge 0x140070d8e
movsxd r8, ebx
add r8, r9
mov eax, 0x92492493
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x38
movzx eax, bl
sub al, dl
add al, 0x37
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0x2e
jl 0x140070d60
mov rdx, r9
mov rcx, r10
call fcn.1400035f0
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x30]
call fcn.14006fdd0
call fcn.14006cc50
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 0xf
jbe 0x140070dfe
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070df9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140070df9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140116b7c
mov qword [rbp + 0x20], rbx
mov qword [rbp + 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x10], 0
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x140070e4c
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070e47
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140070e47
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140116b7c
mov qword [rbp + 0x40], rbx
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x30], 0
lea rcx, [rbp + 0x100]
call fcn.140060880
nop
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x140070eae
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070ea8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140070ea8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140116b7c
nop
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x140070ef0
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070eea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140070eea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140116b7c
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x140070f35
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070f2f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140070f2f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140116b7c
nop
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x140070f7a
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070f74
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140070f74
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140116b7c
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x140070fb9
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070fb3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140070fb3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140116b7c
nop
cmp dword [rbp + 0xb8], 0
je 0x140070fc9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
xor eax, eax
jmp 0x140070370
mov dword [rbp + 0xb8], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call fcn.140002660
int3
call fcn.1400025c0
int3