Function at 0x140023990
Capabilities:
Delete file
Execute command

Disassembly:
push rbp
lea rbp, [rsp - 0x210]
sub rsp, 0x310
mov rax, qword [0x1400af0c0]
xor rax, rsp
mov qword [rbp + 0x208], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1f8], xmm1
mov r8d, listen
lea rdx, str.16.1.25.2049
lea rcx, [rbp + 0x1e8]
call fcn.1400044c0
nop
lea rdx, [rbp + 0x1e8]
lea rcx, [rbp + 0x1c8]
call fcn.140003be0
mov rcx, rax
call fcn.1400232f0
cmp byte [0x1400b0472], 0
je 0x140024ddb
lea rcx, str.error.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.FPT.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1d8], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.15.40.16.2534
lea rcx, [rbp + 0x1c8]
call fcn.1400044c0
nop
lea rdx, [rbp + 0x1c8]
lea rcx, [rbp + 0x1a8]
call fcn.140003be0
mov rcx, rax
call fcn.1400232f0
cmp byte [0x1400b0472], 0
je 0x140024d96
lea rcx, str.error.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.FPT.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1b8], xmm1
mov r8d, listen
lea rdx, str.15.0.35.1951
lea rcx, [rbp + 0x1a8]
call fcn.1400044c0
nop
lea rdx, [rbp + 0x1a8]
lea rcx, [rbp + 0x188]
call fcn.140003be0
mov rcx, rax
call fcn.1400232f0
cmp byte [0x1400b0472], 0
je 0x140024d51
lea rcx, str.error.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.FPT.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xorps xmm0, xmm0
movups xmmword [rbp + 0x188], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x198], xmm1
mov r8d, listen
lea rdx, str.14.5.25.1229
lea rcx, [rbp + 0x188]
call fcn.1400044c0
nop
lea rdx, [rbp + 0x188]
lea rcx, [rbp + 0x168]
call fcn.140003be0
mov rcx, rax
call fcn.1400232f0
cmp byte [0x1400b0472], 0
je 0x140024d0c
lea rcx, str.error.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.FPT.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xorps xmm0, xmm0
movups xmmword [rbp + 0x168], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x178], xmm1
mov r8d, listen
lea rdx, str.14.1.60.1790
lea rcx, [rbp + 0x168]
call fcn.1400044c0
nop
lea rdx, [rbp + 0x168]
lea rcx, [rbp + 0x148]
call fcn.140003be0
mov rcx, rax
call fcn.1400232f0
cmp byte [0x1400b0472], 0
je 0x140024cc7
lea rcx, str.error.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.FPT.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xorps xmm0, xmm0
movups xmmword [rbp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x158], xmm1
mov r8d, listen
lea rdx, str.14.0.11.1205
lea rcx, [rbp + 0x148]
call fcn.1400044c0
nop
lea rdx, [rbp + 0x148]
lea rcx, [rbp + 0x128]
call fcn.140003be0
mov rcx, rax
call fcn.1400232f0
cmp byte [0x1400b0472], 0
je 0x140024c82
lea rcx, str.error.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.FPT.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xorps xmm0, xmm0
movups xmmword [rbp + 0x128], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x138], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.13.50.15.1475
lea rcx, [rbp + 0x128]
call fcn.1400044c0
nop
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0x108]
call fcn.140003be0
mov rcx, rax
call fcn.1400232f0
cmp byte [0x1400b0472], 0
je 0x140024c3d
lea rcx, str.error.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.FPT.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x118], xmm1
mov r8d, listen
lea rdx, str.13.30.0.1065
lea rcx, [rbp + 0x108]
call fcn.1400044c0
nop
lea rdx, [rbp + 0x108]
lea rcx, [rbp + 0xe8]
call fcn.140003be0
mov rcx, rax
call fcn.1400232f0
cmp byte [0x1400b0472], 0
je 0x140024bf8
lea rcx, str.error.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.FPT.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf8], xmm1
mov r8d, listen
lea rdx, str.13.0.37.1556
lea rcx, [rbp + 0xe8]
call fcn.1400044c0
nop
lea rdx, [rbp + 0xe8]
lea rcx, [rbp + 0xc8]
call fcn.140003be0
mov rcx, rax
call fcn.1400232f0
cmp byte [0x1400b0472], 0
je 0x140024bb3
lea rcx, str.error.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.FPT.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xorps xmm0, xmm0
movups xmmword [rbp + 0xc8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd8], xmm1
mov r8d, listen
lea rdx, str.12.0.85.1919
lea rcx, [rbp + 0xc8]
call fcn.1400044c0
nop
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0xa8]
call fcn.140003be0
mov rcx, rax
call fcn.1400232f0
cmp byte [0x1400b0472], 0
je 0x140024b6e
lea rcx, str.error.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.FPT.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb8], xmm1
mov r8d, listen
lea rdx, str.11.8.86.3909
lea rcx, [rbp + 0xa8]
call fcn.1400044c0
nop
lea rdx, [rbp + 0xa8]
lea rcx, [rbp + 0x88]
call fcn.140003be0
mov rcx, rax
call fcn.1400232f0
cmp byte [0x1400b0472], 0
je 0x140024b29
lea rcx, str.error.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.FPT.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xorps xmm0, xmm0
movups xmmword [rbp + 0x88], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x98], xmm1
mov r8d, listen
lea rdx, str.10.0.60.3000
lea rcx, [rbp + 0x88]
call fcn.1400044c0
nop
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x68]
call fcn.140003be0
mov rcx, rax
call fcn.1400232f0
cmp byte [0x1400b0472], 0
je 0x140024ae4
lea rcx, str.error.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.FPT.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x78], xmm1
mov r8d, listen
lea rdx, str.9.5.40.1868
lea rcx, [rbp + 0x68]
call fcn.1400044c0
nop
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x48]
call fcn.140003be0
mov rcx, rax
call fcn.1400232f0
cmp byte [0x1400b0472], 0
je 0x140024aa2
lea rcx, str.error.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.FPT.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xorps xmm0, xmm0
movups xmmword [rbp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x58], xmm1
mov r8d, listen
lea rdx, str.9.1.10.1000
lea rcx, [rbp + 0x48]
call fcn.1400044c0
nop
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x28]
call fcn.140003be0
mov rcx, rax
call fcn.1400232f0
cmp byte [0x1400b0472], 0
je 0x140024a63
lea rcx, str.error.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.FPT.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x38], xmm1
mov r8d, listen
lea rdx, str.8.1.60.1561
lea rcx, [rbp + 0x28]
call fcn.1400044c0
nop
lea rdx, [rbp + 0x28]
lea rcx, [rbp + 8]
call fcn.140003be0
mov rcx, rax
call fcn.1400232f0
cmp byte [0x1400b0472], 0
je 0x140024a24
lea rcx, str.error.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.FPT.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x18], xmm1
mov r8d, listen
lea rdx, str.7.1.50.1166
lea rcx, [rbp + 8]
call fcn.1400044c0
nop
lea rdx, [rbp + 8]
lea rcx, [rbp - 0x18]
call fcn.140003be0
mov rcx, rax
call fcn.1400232f0
cmp byte [0x1400b0472], 0
je 0x1400249e5
lea rcx, str.error.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.FPT.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 8], xmm1
mov r8d, listen
lea rdx, str.6.0.50.1252
lea rcx, [rbp - 0x18]
call fcn.1400044c0
nop
lea rdx, [rbp - 0x18]
lea rcx, [rbp - 0x38]
call fcn.140003be0
mov rcx, rax
call fcn.1400232f0
cmp byte [0x1400b0472], 0
je 0x1400249a6
lea rcx, str.error.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.FPT.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x28], xmm1
mov r8d, listen
lea rdx, str.6.0.40.1214
lea rcx, [rbp - 0x38]
call fcn.1400044c0
nop
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x58]
call fcn.140003be0
mov rcx, rax
call fcn.1400232f0
cmp byte [0x1400b0472], 0
je 0x140024967
lea rcx, str.error.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.FPT.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x48], xmm1
mov r8d, 0xa
lea rdx, str.5.1.0.1167
lea rcx, [rbp - 0x58]
call fcn.1400044c0
nop
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x78]
call fcn.140003be0
mov rcx, rax
call fcn.1400232f0
cmp byte [0x1400b0472], 0
je 0x140024928
lea rcx, str.error.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.FPT.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x68], xmm1
mov r8d, 0xa
lea rdx, str.4.2.0.1017
lea rcx, [rbp - 0x78]
call fcn.1400044c0
nop
lea rdx, [rbp - 0x78]
lea rcx, [rsp + 0x68]
call fcn.140003be0
mov rcx, rax
call fcn.1400232f0
cmp byte [0x1400b0472], 0
je 0x1400248e9
lea rcx, str.error.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.FPT.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
mov r8d, 5
lea rdx, str.0.9.5
lea rcx, [rsp + 0x68]
call fcn.1400044c0
nop
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x48]
call fcn.140003be0
mov rcx, rax
call fcn.1400232f0
cmp byte [0x1400b0472], 0
je 0x1400248a9
lea rcx, str.error.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.FPT.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
mov r8d, 6
lea rdx, str.0.8.16
lea rcx, [rsp + 0x48]
call fcn.1400044c0
nop
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x28]
call fcn.140003be0
mov rcx, rax
call fcn.1400232f0
cmp byte [0x1400b0472], 0
je 0x140024868
call fcn.140009630
lea rcx, str.error.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.FPT.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rdx, str.e_91mYour_device_is_not_eligible_for_spoofing._Select_a_different_spoofing_mode._Error_code:_1._Press_any_key_to_return_to_the_menu.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004000
lea rdx, [0x1400041d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.PAUSE__NUL_2_NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x14002434e
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024348
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002489c
call fcn.140089ab4
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x14002438b
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024385
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400248dc
call fcn.140089ab4
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x1400243c7
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400243c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002491b
call fcn.140089ab4
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x140024403
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400243fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002495a
call fcn.140089ab4
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 0xf
jbe 0x14002443f
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024439
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024999
call fcn.140089ab4
nop
mov rdx, qword [rbp]
cmp rdx, 0xf
jbe 0x14002447b
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024475
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400249d8
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x1400244b7
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400244b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024a17
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x40]
cmp rdx, 0xf
jbe 0x1400244f3
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400244ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024a56
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x60]
cmp rdx, 0xf
jbe 0x14002452f
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024529
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024a95
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x80]
cmp rdx, 0xf
jbe 0x14002456e
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024568
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024ad7
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0xf
jbe 0x1400245b0
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400245aa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024b1c
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0xf
jbe 0x1400245f5
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400245ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400245ef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0xf
jbe 0x14002463a
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024634
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024634
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x100]
cmp rdx, 0xf
jbe 0x14002467f
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024679
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024679
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x120]
cmp rdx, 0xf
jbe 0x1400246c4
inc rdx
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400246be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400246be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x140]
cmp rdx, 0xf
jbe 0x140024709
inc rdx
mov rcx, qword [rbp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024703
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024703
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x160]
cmp rdx, 0xf
jbe 0x14002474e
inc rdx
mov rcx, qword [rbp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024748
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024748
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x180]
cmp rdx, 0xf
jbe 0x140024793
inc rdx
mov rcx, qword [rbp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002478d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002478d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 0xf
jbe 0x1400247d8
inc rdx
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400247d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400247d2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0xf
jbe 0x14002481d
inc rdx
mov rcx, qword [rbp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024817
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024817
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 0xf
jbe 0x140024ddb
inc rdx
mov rcx, qword [rbp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024dd5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024dd5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x1400248a9
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400248a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400248a3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x1400248e9
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400248e3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400248e3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x140024928
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024922
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024922
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x140024967
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024961
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024961
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 0xf
jbe 0x1400249a6
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400249a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400249a0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp]
cmp rdx, 0xf
jbe 0x1400249e5
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400249df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400249df
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x140024a24
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024a1e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024a1e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x40]
cmp rdx, 0xf
jbe 0x140024a63
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024a5d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024a5d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x60]
cmp rdx, 0xf
jbe 0x140024aa2
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024a9c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024a9c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x80]
cmp rdx, 0xf
jbe 0x140024ae4
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024ade
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024ade
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0xf
jbe 0x140024b29
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024b23
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024b23
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0xf
jbe 0x140024b6e
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024b68
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024b68
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0xf
jbe 0x140024bb3
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024bad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024bad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x100]
cmp rdx, 0xf
jbe 0x140024bf8
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024bf2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024bf2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x120]
cmp rdx, 0xf
jbe 0x140024c3d
inc rdx
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024c37
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024c37
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x140]
cmp rdx, 0xf
jbe 0x140024c82
inc rdx
mov rcx, qword [rbp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024c7c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024c7c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x160]
cmp rdx, 0xf
jbe 0x140024cc7
inc rdx
mov rcx, qword [rbp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024cc1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024cc1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x180]
cmp rdx, 0xf
jbe 0x140024d0c
inc rdx
mov rcx, qword [rbp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024d06
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024d06
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 0xf
jbe 0x140024d51
inc rdx
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024d4b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024d4b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0xf
jbe 0x140024d96
inc rdx
mov rcx, qword [rbp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024d90
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024d90
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 0xf
jbe 0x140024ddb
inc rdx
mov rcx, qword [rbp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024dd5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024dd5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
nop
mov rdx, qword [rbp + 0x200]
cmp rdx, 0xf
jbe 0x140024e1f
inc rdx
mov rcx, qword [rbp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024e1a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024e1a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140089ab4
mov rcx, qword [rbp + 0x208]
xor rcx, rsp
call fcn.140089a50
add rsp, 0x310
pop rbp
ret