Function at 0x18000af40
Capabilities:
Create pipe
Create process on windows
Encode data using xor
Read file on windows

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x400
mov rax, qword [0x1800f0040]
xor rax, rsp
mov qword [rsp + 0x3f0], rax
movzx esi, r9b
mov byte [rsp + 0x68], r9b
mov r13, r8
mov qword [rsp + 0x168], r8
mov rbx, rdx
mov rdi, rcx
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x58], rcx
xor r14d, r14d
mov dword [rsp + 0x170], 0x18
mov dword [rsp + 0x180], 1
mov qword [rsp + 0x178], r14
xor r9d, r9d
lea r8, [rsp + 0x170]
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x158]
call qword [sym.imp.KERNEL32.dll_CreatePipe]
test eax, eax
jne 0x18000b084
mov dword [rsp + 0x58], 0x1110162e
mov dword [rsp + 0x5c], 0xe9b5121b
mov dword [rsp + 0x60], 0xb8efede0
mov word [rsp + 0x64], 0x100
nop word [rax + rax]
lea eax, [r14 + 0x7a]
xor byte [rsp + r14 + 0x58], al
inc r14
cmp r14, 0xc
jb 0x18000b000
mov byte [rsp + 0x65], 0
lea r8, [rsp + 0x64]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x70]
call fcn.1800113a0
nop
lea rdx, [rsp + 0x70]
mov rcx, rdi
call fcn.180003330
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x18000b20d
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b208
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b208
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x1a4], xmm0
movups xmmword [rsp + 0x1b4], xmm0
movups xmmword [rsp + 0x1c4], xmm0
movups xmmword [rsp + 0x1d4], xmm0
movups xmmword [rsp + 0x1e4], xmm0
mov dword [rsp + 0x1f4], eax
mov dword [rsp + 0x1a0], 0x68
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0x200], rax
mov qword [rsp + 0x1f8], rax
psrldq xmm0, 8
movd eax, xmm0
bts eax, 8
mov dword [rsp + 0x1dc], eax
cmp qword [rbx + 0x18], 0xf
jbe 0x18000b0f9
mov rbx, qword [rbx]
lea rax, [rsp + 0x188]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov rcx, qword [rsp + 0x160]
test eax, eax
jne 0x18000b215
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x158]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rsp + 0x58], 0x1110162e
mov dword [rsp + 0x5c], 0xe9b5121b
mov dword [rsp + 0x60], 0xb8efede0
mov word [rsp + 0x64], 0x100
nop dword [rax]
nop word [rax + rax]
lea eax, [r14 + 0x7a]
xor byte [rsp + r14 + 0x58], al
inc r14
cmp r14, 0xc
jb 0x18000b190
mov byte [rsp + 0x65], 0
lea r8, [rsp + 0x64]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x70]
call fcn.1800113a0
nop
lea rdx, [rsp + 0x70]
mov rcx, rdi
call fcn.180003330
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x18000b20d
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b208
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b208
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800145b0
mov rax, rdi
jmp 0x18000beb5
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rsp + 0x230], xmm0
mov qword [rsp + 0x240], r14
mov qword [rsp + 0x248], 0xf
mov byte [rsp + 0x230], r14b
xor r15b, r15b
mov byte [rsp + 0x50], r15b
mov bl, 1
mov byte [rsp + 0x51], bl
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0x150]
mov r8d, 0x80
lea rdx, [rsp + 0x370]
mov rcx, qword [rsp + 0x158]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x18000b8c3
mov eax, dword [rsp + 0x150]
test eax, eax
je 0x18000b8c3
mov r8d, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x210], xmm0
mov qword [rsp + 0x220], r14
mov qword [rsp + 0x228], r14
lea rdx, [rsp + 0x370]
lea rcx, [rsp + 0x210]
call fcn.180003220
nop
test sil, sil
mov rsi, qword [rsp + 0x220]
je 0x18000b3f8
lea r12, [rsp + 0x210]
mov rdx, qword [rsp + 0x228]
cmp rdx, 0xf
seta al
mov r8, qword [rsp + 0x210]
cmova r12, r8
add r12, rsi
lea rcx, [rsp + 0x210]
test al, al
je 0x18000b310
mov rbx, r8
lea r15, [r8 + rsi]
jmp 0x18000b31c
lea r15, [rcx + rsi]
lea rbx, [rsp + 0x210]
cmp rbx, r15
je 0x18000b395
movzx ecx, byte [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isspace]
test eax, eax
jne 0x18000b33a
inc rbx
cmp rbx, r15
jne 0x18000b325
mov rdx, qword [rsp + 0x228]
mov rsi, qword [rsp + 0x220]
mov r8, qword [rsp + 0x210]
cmp rbx, r15
je 0x18000b395
lea rdi, [rbx + 1]
cmp rdi, r15
je 0x18000b395
movzx ecx, byte [rdi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isspace]
test eax, eax
jne 0x18000b375
movzx eax, byte [rdi]
mov byte [rbx], al
inc rbx
inc rdi
cmp rdi, r15
jne 0x18000b360
mov rdx, qword [rsp + 0x228]
mov rsi, qword [rsp + 0x220]
mov r8, qword [rsp + 0x210]
lea rax, [rsp + 0x210]
cmp rdx, 0xf
seta cl
cmova rax, r8
mov rdx, rbx
sub rdx, rax
sub r12, rbx
mov rax, rsi
sub rax, rdx
cmp rax, r12
cmovb r12, rax
lea rax, [rsp + 0x210]
test cl, cl
cmovne rax, r8
lea rcx, [rax + rdx]
sub rsi, r12
mov r8, rsi
sub r8, rdx
inc r8
lea rdx, [rcx + r12]
call sub.VCRUNTIME140.dll_memmove
mov qword [rsp + 0x220], rsi
movzx r15d, byte [rsp + 0x50]
movzx ebx, byte [rsp + 0x51]
test bl, bl
je 0x18000b46e
lea rcx, [rsp + 0x210]
cmp qword [rsp + 0x228], 0xf
seta dil
cmova rcx, qword [rsp + 0x210]
mov qword [rsp + 0x20], 1
lea r9, [0x1800e8900]
mov rdx, rsi
call fcn.180011df0
cmp rsi, rax
cmovb rax, rsi
lea rcx, [rsp + 0x210]
test dil, dil
cmovne rcx, qword [rsp + 0x210]
sub rsi, rax
lea r8, [rsi + 1]
lea rdx, [rcx + rax]
call sub.VCRUNTIME140.dll_memmove
mov qword [rsp + 0x220], rsi
mov byte [rsp + 0x51], 0
lea rdi, [rsp + 0x210]
cmp qword [rsp + 0x228], 0xf
seta cl
mov r9, qword [rsp + 0x210]
cmova rdi, r9
add rdi, rsi
lea rax, [rsp + 0x210]
test cl, cl
je 0x18000b4a3
lea rbx, [r9 + rsi]
jmp 0x18000b4af
lea rbx, [rax + rsi]
lea r9, [rsp + 0x210]
mov r8b, 0xd
mov rdx, rbx
mov rcx, r9
call fcn.180014430
mov r10, rax
cmp rax, rbx
je 0x18000b4e6
inc rax
cmp rax, rbx
je 0x18000b4e6
nop dword [rax]
movzx ecx, byte [rax]
cmp cl, 0xd
je 0x18000b4de
mov byte [r10], cl
inc r10
inc rax
cmp rax, rbx
jne 0x18000b4d0
lea rcx, [rsp + 0x210]
cmp qword [rsp + 0x228], 0xf
seta r8b
cmova rcx, qword [rsp + 0x210]
mov r9, r10
sub r9, rcx
sub rdi, r10
mov rbx, qword [rsp + 0x220]
mov rax, rbx
sub rax, r9
cmp rax, rdi
cmovb rdi, rax
lea rcx, [rsp + 0x210]
test r8b, r8b
cmovne rcx, qword [rsp + 0x210]
add rcx, r9
sub rbx, rdi
mov r8, rbx
sub r8, r9
inc r8
lea rdx, [rcx + rdi]
call sub.VCRUNTIME140.dll_memmove
mov qword [rsp + 0x220], rbx
lea rsi, [rsp + 0x210]
cmp qword [rsp + 0x228], 0xf
seta cl
mov r9, qword [rsp + 0x210]
cmova rsi, r9
add rsi, rbx
lea rax, [rsp + 0x210]
test cl, cl
je 0x18000b58a
add rbx, r9
jmp 0x18000b595
add rbx, rax
lea r9, [rsp + 0x210]
mov r8b, 0xa
mov rdx, rbx
mov rcx, r9
call fcn.180014430
mov r10, rax
cmp rax, rbx
je 0x18000b5c9
inc rax
cmp rax, rbx
je 0x18000b5c9
movzx ecx, byte [rax]
cmp cl, 0xa
je 0x18000b5c1
mov byte [r10], cl
inc r10
inc rax
cmp rax, rbx
jne 0x18000b5b3
lea rcx, [rsp + 0x210]
cmp qword [rsp + 0x228], 0xf
seta r8b
cmova rcx, qword [rsp + 0x210]
mov r9, r10
sub r9, rcx
sub rsi, r10
mov rdi, qword [rsp + 0x220]
mov rax, rdi
sub rax, r9
cmp rax, rsi
cmovb rsi, rax
lea rcx, [rsp + 0x210]
test r8b, r8b
cmovne rcx, qword [rsp + 0x210]
add rcx, r9
sub rdi, rsi
mov r8, rdi
sub r8, r9
inc r8
lea rdx, [rcx + rsi]
call sub.VCRUNTIME140.dll_memmove
mov qword [rsp + 0x220], rdi
test r15b, r15b
jne 0x18000b7fc
mov r15, qword [r13 + 0x10]
test r15, r15
je 0x18000b7f6
mov r12, r13
cmp qword [r13 + 0x18], 0xf
jbe 0x18000b65d
mov r12, qword [r13]
lea rcx, [rsp + 0x210]
mov r13, qword [rsp + 0x228]
cmp r13, 0xf
seta dl
mov byte [rsp + 0x52], dl
mov rsi, qword [rsp + 0x210]
cmova rcx, rsi
mov qword [rsp + 0xa8], rcx
cmp r15, rdi
ja 0x18000b6fe
mov rax, rcx
sub rax, r15
inc rax
add rax, rdi
mov qword [rsp + 0xa0], rax
movsx edx, byte [r12]
mov r8, rax
sub r8, rcx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x18000b6f9
nop dword [rax]
mov r8, r15
mov rdx, r12
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18000b7e4
inc rbx
mov r8, qword [rsp + 0xa0]
sub r8, rbx
movsx edx, byte [r12]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x18000b6c0
movzx edx, byte [rsp + 0x52]
mov rbx, 0xffffffffffffffff
cmp rbx, 0xffffffffffffffff
je 0x18000b838
lea rcx, [r15 + rbx]
xorps xmm0, xmm0
movups xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], r14
mov qword [rsp + 0x368], r14
cmp rdi, rcx
jb 0x18000bedf
sub rdi, rcx
mov r8, 0xffffffffffffffff
cmp rdi, r8
cmovb r8, rdi
lea rax, [rsp + 0x210]
test dl, dl
cmovne rax, rsi
lea rdx, [rax + rcx]
lea rcx, [rsp + 0x350]
call fcn.180003220
mov rdx, qword [rsp + 0x248]
cmp rdx, 0xf
jbe 0x18000b7aa
inc rdx
mov rcx, qword [rsp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b7a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b8b5
call fcn.1800145b0
movups xmm0, xmmword [rsp + 0x350]
movups xmmword [rsp + 0x230], xmm0
movups xmm1, xmmword [rsp + 0x360]
movups xmmword [rsp + 0x240], xmm1
mov r15b, 1
mov byte [rsp + 0x50], r15b
mov r13, qword [rsp + 0x228]
mov rsi, qword [rsp + 0x210]
jmp 0x18000b83e
sub rbx, qword [rsp + 0xa8]
movzx edx, byte [rsp + 0x52]
jmp 0x18000b705
movzx r15d, byte [rsp + 0x50]
lea rdx, [rsp + 0x210]
cmp qword [rsp + 0x228], 0xf
cmova rdx, qword [rsp + 0x210]
mov r8, rdi
lea rcx, [rsp + 0x230]
call fcn.1800105f0
mov r13, qword [rsp + 0x228]
mov rsi, qword [rsp + 0x210]
jmp 0x18000b83e
movzx r15d, byte [rsp + 0x50]
cmp r13, 0xf
jbe 0x18000b871
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x18000b869
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000b8bc
mov rcx, rsi
call fcn.1800145b0
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0x150]
mov r8d, 0x80
lea rdx, [rsp + 0x370]
mov rcx, qword [rsp + 0x158]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x18000b8c3
mov r13, qword [rsp + 0x168]
movzx ebx, byte [rsp + 0x51]
movzx esi, byte [rsp + 0x68]
jmp 0x18000b281
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, qword [rsp + 0x158]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x188]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x190]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov word [rsp + 0x150], 0x20
mov byte [rsp + 0x152], 0
lea r8, [rsp + 0x151]
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0xb0]
call fcn.1800113a0
nop
lea rbx, [rsp + 0xb0]
mov r15, qword [rsp + 0xb0]
mov r13, qword [rsp + 0xc8]
cmp r13, 0xf
cmova rbx, r15
lea rsi, [rsp + 0x230]
mov r12, qword [rsp + 0x230]
cmp qword [rsp + 0x248], 0xf
cmova rsi, r12
mov rdi, qword [rsp + 0x240]
test rdi, rdi
je 0x18000b9c5
xor edx, edx
mov r8d, 0x100
lea rcx, [rsp + 0x250]
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [rsp + 0xc0]
add rcx, rbx
cmp rbx, rcx
je 0x18000b9a3
nop dword [rax]
movzx eax, byte [rbx]
mov byte [rsp + rax + 0x250], 1
inc rbx
cmp rbx, rcx
jne 0x18000b990
lea rcx, [rsi + rdi]
mov rdx, rsi
cmp rsi, rcx
jae 0x18000b9c5
nop
movzx eax, byte [rdx]
cmp byte [rsp + rax + 0x250], 0
je 0x18000ba31
inc rdx
cmp rdx, rcx
jb 0x18000b9b0
mov rdx, 0xffffffffffffffff
cmp rdi, rdx
cmovb rdx, rdi
lea rcx, [rsp + 0x230]
cmp qword [rsp + 0x248], 0xf
cmova rcx, r12
sub rdi, rdx
lea r8, [rdi + 1]
add rdx, rcx
call sub.VCRUNTIME140.dll_memmove
mov qword [rsp + 0x240], rdi
cmp r13, 0xf
jbe 0x18000ba3e
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x18000ba36
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000ba36
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
sub rdx, rsi
jmp 0x18000b9cc
mov rcx, r15
call fcn.1800145b0
mov word [rsp + 0x150], 0x20
mov byte [rsp + 0x152], 0
lea r8, [rsp + 0x151]
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0xd0]
call fcn.1800113a0
nop
lea rbx, [rsp + 0xd0]
mov rsi, qword [rsp + 0xd0]
mov r15, qword [rsp + 0xe8]
cmp r15, 0xf
cmova rbx, rsi
lea rdi, [rsp + 0x230]
mov r12, qword [rsp + 0x230]
cmp qword [rsp + 0x248], 0xf
cmova rdi, r12
mov r13, qword [rsp + 0x240]
test r13, r13
je 0x18000bb2f
xor edx, edx
mov r8d, 0x100
lea rcx, [rsp + 0x250]
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [rsp + 0xe0]
add rcx, rbx
cmp rbx, rcx
je 0x18000baf3
nop dword [rax]
movzx eax, byte [rbx]
mov byte [rsp + rax + 0x250], 1
inc rbx
cmp rbx, rcx
jne 0x18000bae0
lea rax, [r13 - 1]
mov rcx, 0xffffffffffffffff
cmp rax, rcx
cmovb rcx, rax
add rcx, rdi
movzx eax, byte [rcx]
cmp byte [rsp + rax + 0x250], 0
je 0x18000bb2a
cmp rcx, rdi
je 0x18000bb2f
dec rcx
movzx eax, byte [rcx]
cmp byte [rsp + rax + 0x250], 0
jne 0x18000bb15
sub rcx, rdi
jmp 0x18000bb36
mov rcx, 0xffffffffffffffff
inc rcx
cmp r13, rcx
jb 0x18000bee5
lea rax, [rsp + 0x230]
cmp qword [rsp + 0x248], 0xf
cmova rax, r12
mov qword [rsp + 0x240], rcx
mov byte [rax + rcx], 0
cmp r15, 0xf
jbe 0x18000bb9d
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x18000bb95
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000bb95
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.1800145b0
cmp byte [rsp + 0x460], 0
je 0x18000be96
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov rdi, rax
lea rbx, [rsp + 0x230]
cmp qword [rsp + 0x248], 0xf
cmova rbx, qword [rsp + 0x230]
mov dword [rax], r14d
mov r8d, 0xa
lea rdx, [rsp + 0x168]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoll]
cmp rbx, qword [rsp + 0x168]
jne 0x18000bbff
lea rcx, str.invalid_stoll_argument
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xinvalid_argument_char_const____ptr64_]
cmp dword [rdi], 0x22
jne 0x18000bc11
lea rcx, str.stoll_argument_out_of_range
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_]
cqo
and edx, 0x3fffffff
lea rbx, [rdx + rax]
sar rbx, 0x1e
inc rbx
mov dword [rsp + 0x150], 0x3e183e33
mov word [rsp + 0x154], 0x100
mov rcx, r14
nop dword [rax]
lea eax, [rcx + 0x7a]
xor byte [rsp + rcx + 0x150], al
inc rcx
cmp rcx, 4
jb 0x18000bc40
mov byte [rsp + 0x155], 0
lea r8, [rsp + 0x154]
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x110]
call fcn.1800113a0
nop
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x70]
call fcn.180003330
mov rdi, rax
lea r9, [rsp + 0x365]
movabs r8, 0xcccccccccccccccd
test rbx, rbx
jns 0x18000bcf0
neg rbx
nop dword [rax + rax]
dec r9
mov rax, r8
mul rbx
shr rdx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [r9], bl
mov rbx, rdx
test rdx, rdx
jne 0x18000bcb0
dec r9
mov byte [r9], 0x2d
jmp 0x18000bd18
dec r9
mov rax, r8
mul rbx
shr rdx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [r9], bl
mov rbx, rdx
test rdx, rdx
jne 0x18000bcf0
lea r8, [rsp + 0x365]
mov rdx, r9
lea rcx, [rsp + 0xf0]
call fcn.1800113a0
nop
mov r9, rdi
lea r8, [rsp + 0xf0]
lea rcx, [rsp + 0x130]
call fcn.180012790
mov rdx, qword [rsp + 0x248]
cmp rdx, 0xf
jbe 0x18000bd8f
inc rdx
mov rcx, qword [rsp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000bd8a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000bd8a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800145b0
movups xmm0, xmmword [rsp + 0x130]
movups xmmword [rsp + 0x230], xmm0
movups xmm1, xmmword [rsp + 0x140]
movups xmmword [rsp + 0x240], xmm1
mov rdx, qword [rsp + 0x108]
cmp rdx, 0xf
jbe 0x18000bdf6
inc rdx
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000bdf0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000bdf0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800145b0
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x18000be39
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000be34
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000be34
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800145b0
movdqa xmm0, xmmword [0x1800e8d40]
movdqu xmmword [rsp + 0x80], xmm0
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x128]
cmp rdx, 0xf
jbe 0x18000be96
inc rdx
mov rcx, qword [rsp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000be90
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000be90
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800145b0
nop
mov rax, qword [rsp + 0x90]
movups xmm0, xmmword [rsp + 0x230]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rsp + 0x240]
movups xmmword [rax + 0x10], xmm1
mov rcx, qword [rsp + 0x3f0]
xor rcx, rsp
call fcn.180014590
add rsp, 0x400
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.180010dd0
nop
call fcn.180010dd0
int3