Function at 0x1800043c0
Capabilities:
Accept command line arguments
Encode data using xor
Initialize winsock library
Resolve dns
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x380]
sub rsp, 0x480
mov rax, qword [0x180011020]
xor rax, rsp
mov qword [rbp + 0x370], rax
cmp edx, 1
jne 0x180005200
mov ecx, 0x202
lea rdx, [rbp + 0xd0]
call qword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x180004446
xor r9d, r9d
lea r8, [0x18000d5fd]
lea rdx, str.Initialization_failed__
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x180005200
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
xor r13d, r13d
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x28], r13b
mov r15, 0xffffffffffffffff
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x180004470
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.180005bc0
nop
mov r8b, 0x22
lea rdx, [rbp - 0x28]
lea rcx, [rbp - 0x48]
call fcn.180004070
nop
mov rdx, qword [rax]
add rdx, 0x40
cmp qword [rdx + 0x18], 0x10
jb 0x1800044a8
mov rdx, qword [rdx]
inc rdx
mov qword [rbp + 0x88], r13
mov qword [rbp + 0x90], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x78], 0
mov r8, r15
inc r8
cmp byte [rdx + r8], 0
jne 0x1800044c4
lea rcx, [rbp + 0x78]
call fcn.180005bc0
nop
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x180004532
mov rdx, qword [rbp - 0x40]
call fcn.1800068e0
mov rdx, qword [rbp - 0x38]
mov rcx, qword [rbp - 0x48]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004521
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180004521
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000b86c
mov qword [rbp - 0x48], r13
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x40], xmm0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x180004570
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000456b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000456b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000b86c
mov byte [rbp - 0x28], 0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], rax
mov r8b, 0x20
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x40]
call fcn.180004070
nop
mov rcx, qword [rbp + 0x40]
cmp qword [rcx + 0x18], 0x10
jb 0x1800045a0
mov rcx, qword [rcx]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov dword [0x1800119b4], eax
call fcn.180009db0
call fcn.180009010
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
call fcn.180009540
lea rdx, [0x180003570]
lea rcx, [0x180011a20]
call fcn.180008840
call fcn.180009090
test eax, eax
je 0x1800045f9
xor r9d, r9d
lea r8, [0x18000d5fd]
lea rdx, str._1__Error:_failed__
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov r8, qword [rbp + 0x40]
lea rdx, [r8 + 0x20]
cmp qword [r8 + 0x38], 0x10
jb 0x18000460c
mov rdx, qword [r8 + 0x20]
cmp qword [r8 + 0x30], 4
jne 0x180004646
mov rcx, r13
lea r10, str.NONE
nop dword [rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r10 + rcx - 1]
jne 0x180004639
cmp rcx, 4
jne 0x180004620
mov eax, r13d
jmp 0x18000463e
sbb eax, eax
or eax, 1
test eax, eax
je 0x180005166
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x28], xmm0
mov qword [rbp + 0x38], rax
lea rdx, [r8 + 0x20]
lea rcx, [rbp + 0x28]
call fcn.180001620
nop
mov dword [rsp + 0x40], 0x60b2135d
mov dword [rsp + 0x44], 0x892134cd
mov dword [rsp + 0x48], 0x73ab8377
mov dword [rsp + 0x4c], 0x4e36de1a
mov r11d, r13d
mov r8, qword [rbp + 0x30]
mov r9, qword [rbp + 0x28]
cmp r8, r9
je 0x1800046f6
mov r10, r13
mov rbx, r13
nop word [rax + rax]
mov rcx, qword [rbp + 0x40]
mov r8, rcx
mov rax, rcx
cmp qword [rcx + 0x18], 0x10
jb 0x1800046b7
mov r8, qword [rcx]
mov rax, r8
mov rcx, r15
nop word [rax + rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x1800046c0
xor edx, edx
mov rax, rbx
div rcx
movzx eax, byte [rdx + r8]
xor byte [r9 + r10], al
inc r11d
inc r10
mov r8, qword [rbp + 0x30]
mov rax, r8
mov r9, qword [rbp + 0x28]
sub rax, r9
movsxd rbx, r11d
cmp rbx, rax
jb 0x1800046a0
mov edx, r13d
cmp r8, r9
je 0x180004737
mov r10, r13
mov eax, edx
and eax, 0x8000000f
jge 0x180004711
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx ecx, byte [rsp + rax + 0x40]
xor byte [r9 + r10], cl
inc edx
inc r10
mov r8, qword [rbp + 0x30]
mov rcx, r8
mov r9, qword [rbp + 0x28]
sub rcx, r9
movsxd rax, edx
cmp rax, rcx
jb 0x180004701
mov rcx, r8
sub rcx, r9
sub ecx, 1
movsxd r10, ecx
js 0x180004777
nop word [rax + rax]
sub r8, r9
movsxd rax, ecx
inc rax
xor edx, edx
div r8
movzx eax, byte [rdx + r9]
xor byte [r9 + r10], al
dec ecx
sub r10, 1
mov r8, qword [rbp + 0x30]
mov r9, qword [rbp + 0x28]
jns 0x180004750
sub r8, r9
mov qword [rbp + 0x68], r13
mov qword [rbp + 0x70], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x58], 0
mov rdx, r9
lea rcx, [rbp + 0x58]
call fcn.180005bc0
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rax
mov r8b, 0xa
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x10]
call fcn.180004070
nop
mov byte [0x1800119b1], 1
lea r12, [0x180011088]
mov rdx, qword [rbp + 0x10]
cmp r12, rdx
je 0x1800047e6
cmp qword [rdx + 0x18], 0x10
jb 0x1800047d6
mov rdx, qword [rdx]
mov r8, qword [rbp + 0x10]
mov r8, qword [r8 + 0x10]
mov rcx, r12
call fcn.180005bc0
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], r13
mov rsi, qword [0x180011098]
mov r14, r12
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae r14, qword [0x180011088]
movabs rax, 0x7fffffffffffffff
cmp rsi, 0x10
jae 0x18000482d
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x78], xmm0
mov edi, reloc.WS2_32.dll_ntohs
mov rbx, qword [rsp + 0x78]
jmp 0x1800048a0
mov rdi, rsi
or rdi, 0xf
cmp rdi, rax
cmova rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x180004877
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000523b
lfence
mov rcx, rax
call fcn.18000b4b0
test rax, rax
je 0x18000493e
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x18000488c
test rcx, rcx
je 0x180004889
lfence
call fcn.18000b4b0
mov rbx, rax
jmp 0x18000488c
mov rbx, r13
mov qword [rsp + 0x78], rbx
lea r8, [rsi + 1]
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x70], rdi
mov r8d, r13d
mov edx, r13d
test rsi, rsi
je 0x18000490b
mov rcx, r13
nop word [rax + rax]
lea rax, [rsp + 0x78]
cmp rdi, 0x10
cmovae rax, rbx
cmp byte [rax + rcx], 0x2e
jne 0x1800048d8
inc r8d
jmp 0x1800048fe
lea rax, [rsp + 0x78]
cmp rdi, 0x10
cmovae rax, rbx
cmp byte [rax + rcx], 0x30
jl 0x180004945
lea rax, [rsp + 0x78]
cmp rdi, 0x10
cmovae rax, rbx
cmp byte [rax + rcx], 0x39
jg 0x180004945
inc edx
inc rcx
movsxd rax, edx
cmp rax, rsi
jb 0x1800048c0
cmp r8d, 3
sete sil
cmp rdi, 0x10
jb 0x180004985
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x18000497d
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000497d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rdi, 0x10
jb 0x180004978
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x180004970
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000493e
mov rcx, rbx
call fcn.18000b86c
xor sil, sil
jmp 0x180004985
mov rcx, rbx
call fcn.18000b86c
mov qword [rbp - 0x70], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x78], 0
test sil, sil
jne 0x180004e35
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r13
mov rsi, qword [0x180011098]
mov rdi, r12
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rdi, qword [0x180011088]
cmp rsi, 0x10
jae 0x1800049d7
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x50], xmm0
mov ebx, reloc.WS2_32.dll_ntohs
jmp 0x180004a59
movabs rax, 0x7fffffffffffffff
mov rbx, rsi
or rbx, 0xf
mov qword [rsp + 0x70], rbx
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x180004a33
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180005235
lfence
mov rcx, rax
call fcn.18000b4b0
mov rcx, rax
test rax, rax
je 0x180004dd5
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180004a45
test rcx, rcx
je 0x180004a42
lfence
call fcn.18000b4b0
jmp 0x180004a45
mov rax, r13
mov qword [rsp + 0x50], rax
lea r8, [rsi + 1]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rbx
lea rax, [rsp + 0x50]
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
movups xmmword [rbp + 0xa8], xmm0
movups xmmword [rbp + 0xb8], xmm0
mov dword [rbp + 0x9c], 2
lea rcx, [rsp + 0x50]
cmp rbx, 0x10
cmovae rcx, qword [rsp + 0x50]
lea r9, [rbp + 8]
lea r8, [rbp + 0x98]
xor edx, edx
call qword [sym.imp.WS2_32.dll_getaddrinfo]
test eax, eax
jne 0x180004d6a
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x180004d6a
mov dword [rsp + 0x30], 2
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 0x100
lea r8, [rbp + 0x270]
mov edx, dword [rcx + 0x10]
mov rcx, qword [rcx + 0x20]
call qword [sym.imp.WS2_32.dll_getnameinfo]
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x50], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x68], 0
lea rax, [rbp + 0x270]
nop dword [rax]
inc r15
cmp byte [rax + r15], 0
jne 0x180004b10
mov r8, r15
lea rdx, [rbp + 0x270]
lea rcx, [rbp - 0x68]
call fcn.180005bc0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x180004b6b
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004b66
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004dce
call fcn.18000b86c
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x50], 0
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, 0x10
jb 0x180004bbf
mov rcx, qword [0x180011088]
inc rdx
cmp rdx, 0x1000
jb 0x180004bba
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180004dd5
mov rcx, r8
call fcn.18000b86c
movups xmm0, xmmword [rbp - 0x68]
movups xmmword [0x180011088], xmm0
movups xmm1, xmmword [rbp - 0x58]
movups xmmword [0x180011098], xmm1
movq rdx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae r12, rdx
movq r8, xmm1
test r8, r8
jne 0x180004e35
lea rdx, [0x18000d5fd]
mov rcx, r12
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x180004e35
xor r9d, r9d
lea r8, [0x18000d5fd]
lea rdx, str.Invalid_proxy_hostname_IP__
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x180004c97
mov rdx, qword [rbp + 0x18]
call fcn.1800068e0
mov rdx, qword [rbp + 0x20]
mov rcx, qword [rbp + 0x10]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004c86
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800050ce
call fcn.18000b86c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r13
mov rdx, qword [rbp + 0x70]
cmp rdx, 0x10
jb 0x180004cd3
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004ccd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005118
call fcn.18000b86c
nop
mov rcx, qword [rbp + 0x28]
test rcx, rcx
je 0x180004d19
mov rdx, qword [rbp + 0x38]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004d08
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005156
call fcn.18000b86c
mov qword [rbp + 0x28], r13
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x38], r13
mov rcx, qword [rbp + 0x40]
test rcx, rcx
je 0x180004ded
mov rdx, qword [rbp + 0x48]
call fcn.1800068e0
mov rdx, qword [rbp + 0x50]
mov rcx, qword [rbp + 0x40]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004ddc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180004ddc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x50], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x68], 0
xor r8d, r8d
lea rdx, [0x18000d5fd]
lea rcx, [rbp - 0x68]
call fcn.180005bc0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x180004b6b
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004b66
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180004b66
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.18000b86c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], r13
mov rdx, qword [rbp + 0x90]
cmp rdx, 0x10
jb 0x180005200
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800051fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800051fb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov r8, qword [rbp + 0x10]
add r8, 0x20
lea rcx, [0x1800110a8]
cmp rcx, r8
je 0x180004e5f
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x180004e56
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
call fcn.180005bc0
mov r8, qword [rbp + 0x10]
add r8, 0x40
lea rbx, [0x180011068]
cmp rbx, r8
je 0x180004e8c
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x180004e80
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
mov rcx, rbx
call fcn.180005bc0
cmp qword [0x180011078], 0
jne 0x180004eab
mov r8d, 1
lea rdx, [0x18000d9f4]
mov rcx, rbx
call fcn.180005bc0
mov r8, qword [rbp + 0x10]
add r8, 0x60
lea rbx, [0x1800110c8]
cmp rbx, r8
je 0x180004ed8
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x180004ecc
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
mov rcx, rbx
call fcn.180005bc0
cmp qword [0x1800110d8], 0
jne 0x180004ef7
mov r8d, 1
lea rdx, [0x18000d9f4]
mov rcx, rbx
call fcn.180005bc0
mov rax, qword [rbp + 0x10]
lea rdx, [rax + 0x80]
cmp qword [rax + 0x98], 0x10
jb 0x180004f13
mov rdx, qword [rax + 0x80]
cmp qword [rax + 0x90], 4
jne 0x180004f56
mov rcx, r13
lea r8, str.HTTP
nop word [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r8 + rcx - 1]
jne 0x180004f49
cmp rcx, 4
jne 0x180004f30
mov eax, r13d
jmp 0x180004f4e
sbb eax, eax
or eax, 1
test eax, eax
jne 0x180004f56
mov al, 1
jmp 0x180004f58
xor al, al
mov byte [0x1800119b0], al
call fcn.180009010
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
call fcn.180009540
lea rdx, [0x180002d20]
lea rcx, [0x1800119b8]
call fcn.180008840
call fcn.180009090
test eax, eax
je 0x180004fa6
xor r9d, r9d
lea r8, [0x18000d5fd]
lea rdx, str._2__Error:_failed__
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call fcn.180009010
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
call fcn.180009540
lea rdx, [0x180002dc0]
lea rcx, [0x1800119c8]
call fcn.180008840
call fcn.180009090
test eax, eax
je 0x180004fee
xor r9d, r9d
lea r8, [0x18000d5fd]
lea rdx, str._3__Error:_failed__
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
cmp byte [0x1800119b0], 0
jne 0x18000508c
call fcn.180009010
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
call fcn.180009540
lea rdx, [0x180002f70]
lea rcx, [0x1800119c0]
call fcn.180008840
call fcn.180009090
test eax, eax
je 0x180005043
xor r9d, r9d
lea r8, [0x18000d5fd]
lea rdx, str._4__Error:_failed__
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call fcn.180009010
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
call fcn.180009540
lea rdx, [0x180003410]
lea rcx, [0x180011a40]
call fcn.180008840
call fcn.180009090
test eax, eax
je 0x18000508c
xor r9d, r9d
lea r8, [0x18000d5fd]
lea rdx, str._5__Error:_failed__
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x1800050e6
mov rdx, qword [rbp + 0x18]
call fcn.1800068e0
mov rdx, qword [rbp + 0x20]
mov rcx, qword [rbp + 0x10]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800050d5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800050d5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000b86c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r13
mov rdx, qword [rbp + 0x70]
cmp rdx, 0x10
jb 0x180005125
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000511f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000511f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000b86c
nop
mov rcx, qword [rbp + 0x28]
test rcx, rcx
je 0x180005162
mov rdx, qword [rbp + 0x38]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000515d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000515d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000b86c
mov r8, qword [rbp + 0x40]
test r8, r8
je 0x1800051bf
mov rdx, qword [rbp + 0x48]
mov rcx, r8
call fcn.1800068e0
mov rdx, qword [rbp + 0x50]
mov rcx, qword [rbp + 0x40]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800051ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800051ae
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000b86c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], r13
mov rdx, qword [rbp + 0x90]
cmp rdx, 0x10
jb 0x180005200
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800051fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800051fb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000b86c
mov eax, 1
mov rcx, qword [rbp + 0x370]
xor rcx, rsp
call fcn.18000b1f0
lea r11, [rsp + 0x480]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.180001200
nop
call fcn.180001200
int3