Function at 0x14000ac50
Capabilities:
Execute command
Initialize winhttp library
Reference http user-agent string
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x110]
sub rsp, 0x210
mov rax, qword [0x1400b21c0]
xor rax, rsp
mov qword [rbp + 0x108], rax
mov r15, rdx
mov qword [rbp - 0x50], rdx
mov r12, rcx
mov qword [rbp - 0x48], rcx
mov qword [rbp - 0x40], rcx
mov qword [rbp - 0x38], rdx
xor edi, edi
mov qword [rbp + 0xe0], rdi
lea rax, [0x14009b520]
mov qword [rbp + 0xd0], rax
lea rbx, str.Mozilla_5.0__compatible__MSIE_9.0__Windows_NT_6.1__Trident_5.0_
mov qword [rbp + 0xd8], rbx
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
mov qword [rbp + 0x38], rdi
mov qword [rbp + 0x40], 0xf
mov byte [rbp + 0x28], dil
lea ecx, [rdi + 8]
call fcn.140089e00
mov r13, rax
mov qword [rsp + 0x38], rax
xor eax, eax
mov qword [r13], rax
lea ecx, [rdi + 1]
call fcn.140089e00
mov qword [rsp + 0x38], rax
mov qword [r13], rax
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov qword [rbp + 0xc8], rax
test rax, rax
jne 0x14000ae07
mov rdx, qword [rbp + 0x40]
cmp rdx, 0xf
jbe 0x14000ad59
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ad54
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c57a
call fcn.14008a07c
mov qword [rbp + 0x38], rdi
mov qword [rbp + 0x40], 0xf
mov byte [rbp + 0x28], 0
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x14000ada5
mov rcx, qword [r12]
inc rdx
cmp rdx, 0x1000
jb 0x14000ada0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000c581
mov rcx, r8
call fcn.14008a07c
mov qword [r12 + 0x10], rdi
mov qword [r12 + 0x18], 0xf
mov byte [r12], 0
mov rdx, qword [r15 + 0x18]
cmp rdx, 0xf
jbe 0x14000adf2
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x14000aded
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000c588
mov rcx, r8
call fcn.14008a07c
mov qword [r15 + 0x10], rdi
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
jmp 0x14000c345
xorps xmm0, xmm0
movups xmmword [rbp + 0x48], xmm0
mov qword [rbp + 0x58], rdi
mov qword [rbp + 0x60], 0xf
mov byte [rbp + 0x48], 0
lea r9, str.login
lea r8, [0x14009a9dc]
lea rdx, [0x140094704]
lea rcx, [rbp + 0x28]
call fcn.140057880
lea rax, [rbp - 0x70]
mov qword [rsp + 0x38], rax
lea rsi, [0x1400b6b10]
mov rdx, rsi
lea rcx, [rbp - 0x70]
call fcn.14000d700
mov rdi, rax
lea rax, [rbp + 8]
mov qword [rsp + 0x68], rax
lea r14, [0x1400b6ad0]
mov rdx, r14
lea rcx, [rbp + 8]
call fcn.14000d700
mov rbx, rax
lea rdx, [0x1400b6b30]
lea rcx, [rsp + 0x70]
call fcn.14000d700
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140010a20
nop
cmp qword [rax + 0x18], 0xf
jbe 0x14000aeaa
mov rax, qword [rax]
mov r9, rax
lea r8, [0x14009a9dc]
lea rdx, str.bcde
lea rcx, [rbp + 0x28]
call fcn.140057880
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x14000af05
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000af00
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000af00
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008a07c
lea rax, [rbp - 0x70]
mov qword [rsp + 0x40], rax
mov rdx, rsi
lea rcx, [rbp - 0x70]
call fcn.14000d700
mov rdi, rax
lea rax, [rbp + 8]
mov qword [rsp + 0x68], rax
mov rdx, r14
lea rcx, [rbp + 8]
call fcn.14000d700
mov rbx, rax
lea rdx, [0x1400b6b50]
lea rcx, [rsp + 0x70]
call fcn.14000d700
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140010a20
nop
cmp qword [rax + 0x18], 0xf
jbe 0x14000af65
mov rax, qword [rax]
mov r9, rax
lea r8, [0x14009a9dc]
lea rdx, [0x140094794]
lea rcx, [rbp + 0x28]
call fcn.140057880
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x14000afc0
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000afbb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000afbb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008a07c
lea rax, [rbp - 0x70]
mov qword [rsp + 0x40], rax
mov rdx, rsi
lea rcx, [rbp - 0x70]
call fcn.14000d700
mov rdi, rax
lea rax, [rbp + 8]
mov qword [rsp + 0x68], rax
mov rdx, r14
lea rcx, [rbp + 8]
call fcn.14000d700
mov rbx, rax
lea rdx, [0x1400b6b70]
lea rcx, [rsp + 0x70]
call fcn.14000d700
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140010a20
nop
cmp qword [rax + 0x18], 0xf
jbe 0x14000b020
mov rax, qword [rax]
mov r9, rax
lea r8, [0x14009a9dc]
lea rdx, [0x140094798]
lea rcx, [rbp + 0x28]
call fcn.140057880
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x14000b07b
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b076
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b076
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008a07c
lea rax, [rbp - 0x70]
mov qword [rsp + 0x40], rax
mov rdx, rsi
lea rcx, [rbp - 0x70]
call fcn.14000d700
mov rdi, rax
lea rax, [rbp + 8]
mov qword [rsp + 0x68], rax
mov rdx, r14
lea rcx, [rbp + 8]
call fcn.14000d700
mov rbx, rax
mov rdx, r12
lea rcx, [rsp + 0x70]
call fcn.14000d700
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140010a20
nop
cmp qword [rax + 0x18], 0xf
jbe 0x14000b0d7
mov rax, qword [rax]
mov r9, rax
lea r8, [0x14009a9dc]
lea rdx, str.gh1k
lea rcx, [rbp + 0x28]
call fcn.140057880
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x14000b132
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b12d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008a07c
lea rax, [rbp - 0x70]
mov qword [rsp + 0x40], rax
mov rdx, rsi
lea rcx, [rbp - 0x70]
call fcn.14000d700
mov rdi, rax
lea rax, [rbp + 8]
mov qword [rsp + 0x68], rax
mov rdx, r14
lea rcx, [rbp + 8]
call fcn.14000d700
mov rbx, rax
mov rdx, r15
lea rcx, [rsp + 0x70]
call fcn.14000d700
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140010a20
nop
cmp qword [rax + 0x18], 0xf
jbe 0x14000b18e
mov rax, qword [rax]
mov r9, rax
lea r8, [0x14009a9dc]
lea rdx, [0x14009483c]
lea rcx, [rbp + 0x28]
call fcn.140057880
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x14000b1e9
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b1e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b1e4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008a07c
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
xor r15d, r15d
mov qword [rbp + 0x18], r15
mov qword [rbp + 0x20], r15
lea r8d, [r15 + 1]
lea rdx, [0x140094840]
lea rcx, [rbp + 8]
call fcn.14000e3b0
lea rdx, [rbp + 8]
lea rcx, [rbp - 0x70]
call fcn.140057350
mov r8, rax
lea rdx, [rsp + 0x48]
mov rcx, r13
call fcn.140063850
nop
cmp qword [rax + 0x18], 0xf
jbe 0x14000b237
mov rax, qword [rax]
mov r9, rax
lea r8, [0x14009a9dc]
lea rdx, [0x140094844]
lea rcx, [rbp + 0x28]
call fcn.140057880
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x14000b292
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b28d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b28d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008a07c
lea r9, [0x1400b6af0]
cmp qword [0x1400b6b08], 0xf
cmova r9, qword [0x1400b6af0]
lea r8, [0x14009a9dc]
lea rdx, [0x14009479c]
lea rcx, [rbp + 0x28]
call fcn.140057880
lea r9, [0x1400b6ab0]
cmp qword [0x1400b6ac8], 0xf
cmova r9, qword [0x1400b6ab0]
lea r8, [0x14009a9dc]
lea rdx, [0x1400947a0]
lea rcx, [rbp + 0x28]
call fcn.140057880
lea rdx, str.https:__api.auth.gg_v6_api.php
lea rcx, [rsp + 0x48]
call fcn.14000d430
lea r9, [rbp + 0x28]
lea r8, [rbp + 0x48]
mov rdx, rax
lea rcx, [rbp + 0xc8]
call fcn.140058260
mov byte [rsp + 0x32], al
lea rcx, [0x1400b6bd0]
cmp qword [0x1400b6be8], 0xf
cmova rcx, qword [0x1400b6bd0]
mov r8, qword [0x1400b6be0]
cmp r8, 8
jne 0x14000b3ff
lea rdx, [0x140094848]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000b3ff
lea rax, [rsp + 0x48]
mov qword [rsp + 0x40], rax
mov rcx, rsi
call fcn.14000d580
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.14000d6c0
mov rdi, rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x68], rax
mov rcx, r14
call fcn.14000d580
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.14000d6c0
mov rbx, rax
lea rcx, [rbp + 0x48]
call fcn.14000d580
mov rdx, rax
lea rcx, [rbp + 0xc8]
call fcn.14000d6c0
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0xa8]
call fcn.140010e50
nop
mov rcx, rax
call fcn.14000d580
mov rdx, rax
lea rcx, [rbp + 8]
call fcn.14000d6c0
nop
lea rcx, [rbp + 0xa8]
call fcn.140003300
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x2b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [rbp + 8]
mov qword [rsp + 0x40], rax
cmp qword [0x1400b6b28], 0xf
cmova rsi, qword [0x1400b6b10]
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov qword [rbp + 0x18], r15
mov qword [rbp + 0x20], r15
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rsi + r8], 0
jne 0x14000b431
mov rdx, rsi
lea rcx, [rbp + 8]
call fcn.14000e3b0
nop
lea rax, [rsp + 0x70]
mov qword [rsp + 0x68], rax
cmp qword [0x1400b6ae8], 0xf
cmova r14, qword [0x1400b6ad0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], r15
mov r8, rdi
inc r8
cmp byte [r14 + r8], 0
jne 0x14000b475
mov rdx, r14
lea rcx, [rsp + 0x70]
call fcn.14000e3b0
nop
lea rdx, [rbp + 0x48]
cmp qword [rbp + 0x60], 0xf
cmova rdx, qword [rbp + 0x48]
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], r15
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14000b4b0
lea rcx, [rbp - 0x70]
call fcn.14000e3b0
nop
lea r9, [rbp + 8]
lea r8, [rsp + 0x70]
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x48]
call fcn.140010e50
nop
cmp qword [rax + 0x18], 0xf
jbe 0x14000b4e6
mov rax, qword [rax]
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], r15
mov qword [rbp], r15
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000b500
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.14000e3b0
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x14000b557
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b552
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b552
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008a07c
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], 0xf
mov byte [rsp + 0x48], 0
lea rcx, [rbp - 0x18]
cmp qword [rbp], 0xf
seta r14b
mov rsi, qword [rbp - 0x18]
cmova rcx, rsi
mov rbx, qword [rbp - 8]
cmp rbx, 0xc
jne 0x14000b5cb
mov r8, rbx
lea rdx, str.hwid_updated
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000b5cb
lea r9d, [rbx + 0x24]
lea r8, str.Success_
lea rdx, str.HWID_Updated__please_Relaunch_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [rbx + 0x1f]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [rbp - 0x18]
test r14b, r14b
cmovne rcx, rsi
cmp rbx, 0xc
jne 0x14000b61e
mov r8, rbx
lea rdx, str.time_expired
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000b61e
lea r9d, [rbx + 0x24]
lea r8, str.Error_
lea rdx, str.Your_Subscription_Has_Expired_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [rbx + 0x1f]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [rbp - 0x18]
test r14b, r14b
cmovne rcx, rsi
cmp rbx, 0xc
jne 0x14000b671
mov r8, rbx
lea rdx, str.invalid_hwid
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000b671
lea r9d, [rbx + 0x24]
lea r8, str.Error_
lea rdx, str.Invalid_HWID_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [rbx + 0x1f]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [rbp - 0x18]
test r14b, r14b
cmovne rcx, rsi
cmp rbx, 0xf
jne 0x14000b6c4
mov r8, rbx
lea rdx, str.invalid_details
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000b6c4
lea r9d, [rbx + 0x21]
lea r8, str.Error_
lea rdx, str.Invalid_Login_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [rbx + 0x1c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], r15
mov qword [rbp + 0x80], r15
mov r8d, 1
lea rdx, [0x1400947e8]
lea rcx, [rbp + 0x68]
call fcn.14000e3b0
nop
xorps xmm0, xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
mov qword [rbp - 0x20], r15
movups xmmword [rbp + 0x88], xmm0
mov qword [rbp + 0x98], r15
mov r14d, 0xf
mov qword [rbp + 0xa0], r14
mov byte [rbp + 0x88], 0
cmp qword [rbp + 0x80], r14
seta cl
mov byte [rsp + 0x30], cl
mov rbx, qword [rbp - 0x28]
mov rax, qword [rbp + 0x68]
lea r9, [rbp + 0x68]
test cl, cl
cmovne r9, rax
lea rcx, [rbp - 0x18]
mov r12, qword [rbp - 0x18]
mov r13, qword [rbp]
cmp r13, 0xf
cmova rcx, r12
mov rax, qword [rbp + 0x78]
mov qword [rsp + 0x20], rax
mov r15, qword [rbp - 8]
mov rdx, r15
call fcn.14000e2f0
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x14000b889
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xor eax, eax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rax
mov r8, rsi
cmp r15, rsi
cmovb r8, r15
lea rdx, [rbp - 0x18]
cmp r13, 0xf
cmova rdx, r12
lea rcx, [rsp + 0x48]
call fcn.14000e3b0
cmp r14, 0xf
jbe 0x14000b7e3
lea rdx, [r14 + 1]
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b7de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c3b4
call fcn.14008a07c
movups xmm0, xmmword [rsp + 0x48]
movups xmmword [rbp + 0x88], xmm0
movups xmm1, xmmword [rsp + 0x58]
movups xmmword [rbp + 0x98], xmm1
mov rax, qword [rbp + 0x78]
add rax, rsi
mov rbx, qword [rbp - 8]
cmp rbx, rax
cmovb rax, rbx
lea rcx, [rbp - 0x18]
cmp qword [rbp], 0xf
cmova rcx, qword [rbp - 0x18]
sub rbx, rax
lea r8, [rbx + 1]
lea rdx, [rcx + rax]
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 8], rbx
mov rax, qword [rbp - 0x28]
cmp rax, qword [rbp - 0x20]
je 0x14000b865
lea rdx, [rbp + 0x88]
mov rcx, rax
call fcn.14000d700
mov rbx, qword [rbp - 0x28]
add rbx, 0x20
mov qword [rbp - 0x28], rbx
mov r14, qword [rbp + 0xa0]
movzx ecx, byte [rsp + 0x30]
jmp 0x14000b730
lea r8, [rbp + 0x88]
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.14000eb90
mov r14, qword [rbp + 0xa0]
movzx ecx, byte [rsp + 0x30]
jmp 0x14000b72c
cmp rbx, qword [rbp - 0x20]
je 0x14000b8a2
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14000d700
add qword [rbp - 0x28], 0x20
jmp 0x14000b8b2
lea r8, [rbp - 0x18]
mov rdx, rbx
lea rcx, [rbp - 0x30]
call fcn.14000eb90
mov rdx, qword [rbp - 0x30]
cmp qword [rdx + 0x18], 0xf
jbe 0x14000b8c0
mov rdx, qword [rdx]
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
xor r12d, r12d
mov qword [rbp + 0xb8], r12
mov qword [rbp + 0xc0], r12
mov r8, rdi
nop
inc r8
cmp byte [rdx + r8], r12b
jne 0x14000b8e0
lea rcx, [rbp + 0xa8]
call fcn.14000e3b0
nop
mov r9, qword [rbp - 0x30]
add r9, 0x20
cmp qword [r9 + 0x18], 0xf
jbe 0x14000b908
mov r9, qword [r9]
mov rbx, rdi
nop dword [rax + rax]
inc rbx
cmp byte [r9 + rbx], 0
jne 0x14000b910
mov rax, qword [0x1400b2308]
cmp rbx, rax
ja 0x14000b954
lea rsi, [0x1400b22f0]
cmp rax, 0xf
cmova rsi, qword [0x1400b22f0]
mov qword [0x1400b2300], rbx
mov r8, rbx
mov rdx, r9
mov rcx, rsi
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rbx], 0
jmp 0x14000b963
mov rdx, rbx
lea rcx, [0x1400b22f0]
call fcn.14000e6a0
mov r9, qword [rbp - 0x30]
add r9, 0x40
cmp qword [r9 + 0x18], 0xf
jbe 0x14000b975
mov r9, qword [r9]
mov rbx, rdi
nop dword [rax + rax]
inc rbx
cmp byte [r9 + rbx], 0
jne 0x14000b980
mov rax, qword [0x1400b22c8]
cmp rbx, rax
ja 0x14000b9c4
lea rsi, [0x1400b22b0]
cmp rax, 0xf
cmova rsi, qword [0x1400b22b0]
mov qword [0x1400b22c0], rbx
mov r8, rbx
mov rdx, r9
mov rcx, rsi
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rbx], 0
jmp 0x14000b9d3
mov rdx, rbx
lea rcx, [0x1400b22b0]
call fcn.14000e6a0
mov r9, qword [rbp - 0x30]
sub r9, 0xffffffffffffff80
cmp qword [r9 + 0x18], 0xf
jbe 0x14000b9e5
mov r9, qword [r9]
mov rsi, rdi
nop dword [rax + rax]
inc rsi
cmp byte [r9 + rsi], 0
jne 0x14000b9f0
mov rax, qword [0x1400b22a8]
lea r15, [0x1400b2290]
cmp rsi, rax
ja 0x14000ba37
mov rbx, r15
cmp rax, 0xf
cmova rbx, qword [0x1400b2290]
mov qword [0x1400b22a0], rsi
mov r8, rsi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rsi], 0
jmp 0x14000ba42
mov rdx, rsi
mov rcx, r15
call fcn.14000e6a0
mov r9, qword [rbp - 0x30]
add r9, 0xa0
cmp qword [r9 + 0x18], 0xf
jbe 0x14000ba57
mov r9, qword [r9]
mov rsi, rdi
nop word [rax + rax]
inc rsi
cmp byte [r9 + rsi], 0
jne 0x14000ba60
mov rax, qword [0x1400b22e8]
lea r13, [0x1400b22d0]
cmp rsi, rax
ja 0x14000baa7
mov rbx, r13
cmp rax, 0xf
cmova rbx, qword [0x1400b22d0]
mov qword [0x1400b22e0], rsi
mov r8, rsi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rsi], 0
jmp 0x14000bab2
mov rdx, rsi
mov rcx, r13
call fcn.14000e6a0
mov r9, qword [rbp - 0x30]
add r9, 0xc0
cmp qword [r9 + 0x18], 0xf
jbe 0x14000bad0
mov r9, qword [r9]
nop word [rax + rax]
inc rdi
cmp byte [r9 + rdi], 0
jne 0x14000bad0
mov rax, qword [0x1400b2288]
cmp rdi, rax
ja 0x14000bb14
lea rbx, [0x1400b2270]
cmp rax, 0xf
cmova rbx, qword [0x1400b2270]
mov qword [0x1400b2280], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x14000bb23
mov rdx, rdi
lea rcx, [0x1400b2270]
call fcn.14000e6a0
mov rsi, qword [0x1400b6b80]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rsi
cmp rax, 7
jb 0x14000c58f
cmp qword [0x1400b6b88], 0xf
lea rdx, [0x1400b6b70]
cmova rdx, qword [0x1400b6b70]
mov qword [rsp + 0x38], rdx
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov qword [rbp + 0x18], r12
mov qword [rbp + 0x20], r12
lea r12, [rsi + 7]
mov ebx, 0xf
lea rdi, [rbp + 8]
lea eax, [rbx + 7]
cmp r12, rbx
jbe 0x14000bc02
mov rbx, r12
or rbx, 0xf
cmp rbx, rcx
jbe 0x14000bbc5
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140089e00
test rax, rax
je 0x14000bdf6
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rdx, qword [rsp + 0x38]
jmp 0x14000bbfe
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14000bbe8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000c595
jmp 0x14000bba1
test rcx, rcx
je 0x14000bbfc
call fcn.140089e00
mov rdi, rax
mov rdx, qword [rsp + 0x38]
jmp 0x14000bbfe
xor edi, edi
mov qword [rbp + 8], rdi
mov qword [rbp + 0x18], r12
mov qword [rbp + 0x20], rbx
mov rax, qword [str.success]
mov dword [rdi], eax
movzx eax, word [0x14009485c]
mov word [rdi + 4], ax
movzx eax, byte [0x14009485e]
mov byte [rdi + 6], al
lea rcx, [rdi + 7]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r12], 0
cmp qword [0x1400b6b48], 0xf
lea rdx, [0x1400b6b30]
cmova rdx, qword [0x1400b6b30]
mov r8, qword [0x1400b6b40]
lea rcx, [rbp + 8]
call fcn.14000dcc0
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xor ebx, ebx
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rbx
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
cmp qword [0x1400b22a8], 0xf
cmova r15, qword [0x1400b2290]
mov r8, qword [0x1400b22a0]
mov rdx, r15
lea rcx, [rsp + 0x70]
call fcn.14000dcc0
movups xmm1, xmmword [rax]
movups xmmword [rsp + 0x48], xmm1
movups xmm2, xmmword [rax + 0x10]
movups xmmword [rsp + 0x58], xmm2
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
lea rdx, [rsp + 0x48]
movdqa xmm0, xmm2
psrldq xmm0, 8
movq rsi, xmm0
cmp rsi, 0xf
seta r12b
movq rbx, xmm1
cmova rdx, rbx
lea rcx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0xf
seta byte [rsp + 0x31]
mov r15, qword [rbp + 0xa8]
cmova rcx, r15
mov r8, qword [rbp + 0xb8]
movq rax, xmm2
cmp r8, rax
jne 0x14000bd35
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000bd35
mov dil, 1
jmp 0x14000bd38
xor dil, dil
test r12b, r12b
je 0x14000bd72
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14000bd69
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000bd69
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.14008a07c
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x14000bdb1
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bdac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000bdac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008a07c
xor esi, esi
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], sil
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x14000be02
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bdfd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000bdfd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008a07c
test dil, dil
je 0x14000c0ad
lea rcx, [0x140094908]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.___________________________________________________________________________________________________n_________________________________________________________________________________________________n________________________________________________________________________________________________n__________________________________________________________________________________________n______________________________________________________________________________________n_______________________________________________________________________________________n_________________________________________________________________________________________n________________________________________________________________________________________n__________________________________________________________________________________________________n__________________________________________________________________________________________________n________________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000dde0
lea rdx, [0x14000e180]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 1
lea rcx, str.Nikos_the_best_dev...__n
call fcn.14006f650
lea rcx, str.Color_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xaf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.Color_2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xaf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.Color_3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xaf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.Color_4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xaf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.Color_6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xaf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.Color_7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xaf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.Color_8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xaf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.Color_9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Color_5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
mov qword [rbp + 0xf8], rsi
mov qword [rbp + 0x100], rsi
mov r8d, 0x16
lea rdx, str.Preparing_Software..._
lea rcx, [rbp + 0xe8]
call fcn.14000e3b0
nop
mov rbx, rsi
mov rsi, qword [rbp + 0x100]
cmp rsi, 0xf
seta r12b
mov rdi, qword [rbp + 0xe8]
nop dword [rax]
lea rax, [rbp + 0xe8]
test r12b, r12b
cmovne rax, rdi
cmp byte [rbx + rax], 0
je 0x14000c001
lea rax, [rbp + 0xe8]
cmp rsi, 0xf
cmova rax, rdi
cmp byte [rbx + rax], 0x20
jne 0x14000bfb3
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov ecx, eax
mov eax, 0x1b4e81b5
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x96
sub ecx, eax
add ecx, 0x32
jmp 0x14000bfd4
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov ecx, eax
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x64
sub ecx, eax
add ecx, 0x1e
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rbp + 0xe8]
cmp rsi, 0xf
cmova rdx, rdi
movzx edx, byte [rbx + rdx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000dfb0
inc rbx
jmp 0x14000bf60
mov edx, 2
lea rcx, str.____Done___n
call fcn.14006f650
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
mov r8d, 0x20001
lea rcx, str.Voice.wav
call qword [sym.imp.WINMM.dll_PlaySoundA]
mov edx, 9
lea rcx, str._nExpiry:
call fcn.14006f650
cmp qword [0x1400b22e8], 0xf
cmova r13, qword [0x1400b22d0]
mov edx, 9
mov rcx, r13
call fcn.14006f650
mov edx, 9
lea rcx, [0x140094df4]
call fcn.14006f650
nop
test r12b, r12b
je 0x14000c0ab
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000c0a3
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c0a3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.14008a07c
xor esi, esi
cmp byte [rsp + 0x32], 0
jne 0x14000c36f
cmp byte [rsp + 0x31], 0
je 0x14000c0f7
mov rdx, qword [rbp + 0xc0]
inc rdx
mov rax, r15
cmp rdx, 0x1000
jb 0x14000c0ee
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c3b4
mov rcx, r15
call fcn.14008a07c
nop
cmp r14, 0xf
jbe 0x14000c133
lea rdx, [r14 + 1]
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c12d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c3f6
call fcn.14008a07c
nop
mov rcx, qword [rbp - 0x30]
test rcx, rcx
je 0x14000c18a
mov rdx, qword [rbp - 0x28]
call fcn.14000e4b0
mov rdx, qword [rbp - 0x20]
mov rcx, qword [rbp - 0x30]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c179
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c445
call fcn.14008a07c
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rsi
cmp byte [rsp + 0x30], 0
je 0x14000c1ca
mov rdx, qword [rbp + 0x80]
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c1c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c493
call fcn.14008a07c
nop
mov rdx, qword [rbp]
cmp rdx, 0xf
jbe 0x14000c205
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c200
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c4d2
call fcn.14008a07c
mov qword [rbp - 8], rsi
mov qword [rbp], 0xf
mov byte [rbp - 0x18], 0
mov rdx, qword [rbp + 0x60]
cmp rdx, 0xf
jbe 0x14000c250
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c24b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c520
call fcn.14008a07c
mov qword [rbp + 0x58], rsi
mov qword [rbp + 0x60], 0xf
mov byte [rbp + 0x48], 0
mov rdx, qword [rbp + 0x40]
cmp rdx, 0xf
jbe 0x14000c29b
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c296
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c57a
call fcn.14008a07c
mov byte [rbp + 0x28], 0
mov qword [rbp + 0x40], 0xf
mov qword [rbp + 0x38], rsi
mov rbx, qword [rbp - 0x48]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14000c2e9
inc rdx
cmp rdx, 0x1000
mov rcx, qword [rbx]
jb 0x14000c2e4
mov r8, qword [rcx - 8]
sub rcx, r8
add rdx, 0x27
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000c581
mov rcx, r8
call fcn.14008a07c
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rbx, qword [rbp - 0x50]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14000c336
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x14000c331
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000c588
mov rcx, r8
call fcn.14008a07c
mov byte [rbx], 0
mov qword [rbx + 0x18], 0xf
mov qword [rbx + 0x10], rsi
mov rcx, qword [rbp + 0x108]
xor rcx, rsp
call fcn.140089de0
mov rbx, qword [rsp + 0x260]
add rsp, 0x210
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rcx, qword [rbp + 0xc8]
test rcx, rcx
je 0x14000c382
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
cmp byte [rsp + 0x31], 0
je 0x14000c3c4
mov rdx, qword [rbp + 0xc0]
inc rdx
mov rax, r15
cmp rdx, 0x1000
jb 0x14000c3bb
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c3bb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.14008a07c
nop
cmp r14, 0xf
jbe 0x14000c403
lea rdx, [r14 + 1]
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c3fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c3fd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008a07c
nop
mov rcx, qword [rbp - 0x30]
test rcx, rcx
je 0x14000c45d
mov rdx, qword [rbp - 0x28]
call fcn.14000e4b0
mov rdx, qword [rbp - 0x20]
mov rcx, qword [rbp - 0x30]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c44c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c44c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008a07c
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rsi
cmp byte [rsp + 0x30], 0
je 0x14000c4a0
mov rdx, qword [rbp + 0x80]
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c49a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c49a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008a07c
nop
mov rdx, qword [rbp]
cmp rdx, 0xf
jbe 0x14000c4de
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c4d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c4d9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008a07c
mov qword [rbp - 8], rsi
mov qword [rbp], 0xf
mov byte [rbp - 0x18], 0
mov rdx, qword [rbp + 0x60]
cmp rdx, 0xf
jbe 0x14000c52c
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c527
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c527
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008a07c
mov qword [rbp + 0x58], rsi
mov qword [rbp + 0x60], 0xf
mov byte [rbp + 0x48], 0
mov rdx, qword [rbp + 0x40]
cmp rdx, 0xf
jbe 0x14000c29b
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c296
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c296
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400022e0
int3
call fcn.140002240
int3