Function at 0x14004158c
Capabilities:
Enumerate processes via ntquerysysteminformation
Get disk information
Get disk size
Get local ipv4 addresses
Get logon sessions
Get memory capacity
Get system information on windows
List groups for user account
List user accounts

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xab8
movaps xmmword [rsp + 0xaa0], xmm9
movaps xmmword [rsp + 0xa90], xmm8
movaps xmmword [rsp + 0xa80], xmm7
movaps xmmword [rsp + 0xa70], xmm6
mov rsi, rdx
mov qword [rsp + 0x320], rcx
xor ecx, ecx
call fcn.140045a52
test rax, rax
je 0x140044355
mov qword [rsp + 0x48], rsi
movabs rbp, 0x8000000000000000
mov r15, qword [rax]
mov r12, qword [rax + 8]
lea rcx, [r15 + 1]
mov qword [rax], rcx
lea rsi, [rsp + 0x500]
mov edx, 0x158
mov r8d, 0x1f4
mov rcx, rsi
call fcn.140040999
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0xa60], xmm1
movaps xmmword [rsp + 0xa50], xmm0
lea rdx, [0x140086165]
lea rsi, [rsp + 0x500]
mov r8d, 9
mov rcx, rsi
call fcn.14003b743
and qword [rsi + 0x18], 0
mov eax, 1
mov qword [rsi + 0x20], rax
xorps xmm0, xmm0
movups xmmword [rsi + 0x28], xmm0
mov qword [rsi + 0x38], rax
and qword [rsi + 0x40], 0
mov qword [rsi + 0x48], rbp
and qword [rsi + 0x60], 0
and dword [rsi + 0x68], 0
and qword [rsi + 0x70], 0
mov qword [rsi + 0x78], 8
and qword [rsi + 0x80], 0
mov byte [rsi + 0x88], 0
mov ecx, 8
mov edx, 0x120
call fcn.14003af76
test rax, rax
je 0x140044381
mov rsi, rax
call fcn.14000808e
mov rdi, rax
mov rbx, rdx
call fcn.1400378f0
mov r8d, edx
lea r14, [rsp + 0x360]
mov rcx, r14
mov edx, eax
call fcn.140037920
cmp qword [r14], 0
je 0x1400416da
xor r13d, r13d
jmp 0x1400416fb
mov r13, qword [rsp + 0x368]
call sub.kernel32.dll_GetTickCount64
xor ecx, ecx
mov r8d, 0x3e8
xor edx, edx
div r8
sub r13, rax
cmovb r13, rcx
movaps xmm0, xmmword [rsp + 0xa50]
movaps xmm1, xmmword [rsp + 0xa60]
lea r14, [rsp + 0x360]
movups xmmword [r14 + 0xd8], xmm0
movups xmmword [r14 + 0xe8], xmm1
mov qword [r14 + 0xf8], r15
mov qword [r14 + 0x100], r12
xorps xmm8, xmm8
movups xmmword [r14 + 0x138], xmm8
movups xmmword [r14 + 0x148], xmm8
lea rdx, [rsp + 0x500]
mov r8d, 0x90
mov rcx, r14
call sub.msvcrt.dll_memcpy
and qword [r14 + 0x90], 0
mov eax, 8
mov qword [r14 + 0x98], rax
and qword [r14 + 0xa0], 0
mov qword [r14 + 0xa8], 2
mov qword [r14 + 0xb0], rsi
movups xmmword [r14 + 0xb8], xmm8
and qword [r14 + 0x158], 0
movdqu xmm6, xmmword [0x140085ce0]
movdqu xmmword [r14 + 0x108], xmm6
movdqu xmm7, xmmword [0x140085cf0]
movdqu xmmword [r14 + 0x118], xmm7
mov qword [r14 + 0x128], rdi
mov qword [r14 + 0x130], rbx
mov qword [r14 + 0x198], r13
mov qword [r14 + 0xc8], rax
and qword [r14 + 0xd0], 0
mov rdi, qword [rsp + 0x48]
cmp byte [rdi + 4], 0
je 0x1400418bb
lea rsi, [rsp + 0x210]
movaps xmmword [rsi], xmm8
movaps xmmword [rsi + 0x30], xmm8
movaps xmmword [rsi + 0x20], xmm8
movaps xmmword [rsi + 0x10], xmm8
mov dword [rsi], 0x40
mov rcx, rsi
call sub.kernel32.dll_GlobalMemoryStatusEx
movups xmm0, xmmword [rsi + 8]
movups xmmword [rsp + 0x498], xmm0
lea rcx, [rsp + 0x500]
movaps xmmword [rcx + 0x50], xmm8
movaps xmmword [rcx + 0x40], xmm8
movaps xmmword [rcx + 0x30], xmm8
movaps xmmword [rcx + 0x20], xmm8
movaps xmmword [rcx + 0x10], xmm8
movaps xmmword [rcx], xmm8
and qword [rcx + 0x60], 0
mov edx, 0x68
call sub.psapi.dll_GetPerformanceInfo
cmp eax, 1
jne 0x1400418bb
mov rdx, qword [rsp + 0x510]
mov r9, qword [rsp + 0x520]
xor r10d, r10d
sub rdx, r9
cmovb rdx, r10
mov rcx, qword [rsp + 0x550]
mov rax, rcx
mul rdx
mov r8, rax
mov r11, 0xffffffffffffffff
cmovo r8, r11
mov rdx, qword [rsp + 0x508]
sub rdx, r9
cmovb rdx, r10
mov rax, rcx
mul rdx
cmovo rax, r11
mov qword [rsp + 0x4a8], r8
mov qword [rsp + 0x4b0], rax
cmp byte [rdi + 0xb], 2
je 0x140041c98
lea r15, [rsp + 0x4b8]
mov r14b, byte [rdi + 0xc]
cmp qword [r15], 0
je 0x1400419f2
mov rcx, qword [rsp + 0x4e8]
call sub.pdh.dll_PdhCollectQueryData
cmp qword [rsp + 0x3a8], rbp
je 0x14004191f
lea rdx, [rsp + 0x3a8]
mov rcx, r15
call fcn.1400458eb
test eax, eax
je 0x1400443ce
movss xmm1, dword [0x14004ad90]
subss xmm1, xmm0
movss dword [rsp + 0x3c8], xmm1
mov edx, r14d
and dl, 1
lea rcx, [rsp + 0x360]
call fcn.1400458c9
mov rdi, rax
mov rbx, rdx
add rdi, 0x48
movss xmm8, dword [0x14004ad90]
lea rax, [rdi - 0x48]
cmp rax, rbx
je 0x140041979
cmp qword [rdi], rbp
je 0x140041973
mov rcx, r15
mov rdx, rdi
call fcn.1400458eb
test eax, eax
je 0x140044335
movaps xmm1, xmm8
subss xmm1, xmm0
movss dword [rdi + 0x20], xmm1
add rdi, 0x70
jmp 0x140041945
test r14b, 1
mov rdi, qword [rsp + 0x48]
je 0x140041c98
cmp byte [rsp + 0x3e8], 0
jne 0x140041c98
mov rsi, qword [rsp + 0x3e0]
lea rdi, [rsp + 0x500]
mov rcx, rdi
mov rdx, rsi
call fcn.140044c27
mov rbx, qword [rsp + 0x3d8]
mov rcx, qword [rdi]
mov rdx, qword [rdi + 8]
mov rax, qword [rdi + 0x10]
shl rax, 3
imul r8, rsi, 0x70
xor r9d, r9d
mov r10, rbx
test r8, r8
je 0x140041a15
cmp rax, r9
je 0x140041a15
mov r11, qword [rdx + r9]
mov qword [r10 + 0x60], r11
add r10, 0x70
add r9, 8
add r8, 0xffffffffffffff90
jmp 0x1400419d2
lea r8, [rsp + 0x500]
and qword [r8], 0
xor ecx, ecx
xor edx, edx
call sub.pdh.dll_PdhOpenQueryA
test eax, eax
je 0x140041a2c
lea rax, [rsp + 0x210]
jmp 0x140041a56
call fcn.14003fe48
test rsi, rsi
je 0x140041c81
mov rax, qword [rbx + 0x60]
jmp 0x140041c83
mov rsi, qword [rsp + 0x500]
call fcn.14000808e
mov rbx, rax
mov rdi, rdx
lea rax, [0x140085cd0]
mov qword [rsp + 0x210], rax
lea rax, [rsp + 0xd0]
and qword [rax], 0
cmp qword [rsp + 0x4b8], 0
je 0x140041a75
mov rcx, r15
call fcn.14004549e
mov rcx, r15
call fcn.1400405a3
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0x4b8], rax
and qword [rsp + 0x4d0], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x4c0], xmm0
mov qword [rsp + 0x4d8], rbx
mov qword [rsp + 0x4e0], rdi
mov qword [rsp + 0x4e8], rsi
mov rcx, qword [rsp + 0xd0]
mov qword [rsp + 0x4f0], rcx
test rax, rax
mov rdi, qword [rsp + 0x48]
je 0x140041c98
mov byte [rsp + 0x60], r14b
mov ebp, r14d
and bpl, 1
lea rdx, str.Processor__Total___Idle_Timetot_0Processor____Idle_Time
lea rdi, [rsp + 0x210]
mov r8d, 0x1e
mov rcx, rdi
call fcn.14003b743
lea r14, [rsp + 0x3a8]
lea rdx, [0x140086646]
lea rsi, [rsp + 0x500]
mov r8d, 5
mov rcx, rsi
call fcn.14003b743
mov rcx, rdi
mov rdx, r15
mov r8, r14
mov r9, rsi
call fcn.140045534
lea rcx, [rsp + 0x360]
mov edx, ebp
call fcn.1400458c9
mov r14, rax
mov qword [rsp + 0x58], rdx
xor eax, eax
mov qword [rsp + 0x40], rax
mov r13d, 2
mov r12d, 1
cmp r14, qword [rsp + 0x58]
je 0x140041c54
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x140], rax
inc rax
mov qword [rsp + 0x40], rax
lea rax, str.Kf_b_
mov qword [rsp + 0x500], rax
mov qword [rsp + 0x508], r13
and qword [rsp + 0x520], 0
lea rsi, [rsp + 0x140]
mov qword [rsp + 0x210], rsi
lea rbx, [fcn.1400033f0]
mov qword [rsp + 0x218], rbx
lea rbp, [rsp + 0x210]
mov qword [rsp + 0x510], rbp
mov qword [rsp + 0x518], r12
lea rdi, [rsp + 0xd0]
mov rcx, rdi
lea r15, [rsp + 0x500]
mov rdx, r15
call fcn.14003edcd
lea rax, [0x140086690]
mov qword [rsp + 0x500], rax
mov qword [rsp + 0x508], r13
and qword [rsp + 0x520], 0
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rbx
lea rax, [rsp + 0x70]
mov qword [rsp + 0x510], rax
mov qword [rsp + 0x518], r12
mov rcx, rbp
mov rdx, r15
call fcn.14003edcd
lea r8, [r14 + 0x48]
mov rcx, rdi
lea rdx, [rsp + 0x4b8]
mov r9, rbp
call fcn.140045534
add r14, 0x70
jmp 0x140041b58
cmp qword [rsp + 0x4b8], 0
movabs rbp, 0x8000000000000000
mov rdi, qword [rsp + 0x48]
mov r14b, byte [rsp + 0x60]
lea r15, [rsp + 0x4b8]
jne 0x1400418db
jmp 0x140041c98
xor eax, eax
mov rdi, qword [rsp + 0x48]
mov qword [rsp + 0x3c0], rax
mov byte [rsp + 0x3e8], 1
cmp byte [rdi + 6], 0
je 0x140042082
lea rsi, [rsp + 0x210]
mov rcx, rsi
call fcn.140044f67
cmp dword [rsi], 2
je 0x140041ea4
mov rax, qword [rsp + 0x240]
lea rdx, [rsp + 0x500]
mov qword [rdx + 0x30], rax
movups xmm0, xmmword [rsp + 0x210]
movups xmm1, xmmword [rsp + 0x220]
movups xmm2, xmmword [rsp + 0x230]
movaps xmmword [rdx + 0x20], xmm2
movaps xmmword [rdx + 0x10], xmm1
movaps xmmword [rdx], xmm0
lea rsi, [rsp + 0xd0]
mov rcx, rsi
call fcn.140044f93
cmp qword [rsi], 2
je 0x140041ea4
mov rax, qword [rsp + 0x100]
lea rdx, [rsp + 0x500]
mov qword [rdx + 0x30], rax
movups xmm0, xmmword [rsp + 0xd0]
movups xmm1, xmmword [rsp + 0xe0]
movups xmm2, xmmword [rsp + 0xf0]
movaps xmmword [rdx + 0x20], xmm2
movaps xmmword [rdx + 0x10], xmm1
movaps xmmword [rdx], xmm0
lea rsi, [rsp + 0x70]
mov rcx, rsi
call fcn.14004500d
cmp qword [rsi], 2
je 0x140041ea4
mov rax, qword [rsp + 0xa0]
lea rdx, [rsp + 0x500]
mov qword [rdx + 0x30], rax
movups xmm0, xmmword [rsp + 0x70]
movups xmm1, xmmword [rsp + 0x80]
movups xmm2, xmmword [rsp + 0x90]
movaps xmmword [rdx + 0x20], xmm2
movaps xmmword [rdx + 0x10], xmm1
movaps xmmword [rdx], xmm0
lea rsi, [rsp + 0x140]
mov rcx, rsi
call fcn.1400450a3
cmp qword [rsi], 2
je 0x140041ea4
mov rax, qword [rsp + 0x170]
lea rdx, [rsp + 0x500]
mov qword [rdx + 0x30], rax
movups xmm0, xmmword [rsp + 0x140]
movups xmm1, xmmword [rsp + 0x150]
movups xmm2, xmmword [rsp + 0x160]
movaps xmmword [rdx + 0x20], xmm2
movaps xmmword [rdx + 0x10], xmm1
movaps xmmword [rdx], xmm0
lea rsi, [rsp + 0x190]
mov rcx, rsi
call fcn.14004516d
cmp qword [rsi], 2
je 0x140041ea4
mov rax, qword [rsp + 0x1c0]
lea rdx, [rsp + 0x500]
mov qword [rdx + 0x30], rax
movups xmm0, xmmword [rsp + 0x190]
movups xmm1, xmmword [rsp + 0x1a0]
movups xmm2, xmmword [rsp + 0x1b0]
movaps xmmword [rdx + 0x20], xmm2
movaps xmmword [rdx + 0x10], xmm1
movaps xmmword [rdx], xmm0
lea rsi, [rsp + 0x1d0]
mov rcx, rsi
call fcn.1400451ea
mov rax, qword [rsi]
cmp rax, 2
je 0x140041ea4
movups xmm0, xmmword [rsp + 0x1d8]
movups xmm1, xmmword [rsp + 0x1e8]
movups xmm2, xmmword [rsp + 0x1f8]
lea rdx, [rsp + 0x328]
movups xmmword [rdx + 0x28], xmm2
movups xmmword [rdx + 0x18], xmm1
movups xmmword [rdx + 8], xmm0
mov qword [rdx], rax
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov r8b, 1
call fcn.1400452c9
mov edi, dword [rsi + 4]
cmp edi, 2
jne 0x140044254
lea rcx, [rsp + 0x328]
call fcn.1400404c4
mov ebx, 8
xor esi, esi
mov rcx, qword [rsp + 0x3f8]
mov rdx, qword [rsp + 0x400]
call fcn.140040486
mov rcx, qword [rsp + 0x3f0]
mov rdx, qword [rsp + 0x3f8]
call fcn.140040589
mov qword [rsp + 0x3f0], rsi
mov qword [rsp + 0x3f8], rbx
mov qword [rsp + 0x400], rsi
mov rsi, qword [rsp + 0x48]
cmp byte [rsi + 1], 0
je 0x140042353
lea rcx, [rsp + 0x70]
and qword [rcx], 0
call sub.iphlpapi.dll_GetIfTable2
test eax, eax
movabs rdi, 0x8000000000000000
je 0x14004249a
mov rsi, qword [rsp + 0x48]
movzx ebp, word [rsi + 8]
cmp bpl, 2
je 0x140043479
movzx eax, byte [rsi + 0xa]
shl eax, 0x10
mov ecx, ebp
or ecx, eax
mov word [rsp + 0x54], cx
shr ecx, 0x10
mov byte [rsp + 0x56], cl
lea rbx, [rsp + 0x190]
mov edi, 0x80000
mov edx, 0x80000
mov rcx, rbx
call fcn.140044539
lea r14, [rsp + 0x500]
and dword [rsp + 0x500], 0
mov rax, qword [rsp + 0x190]
mov rdx, qword [rsp + 0x1a0]
sub rax, rdx
cmp rax, rdi
jb 0x140041fc2
mov rsi, qword [rsp + 0x198]
mov ecx, 5
mov rdx, rsi
mov r8d, edi
mov r9, r14
call sub.ntdll.dll_NtQuerySystemInformation
cmp eax, 0xc0000004
jne 0x140041fcf
mov eax, dword [rsp + 0x500]
add rdi, rdi
lea ecx, [rax + 0x2800]
test eax, eax
cmovne rdi, rcx
jmp 0x140041f68
mov rcx, rbx
mov r8, rdi
call fcn.14000a473
jmp 0x140041f88
test eax, eax
jne 0x14004248a
mov qword [rsp + 0x1a0], rdi
mov ecx, 8
mov edx, 0xfa0
call fcn.14003af76
test rax, rax
je 0x1400443a7
lea rdi, [rsp + 0x140]
mov qword [rdi], 0x1f4
mov qword [rdi + 8], rax
and qword [rdi + 0x10], 0
xor ebx, ebx
xor r14d, r14d
cmp rbx, qword [rsp + 0x140]
jne 0x14004202e
mov rcx, rdi
call fcn.14004033a
mov rax, qword [rsp + 0x148]
lea rcx, [rsi + r14]
mov qword [rax + rbx*8], rcx
inc rbx
mov qword [rsp + 0x150], rbx
mov ecx, dword [rcx]
add r14, rcx
test rcx, rcx
jne 0x140042014
lea rax, [rsp + 0x438]
mov qword [rsp + 0x180], rax
test bpl, bpl
je 0x140042eb6
lea rsi, [rsp + 0x360]
mov rcx, rsi
xor edx, edx
call fcn.14004457f
mov rax, qword [rsi + 0x80]
jmp 0x140042eb8
cmp byte [rdi + 5], 0
je 0x140041eed
mov rsi, qword [rsp + 0x3f8]
lea r14, [rsp + 0x218]
imul rbp, qword [rsp + 0x400], 0x60
lea rdi, [rsp + 0xd0]
lea rbx, [rsp + 0x70]
lea r15, [rsp + 0x500]
lea r12, [rsp + 0x140]
lea r13, [rsp + 0x210]
test rbp, rbp
je 0x140041eed
mov rax, qword [rsi]
cmp rax, 2
jne 0x140042255
mov rcx, rdi
call fcn.140044f67
cmp dword [rsp + 0xd0], 2
je 0x1400421fa
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x530], rax
movups xmm0, xmmword [rsp + 0xd0]
movups xmm1, xmmword [rsp + 0xe0]
movups xmm2, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x520], xmm2
movaps xmmword [rsp + 0x510], xmm1
movaps xmmword [rsp + 0x500], xmm0
mov rcx, rbx
mov rdx, r15
call fcn.140044f93
cmp qword [rsp + 0x70], 2
je 0x1400421fa
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x530], rax
movups xmm0, xmmword [rsp + 0x70]
movups xmm1, xmmword [rsp + 0x80]
movups xmm2, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0x520], xmm2
movaps xmmword [rsp + 0x510], xmm1
movaps xmmword [rsp + 0x500], xmm0
mov rcx, r12
mov rdx, r15
call fcn.14004500d
cmp qword [rsp + 0x140], 2
je 0x1400421fa
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x530], rax
movups xmm0, xmmword [rsp + 0x140]
movups xmm1, xmmword [rsp + 0x150]
movups xmm2, xmmword [rsp + 0x160]
movaps xmmword [rsp + 0x520], xmm2
movaps xmmword [rsp + 0x510], xmm1
movaps xmmword [rsp + 0x500], xmm0
mov rcx, rdi
mov rdx, r15
call fcn.1400450a3
cmp qword [rsp + 0xd0], 2
jne 0x140042303
mov qword [rsp + 0x70], 2
mov rcx, rsi
call fcn.1400404ba
mov rax, qword [rsp + 0xa0]
mov qword [rsi + 0x30], rax
movups xmm0, xmmword [rsp + 0x70]
movups xmm1, xmmword [rsp + 0x80]
movups xmm2, xmmword [rsp + 0x90]
movups xmmword [rsi + 0x20], xmm2
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
mov rax, qword [rsi]
mov qword [rsi], 2
cmp rax, 2
jne 0x14004225c
mov qword [rsp + 0x500], 2
jmp 0x140042289
mov qword [rsi], 2
mov qword [rsp + 0x210], rax
movups xmm0, xmmword [rsi + 8]
movups xmm1, xmmword [rsi + 0x18]
movups xmm2, xmmword [rsi + 0x28]
movups xmmword [r14 + 0x20], xmm2
movups xmmword [r14 + 0x10], xmm1
movups xmmword [r14], xmm0
mov rcx, r15
mov rdx, r13
call fcn.1400451ea
mov rcx, rsi
call fcn.1400404ba
mov rax, qword [rsp + 0x530]
mov qword [rsi + 0x30], rax
movups xmm0, xmmword [rsp + 0x500]
movups xmm1, xmmword [rsp + 0x510]
movups xmm2, xmmword [rsp + 0x520]
movups xmmword [rsi + 0x20], xmm2
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
cmp dword [rsi], 2
je 0x1400422f6
mov rcx, r15
mov rdx, rsi
xor r8d, r8d
call fcn.1400452c9
cmp dword [rsp + 0x504], 2
je 0x1400422f6
movss xmm0, dword [rsp + 0x500]
movss dword [rsi + 0x58], xmm0
ucomiss xmm0, dword [rsi + 0x5c]
jbe 0x1400422f6
movss dword [rsi + 0x5c], xmm0
add rsi, 0x60
add rbp, 0xffffffffffffffa0
jmp 0x1400420ca
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x530], rax
movups xmm0, xmmword [rsp + 0xd0]
movups xmm1, xmmword [rsp + 0xe0]
movups xmm2, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x520], xmm2
movaps xmmword [rsp + 0x510], xmm1
movaps xmmword [rsp + 0x500], xmm0
mov rcx, rbx
mov rdx, r15
call fcn.14004516d
jmp 0x140042203
cmp byte [rsi], 0
je 0x140041f21
lea rsi, [rsp + 0x500]
mov r8d, 0x548
mov rcx, rsi
xor edx, edx
call sub.msvcrt.dll_memset
mov rax, qword [rsp + 0x468]
mov rcx, qword [rsp + 0x470]
add rcx, rax
inc rcx
movdqa xmm0, xmmword [rax]
pmovmskb edx, xmm0
not edx
mov r8, qword [rsp + 0x480]
lea rdi, [rsp + 0x210]
mov qword [rdi], rax
add rax, 0x10
mov qword [rdi + 8], rax
mov qword [rdi + 0x10], rcx
mov word [rdi + 0x18], dx
mov qword [rdi + 0x20], r8
mov r14, 0xffffffffffffffff
mov rcx, rdi
call fcn.1400406fc
test rax, rax
je 0x140041f1c
mov rbx, rdx
mov rax, qword [rdx]
mov qword [rsp + 0x500], rax
and dword [rsp + 0x508], 0
mov rcx, rsi
call sub.iphlpapi.dll_GetIfEntry2
test eax, eax
jne 0x1400423c2
mov rax, qword [rbx + 8]
mov rcx, qword [rbx + 0x18]
mov qword [rbx + 0x10], rax
mov rax, qword [rsp + 0xa00]
mov qword [rbx + 8], rax
mov qword [rbx + 0x20], rcx
mov rax, qword [rsp + 0x9b8]
mov qword [rbx + 0x18], rax
mov rax, qword [rbx + 0x28]
mov qword [rbx + 0x30], rax
mov rax, qword [rsp + 0x9c0]
add rax, qword [rsp + 0x9c8]
cmovb rax, r14
mov qword [rbx + 0x28], rax
mov rax, qword [rbx + 0x38]
mov qword [rbx + 0x40], rax
mov rax, qword [rsp + 0xa08]
add rax, qword [rsp + 0xa10]
cmovb rax, r14
mov qword [rbx + 0x38], rax
mov rax, qword [rbx + 0x48]
mov qword [rbx + 0x50], rax
mov rax, qword [rsp + 0x9d8]
mov qword [rbx + 0x48], rax
mov rax, qword [rbx + 0x58]
mov qword [rbx + 0x60], rax
mov rax, qword [rsp + 0xa20]
mov qword [rbx + 0x58], rax
jmp 0x1400423c2
mov rcx, qword [rsp + 0x190]
mov rdx, rsi
jmp 0x14004346f
lea r8, [rsp + 0x488]
mov rax, qword [r8 - 0x20]
mov rcx, qword [r8 - 0x18]
add rcx, rax
inc rcx
movdqa xmm0, xmmword [rax]
pmovmskb edx, xmm0
not edx
mov r8, qword [r8 - 8]
lea rsi, [rsp + 0x500]
mov qword [rsi], rax
add rax, 0x10
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rcx
mov word [rsi + 0x18], dx
mov qword [rsi + 0x20], r8
mov rcx, rsi
call fcn.1400406fc
test rax, rax
je 0x1400424f0
mov byte [rdx + 0x6e], 0
jmp 0x1400424dd
call fcn.14000808e
lea rcx, [rsp + 0x520]
movdqa xmmword [rcx - 0x20], xmm6
movdqa xmmword [rcx - 0x10], xmm7
mov qword [rcx], rax
mov qword [rcx + 8], rdx
lea rax, [rsp + 0xd0]
and qword [rax], 0
mov qword [rax + 8], 8
and qword [rax + 0x10], 0
mov rax, qword [rsp + 0x70]
lea rcx, [rax + 8]
mov qword [rsp + 0x1c8], rax
mov ebx, dword [rax]
xor r12d, r12d
pcmpeqd xmm6, xmm6
mov qword [rsp + 0xb8], rcx
mov qword [rsp + 0x68], rbx
cmp r12, rbx
je 0x140042863
mov rdx, r12
inc r12
imul rax, rdx, 0x548
lea rsi, [rcx + rax]
cmp qword [rcx + rax + 0x4a8], 0
jne 0x14004257d
cmp qword [rsi + 0x4b0], 0
je 0x14004254e
cmp dword [rsi + 0x48c], 2
je 0x14004254e
cmp dword [rsi + 0x420], 0
je 0x14004254e
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x40], r12
mov ecx, 0x14
mov edx, 2
call fcn.14003f024
mov ebx, dword [rsi + 0x10]
movzx ecx, byte [rsi + 0x14]
movzx edx, byte [rsi + 0x15]
movzx r8d, byte [rsi + 0x16]
movzx r9d, byte [rsi + 0x17]
movzx r10d, byte [rsi + 0x18]
movzx r11d, byte [rsi + 0x19]
movzx edi, byte [rsi + 0x1a]
movzx esi, byte [rsi + 0x1b]
mov dword [rax], ebx
mov word [rax + 4], cx
mov word [rax + 6], dx
mov word [rax + 8], r8w
mov word [rax + 0xa], r9w
mov word [rax + 0xc], r10w
mov word [rax + 0xe], r11w
mov word [rax + 0x10], di
mov word [rax + 0x12], si
mov r8d, 0xa
lea rcx, [rsp + 0x210]
mov qword [rsp + 0x58], rax
mov rdx, rax
call fcn.14003b7ac
mov rcx, qword [rsp + 0x520]
mov rdx, qword [rsp + 0x528]
mov rsi, qword [rsp + 0x218]
mov rdi, qword [rsp + 0x220]
mov r8, rsi
mov r9, rdi
call fcn.14003fe8a
mov rbp, qword [rsp + 0x500]
mov rbx, qword [rsp + 0x508]
mov r12, rbx
and r12, rax
mov qword [rsp + 0xc8], rax
shr rax, 0x39
mov qword [rsp + 0xa8], rax
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
xor r15d, r15d
movdqu xmm8, xmmword [rbp + r12]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb r13d, xmm0
test r13w, r13w
je 0x1400426cc
bsf eax, r13d
add rax, r12
and rax, rbx
shl rax, 5
mov r14, rbp
sub r14, rax
mov rcx, qword [r14 - 0x18]
mov rdx, qword [r14 - 0x10]
mov r8, rsi
mov r9, rdi
call fcn.14003ffbb
test al, al
jne 0x1400426ee
lea eax, [r13 - 1]
and eax, r13d
mov r13d, eax
jmp 0x14004268f
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x1400427a7
add r12, r15
add r12, 0x10
add r15, 0x10
and r12, rbx
jmp 0x14004267a
mov rcx, qword [rsp + 0x210]
movabs rdi, 0x8000000000000000
cmp rcx, rdi
je 0x14004270d
mov rdx, rsi
call fcn.14003af5a
mov rbx, qword [rsp + 0x68]
mov r12, qword [rsp + 0x40]
mov r13, qword [rsp + 0x58]
mov eax, dword [r14 - 8]
inc eax
mov dword [r14 - 8], eax
cmp eax, 1
jle 0x140042745
mov ecx, 0xa
mov rdx, r13
call fcn.14003af5a
mov rcx, qword [rsp + 0xb8]
jmp 0x14004254e
mov rsi, qword [rsp + 0xe0]
cmp rsi, qword [rsp + 0xd0]
jne 0x140042764
lea rcx, [rsp + 0xd0]
call fcn.1400401d7
mov rax, qword [rsp + 0xd8]
mov rcx, rsi
shl rcx, 5
mov rdx, qword [rsp + 0x60]
mov dword [rax + rcx], edx
mov edx, 0xa
mov qword [rax + rcx + 8], rdx
mov qword [rax + rcx + 0x10], r13
mov qword [rax + rcx + 0x18], rdx
inc rsi
mov qword [rsp + 0xe0], rsi
mov rcx, qword [rsp + 0xb8]
jmp 0x14004254e
mov r12, qword [rsp + 0x510]
test r12, r12
je 0x140042831
mov r13, qword [rsp + 0x210]
mov rcx, rbp
mov rdx, rbx
mov r8, qword [rsp + 0xc8]
call fcn.140040730
movzx ecx, byte [rbp + rax]
lea rdx, [rax - 0x10]
and rdx, rbx
mov r8, qword [rsp + 0xa8]
mov byte [rbp + rax], r8b
mov byte [rbp + rdx + 0x10], r8b
shl rax, 5
mov r14, rbp
sub r14, rax
and ecx, 1
sub r12, rcx
mov qword [rsp + 0x510], r12
neg rax
mov qword [rbp + rax - 0x20], r13
mov qword [r14 - 0x18], rsi
mov qword [r14 - 0x10], rdi
and dword [r14 - 8], 0
inc qword [rsp + 0x518]
movabs rdi, 0x8000000000000000
jmp 0x14004270d
lea rcx, [rsp + 0x500]
lea rdx, [rsp + 0x520]
call fcn.140040d10
mov rbp, qword [rsp + 0x500]
mov rbx, qword [rsp + 0x508]
mov r12, qword [rsp + 0x510]
jmp 0x1400427b4
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x308], rax
mov rax, qword [rsp + 0xd8]
mov rbx, qword [rsp + 0xe0]
shl rbx, 5
add rbx, rax
add qword [rsp + 0x1c8], 0x24
pcmpeqd xmm6, xmm6
mov qword [rsp + 0x300], rax
mov r13, rax
mov qword [rsp + 0x68], rbx
mov rsi, r13
cmp r13, rbx
je 0x140042ddc
lea r13, [rsi + 0x20]
mov r15, qword [rsi + 8]
cmp r15, rdi
je 0x140042dd9
mov r12, qword [rsi + 0x10]
mov edx, dword [rsi]
cmp qword [rsp + 0x518], 0
je 0x1400429e0
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x58], r13
mov rsi, qword [rsi + 0x18]
mov rcx, qword [rsp + 0x520]
mov rdx, qword [rsp + 0x528]
mov r8, r12
mov r9, rsi
call fcn.14003fe8a
mov r14, qword [rsp + 0x500]
mov r15, qword [rsp + 0x508]
mov rbp, r15
and rbp, rax
shr rax, 0x39
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
xor r13d, r13d
movdqu xmm8, xmmword [r14 + rbp]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb edi, xmm0
test di, di
je 0x140042984
bsf ebx, edi
add rbx, rbp
and rbx, r15
mov rax, rbx
shl rax, 5
mov rcx, r14
sub rcx, rax
mov r8, qword [rcx - 0x18]
mov r9, qword [rcx - 0x10]
mov rcx, r12
mov rdx, rsi
call fcn.14003ffbb
test al, al
jne 0x1400429a2
lea eax, [rdi - 1]
and eax, edi
mov edi, eax
jmp 0x140042949
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x1400429a2
add rbp, r13
add rbp, 0x10
add r13, 0x10
and rbp, r15
jmp 0x140042936
shl rbx, 5
sub r14, rbx
test di, di
mov eax, 0
cmove r14, rax
add r14, 0xffffffffffffffe0
test di, di
cmove r14, rax
movabs rdi, 0x8000000000000000
mov rbx, qword [rsp + 0x68]
mov r13, qword [rsp + 0x58]
mov r15, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x40]
jmp 0x1400429e3
xor r14d, r14d
lea rax, [r14 + 0x18]
test r14, r14
lea rcx, [0x1400862b8]
cmove rax, rcx
cmp dword [rax], 1
jg 0x140042c2e
imul rax, rdx, 0x548
mov rcx, qword [rsp + 0xb8]
lea rsi, [rcx + rax]
lea rdx, [rsi + 0x1c]
add rax, qword [rsp + 0x1c8]
mov ecx, 0x202
xor r8d, r8d
test rcx, rcx
je 0x140042a3b
cmp word [rax + r8*2], 0
je 0x140042a43
inc r8
add rcx, 0xfffffffffffffffe
jmp 0x140042a25
mov r8d, 0x101
jmp 0x140042a50
cmp r8, 0x102
jae 0x140044390
lea rcx, [rsp + 0x210]
call fcn.140002f70
mov rax, qword [rsp + 0x210]
cmp rax, rdi
je 0x140042c2e
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0xa8], rsi
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x58], r13
mov r8, qword [rsp + 0x218]
mov r14, qword [rsp + 0x220]
mov rcx, qword [rsp + 0x488]
mov rdx, qword [rsp + 0x490]
mov qword [rsp + 0x40], r8
mov r9, r14
call fcn.14003ff20
mov rbp, qword [rsp + 0x468]
mov rbx, qword [rsp + 0x470]
mov r15, rbx
and r15, rax
mov qword [rsp + 0x310], rax
shr rax, 0x39
mov qword [rsp + 0x318], rax
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
xor edi, edi
movdqu xmm8, xmmword [rbp + r15]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb esi, xmm0
test si, si
je 0x140042b43
bsf eax, esi
add rax, r15
and rax, rbx
neg rax
imul r13, rax, 0x88
mov rcx, qword [rbp + r13 - 0x80]
mov rdx, qword [rbp + r13 - 0x78]
mov r8, qword [rsp + 0x40]
mov r9, r14
call fcn.14003ffb6
test al, al
jne 0x140042b65
lea eax, [rsi - 1]
and eax, esi
mov esi, eax
jmp 0x140042b07
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x140042c3e
add r15, rdi
add r15, 0x10
add rdi, 0x10
and r15, rbx
jmp 0x140042af3
add rbp, r13
mov rax, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x58]
mov qword [rbp - 0x60], rax
mov rdx, qword [rsp + 0xa8]
mov rax, qword [rdx + 0x500]
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x50], rcx
mov rax, qword [rdx + 0x4b8]
mov qword [rbp - 0x58], rax
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x40], rax
mov rax, qword [rdx + 0x4c0]
add rax, qword [rdx + 0x4c8]
mov rcx, 0xffffffffffffffff
cmovb rax, rcx
mov qword [rbp - 0x48], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x30], rax
mov rax, qword [rdx + 0x508]
add rax, qword [rdx + 0x510]
cmovb rax, rcx
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x28]
mov qword [rbp - 0x20], rax
mov rax, qword [rdx + 0x4d8]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 0x18]
mov qword [rbp - 0x10], rax
mov rax, qword [rdx + 0x520]
mov qword [rbp - 0x18], rax
mov byte [rbp - 2], 1
mov rcx, qword [rsp + 0xc8]
mov rdx, qword [rsp + 0x40]
call fcn.14000b63c
movabs rdi, 0x8000000000000000
mov rbx, qword [rsp + 0x68]
mov r13, qword [rsp + 0x58]
mov r15, qword [rsp + 0x60]
mov rcx, r15
mov rdx, r12
call fcn.14003af5a
jmp 0x1400428a7
mov rdi, qword [rsp + 0x478]
test rdi, rdi
je 0x140042da7
mov rcx, qword [rsp + 0xa8]
mov r13, qword [rcx + 0x4c0]
add r13, qword [rcx + 0x4c8]
mov rax, 0xffffffffffffffff
cmovb r13, rax
mov r15, qword [rcx + 0x508]
add r15, qword [rcx + 0x510]
cmovb r15, rax
mov rax, qword [rcx]
mov qword [rsp + 0x2e8], rax
mov rsi, qword [rcx + 0x500]
mov rax, qword [rcx + 0x4b8]
mov qword [rsp + 0x2f0], rax
mov rax, qword [rcx + 0x4d8]
mov qword [rsp + 0x2f8], rax
mov rax, qword [rcx + 0x520]
mov qword [rsp + 0xa8], rax
mov rcx, rbp
mov rdx, rbx
mov r8, qword [rsp + 0x310]
call fcn.140040730
lea rcx, [rax - 0x10]
and rcx, rbx
movzx edx, byte [rbp + rax]
mov r8, qword [rsp + 0x318]
mov byte [rbp + rax], r8b
mov byte [rbp + rcx + 0x10], r8b
and edx, 1
sub rdi, rdx
mov qword [rsp + 0x478], rdi
neg rax
imul rax, rax, 0x88
mov rcx, qword [rsp + 0xc8]
mov qword [rbp + rax - 0x88], rcx
mov rcx, qword [rsp + 0x40]
mov qword [rbp + rax - 0x80], rcx
mov qword [rbp + rax - 0x78], r14
mov rcx, qword [rsp + 0x2e8]
mov qword [rbp + rax - 0x70], rcx
mov qword [rbp + rax - 0x68], rsi
mov qword [rbp + rax - 0x60], rsi
mov rcx, qword [rsp + 0x2f0]
mov qword [rbp + rax - 0x58], rcx
mov qword [rbp + rax - 0x50], rcx
mov qword [rbp + rax - 0x48], r13
mov qword [rbp + rax - 0x40], r13
mov qword [rbp + rax - 0x38], r15
mov qword [rbp + rax - 0x30], r15
mov rcx, qword [rsp + 0x2f8]
mov qword [rbp + rax - 0x28], rcx
mov qword [rbp + rax - 0x20], rcx
mov rcx, qword [rsp + 0xa8]
mov qword [rbp + rax - 0x18], rcx
mov qword [rbp + rax - 0x10], rcx
and dword [rbp + rax - 8], 0
and word [rbp + rax - 4], 0
mov byte [rbp + rax - 2], 1
inc qword [rsp + 0x480]
jmp 0x140042c15
lea rcx, [rsp + 0x468]
lea rdx, [rsp + 0x488]
call fcn.1400407b6
mov rbp, qword [rsp + 0x468]
mov rbx, qword [rsp + 0x470]
mov rdi, qword [rsp + 0x478]
jmp 0x140042c4f
mov rsi, r13
sub rbx, rsi
shr rbx, 5
add rsi, 0x10
sub rbx, 1
jb 0x140042dff
mov rcx, qword [rsi - 8]
mov rdx, qword [rsi]
call fcn.14003af5a
add rsi, 0x20
jmp 0x140042de7
mov r8, qword [rsp + 0x308]
test r8, r8
je 0x140042e22
shl r8, 5
mov edx, 8
mov rcx, qword [rsp + 0x300]
call fcn.140001581
mov rcx, qword [rsp + 0x70]
call sub.iphlpapi.dll_FreeMibTable
mov rdi, qword [rsp + 0x508]
test rdi, rdi
je 0x140043e66
mov rsi, qword [rsp + 0x500]
mov rbx, qword [rsp + 0x518]
test rbx, rbx
je 0x140043e32
movdqa xmm0, xmmword [rsi]
pmovmskb eax, xmm0
not eax
lea r14, [rsi + 0x10]
mov ecx, 1
test rcx, rcx
jne 0x140042e89
jmp 0x140043e2a
movdqa xmm0, xmmword [r14]
pmovmskb eax, xmm0
not eax
add rsi, 0xfffffffffffffe00
add r14, 0x10
test ax, ax
je 0x140042e73
dec rbx
lea ebp, [rax - 1]
and ebp, eax
bsf eax, eax
shl eax, 5
mov rdx, rsi
sub rdx, rax
mov rcx, qword [rdx - 0x20]
mov rdx, qword [rdx - 0x18]
call fcn.14003af5a
mov eax, ebp
mov rcx, rbx
jmp 0x140042e69
xor eax, eax
mov qword [rsp + 0xb0], rax
call fcn.1400378f0
mov r8d, edx
lea rsi, [rsp + 0x500]
mov rcx, rsi
mov edx, eax
call fcn.140037920
cmp qword [rsi], 0
jne 0x140042eea
mov rax, qword [rsp + 0x508]
jmp 0x140042eec
xor eax, eax
lea rcx, [rsp + 0x328]
mov qword [rcx], rax
mov rbx, qword [rsp + 0x150]
mov qword [rsp + 0x510], rbx
movups xmm0, xmmword [rsp + 0x140]
movaps xmmword [rsp + 0x500], xmm0
and qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 8
and qword [rsp + 0x80], 0
lea rax, [rsp + 0x180]
mov qword [rsp + 0x518], rax
lea rax, [rsp + 0x54]
mov qword [rsp + 0x520], rax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x528], rax
mov qword [rsp + 0x530], rcx
mov rdi, qword [rsp + 0x500]
cmp rdi, rbx
jb 0x1400443b6
lea rsi, [rsp + 0x518]
mov r14, qword [rsi - 0x10]
mov rcx, rbx
call fcn.14003fe25
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], 1
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov rdx, rbx
xor r8d, r8d
mov r9, rax
call fcn.14003ccab
test rdi, rdi
je 0x140042fd3
shl rdi, 3
mov edx, 8
mov rcx, r14
mov r8, rdi
call fcn.140001581
mov rax, qword [rsp + 0xe0]
xor r8d, r8d
sub rax, 1
jb 0x140042ff6
mov rsi, qword [rsi]
test rsi, rsi
je 0x140042ff6
add r8, qword [rsi + 0x10]
add rsi, 0x18
jmp 0x140042fde
test r8, r8
jne 0x140044243
movups xmm0, xmmword [rsp + 0xd0]
lea r12, [rsp + 0x218]
movaps xmmword [r12 - 8], xmm0
mov rbx, qword [rsp + 0xe0]
mov qword [r12 + 8], rbx
lea r13, [rsp + 0x508]
mov rcx, qword [r12 - 8]
lea rsi, [rsp + 0x500]
test rcx, rcx
je 0x140043115
mov rbp, qword [rcx + 0x18]
lea rax, [rbp + 0x20]
test rbp, rbp
cmove rax, r12
and qword [rax], 0
mov rdi, qword [rcx]
movups xmm0, xmmword [rcx + 8]
movaps xmmword [rsp + 0x1d0], xmm0
mov edx, 8
call fcn.1400031a0
movabs rax, 0x8000000000000000
cmp rdi, rax
je 0x140043119
mov qword [rsp + 0x500], rdi
movaps xmm0, xmmword [rsp + 0x1d0]
movups xmmword [r13], xmm0
mov r14, qword [rsp + 0x508]
mov rdi, qword [rsp + 0x510]
mov rax, qword [rsp + 0x70]
mov r15, qword [rsp + 0x80]
sub rax, r15
cmp rax, rdi
jb 0x1400430fb
imul rcx, r15, 0x150
add rcx, qword [rsp + 0x78]
imul r8, rdi, 0x150
mov rdx, r14
call sub.msvcrt.dll_memcpy
add r15, rdi
mov qword [rsp + 0x80], r15
and qword [rsp + 0x510], 0
mov rcx, rsi
call fcn.14003afba
dec rbx
mov rcx, rbp
jmp 0x140043037
lea rcx, [rsp + 0x70]
mov rdx, r15
mov r8, rdi
call fcn.14003ffe3
mov r15, qword [rsp + 0x80]
jmp 0x1400430b9
xor ebp, ebp
jmp 0x14004311c
dec rbx
lea rcx, [rsp + 0x210]
mov qword [rcx], rbp
mov qword [rcx + 0x10], rbx
call fcn.14003cc2a
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x58], rax
imul rcx, qword [rsp + 0x80], 0x150
mov r13, qword [rsp + 0x78]
lea rax, [rcx + r13]
mov qword [rsp + 0xb8], rax
lea r15, [rsp + 0xd0]
lea rbx, [rsp + 0x500]
mov qword [rsp + 0x60], r13
test rcx, rcx
je 0x140043381
mov r12, qword [r13]
cmp r12, 2
je 0x14004337a
mov qword [rsp + 0x40], rcx
lea rsi, [r13 + 0xe0]
mov rbp, qword [r13 + 0xd8]
lea rdx, [r13 + 8]
mov r8d, 0xd0
lea rcx, [rsp + 0x210]
call sub.msvcrt.dll_memcpy
mov ecx, 0xe
mov rdi, r15
rep movsq qword [rdi], qword [rsi]
mov qword [rsp + 0x1d0], rbp
mov rcx, qword [rsp + 0x458]
mov rdx, qword [rsp + 0x460]
mov r8, rbp
call fcn.14003fa5c
mov rsi, rax
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x70], rax
cmp qword [rsp + 0x448], 0
je 0x140043360
lea rax, [rsp + 0x70]
mov qword [rsp + 0x500], rax
lea rax, [rsp + 0x438]
mov qword [rsp + 0x508], rax
mov rcx, qword [rsp + 0x438]
mov rdx, qword [rsp + 0x440]
lea rax, [0x140041048]
mov qword [rsp + 0x20], rax
mov r8, rsi
mov r9, rbx
call fcn.140040f21
mov rdi, qword [rsp + 0x438]
test rax, rax
je 0x1400432d2
movzx eax, byte [rdi + rdx]
and eax, 1
sub qword [rsp + 0x448], rax
mov rax, qword [rsp + 0x1d0]
shr rsi, 0x39
lea rcx, [rdx - 0x10]
and rcx, qword [rsp + 0x440]
mov byte [rdi + rdx], sil
mov byte [rdi + rcx + 0x10], sil
inc qword [rsp + 0x450]
neg rdx
imul r14, rdx, 0x158
lea rsi, [rdi + r14]
add rsi, 0xfffffffffffffeb8
mov qword [rsi - 0x10], rax
mov qword [rsi - 8], r12
mov r8d, 0xd0
mov rcx, rsi
lea rdx, [rsp + 0x210]
call sub.msvcrt.dll_memcpy
mov qword [rsi + 0xd0], rbp
add rdi, r14
add rdi, 0xffffffffffffff90
mov ecx, 0xe
mov rsi, r15
rep movsq qword [rdi], qword [rsi]
jmp 0x140043348
neg rdx
imul r14, rdx, 0x158
lea rsi, [rdi + r14]
add rsi, 0xfffffffffffffeb0
mov r8d, 0x150
mov rcx, rbx
mov rdx, rsi
call sub.msvcrt.dll_memcpy
mov qword [rsi], r12
lea rsi, [rdi + r14]
add rsi, 0xfffffffffffffeb8
mov r8d, 0xd0
mov rcx, rsi
lea rdx, [rsp + 0x210]
call sub.msvcrt.dll_memcpy
mov qword [rsi + 0xd0], rbp
add rdi, r14
add rdi, 0xffffffffffffff90
mov ecx, 0xe
mov rsi, r15
rep movsq qword [rdi], qword [rsi]
cmp qword [rsp + 0x500], 2
je 0x140043348
mov rcx, rbx
call fcn.14003b02b
add r13, 0x150
mov rcx, qword [rsp + 0x40]
add rcx, 0xfffffffffffffeb0
jmp 0x14004316c
lea rcx, [rsp + 0x438]
lea rdx, [rsp + 0x458]
call fcn.14004106e
jmp 0x1400431f7
add r13, 0x150
mov rax, qword [rsp + 0xb8]
sub rax, r13
mov ecx, 0x150
xor edx, edx
div rcx
mov rcx, r13
mov rdx, rax
call fcn.14003b001
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x60]
call fcn.14003afe4
mov rax, qword [rsp + 0x438]
mov rcx, qword [rsp + 0x440]
add rcx, rax
inc rcx
movdqa xmm0, xmmword [rax]
pmovmskb edx, xmm0
not edx
mov r14, qword [rsp + 0x450]
lea rsi, [rsp + 0x500]
mov qword [rsi], rax
add rax, 0x10
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rcx
mov word [rsi + 0x18], dx
mov qword [rsi + 0x20], r14
mov ebx, 0x158
test r14, r14
je 0x14004345f
mov rcx, rsi
call fcn.1400414c7
mov r14, qword [rsp + 0x520]
dec r14
mov qword [rsp + 0x520], r14
test rax, rax
je 0x14004345f
mov rdi, rax
cmp byte [rax - 4], 0
mov byte [rax - 4], 0
jne 0x1400433fc
mov rax, qword [rsp + 0x438]
sub rax, rdi
cqo
idiv rbx
lea rcx, [rsp + 0x438]
mov rdx, rax
call fcn.140041518
add rdi, 0xfffffffffffffeb0
mov rcx, rdi
call fcn.14003b02b
jmp 0x1400433fc
mov rcx, qword [rsp + 0x190]
mov rdx, qword [rsp + 0x198]
call fcn.14000b63c
mov rsi, qword [rsp + 0x48]
cmp byte [rsi + 2], 0
je 0x140043658
lea r14, [rsp + 0x408]
call sub.kernel32.dll_GetLogicalDrives
mov dword [rsp + 0x190], eax
test eax, eax
je 0x1400436dd
and qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 8
and qword [rsp + 0x80], 0
lea rax, [rsp + 0x190]
mov qword [rsp + 0x500], rax
movabs rax, 0x2000000000
mov qword [rsp + 0x508], rax
mov ecx, 0x20
call fcn.14003fe25
lea rcx, [rsp + 0x500]
mov qword [rsp + 0x38], rcx
and dword [rsp + 0x28], 0
mov dword [rsp + 0x30], 0x20
mov qword [rsp + 0x20], 1
xor edi, edi
lea rbx, [rsp + 0xd0]
mov edx, 0x20
mov rcx, rbx
xor r8d, r8d
mov r9, rax
call fcn.14003bc2d
mov rax, qword [rbx + 0x10]
sub rax, 1
jb 0x14004353f
mov rbx, qword [rbx]
test rbx, rbx
je 0x14004353f
add rdi, qword [rbx + 0x10]
add rbx, 0x18
jmp 0x140043527
test rdi, rdi
jne 0x14004422f
movups xmm0, xmmword [rsp + 0xd0]
lea rbp, [rsp + 0x218]
movaps xmmword [rbp - 8], xmm0
mov r13, qword [rsp + 0xe0]
mov qword [rbp + 8], r13
lea rsi, [rsp + 0x508]
mov rcx, qword [rbp - 8]
lea rbx, [rsp + 0x500]
test rcx, rcx
je 0x1400436f2
mov rdi, qword [rcx + 0x18]
lea rax, [rdi + 0x20]
test rdi, rdi
cmove rax, rbp
and qword [rax], 0
mov r14, qword [rcx]
movups xmm0, xmmword [rcx + 8]
movaps xmmword [rsp + 0x140], xmm0
mov edx, 8
call fcn.1400031a0
movabs rax, 0x8000000000000000
cmp r14, rax
je 0x1400436f6
mov qword [rsp + 0x500], r14
movaps xmm0, xmmword [rsp + 0x140]
movups xmmword [rsi], xmm0
mov r15, qword [rsp + 0x508]
mov r14, qword [rsp + 0x510]
mov rax, qword [rsp + 0x70]
mov r12, qword [rsp + 0x80]
sub rax, r12
cmp rax, r14
jb 0x14004363e
imul rcx, r12, 0x90
add rcx, qword [rsp + 0x78]
imul r8, r14, 0x90
mov rdx, r15
call sub.msvcrt.dll_memcpy
add r12, r14
mov qword [rsp + 0x80], r12
and qword [rsp + 0x510], 0
mov rcx, rbx
call fcn.14003aeba
dec r13
mov rcx, rdi
jmp 0x14004357c
lea rcx, [rsp + 0x70]
mov rdx, r12
mov r8, r14
call fcn.140040009
mov r12, qword [rsp + 0x80]
jmp 0x1400435fc
cmp byte [rsi + 3], 0
movabs rbp, 0x8000000000000000
je 0x140043751
imul rdi, qword [rsp + 0x418], 0x90
mov rbx, qword [rsp + 0x410]
xor r14d, r14d
lea rsi, [rsp + 0x500]
mov r15, rbx
cmp rdi, r14
je 0x140043751
cmp qword [r15 + 0x78], 0
je 0x1400436cd
and qword [rsp + 0x500], 0
mov rcx, qword [rbx + r14 + 0x50]
xor edx, edx
xor r8d, r8d
mov r9, rsi
call sub.kernel32.dll_GetDiskFreeSpaceExW
test eax, eax
je 0x1400436cd
mov rax, qword [rsp + 0x500]
mov qword [rbx + r14 + 0x80], rax
add r15, 0x90
add r14, 0x90
jmp 0x14004368e
mov esi, 8
xor edi, edi
xor ebx, ebx
movabs rbp, 0x8000000000000000
jmp 0x140043731
xor edi, edi
jmp 0x1400436f9
dec r13
lea rcx, [rsp + 0x210]
mov qword [rcx], rdi
mov qword [rcx + 0x10], r13
call fcn.14003bbac
mov rdi, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x80]
movabs rbp, 0x8000000000000000
lea r14, [rsp + 0x408]
mov rcx, r14
call fcn.14003aeba
mov qword [rsp + 0x408], rdi
mov qword [rsp + 0x410], rsi
mov qword [rsp + 0x418], rbx
mov rax, qword [rsp + 0x48]
cmp byte [rax + 7], 0
je 0x140043dd9
lea rdi, [rsp + 0x190]
and qword [rdi], 0
mov qword [rdi + 8], 8
and qword [rdi + 0x10], 0
lea rax, [rsp + 0x188]
and dword [rax], 0
lea rbx, [rsp + 0x328]
lea rax, [rbp + 1]
mov qword [rsp + 0x48], rax
and qword [rsp + 0xb0], 0
and dword [rsp + 0xc4], 0
and dword [rsp + 0x18c], 0
lea rax, [rsp + 0x188]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x18c]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0xc4]
mov qword [rsp + 0x28], rax
or dword [rsp + 0x20], 0xffffffff
xor ecx, ecx
xor edx, edx
mov r8d, 2
lea r9, [rsp + 0xb0]
call sub.netapi32.dll_NetUserEnum
test eax, eax
je 0x140043800
cmp eax, 0xea
jne 0x140043b2f
mov dword [rsp + 0x40], eax
mov r15, qword [rsp + 0xb0]
mov eax, dword [rsp + 0xc4]
lea r14, [r15 + rax*8]
cmp r15, r14
je 0x140043b13
mov rsi, r15
add r15, 8
mov r12, qword [rsi]
test r12, r12
je 0x140043817
and qword [rsp + 0x328], 0
xor ecx, ecx
mov rdx, r12
mov r8d, 0x17
mov r9, rbx
call sub.netapi32.dll_NetUserGetInfo
test eax, eax
jne 0x140043af8
mov rax, qword [rsp + 0x328]
mov rdx, qword [rax + 0x20]
lea rcx, [rsp + 0x140]
call fcn.14003f081
cmp qword [rsp + 0x140], rbp
je 0x140043af8
mov rdx, qword [rsp + 0x148]
lea rcx, [rsp + 0x500]
call fcn.1400443fb
cmp qword [rsp + 0x500], rbp
jne 0x1400438a8
mov rdx, qword [rsi]
lea rcx, [rsp + 0x70]
call fcn.14003ac39
jmp 0x1400438c5
mov rax, qword [rsp + 0x510]
mov qword [rsp + 0x80], rax
movups xmm0, xmmword [rsp + 0x500]
movaps xmmword [rsp + 0x70], xmm0
and qword [rsp + 0x1d0], 0
and dword [rsp + 0x54], 0
and dword [rsp + 0x180], 0
lea rax, [rsp + 0x180]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x54]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x20], rax
or dword [rsp + 0x28], 0xffffffff
lea rcx, [0x140086828]
mov rdx, r12
xor r8d, r8d
mov r9d, 1
call sub.netapi32.dll_NetUserGetLocalGroups
test eax, eax
je 0x14004393d
and qword [rsp + 0xd0], 0
mov qword [rsp + 0xd8], 8
xor r13d, r13d
jmp 0x140043a66
mov r13d, dword [rsp + 0x54]
test r13, r13
je 0x140043966
imul rsi, r13, 0x18
mov ecx, 8
mov rdx, rsi
call fcn.14003af76
test rax, rax
je 0x140044328
mov r12, rax
jmp 0x14004396f
mov r12d, 8
xor r13d, r13d
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0xd8], r12
and qword [rsp + 0xe0], 0
mov rdi, qword [rsp + 0x1d0]
test rdi, rdi
je 0x1400439cd
mov esi, dword [rsp + 0x54]
cmp r13, rsi
jae 0x140043a06
lea rcx, [rsp + 0xd0]
xor edx, edx
mov r8, rsi
call fcn.14003f8df
cmp rax, qword [rsp + 0x48]
jne 0x14004434d
mov r12, qword [rsp + 0xd8]
mov r13, qword [rsp + 0xe0]
jmp 0x140043a09
mov rax, qword [rsp + 0xe0]
lea rbx, [rsp + 0x518]
mov qword [rbx + 0x28], rax
mov rax, qword [rsp + 0xd0]
mov qword [rbx + 0x18], rax
mov rax, qword [rsp + 0xd8]
mov qword [rbx + 0x20], rax
lea rdi, [rsp + 0x190]
jmp 0x140043aa4
xor r13d, r13d
test rsi, rsi
je 0x140043a54
imul rax, r13, 0x18
add r12, rax
xor ebp, ebp
lea rbx, [rsp + 0x210]
mov rdx, qword [rdi + rbp*8]
mov rcx, rbx
call fcn.14003ac39
mov rax, qword [rsp + 0x220]
mov qword [r12 + 0x10], rax
movups xmm0, xmmword [rsp + 0x210]
movups xmmword [r12], xmm0
inc rbp
add r12, 0x18
cmp rsi, rbp
jne 0x140043a1f
add r13, rbp
movabs rbp, 0x8000000000000000
lea rdi, [rsp + 0x190]
mov qword [rsp + 0xe0], r13
mov rcx, qword [rsp + 0x1d0]
lea rbx, [rsp + 0x518]
mov qword [rbx + 0x28], r13
mov rax, qword [rsp + 0xd0]
mov qword [rbx + 0x18], rax
mov rax, qword [rsp + 0xd8]
mov qword [rbx + 0x20], rax
test rcx, rcx
je 0x140043aa4
call sub.netapi32.dll_NetApiBufferFree
movups xmm0, xmmword [rsp + 0x140]
movaps xmmword [rsp + 0x500], xmm0
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x510], rax
and dword [rsp + 0x548], 0
mov rax, qword [rsp + 0x80]
mov qword [rbx + 0x10], rax
movaps xmm0, xmmword [rsp + 0x70]
movups xmmword [rbx], xmm0
mov rcx, rdi
lea rdx, [rsp + 0x500]
call fcn.1400444f8
lea rbx, [rsp + 0x328]
mov rcx, qword [rsp + 0x328]
test rcx, rcx
je 0x140043817
call sub.netapi32.dll_NetApiBufferFree
jmp 0x140043817
mov rcx, qword [rsp + 0xb0]
cmp dword [rsp + 0x40], 0xea
jne 0x140043b37
call fcn.1400443e7
jmp 0x140043795
mov rcx, qword [rsp + 0xb0]
call fcn.1400443e7
lea rcx, [rsp + 0x328]
and dword [rcx], 0
lea rsi, [rsp + 0x1d0]
and qword [rsi], 0
mov rdx, rsi
call sub.secur32.dll_LsaEnumerateLogonSessions
mov rcx, qword [rsi]
test eax, eax
jne 0x140043d66
mov eax, dword [rsp + 0x328]
lea r14, [rcx + rax*8]
lea rsi, [rsp + 0xd0]
lea rbx, [rsp + 0x500]
cmp rcx, r14
je 0x140043d5e
lea rdi, [rcx + 8]
and qword [rsp + 0xd0], 0
mov rdx, rsi
call sub.secur32.dll_LsaGetLogonSessionData
mov rcx, qword [rsp + 0xd0]
test eax, eax
je 0x140043bb5
call fcn.1400443f1
mov rcx, rdi
jmp 0x140043b81
test rcx, rcx
je 0x140043c5e
cmp dword [rcx + 0x40], 3
je 0x140043bab
movzx r12d, word [rcx + 0x10]
mov r13, qword [rcx + 0x18]
mov rdx, qword [rcx + 0x48]
mov rcx, rbx
call fcn.14003f081
mov r15, qword [rsp + 0x500]
cmp r15, rbp
je 0x140043d51
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r12
mov r12, qword [rsp + 0x508]
mov r13, qword [rsp + 0x510]
mov rdx, qword [rsp + 0x198]
imul rbx, qword [rsp + 0x1a0], 0x50
test rbx, rbx
je 0x140043c65
lea rbp, [rdx + 0x50]
mov rcx, qword [rdx + 8]
mov rdx, qword [rdx + 0x10]
mov r8, r12
mov r9, r13
call fcn.14003ffb6
add rbx, 0xffffffffffffffb0
mov rdx, rbp
movabs rbp, 0x8000000000000000
test al, al
je 0x140043c15
mov rcx, r15
mov rdx, r12
call fcn.14000b63c
lea rbx, [rsp + 0x500]
jmp 0x140043d51
xor ecx, ecx
jmp 0x140043bab
lea rcx, [rsp + 0x210]
mov rdx, r12
call fcn.1400443fb
mov rax, qword [rsp + 0x210]
cmp rax, rbp
jne 0x140043cd3
mov r8, qword [rsp + 0x40]
shr r8d, 1
lea rbx, [rsp + 0x500]
mov rcx, rbx
mov rdx, qword [rsp + 0x48]
call fcn.140002f70
mov rax, qword [rsp + 0x500]
cmp rax, rbp
mov r8d, 0
cmove rax, r8
mov rcx, qword [rsp + 0x508]
mov edx, 1
cmove rcx, rdx
mov rdx, qword [rsp + 0x510]
cmove rdx, r8
jmp 0x140043ceb
mov rcx, qword [rsp + 0x218]
mov rdx, qword [rsp + 0x220]
lea rbx, [rsp + 0x500]
mov qword [rsp + 0x500], r15
mov qword [rsp + 0x508], r12
mov qword [rsp + 0x510], r13
and dword [rsp + 0x548], 0
mov qword [rsp + 0x518], rax
mov qword [rsp + 0x520], rcx
mov qword [rsp + 0x528], rdx
and qword [rsp + 0x530], 0
mov qword [rsp + 0x538], 8
and qword [rsp + 0x540], 0
lea rcx, [rsp + 0x190]
mov rdx, rbx
call fcn.1400444f8
mov rcx, qword [rsp + 0xd0]
jmp 0x140043bab
mov rcx, qword [rsp + 0x1d0]
mov rax, qword [rsp + 0x1a0]
mov qword [rsp + 0x510], rax
movups xmm0, xmmword [rsp + 0x190]
movaps xmmword [rsp + 0x500], xmm0
test rcx, rcx
je 0x140043d90
call fcn.140046404
mov rcx, qword [rsp + 0x428]
mov rdx, qword [rsp + 0x430]
call fcn.1400403eb
mov rcx, qword [rsp + 0x420]
mov rdx, qword [rsp + 0x428]
call fcn.14004056f
mov rax, qword [rsp + 0x510]
lea rcx, [rsp + 0x420]
mov qword [rcx + 0x10], rax
movaps xmm0, xmmword [rsp + 0x500]
movups xmmword [rcx], xmm0
lea rdx, [rsp + 0x360]
mov r8d, 0x1a0
mov rcx, qword [rsp + 0x320]
call sub.msvcrt.dll_memcpy
movaps xmm6, xmmword [rsp + 0xa70]
movaps xmm7, xmmword [rsp + 0xa80]
movaps xmm8, xmmword [rsp + 0xa90]
movaps xmm9, xmmword [rsp + 0xaa0]
add rsp, 0xab8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rsi, qword [rsp + 0x500]
inc rdi
lea rbx, [rsp + 0x210]
mov edx, 0x20
mov r8d, 0x10
mov rcx, rbx
mov r9, rdi
call fcn.14004066b
mov rdx, qword [rbx]
mov r8, qword [rbx + 8]
sub rsi, qword [rbx + 0x10]
mov rcx, rsi
call fcn.140001581
mov rax, qword [rsp + 0x468]
mov rcx, qword [rsp + 0x470]
add rcx, rax
inc rcx
movdqa xmm0, xmmword [rax]
pmovmskb edx, xmm0
not edx
mov r14, qword [rsp + 0x480]
lea rsi, [rsp + 0x500]
mov qword [rsi], rax
add rax, 0x10
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rcx
mov word [rsi + 0x18], dx
mov qword [rsi + 0x20], r14
mov ebx, 0x88
test r14, r14
je 0x140043f12
mov rcx, rsi
call fcn.14003fdd4
mov r14, qword [rsp + 0x520]
dec r14
mov qword [rsp + 0x520], r14
test rax, rax
je 0x140043f12
mov rdi, rax
cmp byte [rax - 2], 0
jne 0x140043eb2
mov rax, qword [rsp + 0x468]
sub rax, rdi
cqo
idiv rbx
lea rcx, [rsp + 0x468]
mov rdx, rax
call fcn.140041518
mov rcx, qword [rdi - 0x88]
mov rdx, qword [rdi - 0x80]
call fcn.14000b63c
jmp 0x140043eb2
lea r12, [rsp + 0x190]
mov dword [r12], 0x3c00
and dword [rsp + 0x140], 0
mov ebp, 4
xor edi, edi
lea rsi, str.failed_to_allocate_memory_for_IP_ADAPTER_ADDRESSESGetAdaptersAddresses___failed_with_code
lea rbx, [rsp + 0x500]
dec ebp
je 0x140043ffe
mov edx, dword [rsp + 0x190]
mov rcx, rdi
call sub.msvcrt.dll_realloc
mov r14, rax
mov r15, rax
test rax, rax
jne 0x140043fa6
mov r8d, 0x32
mov rcx, rbx
mov rdx, rsi
call fcn.14003b743
mov rcx, rdi
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x500]
mov r15, qword [rsp + 0x508]
mov r14, qword [rsp + 0x510]
movabs rax, 0x8000000000000000
cmp rcx, rax
jne 0x140044208
mov qword [rsp + 0x20], r12
xor ecx, ecx
mov edx, 0xe
xor r8d, r8d
mov r9, r15
call sub.iphlpapi.dll_GetAdaptersAddresses
mov dword [rsp + 0x140], eax
mov rdi, r15
cmp eax, 0x6f
je 0x140043f40
test eax, eax
jne 0x140043ffb
mov qword [rsp + 0x218], r15
mov qword [rsp + 0x220], r14
movabs r14, 0x8000000000000000
mov qword [rsp + 0x210], r14
mov rcx, r14
jmp 0x140044072
mov rdi, r15
movabs r14, 0x8000000000000000
lea rax, [rsp + 0x140]
mov qword [rsp + 0xd0], rax
lea rax, [0x140086818]
lea rdx, [rsp + 0x500]
mov qword [rdx], rax
mov eax, 1
mov qword [rdx + 8], rax
and qword [rdx + 0x20], 0
lea rcx, [0x140004370]
mov qword [rsp + 0xd8], rcx
lea rcx, [rsp + 0xd0]
mov qword [rdx + 0x10], rcx
mov qword [rdx + 0x18], rax
lea rsi, [rsp + 0x210]
mov rcx, rsi
call fcn.14003edcd
mov rcx, rdi
call sub.msvcrt.dll_free
mov rcx, qword [rsi]
mov rsi, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x218]
cmp rcx, r14
jne 0x1400441ec
mov rax, qword [rsp + 0x220]
lea rcx, [rsp + 0xd0]
mov qword [rcx], rdx
mov qword [rcx + 8], rax
pcmpeqd xmm6, xmm6
lea rcx, [rsp + 0x500]
lea rdx, [rsp + 0xd0]
call fcn.140044de7
mov rbx, qword [rsp + 0x500]
cmp rbx, r14
je 0x1400441f6
mov r14, qword [rsp + 0x508]
cmp qword [rsp + 0x480], 0
je 0x1400441cd
mov r15, qword [rsp + 0x510]
mov rcx, qword [rsp + 0x488]
mov rdx, qword [rsp + 0x490]
mov r8, r14
mov r9, r15
call fcn.14003ff20
mov r13, qword [rsp + 0x468]
mov rdi, qword [rsp + 0x470]
mov rbp, rdi
and rbp, rax
shr rax, 0x39
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
xor eax, eax
mov qword [rsp + 0x40], rax
movdqu xmm8, xmmword [r13 + rbp]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb r12d, xmm0
test r12w, r12w
je 0x14004418b
bsf eax, r12d
add rax, rbp
and rax, rdi
neg rax
imul rsi, rax, 0x88
mov r8, qword [r13 + rsi - 0x80]
mov r9, qword [r13 + rsi - 0x78]
mov rcx, r14
mov rdx, r15
call fcn.14003ffb6
test al, al
jne 0x1400441b3
lea eax, [r12 - 1]
and eax, r12d
mov r12d, eax
jmp 0x14004414b
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x1400441cd
mov rax, qword [rsp + 0x40]
add rbp, rax
add rbp, 0x10
add rax, 0x10
mov qword [rsp + 0x40], rax
and rbp, rdi
jmp 0x140044136
add r13, rsi
lea rcx, [rsp + 0x518]
movzx eax, word [rcx + 4]
mov word [r13 - 4], ax
mov eax, dword [rcx]
mov dword [r13 - 8], eax
mov rcx, rbx
mov rdx, r14
call fcn.14000b63c
movabs r14, 0x8000000000000000
mov rsi, qword [rsp + 0x48]
jmp 0x1400440a3
call fcn.14000b63c
jmp 0x140041f21
mov rcx, qword [rsp + 0xd0]
call sub.msvcrt.dll_free
jmp 0x140041f21
mov qword [rsp + 0x210], rcx
mov qword [rsp + 0x218], r15
mov qword [rsp + 0x220], r14
movabs r14, 0x8000000000000000
jmp 0x140044072
lea rcx, [rsp + 0x70]
xor edx, edx
mov r8, rdi
call fcn.140040009
jmp 0x140043548
lea rcx, [rsp + 0x70]
xor edx, edx
call fcn.14003ffe3
jmp 0x140042fff
movss xmm8, dword [rsp + 0xd0]
movss xmm9, dword [rsp + 0xd8]
lea rsi, [rsp + 0x538]
lea rdx, [0x14008601e]
mov ebx, 8
mov r8d, 8
mov rcx, rsi
call fcn.14003b743
movss dword [rsi + 0x20], xmm8
movss dword [rsi + 0x24], xmm8
mov dword [rsi + 0x18], edi
movss dword [rsi + 0x1c], xmm9
movups xmm0, xmmword [rsp + 0x328]
movups xmm1, xmmword [rsp + 0x338]
movups xmm2, xmmword [rsp + 0x348]
movaps xmmword [rsi - 0x38], xmm0
movaps xmmword [rsi - 0x28], xmm1
movaps xmmword [rsi - 0x18], xmm2
mov rax, qword [rsp + 0x358]
mov qword [rsi - 8], rax
mov r14, qword [rsi - 0x38]
lea rsi, [rsp + 0x508]
lea rdi, [rsp + 0x210]
mov ecx, 0xb
rep movsq qword [rdi], qword [rsi]
cmp r14, 3
je 0x140041ea9
mov ecx, 0x60
mov edx, 8
call fcn.14003f024
mov rbx, rax
mov qword [rax], r14
lea rdi, [rax + 8]
lea rsi, [rsp + 0x210]
mov ecx, 0xb
rep movsq qword [rdi], qword [rsi]
mov esi, 1
jmp 0x140041eab
mov ecx, 8
mov rdx, rsi
call fcn.140002740
lea rcx, str.key_used_disappeared
lea r8, [0x140086760]
mov edx, 0x14
call fcn.140004fe0
mov rcx, rax
call fcn.140002740
lea rax, str._b_
mov qword [rsp + 0x20], rax
lea rcx, str.cannot_access_a_Thread_Local_Storage_value_during_or_after_destruction_rustc_eeb90cda1969383f56a2637cbd3037bdf598841clibrary_std_src_threadlocal.rs
lea r9, [0x140085d20]
lea r8, [rsp + 0x500]
mov edx, 0x46
call fcn.140004e20
mov ecx, 8
mov edx, 0x120
call fcn.140002740
lea rax, str._usr_local_cargo_registry_src_index.crates.io_6f17d22bba15001f_sysinfo_0.29.11_src_windows_network.rs
mov edx, 0x101
mov rcx, r8
mov r8, rax
call fcn.140003c50
mov ecx, 8
mov edx, 0xfa0
call fcn.140002740
lea rcx, str.assertion_failed:_vec.capacity_____start___len_usr_local_cargo_registry_src_index.crates.io_6f17d22bba15001f_rayon_1.10.0_src_vec.rs
lea r8, [0x140085ea0]
mov edx, 0x2f
call fcn.140003f30
lea rcx, str.global_key_idle_disappeared_usr_local_cargo_registry_src_index.crates.io_6f17d22bba15001f_sysinfo_0.29.11_src_windows_system.rs
lea r8, [0x140086730]
mov edx, 0x1b
call fcn.140004fe0
int3