Function at 0x140044c80
Capabilities:
Get session user name

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x490
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rdi, rcx
xor esi, esi
lea rcx, str.SendLaunch
call qword [sym.imp.VMProtectSDK64.dll_VMProtectBeginUltra]
movabs rax, 0x72af79ec626e7555
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
movabs rax, 0xcdaee03199f07682
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movabs rax, 0x3888d0f4f0b434ec
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
movabs rax, 0x3320293b097ddfd7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
movabs rax, 0xb0a59466dad71b5e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
movabs rax, 0xbe8811b4f31fa938
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
movabs rax, 0x4074ccb6398a80f4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
movabs rax, 0x459df22fe227b4e7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
movabs rax, 0xbeea7eff69f12fca
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
movabs rax, 0xfdc9ce06e64432c4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
movabs rax, 0xb3732e8cf8d0bbc1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x270], rax
movabs rax, 0x7e94ffc2ade1f9a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x278], rax
movabs rax, 0xee3c98d8503d19a1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x280], rax
movabs rax, 0x55f117c3e89aba4b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x288], rax
movabs rax, 0x6f6ebf94dc7190b9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x290], rax
movabs rax, 0x575c92003551cfa
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x298], rax
movabs r15, 0x5d80439f121a013d
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x2a0], rax
movabs r14, 0xe3ca925efa831fe6
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x2a8], rax
movabs rax, 0x17e1a095dfd95b8f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2b0], rax
movabs rax, 0x404b4654611fbaa0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2b8], rax
movabs rax, 0x8694a153e8e52a71
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2c0], rax
movabs rax, 0x8dbc2882ca26980a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2c8], rax
movabs rax, 0x35079c990fbeb8c3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d0], rax
movabs rax, 0x12e9ca488b6c83d4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d8], rax
movabs rax, 0xcf80099713b07e85
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e0], rax
movabs rax, 0xb583fc36d00266ae
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e8], rax
movabs rax, 0xe7011ccd9ea49697
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2f0], rax
movabs rax, 0x35bb0dac1fb055e8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2f8], rax
movabs rax, 0xdf0cdfeb04765bf9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
movabs rax, 0x1ab84dfa9acfea12
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
movabs rax, 0x3959d7f1b03ddacb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x310], rax
movabs rax, 0x575c92003551c9c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x318], rax
vmovdqu ymm0, ymmword [rbp + 0x220]
vpxor ymm1, ymm0, ymmword [rbp + 0x2a0]
vmovdqa ymmword [rbp + 0x220], ymm1
vmovdqu ymm0, ymmword [rbp + 0x240]
vpxor ymm1, ymm0, ymmword [rbp + 0x2c0]
vmovdqa ymmword [rbp + 0x240], ymm1
vmovdqu ymm0, ymmword [rbp + 0x260]
vpxor ymm1, ymm0, ymmword [rbp + 0x2e0]
vmovdqa ymmword [rbp + 0x260], ymm1
vmovdqu ymm0, ymmword [rbp + 0x280]
vpxor ymm1, ymm0, ymmword [rbp + 0x300]
vmovdqa ymmword [rbp + 0x280], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x1e0], xmm0
mov qword [rbp + 0x1f0], rsi
mov qword [rbp + 0x1f8], rsi
lea rax, [rbp + 0x220]
mov rbx, 0xffffffffffffffff
mov r8, rbx
vzeroupper
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], sil
jne 0x140045070
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0x1e0]
call fcn.140035bd0
nop
mov dword [rbp], 0x101
lea rdx, [rbp]
lea rcx, [rbp + 0x340]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
test eax, eax
jne 0x1400450f1
lea rdx, str.Kullan
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140051700
lea rdx, [0x1400518e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], rsi
mov qword [rbp + 0xb8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xa0], 0
jmp 0x140045131
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], rsi
mov qword [rbp + 0xb8], rsi
lea rax, [rbp + 0x340]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140045113
lea rdx, [rbp + 0x340]
lea rcx, [rbp + 0xa0]
call fcn.140035bd0
nop
mov rdx, rdi
lea rcx, [rbp + 0x200]
call fcn.140050790
nop
lea rcx, [rbp + 0x100]
call fcn.1400444c0
nop
movabs rax, 0x38ed22f1607f7268
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
movabs rax, 0xe3ca925efa833fdc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x10], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c0], xmm0
mov qword [rbp + 0x1d0], rsi
mov qword [rbp + 0x1d8], rsi
lea rax, [rbp + 0x10]
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400451c0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x1c0]
call fcn.140035bd0
nop
movabs rax, 0x2ee531fb533a7174
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0xe3ca925efaa32595
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x20], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], rsi
mov qword [rbp + 0xf8], rsi
lea rax, [rbp + 0x20]
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140045250
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0xe0]
call fcn.140035bd0
nop
movabs rax, 0x39ee02bf776e6079
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
movabs rax, 0xe3eaa83b97ea4bc6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x10], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], rsi
mov qword [rbp + 0xd8], rsi
lea rax, [rbp + 0x10]
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400452e0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0xc0]
call fcn.140035bd0
nop
movabs rax, 0x5d80439f121a011d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x20], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rsi
mov qword [rbp + 0x98], rsi
lea rax, [rbp + 0x20]
nop
inc rbx
cmp byte [rax + rbx], 0
jne 0x140045360
mov r8, rbx
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x80]
call fcn.140035bd0
nop
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
mov r14, qword [rbp + 0x1d0]
sub rax, r14
mov r13, qword [rbp + 0xb0]
cmp rax, r13
jb 0x140045cce
lea rdx, [rbp + 0x1c0]
mov r15, qword [rbp + 0x1c0]
cmp qword [rbp + 0x1d8], 0xf
cmova rdx, r15
mov qword [rbp], rdx
lea rax, [rbp + 0xa0]
mov r12, qword [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0xf
cmova rax, r12
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x50], xmm1
lea rax, [r14 + r13]
mov edi, reloc.WS2_32.dll_ntohs
lea rsi, [rbp + 0x40]
movabs rcx, 0x8000000000000000
mov r8d, reloc.WS2_32.dll_shutdown
cmp rax, rdi
jbe 0x14004548e
mov rdi, rax
or rdi, 0xf
cmp rdi, rbx
jbe 0x140045447
mov rdi, rbx
lea rax, [rcx + 0x27]
mov rcx, rax
call fcn.140109794
test rax, rax
je 0x14004546a
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
lea rax, [r14 + r13]
mov rdx, qword [rbp]
jmp 0x14004548a
cmp rdi, r8
cmovb rdi, r8
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140045471
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140045cc2
jmp 0x140045424
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140045488
call fcn.140109794
mov rsi, rax
lea rax, [r14 + r13]
mov rdx, qword [rbp]
jmp 0x14004548a
xor esi, esi
mov qword [rbp + 0x40], rsi
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], rdi
mov r8, r14
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [r14 + rsi]
mov r8, r13
mov rdx, qword [rbp + 0x10]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [r14 + r13]
mov byte [rsi + rax], 0
lea rdx, [rbp + 0x80]
cmp qword [rbp + 0x98], 0xf
cmova rdx, qword [rbp + 0x80]
mov r8, qword [rbp + 0x90]
lea rcx, [rbp + 0x40]
call fcn.140050f90
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1b0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1a0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1b0], xmm1
xor edi, edi
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], dil
lea rdx, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 0xf
cmova rdx, qword [rbp + 0xe0]
mov r8, qword [rbp + 0xf0]
lea rcx, [rbp + 0x1a0]
call fcn.140050f90
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x190], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x180], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x190], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], dil
lea rdx, [rbp + 0x200]
cmp qword [rbp + 0x218], 0xf
cmova rdx, qword [rbp + 0x200]
mov r8, qword [rbp + 0x210]
lea rcx, [rbp + 0x180]
call fcn.140050f90
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x170], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x160], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x170], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], dil
lea rdx, [rbp + 0x80]
cmp qword [rbp + 0x98], 0xf
cmova rdx, qword [rbp + 0x80]
mov r8, qword [rbp + 0x90]
lea rcx, [rbp + 0x160]
call fcn.140050f90
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x150], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x140], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x150], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], dil
lea rdx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0xf
cmova rdx, qword [rbp + 0xc0]
mov r8, qword [rbp + 0xd0]
lea rcx, [rbp + 0x140]
call fcn.140050f90
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x130], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x130], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], dil
lea rdx, [rbp + 0x100]
cmp qword [rbp + 0x118], 0xf
cmova rdx, qword [rbp + 0x100]
mov r8, qword [rbp + 0x110]
lea rcx, [rbp + 0x120]
call fcn.140050f90
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], dil
mov rdx, qword [rbp + 0x138]
cmp rdx, 0xf
jbe 0x140045733
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004572e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004572e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140109a10
movdqa xmm0, xmmword [0x140142c80]
movdqu xmmword [rbp + 0x130], xmm0
mov byte [rbp + 0x120], 0
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x14004578e
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140045789
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140045789
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140109a10
movdqa xmm0, xmmword [0x140142c80]
movdqu xmmword [rbp + 0x150], xmm0
mov byte [rbp + 0x140], 0
mov rdx, qword [rbp + 0x178]
cmp rdx, 0xf
jbe 0x1400457e9
inc rdx
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400457e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400457e4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140109a10
movdqa xmm0, xmmword [0x140142c80]
movdqu xmmword [rbp + 0x170], xmm0
mov byte [rbp + 0x160], 0
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x140045844
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004583f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004583f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140109a10
movdqa xmm0, xmmword [0x140142c80]
movdqu xmmword [rbp + 0x190], xmm0
mov byte [rbp + 0x180], 0
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 0xf
jbe 0x14004589f
inc rdx
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004589a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004589a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140109a10
movdqa xmm0, xmmword [0x140142c80]
movdqu xmmword [rbp + 0x1b0], xmm0
mov byte [rbp + 0x1a0], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x1400458f4
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400458ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400458ef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140109a10
movdqa xmm0, xmmword [0x140142c80]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
lea rax, [rbp + 0x60]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], rdi
lea r14, [rbp + 0x1e0]
mov rsi, qword [rbp + 0x1e0]
mov r13, qword [rbp + 0x1f8]
cmp r13, 0xf
cmova r14, rsi
mov rdi, qword [rbp + 0x1f0]
cmp rdi, rbx
ja 0x140045cbc
cmp rdi, 0xf
ja 0x140045968
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [r14]
movups xmmword [rbp + 0x60], xmm0
jmp 0x1400459fd
mov rax, rdi
or rax, 0xf
cmp rax, rbx
jbe 0x1400459a0
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140109794
mov rcx, rax
test rax, rax
je 0x1400459cc
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400459e1
mov rbx, rax
cmp rax, 0x16
mov eax, reloc.WS2_32.dll_shutdown
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400459d3
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140045cc8
jmp 0x140045982
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400459df
call fcn.140109794
jmp 0x1400459e1
xor eax, eax
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], rbx
lea r8, [rdi + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x320]
call fcn.140050790
nop
lea rdx, [rbp + 0x60]
mov rcx, rax
call fcn.140044250
mov byte [0x1401cd5ca], 1
call qword [sym.imp.VMProtectSDK64.dll_VMProtectEnd]
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x140045a67
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140045a61
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140045a61
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140109a10
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x140045aac
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140045aa6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140045aa6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140109a10
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x140045af1
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140045aeb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140045aeb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140109a10
nop
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x140045b36
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140045b30
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140045b30
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140109a10
nop
mov rax, qword [rbp + 0x1d8]
cmp rax, 0xf
jbe 0x140045b78
lea rdx, [rax + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x140045b6f
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140045b6f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.140109a10
nop
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x140045bbc
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140045bb7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140045bb7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140109a10
mov qword [rbp + 0x110], 0
mov qword [rbp + 0x118], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x100], 0
mov rdx, qword [rbp + 0x218]
cmp rdx, 0xf
jbe 0x140045c1e
inc rdx
mov rcx, qword [rbp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140045c18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140045c18
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140109a10
nop
mov rax, qword [rbp + 0xb8]
cmp rax, 0xf
jbe 0x140045c61
lea rdx, [rax + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x140045c58
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140045c58
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.140109a10
nop
cmp r13, 0xf
jbe 0x140045c9b
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140045c93
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140045c93
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.140109a10
lea r11, [rsp + 0x490]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140031070
nop
call fcn.140006950
nop
call fcn.140006950
nop
call fcn.140031070
int3