Function at 0x1400c00ba
Capabilities:
Get disk information
Get disk size
Get local ipv4 addresses
Get logon sessions
Get memory capacity
List groups for user account
List user accounts
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x7d8
movdqa xmmword [rsp + 0x7c0], xmm8
movdqa xmmword [rsp + 0x7b0], xmm7
movdqa xmmword [rsp + 0x7a0], xmm6
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x40], rcx
call fcn.1400c53c7
mov r14, rax
mov r13, rdx
mov ecx, 0x54410
mov edx, 0x10
call fcn.1400430d0
test rax, rax
je 0x1400c29c5
mov r15, rax
add r15, 0x54000
mov r8d, 0x410
mov rcx, r15
mov dl, 0xff
call sub.VCRUNTIME140.dll_memset
mov ecx, 9
call fcn.1400c2e62
mov rbx, rax
mov rsi, rdx
movabs rax, 0x5043206c61746f54
mov qword [rdx], rax
mov byte [rdx + 8], 0x55
xorps xmm0, xmm0
movaps xmmword [rsp + 0x250], xmm0
mov ecx, 0x120
mov edx, 8
call fcn.1400430d0
test rax, rax
je 0x1400c29d6
mov r12, rax
call fcn.1400c53c7
mov qword [rsp + 0x50], rax
mov rbp, rdx
lea rdi, [rsp + 0xb0]
mov qword [rdi], 0
mov rax, qword [0x140152050]
mov rcx, rdi
call rax
mov rax, qword [rdi]
movabs rcx, 0x19db1ded53e8000
cmp rax, rcx
jl 0x1400c01f7
movabs rcx, 0xfe624e212ac18000
add rax, rcx
movabs rcx, 0xd6bf94d5e57a42bd
mul rcx
mov rdi, rdx
shr rdi, 0x17
call sub.kernel32.dll_GetTickCount64
shr rax, 3
movabs rcx, 0x20c49ba5e353f7cf
mul rcx
shr rdx, 4
xor eax, eax
sub rdi, rdx
cmovae rax, rdi
jmp 0x1400c01f9
xor eax, eax
mov r10, qword [rsp + 0x40]
mov qword [r10 + 0x40], 0x3ff
mov qword [r10 + 0x48], 0x380
xor ecx, ecx
mov qword [r10 + 0x50], rcx
mov qword [r10 + 0x58], r15
mov qword [r10 + 0x60], r14
mov qword [r10 + 0x68], r13
pxor xmm6, xmm6
movdqu xmmword [r10 + 0x130], xmm6
movdqu xmmword [r10 + 0x140], xmm6
movdqu xmmword [r10 + 0xa0], xmm6
movdqu xmmword [r10 + 0xb0], xmm6
mov qword [r10 + 0xc0], rbx
mov qword [r10 + 0xc8], rsi
mov qword [r10 + 0xd0], 9
mov qword [r10 + 0xd8], rcx
mov edx, 1
mov qword [r10 + 0xe0], rdx
movaps xmm0, xmmword [rsp + 0x250]
movups xmmword [r10 + 0xe8], xmm0
mov qword [r10 + 0xf8], rdx
mov qword [r10 + 0x100], rcx
mov dword [r10 + 0x108], 0
mov qword [r10 + 0x110], rcx
mov edx, 8
mov qword [r10 + 0x118], rdx
mov qword [r10 + 0x120], rcx
mov byte [r10 + 0x128], 0
mov r8d, dword [rsp + 0xb0]
mov r9d, dword [rsp + 0xb3]
mov dword [r10 + 0x12c], r9d
mov dword [r10 + 0x129], r8d
mov qword [r10 + 0x158], rcx
mov qword [r10 + 0x160], rdx
mov qword [r10 + 0x168], rcx
mov qword [r10 + 0x170], 2
mov qword [r10 + 0x178], r12
mov r12, r10
movdqu xmmword [r10 + 0x180], xmm6
mov qword [r10 + 0x18], rcx
mov qword [r10 + 0x80], rcx
movdqu xmmword [r10 + 0x70], xmm6
lea rbx, [0x1401457c0]
mov qword [r10 + 0x88], rbx
mov r8, qword [rsp + 0x50]
mov qword [r10 + 0x90], r8
mov qword [r10 + 0x98], rbp
mov qword [r10 + 0x150], rax
mov qword [r10 + 0x190], rdx
mov qword [r10 + 0x198], rcx
mov rax, qword [rsp + 0x58]
cmp byte [rax + 9], 0
je 0x1400c0447
lea rsi, [rsp + 0xb0]
movdqa xmmword [rsi], xmm6
movdqa xmmword [rsi + 0x30], xmm6
movdqa xmmword [rsi + 0x20], xmm6
movdqa xmmword [rsi + 0x10], xmm6
mov dword [rsi], 0x40
mov rcx, rsi
call sub.kernel32.dll_GlobalMemoryStatusEx
mov rax, qword [rsi + 8]
mov qword [r12 + 0x130], rax
mov rax, qword [rsi + 0x10]
mov qword [r12 + 0x138], rax
lea rcx, [rsp + 0x250]
movdqa xmmword [rcx + 0x50], xmm6
movdqa xmmword [rcx + 0x40], xmm6
movdqa xmmword [rcx + 0x30], xmm6
movdqa xmmword [rcx + 0x20], xmm6
movdqa xmmword [rcx + 0x10], xmm6
movdqa xmmword [rcx], xmm6
mov qword [rcx + 0x60], 0
mov edx, 0x68
call sub.psapi.dll_GetPerformanceInfo
cmp eax, 1
jne 0x1400c0442
mov r8, qword [rsp + 0x260]
mov r9, qword [rsp + 0x270]
xor r10d, r10d
sub r8, r9
cmovb r8, r10
mov rcx, qword [rsp + 0x2a0]
mov rax, rcx
mul r8
mov r8, rax
mov r11, 0xffffffffffffffff
cmovo r8, r11
mov rsi, qword [rsp + 0x258]
sub rsi, r9
cmovb rsi, r10
mov rax, rcx
mul rsi
cmovo rax, r11
mov qword [r12 + 0x140], r8
mov qword [r12 + 0x148], rax
mov rax, qword [rsp + 0x58]
cmp byte [rax], 2
je 0x1400c063a
lea r15, [r12 + 0xa0]
mov bpl, byte [rax + 1]
cmp qword [r12 + 0x18], 0
je 0x1400c05ac
mov rcx, qword [r12 + 0x30]
call sub.pdh.dll_PdhCollectQueryData
mov rdx, qword [r12 + 0xa8]
test rdx, rdx
je 0x1400c04a1
mov r8, qword [r12 + 0xb0]
mov rcx, r12
call fcn.1400bff68
test eax, eax
je 0x1400c29fb
movss dword [r12 + 0x108], xmm0
mov edx, ebp
and dl, 1
mov rcx, r15
call fcn.1400be983
mov rax, qword [r12 + 0x120]
test rax, rax
je 0x1400c04f7
mov rsi, qword [r12 + 0x118]
imul rdi, rax, 0x70
xor ebx, ebx
mov rdx, qword [rsi + rbx + 8]
test rdx, rdx
je 0x1400c04ee
mov r8, qword [rsi + rbx + 0x10]
mov rcx, r12
call fcn.1400bff68
test eax, eax
je 0x1400c299f
movss dword [rsi + rbx + 0x68], xmm0
add rbx, 0x70
cmp rdi, rbx
jne 0x1400c04c9
test bpl, 1
mov rax, qword [rsp + 0x58]
je 0x1400c063a
cmp byte [r12 + 0x128], 0
jne 0x1400c063a
mov rsi, qword [r12 + 0x120]
lea rdi, [rsp + 0x250]
mov rcx, rdi
mov rdx, rsi
call fcn.1400bf230
mov rax, qword [rdi]
mov r8, qword [rdi + 8]
test rsi, rsi
je 0x1400c0585
mov r9, qword [rsp + 0x260]
test r9, r9
je 0x1400c0585
mov rcx, qword [r12 + 0x118]
imul rdx, rsi, 0x70
add rdx, 0xffffffffffffff90
lea r9, [r9*8 - 8]
xor r10d, r10d
xor r11d, r11d
mov rsi, qword [r8 + r10]
mov qword [rcx + r11 + 0x18], rsi
cmp rdx, r11
je 0x1400c0585
add r11, 0x70
lea rsi, [r10 + 8]
cmp r9, r10
mov r10, rsi
jne 0x1400c0567
test rax, rax
je 0x1400c0599
mov rcx, qword [0x140154958]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
mov byte [r12 + 0x128], 1
mov rax, qword [rsp + 0x58]
jmp 0x1400c063a
lea r8, [rsp + 0xb0]
mov qword [r8], 0
xor r14d, r14d
xor ecx, ecx
xor edx, edx
call sub.pdh.dll_PdhOpenQueryA
mov edi, eax
test eax, eax
je 0x1400c05cf
jmp 0x1400c05f6
mov rsi, qword [rsp + 0xb0]
call fcn.1400c53c7
xorps xmm0, xmm0
movaps xmmword [rsp + 0x250], xmm0
mov qword [rsp + 0x260], 0
mov r14, rbx
mov rcx, qword [rsp + 0x260]
mov qword [r12 + 0x10], rcx
movaps xmm0, xmmword [rsp + 0x250]
movups xmmword [r12], xmm0
mov qword [r12 + 0x18], r14
mov qword [r12 + 0x20], rax
mov qword [r12 + 0x28], rdx
mov qword [r12 + 0x30], rsi
mov qword [r12 + 0x38], 0
test edi, edi
mov rax, qword [rsp + 0x58]
je 0x1400c1ce6
cmp byte [rax + 0xb], 0
je 0x1400c0d9e
xor esi, esi
xor ecx, ecx
xor edx, edx
call sub.ole32.dll_CoInitializeEx
cmp eax, 2
lea rdx, [rsp + 0x250]
mov qword [rdx], rsi
mov qword [rdx + 0x10], rsi
mov qword [rdx + 0x20], rsi
setb byte [rdx + 0x30]
lea rsi, [rsp + 0xb0]
mov rcx, rsi
call fcn.1400bf4c6
cmp dword [rsi], 2
je 0x1400c085e
mov rax, qword [rsp + 0xe0]
lea rdx, [rsp + 0x250]
mov qword [rdx + 0x30], rax
movups xmm0, xmmword [rsp + 0xb0]
movdqu xmm1, xmmword [rsp + 0xc0]
movdqu xmm2, xmmword [rsp + 0xd0]
movdqa xmmword [rdx + 0x20], xmm2
movdqa xmmword [rdx + 0x10], xmm1
movaps xmmword [rdx], xmm0
lea rsi, [rsp + 0x60]
mov rcx, rsi
call fcn.1400bf53e
cmp qword [rsi], 2
je 0x1400c085e
mov rax, qword [rsp + 0x90]
lea rdx, [rsp + 0x250]
mov qword [rdx + 0x30], rax
movups xmm0, xmmword [rsp + 0x60]
movdqu xmm1, xmmword [rsp + 0x70]
movdqu xmm2, xmmword [rsp + 0x80]
movdqa xmmword [rdx + 0x20], xmm2
movdqa xmmword [rdx + 0x10], xmm1
movaps xmmword [rdx], xmm0
lea rsi, [rsp + 0x100]
mov rcx, rsi
call fcn.1400bf5e0
cmp qword [rsi], 2
je 0x1400c085e
mov rax, qword [rsp + 0x130]
lea rdx, [rsp + 0x250]
mov qword [rdx + 0x30], rax
movups xmm0, xmmword [rsp + 0x100]
movdqu xmm1, xmmword [rsp + 0x110]
movdqu xmm2, xmmword [rsp + 0x120]
movdqa xmmword [rdx + 0x20], xmm2
movdqa xmmword [rdx + 0x10], xmm1
movaps xmmword [rdx], xmm0
lea rsi, [rsp + 0x148]
mov rcx, rsi
call fcn.1400bf6bc
cmp qword [rsi], 2
je 0x1400c085e
mov rax, qword [rsp + 0x178]
lea rdx, [rsp + 0x250]
mov qword [rdx + 0x30], rax
movups xmm0, xmmword [rsp + 0x148]
movdqu xmm1, xmmword [rsp + 0x158]
movdqu xmm2, xmmword [rsp + 0x168]
movdqa xmmword [rdx + 0x20], xmm2
movdqa xmmword [rdx + 0x10], xmm1
movaps xmmword [rdx], xmm0
lea rsi, [rsp + 0x1e0]
mov rcx, rsi
call fcn.1400bf73f
mov rax, qword [rsi]
cmp rax, 2
je 0x1400c085e
movups xmm0, xmmword [rsp + 0x1e8]
movups xmm1, xmmword [rsp + 0x1f8]
movups xmm2, xmmword [rsp + 0x208]
lea rsi, [rsp + 0x218]
movups xmmword [rsi + 0x28], xmm2
movups xmmword [rsi + 0x18], xmm1
movups xmmword [rsi + 8], xmm0
mov qword [rsi], rax
lea rdi, [rsp + 0x60]
mov rcx, rdi
mov rdx, rsi
mov r8b, 1
call fcn.1400bf82d
mov rax, qword [rsi + 0x30]
mov qword [rsp + 0x280], rax
movups xmm0, xmmword [rsi]
movdqu xmm1, xmmword [rsi + 0x10]
movdqu xmm2, xmmword [rsi + 0x20]
movdqa xmmword [rsp + 0x270], xmm2
movdqa xmmword [rsp + 0x260], xmm1
movaps xmmword [rsp + 0x250], xmm0
mov ebp, dword [rdi + 4]
cmp ebp, 2
jne 0x1400c28b0
lea rcx, [rsp + 0x250]
call fcn.1400bdc0a
mov esi, 8
xor ebx, ebx
mov r14, qword [r12 + 0x168]
test r14, r14
je 0x1400c08b2
mov rdi, qword [r12 + 0x160]
add rdi, 0x20
mov r15, qword [sym.imp.kernel32.dll_HeapFree]
cmp qword [rdi - 0x20], 0
je 0x1400c089c
mov r8, qword [rdi - 0x18]
mov rcx, qword [0x140154958]
xor edx, edx
call r15
cmp dword [rdi], 2
je 0x1400c08a9
mov rcx, rdi
call fcn.1400bdc0a
add rdi, 0x60
dec r14
jne 0x1400c0885
cmp qword [r12 + 0x158], 0
je 0x1400c08d4
mov r8, qword [r12 + 0x160]
mov rcx, qword [0x140154958]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
mov qword [r12 + 0x158], rbx
mov qword [r12 + 0x160], rsi
mov qword [r12 + 0x168], rbx
mov rsi, qword [rsp + 0x58]
cmp byte [rsi + 6], 0
je 0x1400c1076
lea rcx, [rsp + 0x100]
mov qword [rcx], 0
call sub.iphlpapi.dll_GetIfTable2
test eax, eax
mov r12, qword [rsp + 0x40]
jne 0x1400c1fb0
mov rax, qword [r12 + 0x88]
mov rcx, qword [r12 + 0x70]
mov rdx, qword [r12 + 0x80]
lea r8, [rcx + rax]
inc r8
movdqa xmm0, xmmword [rax]
pmovmskb r9d, xmm0
not r9d
lea r10, [rax + 0x10]
lea rcx, [rsp + 0x250]
mov qword [rcx], r10
mov qword [rcx + 8], r8
mov qword [rcx + 0x10], rax
mov word [rcx + 0x18], r9w
mov qword [rcx + 0x20], rdx
call fcn.1400bd12b
test rax, rax
je 0x1400c0987
lea rsi, [rsp + 0x250]
mov byte [rdx + 0x6e], 0
mov rcx, rsi
call fcn.1400bd12b
test rax, rax
jne 0x1400c0976
call fcn.1400c53c7
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x250], xmm0
xor ecx, ecx
mov qword [rsp + 0x260], rcx
lea r8, [0x1401457c0]
mov qword [rsp + 0x268], r8
mov qword [rsp + 0x270], rax
mov qword [rsp + 0x278], rdx
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], 8
mov qword [rsp + 0x70], rcx
mov r13, qword [rsp + 0x100]
mov edi, dword [r13]
test rdi, rdi
je 0x1400c1890
lea rax, [r12 + 0x70]
mov qword [rsp + 0x1b8], rax
lea rax, [r12 + 0x90]
mov qword [rsp + 0x1b0], rax
add r13, 8
xor ebx, ebx
pcmpeqd xmm6, xmm6
mov qword [rsp + 0xa8], r13
mov qword [rsp + 0x48], rdi
imul rsi, rbx, 0x548
cmp qword [r13 + rsi + 0x4a8], 0
jne 0x1400c0a3f
cmp qword [r13 + rsi + 0x4b0], 0
je 0x1400c0c8f
cmp dword [r13 + rsi + 0x48c], 2
je 0x1400c0c8f
cmp dword [r13 + rsi + 0x420], 0
je 0x1400c0c8f
mov ecx, 0x14
mov edx, 2
call fcn.1400430d0
test rax, rax
je 0x1400c29b9
mov r14, rax
mov eax, dword [r13 + rsi + 0x10]
movzx ecx, byte [r13 + rsi + 0x14]
movzx edx, byte [r13 + rsi + 0x15]
movzx r8d, byte [r13 + rsi + 0x16]
movzx r9d, byte [r13 + rsi + 0x17]
movzx r10d, byte [r13 + rsi + 0x18]
movzx r11d, byte [r13 + rsi + 0x19]
movzx ebp, byte [r13 + rsi + 0x1a]
movzx esi, byte [r13 + rsi + 0x1b]
mov dword [r14], eax
mov word [r14 + 4], cx
mov word [r14 + 6], dx
mov word [r14 + 8], r8w
mov word [r14 + 0xa], r9w
mov word [r14 + 0xc], r10w
mov word [r14 + 0xe], r11w
mov word [r14 + 0x10], bp
mov word [r14 + 0x12], si
mov ecx, 0xa
call fcn.1400ba1cd
mov qword [rsp + 0x50], rax
mov rsi, rdx
movups xmm0, xmmword [r14]
movups xmmword [rdx], xmm0
mov eax, dword [r14 + 0x10]
mov dword [rdx + 0x10], eax
mov rcx, qword [rsp + 0x270]
mov rdx, qword [rsp + 0x278]
mov r9d, 0xa
mov r8, rsi
call fcn.1400bd6e3
mov r12, rax
mov r15, rax
shr r15, 0x39
mov rax, qword [rsp + 0x250]
mov rbp, qword [rsp + 0x268]
mov rcx, rax
and rcx, r12
movd xmm0, r15d
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
lea rdx, [rbp - 0x20]
xor r8d, r8d
mov r9, rcx
movdqu xmm1, xmmword [rbp + r9]
movdqa xmm2, xmm1
pcmpeqb xmm2, xmm0
pmovmskb r10d, xmm2
test r10d, r10d
je 0x1400c0bcc
bsf edi, r10d
add rdi, r9
and rdi, rax
mov r11, rdi
shl r11, 5
mov r13, rdx
sub r13, r11
cmp qword [r13 + 0x10], 0xa
jne 0x1400c0bbc
mov r11, qword [r13 + 8]
movdqu xmm2, xmmword [r11]
movdqu xmm3, xmmword [rsi]
pcmpeqb xmm3, xmm2
movd xmm2, dword [r11 + 0x10]
movd xmm4, dword [rsi + 0x10]
pcmpeqb xmm4, xmm2
pand xmm4, xmm3
pmovmskb r11d, xmm4
cmp r11d, 0xffff
je 0x1400c0bf1
lea r11d, [r10 - 1]
and r11d, r10d
mov r10d, r11d
test r11w, r11w
jne 0x1400c0b6c
pcmpeqb xmm1, xmm6
pmovmskb r10d, xmm1
test r10d, r10d
jne 0x1400c0ca0
add r9, r8
add r9, 0x10
add r8, 0x10
and r9, rax
jmp 0x1400c0b53
neg rdi
shl rdi, 5
add rbp, rdi
cmp qword [rsp + 0x50], 0
je 0x1400c0c15
mov rcx, qword [0x140154958]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
mov r12, qword [rsp + 0x40]
mov r13, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0x48]
mov eax, dword [rbp - 8]
inc eax
mov dword [rbp - 8], eax
cmp eax, 1
jle 0x1400c0c48
mov rcx, qword [0x140154958]
xor edx, edx
mov r8, r14
call qword [sym.imp.kernel32.dll_HeapFree]
jmp 0x1400c0c8f
mov rdx, qword [rsp + 0x70]
cmp rdx, qword [rsp + 0x60]
jne 0x1400c0c63
lea rcx, [rsp + 0x60]
call fcn.1400bda82
mov rdx, qword [rsp + 0x70]
mov rax, qword [rsp + 0x68]
mov rcx, rdx
shl rcx, 5
mov dword [rax + rcx], ebx
mov r8d, 0xa
mov qword [rax + rcx + 8], r8
mov qword [rax + rcx + 0x10], r14
mov qword [rax + rcx + 0x18], r8
inc rdx
mov qword [rsp + 0x70], rdx
inc rbx
cmp rbx, rdi
jne 0x1400c0a1e
jmp 0x1400c11d9
cmp qword [rsp + 0x258], 0
je 0x1400c0d6e
movdqu xmm0, xmmword [rbp + rcx]
pmovmskb edx, xmm0
test edx, edx
mov rdi, qword [rsp + 0x48]
je 0x1400c0cc9
mov r12, qword [rsp + 0x40]
jmp 0x1400c0cec
mov r8d, 0x10
mov r12, qword [rsp + 0x40]
add rcx, r8
and rcx, rax
movdqu xmm0, xmmword [rbp + rcx]
pmovmskb edx, xmm0
add r8, 0x10
test edx, edx
je 0x1400c0cd4
mov r13, qword [rsp + 0xa8]
bsf edx, edx
add rdx, rcx
and rdx, rax
mov cl, byte [rbp + rdx]
test cl, cl
js 0x1400c0d15
movdqa xmm0, xmmword [rbp]
pmovmskb ecx, xmm0
bsf edx, ecx
mov cl, byte [rbp + rdx]
lea r8, [rdx - 0x10]
and r8, rax
mov byte [rbp + rdx], r15b
mov byte [r8 + rbp + 0x10], r15b
shl rdx, 5
mov rax, rbp
sub rax, rdx
and cl, 1
movzx ecx, cl
sub qword [rsp + 0x258], rcx
neg rdx
mov rcx, qword [rsp + 0x50]
mov qword [rbp + rdx - 0x20], rcx
mov qword [rax - 0x18], rsi
mov qword [rax - 0x10], 0xa
mov dword [rax - 8], 0
inc qword [rsp + 0x260]
mov rbp, rax
jmp 0x1400c0c27
lea rcx, [rsp + 0x250]
lea rdx, [rsp + 0x270]
call fcn.140112570
mov rax, qword [rsp + 0x250]
mov rbp, qword [rsp + 0x268]
and r12, rax
mov rcx, r12
jmp 0x1400c0caf
cmp byte [rax + 0xa], 0
je 0x1400c08ec
mov rax, qword [rsp + 0x40]
mov rax, qword [rax + 0x168]
test rax, rax
je 0x1400c08ec
mov rcx, qword [rsp + 0x40]
mov rsi, qword [rcx + 0x160]
lea rdi, [rsp + 0xb8]
add rsi, 0x20
shl rax, 5
lea rbx, [rax + rax*2]
xor ebp, ebp
lea r14, [rsp + 0x60]
lea r15, [rsp + 0x250]
lea r12, [rsp + 0x100]
lea r13, [rsp + 0xb0]
mov rax, qword [rsi]
cmp rax, 2
jne 0x1400c0f62
xor ecx, ecx
xor edx, edx
call sub.ole32.dll_CoInitializeEx
cmp eax, 2
mov qword [rsp + 0x250], rbp
mov qword [rsp + 0x260], rbp
mov qword [rsp + 0x270], rbp
setb byte [rsp + 0x280]
mov rcx, r14
mov rdx, r15
call fcn.1400bf4c6
cmp dword [rsp + 0x60], 2
je 0x1400c0ef2
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x280], rax
movups xmm0, xmmword [rsp + 0x60]
movups xmm1, xmmword [rsp + 0x70]
movups xmm2, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x270], xmm2
movaps xmmword [rsp + 0x260], xmm1
movaps xmmword [rsp + 0x250], xmm0
mov rcx, r12
mov rdx, r15
call fcn.1400bf53e
cmp qword [rsp + 0x100], 2
je 0x1400c0ef2
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0x280], rax
movups xmm0, xmmword [rsp + 0x100]
movups xmm1, xmmword [rsp + 0x110]
movups xmm2, xmmword [rsp + 0x120]
movaps xmmword [rsp + 0x270], xmm2
movaps xmmword [rsp + 0x260], xmm1
movaps xmmword [rsp + 0x250], xmm0
mov rcx, r14
mov rdx, r15
call fcn.1400bf5e0
cmp qword [rsp + 0x60], 2
jne 0x1400c102c
mov qword [rsp + 0x100], 2
mov rax, qword [rsp + 0x130]
mov qword [rsi + 0x30], rax
movups xmm0, xmmword [rsp + 0x100]
movups xmm1, xmmword [rsp + 0x110]
movups xmm2, xmmword [rsp + 0x120]
movups xmmword [rsi + 0x20], xmm2
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
mov rax, qword [rsi]
movups xmm0, xmmword [rsi + 8]
movups xmm1, xmmword [rsi + 0x18]
movups xmm2, xmmword [rsi + 0x28]
movaps xmmword [rsp + 0x80], xmm2
movaps xmmword [rsp + 0x70], xmm1
movaps xmmword [rsp + 0x60], xmm0
cmp rax, 2
jne 0x1400c0f80
mov qword [rsp + 0x250], 2
jmp 0x1400c0fb0
movups xmm0, xmmword [rsi + 8]
movups xmm1, xmmword [rsi + 0x18]
movups xmm2, xmmword [rsi + 0x28]
movaps xmmword [rsp + 0x80], xmm2
movaps xmmword [rsp + 0x70], xmm1
movaps xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0xb0], rax
movaps xmm0, xmmword [rsp + 0x60]
movaps xmm1, xmmword [rsp + 0x70]
movaps xmm2, xmmword [rsp + 0x80]
movups xmmword [rdi + 0x20], xmm2
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
mov rcx, r15
mov rdx, r13
call fcn.1400bf73f
mov rax, qword [rsp + 0x280]
mov qword [rsi + 0x30], rax
movups xmm0, xmmword [rsp + 0x250]
movdqu xmm1, xmmword [rsp + 0x260]
movdqu xmm2, xmmword [rsp + 0x270]
movdqu xmmword [rsi + 0x20], xmm2
movdqu xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
cmp dword [rsi], 2
je 0x1400c1019
mov rcx, r15
mov rdx, rsi
xor r8d, r8d
call fcn.1400bf82d
cmp dword [rsp + 0x254], 2
je 0x1400c1019
movss xmm0, dword [rsp + 0x250]
movss dword [rsi + 0x38], xmm0
ucomiss xmm0, dword [rsi + 0x3c]
jbe 0x1400c1019
movss dword [rsi + 0x3c], xmm0
add rsi, 0x60
add rbx, 0xffffffffffffffa0
jne 0x1400c0dfc
jmp 0x1400c08ec
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x280], rax
movups xmm0, xmmword [rsp + 0x60]
movups xmm1, xmmword [rsp + 0x70]
movups xmm2, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x270], xmm2
movaps xmmword [rsp + 0x260], xmm1
movaps xmmword [rsp + 0x250], xmm0
mov rcx, r12
mov rdx, r15
call fcn.1400bf6bc
jmp 0x1400c0efe
cmp byte [rsi + 5], 0
mov r12, qword [rsp + 0x40]
je 0x1400c1fb0
lea rcx, [rsp + 0x250]
mov r8d, 0x548
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rax, qword [r12 + 0x88]
mov rcx, qword [r12 + 0x70]
mov rdx, qword [r12 + 0x80]
lea r8, [rcx + rax]
inc r8
movdqa xmm0, xmmword [rax]
pmovmskb r9d, xmm0
not r9d
lea r10, [rax + 0x10]
lea rcx, [rsp + 0xb0]
mov qword [rcx], r10
mov qword [rcx + 8], r8
mov qword [rcx + 0x10], rax
mov word [rcx + 0x18], r9w
mov qword [rcx + 0x20], rdx
call fcn.1400bd12b
test rax, rax
je 0x1400c1fab
mov rbx, rdx
lea rsi, [rsp + 0x250]
mov rdi, 0xffffffffffffffff
lea r14, [rsp + 0xb0]
mov rax, qword [rbx]
mov qword [rsp + 0x250], rax
mov dword [rsp + 0x258], 0
mov rcx, rsi
call sub.iphlpapi.dll_GetIfEntry2
test eax, eax
jne 0x1400c11c0
mov rax, qword [rbx + 8]
mov rcx, qword [rbx + 0x18]
mov qword [rbx + 0x10], rax
mov rax, qword [rsp + 0x750]
mov qword [rbx + 8], rax
mov qword [rbx + 0x20], rcx
mov rax, qword [rsp + 0x708]
mov qword [rbx + 0x18], rax
mov rax, qword [rbx + 0x28]
mov qword [rbx + 0x30], rax
mov rax, qword [rsp + 0x710]
add rax, qword [rsp + 0x718]
cmovb rax, rdi
mov qword [rbx + 0x28], rax
mov rax, qword [rbx + 0x38]
mov qword [rbx + 0x40], rax
mov rax, qword [rsp + 0x758]
add rax, qword [rsp + 0x760]
cmovb rax, rdi
mov qword [rbx + 0x38], rax
mov rax, qword [rbx + 0x48]
mov qword [rbx + 0x50], rax
mov rax, qword [rsp + 0x728]
mov qword [rbx + 0x48], rax
mov rax, qword [rbx + 0x58]
mov qword [rbx + 0x60], rax
mov rax, qword [rsp + 0x770]
mov qword [rbx + 0x58], rax
mov rcx, r14
call fcn.1400bd12b
mov rbx, rdx
test rax, rax
jne 0x1400c110a
jmp 0x1400c1fab
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x68]
mov rax, qword [rsp + 0x70]
mov rsi, rax
shl rsi, 5
add rsi, rcx
mov qword [rsp + 0x180], rcx
mov rdi, rcx
test rax, rax
je 0x1400c183f
pcmpeqd xmm6, xmm6
mov rdi, qword [rsp + 0x180]
mov qword [rsp + 0x198], rsi
mov rax, rdi
add rdi, 0x20
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x50], rcx
test rcx, rcx
je 0x1400c183f
mov rbx, qword [rax + 8]
mov edx, dword [rax]
cmp qword [rsp + 0x260], 0
mov qword [rsp + 0x1a8], rdi
mov qword [rsp + 0x1a0], rbx
je 0x1400c1389
mov qword [rsp + 0xa0], rdx
mov rsi, qword [rax + 0x18]
mov rcx, qword [rsp + 0x270]
mov rdx, qword [rsp + 0x278]
mov r8, qword [rsp + 0x50]
mov r9, rsi
call fcn.1400bd6e3
mov r14, qword [rsp + 0x250]
mov rcx, qword [rsp + 0x268]
mov r13, r14
and r13, rax
shr rax, 0x39
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
lea rbx, [rsi + rsi]
lea r12, [rcx - 0x20]
xor edi, edi
mov qword [rsp + 0x48], rcx
movdqu xmm8, xmmword [rcx + r13]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb ebp, xmm0
test ebp, ebp
je 0x1400c1319
bsf r15d, ebp
add r15, r13
and r15, r14
mov rcx, r15
shl rcx, 5
mov rax, r12
sub rax, rcx
cmp rsi, qword [rax + 0x10]
jne 0x1400c130d
mov rdx, qword [rax + 8]
mov rcx, qword [rsp + 0x50]
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400c1340
lea eax, [rbp - 1]
and eax, ebp
mov ebp, eax
test ax, ax
jne 0x1400c12db
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x1400c1680
add r13, rdi
add r13, 0x10
add rdi, 0x10
and r13, r14
mov rcx, qword [rsp + 0x48]
jmp 0x1400c12c4
neg r15
shl r15, 5
mov rcx, qword [rsp + 0x48]
add rcx, r15
lea rax, [rcx - 0x20]
test rcx, rcx
cmove rax, rcx
mov r12, qword [rsp + 0x40]
mov r13, qword [rsp + 0xa8]
mov rsi, qword [rsp + 0x198]
mov rdi, qword [rsp + 0x1a8]
mov rbx, qword [rsp + 0x1a0]
mov rdx, qword [rsp + 0xa0]
jmp 0x1400c138b
xor eax, eax
lea rcx, [rax + 0x18]
test rax, rax
lea rax, [0x14013d2d8]
cmove rcx, rax
cmp dword [rcx], 1
jg 0x1400c153f
imul r14, rdx, 0x548
lea r15, [r14 + r13]
lea rdx, [r14 + r13]
add rdx, 0x1c
xor r8d, r8d
cmp word [rdx + r8*2], 0
je 0x1400c13d8
inc r8
cmp r8, 0x101
jne 0x1400c13bc
mov r8d, 0x101
jmp 0x1400c13e5
cmp r8, 0x102
jae 0x1400c29e2
lea rcx, [rsp + 0xb0]
call fcn.140043dc0
mov r8, qword [rsp + 0xb8]
test r8, r8
je 0x1400c153f
mov qword [rsp + 0x1d0], r15
mov qword [rsp + 0x188], r14
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x190], rax
mov rsi, qword [rsp + 0xc0]
mov rcx, qword [r12 + 0x90]
mov rdx, qword [r12 + 0x98]
mov qword [rsp + 0x48], r8
mov r9, rsi
call fcn.1400bd56c
mov rcx, rax
shr rcx, 0x39
mov r15, qword [r12 + 0x70]
mov rdx, qword [r12 + 0x88]
mov rbx, r15
mov qword [rsp + 0x1c8], rax
and rbx, rax
mov qword [rsp + 0x1d8], rcx
movd xmm0, ecx
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
lea r12, [rdx - 0x88]
xor eax, eax
mov qword [rsp + 0xa0], rax
mov r13, rbx
mov qword [rsp + 0x138], rdx
movdqu xmm8, xmmword [rdx + r13]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb edi, xmm0
test edi, edi
je 0x1400c1502
bsf ecx, edi
add rcx, r13
and rcx, r15
mov r14, rcx
neg r14
shl rcx, 3
mov rbp, r14
shl rbp, 7
mov rax, rbp
sub rax, rcx
cmp qword [r12 + rax + 0x10], rsi
jne 0x1400c14f6
add rax, r12
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x48]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400c1566
lea eax, [rdi - 1]
and eax, edi
mov edi, eax
test ax, ax
jne 0x1400c14b7
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x1400c1687
mov rax, qword [rsp + 0xa0]
add r13, rax
add r13, 0x10
add rax, 0x10
mov qword [rsp + 0xa0], rax
and r13, r15
mov rdx, qword [rsp + 0x138]
jmp 0x1400c14a0
test rbx, rbx
je 0x1400c1558
mov rcx, qword [0x140154958]
xor edx, edx
mov r8, qword [rsp + 0x50]
call qword [sym.imp.kernel32.dll_HeapFree]
cmp rdi, rsi
jne 0x1400c1222
jmp 0x1400c183f
lea rax, [r14*8]
add rax, rbp
mov r8, qword [rsp + 0x138]
mov rcx, qword [r8 + rax - 0x68]
mov rdx, qword [r8 + rax - 0x58]
mov qword [r8 + rax - 0x60], rcx
mov r13, qword [rsp + 0xa8]
mov r9, qword [rsp + 0x188]
mov rcx, qword [r13 + r9 + 0x500]
mov qword [r8 + rax - 0x68], rcx
mov qword [r8 + rax - 0x50], rdx
mov rcx, qword [r13 + r9 + 0x4b8]
mov qword [r8 + rax - 0x58], rcx
mov rcx, qword [r8 + rax - 0x48]
mov qword [r8 + rax - 0x40], rcx
mov rcx, qword [r13 + r9 + 0x4c0]
add rcx, qword [r13 + r9 + 0x4c8]
mov rdx, 0xffffffffffffffff
cmovb rcx, rdx
mov qword [r8 + rax - 0x48], rcx
mov rcx, qword [r8 + rax - 0x38]
mov qword [r8 + rax - 0x30], rcx
mov rcx, qword [r13 + r9 + 0x508]
add rcx, qword [r13 + r9 + 0x510]
cmovb rcx, rdx
mov qword [r8 + rax - 0x38], rcx
mov rcx, qword [r8 + rax - 0x28]
mov qword [r8 + rax - 0x20], rcx
mov rcx, qword [r13 + r9 + 0x4d8]
mov qword [r8 + rax - 0x28], rcx
mov rcx, qword [r8 + rax - 0x18]
mov qword [r8 + rax - 0x10], rcx
mov rcx, qword [r13 + r9 + 0x520]
mov qword [r8 + rax - 0x18], rcx
mov byte [r8 + rax - 2], 1
cmp qword [rsp + 0x190], 0
mov r12, qword [rsp + 0x40]
je 0x1400c165c
mov rcx, qword [0x140154958]
xor edx, edx
mov r8, qword [rsp + 0x48]
call qword [sym.imp.kernel32.dll_HeapFree]
cmp qword [rsp + 0x1a0], 0
mov rsi, qword [rsp + 0x198]
mov rdi, qword [rsp + 0x1a8]
jne 0x1400c1544
jmp 0x1400c1558
xor ecx, ecx
jmp 0x1400c134f
mov r12, qword [rsp + 0x40]
cmp qword [r12 + 0x78], 0
mov rbp, qword [rsp + 0x138]
je 0x1400c180d
mov r13, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0x188]
mov rax, qword [r13 + rdi + 0x4c0]
add rax, qword [r13 + rdi + 0x4c8]
mov rdx, 0xffffffffffffffff
cmovb rax, rdx
mov rcx, qword [r13 + rdi + 0x508]
add rcx, qword [r13 + rdi + 0x510]
cmovb rcx, rdx
mov r9, qword [r13 + rdi + 0x4b8]
mov rdx, qword [rsp + 0x1d0]
mov r11, qword [rdx]
mov r10, qword [r13 + rdi + 0x500]
mov r8, qword [r13 + rdi + 0x4d8]
mov rdx, qword [r13 + rdi + 0x520]
movdqu xmm0, xmmword [rbp + rbx]
pmovmskb edi, xmm0
test edi, edi
jne 0x1400c1736
mov r14d, 0x10
add rbx, r14
and rbx, r15
movdqu xmm0, xmmword [rbp + rbx]
pmovmskb edi, xmm0
add r14, 0x10
test edi, edi
je 0x1400c171e
bsf edi, edi
add rdi, rbx
and rdi, r15
mov bl, byte [rbp + rdi]
test bl, bl
js 0x1400c1757
movdqa xmm0, xmmword [rbp]
pmovmskb edi, xmm0
bsf edi, edi
mov bl, byte [rbp + rdi]
lea r14, [rdi - 0x10]
and r14, r15
mov r15, qword [rsp + 0x1d8]
mov byte [rbp + rdi], r15b
mov byte [r14 + rbp + 0x10], r15b
and bl, 1
movzx ebx, bl
sub qword [r12 + 0x78], rbx
mov rbx, rdi
neg rbx
shl rdi, 3
shl rbx, 7
sub rbx, rdi
mov rdi, qword [rsp + 0x190]
mov qword [rbp + rbx - 0x88], rdi
mov rdi, qword [rsp + 0x48]
mov qword [rbp + rbx - 0x80], rdi
mov qword [rbp + rbx - 0x78], rsi
mov qword [rbp + rbx - 0x70], r11
mov qword [rbp + rbx - 0x68], r10
mov qword [rbp + rbx - 0x60], r10
mov qword [rbp + rbx - 0x58], r9
mov qword [rbp + rbx - 0x50], r9
mov qword [rbp + rbx - 0x48], rax
mov qword [rbp + rbx - 0x40], rax
mov qword [rbp + rbx - 0x38], rcx
mov qword [rbp + rbx - 0x30], rcx
mov qword [rbp + rbx - 0x28], r8
mov qword [rbp + rbx - 0x20], r8
mov qword [rbp + rbx - 0x18], rdx
mov qword [rbp + rbx - 0x10], rdx
mov dword [rbp + rbx - 8], 0
mov word [rbp + rbx - 4], 0
mov byte [rbp + rbx - 2], 1
inc qword [r12 + 0x80]
jmp 0x1400c165c
mov rcx, qword [rsp + 0x1b8]
mov rdx, qword [rsp + 0x1b0]
call fcn.1401127fc
mov r15, qword [r12 + 0x70]
mov rbp, qword [r12 + 0x88]
mov rbx, qword [rsp + 0x1c8]
and rbx, r15
jmp 0x1400c16a0
sub rsi, rdi
je 0x1400c186e
shr rsi, 5
add rdi, 0x10
cmp qword [rdi - 8], 0
je 0x1400c1865
mov r8, qword [rdi]
mov rcx, qword [0x140154958]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
add rdi, 0x20
dec rsi
jne 0x1400c184c
cmp qword [rsp + 0x1c0], 0
je 0x1400c1890
mov rcx, qword [0x140154958]
xor edx, edx
mov r8, qword [rsp + 0x180]
call qword [sym.imp.kernel32.dll_HeapFree]
mov rcx, qword [rsp + 0x100]
call sub.iphlpapi.dll_FreeMibTable
mov rax, qword [rsp + 0x250]
test rax, rax
je 0x1400c1961
mov rsi, qword [rsp + 0x260]
test rsi, rsi
je 0x1400c1933
mov rdi, qword [rsp + 0x268]
movdqa xmm0, xmmword [rdi]
pmovmskb eax, xmm0
not eax
lea rbx, [rdi + 0x10]
mov r14, qword [sym.imp.kernel32.dll_HeapFree]
test ax, ax
jne 0x1400c18f8
movdqa xmm0, xmmword [rbx]
pmovmskb eax, xmm0
add rdi, 0xfffffffffffffe00
add rbx, 0x10
cmp ax, 0xffff
je 0x1400c18dd
not eax
bsf ecx, eax
lea ebp, [rax - 1]
and ebp, eax
shl rcx, 5
mov rax, rdi
sub rax, rcx
dec rsi
cmp qword [rax - 0x20], 0
je 0x1400c1924
mov r8, qword [rax - 0x18]
mov rcx, qword [0x140154958]
xor edx, edx
call r14
mov eax, ebp
test rsi, rsi
jne 0x1400c18d8
mov rax, qword [rsp + 0x250]
mov rcx, rax
shl rcx, 5
add rax, rcx
cmp rax, 0xffffffffffffffcf
je 0x1400c1961
mov r8, qword [rsp + 0x268]
sub r8, rcx
add r8, 0xffffffffffffffe0
mov rcx, qword [0x140154958]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
mov rsi, qword [r12 + 0x80]
test rsi, rsi
je 0x1400c1a93
mov rdi, qword [r12 + 0x88]
lea rbx, [rdi + 0x10]
movdqa xmm0, xmmword [rdi]
pmovmskb ebp, xmm0
not ebp
movabs r14, 0xf0f0f0f0f0f0f0f1
pcmpeqd xmm6, xmm6
mov r15, qword [sym.imp.kernel32.dll_HeapFree]
test bp, bp
jne 0x1400c19bd
movdqa xmm0, xmmword [rbx]
pmovmskb ebp, xmm0
add rdi, 0xfffffffffffff780
add rbx, 0x10
cmp bp, 0xffff
je 0x1400c19a2
not ebp
mov eax, ebp
bsf ecx, eax
lea ebp, [rax - 1]
and ebp, eax
mov rax, rcx
neg rax
shl rcx, 3
shl rax, 7
sub rax, rcx
dec rsi
cmp byte [rdi + rax - 2], 0
jne 0x1400c1a8a
add rax, rdi
mov rcx, qword [r12 + 0x88]
mov rdx, rcx
sub rdx, rax
sar rdx, 3
imul rdx, r14
lea r8, [rdx - 0x10]
and r8, qword [r12 + 0x70]
movdqu xmm0, xmmword [rcx + r8]
pcmpeqb xmm0, xmm6
psllw xmm0, 7
pmovmskb r9d, xmm0
test r9d, r9d
je 0x1400c1a2c
bsr r9w, r9w
xor r9d, 0xf
jmp 0x1400c1a31
mov r9w, 0x10
movdqu xmm0, xmmword [rcx + rdx]
pcmpeqb xmm0, xmm6
pmovmskb r10d, xmm0
or r10d, 0x10000
bsf r10d, r10d
add r9d, r10d
mov r10b, 0x80
cmp r9w, 0xf
ja 0x1400c1a5f
inc qword [r12 + 0x78]
mov r10b, 0xff
mov byte [rcx + rdx], r10b
mov byte [r8 + rcx + 0x10], r10b
dec qword [r12 + 0x80]
cmp qword [rax - 0x88], 0
je 0x1400c1a8a
mov r8, qword [rax - 0x80]
mov rcx, qword [0x140154958]
xor edx, edx
call r15
test rsi, rsi
jne 0x1400c199d
lea rdi, [rsp + 0x1e0]
mov dword [rdi], 0x3c00
mov ebx, 3
mov ecx, dword [rsp + 0x1e0]
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x1400c1ecb
mov rsi, rax
mov qword [rsp + 0x20], rdi
xor ecx, ecx
mov edx, 0xe
xor r8d, r8d
mov r9, rax
call sub.iphlpapi.dll_GetAdaptersAddresses
mov dword [rsp + 0x148], eax
cmp eax, 0x6f
jne 0x1400c1af2
mov rcx, rsi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
dec ebx
jne 0x1400c1aa6
jmp 0x1400c1f2f
test eax, eax
jne 0x1400c1f27
mov qword [rsp + 0xb8], rsi
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xb0], 0
lea rdx, [rsp + 0x60]
mov qword [rdx], rsi
mov qword [rdx + 8], rsi
lea rsi, [rsp + 0x250]
mov rcx, rsi
call fcn.1400bf380
mov r15, qword [rsi + 8]
test r15, r15
je 0x1400c288d
pcmpeqd xmm6, xmm6
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0xa0], rax
cmp qword [r12 + 0x80], 0
je 0x1400c1c81
mov r12, qword [rsp + 0x260]
mov rdi, qword [rsp + 0x40]
mov rcx, qword [rdi + 0x90]
mov rdx, qword [rdi + 0x98]
mov r8, r15
mov r9, r12
call fcn.1400bd56c
mov rsi, qword [rdi + 0x70]
mov rcx, qword [rdi + 0x88]
mov rbx, rsi
and rbx, rax
shr rax, 0x39
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
mov qword [rsp + 0x48], rcx
lea r14, [rcx - 0x88]
xor eax, eax
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x48]
movdqu xmm8, xmmword [rax + rbx]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb r13d, xmm0
test r13d, r13d
je 0x1400c1c2d
bsf ecx, r13d
add rcx, rbx
and rcx, rsi
mov rdi, rcx
neg rdi
shl rcx, 3
mov rbp, rdi
shl rbp, 7
mov rax, rbp
sub rax, rcx
cmp r12, qword [r14 + rax + 0x10]
jne 0x1400c1c1e
add rax, r14
mov rdx, qword [rax + 8]
mov rcx, r15
mov r8, r12
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400c1c58
lea eax, [r13 - 1]
and eax, r13d
mov r13d, eax
test ax, ax
jne 0x1400c1be0
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x1400c1c81
mov rax, qword [rsp + 0x50]
add rbx, rax
add rbx, 0x10
add rax, 0x10
mov qword [rsp + 0x50], rax
and rbx, rsi
jmp 0x1400c1bc2
lea rax, [rdi*8]
add rax, rbp
lea rdx, [rsp + 0x268]
movzx ecx, word [rdx + 4]
mov r8, qword [rsp + 0x48]
mov word [r8 + rax - 4], cx
mov ecx, dword [rdx]
mov dword [r8 + rax - 8], ecx
cmp qword [rsp + 0xa0], 0
je 0x1400c1c9e
mov rcx, qword [0x140154958]
xor edx, edx
mov r8, r15
call qword [sym.imp.kernel32.dll_HeapFree]
lea rcx, [rsp + 0x250]
lea rdx, [rsp + 0x60]
call fcn.1400bf380
mov r15, qword [rsp + 0x258]
test r15, r15
mov r12, qword [rsp + 0x40]
jne 0x1400c1b43
mov rsi, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0x60]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
test rsi, rsi
jne 0x1400c1f89
jmp 0x1400c1fab
mov byte [rsp + 0x48], bpl
mov ebx, ebp
and bl, 1
mov ecx, 0x23
call fcn.1400c2e62
lea rsi, [rsp + 0xb0]
mov qword [rsi], rax
mov qword [rsi + 8], rdx
movups xmm0, xmmword [str.Processor__Total___Processor_TimeProcessor____Processor_Times]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [0x14013d460]
movups xmmword [rdx + 0x10], xmm0
mov dword [rdx + 0x1f], 0x656d6954
mov qword [rsi + 0x10], 0x23
mov ecx, 5
call fcn.1400c2e62
lea r9, [rsp + 0x250]
mov qword [r9], rax
mov qword [r9 + 8], rdx
mov dword [rdx], 0x5f746f74
mov byte [rdx + 4], 0x30
mov qword [r9 + 0x10], 5
mov rcx, rsi
mov rdx, r12
mov r8, r15
call fcn.1400bfa14
mov qword [rsp + 0xa0], r15
mov rcx, r15
mov edx, ebx
call fcn.1400be983
mov rax, qword [r12 + 0x120]
test rax, rax
je 0x1400c1ea3
mov rcx, qword [rsp + 0x40]
mov rbx, qword [rcx + 0x118]
imul rdi, rax, 0x70
xor ebp, ebp
mov r13d, 1
lea rax, [rbx + 0x70]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x148], rbp
inc rbp
lea rax, [rsp + 0x148]
mov qword [rsp + 0xb0], rax
lea r12, [fcn.14004a9c0]
mov qword [rsp + 0xb8], r12
lea rax, [0x14013d490]
mov qword [rsp + 0x260], rax
mov eax, 2
mov qword [rsp + 0x268], rax
xor r15d, r15d
mov qword [rsp + 0x250], r15
mov qword [rsp + 0x270], rsi
mov qword [rsp + 0x278], r13
lea rcx, [rsp + 0x60]
lea r14, [rsp + 0x250]
mov rdx, r14
call fcn.1400439e0
lea rax, [rsp + 0x148]
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x108], r12
lea rax, str.Tried_to_shrink_to_a_larger_capacity
mov qword [rsp + 0x260], rax
mov eax, 2
mov qword [rsp + 0x268], rax
mov qword [rsp + 0x250], r15
lea rax, [rsp + 0x100]
mov qword [rsp + 0x270], rax
mov qword [rsp + 0x278], r13
mov rcx, rsi
mov rdx, r14
call fcn.1400439e0
lea rcx, [rsp + 0x60]
mov rdx, qword [rsp + 0x40]
mov r8, rbx
mov r9, rsi
call fcn.1400bfa14
mov rbx, qword [rsp + 0x50]
add rdi, 0xffffffffffffff90
jne 0x1400c1da1
mov r12, qword [rsp + 0x40]
cmp qword [r12 + 0x18], 0
mov rax, qword [rsp + 0x58]
mov bpl, byte [rsp + 0x48]
mov r15, qword [rsp + 0xa0]
jne 0x1400c0468
jmp 0x1400c063a
mov ecx, 0x32
call fcn.1400c2e62
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc0], rdx
movups xmm0, xmmword [str.failed_to_allocate_memory_for_IP_ADAPTER_ADDRESSESGetAdaptersAddresses___failed_with_code]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [0x14013d602]
movups xmmword [rdx + 0x10], xmm0
movdqu xmm0, xmmword [0x14013d612]
movdqu xmmword [rdx + 0x20], xmm0
mov word [rdx + 0x30], 0x5345
mov qword [rsp + 0xc8], 0x32
mov qword [rsp + 0xb0], 1
jmp 0x1400c1f89
mov rcx, rsi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
lea rax, [rsp + 0x148]
lea rcx, [rsp + 0x60]
mov qword [rcx], rax
lea rax, [0x14004d9d0]
mov qword [rcx + 8], rax
lea rax, [0x14013d650]
lea rdx, [rsp + 0x250]
mov qword [rdx + 0x10], rax
mov edi, 1
mov qword [rdx + 0x18], rdi
mov qword [rdx], 0
mov qword [rdx + 0x20], rcx
mov qword [rdx + 0x28], rdi
lea rsi, [rsp + 0xb8]
mov rcx, rsi
call fcn.1400439e0
mov qword [rsi - 8], rdi
cmp qword [rsp + 0xb8], 0
je 0x1400c1fab
mov r8, qword [rsp + 0xc0]
mov rcx, qword [0x140154958]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
mov rsi, qword [rsp + 0x58]
movzx edx, word [rsi + 2]
cmp dl, 2
je 0x1400c1fca
movzx eax, byte [rsi + 4]
shl eax, 0x10
or edx, eax
mov rcx, r12
call fcn.1400bdfe4
cmp byte [rsi + 7], 0
je 0x1400c262f
lea rsi, [r12 + 0x170]
call sub.kernel32.dll_GetLogicalDrives
mov dword [rsp + 0x1e0], eax
xor ecx, ecx
mov qword [rsp + 0x148], rcx
mov qword [rsp + 0x150], 8
mov qword [rsp + 0x158], rcx
test eax, eax
je 0x1400c21b3
movabs rax, 0x2000000000
lea rdi, [rsp + 0x258]
mov qword [rdi - 8], rax
lea rax, [rsp + 0x1e0]
mov qword [rdi], rax
call fcn.14008f52f
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], 0x20
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 1
lea rdi, [rsp + 0x100]
mov edx, 0x20
mov rcx, rdi
xor r8d, r8d
mov r9, rax
call fcn.1400b8f70
mov rax, qword [rdi + 0x10]
test rax, rax
je 0x1400c2093
xor r8d, r8d
mov rdi, qword [rdi]
test rdi, rdi
je 0x1400c208a
add r8, qword [rdi + 0x20]
dec rax
jne 0x1400c2079
test r8, r8
jne 0x1400c289c
mov rax, qword [rsp + 0x110]
lea rdx, [rsp + 0x60]
mov qword [rdx + 0x10], rax
movdqu xmm0, xmmword [rsp + 0x100]
movdqa xmmword [rdx], xmm0
lea rdi, [rsp + 0xb0]
mov rcx, rdi
call fcn.1400bd865
cmp qword [rdi + 8], 0
je 0x1400c21a4
lea rbx, [rsp + 0x148]
mov r13, qword [rbx + 0x10]
lea r14, [rsp + 0x250]
lea r15, [rsp + 0xb0]
lea r12, [rsp + 0x60]
movdqu xmm0, xmmword [rsp + 0xb0]
movdqa xmmword [rsp + 0x250], xmm0
mov rdi, qword [rsp + 0xc0]
mov qword [rsp + 0x260], rdi
mov rbp, qword [rsp + 0x258]
mov rax, qword [rsp + 0x148]
sub rax, r13
cmp rax, rdi
jb 0x1400c218c
lea rcx, [r13*8]
add rcx, r13
shl rcx, 4
add rcx, qword [rsp + 0x150]
mov rax, rdi
shl rax, 4
lea r8, [rax + rax*8]
mov rdx, rbp
call sub.VCRUNTIME140.dll_memcpy
add r13, rdi
mov qword [rsp + 0x158], r13
mov qword [rsp + 0x260], 0
mov rcx, r14
call fcn.1400b8a32
mov rcx, r15
mov rdx, r12
call fcn.1400bd865
cmp qword [rsp + 0xb8], 0
jne 0x1400c20ed
jmp 0x1400c21a4
mov rcx, rbx
mov rdx, r13
mov r8, rdi
call fcn.14011253d
mov r13, qword [rsp + 0x158]
jmp 0x1400c2127
lea rcx, [rsp + 0x60]
call fcn.1400b9b56
mov r12, qword [rsp + 0x40]
mov rcx, rsi
call fcn.1400b8a32
mov rax, qword [rsp + 0x158]
mov qword [rsi + 0x10], rax
movdqu xmm0, xmmword [rsp + 0x148]
movdqu xmmword [rsi], xmm0
mov rax, qword [rsp + 0x58]
cmp byte [rax + 0xc], 0
je 0x1400c2602
lea rax, [r12 + 0x188]
mov qword [rsp + 0x48], rax
xor ebx, ebx
lea rax, [rsp + 0x100]
mov qword [rax], rbx
mov qword [rax + 8], 8
mov qword [rax + 0x10], rbx
lea rax, [rsp + 0x1e0]
mov qword [rax], rbx
lea rax, [rsp + 0xfc]
mov dword [rax], ebx
lea rax, [rsp + 0x140]
mov dword [rax], ebx
lea rax, [rsp + 0x144]
mov dword [rax], ebx
lea r12, [rsp + 0x250]
lea rax, [rsp + 0x144]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x140]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0xfc]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xffffffff
xor ecx, ecx
xor edx, edx
mov r8d, 2
lea r9, [rsp + 0x1e0]
call sub.netapi32.dll_NetUserEnum
mov dword [rsp + 0x50], eax
test eax, eax
je 0x1400c2296
cmp dword [rsp + 0x50], 0xea
jne 0x1400c250f
mov rsi, qword [rsp + 0x1e0]
mov eax, dword [rsp + 0xfc]
test rax, rax
je 0x1400c2517
lea rbp, [rsi + rax*8]
mov rdx, qword [rsi]
test rdx, rdx
je 0x1400c2502
mov qword [rsp + 0xb0], 0
mov dword [rsp + 0x218], ebx
mov dword [rsp + 0x148], ebx
lea rax, [rsp + 0x148]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x218]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0xffffffff
lea rcx, [0x14013d5f0]
xor r8d, r8d
mov r9d, 1
call sub.netapi32.dll_NetUserGetLocalGroups
test eax, eax
je 0x1400c234e
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], 8
mov qword [rsp + 0x70], rbx
mov rcx, qword [rsp + 0xb0]
test rcx, rcx
je 0x1400c242e
call sub.netapi32.dll_NetApiBufferFree
jmp 0x1400c242e
mov r15d, dword [rsp + 0x218]
test r15, r15
je 0x1400c2381
lea rax, [r15*8]
lea rdi, [rax + rax*2]
mov edx, 8
mov rcx, rdi
call fcn.1400430d0
mov r14, rax
test rax, rax
jne 0x1400c2387
jmp 0x1400c2990
mov r14d, 8
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], 0
mov rcx, qword [rsp + 0xb0]
test rcx, rcx
je 0x1400c242e
mov r15d, dword [rsp + 0x218]
test r15, r15
je 0x1400c2344
xor edi, edi
xor r13d, r13d
mov rax, qword [rsp + 0xb0]
test rax, rax
je 0x1400c242e
mov rdx, qword [rax + r13*8]
inc r13
mov rcx, r12
call fcn.1400ba4a4
cmp rdi, qword [rsp + 0x60]
jne 0x1400c23f7
lea rcx, [rsp + 0x60]
mov rdx, rdi
call fcn.1400ba8c1
mov r14, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x70]
lea rax, [rdi + rdi*2]
mov rcx, qword [rsp + 0x260]
mov qword [r14 + rax*8 + 0x10], rcx
movdqu xmm0, xmmword [rsp + 0x250]
movdqu xmmword [r14 + rax*8], xmm0
mov rdi, qword [rsp + 0x70]
inc rdi
mov qword [rsp + 0x70], rdi
cmp r15, r13
jne 0x1400c23bd
jmp 0x1400c2333
mov rdx, qword [rsi]
lea rcx, [rsp + 0xb0]
call fcn.1400ba4a4
mov rdx, qword [rsp + 0xb8]
mov r8, qword [rsp + 0xc0]
mov rcx, r12
call fcn.140043f30
mov rdi, qword [rsp + 0x260]
cmp qword [rsp + 0x250], rdi
jbe 0x1400c247b
mov rcx, r12
mov rdx, rdi
call fcn.1400ba500
mov rdi, qword [rsp + 0x260]
mov r14, qword [rsp + 0x258]
mov rdx, qword [rsp + 0x110]
cmp rdx, qword [rsp + 0x100]
jne 0x1400c24aa
lea rcx, [rsp + 0x100]
call fcn.1400bd8af
mov rdx, qword [rsp + 0x110]
mov rax, qword [rsp + 0x108]
lea rcx, [rdx + rdx*8]
mov qword [rax + rcx*8], r14
mov qword [rax + rcx*8 + 8], rdi
movups xmm0, xmmword [rsp + 0xb0]
movups xmmword [rax + rcx*8 + 0x10], xmm0
mov r8, qword [rsp + 0xc0]
mov qword [rax + rcx*8 + 0x20], r8
movdqu xmm0, xmmword [rsp + 0x60]
movdqu xmmword [rax + rcx*8 + 0x28], xmm0
mov r8, qword [rsp + 0x70]
mov qword [rax + rcx*8 + 0x38], r8
mov dword [rax + rcx*8 + 0x40], 0
inc rdx
mov qword [rsp + 0x110], rdx
add rsi, 8
cmp rsi, rbp
jne 0x1400c22b2
mov rsi, qword [rsp + 0x1e0]
test rsi, rsi
je 0x1400c2530
mov rcx, rsi
call sub.netapi32.dll_NetApiBufferFree
mov qword [rsp + 0x1e0], 0
cmp dword [rsp + 0x50], 0xea
je 0x1400c223a
lea rcx, [rsp + 0x218]
mov dword [rcx], 0
lea rdx, [rsp + 0x148]
mov qword [rdx], 0
call sub.secur32.dll_LsaEnumerateLogonSessions
test eax, eax
mov r14, qword [rsp + 0x40]
je 0x1400c26ad
mov rdi, qword [r14 + 0x198]
test rdi, rdi
je 0x1400c25c8
mov rsi, qword [r14 + 0x190]
add rsi, 0x28
mov rbx, qword [sym.imp.kernel32.dll_HeapFree]
cmp qword [rsi - 0x20], 0
je 0x1400c25a1
mov r8, qword [rsi - 0x28]
mov rcx, qword [0x140154958]
xor edx, edx
call rbx
cmp qword [rsi - 0x18], 0
je 0x1400c25b7
mov r8, qword [rsi - 0x10]
mov rcx, qword [0x140154958]
xor edx, edx
call rbx
mov rcx, rsi
call fcn.1400b89c1
add rsi, 0x48
dec rdi
jne 0x1400c258b
mov rsi, qword [rsp + 0x48]
cmp qword [rsi], 0
je 0x1400c25e9
mov r8, qword [r14 + 0x190]
mov rcx, qword [0x140154958]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
mov rax, qword [rsp + 0x110]
mov qword [rsi + 0x10], rax
movdqu xmm0, xmmword [rsp + 0x100]
movdqu xmmword [rsi], xmm0
movaps xmm6, xmmword [rsp + 0x7a0]
movaps xmm7, xmmword [rsp + 0x7b0]
movaps xmm8, xmmword [rsp + 0x7c0]
add rsp, 0x7d8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
cmp byte [rsi + 8], 0
je 0x1400c21d4
mov rax, qword [r12 + 0x180]
test rax, rax
je 0x1400c21d4
mov rdi, qword [r12 + 0x178]
shl rax, 4
lea rbx, [rax + rax*8]
xor r14d, r14d
lea rsi, [rsp + 0x250]
cmp qword [rdi + r14 + 0x30], 0
je 0x1400c269c
mov qword [rsp + 0x250], 0
mov rcx, qword [rdi + r14 + 0x60]
xor edx, edx
xor r8d, r8d
mov r9, rsi
call sub.kernel32.dll_GetDiskFreeSpaceExW
test eax, eax
je 0x1400c269c
mov rax, qword [rsp + 0x250]
mov qword [rdi + r14 + 0x38], rax
add r14, 0x90
cmp rbx, r14
jne 0x1400c2665
jmp 0x1400c21d4
mov ebp, dword [rsp + 0x218]
test rbp, rbp
je 0x1400c256d
lea rsi, [rsp + 0x60]
xor edi, edi
mov rcx, rdi
inc rdi
shl rcx, 3
add rcx, qword [rsp + 0x148]
mov qword [rsp + 0x60], 0
mov rdx, rsi
call sub.secur32.dll_LsaGetLogonSessionData
test eax, eax
je 0x1400c26fc
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1400c270c
call sub.secur32.dll_LsaFreeReturnBuffer
jmp 0x1400c270c
mov rax, qword [rsp + 0x60]
test rax, rax
je 0x1400c270c
cmp dword [rax + 0x40], 3
jne 0x1400c2716
cmp rdi, rbp
jne 0x1400c26c4
jmp 0x1400c256d
mov rdx, qword [rax + 0x18]
lea rcx, [rsp + 0xb0]
call fcn.1400ba4a4
mov rbx, qword [rsp + 0x108]
mov r15, qword [rsp + 0x110]
test r15, r15
je 0x1400c2784
mov r12, qword [rsp + 0xb8]
mov r13, qword [rsp + 0xc0]
lea rax, [r15*8]
lea r14, [rax + rax*8]
xor esi, esi
cmp qword [rbx + rsi + 0x20], r13
jne 0x1400c2779
mov rcx, qword [rbx + rsi + 0x18]
mov rdx, r12
mov r8, r13
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400c2861
add rsi, 0x48
cmp r14, rsi
jne 0x1400c275a
jmp 0x1400c2794
mov r12, qword [rsp + 0xb8]
mov r13, qword [rsp + 0xc0]
lea rsi, [rsp + 0x250]
mov rcx, rsi
mov rdx, r12
mov r8, r13
call fcn.140043f30
mov r12, qword [rsp + 0x260]
cmp qword [rsp + 0x250], r12
jbe 0x1400c27cf
mov rcx, rsi
mov rdx, r12
call fcn.1400ba500
mov r12, qword [rsp + 0x260]
mov rsi, qword [rsp + 0x258]
cmp r15, qword [rsp + 0x100]
jne 0x1400c2801
lea rcx, [rsp + 0x100]
mov rdx, r15
call fcn.1400bd8af
mov rbx, qword [rsp + 0x108]
mov r15, qword [rsp + 0x110]
lea rax, [r15 + r15*8]
mov qword [rbx + rax*8], rsi
mov qword [rbx + rax*8 + 8], r12
movdqu xmm0, xmmword [rsp + 0xb0]
movdqu xmmword [rbx + rax*8 + 0x10], xmm0
mov rcx, qword [rsp + 0xc0]
mov qword [rbx + rax*8 + 0x20], rcx
xor ecx, ecx
mov qword [rbx + rax*8 + 0x28], rcx
mov qword [rbx + rax*8 + 0x30], 8
mov qword [rbx + rax*8 + 0x38], rcx
mov dword [rbx + rax*8 + 0x40], 0
inc r15
mov qword [rsp + 0x110], r15
mov r14, qword [rsp + 0x40]
lea rsi, [rsp + 0x60]
jmp 0x1400c26eb
cmp qword [rsp + 0xb0], 0
je 0x1400c287e
mov rcx, qword [0x140154958]
xor edx, edx
mov r8, r12
call qword [sym.imp.kernel32.dll_HeapFree]
mov r14, qword [rsp + 0x40]
lea rsi, [rsp + 0x60]
jmp 0x1400c270c
mov rcx, qword [rsp + 0x60]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
jmp 0x1400c1fab
lea rcx, [rsp + 0x148]
xor edx, edx
call fcn.14011253d
jmp 0x1400c2093
lea r15, [rsp + 0x220]
movd xmm6, dword [rsp + 0x60]
movd xmm7, dword [rsp + 0x68]
mov esi, 8
mov ecx, 8
call fcn.1400c2e62
mov rdi, rax
movabs rax, 0x72657475706d6f43
mov qword [rdx], rax
mov r14, qword [r15 - 8]
movups xmm0, xmmword [r15]
movdqu xmm1, xmmword [r15 + 0x10]
movdqu xmm2, xmmword [r15 + 0x20]
movdqa xmmword [rsp + 0xd0], xmm2
movdqa xmmword [rsp + 0xc0], xmm1
movaps xmmword [rsp + 0xb0], xmm0
cmp r14, 3
je 0x1400c0863
mov rbx, rdx
mov ecx, 0x60
mov edx, 8
call fcn.1400430d0
test rax, rax
je 0x1400c2a10
mov rsi, rax
mov qword [rax], rdi
mov qword [rax + 8], rbx
mov qword [rax + 0x10], 8
mov dword [rax + 0x18], ebp
movd dword [rax + 0x1c], xmm7
mov qword [rax + 0x20], r14
movaps xmm0, xmmword [rsp + 0xb0]
movdqa xmm1, xmmword [rsp + 0xc0]
movdqa xmm2, xmmword [rsp + 0xd0]
movups xmmword [rax + 0x28], xmm0
movdqu xmmword [rax + 0x38], xmm1
movdqu xmmword [rax + 0x48], xmm2
movd dword [rax + 0x58], xmm6
movd dword [rax + 0x5c], xmm6
mov ebx, 1
jmp 0x1400c0865
mov edx, 8
mov rcx, rdi
call fcn.14010bac0
ud2
lea rcx, str.key_used_disappeared
lea r8, [0x14013d598]
mov edx, 0x14
call fcn.14010c210
ud2
mov ecx, 0x14
mov edx, 2
jmp 0x1400c2998
mov ecx, 0x54410
mov edx, 0x10
call fcn.140063670
ud2
mov ecx, 0x120
mov edx, 8
jmp 0x1400c2998
lea rax, str.C:Users_runneradmin.cargo_registry_srcindex.crates.io_6f17d22bba15001f_sysinfo_0.27.8_srcwindows_network.rs
mov edx, 0x101
mov rcx, r8
mov r8, rax
call fcn.14010bf40
ud2
lea rcx, str.global_key_idle_disappearedC:Users_runneradmin.cargo_registry_srcindex.crates.io_6f17d22bba15001f_sysinfo_0.27.8_srcwindows_system.rs
lea r8, [0x14013d568]
mov edx, 0x1b
jmp 0x1400c29b2
mov ecx, 0x60
jmp 0x1400c29db