Function at 0x140045c70
Capabilities:
Connect to wmi namespace via wbemlocator
Get disk information
Get disk size
Get local ipv4 addresses
Get logon sessions
Get memory capacity
List groups for user account
List user accounts

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x468
movaps xmmword [rsp + 0x450], xmm9
movdqa xmmword [rsp + 0x440], xmm8
movdqa xmmword [rsp + 0x430], xmm7
movdqa xmmword [rsp + 0x420], xmm6
mov rbp, rdx
mov qword [rsp + 0x278], rcx
call fcn.140043220
test rax, rax
je 0x1400489c0
movdqu xmm6, xmmword [rax]
inc qword [rax]
movzx eax, byte [0x1401b51a8]
mov edx, 0x56410
xor ecx, ecx
call fcn.14003e800
test rax, rax
je 0x1400489f9
mov rsi, rax
add rsi, 0x56000
mov r8d, 0x410
mov rcx, rsi
mov dl, 0xff
call sub.msvcrt.dll_memset
movzx eax, byte [0x1401b51a8]
mov edx, 9
xor ecx, ecx
call fcn.14003e800
test rax, rax
je 0x140048a03
mov r14, rax
movabs rax, 0x5043206c61746f54
mov qword [r14], rax
mov byte [r14 + 8], 0x55
movzx eax, byte [0x1401b51a8]
mov edx, 0x120
xor ecx, ecx
call fcn.14003e800
test rax, rax
je 0x140048a12
mov rbx, rax
call fcn.140043220
test rax, rax
je 0x1400489c0
movdqu xmm8, xmmword [rax]
inc qword [rax]
mov qword [rsp + 0x280], 0
mov rax, qword [0x140056068]
lea rcx, [rsp + 0x280]
call rax
mov rax, qword [rsp + 0x280]
movabs rcx, 0x19db1ded53e8000
cmp rax, rcx
jl 0x140045dde
movabs rcx, 0xfe624e212ac18000
add rax, rcx
movabs rcx, 0xd6bf94d5e57a42bd
mul rcx
mov r15, rdx
shr r15, 0x17
call sub.KERNEL32.dll_GetTickCount64
shr rax, 3
movabs rcx, 0x20c49ba5e353f7cf
mul rcx
shr rdx, 4
xor eax, eax
sub r15, rdx
cmovae rax, r15
jmp 0x140045de0
xor eax, eax
movabs rcx, 0x8000000000000000
mov qword [rsp + 0x358], rsi
mov qword [rsp + 0x360], 0x3ff
mov qword [rsp + 0x368], 0x380
mov qword [rsp + 0x370], 0
movdqu xmmword [rsp + 0x378], xmm6
xorps xmm9, xmm9
movups xmmword [rsp + 0x3b8], xmm9
movups xmmword [rsp + 0x3c8], xmm9
mov qword [rsp + 0x280], 9
mov qword [rsp + 0x288], r14
mov qword [rsp + 0x290], 9
mov qword [rsp + 0x298], 0
mov qword [rsp + 0x2a0], 1
movups xmmword [rsp + 0x2a8], xmm9
mov qword [rsp + 0x2b8], 1
mov qword [rsp + 0x2c0], 0
mov qword [rsp + 0x2c8], rcx
mov qword [rsp + 0x2e0], 0
mov dword [rsp + 0x2e8], 0
mov qword [rsp + 0x2f0], 0
mov qword [rsp + 0x2f8], 8
mov qword [rsp + 0x300], 0
mov byte [rsp + 0x308], 0
mov qword [rsp + 0x310], 0
mov qword [rsp + 0x318], 8
mov qword [rsp + 0x320], 0
mov qword [rsp + 0x328], 2
mov qword [rsp + 0x330], rbx
mov qword [rsp + 0x338], 0
mov qword [rsp + 0x3d8], 0
movdqu xmm6, xmmword [0x1401ad7d0]
movdqu xmmword [rsp + 0x398], xmm6
movdqu xmm7, xmmword [0x1401ad7c0]
movdqu xmmword [rsp + 0x388], xmm7
movdqu xmmword [rsp + 0x3a8], xmm8
mov qword [rsp + 0x418], rax
mov qword [rsp + 0x340], 0
mov qword [rsp + 0x348], 8
mov qword [rsp + 0x350], 0
cmp byte [rbp + 4], 0
je 0x140046091
movaps xmmword [rsp + 0x100], xmm9
movaps xmmword [rsp + 0x130], xmm9
movaps xmmword [rsp + 0x120], xmm9
movaps xmmword [rsp + 0x110], xmm9
mov dword [rsp + 0x100], 0x40
lea rcx, [rsp + 0x100]
call sub.KERNEL32.dll_GlobalMemoryStatusEx
movdqu xmm0, xmmword [rsp + 0x108]
movdqu xmmword [rsp + 0x3b8], xmm0
movaps xmmword [rsp + 0xe0], xmm9
movaps xmmword [rsp + 0xd0], xmm9
movaps xmmword [rsp + 0xc0], xmm9
movaps xmmword [rsp + 0xb0], xmm9
movaps xmmword [rsp + 0xa0], xmm9
movaps xmmword [rsp + 0x90], xmm9
mov qword [rsp + 0xf0], 0
lea rcx, [rsp + 0x90]
mov edx, 0x68
call sub.PSAPI.DLL_GetPerformanceInfo
cmp eax, 1
jne 0x140046091
mov rdx, qword [rsp + 0xa0]
mov r9, qword [rsp + 0xb0]
xor r10d, r10d
sub rdx, r9
cmovb rdx, r10
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
mul rdx
mov r8, rax
mov r11, 0xffffffffffffffff
cmovo r8, r11
mov rdx, qword [rsp + 0x98]
sub rdx, r9
cmovb rdx, r10
mov rax, rcx
mul rdx
cmovo rax, r11
mov qword [rsp + 0x3c8], r8
mov qword [rsp + 0x3d0], rax
cmp byte [rbp + 0xb], 2
je 0x1400460ab
movzx edx, byte [rbp + 0xc]
and dl, 1
lea rcx, [rsp + 0x280]
call fcn.140048b10
cmp byte [rbp + 6], 0
mov qword [rsp + 0x148], rbp
je 0x14004644b
xor ecx, ecx
xor edx, edx
call sub.ole32.dll_CoInitializeEx
mov esi, eax
cmp eax, 2
setb bl
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 0
xor ecx, ecx
mov edx, 0xffffffff
xor r8d, r8d
xor r9d, r9d
call sub.ole32.dll_CoInitializeSecurity
test eax, eax
js 0x14004637d
mov qword [rsp + 0x68], 0
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea rcx, [0x1401ad898]
lea r9, [0x1401ad8a8]
xor edx, edx
mov r8d, 1
call sub.ole32.dll_CoCreateInstance
test eax, eax
js 0x14004637d
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x100], 1
mov qword [rsp + 0x108], rax
mov qword [rsp + 0x110], 0
mov qword [rsp + 0x120], 0
mov byte [rsp + 0x130], bl
lea rcx, [rsp + 0x150]
lea rdx, [rsp + 0x100]
call fcn.140043840
mov r15, qword [rsp + 0x150]
cmp r15, 2
je 0x140046387
mov rsi, qword [rsp + 0x158]
mov r12, qword [rsp + 0x160]
mov rbx, qword [rsp + 0x168]
mov r13, qword [rsp + 0x170]
mov r14, qword [rsp + 0x178]
movzx edi, byte [rsp + 0x180]
test r12, r12
je 0x140047355
mov dword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
mov rcx, rbx
mov edx, 0xa
xor r8d, r8d
xor r9d, r9d
call sub.ole32.dll_CoSetProxyBlanket
test eax, eax
js 0x140047355
lea rax, [rsp + 0x181]
mov ecx, dword [rax]
mov eax, dword [rax + 3]
mov dword [rsp + 0xc4], eax
mov dword [rsp + 0xc1], ecx
mov qword [rsp + 0x90], r15
mov qword [rsp + 0x98], rsi
mov qword [rsp + 0xa0], r12
mov qword [rsp + 0xa8], rbx
mov qword [rsp + 0xb0], r13
mov qword [rsp + 0xb8], r14
mov byte [rsp + 0xc0], dil
lea rcx, [rsp + 0x198]
lea rdx, [rsp + 0x90]
call fcn.140043980
mov rax, qword [rsp + 0x198]
cmp rax, 2
je 0x140046387
movdqu xmm0, xmmword [rsp + 0x1a0]
movdqu xmm1, xmmword [rsp + 0x1b0]
movdqu xmm2, xmmword [rsp + 0x1c0]
movdqu xmmword [rsp + 0x1f8], xmm2
movdqu xmmword [rsp + 0x1e8], xmm1
movdqu xmmword [rsp + 0x1d8], xmm0
mov qword [rsp + 0x1d0], rax
lea rcx, [rsp + 0x150]
lea rdx, [rsp + 0x1d0]
mov r8b, 1
call fcn.140043ad0
mov r13, qword [rsp + 0x1d0]
mov r12, qword [rsp + 0x1d8]
mov rbp, qword [rsp + 0x1e0]
mov r14, qword [rsp + 0x1e8]
mov rbx, qword [rsp + 0x1f0]
mov r15, qword [rsp + 0x1f8]
movzx esi, byte [rsp + 0x200]
mov edi, dword [rsp + 0x154]
cmp edi, 2
jne 0x140047703
test rbx, rbx
je 0x140046347
test r15, r15
je 0x140046347
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x10]
test rbp, rbp
je 0x14004635a
test r14, r14
je 0x14004635a
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
test r13, r13
mov rbp, qword [rsp + 0x148]
je 0x140046376
test r12, r12
je 0x140046376
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
test sil, sil
jne 0x140046382
jmp 0x140046387
cmp esi, 2
jae 0x140046387
call sub.ole32.dll_CoUninitialize
mov esi, 8
xor edi, edi
mov rbx, qword [rsp + 0x318]
mov r14, qword [rsp + 0x320]
test r14, r14
je 0x140047821
mov r15, rbx
jmp 0x1400463bd
add r15, 0x60
dec r14
je 0x140047821
cmp qword [r15 + 0x38], 0
je 0x1400463d6
mov r8, qword [r15 + 0x40]
mov rcx, qword [0x1401b5178]
xor edx, edx
call fcn.140053cc4
mov r12, qword [r15]
cmp r12, 2
je 0x1400463b0
mov rcx, qword [r15 + 0x28]
cmp qword [r15 + 0x20], 0
mov qword [r15 + 0x20], 0
je 0x1400463fd
test rcx, rcx
je 0x1400463fd
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [r15 + 0x18]
cmp qword [r15 + 0x10], 0
mov qword [r15 + 0x10], 0
je 0x14004641b
test rcx, rcx
je 0x14004641b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [r15 + 8]
mov qword [r15], 0
test r12, r12
je 0x140046436
test rcx, rcx
je 0x140046436
mov rax, qword [rcx]
call qword [rax + 0x10]
cmp byte [r15 + 0x30], 0
je 0x1400463b0
call sub.ole32.dll_CoUninitialize
jmp 0x1400463b0
cmp byte [rbp + 5], 0
je 0x140046482
mov rax, qword [rsp + 0x320]
test rax, rax
je 0x140046482
mov rcx, qword [rsp + 0x318]
shl rax, 5
lea rsi, [rax + rax*2]
nop
lea rdi, [rcx + 0x60]
call fcn.1400434f0
mov rcx, rdi
add rsi, 0xffffffffffffffa0
jne 0x140046470
cmp byte [rbp + 1], 0
je 0x14004785f
mov qword [rsp + 0x198], 0
lea rcx, [rsp + 0x198]
call sub.IPHLPAPI.DLL_GetIfTable2
test eax, eax
jne 0x14004787a
mov rax, qword [rsp + 0x3a0]
test rax, rax
je 0x140046542
mov rcx, qword [rsp + 0x388]
lea rdx, [rcx + 0x10]
movdqa xmm0, xmmword [rcx]
pmovmskb r8d, xmm0
not r8d
jmp 0x14004650b
tzcnt r9d, r8d
mov r10, r9
neg r10
shl r9, 3
shl r10, 7
sub r10, r9
lea r9d, [r8 - 1]
and r9d, r8d
mov byte [rcx + r10 - 2], 0
mov r8d, r9d
dec rax
je 0x140046542
test r8w, r8w
jne 0x1400464e0
nop word cs:[rax + rax]
movdqa xmm0, xmmword [rdx]
pmovmskb r8d, xmm0
add rcx, 0xfffffffffffff780
add rdx, 0x10
cmp r8d, 0xffff
je 0x140046520
not r8d
jmp 0x1400464e0
call fcn.140043220
test rax, rax
je 0x1400489c0
movdqa xmmword [rsp + 0xa0], xmm6
movdqa xmmword [rsp + 0x90], xmm7
movdqu xmm0, xmmword [rax]
inc qword [rax]
movdqa xmmword [rsp + 0xb0], xmm0
mov qword [rsp + 0x150], 0
mov qword [rsp + 0x158], 8
mov qword [rsp + 0x160], 0
mov rax, qword [rsp + 0x198]
mov ebp, dword [rax]
test rbp, rbp
je 0x140047074
mov qword [rsp + 0x190], rax
lea rbx, [rax + 8]
lea r13, [0x1401ad7b0]
xor esi, esi
pxor xmm6, xmm6
pcmpeqd xmm7, xmm7
mov qword [rsp + 0x78], rbx
jmp 0x1400465fc
mov rcx, qword [0x1401b5178]
xor edx, edx
mov r8, r14
call fcn.140053cc4
mov rbx, qword [rsp + 0x78]
nop word cs:[rax + rax]
inc rsi
cmp rsi, rbp
je 0x140046921
imul rdi, rsi, 0x548
cmp qword [rbx + rdi + 0x4a8], 0
jne 0x140046619
cmp qword [rbx + rdi + 0x4b0], 0
je 0x1400465f0
cmp dword [rbx + rdi + 0x48c], 2
je 0x1400465f0
cmp dword [rbx + rdi + 0x420], 0
je 0x1400465f0
movzx eax, byte [0x1401b51a8]
mov edx, 0x14
xor ecx, ecx
call fcn.14003e800
test rax, rax
je 0x1400489b1
mov r14, rax
mov eax, dword [rbx + rdi + 0x10]
movq xmm0, qword [rbx + rdi + 0x14]
punpcklbw xmm0, xmm6
mov dword [r14], eax
movdqu xmmword [r14 + 4], xmm0
movzx eax, byte [0x1401b51a8]
mov edx, 0x14
xor ecx, ecx
call fcn.14003e800
test rax, rax
je 0x1400489b1
mov r15, rax
mov eax, dword [r14 + 0x10]
mov dword [r15 + 0x10], eax
movups xmm0, xmmword [r14]
movups xmmword [r15], xmm0
mov rcx, qword [rsp + 0xb0]
mov rdx, qword [rsp + 0xb8]
mov r9d, 0xa
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x58], rdx
mov r8, r15
call fcn.140043ff0
mov r12, rax
mov rax, qword [rsp + 0x98]
mov rdi, r12
shr rdi, 0x39
movd xmm0, edi
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
xor ecx, ecx
mov rdx, r12
and rdx, rax
movdqu xmm1, xmmword [r13 + rdx]
movdqa xmm2, xmm1
pcmpeqb xmm2, xmm0
pmovmskb r8d, xmm2
test r8d, r8d
jne 0x140046730
pcmpeqb xmm1, xmm7
pmovmskb r8d, xmm1
test r8d, r8d
jne 0x140046807
add rdx, rcx
add rdx, 0x10
add rcx, 0x10
jmp 0x1400466e3
lea r9d, [r8 - 1]
and r9d, r8d
mov r8d, r9d
test r9w, r9w
je 0x1400466ff
tzcnt r9d, r8d
add r9, rdx
and r9, rax
shl r9, 5
mov rbx, r13
sub rbx, r9
cmp qword [rbx - 0x10], 0xa
jne 0x140046720
mov r9, qword [rbx - 0x18]
movdqu xmm2, xmmword [r9]
movdqu xmm3, xmmword [r15]
pcmpeqb xmm3, xmm2
movd xmm2, dword [r9 + 0x10]
movd xmm4, dword [r15 + 0x10]
pcmpeqb xmm4, xmm2
pand xmm4, xmm3
pmovmskb r9d, xmm4
cmp r9d, 0xffff
jne 0x140046720
mov rcx, qword [0x1401b5178]
xor edx, edx
mov r8, r15
call fcn.140053cc4
mov eax, dword [rbx - 8]
inc eax
mov dword [rbx - 8], eax
cmp eax, 1
jg 0x1400465cd
mov rbx, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x160]
cmp rdx, qword [rsp + 0x150]
jne 0x1400467ce
lea rcx, [rsp + 0x150]
call fcn.140045490
mov rdx, qword [rsp + 0x160]
mov rax, qword [rsp + 0x158]
mov rcx, rdx
shl rcx, 5
mov dword [rax + rcx], esi
mov qword [rax + rcx + 8], 0xa
mov qword [rax + rcx + 0x10], r14
mov qword [rax + rcx + 0x18], 0xa
inc rdx
mov qword [rsp + 0x160], rdx
jmp 0x1400465f0
cmp qword [rsp + 0xa0], 0
je 0x1400468fd
mov r13, qword [rsp + 0x90]
and r12, rax
movdqu xmm0, xmmword [r13 + r12]
pmovmskb ecx, xmm0
test ecx, ecx
je 0x140046837
mov rbx, qword [rsp + 0x78]
jmp 0x140046869
mov edx, 0x10
mov rbx, qword [rsp + 0x78]
nop word cs:[rax + rax]
add r12, rdx
and r12, rax
movdqu xmm0, xmmword [r13 + r12]
pmovmskb ecx, xmm0
add rdx, 0x10
test ecx, ecx
je 0x140046850
tzcnt ecx, ecx
add rcx, r12
and rcx, rax
movzx edx, byte [r13 + rcx]
test dl, dl
js 0x140046891
movdqa xmm0, xmmword [r13]
pmovmskb ecx, xmm0
tzcnt ecx, ecx
movzx edx, byte [r13 + rcx]
lea r8, [rcx - 0x10]
and r8, rax
mov byte [r13 + rcx], dil
mov byte [r8 + r13 + 0x10], dil
shl rcx, 5
mov rax, r13
sub rax, rcx
and dl, 1
movzx edx, dl
sub qword [rsp + 0xa0], rdx
mov qword [rax - 0x20], 0xa
mov qword [rax - 0x18], r15
mov qword [rax - 0x10], 0xa
neg rcx
inc qword [rsp + 0xa8]
mov dword [r13 + rcx - 8], 1
mov rdx, qword [rsp + 0x160]
cmp rdx, qword [rsp + 0x150]
je 0x1400467b9
jmp 0x1400467ce
lea rcx, [rsp + 0x90]
mov rdx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x58]
call fcn.140044c70
mov rax, qword [rsp + 0x98]
jmp 0x140046816
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x228], rax
mov rcx, qword [rsp + 0x158]
mov rax, qword [rsp + 0x160]
mov rdi, rax
shl rdi, 5
add rdi, rcx
mov qword [rsp + 0x208], rcx
mov rbx, rcx
test rax, rax
je 0x140047016
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x270], rax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x268], rax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x260], rax
mov r14, qword [rsp + 0x90]
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x60], rax
mov rsi, qword [rsp + 0x190]
add rsi, 0x2a
pcmpeqd xmm6, xmm6
mov rbx, qword [rsp + 0x208]
mov qword [rsp + 0x190], rsi
mov qword [rsp + 0x220], rdi
jmp 0x1400469ef
test rbp, rbp
je 0x1400469e6
mov rcx, qword [0x1401b5178]
xor edx, edx
mov r8, r15
call fcn.140053cc4
cmp rbx, rdi
je 0x140047053
mov rax, rbx
add rbx, 0x20
mov rbp, qword [rax + 8]
movabs rcx, 0x8000000000000000
cmp rbp, rcx
je 0x140047016
mov edx, dword [rax]
mov r15, qword [rax + 0x10]
cmp qword [rsp + 0x270], 0
je 0x140046b40
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x88], rbp
mov qword [rsp + 0x80], rbx
mov rsi, qword [rax + 0x18]
mov rcx, qword [rsp + 0x268]
mov rdx, qword [rsp + 0x260]
mov rbp, r15
mov r8, r15
mov r9, rsi
call fcn.140043ff0
mov rbx, rax
shr rax, 0x39
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
lea r15, [rsi + rsi]
xor r12d, r12d
mov rcx, qword [rsp + 0x60]
and rbx, rcx
movdqu xmm8, xmmword [r14 + rbx]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb edi, xmm0
test edi, edi
jne 0x140046acc
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x140046e1a
add rbx, r12
add rbx, 0x10
add r12, 0x10
jmp 0x140046a7e
lea eax, [rdi - 1]
and eax, edi
mov edi, eax
test ax, ax
je 0x140046a98
tzcnt eax, edi
add rax, rbx
and rax, rcx
shl rax, 5
mov r13, r14
sub r13, rax
cmp qword [r13 - 0x10], rsi
jne 0x140046ac0
mov rdx, qword [r13 - 0x18]
mov rcx, rbp
mov r8, r15
call sub.msvcrt.dll_memcmp
mov rcx, qword [rsp + 0x60]
test eax, eax
jne 0x140046ac0
lea rax, [r13 - 0x20]
test r13, r13
cmove rax, r13
mov rsi, qword [rsp + 0x190]
mov rdi, qword [rsp + 0x220]
mov rbx, qword [rsp + 0x80]
mov r15, rbp
mov rbp, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x58]
jmp 0x140046b42
xor eax, eax
lea rcx, [rax + 0x18]
test rax, rax
lea rax, [0x1401adb00]
cmove rcx, rax
cmp dword [rcx], 1
jg 0x1400469d0
imul r12, rdx, 0x548
mov rax, qword [rsp + 0x78]
lea r13, [rax + r12]
lea rdx, [rax + r12]
add rdx, 0x1c
lea rax, [rsi + r12]
xor r8d, r8d
cmp word [rax + r8*2 - 6], 0
je 0x140046bd9
nop word cs:[rax + rax]
cmp r8, 0x100
je 0x140046bc2
cmp word [rax + r8*2 - 4], 0
je 0x140046bca
cmp word [rax + r8*2 - 2], 0
je 0x140046bcf
cmp word [rax + r8*2], 0
je 0x140046bd5
add r8, 4
cmp word [rax + r8*2 - 6], 0
jne 0x140046b90
jmp 0x140046bd9
mov r8d, 0x101
jmp 0x140046be6
inc r8
jmp 0x140046bd9
add r8, 2
jmp 0x140046bd9
add r8, 3
cmp r8, 0x102
jae 0x140048a85
lea rcx, [rsp + 0x100]
call fcn.140006d20
mov rcx, qword [rsp + 0x100]
movabs rax, 0x8000000000000000
cmp rcx, rax
je 0x1400469d0
mov qword [rsp + 0x250], r13
mov qword [rsp + 0x210], r12
mov qword [rsp + 0x218], rcx
mov qword [rsp + 0x88], rbp
mov qword [rsp + 0x258], r15
mov qword [rsp + 0x80], rbx
mov r8, qword [rsp + 0x108]
mov r12, qword [rsp + 0x110]
mov rcx, qword [rsp + 0x3a8]
mov rdx, qword [rsp + 0x3b0]
mov qword [rsp + 0x238], rcx
mov qword [rsp + 0x230], rdx
mov rbp, r8
mov r9, r12
call fcn.140043e60
mov rsi, rax
mov rbx, qword [rsp + 0x388]
mov r15, qword [rsp + 0x390]
shr rax, 0x39
mov qword [rsp + 0x248], rax
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
xor eax, eax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x240], rsi
and rsi, r15
movdqu xmm8, xmmword [rbx + rsi]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb r13d, xmm0
test r13d, r13d
jne 0x140046d0f
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x140046e22
mov rax, qword [rsp + 0x58]
add rsi, rax
add rsi, 0x10
add rax, 0x10
mov qword [rsp + 0x58], rax
jmp 0x140046cb9
lea eax, [r13 - 1]
and eax, r13d
mov r13d, eax
test ax, ax
je 0x140046cd5
tzcnt eax, r13d
add rax, rsi
and rax, r15
mov rdi, rax
neg rdi
shl rax, 3
shl rdi, 7
sub rdi, rax
cmp r12, qword [rbx + rdi - 0x78]
jne 0x140046d00
add rdi, rbx
mov rcx, qword [rdi - 0x80]
mov rdx, rbp
mov r8, r12
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x140046d00
mov rax, qword [rdi - 0x68]
mov rcx, qword [rdi - 0x58]
mov qword [rdi - 0x60], rax
mov rdx, qword [rsp + 0x78]
mov r8, qword [rsp + 0x210]
mov rax, qword [rdx + r8 + 0x500]
mov qword [rdi - 0x68], rax
mov qword [rdi - 0x50], rcx
mov rax, qword [rdx + r8 + 0x4b8]
mov qword [rdi - 0x58], rax
mov rax, qword [rdi - 0x48]
mov qword [rdi - 0x40], rax
mov rax, qword [rdx + r8 + 0x4c0]
add rax, qword [rdx + r8 + 0x4c8]
mov rcx, 0xffffffffffffffff
cmovb rax, rcx
mov qword [rdi - 0x48], rax
mov rax, qword [rdi - 0x38]
mov qword [rdi - 0x30], rax
mov rax, qword [rdx + r8 + 0x508]
add rax, qword [rdx + r8 + 0x510]
cmovb rax, rcx
mov qword [rdi - 0x38], rax
mov rax, qword [rdi - 0x28]
mov qword [rdi - 0x20], rax
mov rax, qword [rdx + r8 + 0x4d8]
mov qword [rdi - 0x28], rax
mov rax, qword [rdi - 0x18]
mov qword [rdi - 0x10], rax
mov rax, qword [rdx + r8 + 0x520]
mov qword [rdi - 0x18], rax
mov byte [rdi - 2], 1
mov rax, qword [rsp + 0x218]
shl rax, 1
test rax, rax
je 0x140046fb0
mov rcx, qword [0x1401b5178]
xor edx, edx
mov r8, rbp
call fcn.140053cc4
jmp 0x140046fb0
xor r13d, r13d
jmp 0x140046afe
cmp qword [rsp + 0x398], 0
mov rdi, qword [rsp + 0x250]
je 0x140046fe4
mov r8, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x210]
mov rax, qword [r8 + rsi + 0x4c0]
add rax, qword [r8 + rsi + 0x4c8]
mov rdx, qword [r8 + rsi + 0x4b8]
mov r9, 0xffffffffffffffff
cmovb rax, r9
mov rcx, qword [r8 + rsi + 0x508]
add rcx, qword [r8 + rsi + 0x510]
cmovb rcx, r9
mov r11, qword [rdi]
mov r10, qword [r8 + rsi + 0x500]
mov r9, qword [r8 + rsi + 0x4d8]
mov r8, qword [r8 + rsi + 0x520]
mov r13, qword [rsp + 0x240]
and r13, r15
movdqu xmm0, xmmword [rbx + r13]
pmovmskb esi, xmm0
test esi, esi
jne 0x140046ed8
mov edi, 0x10
nop word cs:[rax + rax]
add r13, rdi
and r13, r15
movdqu xmm0, xmmword [rbx + r13]
pmovmskb esi, xmm0
add rdi, 0x10
test esi, esi
je 0x140046ec0
tzcnt esi, esi
add rsi, r13
and rsi, r15
movzx edi, byte [rbx + rsi]
test dil, dil
js 0x140046efb
movdqa xmm0, xmmword [rbx]
pmovmskb esi, xmm0
tzcnt esi, esi
movzx edi, byte [rbx + rsi]
lea r13, [rsi - 0x10]
and r13, r15
mov r15, qword [rsp + 0x248]
mov byte [rbx + rsi], r15b
mov byte [r13 + rbx + 0x10], r15b
and dil, 1
movzx edi, dil
sub qword [rsp + 0x398], rdi
mov rdi, rsi
neg rdi
shl rsi, 3
shl rdi, 7
sub rdi, rsi
mov rsi, qword [rsp + 0x218]
mov qword [rbx + rdi - 0x88], rsi
mov qword [rbx + rdi - 0x80], rbp
mov qword [rbx + rdi - 0x78], r12
mov qword [rbx + rdi - 0x70], r11
mov qword [rbx + rdi - 0x68], r10
mov qword [rbx + rdi - 0x60], r10
mov qword [rbx + rdi - 0x58], rdx
mov qword [rbx + rdi - 0x50], rdx
mov qword [rbx + rdi - 0x48], rax
mov qword [rbx + rdi - 0x40], rax
mov qword [rbx + rdi - 0x38], rcx
mov qword [rbx + rdi - 0x30], rcx
mov qword [rbx + rdi - 0x28], r9
mov qword [rbx + rdi - 0x20], r9
mov qword [rbx + rdi - 0x18], r8
mov qword [rbx + rdi - 0x10], r8
mov dword [rbx + rdi - 8], 0
mov word [rbx + rdi - 4], 0
mov byte [rbx + rdi - 2], 1
inc qword [rsp + 0x3a0]
nop dword [rax + rax]
cmp qword [rsp + 0x88], 0
mov rsi, qword [rsp + 0x190]
mov rdi, qword [rsp + 0x220]
mov rbx, qword [rsp + 0x80]
mov r15, qword [rsp + 0x258]
jne 0x1400469d5
jmp 0x1400469e6
lea rcx, [rsp + 0x388]
mov rdx, qword [rsp + 0x238]
mov r8, qword [rsp + 0x230]
call fcn.140044190
mov rbx, qword [rsp + 0x388]
mov r15, qword [rsp + 0x390]
jmp 0x140046e39
sub rdi, rbx
je 0x140047053
shr rdi, 5
add rbx, 0x10
jmp 0x140047039
add rbx, 0x20
dec rdi
je 0x140047053
cmp qword [rbx - 8], 0
je 0x140047030
mov r8, qword [rbx]
mov rcx, qword [0x1401b5178]
xor edx, edx
call fcn.140053cc4
jmp 0x140047030
cmp qword [rsp + 0x228], 0
je 0x140047074
mov rcx, qword [0x1401b5178]
xor edx, edx
mov r8, qword [rsp + 0x208]
call fcn.140053cc4
mov rcx, qword [rsp + 0x198]
call sub.IPHLPAPI.DLL_FreeMibTable
mov rdi, qword [rsp + 0x98]
test rdi, rdi
je 0x140047153
mov rsi, qword [rsp + 0x90]
mov rbx, qword [rsp + 0xa8]
test rbx, rbx
je 0x14004712b
movdqa xmm0, xmmword [rsi]
pmovmskb r12d, xmm0
not r12d
lea r14, [rsi + 0x10]
mov r15, rsi
jmp 0x1400470d0
lea eax, [r12 - 1]
and eax, r12d
mov r12d, eax
dec rbx
je 0x14004712b
test r12w, r12w
jne 0x140047101
nop word cs:[rax + rax]
movdqa xmm0, xmmword [r14]
pmovmskb r12d, xmm0
add r15, 0xfffffffffffffe00
add r14, 0x10
cmp r12d, 0xffff
je 0x1400470e0
not r12d
tzcnt ecx, r12d
shl rcx, 5
mov rax, r15
sub rax, rcx
cmp qword [rax - 0x20], 0
je 0x1400470c0
mov r8, qword [rax - 0x18]
mov rcx, qword [0x1401b5178]
xor edx, edx
call fcn.140053cc4
jmp 0x1400470c0
mov rax, rdi
shl rax, 5
add rdi, rax
cmp rdi, 0xffffffffffffffcf
je 0x140047153
sub rsi, rax
add rsi, 0xffffffffffffffe0
mov rcx, qword [0x1401b5178]
xor edx, edx
mov r8, rsi
call fcn.140053cc4
mov rdi, qword [rsp + 0x390]
mov rsi, qword [rsp + 0x3a0]
test rsi, rsi
je 0x1400472b6
mov rbx, qword [rsp + 0x388]
lea r14, [rbx + 0x10]
movdqa xmm0, xmmword [rbx]
pmovmskb eax, xmm0
not eax
mov r15, qword [rsp + 0x398]
pcmpeqd xmm6, xmm6
mov r13, rbx
mov rbp, rsi
jmp 0x1400471b1
lea eax, [r12 - 1]
and eax, r12d
dec rsi
je 0x1400472b6
test ax, ax
jne 0x1400471dd
nop word cs:[rax + rax]
movdqa xmm0, xmmword [r14]
pmovmskb eax, xmm0
add r13, 0xfffffffffffff780
add r14, 0x10
cmp eax, 0xffff
je 0x1400471c0
not eax
mov r12d, eax
tzcnt ecx, r12d
mov rax, rcx
neg rax
shl rcx, 3
shl rax, 7
sub rax, rcx
cmp byte [r13 + rax - 2], 0
jne 0x1400471a0
add rax, r13
mov rcx, rbx
sub rcx, rax
sar rcx, 3
movabs rdx, 0xf0f0f0f0f0f0f0f1
imul rcx, rdx
lea rdx, [rcx - 0x10]
and rdx, rdi
movdqu xmm0, xmmword [rbx + rdx]
pcmpeqb xmm0, xmm6
psllw xmm0, 7
pmovmskb r8d, xmm0
test r8d, r8d
je 0x140047243
bsr r8w, r8w
xor r8d, 0xf
jmp 0x140047248
mov r8w, 0x10
movdqu xmm0, xmmword [rbx + rcx]
pcmpeqb xmm0, xmm6
pmovmskb r9d, xmm0
or r9d, 0x10000
tzcnt r9d, r9d
add r8d, r9d
mov r9b, pe_nt_image_headers64
cmp r8w, 0xf
ja 0x14004727d
inc r15
mov qword [rsp + 0x398], r15
mov r9b, 0xff
mov byte [rbx + rcx], r9b
mov byte [rdx + rbx + 0x10], r9b
dec rbp
mov qword [rsp + 0x3a0], rbp
cmp qword [rax - 0x88], 0
je 0x1400471a0
mov r8, qword [rax - 0x80]
mov rcx, qword [0x1401b5178]
xor edx, edx
call fcn.140053cc4
jmp 0x1400471a0
mov dword [rsp + 0x68], 0x3c00
mov dword [rsp + 0x1d0], 0
mov ebp, 4
xor esi, esi
lea r14, [rsp + 0x68]
nop word cs:[rax + rax]
dec ebp
je 0x14004739c
mov edx, dword [rsp + 0x68]
mov rcx, rsi
call sub.msvcrt.dll_realloc
test rax, rax
je 0x1400473a6
mov rbx, rax
mov qword [rsp + 0x20], r14
xor ecx, ecx
mov edx, 0xe
xor r8d, r8d
mov r9, rax
call sub.IPHLPAPI.DLL_GetAdaptersAddresses
mov dword [rsp + 0x1d0], eax
mov rsi, rbx
cmp eax, 0x6f
je 0x1400472e0
test eax, eax
mov rbp, qword [rsp + 0x148]
jne 0x14004741c
mov qword [rsp + 0x108], rbx
mov qword [rsp + 0x110], rbx
movabs r14, 0x8000000000000000
jmp 0x1400474a6
test r13, r13
je 0x140047368
test r14, r14
je 0x140047368
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
test r12, r12
je 0x14004737b
test rbx, rbx
je 0x14004737b
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
test r15, r15
je 0x14004738e
test rsi, rsi
je 0x14004738e
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x10]
test dil, dil
jne 0x140046382
jmp 0x140046387
mov rbp, qword [rsp + 0x148]
jmp 0x14004741f
movzx eax, byte [0x1401b51a8]
mov r14d, 0x32
mov edx, 0x32
xor ecx, ecx
call fcn.14003e800
test rax, rax
mov rbp, qword [rsp + 0x148]
je 0x140048ad5
mov rbx, rax
movups xmm0, xmmword [0x1401adf50]
movups xmmword [rax + 0x20], xmm0
movups xmm0, xmmword [0x1401adf40]
movups xmmword [rax + 0x10], xmm0
movdqu xmm0, xmmword [str.failed_to_allocate_memory_for_IP_ADAPTER_ADDRESSESGetAdaptersAddresses___failed_with_code]
movdqu xmmword [rax], xmm0
mov word [rax + 0x30], 0x5345
mov rcx, rsi
call sub.msvcrt.dll_free
mov qword [rsp + 0x108], rbx
mov qword [rsp + 0x110], 0x32
jmp 0x1400474a6
mov rsi, rbx
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x150], rax
lea rax, [0x140008bd0]
mov qword [rsp + 0x158], rax
lea rax, [0x1401adf90]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 1
mov qword [rsp + 0xb0], 0
lea rax, [rsp + 0x150]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], 1
lea rcx, [rsp + 0x100]
lea rdx, [rsp + 0x90]
call fcn.140006410
mov rcx, rsi
call sub.msvcrt.dll_free
mov r14, qword [rsp + 0x100]
test r14, r14
je 0x14004787a
movabs rax, 0x8000000000000000
cmp r14, rax
jne 0x14004750e
movdqu xmm0, xmmword [rsp + 0x108]
movdqa xmmword [rsp + 0x150], xmm0
lea rcx, [rsp + 0x90]
lea rdx, [rsp + 0x150]
call fcn.140043cb0
mov rcx, qword [rsp + 0x90]
movabs rax, 0x8000000000000000
cmp rcx, rax
jne 0x140047529
mov rcx, qword [rsp + 0x150]
call sub.msvcrt.dll_free
jmp 0x14004787a
mov r8, qword [rsp + 0x108]
mov rcx, qword [0x1401b5178]
xor edx, edx
call fcn.140053cc4
jmp 0x14004787a
cmp qword [rsp + 0x3a0], 0
je 0x1400476ad
mov r15, qword [rsp + 0x388]
mov rax, qword [rsp + 0x3a8]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x3b0]
mov qword [rsp + 0x80], rax
pcmpeqd xmm6, xmm6
jmp 0x1400475a8
lea rcx, [rsp + 0x90]
lea rdx, [rsp + 0x150]
call fcn.140043cb0
mov rcx, qword [rsp + 0x90]
movabs rax, 0x8000000000000000
cmp rcx, rax
mov rbp, qword [rsp + 0x148]
je 0x1400474fc
mov qword [rsp + 0x60], rcx
mov r12, qword [rsp + 0x98]
mov r13, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x80]
mov r8, r12
mov r9, r13
call fcn.140043e60
mov rbp, rax
shr rax, 0x39
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
xor esi, esi
and rbp, rdi
movdqu xmm8, xmmword [r15 + rbp]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb ebx, xmm0
test ebx, ebx
jne 0x14004763c
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x14004768b
add rbp, rsi
add rbp, 0x10
add rsi, 0x10
jmp 0x1400475f0
lea eax, [rbx - 1]
and eax, ebx
mov ebx, eax
test ax, ax
je 0x14004760a
tzcnt eax, ebx
add rax, rbp
and rax, rdi
mov r14, rax
neg r14
shl rax, 3
shl r14, 7
sub r14, rax
cmp qword [r15 + r14 - 0x78], r13
jne 0x140047630
add r14, r15
mov rdx, qword [r14 - 0x80]
mov rcx, r12
mov r8, r13
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x140047630
lea rcx, [rsp + 0xa8]
movzx eax, word [rcx + 4]
mov word [r14 - 4], ax
mov eax, dword [rcx]
mov dword [r14 - 8], eax
cmp qword [rsp + 0x60], 0
je 0x140047570
mov rcx, qword [0x1401b5178]
xor edx, edx
mov r8, r12
call fcn.140053cc4
jmp 0x140047570
lea rsi, [rsp + 0x90]
lea rbx, [rsp + 0x150]
jmp 0x1400476e6
mov rcx, rsi
mov rdx, rbx
call fcn.140043cb0
mov rcx, qword [rsp + 0x90]
movabs rax, 0x8000000000000000
cmp rcx, rax
je 0x1400474fc
test rcx, rcx
je 0x1400476c0
mov r8, qword [rsp + 0x98]
mov rcx, qword [0x1401b5178]
xor edx, edx
call fcn.140053cc4
jmp 0x1400476c0
mov qword [rsp + 0x58], r12
mov byte [rsp + 0x60], sil
movd xmm8, dword [rsp + 0x150]
movss xmm9, dword [rsp + 0x158]
movzx eax, byte [0x1401b51a8]
mov esi, 8
mov edx, 8
xor ecx, ecx
call fcn.14003e800
test rax, rax
je 0x140048ae4
mov r12, rax
lea rax, [rsp + 0x201]
movabs rcx, 0x72657475706d6f43
mov qword [r12], rcx
mov ecx, dword [rax]
mov eax, dword [rax + 3]
mov dword [rsp + 0x19b], eax
mov dword [rsp + 0x198], ecx
cmp r13, 3
jne 0x14004777b
xor edi, edi
jmp 0x140047800
movzx eax, byte [0x1401b51a8]
mov edx, 0x60
xor ecx, ecx
call fcn.14003e800
test rax, rax
je 0x140048af3
mov rsi, rax
mov qword [rax], r13
mov rax, qword [rsp + 0x58]
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rbp
mov qword [rsi + 0x18], r14
mov qword [rsi + 0x20], rbx
mov qword [rsi + 0x28], r15
movzx eax, byte [rsp + 0x60]
mov byte [rsi + 0x30], al
mov eax, dword [rsp + 0x198]
mov ecx, dword [rsp + 0x19b]
mov dword [rsi + 0x31], eax
mov dword [rsi + 0x34], ecx
mov qword [rsi + 0x38], 8
mov qword [rsi + 0x40], r12
mov qword [rsi + 0x48], 8
mov dword [rsi + 0x50], edi
movss dword [rsi + 0x54], xmm9
movd dword [rsi + 0x58], xmm8
movd dword [rsi + 0x5c], xmm8
mov edi, 1
mov rbp, qword [rsp + 0x148]
mov rbx, qword [rsp + 0x318]
mov r14, qword [rsp + 0x320]
test r14, r14
jne 0x1400463a7
cmp qword [rsp + 0x310], 0
je 0x14004783d
mov rcx, qword [0x1401b5178]
xor edx, edx
mov r8, rbx
call fcn.140053cc4
mov qword [rsp + 0x310], rdi
mov qword [rsp + 0x318], rsi
mov qword [rsp + 0x320], rdi
cmp byte [rbp + 1], 0
jne 0x14004648c
cmp byte [rbp], 0
je 0x14004787a
mov rcx, qword [rsp + 0x388]
mov rdx, qword [rsp + 0x3a0]
call fcn.140045750
movzx eax, byte [rbp + 8]
cmp al, 2
je 0x14004789b
movzx ecx, word [rbp + 9]
shl ecx, 8
movzx edx, al
or edx, ecx
lea rcx, [rsp + 0x280]
call fcn.140048fa0
cmp byte [rbp + 2], 0
je 0x140047920
call sub.KERNEL32.dll_GetLogicalDrives
mov dword [rsp + 0x198], eax
test eax, eax
je 0x1400479ac
mov qword [rsp + 0x100], 0
mov qword [rsp + 0x108], 8
mov qword [rsp + 0x110], 0
lea rax, [rsp + 0x198]
mov qword [rsp + 0x150], rax
movabs rax, 0x2000000000
mov qword [rsp + 0x158], rax
call fcn.140010760
test rax, rax
je 0x140048a9c
mov rax, qword [rax]
test rax, rax
je 0x1400479bb
add rax, 0x110
jmp 0x1400479c0
cmp byte [rbp + 3], 0
je 0x140047b82
mov rax, qword [rsp + 0x338]
test rax, rax
je 0x140047b82
mov rdi, qword [rsp + 0x330]
shl rax, 4
lea rbx, [rax + rax*8]
xor r14d, r14d
lea rsi, [rsp + 0x90]
jmp 0x140047970
add r14, 0x90
cmp rbx, r14
je 0x140047b82
cmp qword [rdi + r14 + 0x78], 0
je 0x140047960
mov qword [rsp + 0x90], 0
mov rcx, qword [rdi + r14 + 0x50]
xor edx, edx
xor r8d, r8d
mov r9, rsi
call sub.KERNEL32.dll_GetDiskFreeSpaceExW
test eax, eax
je 0x140047960
mov rax, qword [rsp + 0x90]
mov qword [rdi + r14 + 0x80], rax
jmp 0x140047960
mov edi, 8
xor ebx, ebx
xor r14d, r14d
jmp 0x140047b36
call fcn.140011cf0
mov rax, qword [rax]
mov r9, qword [rax + 0x210]
lea rax, [rsp + 0x150]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0x20
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 1
lea rcx, [rsp + 0x90]
mov edx, 0x20
xor r8d, r8d
call fcn.140049b80
mov r14, qword [rsp + 0x90]
mov rax, qword [rsp + 0xa0]
test rax, rax
je 0x140047a3b
xor r8d, r8d
mov rcx, r14
test rcx, rcx
je 0x140047a32
add r8, qword [rcx + 0x10]
mov rcx, qword [rcx + 0x18]
dec rax
jne 0x140047a20
test r8, r8
jne 0x140048994
test r14, r14
je 0x140047b1e
lea rbx, [rsp + 0x100]
jmp 0x140047a5c
mov r14, rsi
test rsi, rsi
je 0x140047b1e
mov rsi, qword [r14 + 0x18]
test rsi, rsi
je 0x140047a6d
mov qword [rsi + 0x20], 0
mov rdi, qword [r14]
mov r15, qword [r14 + 8]
mov r12, qword [r14 + 0x10]
mov rcx, qword [0x1401b5178]
xor edx, edx
mov r8, r14
call fcn.140053cc4
movabs rax, 0x8000000000000000
cmp rdi, rax
je 0x140047b15
mov rax, qword [rsp + 0x100]
mov r14, qword [rsp + 0x110]
sub rax, r14
cmp rax, r12
jb 0x140047afd
lea rcx, [r14 + r14*8]
shl rcx, 4
add rcx, qword [rsp + 0x108]
mov rax, r12
shl rax, 4
lea r8, [rax + rax*8]
mov rdx, r15
call sub.msvcrt.dll_memcpy
add r14, r12
mov qword [rsp + 0x110], r14
test rdi, rdi
je 0x140047a50
mov rcx, qword [0x1401b5178]
xor edx, edx
mov r8, r15
call fcn.140053cc4
jmp 0x140047a50
mov rcx, rbx
mov rdx, r14
mov r8, r12
call fcn.14004a9e0
mov r14, qword [rsp + 0x110]
jmp 0x140047ab0
test rsi, rsi
jne 0x14004834d
mov r14, qword [rsp + 0x100]
mov rdi, qword [rsp + 0x108]
mov rbx, qword [rsp + 0x110]
mov rsi, qword [rsp + 0x330]
mov rdx, qword [rsp + 0x338]
mov rcx, rsi
call fcn.14004aab0
cmp qword [rsp + 0x328], 0
je 0x140047b6a
mov rcx, qword [0x1401b5178]
xor edx, edx
mov r8, rsi
call fcn.140053cc4
mov qword [rsp + 0x328], r14
mov qword [rsp + 0x330], rdi
mov qword [rsp + 0x338], rbx
cmp byte [rbp + 7], 0
je 0x140048943
mov qword [rsp + 0x150], 0
mov qword [rsp + 0x158], 8
mov qword [rsp + 0x160], 0
mov dword [rsp + 0x188], 0
mov eax, 8
mov qword [rsp + 0x58], rax
lea rbp, [rsp + 0x188]
lea rbx, [rsp + 0x70]
lea r14, [rsp + 0x68]
lea r12, [rsp + 0x1d0]
xor eax, eax
mov qword [rsp + 0x60], rax
nop word cs:[rax + rax]
mov qword [rsp + 0x68], 0
mov dword [rsp + 0x18c], 0
mov dword [rsp + 0x70], 0
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x30], rbx
lea rax, [rsp + 0x18c]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xffffffff
xor ecx, ecx
xor edx, edx
mov r8d, 2
mov r9, r14
call sub.NETAPI32.dll_NetUserEnum
mov esi, eax
test eax, eax
je 0x140047c4f
cmp esi, 0xea
jne 0x140048387
mov r15, qword [rsp + 0x68]
mov eax, dword [rsp + 0x18c]
lea r13, [r15 + rax*8]
mov rax, r15
nop word cs:[rax + rax]
cmp rax, r13
je 0x140048310
lea r15, [rax + 8]
cmp qword [rax], 0
mov rax, r15
je 0x140047c70
mov qword [rsp + 0x1d0], 0
mov rdx, qword [r15 - 8]
xor ecx, ecx
mov r8d, 0x17
mov r9, r12
call sub.NETAPI32.dll_NetUserGetInfo
test eax, eax
je 0x140047cbe
mov rcx, qword [rsp + 0x1d0]
test rcx, rcx
je 0x140047c5f
call sub.NETAPI32.dll_NetApiBufferFree
jmp 0x140047c5f
mov rcx, qword [rsp + 0x1d0]
mov rbx, qword [rcx + 0x20]
test rbx, rbx
je 0x140047e28
mov rcx, rbx
call sub.ADVAPI32.dll_IsValidSid
test eax, eax
je 0x140047e37
mov rcx, rbx
call sub.ADVAPI32.dll_GetLengthSid
test eax, eax
je 0x140047e41
mov rdi, rbp
mov ebp, eax
mov ecx, 8
mov rdx, rbp
call fcn.14003e800
test rax, rax
je 0x1400489ec
mov qword [rsp + 0x80], rbp
mov ecx, ebp
mov rdx, rax
mov rbp, rax
mov r8, rbx
call sub.ADVAPI32.dll_CopySid
test eax, eax
je 0x140047e62
cmp byte [rbp], 1
jne 0x140048a21
mov dword [rsp + 0x54], 0
mov dword [rsp + 0x198], 0
mov dword [rsp + 0x100], 8
lea rax, [rsp + 0x100]
mov qword [rsp + 0x30], rax
lea r12, [rsp + 0x198]
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], 0
xor ecx, ecx
mov qword [rsp + 0x60], rbp
mov rdx, rbp
xor r8d, r8d
lea r9, [rsp + 0x54]
call sub.ADVAPI32.dll_LookupAccountSidW
test eax, eax
mov rbp, rdi
jne 0x140047da5
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x140047f69
mov r14d, dword [rsp + 0x54]
test r14, r14
je 0x140047e80
lea rdi, [r14 + r14]
mov ecx, 8
mov rdx, rdi
call fcn.14003e800
test rax, rax
je 0x140048a78
mov rbx, rax
mov dword [rsp + 0x198], 0
lea rax, [rsp + 0x100]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], 0
xor ecx, ecx
mov rdx, qword [rsp + 0x60]
mov r8, rbx
lea r9, [rsp + 0x54]
call sub.ADVAPI32.dll_LookupAccountSidW
test eax, eax
jne 0x140047eca
mov rcx, qword [0x1401b5178]
xor edx, edx
mov r8, rbx
call fcn.140053cc4
jmp 0x140047f69
lea rbx, [rsp + 0x70]
call sub.NETAPI32.dll_NetApiBufferFree
jmp 0x140047c5f
lea rbx, [rsp + 0x70]
jmp 0x140047caa
mov edx, 1
xor ecx, ecx
mov r8, rbx
call sub.ADVAPI32.dll_CopySid
test eax, eax
lea rbx, [rsp + 0x70]
je 0x140047caa
jmp 0x140048a68
mov rcx, qword [0x1401b5178]
xor edx, edx
mov r8, rbp
call fcn.140053cc4
lea rbx, [rsp + 0x70]
mov rbp, rdi
jmp 0x140047caa
mov dword [rsp + 0x198], 0
lea rax, [rsp + 0x100]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], 0
mov ebx, 2
mov r8d, 2
xor ecx, ecx
mov rdx, qword [rsp + 0x60]
lea r9, [rsp + 0x54]
call sub.ADVAPI32.dll_LookupAccountSidW
test eax, eax
je 0x140047f69
mov r8, 0xffffffffffffffff
nop word cs:[rax + rax]
cmp word [rbx + r8*2 + 2], 0
lea r8, [r8 + 1]
jne 0x140047ee0
lea rcx, [rsp + 0x90]
mov rdx, rbx
call fcn.140006d20
mov rcx, qword [rsp + 0x90]
movabs rax, 0x8000000000000000
cmp rcx, rax
mov eax, 0
cmove rcx, rax
mov qword [rsp + 0x58], rcx
mov rdx, qword [rsp + 0x98]
mov ecx, 1
cmove rdx, rcx
mov qword [rsp + 0x78], rdx
mov rcx, qword [rsp + 0xa0]
cmove rcx, rax
mov qword [rsp + 0x88], rcx
test r14, r14
je 0x140047fe7
mov rcx, qword [0x1401b5178]
xor edx, edx
mov r8, rbx
call fcn.140053cc4
jmp 0x140047fe7
mov rdx, qword [r15 - 8]
mov r8, 0xffffffffffffffff
nop word cs:[rax + rax]
cmp word [rdx + r8*2 + 2], 0
lea r8, [r8 + 1]
jne 0x140047f80
lea rcx, [rsp + 0x90]
call fcn.140006d20
mov rdx, qword [rsp + 0x90]
movabs rax, 0x8000000000000000
cmp rdx, rax
mov rcx, qword [rsp + 0xa0]
mov eax, 0
cmove rcx, rax
mov qword [rsp + 0x88], rcx
mov r8, qword [rsp + 0x98]
mov ecx, 1
cmove r8, rcx
mov qword [rsp + 0x78], r8
cmove rdx, rax
mov qword [rsp + 0x58], rdx
mov rdx, qword [r15 - 8]
mov qword [rsp + 0x198], 0
mov dword [rsp + 0x74], 0
mov dword [rsp + 0x54], 0
lea rax, [rsp + 0x54]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x74]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x20], r12
mov dword [rsp + 0x28], 0xffffffff
lea rcx, [0x1401ae058]
xor r8d, r8d
mov r9d, 1
call sub.NETAPI32.dll_NetUserGetLocalGroups
test eax, eax
je 0x1400480a6
mov qword [rsp + 0x100], 0
mov qword [rsp + 0x108], 8
xor edi, edi
mov rcx, qword [rsp + 0x198]
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x98], rax
mov qword [rsp + 0xa0], rdi
test rcx, rcx
lea rbp, [rsp + 0x188]
je 0x1400481ed
call sub.NETAPI32.dll_NetApiBufferFree
jmp 0x1400481ed
mov edi, dword [rsp + 0x74]
test rdi, rdi
je 0x1400480d9
lea rax, [rdi*8]
lea rbx, [rax + rax*2]
movzx eax, byte [0x1401b51a8]
xor ecx, ecx
mov rdx, rbx
call fcn.14003e800
mov r14, rax
test rax, rax
jne 0x1400480df
jmp 0x140048ac8
mov r14d, 8
mov qword [rsp + 0x100], rdi
mov qword [rsp + 0x108], r14
mov qword [rsp + 0x110], 0
mov r12, qword [rsp + 0x198]
test r12, r12
je 0x1400481bd
mov ebx, dword [rsp + 0x74]
cmp edi, ebx
jb 0x1400482e2
mov edi, 0
mov eax, 0
test rbx, rbx
je 0x14004805b
mov rdi, rax
xor ebp, ebp
mov rdx, qword [r12 + rbp*8]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
cmp word [rdx + r8*2 + 2], 0
lea r8, [r8 + 1]
jne 0x140048140
lea rcx, [rsp + 0x90]
call fcn.140006d20
mov rax, qword [rsp + 0x90]
movabs rcx, 0x8000000000000000
cmp rax, rcx
mov rcx, qword [rsp + 0xa0]
mov r8d, 0
cmove rcx, r8
mov rdx, qword [rsp + 0x98]
mov r9d, 1
cmove rdx, r9
cmove rax, r8
lea r8, [rdi + rdi*2]
mov qword [r14 + r8*8], rax
mov qword [r14 + r8*8 + 8], rdx
mov qword [r14 + r8*8 + 0x10], rcx
inc rdi
inc rbp
cmp rbp, rbx
jne 0x140048130
jmp 0x14004805b
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x100], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x108], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x110], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, qword [rsp + 0x150]
lea r14, [rsp + 0x68]
lea r12, [rsp + 0x1d0]
lea rbx, [rsp + 0x70]
jne 0x140048256
lea rcx, [rsp + 0x150]
call fcn.140049ab0
mov rdx, qword [rsp + 0x160]
mov rcx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x158]
lea rax, [rdx + rdx*4]
shl rax, 4
mov r9, qword [rsp + 0x80]
mov qword [r8 + rax], r9
mov qword [r8 + rax + 8], rcx
mov qword [r8 + rax + 0x10], r9
mov rcx, qword [rsp + 0x58]
mov qword [r8 + rax + 0x18], rcx
mov rcx, qword [rsp + 0x78]
mov qword [r8 + rax + 0x20], rcx
mov rcx, qword [rsp + 0x88]
mov qword [r8 + rax + 0x28], rcx
movdqa xmm0, xmmword [rsp + 0x100]
movdqu xmmword [r8 + rax + 0x30], xmm0
mov rcx, qword [rsp + 0x110]
mov qword [r8 + rax + 0x40], rcx
mov qword [rsp + 0x58], r8
mov dword [r8 + rax + 0x48], 0
inc rdx
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x160], rdx
jmp 0x140047caa
lea rcx, [rsp + 0x100]
mov rdx, rbx
call fcn.140043370
mov r14, qword [rsp + 0x108]
mov rax, qword [rsp + 0x110]
jmp 0x14004812b
mov rcx, qword [rsp + 0x68]
cmp esi, 0xea
jne 0x14004838c
test rcx, rcx
je 0x140047bf0
call sub.NETAPI32.dll_NetApiBufferFree
jmp 0x140047bf0
mov rcx, qword [0x1401b5178]
xor edx, edx
mov r8, rsi
call fcn.140053cc4
mov rsi, rdi
test rdi, rdi
je 0x140047b1e
mov rdi, qword [rsi + 0x18]
test rdi, rdi
je 0x14004835e
mov qword [rdi + 0x20], 0
mov rbx, qword [rsi + 8]
mov rdx, qword [rsi + 0x10]
mov rcx, rbx
call fcn.14004aab0
cmp qword [rsi], 0
je 0x140048330
mov rcx, qword [0x1401b5178]
xor edx, edx
mov r8, rbx
call fcn.140053cc4
jmp 0x140048330
mov rcx, qword [rsp + 0x68]
test rcx, rcx
mov r12, qword [rsp + 0x58]
je 0x14004839b
call sub.NETAPI32.dll_NetApiBufferFree
mov dword [rsp + 0x74], 0
mov qword [rsp + 0x198], 0
lea rcx, [rsp + 0x74]
lea rdx, [rsp + 0x198]
call sub.Secur32.dll_LsaEnumerateLogonSessions
mov rsi, qword [rsp + 0x198]
test eax, eax
jne 0x1400487ec
mov eax, dword [rsp + 0x74]
test rax, rax
je 0x1400487ec
lea r15, [rsi + rax*8]
lea rdi, [rsp + 0x100]
lea rbx, [rsp + 0x90]
mov qword [rsp + 0x78], r15
jmp 0x14004840d
add rsi, 8
cmp rsi, r15
je 0x1400487e4
mov qword [rsp + 0x100], 0
mov rcx, rsi
mov rdx, rdi
call sub.Secur32.dll_LsaGetLogonSessionData
mov rcx, qword [rsp + 0x100]
test eax, eax
jne 0x14004846f
test rcx, rcx
je 0x14004846f
cmp dword [rcx + 0x40], 3
je 0x140048467
movzx r13d, word [rcx + 0x10]
mov rbp, qword [rcx + 0x18]
mov rdx, qword [rcx + 0x48]
mov rcx, rbx
call fcn.140045a40
mov rcx, qword [rsp + 0x90]
movabs rax, 0x8000000000000000
cmp rcx, rax
jne 0x14004847b
mov rcx, qword [rsp + 0x100]
test rcx, rcx
je 0x140048400
call sub.Secur32.dll_LsaFreeReturnBuffer
jmp 0x140048400
mov qword [rsp + 0x88], rbp
mov qword [rsp + 0x80], r13
mov qword [rsp + 0x58], rcx
mov rbp, qword [rsp + 0x98]
mov r13, qword [rsp + 0xa0]
cmp qword [rsp + 0x60], 0
je 0x140048516
mov rax, qword [rsp + 0x60]
shl rax, 4
lea rdi, [rax + rax*4]
xor ebx, ebx
jmp 0x1400484c9
add rbx, 0x50
cmp rdi, rbx
je 0x140048516
cmp r13, qword [r12 + rbx + 0x10]
jne 0x1400484c0
mov rcx, qword [r12 + rbx + 8]
mov rdx, rbp
mov r8, r13
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x1400484c0
cmp qword [rsp + 0x58], 0
lea rdi, [rsp + 0x100]
lea rbx, [rsp + 0x90]
je 0x140048467
mov rcx, qword [0x1401b5178]
xor edx, edx
mov r8, rbp
call fcn.140053cc4
jmp 0x140048467
mov dword [rsp + 0x54], 0
mov dword [rsp + 0x68], 0
mov dword [rsp + 0x1d0], 8
lea rdi, [rsp + 0x1d0]
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], 0
xor ecx, ecx
mov rdx, rbp
xor r8d, r8d
lea r9, [rsp + 0x54]
call sub.ADVAPI32.dll_LookupAccountSidW
test eax, eax
jne 0x140048570
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x14004876e
mov r15d, dword [rsp + 0x54]
test r15, r15
je 0x1400485e6
lea rdi, [r15 + r15]
mov ecx, 8
mov rdx, rdi
call fcn.14003e800
test rax, rax
je 0x140048a78
mov rbx, rax
mov dword [rsp + 0x68], 0
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], 0
xor ecx, ecx
mov rdx, rbp
mov r8, rbx
lea r9, [rsp + 0x54]
call sub.ADVAPI32.dll_LookupAccountSidW
test eax, eax
jne 0x140048623
mov rcx, qword [0x1401b5178]
xor edx, edx
mov r8, rbx
call fcn.140053cc4
jmp 0x14004876e
mov dword [rsp + 0x68], 0
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], 0
mov ebx, 2
mov r8d, 2
xor ecx, ecx
mov rdx, rbp
lea r9, [rsp + 0x54]
call sub.ADVAPI32.dll_LookupAccountSidW
test eax, eax
je 0x14004876e
mov qword [rsp + 0x80], r15
mov r8, 0xffffffffffffffff
nop word cs:[rax + rax]
cmp word [rbx + r8*2 + 2], 0
lea r8, [r8 + 1]
jne 0x140048640
lea rcx, [rsp + 0x90]
mov rdx, rbx
call fcn.140006d20
mov rdi, qword [rsp + 0x90]
movabs rax, 0x8000000000000000
cmp rdi, rax
mov eax, 0
cmove rdi, rax
mov r15, qword [rsp + 0x98]
mov ecx, 1
cmove r15, rcx
mov r14, qword [rsp + 0xa0]
cmove r14, rax
cmp qword [rsp + 0x80], 0
je 0x1400486b4
mov rcx, qword [0x1401b5178]
xor edx, edx
mov r8, rbx
call fcn.140053cc4
lea rbx, [rsp + 0x90]
mov rdx, qword [rsp + 0x60]
cmp rdx, qword [rsp + 0x150]
jne 0x1400486e8
lea rcx, [rsp + 0x150]
call fcn.140049ab0
mov r12, qword [rsp + 0x158]
mov rdx, qword [rsp + 0x160]
lea rax, [rdx + rdx*4]
shl rax, 4
mov rcx, qword [rsp + 0x58]
mov qword [r12 + rax], rcx
mov qword [r12 + rax + 8], rbp
mov qword [r12 + rax + 0x10], r13
mov qword [r12 + rax + 0x18], rdi
mov qword [r12 + rax + 0x20], r15
mov qword [r12 + rax + 0x28], r14
mov qword [r12 + rax + 0x30], 0
mov qword [r12 + rax + 0x38], 8
mov qword [r12 + rax + 0x40], 0
mov dword [r12 + rax + 0x48], 0
inc rdx
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x160], rdx
mov rcx, qword [rsp + 0x100]
lea r14, [rsp + 0x68]
mov r15, qword [rsp + 0x78]
lea rdi, [rsp + 0x100]
test rcx, rcx
jne 0x140048474
jmp 0x140048400
mov r8, qword [rsp + 0x80]
shr r8d, 1
lea rbx, [rsp + 0x90]
mov rcx, rbx
mov rdx, qword [rsp + 0x88]
call fcn.140006d20
mov rdi, qword [rsp + 0x90]
movabs rax, 0x8000000000000000
cmp rdi, rax
mov eax, 0
cmove rdi, rax
mov r15, qword [rsp + 0x98]
mov ecx, 1
cmove r15, rcx
mov r14, qword [rsp + 0xa0]
cmove r14, rax
mov rdx, qword [rsp + 0x60]
cmp rdx, qword [rsp + 0x150]
je 0x1400486cb
jmp 0x1400486e8
mov rsi, qword [rsp + 0x198]
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0xa0], rax
movdqu xmm0, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0x90], xmm0
test rsi, rsi
je 0x14004881b
mov rcx, rsi
call sub.Secur32.dll_LsaFreeReturnBuffer
mov rsi, qword [rsp + 0x348]
mov rbx, qword [rsp + 0x350]
test rbx, rbx
je 0x140048908
xor r14d, r14d
jmp 0x14004884c
inc r14
cmp r14, rbx
je 0x140048908
lea r15, [r14 + r14*4]
shl r15, 4
cmp qword [rsi + r15], 0
je 0x140048871
lea rax, [rsi + r15]
mov r8, qword [rax + 8]
mov rcx, qword [0x1401b5178]
xor edx, edx
call fcn.140053cc4
cmp qword [rsi + r15 + 0x18], 0
je 0x14004888c
mov r8, qword [rsi + r15 + 0x20]
mov rcx, qword [0x1401b5178]
xor edx, edx
call fcn.140053cc4
mov rdi, qword [rsi + r15 + 0x38]
mov r12, qword [rsi + r15 + 0x40]
test r12, r12
je 0x1400488e0
lea r13, [rdi + 8]
jmp 0x1400488b9
add r13, 0x18
dec r12
je 0x1400488e0
cmp qword [r13 - 8], 0
je 0x1400488b0
mov r8, qword [r13]
mov rcx, qword [0x1401b5178]
xor edx, edx
call fcn.140053cc4
jmp 0x1400488b0
lea rax, [rsi + r15]
add rax, 0x30
cmp qword [rax], 0
je 0x140048840
mov rcx, qword [0x1401b5178]
xor edx, edx
mov r8, rdi
call fcn.140053cc4
jmp 0x140048840
cmp qword [rsp + 0x340], 0
je 0x140048924
mov rcx, qword [0x1401b5178]
xor edx, edx
mov r8, rsi
call fcn.140053cc4
mov rax, qword [rsp + 0xa0]
lea rcx, [rsp + 0x340]
mov qword [rcx + 0x10], rax
movaps xmm0, xmmword [rsp + 0x90]
movups xmmword [rcx], xmm0
lea rdx, [rsp + 0x280]
mov r8d, 0x1a0
mov rcx, qword [rsp + 0x278]
call sub.msvcrt.dll_memcpy
movaps xmm6, xmmword [rsp + 0x420]
movaps xmm7, xmmword [rsp + 0x430]
movaps xmm8, xmmword [rsp + 0x440]
movaps xmm9, xmmword [rsp + 0x450]
add rsp, 0x468
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [rsp + 0x100]
xor edx, edx
call fcn.14004a9e0
test r14, r14
jne 0x140047a44
jmp 0x140047b1e
mov ecx, 2
mov edx, 0x14
call fcn.140005ca0
lea rax, [0x1401ad468]
mov qword [rsp + 0x20], rax
lea rcx, str.cannot_access_a_Thread_Local_Storage_value_during_or_after_destruction_rustc_25ef9e3d85d934b27d9dada2f9dd52b1dc63bb04library_std_src_threadlocal.rs
lea r9, [0x1401ad5d8]
lea r8, [rsp + 0x90]
mov edx, 0x46
call fcn.140008b30
mov ecx, 1
mov rdx, rbp
call fcn.140005ca0
mov ecx, 0x56410
call fcn.14000da50
mov ecx, 1
mov edx, 9
call fcn.140005ca0
mov ecx, 8
mov edx, 0x120
call fcn.140005ca0
lea rax, str.Expected_SID_revision_to_be_1
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 1
lea rax, [0x1401ae058]
mov qword [rsp + 0xa0], rax
pxor xmm0, xmm0
movdqu xmmword [rsp + 0xa8], xmm0
lea rdx, [rsp + 0x90]
mov rcx, rbp
call fcn.140045b60
lea r8, str._.cargo_registry_src_index.crates.io_6f17d22bba15001f_sysinfo_0.29.11_src_windows_sid.rs
xor ecx, ecx
xor edx, edx
call fcn.140006f60
mov ecx, 2
mov rdx, rdi
call fcn.140005ca0
lea rax, str._.cargo_registry_src_index.crates.io_6f17d22bba15001f_sysinfo_0.29.11_src_windows_network.rs
mov edx, 0x101
mov rcx, r8
mov r8, rax
call fcn.140007970
lea rax, [0x1401ad468]
mov qword [rsp + 0x20], rax
lea rcx, str.cannot_access_a_Thread_Local_Storage_value_during_or_after_destruction_rustc_25ef9e3d85d934b27d9dada2f9dd52b1dc63bb04library_std_src_threadlocal.rs
lea r9, [0x1401a9618]
lea r8, [rsp + 0x90]
mov edx, 0x46
call fcn.140008b30
mov ecx, 8
mov rdx, rbx
call fcn.140005ca0
mov ecx, 1
mov edx, 0x32
call fcn.140005ca0
mov ecx, 1
mov edx, 8
call fcn.140005ca0
mov ecx, 8
mov edx, 0x60
call fcn.140005ca0
int3