Function at 0x140023290
Capabilities:
Encode data using xor
Register http server url
Send http response
Start http server
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x940]
sub rsp, 0xa40
mov rax, qword [0x140094080]
xor rax, rsp
mov qword [rbp + 0x930], rax
mov qword [rbp + 0xc0], rcx
xor esi, esi
cmp byte [0x1400946d8], sil
jne 0x140023315
xorps xmm0, xmm0
movups xmmword [rbp + 0x6f0], xmm0
mov qword [rbp + 0x700], rsi
mov qword [rbp + 0x708], rsi
lea r8d, [rsi + 0x52]
lea rdx, str.You_need_to_run_the_KeyAuthApp.init____function_before_any_other_KeyAuth_functions
lea rcx, [rbp + 0x6f0]
call fcn.14000f360
lea rcx, [rbp + 0x6f0]
call fcn.14001c040
mov dword [rsp + 0x54], 2
xor r8d, r8d
mov r14d, 1
mov edx, r14d
mov ebx, dword [rsp + 0x54]
mov ecx, ebx
call qword [sym.imp.HTTPAPI.dll_HttpInitialize]
cmp eax, 0x57
jne 0x14002335d
lea r9d, [r14 + 0x2f]
lea r8, str.Error
lea rdx, str.The_Flags_parameter_contains_an_unsupported_value.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
test eax, eax
je 0x140023386
mov r9d, Ordinal_50
lea r8, str.Error
lea rdx, str.System_error_for_Initialize
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor r8d, r8d
lea rdx, [rbp + 0x7b8]
mov ecx, ebx
call qword [sym.imp.HTTPAPI.dll_HttpCreateServerSession]
cmp eax, 0x51a
jne 0x1400233c4
mov r9d, Ordinal_50
lea r8, str.Error
lea rdx, str.Version_for_session_invalid
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp eax, 0x57
jne 0x1400233ec
lea r9d, [rax - 0x27]
lea r8, str.Error
lea rdx, str.pServerSessionId_parameter_is_null
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
test eax, eax
je 0x140023415
mov r9d, Ordinal_50
lea r8, str.Error
lea rdx, str.System_error_for_HttpCreateServerSession
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor r8d, r8d
lea rdx, [rbp + 0x730]
mov rcx, qword [rbp + 0x7b8]
call qword [sym.imp.HTTPAPI.dll_HttpCreateUrlGroup]
cmp eax, 0x57
jne 0x140023454
lea r9d, [rax - 0x27]
lea r8, str.Error
lea rdx, str.Url_group_create_parameter_error
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
test eax, eax
je 0x14002347d
mov r9d, Ordinal_50
lea r8, str.Error
lea rdx, str.System_error_for_HttpCreateUrlGroup
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [rbp + 0x1f0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, ebx
call qword [sym.imp.HTTPAPI.dll_HttpCreateRequestQueue]
cmp eax, 0x51a
jne 0x1400234c5
mov r9d, Ordinal_50
lea r8, str.Error
lea rdx, str.Wrong_version
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp eax, 0x57
jne 0x1400234ed
lea r9d, [rax - 0x27]
lea r8, str.Error
lea rdx, str.Byte_length_exceeded
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp eax, 0xb7
jne 0x140023519
mov r9d, Ordinal_50
lea r8, str.Error
lea rdx, str.pName_already_used
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp eax, 5
jne 0x140023541
lea r9d, [rax + 0x2b]
lea r8, str.Error
lea rdx, str.queue_access_denied
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp eax, 0x45a
jne 0x14002356d
mov r9d, Ordinal_50
lea r8, str.Error
lea rdx, str.Initialize_not_called
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
test eax, eax
je 0x140023596
mov r9d, Ordinal_50
lea r8, str.Error
lea rdx, str.System_error_for_HttpCreateRequestQueue
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
or dword [rbp + 0x1f8], r14d
mov rax, qword [rbp + 0x1f0]
mov qword [rbp + 0x200], rax
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rbp + 0x1f8]
lea edx, [r9 - 9]
mov rcx, qword [rbp + 0x730]
call qword [sym.imp.HTTPAPI.dll_HttpSetUrlGroupProperty]
cmp eax, 0x57
jne 0x14002361b
movdqa xmm0, xmmword [0x140078650]
movdqu xmmword [rbp + 0xd0], xmm0
mov word [rbp + 0xe0], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0xe2], r14b
lea rcx, [rbp + 0xd0]
call fcn.1400198d0
mov rdx, rax
mov r9d, Ordinal_50
lea r8, str.Error
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
test eax, eax
je 0x140023677
movdqa xmm0, xmmword [0x1400786a0]
movdqu xmmword [rbp + 0x40], xmm0
movdqa xmm1, xmmword [0x140078630]
movdqu xmmword [rbp + 0x50], xmm1
mov dword [rbp + 0x60], 0xced2ceeb
mov dword [rbp + 0x64], 0xbbb5b2da
mov word [rbp + 0x68], 0x100
lea rcx, [rbp + 0x40]
call fcn.1400199c0
mov rdx, rax
mov r9d, Ordinal_50
lea r8, str.Error
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor r9d, r9d
xor r8d, r8d
lea rdx, str.http:__localhost:1337_handshake
mov rcx, qword [rbp + 0x730]
call qword [sym.imp.HTTPAPI.dll_HttpAddUrlToUrlGroup]
cmp eax, 5
jne 0x1400236e0
movdqa xmm0, xmmword [0x1400786d0]
movdqu xmmword [rbp + 0x40], xmm0
movdqa xmm1, xmmword [0x140078620]
movdqu xmmword [rbp + 0x50], xmm1
mov word [rbp + 0x60], 0x100
lea rcx, [rbp + 0x40]
call fcn.140019930
mov rdx, rax
mov r9d, Ordinal_50
lea r8, str.Error
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp eax, 0xb7
jne 0x140023738
movdqa xmm0, xmmword [0x1400784f0]
movdqu xmmword [rbp + 0x40], xmm0
movdqa xmm1, xmmword [0x140078610]
movdqu xmmword [rbp + 0x50], xmm1
mov dword [rbp + 0x60], 0xc7d9ddde
mov word [rbp + 0x64], 0x100
lea rcx, [rbp + 0x40]
call fcn.140019960
mov rdx, rax
mov r9d, Ordinal_50
lea r8, str.Error
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp eax, 0x57
jne 0x140023794
movdqa xmm0, xmmword [0x140078700]
movdqu xmmword [rbp + 0x40], xmm0
movdqa xmm1, xmmword [0x140078640]
movdqu xmmword [rbp + 0x50], xmm1
movdqa xmm0, xmmword [0x1400785b0]
movdqu xmmword [rbp + 0x60], xmm0
mov word [rbp + 0x70], 0x100
lea rcx, [rbp + 0x40]
call fcn.1400199f0
mov rdx, rax
mov r9d, Ordinal_50
lea r8, str.Error
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp eax, 0x20
jne 0x14002383c
movdqa xmm0, xmmword [0x1400784e0]
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmm1, xmmword [0x1400786b0]
movdqa xmmword [rbp + 0x50], xmm1
movdqa xmm0, xmmword [0x140078580]
movdqa xmmword [rbp + 0x60], xmm0
movdqa xmm1, xmmword [0x1400785e0]
movdqa xmmword [rbp + 0x70], xmm1
movdqa xmm0, xmmword [0x140078550]
movdqa xmmword [rbp + 0x80], xmm0
movdqa xmm1, xmmword [0x140078520]
movdqa xmmword [rbp + 0x90], xmm1
movdqa xmm0, xmmword [0x1400784a0]
movdqa xmmword [rbp + 0xa0], xmm0
mov dword [rbp + 0xb0], 0x237e6e
mov byte [rbp + 0xb4], r14b
lea rcx, [rbp + 0x40]
call fcn.140019a80
mov rdx, rax
mov r9d, Ordinal_50
lea r8, str.Error
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
test eax, eax
je 0x140023895
movdqa xmm0, xmmword [0x1400786a0]
movdqu xmmword [rbp + 0x40], xmm0
movdqa xmm1, xmmword [0x140078690]
movdqu xmmword [rbp + 0x50], xmm1
mov dword [rbp + 0x60], 0xcbd2cefc
mov word [rbp + 0x64], Ordinal_211
mov byte [rbp + 0x66], r14b
lea rcx, [rbp + 0x40]
call fcn.140019990
mov rdx, rax
mov r9d, Ordinal_50
lea r8, str.Error
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movzx r12d, r14b
mov r15, 0xffffffffffffffff
mov ecx, 0x1360
call fcn.140074570
mov r13, rax
xor edx, edx
mov r8d, 0x1360
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x30], rsi
lea rax, [rbp + 0x7c0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x1360
mov r9, r13
mov r8d, r14d
xor edx, edx
mov rcx, qword [rbp + 0x1f0]
call qword [sym.imp.HTTPAPI.dll_HttpReceiveHttpRequest]
mov rdx, qword [r13 + 0x60]
xorps xmm0, xmm0
movups xmmword [rbp + 0x710], xmm0
mov qword [rbp + 0x720], rsi
mov qword [rbp + 0x728], rsi
mov r8, r15
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140023910
lea rcx, [rbp + 0x710]
call fcn.1400119d0
nop
lea rdx, [rbp + 0x710]
cmp qword [rbp + 0x728], 8
setae r8b
cmovae rdx, qword [rbp + 0x710]
mov rax, qword [rbp + 0x720]
lea rsi, [rdx + rax*2]
lea rdi, [rbp + 0x710]
test r8b, r8b
cmovne rdi, qword [rbp + 0x710]
xorps xmm0, xmm0
movups xmmword [rbp + 0x6b0], xmm0
cmp rdi, rsi
jne 0x14002398f
xor esi, esi
mov qword [rbp + 0x6c0], rsi
mov qword [rbp + 0x6c8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x6b0], sil
jmp 0x140023a69
mov rax, rsi
sub rax, rdi
sar rax, 1
xor edx, edx
mov qword [rbp + 0x6c0], rdx
mov ebx, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x6c8], rbx
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
ja 0x140024c5c
cmp rax, 0x10
jb 0x140023a10
mov rbx, rax
or rbx, 0xf
cmp rbx, rcx
jbe 0x1400239d7
mov rbx, rcx
jmp 0x1400239e4
cmp rbx, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rax
mov rdx, rbx
add rdx, 1
cmovb rdx, r15
lea rcx, [rbp + 0x6b0]
call fcn.14000f700
mov qword [rbp + 0x6b0], rax
mov qword [rbp + 0x6c8], rbx
mov rdx, qword [rbp + 0x6c0]
lea rcx, [rbp + 0x6b0]
cmp rbx, 0x10
cmovae rcx, qword [rbp + 0x6b0]
movzx eax, byte [rdi]
mov byte [rdx + rcx], al
mov rdx, qword [rbp + 0x6c0]
inc rdx
mov qword [rbp + 0x6c0], rdx
add rdi, 2
cmp rdi, rsi
je 0x140023a4c
mov rbx, qword [rbp + 0x6c8]
jmp 0x140023a10
lea rax, [rbp + 0x6b0]
cmp qword [rbp + 0x6c8], 0x10
cmovae rax, qword [rbp + 0x6b0]
mov byte [rax + rdx], 0
xor esi, esi
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], rsi
mov qword [rbp + 0x30], rsi
mov r8, r14
lea rdx, [0x1400781a0]
lea rcx, [rbp + 0x18]
call fcn.14000f360
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x8f0], xmm0
mov qword [rbp + 0x900], rsi
mov qword [rbp + 0x908], rsi
mov r8d, 6
lea rdx, str._user
lea rcx, [rbp + 0x8f0]
call fcn.14000f360
nop
xor r8d, r8d
lea rdx, [rbp + 0x8f0]
lea rcx, [rbp + 0x6b0]
call fcn.14001c9d0
mov ebx, dword [rbp + 0x900]
add ebx, eax
xor r8d, r8d
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x6b0]
call fcn.14001c9d0
mov edx, ebx
xorps xmm0, xmm0
movups xmmword [rbp + 0x778], xmm0
mov qword [rbp + 0x788], rsi
mov qword [rbp + 0x790], rsi
mov rcx, qword [rbp + 0x6c0]
cmp rcx, rdx
jb 0x140024c56
sub eax, ebx
mov r8d, eax
sub rcx, rdx
cmp rcx, r8
cmovb r8, rcx
lea rax, [rbp + 0x6b0]
cmp qword [rbp + 0x6c8], 0x10
cmovae rax, qword [rbp + 0x6b0]
add rdx, rax
lea rcx, [rbp + 0x778]
call fcn.14000f360
nop
mov r8, qword [rbp + 0x908]
cmp r8, 0x10
jb 0x140023b73
inc r8
mov rdx, qword [rbp + 0x8f0]
lea rcx, [rbp + 0x8f0]
call fcn.14000edd0
nop
mov rdx, qword [rbp + 0x30]
cmp rdx, 0x10
jb 0x140023bae
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023ba9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024c31
call fcn.1400741e4
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], rsi
mov qword [rbp + 0x30], rsi
xor r8d, r8d
lea rdx, [0x140085999]
lea rcx, [rbp + 0x18]
call fcn.14000f360
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x8f0], xmm0
mov qword [rbp + 0x900], rsi
mov qword [rbp + 0x908], rsi
mov r8d, 7
lea rdx, str.token
lea rcx, [rbp + 0x8f0]
call fcn.14000f360
nop
xor r8d, r8d
lea rdx, [rbp + 0x8f0]
lea rcx, [rbp + 0x6b0]
call fcn.14001c9d0
mov ebx, dword [rbp + 0x900]
add ebx, eax
xor r8d, r8d
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x6b0]
call fcn.14001c9d0
mov edx, ebx
xorps xmm0, xmm0
movups xmmword [rbp + 0x758], xmm0
mov qword [rbp + 0x768], rsi
mov qword [rbp + 0x770], rsi
mov rcx, qword [rbp + 0x6c0]
cmp rcx, rdx
jb 0x140024c62
sub eax, ebx
mov r8d, eax
sub rcx, rdx
cmp rcx, r8
cmovb r8, rcx
lea rax, [rbp + 0x6b0]
cmp qword [rbp + 0x6c8], 0x10
cmovae rax, qword [rbp + 0x6b0]
add rdx, rax
lea rcx, [rbp + 0x758]
call fcn.14000f360
nop
mov r8, qword [rbp + 0x908]
cmp r8, 0x10
jb 0x140023cb8
inc r8
mov rdx, qword [rbp + 0x8f0]
lea rcx, [rbp + 0x8f0]
call fcn.14000edd0
nop
mov r8, qword [rbp + 0x30]
cmp r8, 0x10
jb 0x140023cd2
inc r8
mov rdx, qword [rbp + 0x18]
lea rcx, [rbp + 0x18]
call fcn.14000edd0
cmp dword [r13 + 0x24], 3
jne 0x140023e3b
xor edx, edx
mov r8d, 0x238
lea rcx, [rbp + 0x460]
call sub.VCRUNTIME140.dll_memset
mov eax, reloc.WLDAP32.dll_Ordinal_200
mov word [rbp + 0x468], ax
mov dword [rsp + 0x54], 0x100d7d4
mov rax, rsi
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rsp + rax + 0x54], cl
inc rax
cmp rax, 2
jb 0x140023d10
mov byte [rsp + 0x57], 0
lea rax, [rsp + 0x54]
mov qword [rbp + 0x470], rax
lea rcx, [rsp + 0x54]
mov rax, r15
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140023d40
mov word [rbp + 0x46a], ax
movups xmm0, xmmword [str.Access_Control_Allow_Origin]
movups xmmword [rbp + 0x8f0], xmm0
movsd xmm0, qword [0x1400781c8]
movsd qword [rbp + 0x900], xmm0
mov eax, dword [0x1400781d0]
mov dword [rbp + 0x908], eax
mov eax, Ordinal_46
mov word [rbp + 0x6d0], ax
lea rax, [rbp + 0x8f0]
mov qword [rbp + 0x6e0], rax
mov dword [rbp + 0x6d8], 0x1001b
lea rax, [rbp + 0x6d0]
mov qword [rbp + 0x6e8], rax
lea rax, [rbp + 0x6d8]
mov qword [rbp + 0x480], rax
mov word [rbp + 0x478], r14w
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], esi
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x460]
xor r8d, r8d
mov rdx, qword [r13 + 0x10]
mov rcx, qword [rbp + 0x1f0]
call qword [sym.imp.HTTPAPI.dll_HttpSendHttpResponse]
mov rcx, r13
call fcn.1400741e4
nop
lea rcx, [rbp + 0x758]
call fcn.14000e5f0
nop
lea rcx, [rbp + 0x778]
call fcn.14000e5f0
nop
lea rcx, [rbp + 0x6b0]
call fcn.14000e5f0
nop
lea rcx, [rbp + 0x710]
call fcn.14000e570
jmp 0x140024bb1
lea rcx, [rbp + 0x798]
call fcn.140029550
nop
mov dword [rbp - 0x48], 0xf0eaf3bd
mov dword [rbp - 0x44], 0xc6c8d2fa
mov word [rbp - 0x40], 0x9e
mov byte [rbp - 0x3e], 1
mov dword [rbp - 0x60], 0xf3fcf2bd
mov dword [rbp - 0x5c], 0x1009dfa
mov dword [rbp - 0x18], 0xedf8efbd
mov dword [rbp - 0x14], 0xcccec9ec
mov dword [rbp - 0x10], 0x98c0ca
mov byte [rbp - 0xc], 1
mov dword [rbp - 0x68], 0xf7eaf4bd
mov dword [rbp - 0x64], 0x1009dfb
mov dword [rbp - 0x58], 0xf5f2e8bd
mov dword [rbp - 0x54], 0x9ccefa
mov byte [rbp - 0x50], 1
mov dword [rbp - 0x38], 0xfbeee9bd
mov dword [rbp - 0x34], 0xcfc0ceed
mov dword [rbp - 0x30], 0x10099c6
mov dword [rbp - 0x28], 0xfbede5ef
mov dword [rbp - 0x24], 0xc5cecca2
mov dword [rbp - 0x20], 0x100caca
lea r8, [rbp - 0x38]
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x40]
call fcn.1400117d0
nop
lea rdx, [rbp + 0x778]
cmp qword [rbp + 0x790], 0x10
cmovae rdx, qword [rbp + 0x778]
mov r8, qword [rbp + 0x788]
mov rcx, rax
call fcn.14000ed40
movups xmm0, xmmword [rax]
movups xmmword [rbp - 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 8], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp - 0x58]
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x130]
call fcn.140011530
nop
lea rdx, [rbp + 0x758]
cmp qword [rbp + 0x770], 0x10
cmovae rdx, qword [rbp + 0x758]
mov r8, qword [rbp + 0x768]
mov rcx, rax
call fcn.14000ed40
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x8f0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x900], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp - 0x68]
lea rdx, [rbp + 0x8f0]
lea rcx, [rbp + 0x110]
call fcn.140011450
nop
lea rdx, [rbp + 0x798]
cmp qword [rbp + 0x7b0], 0x10
cmovae rdx, qword [rbp + 0x798]
mov r8, qword [rbp + 0x7a8]
mov rcx, rax
call fcn.14000ed40
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x18], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x28], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp - 0x18]
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x150]
call fcn.1400118f0
nop
mov rdi, qword [rbp + 0xc0]
lea r8, [rdi + 0x238]
mov rdx, rax
lea rcx, [rbp + 0x1d0]
call fcn.140011210
nop
lea r8, [rbp - 0x60]
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.140011450
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0x190]
call fcn.140011210
nop
lea r8, [rbp - 0x48]
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.1400116f0
nop
lea r8, [rdi + 0x20]
mov rdx, rax
lea rcx, [rbp + 0x7c8]
call fcn.140011210
nop
lea rcx, [rbp + 0x170]
call fcn.14000e5f0
nop
lea rcx, [rbp + 0x190]
call fcn.14000e5f0
nop
lea rcx, [rbp + 0x1b0]
call fcn.14000e5f0
nop
lea rcx, [rbp + 0x1d0]
call fcn.14000e5f0
nop
lea rcx, [rbp + 0x150]
call fcn.14000e5f0
nop
lea rcx, [rbp + 0x18]
call fcn.14000e5f0
nop
lea rcx, [rbp + 0x110]
call fcn.14000e5f0
nop
lea rcx, [rbp + 0x8f0]
call fcn.14000e5f0
nop
lea rcx, [rbp + 0x130]
call fcn.14000e5f0
nop
lea rcx, [rbp - 8]
call fcn.14000e5f0
nop
lea rcx, [rbp + 0x40]
call fcn.14000e5f0
lea rax, [rbp - 8]
mov qword [rbp + 0x108], rax
lea rdx, [rdi + 0x80]
lea rcx, [rbp - 8]
call fcn.14000e650
mov rbx, rax
lea rdx, [rbp + 0x7c8]
lea rcx, [rbp + 0x18]
call fcn.14000e650
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x738]
call fcn.1400209b0
nop
mov qword [rbp + 0x78], rsi
mov byte [rsp + 0x20], 0
mov r9b, 1
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x738]
lea rcx, [rbp + 0x6a0]
call fcn.1400148b0
nop
mov dword [rsp + 0x68], 0xedeef9f6
mov dword [rsp + 0x6c], 0xc4c7fe
mov byte [rsp + 0x70], 1
mov rcx, rsi
nop word [rax + rax]
lea eax, [rcx - 0x65]
xor byte [rsp + rcx + 0x68], al
inc rcx
cmp rcx, 7
jb 0x140024170
mov byte [rsp + 0x70], 0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x6f]
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 8]
call fcn.14000fc10
nop
mov rbx, qword [rbp + 0x38]
movzx ecx, byte [rbp + 0x6a0]
test cl, cl
jne 0x1400241c9
mov byte [rbp + 0x6a0], 1
call fcn.1400132f0
mov qword [rbp + 0x6a8], rax
movzx ecx, byte [rbp + 0x6a0]
jmp 0x1400241d0
mov rax, qword [rbp + 0x6a8]
cmp cl, 1
jne 0x1400241e4
lea rdx, [rbp - 8]
mov rcx, rax
call fcn.1400182d0
mov rbx, rax
lea rdx, [rbp + 0x6f0]
mov rcx, rbx
call fcn.1400111b0
nop
lea rcx, [rbp - 8]
call fcn.14000e5f0
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x7f0]
call sub.VCRUNTIME140.dll_memset
mov edx, r14d
lea rcx, [rbp + 0x7f0]
call fcn.140017450
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x6d8], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140073f60
mov r14, rax
mov qword [rbp + 0x6d8], rax
lea r15, [rax + 0x20]
mov qword [rbp + 0x6e8], r15
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov qword [rbp + 0x6e0], r15
lea r8, [rbp + 0x738]
cmp qword [rbp + 0x750], 0x10
cmovae r8, qword [rbp + 0x738]
lea rcx, [rdi + 0x258]
cmp qword [rcx + 0x18], 0x10
jb 0x140024283
mov rcx, qword [rcx]
mov qword [rsp + 0x28], reloc.WLDAP32.dll_Ordinal_32
mov qword [rsp + 0x20], r14
mov r9, qword [rbp + 0x748]
mov rdx, qword [rdi + 0x268]
call fcn.1400299c0
mov rsi, r14
cmp r14, r15
je 0x140024314
nop dword [rax]
movzx edi, byte [rsi]
lea rdx, [0x14001d1d0]
lea rcx, [rbp + 0x800]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0x30
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::fill_char____ptr64]
mov edx, 2
lea rcx, [rbp + 0xd0]
call sub.MSVCP140.dll_struct_std::_Smanip_long_long___int64_____cdecl_std::setw_long_long___int64__
mov r8, qword [rax]
mov rcx, qword [rbx]
movsxd rcx, dword [rcx + 4]
add rcx, rbx
mov rdx, qword [rax + 8]
call r8
mov edx, edi
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
inc rsi
cmp rsi, r15
jne 0x1400242b0
lea rbx, [section..data]
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rbx, qword [section..data]
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x7f0]
call fcn.140022f30
cmp qword [rax + 0x18], 0x10
jb 0x140024345
mov rax, qword [rax]
mov r8d, 8
mov rdx, rbx
mov rcx, rax
call fcn.14001a1b0
movzx ebx, al
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x140024394
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002438f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024beb
call fcn.1400741e4
test bl, bl
jne 0x1400243b7
lea r8, [rbp + 0x6f0]
lea rdx, str.Signature_checksum_failed._Request_was_tampered_with_or_session_ended_most_likely.__echo:__echo_Message:
lea rcx, [rbp + 0x40]
call fcn.1400112f0
mov rcx, rax
call fcn.14001c040
xor edx, edx
mov r8d, 0x238
lea rcx, [rbp + 0x220]
call sub.VCRUNTIME140.dll_memset
mov dil, 1
mov dword [rsp + 0x78], 0xfdfee9e8
mov dword [rsp + 0x7c], 0xd2d3fa
mov byte [rbp - 0x80], dil
xor esi, esi
mov ecx, esi
nop word [rax + rax]
lea eax, [rcx - 0x65]
xor byte [rsp + rcx + 0x78], al
inc rcx
cmp rcx, 7
jb 0x1400243f0
mov byte [rbp - 0x80], sil
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x7f]
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 8]
call fcn.14000fc10
nop
movzx ecx, byte [rbp + 0x6a0]
test cl, cl
jne 0x140024444
mov byte [rbp + 0x6a0], 1
call fcn.1400132f0
mov qword [rbp + 0x6a8], rax
movzx ecx, byte [rbp + 0x6a0]
jmp 0x14002444b
mov rax, qword [rbp + 0x6a8]
cmp cl, 1
jne 0x140024465
lea rdx, [rbp - 8]
mov rcx, rax
call fcn.1400182d0
mov qword [rbp + 0xe8], rax
jmp 0x14002446c
mov rax, qword [rbp + 0xe8]
lea rcx, [rax + 8]
cmp byte [rax], 4
cmovne rcx, rsi
movzx ebx, byte [rcx]
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x1400244b5
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400244b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024bf2
call fcn.1400741e4
mov rcx, rsi
test bl, bl
je 0x14002460e
mov dword [rsp + 0x58], 0xf1fbf2f2
mov word [rsp + 0x5c], 0x100
nop
lea eax, [rcx - 0x65]
xor byte [rsp + rcx + 0x58], al
inc rcx
cmp rcx, 4
jb 0x1400244d0
mov byte [rsp + 0x5d], 0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x5c]
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 8]
call fcn.14000fc10
nop
movzx ecx, byte [rbp + 0x6a0]
test cl, cl
jne 0x140024525
mov byte [rbp + 0x6a0], 1
call fcn.1400132f0
mov qword [rbp + 0x6a8], rax
movzx ecx, byte [rbp + 0x6a0]
jmp 0x14002452c
mov rax, qword [rbp + 0x6a8]
cmp cl, 1
jne 0x140024546
lea rdx, [rbp - 8]
mov rcx, rax
call fcn.1400182d0
mov qword [rbp + 0xf0], rax
jmp 0x14002454d
mov rax, qword [rbp + 0xf0]
mov rdx, rax
lea rcx, [rbp + 0xf8]
call fcn.140016f90
mov rdx, rax
mov rcx, qword [rbp + 0xc0]
call fcn.14001efb0
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x1400245a7
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400245a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024bf9
call fcn.1400741e4
mov eax, 0x1a4
mov word [rbp + 0x228], ax
mov dword [rsp + 0x60], 0xdbd8d4c8
mov dword [rsp + 0x64], 0x100e8cc
mov rcx, rsi
nop word [rax + rax]
lea eax, [rcx - 0x65]
xor byte [rsp + rcx + 0x60], al
inc rcx
cmp rcx, 6
jb 0x1400245d0
mov byte [rsp + 0x67], 0
lea rax, [rsp + 0x60]
mov qword [rbp + 0x230], rax
lea rcx, [rsp + 0x60]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140024600
jmp 0x1400247bc
mov eax, reloc.WLDAP32.dll_Ordinal_200
mov word [rbp + 0x228], ax
mov dword [rbp - 0x78], 0xedeef9f6
mov dword [rbp - 0x74], 0xc4c7fe
mov byte [rbp - 0x70], 1
nop dword [rax]
lea eax, [rcx - 0x65]
xor byte [rbp + rcx - 0x78], al
inc rcx
cmp rcx, 7
jb 0x140024630
mov byte [rbp - 0x70], 0
lea r9, [rsp + 0x50]
lea r8, [rbp - 0x71]
lea rdx, [rbp - 0x78]
lea rcx, [rbp - 8]
call fcn.14000fc10
nop
movzx ecx, byte [rbp + 0x6a0]
test cl, cl
jne 0x140024682
mov byte [rbp + 0x6a0], 1
call fcn.1400132f0
mov qword [rbp + 0x6a8], rax
movzx ecx, byte [rbp + 0x6a0]
jmp 0x140024689
mov rax, qword [rbp + 0x6a8]
cmp cl, 1
jne 0x1400246a3
lea rdx, [rbp - 8]
mov rcx, rax
call fcn.1400182d0
mov qword [rbp + 0xc8], rax
jmp 0x1400246aa
mov rax, qword [rbp + 0xc8]
xorps xmm0, xmm0
movups xmmword [rbp + 0x8f0], xmm0
mov qword [rbp + 0x900], rsi
mov qword [rbp + 0x908], rsi
cmp byte [rax], 3
jne 0x1400246cd
mov r8, qword [rax + 8]
jmp 0x1400246d0
mov r8, rsi
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x1400246dd
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rcx, [rbp + 0x8f0]
call fcn.14000f360
lea rcx, [rbp + 0x8f0]
mov rdx, qword [rbp + 0x908]
cmp rdx, 0x10
setae al
mov r8, qword [rbp + 0x8f0]
cmovae rcx, r8
mov qword [rbp + 0x230], rcx
test al, al
je 0x140024748
inc rdx
mov rax, r8
cmp rdx, 0x1000
jb 0x140024740
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024c00
mov rcx, r8
call fcn.1400741e4
mov qword [rbp + 0x900], rsi
mov qword [rbp + 0x908], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x8f0], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x14002479c
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024797
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024c07
call fcn.1400741e4
mov rcx, qword [rbp + 0x230]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400247b0
xor dil, dil
mov word [rbp + 0x22a], ax
movups xmm0, xmmword [str.Access_Control_Allow_Origin]
movups xmmword [rbp + 0x910], xmm0
movsd xmm0, qword [0x1400781c8]
movsd qword [rbp + 0x920], xmm0
mov eax, dword [0x1400781d0]
mov dword [rbp + 0x928], eax
mov eax, Ordinal_46
mov word [rbp + 0x6d4], ax
lea rax, [rbp + 0x910]
mov qword [rbp + 0x210], rax
mov dword [rbp + 0x208], 0x1001b
lea rax, [rbp + 0x6d4]
mov qword [rbp + 0x218], rax
mov ecx, 1
lea rax, [rbp + 0x208]
mov qword [rbp + 0x240], rax
mov word [rbp + 0x238], cx
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], esi
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x220]
xor r8d, r8d
mov rdx, qword [r13 + 0x10]
mov rcx, qword [rbp + 0x1f0]
call qword [sym.imp.HTTPAPI.dll_HttpSendHttpResponse]
movzx r12d, r12b
test eax, eax
cmove r12d, esi
mov rcx, r13
call fcn.1400741e4
test dil, dil
je 0x140024c4d
test r14, r14
je 0x1400248c5
sub r15, r14
cmp r15, 0x1000
jb 0x1400248b9
add r15, 0x27
mov rcx, qword [r14 - 8]
sub r14, rcx
lea rax, [r14 - 8]
cmp rax, 0x1f
ja 0x140024c0e
mov r14, rcx
mov rdx, r15
mov rcx, r14
call fcn.1400741e4
nop
mov rax, qword [rbp + 0x7f0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x7f0], rax
mov rax, qword [rbp + 0x7f0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x7ec], edx
lea rcx, [rbp + 0x808]
call fcn.140017960
lea rcx, [rbp + 0x810]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x888]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x708]
cmp rdx, 0x10
jb 0x14002495f
inc rdx
mov rcx, qword [rbp + 0x6f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002495a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024c15
call fcn.1400741e4
mov qword [rbp + 0x700], rsi
mov qword [rbp + 0x708], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x6f0], 0
movzx edx, byte [rbp + 0x6a0]
lea rcx, [rbp + 0x6a8]
call fcn.14001a990
nop
mov rdx, qword [rbp + 0x750]
cmp rdx, 0x10
jb 0x1400249cd
inc rdx
mov rcx, qword [rbp + 0x738]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400249c8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024c1c
call fcn.1400741e4
mov qword [rbp + 0x748], rsi
mov qword [rbp + 0x750], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x738], 0
mov rdx, qword [rbp + 0x7e0]
cmp rdx, 0x10
jb 0x140024a28
inc rdx
mov rcx, qword [rbp + 0x7c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024a22
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024c23
call fcn.1400741e4
nop
mov rdx, qword [rbp + 0x7b0]
cmp rdx, 0x10
jb 0x140024a69
inc rdx
mov rcx, qword [rbp + 0x798]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024a64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024c2a
call fcn.1400741e4
mov qword [rbp + 0x7a8], rsi
mov qword [rbp + 0x7b0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x798], 0
mov rdx, qword [rbp + 0x770]
cmp rdx, 0x10
jb 0x140024ac4
inc rdx
mov rcx, qword [rbp + 0x758]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024abe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024c31
call fcn.1400741e4
nop
mov rdx, qword [rbp + 0x790]
cmp rdx, 0x10
jb 0x140024b06
inc rdx
mov rcx, qword [rbp + 0x778]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024b00
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024c38
call fcn.1400741e4
nop
mov rdx, qword [rbp + 0x6c8]
cmp rdx, 0x10
jb 0x140024b47
inc rdx
mov rcx, qword [rbp + 0x6b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024b42
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024c3f
call fcn.1400741e4
mov qword [rbp + 0x6c0], rsi
mov qword [rbp + 0x6c8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x6b0], 0
mov rdx, qword [rbp + 0x728]
cmp rdx, 8
jb 0x140024ba6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x710]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024ba1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024c46
call fcn.1400741e4
mov r15, 0xffffffffffffffff
lea r14d, [r15 + 2]
cmp r12b, 1
je 0x1400238a0
mov rcx, qword [rbp + 0x930]
xor rcx, rsp
call fcn.140073f40
lea r11, [rsp + 0xa40]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.14000ee90
nop
call fcn.140001e00
nop
call fcn.14000ee90
int3