Function at 0x140181bd0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x3a8]
sub rsp, 0x480
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x1402bf270]
xor rax, rsp
mov qword [rbp + 0x350], rax
mov r15, rcx
xor esi, esi
mov dword [rsp + 0x58], esi
mov dword [rbp + 0x50], esi
mov dword [rbp + 0x54], esi
mov dword [rbp + 0x58], esi
mov edx, 0x69696969
lea rcx, [rbp + 0x50]
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_17]
mov edx, 0x69696969
lea rcx, [rbp + 0x54]
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_18]
mov edx, 0x69696969
lea rcx, [rbp + 0x58]
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_29]
cmp dword [rbp + 0x50], 0x69696969
jne 0x1401830da
cmp dword [rbp + 0x54], 0x69696969
jne 0x1401830da
cmp dword [rbp + 0x58], 0x69696969
jne 0x1401830da
cmp qword [r15 + 0x30], 0xa
jne 0x140181c83
cmp qword [r15 + 0x50], 0x40
je 0x140181c88
call fcn.14019b730
xorps xmm0, xmm0
movups xmmword [rbp + 0x148], xmm0
mov qword [rbp + 0xe8], rsi
mov rbx, rsi
mov qword [rbp + 0xf8], rbx
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x100], rdi
mov byte [rbp + 0xe8], bl
lea rcx, [rbp + 0x148]
call qword [sym.imp.RPCRT4.dll_UuidCreate]
mov qword [rbp + 0x10], rsi
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x148]
call qword [sym.imp.RPCRT4.dll_UuidToStringA]
lea r14, [rdi - 0x10]
test eax, eax
jne 0x140181d14
mov rdx, qword [rbp + 0x10]
mov r8, r14
inc r8
cmp byte [rdx + r8], 0
jne 0x140181ce6
lea rcx, [rbp + 0xe8]
call fcn.14014d7f0
lea rcx, [rbp + 0x10]
call qword [sym.imp.RPCRT4.dll_RpcStringFreeA]
mov rdi, qword [rbp + 0x100]
mov rbx, qword [rbp + 0xf8]
mov qword [rbp + 0x70], rsi
mov qword [rbp + 0x80], rsi
mov qword [rbp + 0x88], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x70], 0
mov qword [rbp + 0x18], rsi
mov qword [rbp + 0x28], rsi
mov qword [rbp + 0x30], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_recv
cmp rbx, r8
cmovb r8, rbx
lea rdx, [rbp + 0xe8]
cmp rdi, 0x10
cmovae rdx, qword [rbp + 0xe8]
lea rcx, [rbp + 0x18]
call fcn.14014d7f0
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x140181da5
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140181da0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140183018
call fcn.140268610
movups xmm0, xmmword [rbp + 0x18]
movups xmmword [rbp + 0x70], xmm0
movups xmm1, xmmword [rbp + 0x28]
movups xmmword [rbp + 0x80], xmm1
mov byte [rsp + 0x58], 0x3f
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_45]
xor al, 0x3f
xor ecx, ecx
xor al, 0x3f
mov byte [rsp + 0x59], al
mov byte [rsp + 0x5a], cl
lea rax, [rsp + 0x59]
mov rcx, r14
nop word [rax + rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x140181de0
movabs rax, 0x7fffffffffffffff
mov rdx, qword [rbp + 0x28]
sub rax, rdx
cmp rax, rcx
jb 0x140183152
lea r9, [rbp + 0x70]
cmp qword [rbp + 0x30], 0x10
cmovae r9, qword [rbp + 0x18]
mov qword [rsp + 0x30], rcx
lea rax, [rsp + 0x59]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea r8, [rbp + 0x70]
movzx edx, byte [rsp + 0x70]
lea rcx, [rbp + 0xc8]
call fcn.140185cf0
nop
lea rdx, [r15 + 0x40]
cmp qword [r15 + 0x58], 0x10
jb 0x140181e4a
mov rdx, qword [r15 + 0x40]
mov r8, qword [r15 + 0x50]
lea rcx, [rbp + 0xc8]
call fcn.14017e470
movups xmm6, xmmword [rax]
movups xmmword [rsp + 0x78], xmm6
movups xmm7, xmmword [rax + 0x10]
movups xmmword [rbp - 0x78], xmm7
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rbx, [r15 + 0x258]
lea rax, [rsp + 0x78]
cmp rbx, rax
je 0x140181ed1
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x140181ec0
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140181ebb
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140181f04
mov rcx, r8
call fcn.140268610
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
movups xmmword [rbx], xmm6
movups xmmword [rbx + 0x10], xmm7
jmp 0x140181f11
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x140181f11
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140181f0b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140181f0b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140268610
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x140181f55
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140181f50
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140181f50
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140268610
lea rcx, [rbp + 0x108]
call fcn.140196ae0
nop
call fcn.1401b7c60
mov r13, rax
xor edx, edx
mov r8d, 0xe8
lea rcx, [rbp + 0x160]
call fcn.140269632
lea rcx, [rbp + 0x160]
call fcn.140184400
nop
mov byte [rbp - 0x68], reloc.WS2_32.dll_WSAGetLastError
mov cl, reloc.WLDAP32.dll_Ordinal_27
mov dl, reloc.WLDAP32.dll_Ordinal_22
mov r8b, Ordinal_33
mov r9b, 0xa
mov al, 0x52
mov r10b, 6
mov r11b, 1
movzx ebx, r10b
movzx edi, cl
xor esi, esi
xor cl, 0x6f
mov byte [rbp - 0x67], cl
xor dl, 0x6f
mov byte [rbp - 0x66], dl
xor r8b, 0x6f
mov byte [rbp - 0x65], r8b
xor r9b, 0x6f
mov byte [rbp - 0x64], r9b
xor al, 0x6f
mov byte [rbp - 0x63], al
xor r10b, 0x6f
mov byte [rbp - 0x62], r10b
xor r11b, 0x6f
mov byte [rbp - 0x61], r11b
xor bl, 0x6f
mov byte [rbp - 0x60], bl
xor dil, 0x6f
mov byte [rbp - 0x5f], dil
mov byte [rbp - 0x5e], sil
lea rdx, [rbp - 0x67]
lea rcx, [rbp + 0x160]
call fcn.1401849e0
mov byte [rsp + 0x58], Ordinal_46
mov cl, reloc.WS2_32.dll_listen
mov dl, 0x5d
mov r8b, Ordinal_79
mov r9b, 0x59
mov r10b, reloc.WLDAP32.dll_Ordinal_22
xor cl, 0x2b
mov byte [rsp + 0x59], cl
xor dl, 0x2b
mov byte [rsp + 0x5a], dl
xor r8b, 0x2b
mov byte [rsp + 0x5b], r8b
xor r9b, 0x2b
mov byte [rsp + 0x5c], r9b
xor r10b, 0x2b
mov byte [rsp + 0x5d], r10b
mov byte [rsp + 0x5e], sil
lea rbx, [r15 + 0x60]
lea rdx, [rsp + 0x59]
mov rcx, rax
call fcn.1401849e0
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
jb 0x14018205c
mov rbx, qword [rbx]
mov rdx, rbx
mov rcx, rax
call fcn.140188f30
mov byte [rsp + 0x40], 0x42
mov cl, 0x64
mov dl, 0x2a
mov r8b, reloc.WLDAP32.dll_Ordinal_35
mov r9b, Ordinal_50
movzx r10d, dl
mov r11b, 0x7f
xor ebx, ebx
xor cl, 0x42
mov byte [rsp + 0x41], cl
xor dl, 0x42
mov byte [rsp + 0x42], dl
xor r8b, 0x42
mov byte [rsp + 0x43], r8b
xor r9b, 0x42
mov byte [rsp + 0x44], r9b
xor r10b, 0x42
mov byte [rsp + 0x45], r10b
xor r11b, 0x42
mov byte [rsp + 0x46], r11b
mov byte [rsp + 0x47], bl
lea rdx, [rsp + 0x41]
mov rcx, rax
call fcn.1401849e0
lea rdx, [rbp + 0x108]
cmp qword [rbp + 0x120], 0x10
cmovae rdx, qword [rbp + 0x108]
mov r8, qword [rbp + 0x118]
mov rcx, rax
call fcn.140188f30
mov byte [rsp + 0x60], reloc.WS2_32.dll_sendto
mov cl, reloc.WLDAP32.dll_Ordinal_50
mov dl, 0x71
mov r8b, 0x7a
mov r9b, 0x77
mov r10b, 0x7f
movzx r11d, dl
mov bl, 0x6d
mov dil, reloc.WLDAP32.dll_Ordinal_41
xor cl, 0x14
mov byte [rsp + 0x61], cl
xor dl, 0x14
mov byte [rsp + 0x62], dl
xor r8b, 0x14
mov byte [rsp + 0x63], r8b
xor r9b, 0x14
mov byte [rsp + 0x64], r9b
xor r10b, 0x14
mov byte [rsp + 0x65], r10b
xor r11b, 0x14
mov byte [rsp + 0x66], r11b
xor bl, 0x14
mov byte [rsp + 0x67], bl
xor dil, 0x14
mov byte [rsp + 0x68], dil
mov byte [rsp + 0x69], sil
lea rdx, [rsp + 0x61]
mov rcx, rax
call fcn.1401849e0
lea rdx, [rbp + 0x70]
cmp qword [rbp + 0x88], 0x10
cmovae rdx, qword [rbp + 0x70]
mov r8, qword [rbp + 0x80]
mov rcx, rax
call fcn.140188f30
mov byte [rsp + 0x50], reloc.WS2_32.dll_WSAStartup
mov cl, 0x55
mov dl, reloc.SecureEngineSDK64.dll_Ordinal_29
mov r8b, reloc.WS2_32.dll_select
mov r9b, reloc.WLDAP32.dll_Ordinal_30
mov r10b, reloc.WLDAP32.dll_Ordinal_22
mov r11b, Ordinal_79
xor ebx, ebx
xor cl, 0x73
mov byte [rsp + 0x51], cl
xor dl, 0x73
mov byte [rsp + 0x52], dl
xor r8b, 0x73
mov byte [rsp + 0x53], r8b
xor r9b, 0x73
mov byte [rsp + 0x54], r9b
xor r10b, 0x73
mov byte [rsp + 0x55], r10b
xor r11b, 0x73
mov byte [rsp + 0x56], r11b
mov byte [rsp + 0x57], bl
lea rdx, [rsp + 0x51]
mov rcx, rax
call fcn.1401849e0
mov rbx, rax
mov rdx, r15
cmp qword [r15 + 0x18], 0x10
jb 0x1401821e1
mov rdx, qword [r15]
xor r8d, r8d
mov rcx, r13
call fcn.1401b7980
mov rdx, rax
mov rcx, rbx
call fcn.1401849e0
mov byte [rbp + 0x18], 0x61
mov cl, 0x47
mov dl, reloc.WS2_32.dll_ntohl
mov r8b, reloc.WLDAP32.dll_Ordinal_22
mov r9b, reloc.WS2_32.dll_ntohs
mov r10b, 4
mov r11b, reloc.WS2_32.dll_send
mov bl, 8
mov dil, 5
mov sil, 0x5c
xor r12d, r12d
xor cl, 0x61
mov byte [rbp + 0x19], cl
xor dl, 0x61
mov byte [rbp + 0x1a], dl
xor r8b, 0x61
mov byte [rbp + 0x1b], r8b
xor r9b, 0x61
mov byte [rbp + 0x1c], r9b
xor r10b, 0x61
mov byte [rbp + 0x1d], r10b
xor r11b, 0x61
mov byte [rbp + 0x1e], r11b
xor bl, 0x61
mov byte [rbp + 0x1f], bl
xor dil, 0x61
mov byte [rbp + 0x20], dil
xor sil, 0x61
mov byte [rbp + 0x21], sil
mov byte [rbp + 0x22], r12b
lea rbx, [r15 + 0x20]
lea rdx, [rbp + 0x19]
mov rcx, rax
call fcn.1401849e0
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
lea r12, [r15 + 0x40]
jb 0x14018227e
mov rbx, qword [rbx]
mov rdx, rbx
mov rcx, rax
call fcn.140188f30
nop
xor edi, edi
mov qword [rbp + 0xc8], rdi
mov qword [rbp + 0xd8], rdi
mov qword [rbp + 0xe0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xc8], dil
mov dword [rsp + 0x58], reloc.WS2_32.dll_socket
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], rax
mov rcx, qword [rbp + 0x1d8]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x1401822fd
mov rax, qword [rbp + 0x1a8]
mov r8, qword [rax]
test r8, r8
je 0x1401822fd
mov rax, qword [rbp + 0x188]
mov rdx, qword [rax]
cmp r8, qword [rbp + 0x1d0]
cmovb r8, qword [rbp + 0x1d0]
sub r8, rdx
jmp 0x140182335
test cl, 4
jne 0x14018232d
mov rax, qword [rbp + 0x1a0]
mov rcx, qword [rax]
test rcx, rcx
je 0x14018232d
mov rax, qword [rbp + 0x180]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x1b8]
movsxd r8, dword [rax]
sub r8, rdx
add r8, rcx
jmp 0x140182335
mov r8, qword [rbp + 0x20]
mov rdx, qword [rbp + 0x18]
test rdx, rdx
je 0x140182347
lea rcx, [rbp + 0xc8]
call fcn.14014d7f0
nop
mov rcx, r13
call fcn.1401b7c50
lea rax, [rsp + 0x78]
mov qword [rsp + 0x50], rax
lea rdx, [r15 + 0x80]
lea rcx, [rsp + 0x78]
call fcn.14014d710
mov rbx, rax
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x128]
call fcn.14014d710
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0xa8]
call fcn.140183e00
nop
movdqa xmm0, xmmword [0x1402a33b0]
movdqu xmmword [rbp + 0x18], xmm0
xor eax, eax
mov byte [rbp + 0x28], al
mov rcx, rdi
nop dword [rax]
movzx eax, byte [rbp + 0x18]
xor byte [rbp + rcx + 0x19], al
inc rcx
cmp rcx, 0xf
jb 0x1401823b0
mov byte [rbp + 0x28], 0
lea rcx, [rbp + 0x19]
mov rax, r14
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1401823d0
lea rcx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0x10
cmovae rcx, qword [rbp + 0xa8]
mov r8, qword [rbp + 0xb8]
cmp r8, rax
jne 0x14018240e
lea rdx, [rbp + 0x19]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14018240e
call fcn.14019b730
mov qword [rbp + 8], rdi
lea r8, [rbp - 0x30]
lea rdx, [rbp + 0xa8]
lea rcx, [rbp + 0x60]
call fcn.140184bb0
nop
mov byte [rsp + 0x40], 0x75
mov al, 0x18
mov cl, reloc.WS2_32.dll_recv
mov dl, 6
movzx r8d, dl
mov r9b, reloc.WS2_32.dll_sendto
mov r10b, reloc.WS2_32.dll_select
movzx r11d, cl
xor ebx, ebx
xor al, 0x75
mov byte [rsp + 0x41], al
xor cl, 0x75
mov byte [rsp + 0x42], cl
xor dl, 0x75
mov byte [rsp + 0x43], dl
xor r8b, 0x75
mov byte [rsp + 0x44], r8b
xor r9b, 0x75
mov byte [rsp + 0x45], r9b
xor r10b, 0x75
mov byte [rsp + 0x46], r10b
xor r11b, 0x75
mov byte [rsp + 0x47], r11b
mov byte [rsp + 0x48], bl
mov qword [rbp + 0x18], rdi
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x30], reloc.WS2_32.dll_ntohs
lea rax, [rsp + 0x41]
mov r8, r14
inc r8
cmp byte [rax + r8], bl
jne 0x140182496
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0x18]
call fcn.14014d7f0
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x60]
call fcn.140185bd0
nop
mov qword [rbp + 0x128], rdi
mov qword [rbp + 0x138], rdi
mov r13d, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x140], r13
mov byte [rbp + 0x128], 0
mov dword [rsp + 0x58], reloc.WLDAP32.dll_Ordinal_143
cmp byte [rax], 3
jne 0x140183158
mov rdx, qword [rax + 8]
lea rax, [rbp + 0x128]
cmp rax, rdx
je 0x14018251f
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x14018250c
mov rdx, qword [rdx]
lea rcx, [rbp + 0x128]
call fcn.14014d7f0
mov r13, qword [rbp + 0x140]
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x250]
call fcn.140269632
lea rcx, [rbp + 0x250]
call fcn.140184340
nop
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x90], xmm1
mov qword [rbp + 0xa0], rdi
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea rcx, [rbp + 0x90]
call fcn.140186950
mov rax, qword [rbp + 0x90]
lea rcx, [rax + 0x20]
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov qword [rbp + 0x98], rcx
mov rax, qword [rbp + 0x90]
sub rcx, rax
lea r8, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0x10
cmovae r8, qword [rbp + 0xa8]
cmp qword [r12 + 0x18], 0x10
jb 0x1401825ac
mov r12, qword [r12]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0xb8]
mov rdx, qword [r15 + 0x50]
mov rcx, r12
call fcn.1401912a0
mov r12, qword [rbp + 0x98]
mov rsi, qword [rbp + 0x90]
cmp rsi, r12
je 0x14018263c
nop dword [rax]
movzx edi, byte [rsi]
lea rdx, [0x1401813e0]
lea rcx, [rbp + 0x260]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rbx, rax
mov rcx, qword [rax]
movsxd rdx, dword [rcx + 4]
mov byte [rdx + rax + 0x58], Ordinal_50
mov edx, 2
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_struct_std::_Smanip_long_long___int64_____cdecl_std::setw_long_long___int64__]
mov r8, qword [rax]
mov rcx, qword [rbx]
movsxd rcx, dword [rcx + 4]
add rcx, rbx
mov rdx, qword [rax + 8]
call r8
mov edx, edi
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
inc rsi
cmp rsi, r12
jne 0x1401825e0
lea rdi, [0x140320168]
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rdi, qword [0x140320168]
xor r12d, r12d
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x58], r12
mov r9d, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x50], r9
mov byte [rbp - 0x68], r12b
mov dword [rsp + 0x58], 0x26f
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], rax
mov rcx, qword [rbp + 0x2d8]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x1401826bd
mov rax, qword [rbp + 0x2a8]
mov r8, qword [rax]
test r8, r8
je 0x1401826bd
mov rax, qword [rbp + 0x288]
mov rdx, qword [rax]
cmp r8, qword [rbp + 0x2d0]
cmovb r8, qword [rbp + 0x2d0]
sub r8, rdx
jmp 0x1401826f5
test cl, 4
jne 0x1401826ed
mov rax, qword [rbp + 0x2a0]
mov rcx, qword [rax]
test rcx, rcx
je 0x1401826ed
mov rax, qword [rbp + 0x280]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x2b8]
movsxd r8, dword [rax]
sub r8, rdx
add r8, rcx
jmp 0x1401826f5
mov r8, qword [rbp + 0x20]
mov rdx, qword [rbp + 0x18]
test rdx, rdx
je 0x140182707
lea rcx, [rbp - 0x68]
call fcn.14014d7f0
mov r9, qword [rbp - 0x50]
lea rdx, [rbp - 0x68]
mov r8, qword [rbp - 0x68]
cmp r9, 0x10
cmovae rdx, r8
movsx ebx, byte [rdx + 7]
movsx eax, byte [rdi + 7]
xor ebx, eax
movsx ecx, byte [rdx + 6]
movsx eax, byte [rdi + 6]
xor ecx, eax
or ebx, ecx
movsx ecx, byte [rdx + 5]
movsx eax, byte [rdi + 5]
xor ecx, eax
or ebx, ecx
movsx ecx, byte [rdx + 4]
movsx eax, byte [rdi + 4]
xor ecx, eax
or ebx, ecx
movsx ecx, byte [rdx + 3]
movsx eax, byte [rdi + 3]
xor ecx, eax
or ebx, ecx
movsx ecx, byte [rdx + 2]
movsx eax, byte [rdi + 2]
xor ecx, eax
or ebx, ecx
movsx ecx, byte [rdx + 1]
movsx eax, byte [rdi + 1]
xor ecx, eax
or ebx, ecx
movsx ecx, byte [rdi]
movsx eax, byte [rdx]
xor ecx, eax
or ebx, ecx
cmp r9, 0x10
jb 0x1401827aa
lea rdx, [r9 + 1]
mov rax, r8
cmp rdx, 0x1000
jb 0x1401827a2
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140182dda
mov rcx, r8
call fcn.140268610
test ebx, ebx
je 0x1401827b3
call fcn.14019b730
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x18]
call fcn.1401844b0
mov rdx, rax
mov rcx, r15
call fcn.140181900
mov byte [rsp + 0x40], Ordinal_79
mov al, gethostname
mov cl, 0x3e
mov dl, Ordinal_41
movzx r8d, dl
mov r9b, reloc.WLDAP32.dll_Ordinal_46
movzx r10d, al
movzx r11d, al
xor ebx, ebx
xor al, 0x4b
mov byte [rsp + 0x41], al
xor cl, 0x4b
mov byte [rsp + 0x42], cl
xor dl, 0x4b
mov byte [rsp + 0x43], dl
xor r8b, 0x4b
mov byte [rsp + 0x44], r8b
xor r9b, 0x4b
mov byte [rsp + 0x45], r9b
xor r10b, 0x4b
mov byte [rsp + 0x46], r10b
xor r11b, 0x4b
mov byte [rsp + 0x47], r11b
mov byte [rsp + 0x48], bl
mov qword [rbp + 0x18], r12
mov qword [rbp + 0x28], r12
mov qword [rbp + 0x30], reloc.WS2_32.dll_ntohs
lea rax, [rsp + 0x41]
mov r8, r14
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], bl
jne 0x140182840
lea rdx, [rsp + 0x41]
lea rcx, [rbp + 0x18]
call fcn.14014d7f0
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x60]
call fcn.140185bd0
cmp byte [rax], 4
jne 0x140183192
cmp byte [rax + 8], bl
je 0x140182ac4
mov byte [rbp + 0x18], 0x5a
mov al, 0x34
mov cl, 0x3f
mov dl, reloc.WLDAP32.dll_Ordinal_45
mov r8b, 9
movzx r9d, cl
mov r10b, reloc.WLDAP32.dll_Ordinal_41
movzx r11d, r10b
mov bl, 0x33
mov dil, 0x35
movzx esi, al
xor r12d, r12d
xor al, 0x5a
mov byte [rbp + 0x19], al
xor cl, 0x5a
mov byte [rbp + 0x1a], cl
xor dl, 0x5a
mov byte [rbp + 0x1b], dl
xor r8b, 0x5a
mov byte [rbp + 0x1c], r8b
xor r9b, 0x5a
mov byte [rbp + 0x1d], r9b
xor r10b, 0x5a
mov byte [rbp + 0x1e], r10b
xor r11b, 0x5a
mov byte [rbp + 0x1f], r11b
xor bl, 0x5a
mov byte [rbp + 0x20], bl
xor dil, 0x5a
mov byte [rbp + 0x21], dil
xor sil, 0x5a
mov byte [rbp + 0x22], sil
mov byte [rbp + 0x23], r12b
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], reloc.WS2_32.dll_ntohs
lea rax, [rbp + 0x19]
mov r8, r14
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r12b
jne 0x140182900
lea rdx, [rbp + 0x19]
lea rcx, [rbp - 0x68]
call fcn.14014d7f0
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x60]
call fcn.140185bd0
cmp byte [rax], 4
jne 0x1401831cc
cmp byte [rax + 8], r12b
je 0x14018293d
mov ecx, Ordinal_104
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [rsp + 0x60], 0x5d
mov al, reloc.WLDAP32.dll_Ordinal_46
mov cl, gethostname
movzx edx, al
movzx r8d, al
mov r9b, 0x34
mov r10b, reloc.WLDAP32.dll_Ordinal_50
mov r11b, 0x33
movzx ebx, r9b
mov dil, reloc.WS2_32.dll_gethostname
xor esi, esi
xor al, 0x5d
mov byte [rsp + 0x61], al
xor cl, 0x5d
mov byte [rsp + 0x62], cl
xor dl, 0x5d
mov byte [rsp + 0x63], dl
xor r8b, 0x5d
mov byte [rsp + 0x64], r8b
xor r9b, 0x5d
mov byte [rsp + 0x65], r9b
xor r10b, 0x5d
mov byte [rsp + 0x66], r10b
xor r11b, 0x5d
mov byte [rsp + 0x67], r11b
xor bl, 0x5d
mov byte [rsp + 0x68], bl
xor dil, 0x5d
mov byte [rsp + 0x69], dil
mov byte [rsp + 0x6a], sil
mov qword [rbp + 0x18], r12
mov qword [rbp + 0x28], r12
mov qword [rbp + 0x30], reloc.WS2_32.dll_ntohs
lea rax, [rsp + 0x61]
mov r8, r14
inc r8
cmp byte [rax + r8], sil
jne 0x1401829c4
lea rdx, [rsp + 0x61]
lea rcx, [rbp + 0x18]
call fcn.14014d7f0
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x60]
call fcn.140185bd0
cmp byte [rax], 3
jne 0x140183206
mov rdx, qword [rax + 8]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x140182a03
mov rdx, qword [rdx]
lea rcx, [r15 + 0x238]
call fcn.14014d7f0
mov byte [0x140323a49], 1
mov byte [rsp + 0x40], reloc.WLDAP32.dll_Ordinal_45
mov al, 0x4c
mov cl, 0x5d
movzx edx, cl
mov r8b, 0x44
mov r9b, 0x43
mov r10b, 0x4b
mov r11b, 0x42
xor ebx, ebx
xor al, 0x2d
mov byte [rsp + 0x41], al
xor cl, 0x2d
mov byte [rsp + 0x42], cl
xor dl, 0x2d
mov byte [rsp + 0x43], dl
xor r8b, 0x2d
mov byte [rsp + 0x44], r8b
xor r9b, 0x2d
mov byte [rsp + 0x45], r9b
xor r10b, 0x2d
mov byte [rsp + 0x46], r10b
xor r11b, 0x2d
mov byte [rsp + 0x47], r11b
mov byte [rsp + 0x48], bl
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], reloc.WS2_32.dll_ntohs
lea rax, [rsp + 0x41]
inc r14
cmp byte [rax + r14], bl
jne 0x140182a81
mov r8, r14
lea rdx, [rsp + 0x41]
lea rcx, [rbp - 0x68]
call fcn.14014d7f0
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x60]
call fcn.140185bd0
mov rdx, rax
lea rcx, [rbp + 0x18]
call fcn.1401844b0
mov rdx, rax
mov rcx, r15
call fcn.140181430
jmp 0x140182dea
mov byte [rbp + 0x18], Ordinal_35
mov al, 0x4b
mov cl, 0x4c
mov dl, 0x54
mov r8b, 0x43
mov r9b, Ordinal_79
movzx r10d, al
mov r11b, 0x46
movzx ebx, dl
mov dil, 0x47
mov sil, 0x50
xor r15d, r15d
xor al, 0x22
mov byte [rbp + 0x19], al
xor cl, 0x22
mov byte [rbp + 0x1a], cl
xor dl, 0x22
mov byte [rbp + 0x1b], dl
xor r8b, 0x22
mov byte [rbp + 0x1c], r8b
xor r9b, 0x22
mov byte [rbp + 0x1d], r9b
xor r10b, 0x22
mov byte [rbp + 0x1e], r10b
xor r11b, 0x22
mov byte [rbp + 0x1f], r11b
xor bl, 0x22
mov byte [rbp + 0x20], bl
xor dil, 0x22
mov byte [rbp + 0x21], dil
xor sil, 0x22
mov byte [rbp + 0x22], sil
mov byte [rbp + 0x23], r15b
mov byte [rsp + 0x40], Ordinal_46
mov al, 0x46
mov cl, Ordinal_79
mov dl, 0x58
movzx r8d, dl
mov r9b, 0x4a
mov r10b, 0x4c
movzx r11d, cl
xor ebx, ebx
xor al, 0x2b
mov byte [rsp + 0x41], al
xor cl, 0x2b
mov byte [rsp + 0x42], cl
xor dl, 0x2b
mov byte [rsp + 0x43], dl
xor r8b, 0x2b
mov byte [rsp + 0x44], r8b
xor r9b, 0x2b
mov byte [rsp + 0x45], r9b
xor r10b, 0x2b
mov byte [rsp + 0x46], r10b
xor r11b, 0x2b
mov byte [rsp + 0x47], r11b
mov byte [rsp + 0x48], bl
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], reloc.WS2_32.dll_ntohs
lea rax, [rsp + 0x41]
mov r8, r14
inc r8
cmp byte [rax + r8], bl
jne 0x140182ba2
lea rdx, [rsp + 0x41]
lea rcx, [rsp + 0x78]
call fcn.14014d7f0
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x60]
call fcn.140185bd0
mov rdi, rax
mov byte [rbp - 0x68], 0
xor eax, eax
mov qword [rbp - 0x60], rax
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.14017fdc0
mov byte [rbp - 0x68], 3
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1402688b0
mov rbx, rax
mov qword [rax], r12
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
lea rax, [rbp + 0x19]
mov r8, r14
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140182c10
lea rdx, [rbp + 0x19]
mov rcx, rbx
call fcn.14014d7f0
mov qword [rbp - 0x60], rbx
lea rdx, [rbp - 0x68]
mov rcx, rdi
call fcn.140185800
movzx ebx, al
movzx edx, byte [rbp - 0x68]
lea rcx, [rbp - 0x60]
call fcn.14017fdc0
nop
test bl, bl
je 0x140182dea
mov byte [rsp + 0x40], 7
mov al, 0x63
mov cl, reloc.SecureEngineSDK64.dll_Ordinal_104
mov dl, reloc.WS2_32.dll_WSASetLastError
mov r8b, 0x69
mov r9b, 0x6b
movzx r10d, cl
mov r11b, Ordinal_104
movzx ebx, al
xor edi, edi
xor al, 7
mov byte [rsp + 0x41], al
xor cl, 7
mov byte [rsp + 0x42], cl
xor dl, 7
mov byte [rsp + 0x43], dl
xor r8b, 7
mov byte [rsp + 0x44], r8b
xor r9b, 7
mov byte [rsp + 0x45], r9b
xor r10b, 7
mov byte [rsp + 0x46], r10b
xor r11b, 7
mov byte [rsp + 0x47], r11b
xor bl, 7
mov byte [rsp + 0x48], bl
mov byte [rsp + 0x49], dil
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], reloc.WS2_32.dll_ntohs
lea rax, [rsp + 0x41]
mov r8, r14
nop dword [rax]
inc r8
cmp byte [rax + r8], dil
jne 0x140182cd0
lea rdx, [rsp + 0x41]
lea rcx, [rsp + 0x78]
call fcn.14014d7f0
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x60]
call fcn.140185bd0
nop
mov qword [rbp + 0x18], r12
mov rcx, r12
mov qword [rbp + 0x28], rcx
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x30], rdi
mov byte [rbp + 0x18], cl
mov dword [rsp + 0x58], 0x116f
cmp byte [rax], 3
jne 0x140183119
mov rdx, qword [rax + 8]
lea rax, [rbp + 0x18]
cmp rax, rdx
je 0x140182d4b
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x140182d3a
mov rdx, qword [rdx]
lea rcx, [rbp + 0x18]
call fcn.14014d7f0
mov rdi, qword [rbp + 0x30]
mov rcx, qword [rbp + 0x28]
mov rbx, qword [rbp + 0x18]
test rcx, rcx
jne 0x140182d5b
call fcn.14019b730
jmp 0x140182da9
lea rdx, [rbp + 0x18]
cmp rdi, 0x10
cmovae rdx, rbx
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], reloc.WS2_32.dll_ntohs
nop dword [rax + rax]
inc r14
cmp byte [rdx + r14], 0
jne 0x140182d80
mov r8, r14
lea rcx, [rsp + 0x78]
call fcn.14014d7f0
lea rcx, [rsp + 0x78]
call fcn.140197470
mov rdi, qword [rbp + 0x30]
mov rbx, qword [rbp + 0x18]
call fcn.14019b730
nop
cmp rdi, 0x10
jb 0x140182dea
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140182de1
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140182de1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.140268610
nop
mov rcx, qword [rbp + 0x90]
test rcx, rcx
je 0x140182e3f
mov rdx, qword [rbp + 0xa0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140182e28
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140182e28
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140268610
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0x250]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x250], rax
mov rax, qword [rbp + 0x250]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x24c], edx
lea rcx, [rbp + 0x268]
call fcn.14014eba0
lea rcx, [rbp + 0x270]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x2e8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
cmp r13, 0x10
jb 0x140182ed7
lea rdx, [r13 + 1]
mov rcx, qword [rbp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140182ed1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140182ed1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140268610
nop
movzx edx, byte [rbp + 0x60]
lea rcx, [rbp + 0x68]
call fcn.14017fdc0
nop
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0x10
jb 0x140182f29
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140182f24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140182f24
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140268610
mov qword [rbp + 0xb8], r12
mov qword [rbp + 0xc0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xa8], 0
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x140182f87
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140182f81
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140182f81
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140268610
nop
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x160], rax
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x15c], edx
lea rcx, [rbp + 0x168]
call fcn.14014eba0
lea rcx, [rbp + 0x170]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x1e8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x120]
cmp rdx, 0x10
jb 0x140183024
inc rdx
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14018301f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14018301f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140268610
mov qword [rbp + 0x118], r12
mov qword [rbp + 0x120], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x108], 0
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x14018307e
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140183079
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140183079
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140268610
mov qword [rbp + 0x80], r12
mov qword [rbp + 0x88], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x70], 0
mov rdx, qword [rbp + 0x100]
cmp rdx, 0x10
jb 0x1401830df
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401830d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401830d3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140268610
jmp 0x1401830df
call fcn.14019b730
mov rcx, qword [rbp + 0x350]
xor rcx, rsp
call fcn.1402683a0
lea r11, [rsp + 0x480]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rcx, rax
call fcn.1401848e0
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x50]
lea rcx, [rbp - 0x68]
call fcn.140190f10
nop
mov r8, rax
lea rcx, [rbp - 0x30]
call fcn.140190fb0
lea rdx, [0x1402bb3d8]
lea rcx, [rbp - 0x30]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.14014d5f0
nop
mov rcx, rax
call fcn.1401848e0
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x50]
lea rcx, [rsp + 0x78]
call fcn.140190f10
nop
mov r8, rax
lea rcx, [rbp + 0x18]
call fcn.140190fb0
lea rdx, [0x1402bb3d8]
lea rcx, [rbp + 0x18]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rax
call fcn.1401848e0
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x50]
lea rcx, [rsp + 0x78]
call fcn.1401911f0
nop
mov r8, rax
lea rcx, [rbp - 0x68]
call fcn.140190fb0
lea rdx, [0x1402bb3d8]
lea rcx, [rbp - 0x68]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rax
call fcn.1401848e0
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x50]
lea rcx, [rsp + 0x78]
call fcn.1401911f0
nop
mov r8, rax
lea rcx, [rbp + 0x18]
call fcn.140190fb0
lea rdx, [0x1402bb3d8]
lea rcx, [rbp + 0x18]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rax
call fcn.1401848e0
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x50]
lea rcx, [rsp + 0x78]
call fcn.140190f10
nop
mov r8, rax
lea rcx, [rbp - 0x68]
call fcn.140190fb0
lea rdx, [0x1402bb3d8]
lea rcx, [rbp - 0x68]
call sub.VCRUNTIME140.dll__CxxThrowException
int3