Function at 0x140099ed0
Capabilities:
Create service
Start service

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x2c0
lea rbp, [rsp + 0x90]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1402930e8]
xor rax, rsp
mov qword [rbp + 0x220], rax
mov rsi, rcx
xor ebx, ebx
mov dword [rbp], ebx
lea rax, [rbp + 0xc0]
mov qword [rbp + 0x30], rax
mov rdi, qword [rcx + 0x10]
mov r14, rcx
cmp qword [rcx + 0x18], 0x10
jb 0x140099f30
mov r14, qword [rcx]
call fcn.140105a94
mov r15d, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], rbx
mov qword [rbp + 0xd8], 7
mov word [rbp + 0xc0], bx
mov dword [rbp], 4
test rdi, rdi
je 0x140099fe0
cmp rdi, 0x7fffffff
ja 0x14009ae43
mov dword [rsp + 0x20], ebx
xor r9d, r9d
mov r8d, edi
mov rdx, r14
mov ecx, eax
call fcn.140105abc
mov rbx, rax
shr rax, 0x20
test eax, eax
jne 0x14009ae4e
xor r8d, r8d
movsxd rdx, ebx
lea rcx, [rbp + 0xc0]
call fcn.140076c40
lea r9, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 8
cmovae r9, qword [rbp + 0xc0]
mov dword [rsp + 0x20], ebx
mov r8d, edi
mov rdx, r14
mov ecx, r15d
call fcn.140105abc
shr rax, 0x20
test eax, eax
jne 0x14009ae56
xor ebx, ebx
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0xc0]
call fcn.14009af60
nop
mov r12, rax
cmp qword [rax + 0x18], 8
jb 0x14009a001
mov r12, qword [rax]
mov r15, qword [rax + 0x10]
call fcn.140105a94
mov r13d, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], rbx
mov qword [rbp + 0x158], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x140], 0
mov dword [rbp], 0x43
test r15, r15
je 0x14009a13d
cmp r15, 0x7fffffff
ja 0x14009ae5e
mov dword [rsp + 0x20], ebx
xor r9d, r9d
mov r8d, r15d
mov rdx, r12
mov ecx, eax
call fcn.140105b04
mov rbx, rax
shr rax, 0x20
test eax, eax
jne 0x14009ae69
movsxd rcx, ebx
mov rdx, qword [rbp + 0x150]
cmp rcx, rdx
ja 0x14009a0a3
lea rax, [rbp + 0x140]
cmp qword [rbp + 0x158], 0x10
cmovae rax, qword [rbp + 0x140]
mov qword [rbp + 0x150], rcx
mov byte [rax + rcx], 0
jmp 0x14009a106
mov r14, rcx
sub r14, rdx
mov r8, qword [rbp + 0x158]
mov rax, r8
sub rax, rdx
cmp r14, rax
ja 0x14009a0ec
mov qword [rbp + 0x150], rcx
lea rdi, [rbp + 0x140]
cmp r8, 0x10
cmovae rdi, qword [rbp + 0x140]
add rdi, rdx
mov r8, r14
xor edx, edx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memset
mov byte [r14 + rdi], 0
jmp 0x14009a106
mov byte [rsp + 0x20], 0
mov r9, r14
xor r8d, r8d
mov rdx, r14
lea rcx, [rbp + 0x140]
call fcn.140003270
lea r9, [rbp + 0x140]
cmp qword [rbp + 0x158], 0x10
cmovae r9, qword [rbp + 0x140]
mov dword [rsp + 0x20], ebx
mov r8d, r15d
mov rdx, r12
mov ecx, r13d
call fcn.140105b04
shr rax, 0x20
test eax, eax
jne 0x14009ae3b
xor ebx, ebx
mov dword [rbp], Ordinal_60
lea rcx, [rbp + 0x100]
call fcn.1400151c0
nop
lea rcx, [rbp + 0xc0]
call fcn.1400151c0
xor edx, edx
xor ecx, ecx
mov r8d, 0xf003f
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov rdi, rax
test rax, rax
jne 0x14009a4b7
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea edx, [rdi + 7]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov dword [rbp], 0x43b
mov qword [rbp + 0x18], rbx
mov qword [rbp + 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp + 8], dil
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x78678d2590de1acf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rbx, 0x8a3dd340ec1c6c16
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rsi, 0x7867d605b0fe3ac5
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movdqa xmm0, xmmword [rbp + 0x30]
pxor xmm0, xmmword [rbp + 0x160]
movdqa xmmword [rbp + 0x30], xmm0
lea rdx, [rbp + 0x30]
call fcn.140001c20
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea edx, [rdi + 9]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov dword [rbp], 0x4bb
mov qword [rbp + 0x18], rdi
mov qword [rbp + 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp + 8], dil
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x7867d605b0fe3ae8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
movdqa xmm0, xmmword [rbp + 0x40]
pxor xmm0, xmmword [rbp + 0x170]
movdqa xmmword [rbp + 0x40], xmm0
lea rdx, [rbp + 0x40]
call fcn.140001c20
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea edx, [rdi + 7]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov dword [rbp], 0x5bb
mov qword [rbp + 0x18], rdi
mov qword [rbp + 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp + 8], dil
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x7867d605b0fe3a98
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [rbp + 0x50]
pxor xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x50], xmm0
lea rdx, [rbp + 0x50]
call fcn.140001c20
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea edx, [rdi + 7]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov dword [rbp], 0x7bb
mov qword [rbp + 0x18], rdi
mov qword [rbp + 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp + 8], dil
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x5803b369d99f7ce5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rax, 0xaa53b630833c0362
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs rax, 0x43c6693262319304
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
movabs rax, 0xafa02c394ab7bb75
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movabs rax, 0x63a30a5b1443f677
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
movabs rax, 0xafd2495e2bd9da18
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x200]
vmovdqa ymmword [rbp + 0xe0], ymm1
lea rdx, [rbp + 0xe0]
vzeroupper
call fcn.140001c20
xor r14b, r14b
mov rdx, qword [rbp + 0x158]
cmp rdx, 0x10
jb 0x14009ae07
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009ae02
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14009ae02
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, rdi
call fcn.140098e20
test al, al
jne 0x14009a469
mov rcx, rdi
call fcn.140099690
test al, al
jne 0x14009a469
cmp qword [rsi + 0x18], 0x10
jb 0x14009a4d9
mov rsi, qword [rsi]
lea r8, [rbp + 0x140]
cmp qword [rbp + 0x158], 0x10
cmovae r8, qword [rbp + 0x140]
lea rdx, [rbp + 0x140]
cmovae rdx, qword [rbp + 0x140]
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 1
mov r9d, 0x10030
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_CreateServiceA]
mov rsi, rax
test rax, rax
jne 0x14009a99e
lea rdx, [rbp + 0x140]
cmp qword [rbp + 0x158], 0x10
cmovae rdx, qword [rbp + 0x140]
lea r8d, [rax + 0x10]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_OpenServiceA]
mov rsi, rax
test rax, rax
jne 0x14009a99e
lea edx, [rax + 7]
lea rcx, [rbp + 0x200]
call fcn.140066e90
mov rdx, qword [rbp + 0x218]
cmp rdx, 0x10
jb 0x14009a5cf
inc rdx
mov rcx, qword [rbp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009a5ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14009a5ca
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140106740
movdqa xmm0, xmmword [0x14010de80]
movdqu xmmword [rbp + 0x210], xmm0
mov byte [rbp + 0x200], 0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x78678d2590de1acf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rbx, 0x8a3dd340ec1c6c16
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rsi, 0x7867d605b0fe3ac5
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [rbp + 0x50]
pxor xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x50], xmm0
lea rdx, [rbp + 0x50]
call fcn.140001c20
mov edx, 9
lea rcx, [rbp + 8]
call fcn.140066e90
lea rcx, [rbp + 8]
call fcn.140006090
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x7867d605b0fe3ae8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
movdqa xmm0, xmmword [rbp + 0x40]
pxor xmm0, xmmword [rbp + 0x170]
movdqa xmmword [rbp + 0x40], xmm0
lea rdx, [rbp + 0x40]
call fcn.140001c20
mov edx, 7
lea rcx, [rbp + 0xe0]
call fcn.140066e90
lea rcx, [rbp + 0xe0]
call fcn.140006090
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x7867d605b0fe3a98
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movdqa xmm0, xmmword [rbp + 0x30]
pxor xmm0, xmmword [rbp + 0x160]
movdqa xmmword [rbp + 0x30], xmm0
lea rdx, [rbp + 0x30]
call fcn.140001c20
mov edx, 7
lea rcx, [rbp + 0x120]
call fcn.140066e90
lea rcx, [rbp + 0x120]
call fcn.140006090
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x5803b369d99f7ce5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0xfe5cb6328f3c0362
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x11c664376135d612
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0xddb73a7e4eb5b879
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0x99ccbadae7c028f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x903e2a1c56b99e1f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0xf26b62e769b3c63a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0xbc7a345ec4b173ae
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0x6905520d046b1fbf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rdx, 0x1061a9e82db57d3e
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0x63a30a5b1443f677
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rax, 0xafd2495e2bd9da18
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
movabs rax, 0x65eceb81cb1f6bf9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
movabs rax, 0xe3574e3c33caff7a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
movabs rax, 0x87041bc70cdfa45b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
movabs rax, 0xd50c5d2aaad053dc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
movabs rax, 0x6905520d04186acd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x1a0]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x1c0]
vmovdqa ymmword [rbp + 0x80], ymm1
vmovdqa xmm0, xmmword [rbp + 0xa0]
vpxor xmm0, xmm0, xmmword [rbp + 0x1e0]
vmovdqa xmmword [rbp + 0xa0], xmm0
lea rdx, [rbp + 0x60]
vzeroupper
call fcn.140001c20
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x14009a469
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_StartServiceA]
mov ebx, eax
test eax, eax
setne r14b
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test ebx, ebx
jne 0x14009a46c
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea edx, [rbx + 7]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov dword [rbp], 0x103b
xor edi, edi
mov qword [rbp + 0x18], rdi
mov qword [rbp + 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp + 8], dil
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x78678d2590de1acf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rbx, 0x8a3dd340ec1c6c16
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rsi, 0x7867d605b0fe3ac5
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [rbp + 0x50]
pxor xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x50], xmm0
lea rdx, [rbp + 0x50]
call fcn.140001c20
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea edx, [rdi + 9]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov dword [rbp], 0x303b
mov qword [rbp + 0x18], rdi
mov qword [rbp + 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp + 8], dil
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x7867d605b0fe3ae8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
movdqa xmm0, xmmword [rbp + 0x40]
pxor xmm0, xmmword [rbp + 0x170]
movdqa xmmword [rbp + 0x40], xmm0
lea rdx, [rbp + 0x40]
call fcn.140001c20
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea edx, [rdi + 7]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov dword [rbp], 0x383b
mov qword [rbp + 0x18], rdi
mov qword [rbp + 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp + 8], dil
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x7867d605b0fe3a98
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movdqa xmm0, xmmword [rbp + 0x30]
pxor xmm0, xmmword [rbp + 0x160]
movdqa xmmword [rbp + 0x30], xmm0
lea rdx, [rbp + 0x30]
call fcn.140001c20
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea edx, [rdi + 7]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov dword [rbp], 0x783b
mov qword [rbp + 0x18], rdi
mov qword [rbp + 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp + 8], dil
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x5803b369d99f7ce5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0xfe5cb6328f3c0362
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x11c664376135d612
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0xddb73a7e4eb5b879
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0x99ccbadae7c028f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x903e2a1c56b99e1f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0xf26b62e769b3c63a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0xbc7a345ec4b173ae
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0x6905520d046b1fbf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rdx, 0x1061a9e82db57d3e
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0x63a30a5b1443f677
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rax, 0xafd2495e2bd9da18
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
movabs rax, 0x65eceb81cb1f6bf9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
movabs rax, 0xe3574e3c33caff7a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
movabs rax, 0x87041bc70cdfa45b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
movabs rax, 0xd50c5d2aaad053dc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
movabs rax, 0x6905520d04186acd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x1a0]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x1c0]
vmovdqa ymmword [rbp + 0x80], ymm1
vmovdqa xmm0, xmmword [rbp + 0xa0]
vpxor xmm0, xmm0, xmmword [rbp + 0x1e0]
vmovdqa xmmword [rbp + 0xa0], xmm0
lea rdx, [rbp + 0x60]
vzeroupper
call fcn.140001c20
jmp 0x14009a46c
call fcn.140106740
movzx eax, r14b
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.140106b10
lea r11, [rsp + 0x2c0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, eax
call fcn.1400150d0
nop
mov ecx, reloc.WLDAP32.dll_Ordinal_22
call fcn.140015090
int3
mov ecx, eax
call fcn.1400150d0
int3
mov ecx, eax
call fcn.1400150d0
nop
mov ecx, reloc.WLDAP32.dll_Ordinal_22
call fcn.140015090
int3
mov ecx, eax
call fcn.1400150d0
int3