Function at 0x140015dd0
Capabilities:
Contain obfuscated stackstrings
Get disk information

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov qword [r11 + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x180
mov rax, qword [0x1406a0188]
xor rax, rsp
mov qword [rsp + 0x170], rax
xor r14d, r14d
mov dword [r11 - 0xe8], r14d
lea rcx, [r11 - 0x80]
call fcn.14000dd00
nop
mov dword [rsp + 0xb0], 0x79735c58
mov dword [rsp + 0xb4], 0x786572
lea r8, [rsp + 0xb1]
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0xd8]
call fcn.1400022e0
nop
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140001d40
nop
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae rcx, qword [rsp + 0x48]
mov r9d, 0xffffffff
lea r8d, [r14 + 3]
lea rdx, [rsp + 0x138]
call fcn.140148ef0
mov r8d, eax
test eax, eax
jne 0x140015ee2
mov edx, dword [rsp + 0x148]
test dl, 1
mov r13d, 0x1ff
mov ecx, r13d
mov esi, 0x16d
cmovne ecx, esi
mov dword [rsp + 0x74], ecx
bt edx, 0xa
jae 0x140015ed4
mov eax, dword [rsp + 0x14c]
cmp eax, 0xa000000c
jne 0x140015ec6
mov edi, 4
mov eax, edi
jmp 0x140015f16
cmp eax, 0xa0000003
jne 0x140015ed4
mov eax, 0xa
jmp 0x140015f11
movzx eax, dl
and eax, 0x10
or eax, 0x20
shr eax, 4
jmp 0x140015f11
mov dword [rsp + 0x74], 0xffff
sub eax, 2
je 0x140015f01
sub eax, 1
je 0x140015f01
sub eax, 0x32
je 0x140015f01
cmp eax, 0x46
mov eax, r14d
jne 0x140015f06
mov eax, 1
mov esi, 0x16d
mov r13d, 0x1ff
mov edi, 4
mov dword [rsp + 0x70], r8d
lea r15, [0x1401b0010]
mov qword [rsp + 0x78], r15
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
test eax, eax
je 0x140015f88
cmp eax, 1
sete bl
lea rcx, [rsp + 0x48]
call fcn.14000da10
nop
mov rdx, qword [rsp + 0xf0]
cmp rdx, 0x10
jb 0x140015f9a
inc rdx
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015f95
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140015f95
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov bl, 1
test r8d, r8d
jne 0x140016a61
jmp 0x140015f3c
call fcn.140149858
test bl, bl
je 0x14001605a
mov dword [rsp + 0xb0], 0x79735c5b
mov dword [rsp + 0xb4], 0x786572
lea r8, [rsp + 0xb1]
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0xd8]
call fcn.1400022e0
nop
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140001d40
nop
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae rcx, qword [rsp + 0x48]
call fcn.140148dc4
shr rax, 0x20
test eax, eax
jne 0x140016a78
lea rcx, [rsp + 0x48]
call fcn.14000da10
nop
mov rdx, qword [rsp + 0xf0]
cmp rdx, 0x10
jb 0x14001605a
inc rdx
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016055
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140016055
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140149858
movdqa xmm0, xmmword [str.__syrexconfigs]
movdqu xmmword [rsp + 0x70], xmm0
lea r8, [rsp + 0x71]
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0x138]
call fcn.1400022e0
nop
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140001d40
nop
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae rcx, qword [rsp + 0x48]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rsp + 0xd8]
call fcn.140148ef0
mov r8d, eax
test eax, eax
jne 0x14001610d
mov edx, dword [rsp + 0xe8]
test dl, 1
mov ecx, r13d
cmovne ecx, esi
mov dword [rsp + 0x74], ecx
bt edx, 0xa
jae 0x1400160ff
mov eax, dword [rsp + 0xec]
cmp eax, 0xa000000c
jne 0x1400160f1
mov eax, edi
jmp 0x140016131
cmp eax, 0xa0000003
jne 0x1400160ff
mov eax, 0xa
jmp 0x140016131
movzx eax, dl
and eax, 0x10
or eax, 0x20
shr eax, 4
jmp 0x140016131
mov dword [rsp + 0x74], 0xffff
sub eax, 2
je 0x14001612c
sub eax, 1
je 0x14001612c
sub eax, 0x32
je 0x14001612c
cmp eax, 0x46
mov eax, r14d
jne 0x140016131
mov eax, 1
mov dword [rsp + 0x70], r8d
mov qword [rsp + 0x78], r15
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
test eax, eax
je 0x14001619c
cmp eax, 1
sete bl
lea rcx, [rsp + 0x48]
call fcn.14000da10
nop
mov rdx, qword [rsp + 0x150]
cmp rdx, 0x10
jb 0x1400161ae
inc rdx
mov rcx, qword [rsp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400161a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400161a9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov bl, 1
test r8d, r8d
jne 0x140016a8c
jmp 0x140016150
call fcn.140149858
test bl, bl
je 0x140016263
movdqa xmm0, xmmword [0x140153f80]
movdqu xmmword [rsp + 0x70], xmm0
lea r8, [rsp + 0x71]
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0xd8]
call fcn.1400022e0
nop
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140001d40
nop
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae rcx, qword [rsp + 0x48]
call fcn.140148dc4
shr rax, 0x20
test eax, eax
jne 0x140016aa3
lea rcx, [rsp + 0x48]
call fcn.14000da10
nop
mov rdx, qword [rsp + 0xf0]
cmp rdx, 0x10
jb 0x140016263
inc rdx
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001625e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001625e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140149858
movdqa xmm0, xmmword [0x140153fb0]
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rsp + 0x80], 0x69643130
mov dword [rsp + 0x84], 0x6c366139
mov word [rsp + 0x88], 0x7069
mov byte [rsp + 0x8a], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
lea rax, [rsp + 0x71]
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400162c0
lea rdx, [rsp + 0x71]
lea rcx, [rsp + 0x48]
call fcn.140002500
nop
lea rcx, [rsp + 0x48]
call fcn.140124860
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x140016325
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016320
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140016320
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140149858
movdqa xmm0, xmmword [str.r_syrexuser.jsocm00py0u1002yns]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x80], WSAStartup
lea r8, [rsp + 0x71]
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0xf8]
call fcn.1400022e0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0xb8], xmm0
mov qword [rsp + 0xc8], r14
mov qword [rsp + 0xd0], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0xb8], 0
lea rax, [rsp + 0x48]
mov qword [rsp + 0x70], rax
mov r14, qword [rsp + 0x108]
lea r15, [rsp + 0xf8]
cmp qword [rsp + 0x110], 0x10
cmovae r15, qword [rsp + 0xf8]
call fcn.140148b64
mov r12d, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xor ebx, ebx
mov qword [rsp + 0x58], rbx
mov edx, 7
mov qword [rsp + 0x60], rdx
mov word [rsp + 0x48], bx
mov dword [rsp + 0xb0], 0x20
test r14, r14
je 0x140016458
cmp r14, 0x7fffffff
ja 0x140016ab7
mov dword [rsp + 0x20], ebx
xor r9d, r9d
mov r8d, r14d
mov rdx, r15
mov ecx, r12d
call fcn.140148b8c
mov rbx, rax
shr rax, 0x20
test eax, eax
jne 0x140016ac0
xor r8d, r8d
movsxd rdx, ebx
lea rcx, [rsp + 0x48]
call fcn.140013380
lea r9, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae r9, qword [rsp + 0x48]
mov dword [rsp + 0x20], ebx
mov r8d, r14d
mov rdx, r15
mov ecx, r12d
call fcn.140148b8c
shr rax, 0x20
test eax, eax
jne 0x140016ac8
mov rdx, qword [rsp + 0x60]
xor ebx, ebx
lea rcx, [rsp + 0x48]
cmp rdx, 8
cmovae rcx, qword [rsp + 0x48]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rsp + 0xd8]
call fcn.140148ef0
mov edx, eax
test eax, eax
jne 0x1400164cd
mov eax, dword [rsp + 0xe8]
test al, 1
mov ecx, 0x16d
cmovne r13d, ecx
mov dword [rsp + 0x74], r13d
bt eax, 0xa
jae 0x1400164bf
mov ecx, dword [rsp + 0xec]
cmp ecx, 0xa000000c
je 0x1400164f0
cmp ecx, 0xa0000003
jne 0x1400164bf
lea edi, [rdx + 0xa]
jmp 0x1400164f0
movzx edi, al
and edi, 0x10
or edi, 0x20
shr edi, 4
jmp 0x1400164f0
mov dword [rsp + 0x74], 0xffff
sub eax, 2
je 0x1400164eb
sub eax, 1
je 0x1400164eb
sub eax, 0x32
je 0x1400164eb
cmp eax, 0x46
mov edi, ebx
jne 0x1400164f0
mov edi, 1
mov dword [rsp + 0x70], edx
lea rax, [0x1401b0010]
mov qword [rsp + 0x78], rax
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
test edi, edi
je 0x14001661a
cmp edi, 1
setne bl
lea rcx, [rsp + 0x48]
call fcn.14000da10
test bl, bl
je 0x14001667d
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0xd8]
call fcn.140011850
mov rbx, rax
lea rax, [rsp + 0xb8]
cmp rax, rbx
je 0x1400165d9
mov rdx, qword [rsp + 0xd0]
cmp rdx, 0x10
jb 0x140016597
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016592
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140016613
call fcn.140149858
xor eax, eax
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0xd0], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0xb8], al
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0xb8], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsp + 0xc8], xmm1
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], al
mov rdx, qword [rsp + 0xf0]
cmp rdx, 0x10
jb 0x14001662e
inc rdx
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016629
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140016629
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor bl, bl
test edx, edx
jne 0x140016ad0
jmp 0x140016519
call fcn.140149858
lea rdx, str.Loaded_license_from_file:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002080
lea rdx, [rsp + 0xb8]
cmp qword [rsp + 0xd0], 0x10
cmovae rdx, qword [rsp + 0xb8]
mov r8, qword [rsp + 0xc8]
mov rcx, rax
call fcn.140003b60
lea rdx, [0x140005f20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1400166ba
lea rdx, str.Enter_your_license:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002080
lea rdx, [rsp + 0xb8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140001e30
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0xf8]
call fcn.140013410
nop
xor edi, edi
mov dword [rsp + 0x38], edi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0xb0]
xor r8d, r8d
xor edx, edx
lea rcx, [0x1401527d0]
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x140016ae7
lea r9, [rsp + 0x16d]
mov r8d, dword [rsp + 0xb0]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x140016701
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
lea rax, [rsp + 0x16d]
cmp r9, rax
jne 0x14001675e
movdqa xmm0, xmmword [0x140153f20]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], dil
jmp 0x140016777
lea r8, [rsp + 0x16d]
sub r8, r9
mov rdx, r9
lea rcx, [rsp + 0x48]
call fcn.140002500
nop
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0xb8]
call fcn.14011a46c
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x1400167ca
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400167c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400167c5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140149858
lea rdx, str.Authenticated_successfully
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002080
lea rdx, [0x140005f20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.1400192b0
nop
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [rsp + 0xb0], 0x63657349
mov dword [rsp + 0xb4], 0x746572
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
lea rax, [rsp + 0xb1]
nop dword [rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x140016830
mov r8, rsi
lea rdx, [rsp + 0xb1]
lea rcx, [rsp + 0x48]
call fcn.140002500
nop
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x70]
call fcn.140104154
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x14001686d
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.140003b60
lea rdx, [0x140005f20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0x10
jb 0x1400168cc
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400168c7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400168c7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140149858
movdqa xmm0, xmmword [0x140153f20]
movdqu xmmword [rsp + 0x80], xmm0
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x140016923
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001691d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001691d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140149858
nop
mov rdx, qword [rsp + 0xd0]
cmp rdx, 0x10
jb 0x140016969
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016964
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140016964
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140149858
mov qword [rsp + 0xc8], rdi
mov qword [rsp + 0xd0], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0xb8], 0
mov rdx, qword [rsp + 0x110]
cmp rdx, 0x10
jb 0x1400169cb
inc rdx
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400169c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400169c6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140149858
mov qword [rsp + 0x108], rdi
mov qword [rsp + 0x110], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0xf8], 0
mov rdx, qword [rsp + 0x130]
cmp rdx, 0x10
jb 0x140016a2d
inc rdx
mov rcx, qword [rsp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016a28
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140016a28
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140149858
xor eax, eax
mov rcx, qword [rsp + 0x170]
xor rcx, rsp
call fcn.140149980
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x70]
lea rcx, str.exists
call fcn.14000d800
nop
lea r8, [rsp + 0x48]
mov edx, eax
lea rcx, str.create_directory
call fcn.14000d860
nop
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x70]
lea rcx, str.exists
call fcn.14000d800
nop
lea r8, [rsp + 0x48]
mov edx, eax
lea rcx, str.create_directory
call fcn.14000d860
nop
lea ecx, [rbx + 0x16]
call fcn.14000d8d0
int3
mov ecx, eax
call fcn.14000d910
int3
mov ecx, eax
call fcn.14000d910
nop
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x70]
lea rcx, str.exists
call fcn.14000d800
nop
lea rdx, str.failed_to_get_hwid
lea rcx, [rsp + 0x98]
call fcn.14000b3b0
lea rdx, [0x1401aac48]
lea rcx, [rsp + 0x98]
call sub.VCRUNTIME140.dll__CxxThrowException
int3