Function at 0x14000bdc0
Capabilities:
Contain obfuscated stackstrings
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x220]
sub rsp, 0x320
mov rax, qword [0x14018d0c0]
xor rax, rsp
mov qword [rbp + 0x210], rax
xor r12d, r12d
mov dword [rbp + 0xd0], r12d
mov dword [rsp + 0x76], 0x8000869
mov cl, 8
mov dword [rsp + 0x72], 0x7c696c78
mov word [rsp + 0x70], 0x7869
lea rax, [rsp + 0x70]
xor byte [rax], cl
inc rax
lea rcx, [rsp + 0x78]
cmp rax, rcx
je 0x14000be36
movzx ecx, byte [rsp + 0x79]
jmp 0x14000be20
mov byte [rsp + 0x78], 1
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov rsi, rax
mov rdi, 0xffffffffffffffff
mov rbx, rdi
inc rbx
cmp byte [rax + rbx], r12b
jne 0x14000be53
call fcn.1400e0384
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], rbx
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.1400093b0
nop
lea rdx, [rsp + 0x50]
lea rsi, [0x14018d278]
mov rcx, rsi
call fcn.140009600
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x14000bed7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bed2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000bed2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e0d84
mov dword [rbp - 0x77], 0xb000b53
mov cl, 0xb
mov dword [rbp - 0x7b], 0x26796e63
mov dword [rbp - 0x7f], 0x68657e6a
mov byte [rbp - 0x80], 0x47
lea rax, [rbp - 0x80]
nop word [rax + rax]
xor byte [rax], cl
inc rax
lea rcx, [rbp - 0x75]
cmp rax, rcx
je 0x14000bf14
movzx ecx, byte [rbp - 0x74]
jmp 0x14000bf00
mov byte [rbp - 0x75], 1
lea rax, [rbp - 0x80]
mov rbx, rdi
nop
inc rbx
cmp byte [rax + rbx], 0
jne 0x14000bf20
call fcn.1400e0384
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], rbx
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.1400093b0
nop
lea rdx, [rsp + 0x50]
mov rcx, rsi
call fcn.140009600
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x14000bfa1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bf9c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000bf9c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e0d84
mov dword [rsp + 0x43], 0x500056d
mov cl, 5
mov word [rsp + 0x41], 0x7170
mov byte [rsp + 0x40], 0x44
lea rax, [rsp + 0x40]
nop dword [rax]
xor byte [rax], cl
inc rax
lea rcx, [rsp + 0x45]
cmp rax, rcx
je 0x14000bfd6
movzx ecx, byte [rsp + 0x46]
jmp 0x14000bfc0
mov byte [rsp + 0x45], 1
lea rax, [rsp + 0x40]
mov rbx, rdi
inc rbx
cmp byte [rax + rbx], 0
jne 0x14000bfe3
call fcn.1400e0384
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], rbx
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.1400093b0
mov ebx, 0x3f
lea rdx, [rsp + 0x50]
mov rcx, rsi
call fcn.140009600
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x14000c069
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c064
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c064
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e0d84
call fcn.14000a200
test al, al
jne 0x14000c169
mov rcx, rsi
cmp qword [reloc.WS2_32.dll_getsockopt], 7
cmova rcx, qword [0x14018d278]
call fcn.1400e05e4
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x14000cbb6
mov dword [rsp + 0x4b], 0x500056d
mov cl, 5
mov word [rsp + 0x49], 0x7170
mov byte [rsp + 0x48], 0x44
lea rax, [rsp + 0x48]
nop dword [rax + rax]
xor byte [rax], cl
inc rax
lea rcx, [rsp + 0x4d]
cmp rax, rcx
je 0x14000c0d6
movzx ecx, byte [rsp + 0x4e]
jmp 0x14000c0c0
mov byte [rsp + 0x4d], 1
lea rax, [rsp + 0x48]
mov rbx, rdi
inc rbx
cmp byte [rax + rbx], 0
jne 0x14000c0e3
call fcn.1400e0384
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], rbx
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.1400093b0
mov ebx, 0x303f
lea rdx, [rsp + 0x50]
mov rcx, rsi
call fcn.140009600
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x14000c169
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c164
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c164
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e0d84
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x100]
call sub.VCRUNTIME140.dll_memset
lea rax, [0x1401108d8]
mov qword [rbp + 0x100], rax
lea rcx, [rbp + 0x1a8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or ebx, 0x40
mov dword [rbp + 0xd0], ebx
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x108]
lea rcx, [rbp + 0x100]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0x100]
movsxd rcx, dword [rax + 4]
lea r13, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x100], r13
mov rax, qword [rbp + 0x100]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0xfc], edx
lea rcx, [rbp + 0x108]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp + 0x108], rax
mov byte [rbp + 0x184], 0
mov byte [rbp + 0x179], 0
lea rcx, [rbp + 0x108]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp + 0x188], r12
mov rax, qword [0x14018ed00]
mov qword [rbp + 0x17c], rax
mov qword [rbp + 0x170], r12
cmp qword [reloc.WS2_32.dll_getsockopt], 7
cmova rsi, qword [0x14018d278]
mov r14, qword [0x14018d288]
call fcn.1400e0384
mov r15d, eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x140177db0]
movdqu xmmword [rbp - 0x60], xmm1
mov byte [rbp - 0x70], 0
bts ebx, 0xa
mov dword [rbp + 0xd0], ebx
test r14, r14
je 0x14000c2f6
cmp r14, 0x7fffffff
ja 0x14000cbc0
mov dword [rsp + 0x20], r12d
xor r9d, r9d
mov r8d, r14d
mov rdx, rsi
mov ecx, eax
call fcn.1400e03f4
mov rbx, rax
shr rax, 0x20
test eax, eax
jne 0x14000cbc6
movsxd rdx, ebx
xor r8d, r8d
lea rcx, [rbp - 0x70]
call fcn.14000fa30
lea r9, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova r9, qword [rbp - 0x70]
mov dword [rsp + 0x20], ebx
mov r8d, r14d
mov rdx, rsi
mov ecx, r15d
call fcn.1400e03f4
mov rcx, rax
shr rax, 0x20
test eax, eax
jne 0x14000cbac
lea rax, str.Credentials.json
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], reloc.WS2_32.dll_select
lea rax, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova rax, qword [rbp - 0x70]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp - 0x60]
mov qword [rsp + 0x38], rax
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [rbp + 0xd8], xmm0
movabs rax, 0xc000000000000000
mov qword [rbp + 0xd0], rax
mov qword [rsp + 0x30], 1
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
movaps xmm1, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x50], xmm1
lea r8, [rsp + 0x30]
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x50]
call fcn.14001b340
nop
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x40]
call fcn.14000e2f0
mov rbx, rax
lea rax, [rbp + 0x100]
cmp rax, rbx
je 0x14000c3c9
lea rcx, [rbp + 0x108]
call fcn.140006a10
mov rdx, rbx
lea rcx, [rbp + 0x100]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::swap_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____ptr64]
lea rdx, [rbx + 8]
lea rcx, [rbp + 0x108]
call fcn.140011810
nop
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx - 0x40], r13
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx - 0x44], edx
lea rcx, [rbp - 0x38]
call fcn.140005c10
lea rcx, [rbp - 0x30]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x68]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x14000c446
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c441
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c441
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e0d84
movdqa xmm0, xmmword [0x140177db0]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x14000c498
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c492
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c492
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e0d84
nop
xor edx, edx
lea rcx, [rbp + 0xe8]
call fcn.14000f7a0
lea rcx, [rbp + 0xe8]
call fcn.14000f940
nop
lea rax, [rsp + 0x30]
mov qword [rbp - 0x50], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xor eax, eax
mov qword [rsp + 0x38], rax
movzx edx, byte [rsp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.140010880
mov byte [rsp + 0x30], 3
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400e0b00
mov rbx, rax
lea rax, [rbp + 0xc8]
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0xd8], rbx
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], r12
lea rdx, [0x14018ea00]
mov r8, rdi
inc r8
cmp byte [rdx + r8], 0
jne 0x14000c523
mov rcx, rbx
call fcn.140006fc0
nop
mov qword [rsp + 0x38], rbx
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov r8d, 4
lea rdx, str.Auth
lea rcx, [rsp + 0x50]
call fcn.140006fc0
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xe8]
call fcn.1400197c0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov r8d, 8
lea rdx, str.Username
lea rcx, [rbp - 0x70]
call fcn.140006fc0
lea rdx, [rbp - 0x70]
mov rcx, rbx
call fcn.1400197c0
mov rbx, rax
lea rcx, [rsp + 0x30]
call fcn.14000f940
movzx edx, byte [rbx]
movzx ecx, byte [rsp + 0x30]
mov byte [rbx], cl
mov byte [rsp + 0x30], dl
mov rcx, qword [rbx + 8]
mov rdx, qword [rsp + 0x38]
mov qword [rbx + 8], rdx
mov qword [rsp + 0x38], rcx
mov rcx, rbx
call fcn.14000f940
lea rcx, [rsp + 0x30]
call fcn.14000f940
nop
movzx edx, byte [rsp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.140010880
nop
lea rax, [rsp + 0x30]
mov qword [rbp - 0x50], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xor eax, eax
mov qword [rsp + 0x38], rax
movzx edx, byte [rsp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.140010880
mov byte [rsp + 0x30], 3
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400e0b00
mov rbx, rax
lea rax, [rbp + 0xc8]
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0xd8], rbx
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], r12
lea rdx, [0x14018eb00]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14000c670
mov rcx, rbx
call fcn.140006fc0
nop
mov qword [rsp + 0x38], rbx
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov r8d, 4
lea rdx, str.Auth
lea rcx, [rsp + 0x50]
call fcn.140006fc0
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xe8]
call fcn.1400197c0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov r8d, 8
lea rdx, str.Password
lea rcx, [rbp - 0x70]
call fcn.140006fc0
lea rdx, [rbp - 0x70]
mov rcx, rbx
call fcn.1400197c0
mov rbx, rax
lea rcx, [rsp + 0x30]
call fcn.14000f940
movzx edx, byte [rbx]
movzx ecx, byte [rsp + 0x30]
mov byte [rbx], cl
mov byte [rsp + 0x30], dl
mov rcx, qword [rbx + 8]
mov rdx, qword [rsp + 0x38]
mov qword [rbx + 8], rdx
mov qword [rsp + 0x38], rcx
mov rcx, rbx
call fcn.14000f940
lea rcx, [rsp + 0x30]
call fcn.14000f940
nop
movzx edx, byte [rsp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.140010880
nop
lea rax, [rsp + 0x30]
mov qword [rbp - 0x50], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xor eax, eax
mov qword [rsp + 0x38], rax
movzx edx, byte [rsp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.140010880
mov byte [rsp + 0x30], 3
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400e0b00
mov rbx, rax
lea rax, [rbp + 0xc8]
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0xd8], rbx
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], r12
lea rdx, [0x14018ec00]
inc rdi
cmp byte [rdx + rdi], 0
jne 0x14000c7b3
mov r8, rdi
mov rcx, rbx
call fcn.140006fc0
nop
mov qword [rsp + 0x38], rbx
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov r8d, 4
lea rdx, str.Auth
lea rcx, [rsp + 0x50]
call fcn.140006fc0
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xe8]
call fcn.1400197c0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov r8d, 3
lea rdx, [0x140110f34]
lea rcx, [rbp - 0x70]
call fcn.140006fc0
lea rdx, [rbp - 0x70]
mov rcx, rbx
call fcn.1400197c0
mov rbx, rax
lea rcx, [rsp + 0x30]
call fcn.14000f940
movzx edx, byte [rbx]
movzx ecx, byte [rsp + 0x30]
mov byte [rbx], cl
mov byte [rsp + 0x30], dl
mov rcx, qword [rbx + 8]
mov rdx, qword [rsp + 0x38]
mov qword [rbx + 8], rdx
mov qword [rsp + 0x38], rcx
mov rcx, rbx
call fcn.14000f940
lea rcx, [rsp + 0x30]
call fcn.14000f940
nop
movzx edx, byte [rsp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.140010880
nop
lea rax, [rsp + 0x30]
xorps xmm0, xmm0
mov qword [rbp - 0x50], rax
movups xmmword [rsp + 0x30], xmm0
xor eax, eax
mov qword [rsp + 0x38], rax
cmp byte [0x14018ecff], al
je 0x14000c98f
movzx edx, byte [rsp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.140010880
mov byte [rsp + 0x30], 5
mov qword [rsp + 0x38], 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov r8d, 4
lea rdx, str.Auth
lea rcx, [rsp + 0x50]
call fcn.140006fc0
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xe8]
call fcn.1400197c0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov r8d, 9
lea rdx, str.AutoLogin
lea rcx, [rbp - 0x70]
call fcn.140006fc0
lea rdx, [rbp - 0x70]
mov rcx, rbx
call fcn.1400197c0
mov rbx, rax
lea rcx, [rsp + 0x30]
call fcn.14000f940
movzx edx, byte [rbx]
movzx ecx, byte [rsp + 0x30]
mov byte [rbx], cl
mov byte [rsp + 0x30], dl
mov rcx, qword [rbx + 8]
mov rdx, qword [rsp + 0x38]
mov qword [rbx + 8], rdx
mov qword [rsp + 0x38], rcx
mov rcx, rbx
call fcn.14000f940
lea rcx, [rsp + 0x30]
call fcn.14000f940
nop
movzx edx, byte [rsp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.140010880
nop
jmp 0x14000ca66
movzx edx, byte [rsp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.140010880
mov byte [rsp + 0x30], 5
mov qword [rsp + 0x38], r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov r8d, 4
lea rdx, str.Auth
lea rcx, [rsp + 0x50]
call fcn.140006fc0
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xe8]
call fcn.1400197c0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov r8d, 9
lea rdx, str.AutoLogin
lea rcx, [rbp - 0x70]
call fcn.140006fc0
lea rdx, [rbp - 0x70]
mov rcx, rbx
call fcn.1400197c0
mov rbx, rax
lea rcx, [rsp + 0x30]
call fcn.14000f940
movzx edx, byte [rbx]
movzx ecx, byte [rsp + 0x30]
mov byte [rbx], cl
mov byte [rsp + 0x30], dl
mov rcx, qword [rbx + 8]
mov rdx, qword [rsp + 0x38]
mov qword [rbx + 8], rdx
mov qword [rsp + 0x38], rcx
mov rcx, rbx
call fcn.14000f940
lea rcx, [rsp + 0x30]
call fcn.14000f940
nop
movzx edx, byte [rsp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.140010880
nop
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xe8]
call fcn.14000dfd0
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x14000ca86
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x100]
call fcn.14001b510
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x14000cad6
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cad1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cad1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e0d84
lea rcx, [rbp + 0x108]
call fcn.140006a10
test rax, rax
jne 0x14000cb0a
mov rax, qword [rbp + 0x100]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x100]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
lea rcx, [rbp + 0xe8]
call fcn.14000f940
nop
movzx edx, byte [rbp + 0xe8]
lea rcx, [rbp + 0xf0]
call fcn.140010880
nop
mov rax, qword [rbp + 0x100]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x100], r13
mov rax, qword [rbp + 0x100]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0xfc], edx
lea rcx, [rbp + 0x108]
call fcn.140005c10
lea rcx, [rbp + 0x110]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x1a8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rcx, qword [rbp + 0x210]
xor rcx, rsp
call fcn.1400e0ae0
lea r11, [rsp + 0x320]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
shr rcx, 0x20
call fcn.140007930
nop
shr rdx, 0x20
call fcn.14000a140
nop
call fcn.140007660
int3
shr rbx, 0x20
mov ecx, ebx
call fcn.140007930
int3