Function at 0x14006c4b0
Capabilities:
Create thread
Encode data using xor
Enumerate processes
Terminate process

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov qword [r11 + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x5a0
movaps xmmword [r11 - 0x28], xmm6
movaps xmmword [r11 - 0x38], xmm7
movaps xmmword [r11 - 0x48], xmm8
mov rax, qword [0x1400ec448]
xor rax, rsp
mov qword [rsp + 0x568], rax
xor edi, edi
mov dword [rsp + 0x50], edi
mov qword [r11 - 0x460], rdi
mov qword [r11 - 0x450], rdi
mov qword [r11 - 0x448], 0xf
mov byte [rsp + 0x158], dil
lea r8d, [rdi + 0x2e]
lea rdx, str.C:WindowsSystem32pt_BR_system224252237528
lea rcx, [r11 - 0x460]
call fcn.14000a1f0
nop
lea rax, [rsp + 0x80]
mov qword [rsp + 0x40], rax
mov rsi, qword [rsp + 0x168]
lea r14, [rsp + 0x158]
cmp qword [rsp + 0x170], 0x10
cmovae r14, qword [rsp + 0x158]
call fcn.1400bf538
mov r15d, eax
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x90], rdi
mov edx, 7
mov qword [rsp + 0x98], rdx
mov word [rsp + 0x80], di
mov r12d, 4
mov dword [rsp + 0x50], r12d
test rsi, rsi
je 0x14006c624
cmp rsi, 0x7fffffff
ja 0x14006ebaa
mov dword [rsp + 0x20], edi
xor r9d, r9d
mov r8d, esi
mov rdx, r14
mov ecx, r15d
call fcn.1400bf560
mov rbx, rax
shr rax, 0x20
test eax, eax
jne 0x14006ebb3
xor r8d, r8d
movsxd rdx, ebx
lea rcx, [rsp + 0x80]
call fcn.14006f6a0
lea r9, [rsp + 0x80]
cmp qword [rsp + 0x98], 8
cmovae r9, qword [rsp + 0x80]
mov dword [rsp + 0x20], ebx
mov r8d, esi
mov rdx, r14
mov ecx, r15d
call fcn.1400bf560
shr rax, 0x20
test eax, eax
jne 0x14006ebbb
mov rdx, qword [rsp + 0x98]
mov r14d, 3
lea rcx, [rsp + 0x80]
cmp rdx, 8
cmovae rcx, qword [rsp + 0x80]
mov r9d, 0xffffffff
mov r8d, r14d
lea rdx, [rsp + 0xe0]
call fcn.1400bf6ec
mov edx, eax
test eax, eax
jne 0x14006c694
mov ecx, dword [rsp + 0xf0]
bt ecx, 0xa
jae 0x14006c689
mov eax, dword [rsp + 0xf4]
cmp eax, 0xa000000c
jne 0x14006c67b
mov ecx, r12d
jmp 0x14006c6af
cmp eax, 0xa0000003
jne 0x14006c689
mov ecx, 0xa
jmp 0x14006c6af
and ecx, 0x10
or ecx, 0x20
shr ecx, 4
jmp 0x14006c6af
sub eax, 2
je 0x14006c6aa
sub eax, 1
je 0x14006c6aa
sub eax, 0x32
je 0x14006c6aa
cmp eax, 0x46
mov ecx, edi
jne 0x14006c6af
mov ecx, 1
mov dword [rsp + 0x40], edx
lea r13, [0x1400ec3d0]
mov qword [rsp + 0x48], r13
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
test ecx, ecx
je 0x14006c768
cmp ecx, 1
sete bl
lea rcx, [rsp + 0x80]
call fcn.140009120
test bl, bl
je 0x14006c833
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x40], rax
mov rsi, qword [rsp + 0x168]
lea r14, [rsp + 0x158]
cmp qword [rsp + 0x170], 0x10
cmovae r14, qword [rsp + 0x158]
call fcn.1400bf538
mov r15d, eax
mov qword [rsp + 0xe0], rdi
mov qword [rsp + 0xf0], rdi
mov qword [rsp + 0xf8], 7
mov word [rsp + 0xe0], di
mov dword [rsp + 0x50], reloc.WLDAP32.dll_Ordinal_35
test rsi, rsi
je 0x14006c7e6
cmp rsi, 0x7fffffff
ja 0x14006ebc3
jmp 0x14006c777
mov bl, 1
test edx, edx
jne 0x14006ebce
jmp 0x14006c6d8
mov dword [rsp + 0x20], edi
xor r9d, r9d
mov r8d, esi
mov rdx, r14
mov ecx, r15d
call fcn.1400bf560
mov rbx, rax
shr rax, 0x20
test eax, eax
jne 0x14006ebe8
xor r8d, r8d
movsxd rdx, ebx
lea rcx, [rsp + 0xe0]
call fcn.14006f6a0
lea r9, [rsp + 0xe0]
cmp qword [rsp + 0xf8], 8
cmovae r9, qword [rsp + 0xe0]
mov dword [rsp + 0x20], ebx
mov r8d, esi
mov rdx, r14
mov ecx, r15d
call fcn.1400bf560
shr rax, 0x20
test eax, eax
jne 0x14006ebef
mov r14d, reloc.WLDAP32.dll_Ordinal_27
mov dword [rsp + 0x50], r14d
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], r13
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xe0]
call fcn.140069da0
cmp dword [rsp + 0x40], 0
jne 0x14006ebf7
lea rcx, [rsp + 0xe0]
call fcn.140009120
nop
jmp 0x14006c833
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x150], rax
mov qword [rsp + 0x120], rdi
mov qword [rsp + 0x130], rdi
mov qword [rsp + 0x138], reloc.WS2_32.dll_ntohs
lea r8d, [rax + 6]
lea rdx, str.492271
lea rcx, [rsp + 0x120]
call fcn.14000a1f0
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0x140]
lea rcx, [0x1400ecfe0]
call fcn.1400064c0
nop
cmp byte [0x1400ed220], 0
jne 0x14006ca3c
mov r10, qword [0x1400c3558]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x78]
call fcn.140060720
mov r9, rax
cmp byte [rax + 0xb], 0
je 0x14006ca0e
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x14006c9db
movdqa xmm4, xmmword [0x1400cac10]
movd xmm6, r12d
mov eax, Ordinal_33
movd xmm5, eax
movdqa xmm2, xmmword [0x1400c8770]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400cab10]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.9999999999999999R]
movd xmm0, dword [r9]
pxor xmm2, xmm0
movd dword [r9], xmm2
movdqa xmm3, xmmword [0x1400cab00]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400cab10]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.9999999999999999R]
movd xmm0, dword [r9 + 4]
pxor xmm2, xmm0
movd dword [r9 + 4], xmm2
mov edi, 8
mov r8d, edi
add r8, r9
mov eax, 0x4bda12f7
imul edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, dil
sub al, dl
add al, 0x39
xor byte [r8], al
inc edi
lea r8, [r8 + 1]
cmp edi, 0xc
jl 0x14006c9e1
mov rdx, r9
mov rcx, r10
call fcn.14005c9e0
mov rcx, rax
lea rdx, [0x1400ed228]
call fcn.14005c9c0
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rsp + 0xe0], rdi
mov qword [rsp + 0xf0], rdi
mov qword [rsp + reloc.WS2_32.dll_ntohs8], 0xf
mov byte [rsp + 0xe0], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str.C:WindowsSystem32pt_BR_
lea rcx, [rsp + 0xe0]
call fcn.14000a1f0
nop
mov qword [rsp + 0x120], rdi
mov qword [rsp + 0x130], rdi
mov qword [rsp + 0x138], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x120], 0
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.language_pt_br.dll
lea rcx, [rsp + 0x120]
call fcn.14000a1f0
nop
movabs r8, 0x7fffffffffffffff
mov rax, r8
mov r12, qword [rsp + 0xf0]
sub rax, r12
mov rcx, qword [rsp + 0x130]
cmp rax, rcx
jb 0x14006ec11
lea rdx, [rsp + 0xe0]
cmp qword [rsp + 0xf8], 0x10
cmovae rdx, qword [rsp + 0xe0]
mov qword [rsp + 0x50], rdx
lea rax, [rsp + 0x120]
cmp qword [rsp + 0x138], 0x10
cmovae rax, qword [rsp + 0x120]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x100], rdi
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x118], rdi
lea r13, [r12 + rcx]
mov ebx, reloc.WS2_32.dll_ntohs
lea rsi, [rsp + 0x100]
cmp r13, rbx
jbe 0x14006cbed
mov rbx, r13
or rbx, 0xf
cmp rbx, r8
jbe 0x14006cb64
mov rbx, r8
jmp 0x14006cb70
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmp rbx, rax
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
mov r15, 0xffffffffffffffff
cmovb rcx, r15
cmp rcx, 0x1000
jb 0x14006cbc4
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14006ec17
mov rcx, rax
call fcn.1400bea24
test rax, rax
je 0x14006ea12
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
mov rdx, qword [rsp + 0x50]
mov qword [rsp + 0x100], rsi
jmp 0x14006cbf4
test rcx, rcx
je 0x14006cbe0
call fcn.1400bea24
mov rsi, rax
mov rdx, qword [rsp + 0x50]
mov qword [rsp + 0x100], rax
jmp 0x14006cbf4
mov rsi, rdi
mov qword [rsp + 0x100], rdi
jmp 0x14006cbf4
mov r15, 0xffffffffffffffff
mov qword [rsp + 0x110], r13
mov qword [rsp + 0x118], rbx
mov r8, r12
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rsi + r12]
mov r8, qword [rsp + 0x130]
mov rdx, qword [rsp + 0x40]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r13], 0
or r14d, 0x40
xor edx, edx
mov r8d, 0x108
lea rcx, [rsp + 0x180]
call sub.VCRUNTIME140.dll_memset
lea rbx, [rsp + 0x100]
cmp qword [rsp + 0x118], 0x10
cmovae rbx, qword [rsp + 0x100]
lea rax, [0x1400c9680]
mov qword [rsp + 0x180], rax
lea rcx, [rsp + 0x228]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
bts r14d, 7
mov dword [rsp + 0x50], r14d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x188]
lea rcx, [rsp + 0x180]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rsp + 0x180]
movsxd rcx, dword [rax + 4]
lea rsi, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x180], rsi
mov rax, qword [rsp + 0x180]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x17c], edx
lea rax, [rsp + 0x188]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x188]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rsp + 0x188], rax
mov byte [rsp + 0x204], 0
mov byte [rsp + 0x1f9], 0
lea rcx, [rsp + 0x188]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rsp + 0x208], rdi
mov rax, qword [0x1400edb70]
mov qword [rsp + 0x1fc], rax
mov qword [rsp + 0x1f0], rdi
mov r9d, 0x40
lea r8d, [r9 - 0x1e]
mov rdx, rbx
lea rcx, [rsp + 0x188]
call fcn.140009750
test rax, rax
jne 0x14006cd82
mov rax, qword [rsp + 0x180]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x180]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rsp + 0x180]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x180], rsi
mov rax, qword [rsp + 0x180]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x17c], edx
mov r8, qword [rsp + 0x148]
mov rdx, qword [rsp + 0x140]
sub r8, rdx
lea rcx, [rsp + 0x180]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rsp + 0x188]
call fcn.1400096d0
test rax, rax
jne 0x14006ce06
mov rax, qword [rsp + 0x180]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x180]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
movups xmm0, xmmword [0x1400c9c28]
movups xmmword [rsp + 0xb0], xmm0
movups xmm1, xmmword [0x1400c9c38]
movups xmmword [rsp + 0xc0], xmm1
movsd xmm0, qword [0x1400c9c48]
movsd qword [rsp + 0xd0], xmm0
mov eax, dword [0x1400c9c50]
mov dword [rsp + 0xd8], eax
movzx eax, byte [0x1400c9c54]
mov byte [rsp + 0xdc], al
mov r8d, edi
mov r13d, 4
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x14006cfb7
movdqa xmm5, xmmword [0x1400c8770]
movdqa xmm4, xmmword [0x1400cac10]
movd xmm6, r13d
movdqa xmm7, xmmword [0x1400cab10]
mov r10d, Ordinal_33
movd xmm8, r10d
movdqa xmm0, xmmword [str.9999999999999999R]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0xb4]
mov edx, dword [rsp + 0x40]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x28
jl 0x14006ceb0
cmp r8d, 0x2d
jge 0x14006d000
movsxd rax, r8d
lea r9, [rsp + 0xb0]
add r9, rax
nop word [rax + rax]
mov eax, 0x4bda12f7
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x2d
jl 0x14006cfd0
lea rax, str.FiveM_GameProcess.exe
mov qword [rsp + 0x3c0], rax
lea rax, str.FiveM_GTAProcess.exe
mov qword [rsp + 0x3c8], rax
lea rax, str.FiveM_b2060_GameProcess.exe
mov qword [rsp + 0x3d0], rax
lea rax, str.FiveM_b2060_GTAProcess.exe
mov qword [rsp + 0x3d8], rax
lea rax, str.FiveM_b2189_GameProcess.exe
mov qword [rsp + 0x3e0], rax
mov qword [rsp + 0x3e8], rax
lea rax, str.FiveM_b2372_GTAProcess.exe
mov qword [rsp + 0x3f0], rax
lea rax, str.FiveM_b2372_GameProcess.exe
mov qword [rsp + 0x3f8], rax
lea rax, str.FiveM_b2545_GTAProcess.exe
mov qword [rsp + 0x400], rax
lea rax, str.FiveM_b2545_GameProcess.exe
mov qword [rsp + 0x408], rax
lea rax, str.FiveM_b2612_GTAProcess.exe
mov qword [rsp + 0x410], rax
lea rax, str.FiveM_b2612_GameProcess.exe
mov qword [rsp + 0x418], rax
lea rax, str.FiveM_b2699_GTAProcess.exe
mov qword [rsp + 0x420], rax
lea rax, str.FiveM_b2699_GameProcess.exe
mov qword [rsp + 0x428], rax
lea rax, str.FiveM_b2802_GTAProcess.exe
mov qword [rsp + 0x430], rax
lea rax, str.FiveM_b2802_GameProcess.exe
mov qword [rsp + 0x438], rax
lea rax, str.FiveM_b2944_GTAProcess.exe
mov qword [rsp + 0x440], rax
lea rax, str.FiveM_b2944_GameProcess.exe
mov qword [rsp + 0x448], rax
mov r12d, edi
lea r14, [rsp + 0x3c0]
nop dword [rax]
nop word [rax + rax]
mov rsi, qword [r14]
mov dword [rsp + 0x290], 0x130
xor edx, edx
lea ecx, [rdx + 2]
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rbx, rax
lea rdx, [rsp + 0x290]
mov rcx, rax
call sub.KERNEL32.dll_Process32First
test eax, eax
je 0x14006d1b5
lea rdx, [rsp + 0x290]
mov rcx, rbx
call sub.KERNEL32.dll_Process32Next
test eax, eax
je 0x14006d1b5
nop dword [rax]
nop word [rax + rax]
lea rax, [rsp + 0x2bc]
mov r8, rsi
sub r8, rax
nop
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x14006d193
inc rax
test ecx, ecx
jne 0x14006d180
test edx, edx
je 0x14006d1ad
lea rdx, [rsp + 0x290]
mov rcx, rbx
call sub.KERNEL32.dll_Process32Next
test eax, eax
jne 0x14006d170
jmp 0x14006d1b5
mov r12d, dword [rsp + 0x298]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r12d, r12d
jne 0x14006d790
add r14, 8
lea rax, [rsp + 0x450]
cmp r14, rax
jne 0x14006d120
movups xmm0, xmmword [0x1400c9c88]
movups xmmword [rsp + 0x50], xmm0
mov eax, dword [0x1400c9c98]
mov dword [rsp + 0x60], eax
movzx eax, byte [0x1400c9c9c]
mov byte [rsp + 0x64], al
mov r8d, edi
mov r10d, dword [reloc.WS2_32.dll_accept]
lea r14d, [r12 + 0x1f]
cmp r10d, 2
jl 0x14006d357
movdqa xmm5, xmmword [0x1400c8770]
movdqa xmm4, xmmword [0x1400cac10]
movd xmm6, r13d
movdqa xmm7, xmmword [0x1400cab10]
movd xmm8, r14d
movdqa xmm0, xmmword [str.9999999999999999R]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x54]
mov edx, dword [rsp + 0x40]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x14006d250
cmp r8d, 0x15
jge 0x14006d3a0
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x15
jl 0x14006d370
movups xmm0, xmmword [0x1400c9c58]
movups xmmword [rsp + 0x80], xmm0
movups xmm1, xmmword [0x1400c9c68]
movups xmmword [rsp + 0x90], xmm1
movsd xmm0, qword [0x1400c9c78]
movsd qword [rsp + 0xa0], xmm0
mov eax, dword [0x1400c9c80]
mov dword [rsp + 0xa8], eax
movzx eax, byte [0x1400c9c84]
mov byte [rsp + 0xac], al
mov r8d, edi
cmp r10d, 2
jl 0x14006d547
movdqa xmm5, xmmword [0x1400c8770]
movdqa xmm4, xmmword [0x1400cac10]
movd xmm6, r13d
movdqa xmm7, xmmword [0x1400cab10]
movd xmm8, r14d
movdqa xmm0, xmmword [str.9999999999999999R]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x84]
mov edx, dword [rsp + 0x40]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x28
jl 0x14006d440
cmp r8d, 0x2d
jge 0x14006d590
movsxd rax, r8d
lea r9, [rsp + 0x80]
add r9, rax
nop word [rax + rax]
mov eax, 0x4bda12f7
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x2d
jl 0x14006d560
xor r9d, r9d
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x80]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rax, qword [rsp + 0x180]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x180], rax
mov rax, qword [rsp + 0x180]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x17c], edx
lea rcx, [rsp + 0x188]
call fcn.140008a40
lea rcx, [rsp + 0x190]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x228]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, 0x10
jb 0x14006d64a
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006d645
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006ea12
call fcn.1400be230
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x118], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x100], 0
mov rax, qword [rsp + 0x138]
cmp rax, 0x10
jb 0x14006d6ab
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006d6a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006ea75
call fcn.1400be230
nop
mov rax, qword [rsp + 0xf8]
cmp rax, 0x10
jb 0x14006d6f0
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006d6ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006eabd
call fcn.1400be230
nop
mov rcx, qword [rsp + 0x140]
test rcx, rcx
je 0x14006d746
mov rdx, qword [rsp + 0x150]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006d72d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006eb03
call fcn.1400be230
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x150], rdi
mov rdx, qword [rsp + 0x170]
cmp rdx, 0x10
jb 0x14006d789
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006d784
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006eb5d
call fcn.1400be230
xor al, al
jmp 0x14006eb69
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8d, r12d
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
mov r12d, dword [reloc.WS2_32.dll_accept]
mov r14d, Ordinal_33
test rax, rax
jne 0x14006db82
movups xmm0, xmmword [str.xVS]
movups xmmword [rsp + 0x80], xmm0
movups xmm1, xmmword [0x1400c9cd8]
movups xmmword [rsp + 0x90], xmm1
movzx ecx, word [0x1400c9ce8]
mov word [rsp + 0xa0], cx
movzx ecx, byte [0x1400c9cea]
mov byte [rsp + 0xa2], cl
mov r8d, edi
cmp r12d, 2
jl 0x14006d957
movdqa xmm5, xmmword [0x1400c8770]
movdqa xmm4, xmmword [0x1400cac10]
movd xmm6, r13d
movdqa xmm7, xmmword [0x1400cab10]
movd xmm8, r14d
movdqa xmm0, xmmword [str.9999999999999999R]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x84]
mov edx, dword [rsp + 0x40]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14006d850
cmp r8d, 0x23
jge 0x14006d9a0
movsxd rax, r8d
lea r9, [rsp + 0x80]
add r9, rax
nop word [rax + rax]
mov eax, 0x4bda12f7
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x23
jl 0x14006d970
movups xmm0, xmmword [str.m_UHJV6_b___._i_l__9r_t__8____3_]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x1400c9cb0]
movups xmmword [rsp + 0x60], xmm1
mov eax, dword [0x1400c9cc0]
mov dword [rsp + 0x70], eax
movzx eax, byte [0x1400c9cc4]
mov byte [rsp + 0x74], al
mov r8d, edi
cmp r12d, 2
jl 0x14006db27
movdqa xmm5, xmmword [0x1400c8770]
movdqa xmm4, xmmword [0x1400cac10]
movd xmm6, r13d
movdqa xmm7, xmmword [0x1400cab10]
movd xmm8, r14d
movdqa xmm0, xmmword [str.9999999999999999R]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x54]
mov edx, dword [rsp + 0x40]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14006da20
cmp r8d, 0x25
jge 0x14006db70
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x25
jl 0x14006db40
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x50]
call fcn.140061050
xor r9d, r9d
lea r8, [rsp + 0x450]
mov edx, 0x104
lea rcx, [rsp + 0xb0]
call qword [sym.imp.KERNEL32.dll_GetFullPathNameA]
test eax, eax
jne 0x14006ddb9
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movups xmm0, xmmword [str._OzHRS]
movups xmmword [rsp + 0x50], xmm0
psrldq xmm0, 0xf
movd eax, xmm0
test al, al
je 0x14006dd62
mov r8d, edi
cmp r12d, 2
jl 0x14006dd21
movdqa xmm5, xmmword [0x1400c8770]
mov edx, edi
movdqa xmm4, xmmword [0x1400cac10]
movd xmm6, r13d
movdqa xmm7, xmmword [0x1400cab10]
movd xmm8, r14d
movdqa xmm0, xmmword [str.9999999999999999R]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x54]
mov r8d, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x10
jl 0x14006dc20
jmp 0x14006dd62
lea r9, [rsp + 0x50]
nop word [rax + rax]
mov eax, 0x2f684bdb
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x36
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x10
jl 0x14006dd30
lea rax, [rsp + 0x50]
nop word [rax + rax]
inc r15
cmp byte [rax + r15], 0
jne 0x14006dd70
mov r8, r15
lea rdx, [rsp + 0x50]
lea rcx, [0x1400ec378]
call fcn.14000a1f0
mov r8d, Ordinal_27
lea rdx, str.Falha_ao_encontrar_a_dll
lea rcx, [0x1400ec398]
call fcn.14000a1f0
mov byte [0x1400ecf46], 1
xorps xmm0, xmm0
movss dword [0x1400ecf94], xmm0
mov dword [rsp + 0x20], r13d
xor edx, edx
mov r9d, 0x3000
mov r8d, 0x104
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rsi, rax
test rax, rax
jne 0x14006e13f
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movups xmm0, xmmword [0x1400c9d10]
movups xmmword [rsp + 0x50], xmm0
movsd xmm1, qword [0x1400c9d20]
movsd qword [rsp + 0x60], xmm1
cmp byte [0x1400c9d27], sil
je 0x14006dfa2
mov r8d, edi
cmp r12d, 2
jl 0x14006df61
movdqa xmm5, xmmword [0x1400c8770]
mov edx, edi
movdqa xmm4, xmmword [0x1400cac10]
movd xmm6, r13d
movdqa xmm7, xmmword [0x1400cab10]
movd xmm8, r14d
movdqa xmm0, xmmword [str.9999999999999999R]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x54]
mov r8d, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x18
jl 0x14006de60
jmp 0x14006dfa2
lea r9, [rsp + 0x50]
nop word [rax + rax]
mov eax, 0x2f684bdb
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x36
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x18
jl 0x14006df70
movsd xmm0, qword [0x1400c9d00]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [str._._]
mov dword [rsp + 0x48], eax
movzx eax, word [0x1400c9d0c]
mov word [rsp + 0x4c], ax
movzx eax, byte [0x1400c9d0e]
mov byte [rsp + 0x4e], al
mov r8d, edi
cmp r12d, 2
jl 0x14006e0ea
movdqa xmm4, xmmword [0x1400cac10]
movd xmm6, r13d
movd xmm5, r14d
movdqa xmm2, xmmword [0x1400c8770]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400cab10]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
mov eax, dword [str.9999999999999999R]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [0x1400c9d00]
pxor xmm2, xmm1
movd dword [rsp + 0x40], xmm2
movdqa xmm3, xmmword [0x1400cab00]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400cab10]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x44]
pxor xmm2, xmm1
movd dword [rsp + 0x44], xmm2
mov r8d, 8
mov eax, r8d
lea r10, [rsp + 0x40]
add r10, rax
nop word [rax + rax]
mov eax, 0x4bda12f7
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r10], al
inc r8d
lea r10, [r10 + 1]
cmp r8d, 0xf
jl 0x14006e100
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x40]
call fcn.140061050
mov qword [rsp + 0x20], rdi
mov r9d, 0x104
lea r8, [rsp + 0x450]
mov rdx, rsi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x14006e532
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rsi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
movups xmm0, xmmword [0x1400c9d40]
movups xmmword [rsp + 0x80], xmm0
movsd xmm1, qword [0x1400c9d50]
movsd qword [rsp + 0x90], xmm1
mov eax, dword [0x1400c9d58]
mov dword [rsp + 0x98], eax
movzx eax, byte [0x1400c9d5c]
mov byte [rsp + 0x9c], al
mov r8d, edi
cmp r12d, 2
jl 0x14006e317
movdqa xmm5, xmmword [0x1400c8770]
movdqa xmm4, xmmword [0x1400cac10]
movd xmm6, r13d
movdqa xmm7, xmmword [0x1400cab10]
movd xmm8, r14d
movdqa xmm0, xmmword [str.9999999999999999R]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x84]
mov edx, dword [rsp + 0x40]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x14006e210
cmp r8d, 0x1d
jge 0x14006e360
movsxd rax, r8d
lea r9, [rsp + 0x80]
add r9, rax
nop word [rax + rax]
mov eax, 0x4bda12f7
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1d
jl 0x14006e330
movups xmm0, xmmword [0x1400c9d28]
movups xmmword [rsp + 0x50], xmm0
movzx eax, word [0x1400c9d38]
mov word [rsp + 0x60], ax
movzx eax, byte [0x1400c9d3a]
mov byte [rsp + 0x62], al
mov r8d, edi
cmp r12d, 2
jl 0x14006e4d7
movdqa xmm5, xmmword [0x1400c8770]
movdqa xmm4, xmmword [0x1400cac10]
movd xmm6, r13d
movdqa xmm7, xmmword [0x1400cab10]
movd xmm8, r14d
movdqa xmm0, xmmword [str.9999999999999999R]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x54]
mov edx, dword [rsp + 0x40]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x14006e3d0
cmp r8d, 0x13
jge 0x14006e520
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x13
jl 0x14006e4f0
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x50]
call fcn.140061050
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rsi
mov r9, qword [0x1400c3330]
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov r14, rax
test rax, rax
jne 0x14006e942
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rsi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
movups xmm0, xmmword [0x1400c9d78]
movups xmmword [rsp + 0x80], xmm0
movsd xmm1, qword [0x1400c9d88]
movsd qword [rsp + 0x90], xmm1
mov eax, dword [0x1400c9d90]
mov dword [rsp + 0x98], eax
movzx eax, word [0x1400c9d94]
mov word [rsp + 0x9c], ax
movzx eax, byte [0x1400c9d96]
mov byte [rsp + 0x9e], al
mov r8d, edi
cmp r12d, 2
jl 0x14006e726
movdqa xmm5, xmmword [0x1400c8770]
movdqa xmm4, xmmword [0x1400cac10]
movd xmm6, r13d
movdqa xmm7, xmmword [0x1400cab10]
mov r9d, Ordinal_33
movd xmm8, r9d
movdqa xmm0, xmmword [str.9999999999999999R]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x84]
mov edx, dword [rsp + 0x40]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x14006e620
cmp r8d, r9d
jge 0x14006e776
movsxd rax, r8d
lea r9, [rsp + 0x80]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x4bda12f7
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1f
jl 0x14006e740
mov r9d, Ordinal_33
movups xmm0, xmmword [str.zH_I_m___7_]
movups xmmword [rsp + 0x50], xmm0
movzx eax, word [0x1400c9d70]
mov word [rsp + 0x60], ax
movzx eax, byte [0x1400c9d72]
mov byte [rsp + 0x62], al
mov r8d, edi
cmp r12d, 2
jl 0x14006e8e7
movdqa xmm5, xmmword [0x1400c8770]
movdqa xmm4, xmmword [0x1400cac10]
movd xmm6, r13d
movdqa xmm7, xmmword [0x1400cab10]
movd xmm8, r9d
movdqa xmm0, xmmword [str.9999999999999999R]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x54]
mov edx, dword [rsp + 0x40]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400cab30]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x14006e7e0
cmp r8d, 0x13
jge 0x14006e930
movsxd rax, r8d
lea r10, [rsp + 0x50]
add r10, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r10], al
inc r8d
lea r10, [r10 + 1]
cmp r8d, 0x13
jl 0x14006e900
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x50]
call fcn.140061050
mov edx, Ordinal_301
mov ecx, 0x2ee
call qword [sym.imp.KERNEL32.dll_Beep]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rsi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rax, qword [rsp + 0x180]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x180], rax
mov rax, qword [rsp + 0x180]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x17c], edx
lea rcx, [rsp + 0x188]
call fcn.140008a40
lea rcx, [rsp + 0x190]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x228]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, 0x10
jb 0x14006ea1e
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006ea19
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006ea19
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400be230
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x118], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x100], 0
mov rax, qword [rsp + 0x138]
cmp rax, 0x10
jb 0x14006ea82
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006ea7c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006ea7c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400be230
nop
mov rax, qword [rsp + 0xf8]
cmp rax, 0x10
jb 0x14006eaca
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006eac4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006eac4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400be230
nop
mov rcx, qword [rsp + 0x140]
test rcx, rcx
je 0x14006eb23
mov rdx, qword [rsp + 0x150]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006eb0a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006eb0a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400be230
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x150], rdi
mov rdx, qword [rsp + 0x170]
cmp rdx, 0x10
jb 0x14006eb69
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006eb64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006eb64
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400be230
mov rcx, qword [rsp + 0x568]
xor rcx, rsp
call fcn.1400be800
lea r11, [rsp + 0x5a0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
ret
lea ecx, [rdi + 0x16]
call fcn.140069190
int3
mov ecx, eax
call fcn.1400691d0
int3
mov ecx, eax
call fcn.1400691d0
nop
mov ecx, reloc.WLDAP32.dll_Ordinal_22
call fcn.140069190
nop
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0x40]
lea rcx, str.exists
call fcn.140069130
nop
mov ecx, eax
call fcn.1400691d0
mov ecx, eax
call fcn.1400691d0
nop
lea r8, [rsp + 0xe0]
lea rdx, [rsp + 0x40]
lea rcx, str.create_directories
call fcn.140069130
nop
call fcn.140001d40
int3
call fcn.140001ca0
int3