Function at 0x14011f3a0
Capabilities:
Execute command

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2e0]
sub rsp, 0x3e0
mov rax, qword [0x140b29680]
xor rax, rsp
mov qword [rbp + 0x2d0], rax
mov r14, rdx
mov qword [rbp + 0x40], rdx
mov r12, rcx
mov qword [rbp + 0x48], rcx
mov qword [rsp + 0x40], rdx
xor r13d, r13d
mov r15d, r13d
mov dword [rsp + 0x20], r13d
mov byte [rcx + 1], r13b
mov rbx, qword [0x140b32ad8]
mov rdi, qword [0x140b32ae0]
lea rax, [0x1401efbb8]
lea rsi, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
cmp rbx, rdi
je 0x14011f605
nop word [rax + rax]
mov qword [rbp + 0x70], rax
lea rcx, [rbp + 0xf8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
bts r15d, 0x14
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x70]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x70], rsi
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x6c], edx
lea rcx, [rbp + 0x78]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x78], rax
mov qword [rbp + 0xe0], r13
mov dword [rbp + 0xe8], 4
lea rdx, str._Command__
lea rcx, [rbp + 0x70]
call fcn.1400234f0
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14011f4b3
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.14002ef80
mov rcx, rax
lea rdx, [0x1401efe10]
call fcn.1400234f0
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x78]
call fcn.14001d350
or r15d, 0x280000
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x70], rsi
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x6c], edx
lea rcx, [rbp + 0x78]
call fcn.14001a2d0
lea rcx, [rbp + 0x80]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0xf8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea r8, [rbp + 0x250]
cmp qword [rbp + 0x268], 0xf
cmova r8, qword [rbp + 0x250]
lea rdx, str.C:WindowsSystem32WindowsPowerShell_v1.0powershell.exe
lea rcx, [rsp + 0x28]
call fcn.14011cba0
bts r15d, 0x12
mov rdx, qword [rbp + 0x268]
cmp rdx, 0xf
jbe 0x14011f592
inc rdx
mov rcx, qword [rbp + 0x250]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011f58d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14011f5f7
call fcn.140148f88
mov rcx, qword [rsp + 0x28]
test rcx, rcx
je 0x14011f5e2
lea r8, [rsp + 0x28]
mov rdx, qword [rsp + 0x30]
call fcn.1401045c0
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x28]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011f5dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14011f5fe
call fcn.140148f88
add rbx, 0x20
cmp rbx, rdi
je 0x14011f605
lea rax, [0x1401efbb8]
jmp 0x14011f420
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rbx, qword [0x140b32c38]
mov rbx, qword [rbx]
movabs rdi, 0x7fffffffffffffff
cmp byte [rbx + 0x19], 0
jne 0x14011fd7b
lea r14, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
lea r12, [0x1401efbb8]
lea rdi, [rbx + 0x20]
mov qword [rbp + 0x70], r12
lea rcx, [rbp + 0xf8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
bts r15d, 0x10
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x70]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x70], r14
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x6c], edx
lea rcx, [rbp + 0x78]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x78], rax
mov qword [rbp + 0xe0], r13
mov dword [rbp + 0xe8], 4
lea rdx, str._Command__
lea rcx, [rbp + 0x70]
call fcn.1400234f0
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x14011f6c8
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.14002ef80
mov rcx, rax
lea rdx, [0x1401efe10]
call fcn.1400234f0
lea rdx, [rbp + 0x290]
lea rcx, [rbp + 0x78]
call fcn.14001d350
or r15d, 0x28000
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x70], r14
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x6c], edx
lea rcx, [rbp + 0x78]
call fcn.14001a2d0
lea rcx, [rbp + 0x80]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0xf8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea r8, [rbp + 0x290]
cmp qword [rbp + 0x2a8], 0xf
cmova r8, qword [rbp + 0x290]
lea rdx, str.C:WindowsSystem32WindowsPowerShell_v1.0powershell.exe
lea rcx, [rsp + 0x28]
call fcn.14011cba0
bts r15d, 0xe
mov rdx, qword [rbp + 0x2a8]
cmp rdx, 0xf
jbe 0x14011f7ab
inc rdx
mov rcx, qword [rbp + 0x290]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011f7a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401200f3
call fcn.140148f88
mov qword [rbp + 0x2a0], r13
mov qword [rbp + 0x2a8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x290], 0
mov rsi, qword [rsp + 0x28]
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x40], rax
cmp rsi, rax
je 0x14011fcb8
nop dword [rax]
xorps xmm0, xmm0
movups xmmword [rbp + 0x270], xmm0
mov qword [rbp + 0x280], r13
mov qword [rbp + 0x288], r13
mov r14, qword [rsi + 0x10]
mov r12, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x14011f809
mov r12, qword [rsi]
movabs rax, 0x7fffffffffffffff
cmp r14, rax
ja 0x1401201e7
mov qword [rbp + 0x288], reloc.WS2_32.dll_ntohs
cmp r14, 0xf
ja 0x14011f845
mov qword [rbp + 0x280], r14
movups xmm0, xmmword [r12]
movups xmmword [rbp + 0x270], xmm0
jmp 0x14011f8e4
mov rdi, r14
or rdi, 0xf
cmp rdi, rax
jbe 0x14011f864
mov rdi, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14011f88b
cmp rdi, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14011f8ad
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1401201f3
mov rcx, rax
call fcn.140148f4c
mov rcx, rax
test rax, rax
je 0x14012010f
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14011f8bc
test rcx, rcx
je 0x14011f8b9
call fcn.140148f4c
jmp 0x14011f8bc
mov rax, r13
mov qword [rbp + 0x270], rax
mov qword [rbp + 0x280], r14
mov qword [rbp + 0x288], rdi
lea r8, [r14 + 1]
mov rdx, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdi, [rbx + 0x20]
add rdi, 0x20
lea r12, [0x1401efbb8]
mov qword [rbp + 0x160], r12
lea rcx, [rbp + 0x1e8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or r15d, 8
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x168]
lea rcx, [rbp + 0x160]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
lea r14, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x160], r14
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x15c], edx
lea rcx, [rbp + 0x168]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x168], rax
mov qword [rbp + 0x1d0], r13
mov dword [rbp + 0x1d8], 4
mov r8, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 0xf
jbe 0x14011f994
mov rdi, qword [rdi]
mov rdx, rdi
lea rcx, [rbp + 0x160]
call fcn.14002ef80
lea rdx, [rbp + 0x270]
cmp qword [rbp + 0x288], 0xf
cmova rdx, qword [rbp + 0x270]
mov r8, qword [rbp + 0x280]
mov rcx, rax
call fcn.14002ef80
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x168]
call fcn.14001d350
or r15d, 0x14
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x160], r14
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x15c], edx
lea rcx, [rbp + 0x168]
call fcn.14001a2d0
lea rcx, [rbp + 0x170]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x1e8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov qword [rsp + 0x50], r12
lea rcx, [rbp - 0x28]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or r15d, 0x40
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x50]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x50], r14
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rsp + rcx + 0x4c], edx
lea rcx, [rsp + 0x58]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + 0x58], rax
mov qword [rbp - 0x40], r13
mov dword [rbp - 0x38], 4
lea rdx, str._Command__
lea rcx, [rsp + 0x50]
call fcn.1400234f0
lea rdx, [rbp + 0x250]
cmp qword [rbp + 0x268], 0xf
cmova rdx, qword [rbp + 0x250]
mov r8, qword [rbp + 0x260]
mov rcx, rax
call fcn.14002ef80
mov rcx, rax
lea rdx, [0x1401efe10]
call fcn.1400234f0
lea rdx, [rbp + 0x2b0]
lea rcx, [rsp + 0x58]
call fcn.14001d350
or r15d, 0xa0
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x50], r14
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rsp + rcx + 0x4c], edx
lea rcx, [rsp + 0x58]
call fcn.14001a2d0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp - 0x28]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea r8, [rbp + 0x2b0]
cmp qword [rbp + 0x2c8], 0xf
cmova r8, qword [rbp + 0x2b0]
lea rdx, str.C:WindowsSystem32WindowsPowerShell_v1.0powershell.exe
lea rcx, [rbp + 0x50]
call fcn.14011cba0
or r15d, 2
mov rdx, qword [rbp + 0x2c8]
cmp rdx, 0xf
jbe 0x14011fbb0
inc rdx
mov rcx, qword [rbp + 0x2b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011fbab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401200fa
call fcn.140148f88
mov qword [rbp + 0x2c0], r13
mov qword [rbp + 0x2c8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2b0], 0
mov rdx, qword [rbp + 0x268]
cmp rdx, 0xf
jbe 0x14011fc0a
inc rdx
mov rcx, qword [rbp + 0x250]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011fc05
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140120101
call fcn.140148f88
mov rcx, qword [rbp + 0x50]
test rcx, rcx
je 0x14011fc5a
lea r8, [rbp + 0x50]
mov rdx, qword [rbp + 0x58]
call fcn.1401045c0
mov rdx, qword [rbp + 0x60]
mov rcx, qword [rbp + 0x50]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011fc54
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140120108
call fcn.140148f88
nop
mov rdx, qword [rbp + 0x288]
cmp rdx, 0xf
jbe 0x14011fc9b
inc rdx
mov rcx, qword [rbp + 0x270]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011fc96
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14012010f
call fcn.140148f88
add rsi, 0x20
cmp rsi, qword [rsp + 0x40]
lea rdi, [rbx + 0x20]
jne 0x14011f7e0
mov rax, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x28]
test rsi, rsi
je 0x14011fd08
lea r8, [rsp + 0x28]
mov rdx, rax
mov rcx, rsi
call fcn.1401045c0
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x28]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011fd03
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140120116
call fcn.140148f88
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x14011fd38
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x14011fd33
nop dword [rax]
cmp rbx, qword [rax + 0x10]
jne 0x14011fd33
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x14011fd20
mov rbx, rax
jmp 0x14011fd5f
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x14011fd5f
nop dword [rax]
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x14011fd50
cmp byte [rbx + 0x19], 0
je 0x14011f631
movabs rdi, 0x7fffffffffffffff
mov r14, qword [rbp + 0x40]
mov r12, qword [rbp + 0x48]
mov rbx, qword [0x140b32c68]
mov rsi, qword [0x140b32c70]
cmp rbx, rsi
je 0x14012009d
nop dword [rax]
nop word [rax + rax]
lea rax, [0x1401efbb8]
mov qword [rsp + 0x50], rax
lea rcx, [rbp - 0x28]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
bts r15d, 9
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x50]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0x50], rax
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rsp + rcx + 0x4c], edx
lea rcx, [rsp + 0x58]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + 0x58], rax
mov qword [rbp - 0x40], r13
mov dword [rbp - 0x38], 4
lea rdx, str.sc_stop
lea rcx, [rsp + 0x50]
call fcn.1400234f0
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14011fe40
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.14002ef80
mov rcx, rax
lea rdx, str.___nul
call fcn.1400234f0
lea rdx, [rbp + 0x250]
lea rcx, [rsp + 0x58]
call fcn.14001d350
or r15d, 0x500
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0x50], rax
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rsp + rcx + 0x4c], edx
lea rcx, [rsp + 0x58]
call fcn.14001a2d0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp - 0x28]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x250]
cmp qword [rbp + 0x268], 0xf
cmova rcx, qword [rbp + 0x250]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp + 0x268]
cmp rdx, 0xf
jbe 0x14011ff18
inc rdx
mov rcx, qword [rbp + 0x250]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011ff13
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14012011d
call fcn.140148f88
lea rax, [0x1401efbb8]
mov qword [rsp + 0x50], rax
lea rcx, [rbp - 0x28]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
bts r15d, 0xc
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x50]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0x50], rax
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rsp + rcx + 0x4c], edx
lea rcx, [rsp + 0x58]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + 0x58], rax
mov qword [rbp - 0x40], r13
mov dword [rbp - 0x38], 4
lea rdx, str.sc_config
lea rcx, [rsp + 0x50]
call fcn.1400234f0
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14011ffb8
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.14002ef80
mov rcx, rax
lea rdx, str._startdisabled___nul
call fcn.1400234f0
lea rdx, [rbp + 0x250]
lea rcx, [rsp + 0x58]
call fcn.14001d350
or r15d, 0x2800
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0x50], rax
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rsp + rcx + 0x4c], edx
lea rcx, [rsp + 0x58]
call fcn.14001a2d0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp - 0x28]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x250]
cmp qword [rbp + 0x268], 0xf
cmova rcx, qword [rbp + 0x250]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp + 0x268]
cmp rdx, 0xf
jbe 0x140120090
inc rdx
mov rcx, qword [rbp + 0x250]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14012008b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140120124
call fcn.140148f88
add rbx, 0x20
cmp rbx, rsi
jne 0x14011fda0
mov byte [r12], 1
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov qword [r14 + 0x10], r13
mov qword [r14 + 0x18], reloc.WS2_32.dll_ntohs
mov rdx, qword [r14 + 0x18]
mov rcx, rdx
shr rcx, 1
mov rax, rdi
sub rax, rcx
cmp rdx, rax
jbe 0x14012012b
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140148f4c
test rax, rax
je 0x140120157
lea r13, [rax + 0x27]
and r13, 0xffffffffffffffe0
mov qword [r13 - 8], rax
jmp 0x14012016b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rax, [rdx + rcx]
mov edi, Ordinal_33
cmp rax, rdi
cmova rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14012015e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1401201ed
jmp 0x1401200d8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14012016b
call fcn.140148f4c
mov r13, rax
mov qword [r14], r13
mov qword [r14 + 0x10], Ordinal_33
mov qword [r14 + 0x18], rdi
movups xmm0, xmmword [str.Unlinked_XBOX_apps_successfully]
movups xmmword [r13], xmm0
movsd xmm0, qword [0x1401efeb8]
movsd qword [r13 + 0x10], xmm0
mov ecx, dword [0x1401efec0]
mov dword [r13 + 0x18], ecx
movzx ecx, word [0x1401efec4]
mov word [r13 + 0x1c], cx
movzx ecx, byte [0x1401efec6]
mov byte [r13 + 0x1e], cl
mov byte [r13 + 0x1f], 0
mov rax, r14
mov rcx, qword [rbp + 0x2d0]
xor rcx, rsp
call fcn.140148c30
mov rbx, qword [rsp + 0x430]
add rsp, 0x3e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400039d0
nop
call fcn.140003830
nop
call fcn.140003830
int3