Function at 0x140011b7d
Capabilities:
Get disk information
Get local ipv4 addresses
Get logon sessions
List groups for user account
List user accounts

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x4f8
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0x460], xmm8
movdqa xmmword [rbp + 0x450], xmm7
movdqa xmmword [rbp + 0x440], xmm6
mov qword [rbp + 0x438], 0xfffffffffffffffe
mov qword [rbp + 0x198], rcx
lea rsi, [rbp - 0x40]
mov rcx, rsi
call fcn.1400b5927
mov rcx, rsi
call fcn.1400b5954
mov rsi, rax
mov rdi, rdx
lea rbx, [rbp - 0x40]
mov edx, 0x158
mov r8d, 0x1f4
mov rcx, rbx
call fcn.1400b5669
mov rax, qword [rbx]
test rax, rax
je 0x140011c0a
mov rcx, qword [rbp - 0x38]
mov rdx, qword [rbp - 0x30]
mov r8, qword [rbp - 0x28]
jmp 0x140011c12
mov rcx, qword [rbp - 0x38]
mov rdx, qword [rbp - 0x30]
mov qword [rbp + 0x380], rax
mov qword [rbp + 0x388], rcx
mov qword [rbp + 0x390], rdx
mov qword [rbp + 0x398], r8
mov qword [rbp + 0x3a0], rsi
mov qword [rbp + 0x3a8], rdi
push 9
pop rcx
xor edx, edx
call fcn.1400814b3
movabs rcx, 0x5043206c61746f54
mov qword [rax], rcx
mov byte [rax + 8], 0x55
pxor xmm0, xmm0
movdqu xmmword [rbp + 0x290], xmm0
movdqu xmmword [rbp + 0x2a8], xmm0
movdqu xmmword [rbp + 0x2e8], xmm0
mov qword [rbp + 0x270], rax
mov qword [rbp + 0x278], rdx
mov qword [rbp + 0x280], 9
push 1
pop r14
mov qword [rbp + 0x288], r14
mov qword [rbp + 0x2a0], r14
and qword [rbp + 0x2b8], 0
and qword [rbp + 0x2d0], 0
and dword [rbp + 0x2d8], 0
push 8
pop r15
mov qword [rbp + 0x2e0], r15
mov byte [rbp + 0x2f8], 0
mov qword [rbp + 0x1f0], r15
movdqu xmmword [rbp + 0x1f8], xmm0
mov edx, 0x120
mov rcx, r15
call fcn.14007ef1d
test rax, rax
je 0x1400137f1
mov qword [rbp + 0x340], rax
mov qword [rbp + 0x348], 2
and qword [rbp + 0x350], 0
and qword [rbp + 0x300], 0
lea rcx, [rbp - 0x40]
call fcn.1400b5927
lea rcx, [rbp - 0x40]
call fcn.1400b5954
pxor xmm0, xmm0
movdqu xmmword [rbp + 0x3c8], xmm0
and qword [rbp + 0x3d8], 0
lea rbx, [0x14016ad40]
mov qword [rbp + 0x3c0], rbx
mov qword [rbp + 0x3e0], rax
mov qword [rbp + 0x3e8], rdx
call fcn.1400a7c10
shl rdx, 0x20
mov ecx, eax
or rcx, rdx
movabs r8, 0x19db1ded53e8000
mov rdx, rcx
sub rdx, r8
neg rdx
movabs rax, 0xfe624e212ac18000
add rax, rcx
cmp rcx, r8
cmovl rax, rdx
xor edi, edi
mov r9d, 0x989680
xor edx, edx
div r9
cmp rcx, r8
jl 0x140011db6
mov rsi, rax
call sub.kernel32.dll_GetTickCount64
xor ecx, ecx
mov r8d, 0x3e8
xor edx, edx
div r8
sub rsi, rax
cmovb rsi, rcx
mov rdi, rsi
pxor xmm0, xmm0
lea rsi, [rbp + 0xd0]
movdqa xmmword [rsi - 0x10], xmm0
movups xmm1, xmmword [rbp + 0x380]
movups xmm2, xmmword [rbp + 0x390]
movups xmm3, xmmword [rbp + 0x3a0]
movaps xmmword [rsi - 0xd0], xmm1
movaps xmmword [rsi - 0xc0], xmm2
movaps xmmword [rsi - 0xb0], xmm3
movdqa xmmword [rsi - 0x70], xmm0
movdqa xmmword [rsi - 0x60], xmm0
lea rdx, [rbp + 0x270]
mov r8d, 0x90
mov rcx, rsi
call sub.msvcrt.dll_memcpy
movups xmm0, xmmword [rbp + 0x1f0]
movups xmmword [rsi - 0x48], xmm0
mov rax, qword [rbp + 0x200]
mov qword [rsi - 0x38], rax
movups xmm0, xmmword [rbp + 0x340]
movaps xmmword [rsi - 0x30], xmm0
mov rax, qword [rbp + 0x350]
mov qword [rsi - 0x20], rax
movups xmm0, xmmword [rbp + 0x300]
movups xmm1, xmmword [rbp + 0x310]
movups xmm2, xmmword [rbp + 0x320]
movups xmm3, xmmword [rbp + 0x330]
movaps xmmword [rsi - 0x110], xmm0
movaps xmmword [rsi - 0x100], xmm1
movaps xmmword [rsi - 0xf0], xmm2
movaps xmmword [rsi - 0xe0], xmm3
movdqu xmm0, xmmword [rbp + 0x3c0]
movups xmm1, xmmword [rbp + 0x3d0]
movups xmm2, xmmword [rbp + 0x3e0]
movaps xmmword [rsi - 0x80], xmm2
movaps xmmword [rsi - 0x90], xmm1
movdqa xmmword [rsi - 0xa0], xmm0
mov qword [rsi - 0x50], rdi
mov qword [rsi - 0x18], 8
lea rcx, [rbp - 0x40]
call fcn.1400b5beb
lea rcx, [rbp - 0x40]
mov dl, 1
call fcn.1400b5cd0
lea rcx, [rbp + 0x300]
call fcn.1400b813c
cmp dword [rbp + 0x300], 2
mov qword [rbp + 0x428], r15
je 0x1400121ad
mov rax, qword [rbp + 0x330]
lea rdx, [rbp + 0x270]
mov qword [rdx + 0x30], rax
movdqu xmm0, xmmword [rbp + 0x300]
movups xmm1, xmmword [rbp + 0x310]
movups xmm2, xmmword [rbp + 0x320]
movaps xmmword [rdx + 0x20], xmm2
movaps xmmword [rdx + 0x10], xmm1
movdqa xmmword [rdx], xmm0
lea rcx, [rbp + 0x3c0]
call fcn.1400b8168
cmp qword [rbp + 0x3c0], 2
je 0x1400121ad
mov rax, qword [rbp + 0x3f0]
lea rdx, [rbp + 0x270]
mov qword [rdx + 0x30], rax
movdqu xmm0, xmmword [rbp + 0x3c0]
movups xmm1, xmmword [rbp + 0x3d0]
movups xmm2, xmmword [rbp + 0x3e0]
movaps xmmword [rdx + 0x20], xmm2
movaps xmmword [rdx + 0x10], xmm1
movdqa xmmword [rdx], xmm0
lea rcx, [rbp + 0x380]
call fcn.1400b8213
cmp qword [rbp + 0x380], 2
je 0x1400121ad
mov rax, qword [rbp + 0x3b0]
lea rdx, [rbp + 0x270]
mov qword [rdx + 0x30], rax
movdqu xmm0, xmmword [rbp + 0x380]
movups xmm1, xmmword [rbp + 0x390]
movups xmm2, xmmword [rbp + 0x3a0]
movaps xmmword [rdx + 0x20], xmm2
movaps xmmword [rdx + 0x10], xmm1
movdqa xmmword [rdx], xmm0
lea rcx, [rbp + 0x340]
call fcn.1400b830b
cmp qword [rbp + 0x340], 2
je 0x1400121ad
mov rax, qword [rbp + 0x370]
lea rdx, [rbp + 0x270]
mov qword [rdx + 0x30], rax
movdqu xmm0, xmmword [rbp + 0x340]
movups xmm1, xmmword [rbp + 0x350]
movups xmm2, xmmword [rbp + 0x360]
movaps xmmword [rdx + 0x20], xmm2
movaps xmmword [rdx + 0x10], xmm1
movdqa xmmword [rdx], xmm0
lea rcx, [rbp + 0x1f0]
call fcn.1400b844c
cmp qword [rbp + 0x1f0], 2
je 0x1400121ad
mov rax, qword [rbp + 0x220]
lea rdx, [rbp + 0x270]
mov qword [rdx + 0x30], rax
movdqu xmm0, xmmword [rbp + 0x1f0]
movups xmm1, xmmword [rbp + 0x200]
movups xmm2, xmmword [rbp + 0x210]
movaps xmmword [rdx + 0x20], xmm2
movaps xmmword [rdx + 0x10], xmm1
movdqa xmmword [rdx], xmm0
lea rcx, [rbp + 0x160]
call fcn.1400b84f7
mov rax, qword [rbp + 0x160]
cmp rax, 2
je 0x1400121ad
movdqu xmm0, xmmword [rbp + 0x168]
movups xmm1, xmmword [rbp + 0x178]
movups xmm2, xmmword [rbp + 0x188]
lea rdx, [rbp + 0x1b8]
movups xmmword [rdx + 0x28], xmm2
movups xmmword [rdx + 0x18], xmm1
movdqu xmmword [rdx + 8], xmm0
mov qword [rdx], rax
mov byte [rbp + 0x436], 1
lea rcx, [rbp + 0x380]
mov r8b, 1
call fcn.1400b8655
mov rax, qword [rbp + 0x1e8]
mov qword [rbp + 0x330], rax
movdqu xmm0, xmmword [rbp + 0x1b8]
movups xmm1, xmmword [rbp + 0x1c8]
movups xmm2, xmmword [rbp + 0x1d8]
movaps xmmword [rbp + 0x320], xmm2
movaps xmmword [rbp + 0x310], xmm1
movdqa xmmword [rbp + 0x300], xmm0
mov esi, dword [rbp + 0x384]
cmp esi, 2
jne 0x140012105
mov byte [rbp + 0x436], 0
lea rcx, [rbp + 0x300]
call fcn.1400b4ec8
jmp 0x1400121ad
movd xmm6, dword [rbp + 0x380]
movd xmm7, dword [rbp + 0x388]
mov rax, qword [rbp + 0x1e8]
mov qword [rbp + 0x2a0], rax
movdqu xmm0, xmmword [rbp + 0x1b8]
movups xmm1, xmmword [rbp + 0x1c8]
movups xmm2, xmmword [rbp + 0x1d8]
movaps xmmword [rbp + 0x290], xmm2
movaps xmmword [rbp + 0x280], xmm1
movdqa xmmword [rbp + 0x270], xmm0
push 8
pop rdi
mov rcx, rdi
xor edx, edx
call fcn.1400814b3
movabs rcx, 0x72657475706d6f43
mov qword [rax], rcx
mov rcx, qword [rbp + 0x270]
movups xmm0, xmmword [rbp + 0x278]
movaps xmmword [rbp + 0x3c0], xmm0
movups xmm0, xmmword [rbp + 0x288]
movaps xmmword [rbp + 0x3d0], xmm0
movdqu xmm0, xmmword [rbp + 0x298]
movdqa xmmword [rbp + 0x3e0], xmm0
cmp rcx, 3
jne 0x140013745
mov qword [rbp + 0x428], rdi
xor eax, eax
mov qword [rbp + 0x418], rax
lea rcx, [rbp + 0x88]
call fcn.14000f293
mov rax, qword [rbp + 0x428]
mov qword [rbp + 0x88], rax
mov rax, qword [rbp + 0x418]
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x98], rax
lea rcx, [rbp + 0x1f0]
and qword [rcx], 0
call sub.IPHLPAPI.DLL_GetIfTable2
test eax, eax
jne 0x140012e33
lea r8, [rbp + 0x30]
mov rax, qword [r8]
mov rcx, qword [r8 + 8]
add rcx, rax
inc rcx
movdqa xmm0, xmmword [rax]
pmovmskb edx, xmm0
not edx
mov r8, qword [r8 + 0x18]
lea rsi, [rbp + 0x270]
mov qword [rsi], rax
add rax, 0x10
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rcx
mov word [rsi + 0x18], dx
mov qword [rsi + 0x20], r8
mov rcx, rsi
call fcn.1400b5591
test rax, rax
je 0x14001224d
mov byte [rdx + 0x6e], 0
jmp 0x14001223a
lea rcx, [rbp + 0x270]
call fcn.1400b5927
lea rcx, [rbp + 0x270]
call fcn.1400b5954
lea rcx, [rbp + 0x290]
mov qword [rcx - 0x20], rbx
pxor xmm0, xmm0
and qword [rcx - 8], 0
movdqu xmmword [rcx - 0x18], xmm0
mov qword [rcx], rax
mov qword [rcx + 8], rdx
lea rax, [rbp + 0x340]
mov qword [rax], 8
movdqu xmmword [rax + 8], xmm0
mov r13, qword [rbp + 0x1f0]
mov eax, dword [r13]
mov dword [rbp + 0x3b8], eax
add r13, 8
push 0xa
pop r14
lea rsi, [rbp + 0x300]
pcmpeqd xmm6, xmm6
xor ebx, ebx
mov qword [rbp + 0x268], r13
mov eax, ebx
cmp ebx, dword [rbp + 0x3b8]
mov qword [rbp + 0x418], rax
jae 0x1400125b1
lea ebx, [rax + 1]
mov eax, eax
imul rdi, rax, 0x548
cmp qword [r13 + rdi + 0x4a8], 0
jne 0x1400122fc
cmp qword [r13 + rdi + 0x4b0], 0
je 0x1400122c5
cmp dword [r13 + rdi + 0x48c], 2
je 0x1400122c5
cmp dword [r13 + rdi + 0x420], 0
je 0x1400122c5
push 0x14
pop rcx
push 2
pop rdx
call fcn.14007e8bc
mov dword [rbp + 0x400], ebx
mov r15d, dword [r13 + rdi + 0x10]
movzx ecx, byte [r13 + rdi + 0x14]
movzx edx, byte [r13 + rdi + 0x15]
movzx r8d, byte [r13 + rdi + 0x16]
movzx r9d, byte [r13 + rdi + 0x17]
movzx r10d, byte [r13 + rdi + 0x18]
movzx r11d, byte [r13 + rdi + 0x19]
movzx ebx, byte [r13 + rdi + 0x1a]
movzx edi, byte [r13 + rdi + 0x1b]
mov dword [rax], r15d
mov word [rax + 4], cx
mov word [rax + 6], dx
mov word [rax + 8], r8w
mov word [rax + 0xa], r9w
mov word [rax + 0xc], r10w
mov word [rax + 0xe], r11w
mov word [rax + 0x10], bx
mov word [rax + 0x12], di
mov byte [rbp + 0x426], 1
mov rcx, r14
xor edx, edx
mov qword [rbp + 0x408], rax
call fcn.1400aef2e
mov qword [rbp + 0x410], rdx
mov rdx, qword [rbp + 0x408]
mov ecx, dword [rdx + 0x10]
mov dword [rax + 0x10], ecx
movups xmm0, xmmword [rdx]
movups xmmword [rax], xmm0
mov rcx, qword [rbp + 0x290]
mov rdx, qword [rbp + 0x298]
mov qword [rbp + 0x428], rax
mov r8, rax
mov r9, r14
call fcn.1400b48f2
mov r12, qword [rbp + 0x270]
mov r15, qword [rbp + 0x278]
mov rbx, r15
and rbx, rax
mov qword [rbp + 0x240], rax
shr rax, 0x39
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
xor r13d, r13d
movdqu xmm8, xmmword [r12 + rbx]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb eax, xmm0
mov word [rbp + 0x300], ax
mov rcx, rsi
call fcn.140015047
test rax, rax
je 0x140012459
add rdx, rbx
and rdx, r15
shl rdx, 5
mov rdi, r12
sub rdi, rdx
mov rcx, qword [rdi - 0x20]
mov rdx, qword [rdi - 0x10]
mov r8, qword [rbp + 0x428]
mov r9, r14
call fcn.1400b4a1e
test al, al
je 0x14001241f
jmp 0x14001247b
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x14001251d
add rbx, r13
add rbx, 0x10
add r13, 0x10
and rbx, r15
jmp 0x140012405
mov rcx, qword [rbp + 0x428]
mov rdx, qword [rbp + 0x410]
call fcn.1400adcbe
mov r13, qword [rbp + 0x268]
mov eax, dword [rdi - 8]
inc eax
mov dword [rdi - 8], eax
cmp eax, 1
mov ebx, dword [rbp + 0x400]
mov rcx, qword [rbp + 0x408]
jle 0x1400124bc
mov rdx, r14
call fcn.1400adcbe
jmp 0x1400122c5
mov rdx, qword [rbp + 0x350]
cmp rdx, qword [rbp + 0x348]
jne 0x1400124e6
lea rcx, [rbp + 0x340]
call fcn.1400b4cb8
mov rdx, qword [rbp + 0x350]
mov rcx, qword [rbp + 0x408]
mov rax, qword [rbp + 0x340]
mov r9, rdx
shl r9, 5
mov r8, qword [rbp + 0x418]
mov dword [rax + r9], r8d
mov qword [rax + r9 + 8], rcx
mov qword [rax + r9 + 0x10], r14
mov qword [rax + r9 + 0x18], r14
inc rdx
mov qword [rbp + 0x350], rdx
jmp 0x1400122c5
cmp qword [rbp + 0x280], 0
mov r13, qword [rbp + 0x268]
jne 0x14001254f
lea rcx, [rbp + 0x270]
lea rdx, [rbp + 0x290]
call fcn.14011d8e7
mov r12, qword [rbp + 0x270]
mov r15, qword [rbp + 0x278]
mov rcx, r12
mov rdx, r15
mov r8, qword [rbp + 0x240]
call fcn.1400b5635
mov rcx, qword [rbp + 0x270]
shl rax, 5
mov rdi, rcx
and dl, 1
movzx edx, dl
sub qword [rbp + 0x280], rdx
sub rdi, rax
neg rax
mov rdx, qword [rbp + 0x428]
mov qword [rcx + rax - 0x20], rdx
mov rax, qword [rbp + 0x410]
mov qword [rdi - 0x18], rax
mov qword [rdi - 0x10], 0xa
and dword [rdi - 8], 0
inc qword [rbp + 0x288]
jmp 0x140012495
mov rsi, qword [rbp + 0x340]
mov rax, qword [rbp + 0x348]
mov rcx, qword [rbp + 0x350]
shl rcx, 5
add rcx, rsi
mov qword [rbp + 0x300], rsi
mov qword [rbp + 0x308], rax
mov qword [rbp + 0x310], rsi
mov qword [rbp + 0x240], rcx
mov qword [rbp + 0x318], rcx
pcmpeqd xmm6, xmm6
cmp rsi, qword [rbp + 0x240]
je 0x140012adc
mov rax, rsi
add rsi, 0x20
mov qword [rbp + 0x310], rsi
mov rcx, qword [rax + 8]
mov qword [rbp + 0x428], rcx
test rcx, rcx
je 0x140012adc
mov rcx, qword [rax + 0x10]
mov edx, dword [rax]
cmp qword [rbp + 0x288], 0
mov qword [rbp + 0x400], rsi
mov qword [rbp + 0x408], rcx
je 0x140012749
mov qword [rbp + 0x410], rdx
mov rsi, qword [rax + 0x18]
mov rcx, qword [rbp + 0x290]
mov rdx, qword [rbp + 0x298]
mov r8, qword [rbp + 0x428]
mov r9, rsi
call fcn.1400b48f2
mov rbx, qword [rbp + 0x270]
mov r12, qword [rbp + 0x278]
mov r15, r12
and r15, rax
shr rax, 0x39
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
xor r13d, r13d
movdqu xmm8, xmmword [rbx + r15]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb eax, xmm0
mov word [rbp + 0x3c0], ax
lea rcx, [rbp + 0x3c0]
call fcn.140015047
mov rdi, rax
test rax, rax
je 0x1400126fb
mov r14, rdx
add r14, r15
and r14, r12
mov rax, r14
shl rax, 5
mov rcx, rbx
sub rcx, rax
mov r8, qword [rcx - 0x20]
mov r9, qword [rcx - 0x10]
mov rcx, qword [rbp + 0x428]
mov rdx, rsi
call fcn.1400b4a1e
test al, al
je 0x1400126b4
jmp 0x140012719
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x140012719
add r15, r13
add r15, 0x10
add r13, 0x10
and r15, r12
jmp 0x14001269a
shl r14, 5
sub rbx, r14
test rdi, rdi
cmove rbx, rdi
add rbx, 0xffffffffffffffe0
test rdi, rdi
cmove rbx, rdi
mov r13, qword [rbp + 0x268]
mov rsi, qword [rbp + 0x400]
mov rdx, qword [rbp + 0x410]
jmp 0x14001274b
xor ebx, ebx
lea rax, [rbx + 0x18]
test rbx, rbx
lea rcx, [0x1401632a0]
cmove rax, rcx
cmp dword [rax], 1
jg 0x14001297d
imul rdi, rdx, 0x548
lea rbx, [rdi + r13]
lea rcx, [rdi + r13]
add rcx, 0x1c
xor r8d, r8d
cmp r8, 0x101
je 0x140012792
cmp word [rcx + r8*2], 0
je 0x140012798
inc r8
jmp 0x14001277c
mov r8d, 0x101
mov edx, 0x101
lea r9, str.C:UsersAdministrator.cargo_registry_srcindex.crates.io_6f17d22bba15001f_sysinfo_0.29.9_srcwindows_network.rs
call fcn.1400af0e1
mov r8, rdx
lea rcx, [rbp + 0x380]
mov rdx, rax
call fcn.140047340
cmp qword [rbp + 0x380], 0
je 0x14001297d
mov qword [rbp + 0x248], rbx
mov r14, qword [rbp + 0x390]
mov qword [rbp + 0x3d0], r14
movups xmm0, xmmword [rbp + 0x380]
movaps xmmword [rbp + 0x3c0], xmm0
mov rcx, qword [rbp + 0x50]
mov rdx, qword [rbp + 0x58]
mov rsi, qword [rbp + 0x3c0]
mov r8, rsi
mov r9, r14
call fcn.1400b4988
mov rbx, qword [rbp + 0x30]
mov r15, qword [rbp + 0x38]
mov r12, r15
and r12, rax
mov qword [rbp + 0x1a0], rax
shr rax, 0x39
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
xor eax, eax
mov qword [rbp + 0x410], rax
movdqu xmm8, xmmword [rbx + r12]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb eax, xmm0
mov word [rbp + 0x380], ax
lea rcx, [rbp + 0x380]
call fcn.140015047
test rax, rax
je 0x140012893
add rdx, r12
and rdx, r15
neg rdx
imul r13, rdx, 0x88
mov rcx, qword [rbx + r13 - 0x88]
mov rdx, qword [rbx + r13 - 0x78]
mov r8, rsi
mov r9, r14
call fcn.14010a6a2
test al, al
je 0x140012854
jmp 0x1400128c6
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x140012995
mov rax, qword [rbp + 0x410]
add r12, rax
add r12, 0x10
add rax, 0x10
mov qword [rbp + 0x410], rax
and r12, r15
jmp 0x14001283a
add rbx, r13
mov rdx, qword [rbp + 0x3c8]
mov rax, qword [rbx - 0x68]
mov rcx, qword [rbx - 0x58]
mov qword [rbx - 0x60], rax
mov r13, qword [rbp + 0x268]
mov rax, qword [r13 + rdi + 0x500]
mov qword [rbx - 0x68], rax
mov qword [rbx - 0x50], rcx
mov rax, qword [r13 + rdi + 0x4b8]
mov qword [rbx - 0x58], rax
mov rax, qword [rbx - 0x48]
mov qword [rbx - 0x40], rax
mov rax, qword [r13 + rdi + 0x4c0]
add rax, qword [r13 + rdi + 0x4c8]
push 0xffffffffffffffff
pop rcx
cmovb rax, rcx
mov qword [rbx - 0x48], rax
mov rax, qword [rbx - 0x38]
mov qword [rbx - 0x30], rax
mov rax, qword [r13 + rdi + 0x508]
add rax, qword [r13 + rdi + 0x510]
cmovb rax, rcx
mov qword [rbx - 0x38], rax
mov rax, qword [rbx - 0x28]
mov qword [rbx - 0x20], rax
mov rax, qword [r13 + rdi + 0x4d8]
mov qword [rbx - 0x28], rax
mov rax, qword [rbx - 0x18]
mov qword [rbx - 0x10], rax
mov rax, qword [r13 + rdi + 0x520]
mov qword [rbx - 0x18], rax
mov byte [rbx - 2], 1
mov rcx, rsi
call fcn.14000e02a
mov rsi, qword [rbp + 0x400]
mov rcx, qword [rbp + 0x428]
mov rdx, qword [rbp + 0x408]
call fcn.1400adcbe
jmp 0x1400125f4
cmp qword [rbp + 0x40], 0
jne 0x1400129a9
lea rcx, [rbp + 0x30]
lea rdx, [rbp + 0x50]
call fcn.14011d5d7
mov rax, qword [rbp + 0x3c8]
mov qword [rbp + 0x410], rax
mov r13, qword [rbp + 0x268]
mov rbx, qword [r13 + rdi + 0x4c0]
add rbx, qword [r13 + rdi + 0x4c8]
push 0xffffffffffffffff
pop rax
cmovb rbx, rax
mov rcx, qword [r13 + rdi + 0x4b8]
mov qword [rbp + 0x1a8], rcx
mov r15, qword [r13 + rdi + 0x508]
add r15, qword [r13 + rdi + 0x510]
cmovb r15, rax
mov rax, qword [rbp + 0x248]
mov rax, qword [rax]
mov qword [rbp + 0x1b0], rax
mov r12, qword [r13 + rdi + 0x500]
mov rax, qword [r13 + rdi + 0x4d8]
mov qword [rbp + 0x248], rax
mov rdi, qword [r13 + rdi + 0x520]
mov rcx, qword [rbp + 0x30]
mov rdx, qword [rbp + 0x38]
mov r8, qword [rbp + 0x1a0]
call fcn.1400b5635
mov rcx, qword [rbp + 0x30]
neg rax
and dl, 1
movzx edx, dl
sub qword [rbp + 0x40], rdx
imul rax, rax, 0x88
mov qword [rcx + rax - 0x88], rsi
mov rdx, qword [rbp + 0x410]
mov qword [rcx + rax - 0x80], rdx
mov qword [rcx + rax - 0x78], r14
mov rdx, qword [rbp + 0x1b0]
mov qword [rcx + rax - 0x70], rdx
mov qword [rcx + rax - 0x68], r12
mov qword [rcx + rax - 0x60], r12
mov rdx, qword [rbp + 0x1a8]
mov qword [rcx + rax - 0x58], rdx
mov qword [rcx + rax - 0x50], rdx
mov qword [rcx + rax - 0x48], rbx
mov qword [rcx + rax - 0x40], rbx
mov qword [rcx + rax - 0x38], r15
mov qword [rcx + rax - 0x30], r15
mov rdx, qword [rbp + 0x248]
mov qword [rcx + rax - 0x28], rdx
mov qword [rcx + rax - 0x20], rdx
mov qword [rcx + rax - 0x18], rdi
mov qword [rcx + rax - 0x10], rdi
and dword [rcx + rax - 8], 0
and word [rcx + rax - 4], 0
mov byte [rcx + rax - 2], 1
inc qword [rbp + 0x48]
jmp 0x140012976
lea rcx, [rbp + 0x300]
call fcn.1400b54fc
mov rcx, qword [rbp + 0x1f0]
call sub.IPHLPAPI.DLL_FreeMibTable
lea rsi, [rbp + 0x270]
mov rcx, rsi
call fcn.1400b5238
mov rax, qword [rbp + 0x30]
mov rcx, qword [rbp + 0x38]
add rcx, rax
inc rcx
movdqa xmm0, xmmword [rax]
pmovmskb edx, xmm0
not edx
mov r8, qword [rbp + 0x48]
mov qword [rsi], rax
add rax, 0x10
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rcx
mov word [rsi + 0x18], dx
mov qword [rsi + 0x20], r8
mov ebx, 0x88
mov rcx, rsi
call fcn.1400b46ec
test rax, rax
je 0x140012b7b
mov rdi, rax
cmp byte [rax - 2], 0
jne 0x140012b3b
mov rax, qword [rbp + 0x30]
sub rax, rdi
cqo
idiv rbx
lea rcx, [rbp + 0x30]
mov rdx, rax
call fcn.1400f2153
mov rcx, qword [rdi - 0x88]
mov rdx, qword [rdi - 0x80]
call fcn.14000e02a
jmp 0x140012b3b
and dword [rbp + 0x380], 0
mov dword [rbp + 0x340], 0x3c00
xor r14d, r14d
push 0xe
pop rsi
xor ebx, ebx
cmp ebx, 2
ja 0x140012c48
mov edx, dword [rbp + 0x340]
mov rcx, r14
call sub.msvcrt.dll_realloc
test rax, rax
je 0x140012bfa
mov rdi, rax
mov qword [rbp + 0x238], rax
mov byte [rbp + 0x427], 1
lea rax, [rbp + 0x340]
mov qword [rsp + 0x20], rax
xor ecx, ecx
mov edx, esi
xor r8d, r8d
mov r9, rdi
call sub.IPHLPAPI.DLL_GetAdaptersAddresses
inc ebx
mov dword [rbp + 0x380], eax
mov r14, rdi
cmp eax, 0x6f
je 0x140012b94
test eax, eax
jne 0x140012c45
xor esi, esi
mov rbx, rdi
jmp 0x140012cc7
mov qword [rbp + 0x428], r14
push 0x32
pop rdi
mov rcx, rdi
xor edx, edx
call fcn.1400814b3
mov rsi, rax
mov rbx, rdx
movups xmm0, xmmword [0x140163742]
movups xmmword [rax + 0x20], xmm0
movups xmm0, xmmword [0x140163732]
movups xmmword [rax + 0x10], xmm0
movdqu xmm0, xmmword [str.failed_to_allocate_memory_for_IP_ADAPTER_ADDRESSESGetAdaptersAddresses___failed_with_code]
movdqu xmmword [rax], xmm0
mov word [rax + 0x30], 0x5345
mov rcx, qword [rbp + 0x428]
jmp 0x140012cc2
mov r14, rdi
lea rax, [rbp + 0x380]
mov qword [rbp + 0x3c0], rax
lea rax, [0x14004f7b0]
mov qword [rbp + 0x3c8], rax
lea rax, [0x140163780]
lea rdx, [rbp + 0x270]
mov qword [rdx], rax
push 1
pop rax
mov qword [rdx + 8], rax
and qword [rdx + 0x20], 0
lea rcx, [rbp + 0x3c0]
mov qword [rdx + 0x10], rcx
mov qword [rdx + 0x18], rax
mov qword [rbp + 0x238], r14
mov byte [rbp + 0x427], 1
lea rcx, [rbp + 0x300]
call fcn.1400ae4a4
mov rsi, qword [rbp + 0x300]
mov rbx, qword [rbp + 0x308]
mov rdi, qword [rbp + 0x310]
mov rcx, r14
call sub.msvcrt.dll_free
test rsi, rsi
je 0x140012cdc
mov rcx, rsi
mov rdx, rbx
call fcn.14000e02a
jmp 0x140012e33
lea rax, [rbp + 0x300]
mov qword [rax], rbx
mov qword [rax + 8], rdi
lea rbx, [rbp + 0x3c0]
pcmpeqd xmm6, xmm6
lea rcx, [rbp + 0x270]
lea rdx, [rbp + 0x300]
call fcn.1400b8011
mov r14, qword [rbp + 0x270]
test r14, r14
je 0x140012e27
mov rax, qword [rbp + 0x278]
mov qword [rbp + 0x428], rax
cmp qword [rbp + 0x48], 0
je 0x140012e13
mov r12, qword [rbp + 0x280]
mov rcx, qword [rbp + 0x50]
mov rdx, qword [rbp + 0x58]
mov r8, r14
mov r9, r12
call fcn.1400b4988
mov rdi, qword [rbp + 0x30]
mov r13, qword [rbp + 0x38]
mov rsi, r13
and rsi, rax
shr rax, 0x39
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
xor eax, eax
mov qword [rbp + 0x418], rax
movdqu xmm8, xmmword [rdi + rsi]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb eax, xmm0
mov word [rbp + 0x3c0], ax
mov rcx, rbx
call fcn.140015047
test rax, rax
je 0x140012dcd
add rdx, rsi
and rdx, r13
neg rdx
imul r15, rdx, 0x88
mov r8, qword [rdi + r15 - 0x88]
mov r9, qword [rdi + r15 - 0x78]
mov rcx, r14
mov rdx, r12
call fcn.14010a6a2
test al, al
je 0x140012d92
jmp 0x140012dfc
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x140012e13
mov rax, qword [rbp + 0x418]
add rsi, rax
add rsi, 0x10
add rax, 0x10
mov qword [rbp + 0x418], rax
and rsi, r13
jmp 0x140012d78
add rdi, r15
lea rcx, [rbp + 0x288]
movzx eax, word [rcx + 4]
mov word [rdi - 4], ax
mov eax, dword [rcx]
mov dword [rdi - 8], eax
mov rcx, r14
mov rdx, qword [rbp + 0x428]
call fcn.14000e02a
jmp 0x140012cf5
mov rcx, qword [rbp + 0x300]
call sub.msvcrt.dll_free
lea rcx, [rbp - 0x40]
mov edx, 0x10101
call fcn.1400b6654
call sub.kernel32.dll_GetLogicalDrives
mov dword [rbp + 0x1f0], eax
test eax, eax
je 0x140013011
mov qword [rbp + 0x340], 8
pxor xmm0, xmm0
movdqu xmmword [rbp + 0x348], xmm0
lea rax, [rbp + 0x1f0]
mov qword [rbp + 0x270], rax
movabs rax, 0x2000000000
mov qword [rbp + 0x278], rax
push 0x20
pop rcx
call fcn.1400b47b8
lea rcx, [rbp + 0x270]
mov qword [rsp + 0x38], rcx
and dword [rsp + 0x28], 0
mov dword [rsp + 0x30], 0x20
mov qword [rsp + 0x20], 1
lea rsi, [rbp + 0x380]
push 0x20
pop rdx
mov rcx, rsi
xor r8d, r8d
mov r9, rax
call fcn.1400af407
lea r12, [rbp + 0x348]
mov rax, qword [rbp + 0x390]
xor edx, edx
sub rax, 1
jb 0x140012ef4
mov rsi, qword [rsi]
test rsi, rsi
je 0x140012ef4
add rdx, qword [rsi + 0x10]
add rsi, 0x18
jmp 0x140012edc
mov byte [rbp + 0x425], 1
lea rcx, [rbp + 0x340]
call fcn.1400b4a46
mov rax, qword [rbp + 0x390]
lea rsi, [rbp + 0x3c0]
mov qword [rsi + 0x10], rax
movdqu xmm0, xmmword [rbp + 0x380]
movdqa xmmword [rsi], xmm0
lea rdi, [rbp + 0x340]
lea rbx, [rbp + 0x270]
mov rcx, rsi
call fcn.1400adeb2
test rax, rax
je 0x140012fe0
mov rcx, qword [rax + 0x10]
mov qword [rbp + 0x310], rcx
movdqu xmm0, xmmword [rax]
movdqa xmmword [rbp + 0x300], xmm0
mov rcx, rax
call fcn.14006d950
cmp qword [rbp + 0x300], 0
je 0x140012fe0
movdqa xmm0, xmmword [rbp + 0x300]
movdqa xmmword [rbp + 0x270], xmm0
mov r14, qword [rbp + 0x310]
mov qword [rbp + 0x280], r14
mov r15, qword [rbp + 0x270]
mov rcx, rdi
mov rdx, r14
call fcn.1400b4a46
mov r13, qword [rbp + 0x350]
imul rcx, r13, 0x90
add rcx, qword [rbp + 0x340]
imul r8, r14, 0x90
mov rdx, r15
call sub.msvcrt.dll_memcpy
add r13, r14
mov qword [rbp + 0x350], r13
and qword [rbp + 0x280], 0
mov rcx, rbx
call fcn.14000f008
jmp 0x140012f33
mov byte [rbp + 0x425], 0
lea rcx, [rbp + 0x3c0]
call fcn.1400add89
mov rax, qword [rbp + 0x340]
mov qword [rbp + 0x428], rax
movdqu xmm0, xmmword [r12]
movdqa xmmword [rbp + 0x270], xmm0
jmp 0x140013027
pxor xmm0, xmm0
movdqa xmmword [rbp + 0x270], xmm0
push 8
pop rax
mov qword [rbp + 0x428], rax
lea rcx, [rbp + 0xa0]
call fcn.14000f008
lea r12, [rbp + 0xb8]
mov rax, qword [rbp + 0x428]
mov qword [r12 - 0x18], rax
lea r15, [rbp + 0x288]
movdqa xmm0, xmmword [r15 - 0x18]
movdqu xmmword [r12 - 0x10], xmm0
lea rax, [rbp + 0x160]
mov qword [rax], 8
pxor xmm6, xmm6
lea rcx, [rbp + 0x234]
and dword [rcx], 0
movdqu xmmword [rax + 8], xmm6
push 0x17
pop rsi
lea r14, [rbp + 0x258]
and qword [rbp + 0x260], 0
and dword [rbp + 0x254], 0
and dword [rbp + 0x230], 0
lea rax, [rbp + 0x234]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x230]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x254]
mov qword [rsp + 0x28], rax
or dword [rsp + 0x20], 0xffffffff
xor ecx, ecx
xor edx, edx
push 2
pop r8
lea r9, [rbp + 0x260]
call sub.netapi32.dll_NetUserEnum
mov dword [rbp + 0x400], eax
mov eax, dword [rbp + 0x400]
test eax, eax
je 0x1400130f3
cmp eax, 0xea
jne 0x140013457
mov rbx, qword [rbp + 0x260]
mov eax, dword [rbp + 0x254]
lea r13, [rbx + rax*8]
cmp rbx, r13
je 0x140013433
mov rdi, rbx
add rbx, 8
cmp qword [rdi], 0
je 0x140013104
and qword [rbp + 0x258], 0
mov rdx, qword [rdi]
xor ecx, ecx
mov r8d, esi
mov r9, r14
call sub.netapi32.dll_NetUserGetInfo
test eax, eax
jne 0x140013422
mov rax, qword [rbp + 0x258]
mov rdx, qword [rax + 0x20]
lea rcx, [rbp + 0x1f0]
call fcn.1400ae72f
mov rdx, qword [rbp + 0x1f0]
test rdx, rdx
je 0x140013422
mov rax, qword [rbp + 0x1f8]
mov qword [rbp + 0x3b8], rax
mov rsi, qword [rbp + 0x200]
mov byte [rbp + 0x435], 1
lea rcx, [rbp + 0x270]
mov qword [rbp + 0x418], rdx
call fcn.1400b705c
cmp qword [rbp + 0x270], 0
je 0x1400131ba
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x350], rax
movdqu xmm0, xmmword [rbp + 0x270]
movdqa xmmword [rbp + 0x340], xmm0
jmp 0x1400131d0
mov rdx, qword [rdi]
mov byte [rbp + 0x435], 1
lea rcx, [rbp + 0x340]
call fcn.1400ad919
mov qword [rbp + 0x408], rsi
mov rax, qword [rbp + 0x350]
mov qword [rbp + 0x390], rax
movdqa xmm0, xmmword [rbp + 0x340]
movdqa xmmword [rbp + 0x380], xmm0
mov rdx, qword [rdi]
and qword [rbp + 0x1b8], 0
and dword [rbp + 0x3fc], 0
and dword [rbp + 0x22c], 0
mov byte [rbp + 0x434], 0
lea rax, [rbp + 0x22c]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x3fc]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x1b8]
mov qword [rsp + 0x20], rax
or dword [rsp + 0x28], 0xffffffff
lea rcx, [0x140163720]
xor r8d, r8d
push 1
pop r9
call sub.netapi32.dll_NetUserGetLocalGroups
test eax, eax
je 0x140013270
lea rax, [rbp + 0x3c8]
movdqu xmmword [rax], xmm6
mov qword [rbp + 0x3c0], 8
jmp 0x140013368
mov esi, dword [rbp + 0x3fc]
push 8
pop rcx
mov rax, rcx
test rsi, rsi
je 0x140013296
imul rdi, rsi, 0x18
mov rdx, rdi
call fcn.14007ef1d
test rax, rax
je 0x1400137dd
mov qword [rbp + 0x3c0], rax
mov qword [rbp + 0x3c8], rsi
and qword [rbp + 0x3d0], 0
mov r14, qword [rbp + 0x1b8]
test r14, r14
je 0x140013368
mov edi, dword [rbp + 0x3fc]
cmp esi, edi
jae 0x1400132f6
lea rcx, [rbp + 0x3c0]
xor edx, edx
mov r8, rdi
call fcn.1400af15a
mov byte [rbp + 0x434], 1
mov rcx, rax
call fcn.140047c5c
mov rax, qword [rbp + 0x3c0]
mov r15, qword [rbp + 0x3d0]
jmp 0x140013305
mov r15d, 0
mov ecx, 0
test edi, edi
je 0x14001335a
imul rsi, r15, 0x18
add rsi, rax
xor r12d, r12d
lea rax, [r15 + r12]
mov qword [rbp + 0x428], rax
mov rdx, qword [r14 + r12*8]
lea rcx, [rbp + 0x300]
call fcn.1400ad919
mov rax, qword [rbp + 0x310]
mov qword [rsi + 0x10], rax
movdqu xmm0, xmmword [rbp + 0x300]
movdqu xmmword [rsi], xmm0
inc r12
add rsi, 0x18
cmp rdi, r12
jne 0x14001330f
add r15, r12
mov rcx, r15
lea r12, [rbp + 0xb8]
mov qword [rbp + 0x3d0], rcx
lea r15, [rbp + 0x288]
mov rax, qword [rbp + 0x3d0]
mov qword [rbp + 0x310], rax
mov rax, qword [rbp + 0x3c0]
mov qword [rbp + 0x300], rax
mov rax, qword [rbp + 0x3c8]
mov qword [rbp + 0x308], rax
mov rcx, qword [rbp + 0x1b8]
call fcn.1400b71f1
mov rax, qword [rbp + 0x418]
mov qword [rbp + 0x270], rax
mov rax, qword [rbp + 0x3b8]
mov qword [rbp + 0x278], rax
mov rax, qword [rbp + 0x408]
mov qword [rbp + 0x280], rax
and dword [rbp + 0x2b8], 0
mov rax, qword [rbp + 0x390]
mov qword [r15 + 0x10], rax
movaps xmm0, xmmword [rbp + 0x380]
movups xmmword [r15], xmm0
mov rax, qword [rbp + 0x310]
mov qword [r15 + 0x28], rax
movdqa xmm0, xmmword [rbp + 0x300]
movdqu xmmword [r15 + 0x18], xmm0
mov byte [rbp + 0x435], 0
lea rcx, [rbp + 0x160]
lea rdx, [rbp + 0x270]
call fcn.1400b7172
push 0x17
pop rsi
lea r14, [rbp + 0x258]
mov rcx, qword [rbp + 0x258]
call fcn.1400b71f1
jmp 0x140013104
mov rcx, qword [rbp + 0x260]
cmp dword [rbp + 0x400], 0xea
jne 0x14001345e
mov byte [rbp + 0x437], 1
call fcn.1400b71f1
jmp 0x140013085
mov rcx, qword [rbp + 0x260]
mov byte [rbp + 0x437], 1
call fcn.1400b71f1
lea rcx, [rbp + 0x1f0]
and dword [rcx], 0
lea rdx, [rbp + 0x340]
and qword [rdx], 0
call sub.secur32.dll_LsaEnumerateLogonSessions
mov rsi, qword [rbp + 0x340]
test eax, eax
jne 0x1400136b4
mov eax, dword [rbp + 0x1f0]
lea r15, [rsi + rax*8]
lea rdi, [rbp + 0x380]
lea rbx, [rbp + 0x270]
pxor xmm6, xmm6
cmp rsi, r15
je 0x1400136ad
and qword [rbp + 0x380], 0
mov rcx, rsi
mov rdx, rdi
call sub.secur32.dll_LsaGetLogonSessionData
add rsi, 8
mov rcx, qword [rbp + 0x380]
test eax, eax
je 0x1400134e1
call fcn.1400b7052
jmp 0x1400134af
test rcx, rcx
je 0x1400135a3
cmp dword [rcx + 0x40], 3
je 0x140013599
movzx r13d, word [rcx + 0x10]
mov r14, qword [rcx + 0x18]
mov rdx, qword [rcx + 0x48]
mov rcx, rbx
call fcn.1400ae72f
mov rax, qword [rbp + 0x270]
mov qword [rbp + 0x428], rax
test rax, rax
je 0x140013592
mov rax, qword [rbp + 0x278]
mov qword [rbp + 0x418], rax
mov r12, qword [rbp + 0x280]
mov rdx, qword [rbp + 0x160]
imul rbx, qword [rbp + 0x170], 0x50
test rbx, rbx
je 0x1400135aa
lea rdi, [rdx + 0x50]
mov rcx, qword [rdx]
mov rdx, qword [rdx + 0x10]
mov r8, qword [rbp + 0x428]
mov r9, r12
call fcn.14004253c
add rbx, 0xffffffffffffffb0
mov rdx, rdi
test al, al
je 0x140013540
mov rcx, qword [rbp + 0x428]
mov rdx, qword [rbp + 0x418]
call fcn.14000e02a
lea r12, [rbp + 0xb8]
lea rdi, [rbp + 0x380]
lea rbx, [rbp + 0x270]
mov rcx, qword [rbp + 0x380]
call fcn.1400b7052
jmp 0x1400134af
xor ecx, ecx
jmp 0x1400134da
mov byte [rbp + 0x424], 1
lea rcx, [rbp + 0x300]
mov rdx, qword [rbp + 0x428]
call fcn.1400b705c
lea rdi, [rbp + 0x380]
lea rbx, [rbp + 0x270]
mov rax, qword [rbp + 0x300]
test rax, rax
je 0x1400135e7
lea rcx, [rbp + 0x308]
jmp 0x140013616
shr r13d, 1
mov byte [rbp + 0x424], 1
mov rcx, rbx
mov rdx, r14
mov r8, r13
call fcn.140047340
mov rax, qword [rbp + 0x270]
test rax, rax
je 0x14001369d
lea rcx, [rbp + 0x278]
movdqu xmm0, xmmword [rcx]
movdqa xmmword [rbp + 0x3c0], xmm0
mov rcx, qword [rbp + 0x428]
mov qword [rbp + 0x270], rcx
mov rcx, qword [rbp + 0x418]
mov qword [rbp + 0x278], rcx
mov qword [rbp + 0x280], r12
movdqa xmm0, xmmword [rbp + 0x3c0]
lea rcx, [rbp + 0x278]
movdqu xmmword [rcx + 0x18], xmm0
and dword [rcx + 0x40], 0
movdqu xmmword [rcx + 0x30], xmm6
mov qword [rbp + 0x288], rax
mov qword [rbp + 0x2a0], 8
mov byte [rbp + 0x424], 0
lea rcx, [rbp + 0x160]
mov rdx, rbx
call fcn.1400b7172
mov rcx, qword [rbp + 0x380]
lea r12, [rbp + 0xb8]
jmp 0x1400134da
movdqa xmmword [rbp + 0x3c0], xmm6
push 1
pop rax
jmp 0x140013622
mov rsi, qword [rbp + 0x340]
mov rax, qword [rbp + 0x170]
mov qword [rbp + 0x280], rax
movdqu xmm0, xmmword [rbp + 0x160]
movdqa xmmword [rbp + 0x270], xmm0
mov byte [rbp + 0x437], 0
mov rcx, rsi
call fcn.1400b7052
mov rcx, r12
call fcn.1400b5b81
mov rax, qword [rbp + 0x280]
lea rcx, [rbp + 0xb8]
mov qword [rcx + 0x10], rax
movaps xmm0, xmmword [rbp + 0x270]
movups xmmword [rcx], xmm0
lea rdx, [rbp - 0x40]
mov r8d, 0x1a0
mov rcx, qword [rbp + 0x198]
call sub.msvcrt.dll_memcpy
movaps xmm6, xmmword [rbp + 0x440]
movaps xmm7, xmmword [rbp + 0x450]
movaps xmm8, xmmword [rbp + 0x460]
add rsp, 0x4f8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov qword [rbp + 0x270], rcx
movdqa xmm0, xmmword [rbp + 0x3c0]
movaps xmm1, xmmword [rbp + 0x3d0]
movaps xmm2, xmmword [rbp + 0x3e0]
movdqu xmmword [rbp + 0x278], xmm0
movups xmmword [rbp + 0x288], xmm1
movups xmmword [rbp + 0x298], xmm2
mov dword [rbp + 0x2a8], esi
movd dword [rbp + 0x2ac], xmm7
mov qword [rbp + 0x2b0], rax
mov qword [rbp + 0x2b8], rdx
mov qword [rbp + 0x2c0], 8
movd dword [rbp + 0x2c8], xmm6
movd dword [rbp + 0x2cc], xmm6
push 0x60
pop rcx
push 8
pop rdx
call fcn.14007e8bc
mov qword [rbp + 0x418], r14
push 0xc
pop rcx
lea rsi, [rbp + 0x270]
mov qword [rbp + 0x428], rax
mov rdi, rax
rep movsq qword [rdi], qword [rsi]
jmp 0x1400121b6
mov byte [rbp + 0x434], 0
push 8
pop rcx
mov rdx, rdi
call fcn.14011a0d0
jmp 0x1400137fe
push 8
pop rcx
mov edx, 0x120
call fcn.14011a0d0
ud2