Function at 0x1400d19f0
Capabilities:
Access peb ldr_data
Enumerate gui resources
Get ntdll base address
Query environment variable

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x500
movaps xmmword [rsp + 0x4f0], xmm6
mov rax, qword [0x1401a38c0]
xor rax, rsp
mov qword [rsp + 0x4e0], rax
mov rax, r8
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0xd0], rcx
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x88], rax
xor r12d, r12d
mov dword [rsp + 0x48], r12d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdx, qword [rcx + 0x10]
mov eax, dword [rdx + 0x30]
add eax, 0x100000
mov dword [rdx + 0x40], eax
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x1400d3338
call fcn.1400c2ab0
call fcn.1400c2a00
call fcn.1400c2760
call fcn.1400c2960
call fcn.1400cbdf0
call fcn.1400c2b50
call fcn.1400c9ba0
call fcn.1400c9d90
call fcn.1400c9c10
call fcn.1400c9d70
call fcn.1400c2530
call fcn.1400c8420
xor edx, edx
lea rcx, [0x1400c2b70]
call qword [sym.imp.USER32.dll_EnumWindows]
lea rdx, [0x1400ca870]
lea rcx, [rsp + 0x130]
call fcn.1400b6900
nop
mov rcx, rax
call fcn.1400cb3e0
nop
cmp dword [rsp + 0x138], 0
je 0x1400d1af3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
lea rcx, str.SystemRoot
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xorps xmm0, xmm0
movups xmmword [rsp + 0x1c8], xmm0
mov qword [rsp + 0x1d8], r12
mov qword [rsp + 0x1e0], r12
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1400d1b22
mov rdx, rax
lea rcx, [rsp + 0x1c8]
call fcn.140038af0
nop
mov rcx, qword [rsp + 0x1d8]
test rcx, rcx
je 0x1400d331b
movabs r13, 0x7fffffffffffffff
mov rax, r13
sub rax, rcx
cmp rax, 0x15
jb 0x1400d3355
lea r9, [rsp + 0x1c8]
cmp qword [rsp + 0x1e0], 0xf
cmova r9, qword [rsp + 0x1c8]
mov qword [rsp + 0x30], reloc.WS2_32.dll_setsockopt
lea rax, str.System32driversetc
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0x1c8]
movzx edx, byte [rsp + 0x90]
lea rcx, [rsp + 0xf0]
call fcn.140039470
nop
lea rax, [rsp + 0x130]
mov qword [rsp + 0xd0], rax
lea rsi, [rsp + 0xf0]
cmp qword [rsp + 0x108], 0xf
cmova rsi, qword [rsp + 0xf0]
mov rdi, qword [rsp + 0x100]
call fcn.1400d8914
mov r14d, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x130], xmm0
mov qword [rsp + 0x140], r12
mov qword [rsp + 0x148], 7
mov word [rsp + 0x130], r12w
mov dword [rsp + 0x48], 0x3000
test rdi, rdi
je 0x1400d1cad
cmp rdi, 0x7fffffff
ja 0x1400d335b
mov dword [rsp + 0x20], r12d
xor r9d, r9d
mov r8d, edi
mov rdx, rsi
mov ecx, r14d
call fcn.1400d893c
mov rbx, rax
shr rax, 0x20
test eax, eax
jne 0x1400d3365
xor r8d, r8d
movsxd rdx, ebx
lea rcx, [rsp + 0x130]
call fcn.1400d3850
lea r9, [rsp + 0x130]
cmp qword [rsp + 0x148], 7
cmova r9, qword [rsp + 0x130]
mov dword [rsp + 0x20], ebx
mov r8d, edi
mov rdx, rsi
mov ecx, r14d
call fcn.1400d893c
mov rcx, rax
shr rax, 0x20
test eax, eax
jne 0x1400d3370
mov esi, 0x2c00
mov dword [rsp + 0x48], esi
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x150], xmm0
xor r8d, r8d
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x150]
call fcn.1400b9460
test eax, eax
jne 0x1400d337a
lea rcx, [rsp + 0x130]
call fcn.140048430
xorps xmm0, xmm0
movups xmmword [rsp + 0xc0], xmm0
mov rax, qword [rsp + 0x158]
test rax, rax
je 0x1400d1d17
lock inc dword [rax + 8]
mov rax, qword [rsp + 0x158]
mov esi, dword [rsp + 0x48]
movdqa xmm0, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0xc0], xmm0
test rax, rax
je 0x1400d1d3f
lock inc dword [rax + 8]
movdqa xmm0, xmmword [rsp + 0x150]
mov esi, dword [rsp + 0x48]
movdqa xmmword [rsp + 0xd0], xmm0
xorps xmm6, xmm6
movdqu xmmword [rsp + 0x130], xmm6
lea rcx, [rsp + 0xd0]
call fcn.1400c1160
nop
movq r15, xmm6
movzx ebx, byte [rsp + 0x90]
nop
mov r14, qword [rsp + 0xc0]
cmp r14, r15
je 0x1400d21a6
mov r8d, 3
lea rdx, [rsp + 0x58]
mov rcx, r14
call fcn.1400c8c10
mov edx, dword [rsp + 0x60]
mov rax, qword [rsp + 0x58]
test edx, edx
je 0x1400d1db0
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x1400d3391
cmp eax, 2
jne 0x1400d218c
add r14, 0x20
mov rcx, r14
cmp qword [r14 + 0x18], 7
jbe 0x1400d1dca
mov rcx, qword [r14]
mov rax, qword [r14 + 0x10]
lea rdi, [rcx + rax*2]
mov rdx, rdi
call fcn.1400c8aa0
sub rdi, rax
sar rdi, 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], r12
mov qword [rsp + 0x128], r12
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.140049950
or esi, 0xe0
lea rax, [rsp + 0x110]
cmp qword [rsp + 0x128], 7
cmova rax, qword [rsp + 0x110]
mov qword [rsp + 0x1f0], rax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x1f8], rax
call fcn.1400d8914
movaps xmm0, xmmword [rsp + 0x1f0]
movdqa xmmword [rsp + 0xd0], xmm0
lea r9, [rsp + 0x90]
lea r8, [rsp + 0xd0]
mov edx, eax
lea rcx, [rsp + 0x98]
call fcn.1400b7650
or esi, 0x1c
lea rcx, [rsp + 0x110]
call fcn.140048430
lea rcx, [rsp + 0x98]
cmp qword [rsp + 0xb0], 0xf
cmova rcx, qword [rsp + 0x98]
mov qword [rsp + 0x20], 5
lea r9, str.hosts
xor r8d, r8d
mov rdx, qword [rsp + 0xa8]
call fcn.140040de0
test rax, rax
jne 0x1400d217f
xor edx, edx
mov r8d, 0x110
lea rcx, [rsp + 0x3d0]
call sub.VCRUNTIME140.dll_memset
cmp qword [r14 + 0x18], 7
jbe 0x1400d1eed
mov r14, qword [r14]
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 1
mov rdx, r14
lea rcx, [rsp + 0x3d0]
call fcn.14004cb00
mov rax, qword [rsp + 0x3d0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x3d0], rax
mov rax, qword [rsp + 0x3d0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0x3cc], edx
cmp qword [rsp + 0x460], 0
je 0x1400d33d3
xorps xmm0, xmm0
movups xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], r12
mov qword [rsp + 0x128], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x110], 0
movups xmmword [rsp + 0xd0], xmm0
mov qword [rsp + 0xe0], r12
mov qword [rsp + 0xe8], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0xd0], 0
nop
mov rax, qword [rsp + 0x3d0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x3d0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x3d0]
call fcn.1400bb870
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x1400d20d8
mov byte [rsp + 0x90], 0xa
mov rax, qword [rsp + 0xe0]
cmp rax, r13
je 0x1400d33a2
lea r9, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 0xf
cmova r9, qword [rsp + 0xd0]
mov qword [rsp + 0x30], 1
lea rcx, [rsp + 0x90]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0xd0]
movzx edx, bl
lea rcx, [rsp + 0x180]
call fcn.140039470
or esi, 2
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0xf
cmova rdx, qword [rsp + 0x180]
mov r8, qword [rsp + 0x190]
lea rcx, [rsp + 0x110]
call fcn.1400368d0
nop
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x1400d1fa0
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d20ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d20ce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
jmp 0x1400d1fa0
lea rcx, [rsp + 0x3e0]
call fcn.140044a80
test rax, rax
jne 0x1400d210f
mov rax, qword [rsp + 0x3d0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x3d0]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea rcx, [rsp + 0x110]
cmp qword [rsp + 0x128], 0xf
cmova rcx, qword [rsp + 0x110]
mov qword [rsp + 0x20], reloc.WS2_32.dll_listen
lea r9, str.skyproject.cc
xor r8d, r8d
mov rdx, qword [rsp + 0x120]
call fcn.140040de0
cmp rax, 0xffffffffffffffff
jne 0x1400d33a7
lea rcx, [rsp + 0xd0]
call fcn.140033440
nop
lea rcx, [rsp + 0x110]
call fcn.140033440
nop
lea rcx, [rsp + 0x3d0]
call fcn.14004c7c0
xor r12d, r12d
lea rcx, [rsp + 0x98]
call fcn.140033440
lea rcx, [rsp + 0xc0]
call fcn.1400c8440
test eax, eax
jne 0x1400d33c4
jmp 0x1400d1d70
lea rcx, [rsp + 0x130]
call fcn.1400c1160
nop
lea rcx, [rsp + 0xc0]
call fcn.1400c1160
nop
lea rcx, [rsp + 0x150]
call fcn.1400c1160
nop
mov rdx, qword [rsp + 0x108]
cmp rdx, 0xf
jbe 0x1400d2216
inc rdx
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d2211
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d2211
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
lea rdx, [0x140346738]
lea rcx, [0x1400d6480]
call fcn.1400caae0
mov qword [rsp + 0x150], rax
lea rdx, [0x140346740]
lea rcx, [0x1400d0480]
call fcn.1400caae0
mov qword [rsp + 0x58], rax
lea rdx, [0x140346748]
lea rcx, [0x1400d0420]
call fcn.1400caae0
mov qword [rsp + 0xd0], rax
lea rdx, [0x1400d6480]
lea rcx, [rsp + 0x150]
call fcn.1400d38e0
lea rdx, [0x1400d0480]
lea rcx, [rsp + 0x58]
call fcn.1400d38e0
lea rdx, [0x1400d0420]
lea rcx, [rsp + 0xd0]
call fcn.1400d38e0
mov ecx, 3
call fcn.1400daaa0
call fcn.1400da890
mov rdi, rax
test rax, rax
jne 0x1400d2368
mov word [rsp + 0xc3], WSAStartup
mov word [rsp + 0xc0], 0x756e
mov byte [rsp + 0xc2], WSAStartup
mov byte [rsp + 0xc5], al
lea r9, [rsp + 0x90]
lea r8, [rsp + 0xc4]
lea rdx, [rsp + 0xc0]
mov rbx, qword [rsp + 0x40]
mov rcx, rbx
call fcn.140041040
nop
mov r8, qword [rsp + 0x1e0]
cmp r8, 0xf
jbe 0x1400d2325
mov rdx, qword [rsp + 0x1c8]
lea rcx, [rsp + 0x1c8]
call fcn.1400334a0
nop
mov rcx, qword [rsp + 0x68]
call fcn.140033440
nop
mov rcx, qword [rsp + 0x50]
call fcn.140033440
mov rax, rbx
mov rcx, qword [rsp + 0x4e0]
xor rcx, rsp
call fcn.1400d8ff0
movaps xmm6, xmmword [rsp + 0x4f0]
add rsp, 0x500
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
xorps xmm0, xmm0
movups xmmword [rsp + 0x160], xmm0
mov qword [rsp + 0x170], r12
mov qword [rsp + 0x178], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x160], 0
movups xmmword [rsp + 0x210], xmm0
movdqa xmm6, xmmword [0x1401863b0]
movdqu xmmword [rsp + 0x220], xmm6
mov byte [rsp + 0x210], 0
movups xmmword [rsp + 0x1a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1b8], xmm1
mov r8d, 0x40
lea rdx, str.Njc6ZWY6ZmM6NzI6YjI6NGI6NjM6ZjA6MTE6NWU6ZDA6MDk6NDg6YzU6ODQ6MDI
lea rcx, [rsp + 0x1a8]
call fcn.140038af0
nop
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0x2d0]
call fcn.1400d64d0
nop
lea rsi, [rsp + 0x2d0]
cmp qword [rsp + 0x2e8], 0xf
cmova rsi, qword [rsp + 0x2d0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x350], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x360], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.U2VyaWFsIE51bWJlcjo
lea rcx, [rsp + 0x350]
call fcn.140038af0
nop
lea rdx, [rsp + 0x350]
lea rcx, [rsp + 0x2b0]
call fcn.1400d64d0
nop
lea r14, [rsp + 0x2b0]
cmp qword [rsp + 0x2c8], 0xf
cmova r14, qword [rsp + 0x2b0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x3b0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x3c0], xmm1
mov r8d, Ordinal_32
lea rdx, str.R29vZ2xlIFRydXN0IFNlcnZpY2Vz
lea rcx, [rsp + 0x3b0]
call fcn.140038af0
nop
lea rdx, [rsp + 0x3b0]
lea rcx, [rsp + 0x290]
call fcn.1400d64d0
nop
lea r15, [rsp + 0x290]
cmp qword [rsp + 0x2a8], 0xf
cmova r15, qword [rsp + 0x290]
xorps xmm0, xmm0
movups xmmword [rsp + 0x390], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x3a0], xmm1
mov r8d, recv
lea rdx, str.dG9rZW5meA
lea rcx, [rsp + 0x390]
call fcn.140038af0
nop
lea rdx, [rsp + 0x390]
lea rcx, [rsp + 0x270]
call fcn.1400d64d0
nop
lea rbx, [rsp + 0x270]
cmp qword [rsp + 0x288], 0xf
cmova rbx, qword [rsp + 0x270]
xorps xmm0, xmm0
movups xmmword [rsp + 0x1f0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x200], xmm1
mov r8d, 8
lea rdx, str.VEgzS0VO
lea rcx, [rsp + 0x1f0]
call fcn.140038af0
nop
lea rdx, [rsp + 0x1f0]
lea rcx, [rsp + 0x250]
call fcn.1400d64d0
nop
lea r12, [rsp + 0x250]
cmp qword [rsp + 0x268], 0xf
cmova r12, qword [rsp + 0x250]
xorps xmm0, xmm0
movups xmmword [rsp + 0x130], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x140], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.c2t5cHJvamVjdC5jYw
lea rcx, [rsp + 0x130]
call fcn.140038af0
nop
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x230]
call fcn.1400d64d0
nop
lea r13, [rsp + 0x230]
cmp qword [rsp + 0x248], 0xf
cmova r13, qword [rsp + 0x230]
mov rax, qword [rsp + 0x50]
mov r8, rax
cmp qword [rax + 0x18], 0xf
jbe 0x1400d260b
mov r8, qword [rax]
mov edx, 0x2712
mov rcx, rdi
call fcn.1400dda50
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov r8d, 6
mov rcx, rdi
call fcn.1400dda50
mov edx, 0x51
mov r8d, 2
mov rcx, rdi
call fcn.1400dda50
mov edx, 0x40
mov r8d, 1
mov rcx, rdi
call fcn.1400dda50
mov r8, r13
mov edx, 0x27c1
mov rcx, rdi
call fcn.1400dda50
mov r8, r12
mov edx, 0x2722
mov rcx, rdi
call fcn.1400dda50
mov edx, 0xac
mov r8d, 1
mov rcx, rdi
call fcn.1400dda50
mov edx, reloc.WS2_32.dll_listen
mov r8d, reloc.WS2_32.dll_sendto
mov rcx, rdi
call fcn.1400dda50
mov rdx, qword [rsp + 0x68]
mov r8, rdx
cmp qword [rdx + 0x18], 0xf
jbe 0x1400d26a9
mov r8, qword [rdx]
mov edx, 0x271f
mov rcx, rdi
call fcn.1400dda50
lea r8, [0x1400d6450]
mov edx, 0x4e2b
mov rcx, rdi
call fcn.1400dda50
lea r8, [rsp + 0x160]
mov edx, 0x2711
mov rcx, rdi
call fcn.1400dda50
lea r8, [0x1400cd090]
mov edx, 0x4e6f
mov rcx, rdi
call fcn.1400dda50
lea r8, [rsp + 0x210]
mov edx, 0x272d
mov rcx, rdi
call fcn.1400dda50
lea rdx, str.Cache_Control:_no_cache
xor ecx, ecx
call fcn.1400dac00
mov r12, rax
mov qword [rsp + 0xc0], rax
mov r8, rax
mov edx, 0x2727
mov rcx, rdi
call fcn.1400dda50
mov rcx, rdi
call fcn.1400da900
test eax, eax
jne 0x1400d3410
cmp dword [0x140346750], 0
jne 0x1400d27d2
xorps xmm0, xmm0
movups xmmword [rsp + 0xf0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x100], xmm1
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x1400d2770
mov rdx, rbx
lea rcx, [rsp + 0xf0]
call fcn.140038af0
nop
lea r8, [rsp + 0xf0]
lea rdx, [rsp + 0x210]
lea rcx, [rsp + 0x98]
call fcn.1400d5f60
nop
lea rcx, [rsp + 0xf0]
call fcn.140033440
cmp qword [rsp + 0xa8], 0x24
jne 0x1400d34d6
lea rcx, [rsp + 0x98]
call fcn.140033440
lea r8, [rsp + 0x78]
mov edx, 0x400022
mov rcx, rdi
call fcn.1400da860
test eax, eax
jne 0x1400d3473
xor r13d, r13d
mov rax, qword [rsp + 0x78]
cmp dword [rax], r13d
jle 0x1400d3541
xor r12d, r12d
mov rbx, qword [rax + 8]
mov rbx, qword [r12 + rbx]
test rbx, rbx
je 0x1400d283e
nop dword [rax]
mov rdx, r14
mov rcx, qword [rbx]
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x1400d2830
mov rdx, rsi
mov rcx, qword [rbx]
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x1400d2850
mov rbx, qword [rbx + 8]
test rbx, rbx
jne 0x1400d2810
mov rax, qword [rsp + 0x78]
inc r13d
add r12, 8
cmp r13d, dword [rax]
jge 0x1400d3539
jmp 0x1400d2800
xor r14d, r14d
mov rcx, qword [rsp + 0x78]
cmp dword [rcx], r14d
jle 0x1400d35a6
xor esi, esi
mov rax, qword [rcx + 8]
mov rbx, qword [rsi + rax]
test rbx, rbx
je 0x1400d288e
mov rdx, r15
mov rcx, qword [rbx]
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x1400d28a0
mov rbx, qword [rbx + 8]
test rbx, rbx
jne 0x1400d2870
mov rcx, qword [rsp + 0x78]
inc r14d
add rsi, 8
cmp r14d, dword [rcx]
jge 0x1400d35a6
jmp 0x1400d2863
mov rcx, qword [rsp + 0x150]
test rcx, rcx
je 0x1400d28b3
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400d28c3
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x1400d28d6
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rsp + 0x110], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x120], xmm1
mov r8d, Ordinal_26
lea rdx, str.SW52YWxpZCB1c2VybmFtZQ
lea rcx, [rsp + 0x110]
call fcn.140038af0
nop
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x370]
call fcn.1400d64d0
nop
lea rbx, [rsp + 0x370]
cmp qword [rsp + 0x388], 0xf
cmova rbx, qword [rsp + 0x370]
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x190], xmm1
mov r8d, Ordinal_32
lea rdx, str.SW52YWxpZCBsaWNlbnNlIGtleQ
lea rcx, [rsp + 0x180]
call fcn.140038af0
nop
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0x330]
call fcn.1400d64d0
nop
lea rsi, [rsp + 0x330]
cmp qword [rsp + 0x348], 0xf
cmova rsi, qword [rsp + 0x330]
xorps xmm0, xmm0
movups xmmword [rsp + 0x98], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xa8], xmm1
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, str.RXJyb3IgOiBJbnZhbGlkIHVzZXJuYW1l
lea rcx, [rsp + 0x98]
call fcn.140038af0
nop
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x310]
call fcn.1400d64d0
nop
lea r12, [rsp + 0x310]
cmp qword [rsp + 0x328], 0xf
cmova r12, qword [rsp + 0x310]
xorps xmm0, xmm0
movups xmmword [rsp + 0xf0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x100], xmm1
mov r8d, Ordinal_41
lea rdx, str.RXJyb3IgOiBJbnZhbGlkIGxpY2Vuc2Uga2V5
lea rcx, [rsp + 0xf0]
call fcn.140038af0
nop
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x2f0]
call fcn.1400d64d0
nop
lea r13, [rsp + 0x2f0]
cmp qword [rsp + 0x308], 0xf
cmova r13, qword [rsp + 0x2f0]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], 0
jne 0x1400d2a65
lea rcx, [rsp + 0x160]
mov r14, qword [rsp + 0x160]
mov r15, qword [rsp + 0x178]
cmp r15, 0xf
cmova rcx, r14
mov qword [rsp + 0x20], rax
mov r9, rbx
xor r8d, r8d
mov rbx, qword [rsp + 0x170]
mov rdx, rbx
call fcn.140040de0
cmp rax, 0xffffffffffffffff
jne 0x1400d3610
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rsi + rax], 0
jne 0x1400d2ac0
lea rcx, [rsp + 0x160]
cmp r15, 0xf
cmova rcx, r14
mov qword [rsp + 0x20], rax
mov r9, rsi
xor r8d, r8d
mov rdx, rbx
call fcn.140040de0
cmp rax, 0xffffffffffffffff
jne 0x1400d364f
mov rcx, rdi
call fcn.1400da830
mov rcx, qword [rsp + 0xc0]
call fcn.1400dacc0
mov rdi, qword [rsp + 0x40]
xor esi, esi
movups xmm0, xmmword [rsp + 0x160]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x170]
movups xmmword [rdi + 0x10], xmm1
mov qword [rsp + 0x170], rsi
mov qword [rsp + 0x178], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x160], sil
mov rdx, qword [rsp + 0x308]
cmp rdx, 0xf
jbe 0x1400d2b8b
inc rdx
mov rcx, qword [rsp + 0x2f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d2b86
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d2b86
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
movdqu xmmword [rsp + 0x300], xmm6
mov byte [rsp + 0x2f0], 0
mov rdx, qword [rsp + 0x108]
cmp rdx, 0xf
jbe 0x1400d2be3
inc rdx
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d2bdd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d2bdd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
nop
mov rdx, qword [rsp + 0x328]
cmp rdx, 0xf
jbe 0x1400d2c29
inc rdx
mov rcx, qword [rsp + 0x310]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d2c24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d2c24
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
movdqu xmmword [rsp + 0x320], xmm6
mov byte [rsp + 0x310], 0
mov rdx, qword [rsp + 0xb0]
cmp rdx, 0xf
jbe 0x1400d2c81
inc rdx
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d2c7b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d2c7b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
nop
mov rdx, qword [rsp + 0x348]
cmp rdx, 0xf
jbe 0x1400d2cc7
inc rdx
mov rcx, qword [rsp + 0x330]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d2cc2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d2cc2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
movdqu xmmword [rsp + 0x340], xmm6
mov byte [rsp + 0x330], 0
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x1400d2d1f
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d2d19
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d2d19
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
nop
mov rdx, qword [rsp + 0x388]
cmp rdx, 0xf
jbe 0x1400d2d65
inc rdx
mov rcx, qword [rsp + 0x370]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d2d60
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d2d60
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
movdqu xmmword [rsp + 0x380], xmm6
mov byte [rsp + 0x370], 0
mov rdx, qword [rsp + 0x128]
cmp rdx, 0xf
jbe 0x1400d2dbd
inc rdx
mov rcx, qword [rsp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d2db7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d2db7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
nop
mov rdx, qword [rsp + 0x248]
cmp rdx, 0xf
jbe 0x1400d2e03
inc rdx
mov rcx, qword [rsp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d2dfe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d2dfe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
movdqu xmmword [rsp + 0x240], xmm6
mov byte [rsp + 0x230], 0
mov rdx, qword [rsp + 0x148]
cmp rdx, 0xf
jbe 0x1400d2e5b
inc rdx
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d2e55
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d2e55
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
nop
mov rdx, qword [rsp + 0x268]
cmp rdx, 0xf
jbe 0x1400d2ea1
inc rdx
mov rcx, qword [rsp + 0x250]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d2e9c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d2e9c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
movdqu xmmword [rsp + 0x260], xmm6
mov byte [rsp + 0x250], 0
mov rdx, qword [rsp + 0x208]
cmp rdx, 0xf
jbe 0x1400d2ef9
inc rdx
mov rcx, qword [rsp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d2ef3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d2ef3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
nop
mov rdx, qword [rsp + 0x288]
cmp rdx, 0xf
jbe 0x1400d2f3f
inc rdx
mov rcx, qword [rsp + 0x270]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d2f3a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d2f3a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
movdqu xmmword [rsp + 0x280], xmm6
mov byte [rsp + 0x270], 0
mov rdx, qword [rsp + 0x3a8]
cmp rdx, 0xf
jbe 0x1400d2f97
inc rdx
mov rcx, qword [rsp + 0x390]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d2f91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d2f91
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
nop
mov rdx, qword [rsp + 0x2a8]
cmp rdx, 0xf
jbe 0x1400d2fdd
inc rdx
mov rcx, qword [rsp + 0x290]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d2fd8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d2fd8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
movdqu xmmword [rsp + 0x2a0], xmm6
mov byte [rsp + 0x290], 0
mov rdx, qword [rsp + 0x3c8]
cmp rdx, 0xf
jbe 0x1400d3035
inc rdx
mov rcx, qword [rsp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d302f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d302f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
nop
mov rdx, qword [rsp + 0x2c8]
cmp rdx, 0xf
jbe 0x1400d307b
inc rdx
mov rcx, qword [rsp + 0x2b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d3076
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d3076
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
movdqu xmmword [rsp + 0x2c0], xmm6
mov byte [rsp + 0x2b0], 0
mov rdx, qword [rsp + 0x368]
cmp rdx, 0xf
jbe 0x1400d30d3
inc rdx
mov rcx, qword [rsp + 0x350]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d30cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d30cd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
nop
mov rdx, qword [rsp + 0x2e8]
cmp rdx, 0xf
jbe 0x1400d3119
inc rdx
mov rcx, qword [rsp + 0x2d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d3114
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d3114
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
movdqu xmmword [rsp + 0x2e0], xmm6
mov byte [rsp + 0x2d0], 0
mov rdx, qword [rsp + 0x1c0]
cmp rdx, 0xf
jbe 0x1400d3171
inc rdx
mov rcx, qword [rsp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d316b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d316b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
nop
mov rdx, qword [rsp + 0x228]
cmp rdx, 0xf
jbe 0x1400d31b7
inc rdx
mov rcx, qword [rsp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d31b2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d31b2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
movdqu xmmword [rsp + 0x220], xmm6
mov byte [rsp + 0x210], 0
mov rdx, qword [rsp + 0x178]
cmp rdx, 0xf
jbe 0x1400d320e
inc rdx
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d3209
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d3209
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
mov qword [rsp + 0x170], rsi
mov qword [rsp + 0x178], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x160], 0
mov rdx, qword [rsp + 0x1e0]
cmp rdx, 0xf
jbe 0x1400d3271
inc rdx
mov rcx, qword [rsp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d326b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400d326b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9724
nop
mov rbx, qword [rsp + 0x68]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x1400d32ac
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x1400d32a7
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400d330d
mov rcx, r8
call fcn.1400d9724
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rbx, qword [rsp + 0x50]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x1400d32f6
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x1400d32f1
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400d3314
mov rcx, r8
call fcn.1400d9724
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rax, rdi
jmp 0x1400d233d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rdx, str.SystemRoot_environment_variable_is_not_set.
lea rcx, [rsp + 0x1a8]
call fcn.140038950
mov rcx, rax
call fcn.1400cc560
nop
lea rdx, str.Debugger_Detected.
lea rcx, [rsp + 0x1a8]
call fcn.140038950
mov rcx, rax
call fcn.1400cc560
nop
call fcn.140033c90
nop
mov ecx, reloc.WLDAP32.dll_Ordinal_22
call fcn.1400c9a20
shr rbx, 0x20
mov ecx, ebx
call fcn.1400c9a60
shr rcx, 0x20
call fcn.1400c9a60
nop
lea r8, [rsp + 0x130]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.1400c99b0
nop
lea r8, [r14 + 0x20]
lea rcx, str.directory_entry::status
call fcn.1400c99b0
nop
call fcn.140033c90
lea rdx, str.Hosts_Failed_to_retrieve_certificate_info
lea rcx, [rsp + 0x1a8]
call fcn.140038950
mov rcx, rax
call fcn.1400cc560
nop
mov edx, eax
lea rcx, str.directory_iterator::operator
call fcn.1400c9950
nop
lea r8, [rsp + 0x98]
lea rdx, str.Access_to_file:
lea rcx, [rsp + 0x350]
call fcn.140040d70
nop
lea r8, str._Denied_
mov rdx, rax
lea rcx, [rsp + 0x1a8]
call fcn.140040cb0
mov rcx, rax
call fcn.1400cc560
nop
mov rcx, rdi
call fcn.1400da830
mov rcx, r12
call fcn.1400dacc0
movdqa xmm0, xmmword [0x140162a80]
movdqu xmmword [rsp + 0x98], xmm0
movdqa xmm1, xmmword [0x140162a90]
movdqu xmmword [rsp + 0xa8], xmm1
mov dword [rsp + 0xb8], 0xf3fdf4
mov byte [rsp + 0xbc], 1
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x98]
call fcn.1400c1d20
mov rcx, rax
call fcn.1400cc560
int3
mov rcx, rdi
call fcn.1400da830
mov rcx, r12
call fcn.1400dacc0
movdqa xmm0, xmmword [0x140162a80]
movdqu xmmword [rsp + 0x98], xmm0
movdqa xmm1, xmmword [0x140162a90]
movdqu xmmword [rsp + 0xa8], xmm1
mov dword [rsp + 0xb8], 0xf3fdf4
mov byte [rsp + 0xbc], 1
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x98]
call fcn.1400c1d20
mov rcx, rax
call fcn.1400cc560
nop
mov rcx, rdi
call fcn.1400da830
mov rcx, r12
call fcn.1400dacc0
movdqa xmm0, xmmword [0x140162a80]
movdqu xmmword [rsp + 0x180], xmm0
movdqa xmm1, xmmword [0x140162a90]
movdqu xmmword [rsp + 0x190], xmm1
mov dword [rsp + 0x1a0], 0xf3fdf4
mov byte [rsp + 0x1a4], 1
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x180]
call fcn.1400c1d20
mov rcx, rax
call fcn.1400cc560
nop
mov r12, qword [rsp + 0xc0]
mov rcx, rdi
call fcn.1400da830
mov rcx, r12
call fcn.1400dacc0
movdqa xmm0, xmmword [str.__0_]
movdqu xmmword [rsp + 0x98], xmm0
movdqa xmm1, xmmword [0x140162aa0]
movdqu xmmword [rsp + 0xa8], xmm1
mov dword [rsp + 0xb8], 0xf9f9f2fc
mov word [rsp + 0xbc], 0x100
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x98]
call fcn.1400c1de0
mov rcx, rax
call fcn.1400cc560
int3
mov rcx, rdi
call fcn.1400da830
mov rcx, qword [rsp + 0xc0]
call fcn.1400dacc0
movdqa xmm0, xmmword [str.__0_]
movdqu xmmword [rsp + 0x98], xmm0
movdqa xmm1, xmmword [0x140162aa0]
movdqu xmmword [rsp + 0xa8], xmm1
mov dword [rsp + 0xb8], 0xf9f9f2fc
mov word [rsp + 0xbc], 0x100
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x98]
call fcn.1400c1de0
mov rcx, rax
call fcn.1400cc560
nop
mov rcx, qword [rsp + 0x50]
call fcn.1400393d0
mov rbx, rax
xor edx, edx
mov rcx, qword [rsp + 0x50]
call fcn.1400c1b60
mov rcx, rax
mov r8, rbx
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rdx, r12
lea rcx, [rsp + 0xd0]
call fcn.140038950
mov rcx, rax
call fcn.1400cc560
int3
mov rcx, qword [rsp + 0x50]
call fcn.1400393d0
mov rbx, rax
xor edx, edx
mov rcx, qword [rsp + 0x50]
call fcn.1400c1b60
mov rcx, rax
mov r8, rbx
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rdx, r13
lea rcx, [rsp + 0xd0]
call fcn.140038950
mov rcx, rax
call fcn.1400cc560
int3