Function at 0x1400c36e0
Capabilities:
Terminate process

Disassembly:
push rsi
push rdi
sub rsp, 0x308
lea rax, [rsp + 0x50]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0xb0]
lea rcx, [0x140333748]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WLDAP32.dll_Ordinal_26
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x60], rax
mov eax, 2
imul rax, rax, 0xc
mov rcx, qword [rsp + 0x60]
movzx eax, word [rcx + rax]
test eax, eax
je 0x1400c374e
mov dword [rsp + 0x58], 1
jmp 0x1400c3756
mov dword [rsp + 0x58], 0
movzx eax, byte [rsp + 0x58]
mov byte [rsp + 0x40], al
movzx eax, byte [rsp + 0x40]
movzx eax, al
test eax, eax
je 0x1400c37c1
mov dword [rsp + 0x44], 0
jmp 0x1400c377f
mov eax, dword [rsp + 0x44]
inc eax
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0xd
jge 0x1400c37c1
movsxd rax, dword [rsp + 0x44]
mov rcx, qword [rsp + 0x60]
movzx eax, word [rcx + rax*2]
mov dword [rsp + 0x70], eax
mov eax, dword [rsp + 0x44]
cdq
mov ecx, Ordinal_60
idiv ecx
mov eax, edx
add eax, 0x35
mov ecx, dword [rsp + 0x70]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x44]
mov rdx, qword [rsp + 0x60]
mov word [rdx + rcx*2], ax
jmp 0x1400c3775
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x88], rax
mov eax, 1
mov word [rsp + 0x54], ax
mov dword [rsp + 0x4c], 0
jmp 0x1400c37fc
mov eax, dword [rsp + 0x4c]
inc eax
mov dword [rsp + 0x4c], eax
movzx eax, word [rsp + 0x54]
cmp dword [rsp + 0x4c], eax
jge 0x1400c3997
movsxd rax, dword [rsp + 0x4c]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
mov rcx, qword [rsp + rax*8 + 0x88]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x90], rax
movzx eax, word [0x1403309a0]
mov word [rsp + 0x100], ax
lea rax, [rsp + 0x102]
mov rdi, rax
xor eax, eax
mov ecx, 0x1fe
rep stosb byte [rdi], al
cmp qword [rsp + 0x90], 0xffffffffffffffff
je 0x1400c3992
lea rax, [rsp + 0xe0]
mov qword [rsp + 0xa0], rax
lea rax, [rsp + 0x41]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0xca]
lea rcx, [rsp + 0x41]
call fcn.1400c39b0
mov qword [rsp + 0x68], rax
mov eax, 1
imul rax, rax, 0xf
mov rcx, qword [rsp + 0x68]
movsx eax, byte [rcx + rax]
test eax, eax
je 0x1400c38d7
mov dword [rsp + 0x5c], 1
jmp 0x1400c38df
mov dword [rsp + 0x5c], 0
movzx eax, byte [rsp + 0x5c]
mov byte [rsp + 0x42], al
movzx eax, byte [rsp + 0x42]
movzx eax, al
test eax, eax
je 0x1400c3949
mov dword [rsp + 0x48], 0
jmp 0x1400c3908
mov eax, dword [rsp + 0x48]
inc eax
mov dword [rsp + 0x48], eax
cmp dword [rsp + 0x48], 0x10
jge 0x1400c3949
movsxd rax, dword [rsp + 0x48]
mov rcx, qword [rsp + 0x68]
movsx eax, byte [rcx + rax]
mov dword [rsp + 0x74], eax
mov eax, dword [rsp + 0x48]
cdq
mov ecx, Ordinal_60
idiv ecx
mov eax, edx
add eax, 0x35
mov ecx, dword [rsp + 0x74]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x48]
mov rdx, qword [rsp + 0x68]
mov byte [rdx + rcx], al
jmp 0x1400c38fe
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x98]
mov rdx, rax
mov rcx, qword [rsp + 0xa0]
call fcn.1400979d0
mov qword [rsp + 0xa8], rax
mov rcx, qword [rsp + 0xa8]
call fcn.1400becd0
nop
call fcn.1400c0710
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
jmp 0x1400c37f2
add rsp, 0x308
pop rdi
pop rsi
ret