Function at 0x140042c34
Capabilities:
Create a process with modified i/o handles and window
Create process on windows
Encrypt data using speck
Get common file path
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x6b8
mov r14, rdx
mov qword [rsp + 0x88], rcx
movabs r13, 0x8000000000000000
cmp byte [rdx + 0xa0], 0
mov qword [rsp + 0x60], r8
mov qword [rsp + 0x68], rdx
je 0x140042c86
xor eax, eax
mov qword [rsp + 0x1e8], rax
mov qword [rsp + 0x1f8], rax
jmp 0x140042ec1
cmp qword [r14 + 0x98], 0
je 0x1400438db
xor eax, eax
mov qword [rsp + 0x1e8], rax
mov qword [rsp + 0x1f8], rax
call qword [sym.imp.kernel32.dll_GetEnvironmentStringsW]
test rax, rax
je 0x1400458ef
movabs r12, 0xac052cbd346a264b
lea rdi, [rsp + 0x2d0]
lea rbx, [rsp + 0xa0]
mov qword [rsp + 0x58], rax
mov rsi, rax
cmp word [rsi], 0
je 0x140042ea7
mov rbp, rsi
mov rcx, 0xfffffffffffffffe
xor edx, edx
mov r14, rdx
mov rax, rcx
inc rdx
add rcx, 2
cmp word [rbp + r14*2], 0
jne 0x140042ced
lea rsi, [rdx*2]
add rsi, rbp
cmp r14, 1
je 0x140042cd7
test r14, r14
je 0x1400455cc
lea rcx, [rbp + 2]
xor r13d, r13d
cmp word [rcx], 0x3d
je 0x140042d45
add rcx, 2
mov edx, r13d
and edx, 1
xor r13, 1
lea r13, [r13 + rdx*2]
add rax, 0xfffffffffffffffe
jne 0x140042d24
jmp 0x140042cd7
cmp r13, r14
jae 0x1400455cc
lea r8, [r13 + 1]
mov rcx, rbx
mov rdx, rbp
call fcn.14004afe7
mov eax, r13d
and eax, 2
or r13, 2
add r13, rax
cmp r13, r14
ja 0x1400455cc
sub r14, r12
sub r14, r13
add r14, r12
lea rdx, [r13*2]
add rdx, rbp
mov rcx, rdi
mov r8, r14
call fcn.14004afe7
movups xmm0, xmmword [rsp + 0xa0]
movups xmm1, xmmword [rsp + 0xb0]
movaps xmmword [rsp + 0x2c0], xmm1
movaps xmmword [rsp + 0x2b0], xmm0
mov r14, qword [rsp + 0x2b0]
mov r13, qword [rsp + 0x2b8]
mov rbp, qword [rsp + 0x2c0]
mov r15, qword [rsp + 0x2c8]
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movaps xmmword [rsp + 0x130], xmm0
movaps xmmword [rsp + 0x140], xmm1
movabs rax, 0x8000000000000000
cmp r14, rax
je 0x140042ea7
mov rax, r13
add rax, rbp
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0xa8], rax
mov word [rsp + 0xb0], 0
mov rcx, rdi
mov rdx, rbx
call fcn.14004ca2c
mov qword [rsp + 0x2b0], r14
mov qword [rsp + 0x2b8], r13
mov qword [rsp + 0x2c0], rbp
mov qword [rsp + 0x2c8], r15
mov rcx, rbx
lea rdx, [rsp + 0x1e8]
lea r8, [rsp + 0x2b0]
lea r9, [rsp + 0x130]
call fcn.14004917c
mov rax, qword [rsp + 0xa0]
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x140042cd7
test rax, rax
je 0x140042cd7
mov r8, qword [rsp + 0xa8]
mov rcx, qword [0x14008fb30]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
jmp 0x140042cd7
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.kernel32.dll_FreeEnvironmentStringsW]
mov r14, qword [rsp + 0x68]
movabs r13, 0x8000000000000000
mov rax, qword [r14 + 0x88]
test rax, rax
je 0x140042eea
mov rcx, r14
mov r14, qword [r14 + 0x90]
mov rdi, qword [rcx + 0x98]
mov ecx, 1
mov qword [rsp + 0x70], rcx
jmp 0x140042ef3
xor eax, eax
mov qword [rsp + 0x70], rax
xor edi, edi
xor ebx, ebx
test rdi, rdi
je 0x1400435dd
cmp qword [rsp + 0x70], 0
je 0x1400455cc
test rbx, rbx
jne 0x140042f32
mov ecx, 1
mov qword [rsp + 0x70], rcx
mov rbx, rax
test r14, r14
je 0x140042f2d
mov rbx, qword [rbx + 0x3d8]
dec r14
jne 0x140042f21
xor r14d, r14d
xor eax, eax
movzx ecx, word [rbx + 0x3d2]
mov r12, rbx
mov rbp, r14
cmp r14, rcx
jb 0x140042f6d
mov rcx, qword [r12 + 0x160]
test rcx, rcx
je 0x1400455cc
inc rax
movzx ebp, word [r12 + 0x3d0]
mov r12, rcx
cmp bp, word [rcx + 0x3d2]
jae 0x140042f44
mov ecx, ebp
and ecx, 1
mov r14, rbp
or r14, 1
add r14, rcx
test rax, rax
je 0x140042fa6
mov rbx, qword [r12 + r14*8 + 0x3d8]
lea rcx, [rax + rax]
not rax
add rax, rcx
je 0x140042fa1
mov rbx, qword [rbx + 0x3d8]
dec rax
jne 0x140042f95
xor r14d, r14d
jmp 0x140042fa9
mov rbx, r12
dec rdi
mov qword [rsp + 0x58], rdi
imul rax, rbp, 0x38
lea rdi, [r12 + rax]
add rdi, 0x168
shl rbp, 5
cmp qword [r12 + rbp], r13
jne 0x140043016
mov r13, qword [rsp + 0x1e8]
test r13, r13
je 0x140043551
mov r12, qword [rsp + 0x1f0]
mov rbp, r12
mov rsi, r13
mov rdx, qword [rdi + 0x28]
mov r8, qword [rdi + 0x30]
mov rcx, rsi
call fcn.140048979
test rax, rax
je 0x1400431ef
sub rbp, 1
jb 0x140043551
mov rsi, qword [rsi + rdx*8 + 0x3d8]
jmp 0x140042fe9
mov rdx, qword [rdi + 8]
mov r8, qword [rdi + 0x10]
lea rcx, [rsp + 0xa0]
call fcn.140019bd1
mov al, byte [rdi + 0x18]
mov byte [rsp + 0xb8], al
movups xmm0, xmmword [rsp + 0xa0]
movaps xmmword [rsp + 0x2b0], xmm0
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x2c0], rax
mov al, byte [rsp + 0xb8]
mov byte [rsp + 0x2c8], al
mov eax, dword [rsp + 0xb9]
mov dword [rsp + 0x2c9], eax
movzx eax, word [rsp + 0xbd]
mov word [rsp + 0x2cd], ax
mov al, byte [rsp + 0xbf]
mov byte [rsp + 0x2cf], al
mov r15, qword [rdi + 0x30]
test r15, r15
sets al
lea rsi, [r15 + r15]
lea rcx, [r13 - 2]
cmp rsi, rcx
seta cl
or cl, al
jne 0x1400455cc
mov rdx, qword [rdi + 0x28]
test rsi, rsi
je 0x1400430e2
mov rdi, rdx
mov al, byte [0x14008fbb8]
xor ecx, ecx
mov rdx, rsi
call fcn.140042681
test rax, rax
je 0x1400455cc
mov r13, rax
mov rax, r15
mov rdx, rdi
mov rdi, r15
jmp 0x1400430ea
mov r13d, 2
xor edi, edi
add r12, rbp
mov rcx, r13
mov r8, rsi
call fcn.140070050
mov qword [rsp + 0x2d0], rdi
mov qword [rsp + 0x2d8], r13
mov qword [rsp + 0x2e0], r15
mov rdx, qword [r12 + 8]
mov r8, qword [r12 + 0x10]
lea rsi, [rsp + 0xa0]
mov rcx, rsi
call fcn.140019bd1
mov al, byte [r12 + 0x18]
mov byte [rsp + 0xb8], al
movups xmm0, xmmword [rsp + 0xa0]
movaps xmmword [rsp + 0x130], xmm0
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x140], rax
mov al, byte [rsp + 0xb8]
mov byte [rsp + 0x148], al
mov eax, dword [rsp + 0xb9]
mov dword [rsp + 0x149], eax
movzx eax, word [rsp + 0xbd]
mov word [rsp + 0x14d], ax
mov al, byte [rsp + 0xbf]
mov byte [rsp + 0x14f], al
mov rcx, rsi
lea rdx, [rsp + 0x1e8]
lea r8, [rsp + 0x2b0]
lea r9, [rsp + 0x130]
call fcn.14004917c
mov rax, qword [rsp + 0xa0]
movabs r13, 0x8000000000000000
cmp rax, r13
je 0x1400431e3
test rax, rax
je 0x1400431e3
mov r8, qword [rsp + 0xa8]
mov rcx, qword [0x14008fb30]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
xor eax, eax
mov rdi, qword [rsp + 0x58]
jmp 0x140042ef5
mov byte [rsp + 0x57], 0
test rbp, rbp
je 0x140043250
mov rax, qword [rsi + rdx*8 + 0x3d8]
mov r10, rbp
dec r10
movabs r9, 0x6186175e77992814
lea rcx, [rsp + 0x2b0]
je 0x14004328e
mov edx, 1
movabs rsi, 0x99cd3ba96a66f2f1
movzx r8d, word [rax + 0x3d2]
mov rax, qword [rax + r8*8 + 0x3d8]
add r10, r9
mov r8, r9
not r8
add r10, r8
inc rdx
cmp rbp, rdx
jne 0x14004322a
jmp 0x140043298
mov qword [rsp + 0x2b0], rsi
mov qword [rsp + 0x2b8], 0
mov qword [rsp + 0x2c0], rdx
lea rcx, [rsp + 0xa0]
lea rsi, [rsp + 0x2b0]
mov rdx, rsi
lea r8, [rsp + 0x57]
call fcn.140048a09
jmp 0x1400434ab
movabs rsi, 0x99cd3ba96a66f2f1
movzx edx, word [rax + 0x3d2]
dec rdx
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x298], 0
mov qword [rsp + 0x2a0], rdx
lea rdx, [rsp + 0x290]
lea r8, [rsp + 0x57]
call fcn.140048a09
mov rax, qword [rsp + 0x2e0]
mov qword [rsp + 0x260], rax
movups xmm0, xmmword [rsp + 0x2b0]
movups xmm1, xmmword [rsp + 0x2c0]
movups xmm2, xmmword [rsp + 0x2d0]
movaps xmmword [rsp + 0x250], xmm2
movaps xmmword [rsp + 0x240], xmm1
movaps xmmword [rsp + 0x230], xmm0
lea rax, [rsp + 0x2e8]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x200], xmm0
movaps xmmword [rsp + 0x210], xmm1
mov r8, qword [rsp + 0x308]
mov rax, qword [rsp + 0x310]
mov rcx, qword [rsp + 0x318]
movzx r9d, word [r8 + 0x3d2]
mov rdx, r8
cmp rcx, r9
jb 0x140043384
mov rdx, qword [r8 + 0x160]
test rdx, rdx
je 0x14004337c
inc rax
movzx ecx, word [r8 + 0x3d0]
mov r8, rdx
cmp cx, word [rdx + 0x3d2]
jae 0x140043357
jmp 0x140043384
mov rcx, rax
mov rax, r8
xor edx, edx
imul r8, rcx, 0x38
mov r9, rcx
shl r9, 5
mov r10, qword [rdx + r8 + 0x198]
mov qword [rsp + 0x160], r10
movups xmm0, xmmword [rdx + r8 + 0x168]
movups xmm1, xmmword [rdx + r8 + 0x178]
movups xmm2, xmmword [rdx + r8 + 0x188]
movaps xmmword [rsp + 0x150], xmm2
movaps xmmword [rsp + 0x140], xmm1
movaps xmmword [rsp + 0x130], xmm0
mov r10, qword [rsp + 0x260]
mov qword [rdx + r8 + 0x198], r10
movaps xmm0, xmmword [rsp + 0x230]
movaps xmm1, xmmword [rsp + 0x240]
movaps xmm2, xmmword [rsp + 0x250]
movups xmmword [rdx + r8 + 0x188], xmm2
movups xmmword [rdx + r8 + 0x178], xmm1
movups xmmword [rdx + r8 + 0x168], xmm0
movups xmm0, xmmword [rdx + r9]
movups xmm1, xmmword [rdx + r9 + 0x10]
lea r8, [rsp + 0x168]
movups xmmword [r8 + 0x10], xmm1
movups xmmword [r8], xmm0
movaps xmm0, xmmword [rsp + 0x200]
movaps xmm1, xmmword [rsp + 0x210]
movups xmmword [rdx + r9], xmm0
movups xmmword [rdx + r9 + 0x10], xmm1
test rax, rax
je 0x140043477
mov rdx, qword [rdx + rcx*8 + 0x3e0]
lea rcx, [rax + rax]
not rax
add rax, rcx
je 0x140043477
mov rdx, qword [rdx + 0x3d8]
add rax, rsi
mov rcx, rsi
not rcx
jmp 0x140043460
mov ecx, 0xb
lea rdi, [rsp + 0xa0]
lea rsi, [rsp + 0x130]
rep movsq qword [rdi], qword [rsi]
mov qword [rsp + 0xf8], rdx
mov qword [rsp + 0x100], 0
lea rsi, [rsp + 0x2b0]
mov r15, qword [rsp + 0xa0]
mov ecx, 0xa
mov rax, rsi
mov rdi, rsi
lea rsi, [rsp + 0xa8]
rep movsq qword [rdi], qword [rsi]
dec qword [rsp + 0x1f8]
cmp byte [rsp + 0x57], 0
je 0x14004352f
test r12, r12
je 0x1400455cc
mov rax, qword [r13 + 0x3d8]
mov qword [rsp + 0x1e8], rax
dec r12
mov qword [rsp + 0x1f0], r12
mov qword [rax + 0x160], 0
mov rcx, qword [0x14008fb30]
xor edx, edx
mov r8, r13
call qword [sym.imp.kernel32.dll_HeapFree]
mov ecx, 0xa
lea rdi, [rsp + 0x190]
lea rsi, [rsp + 0x2b0]
jmp 0x14004353f
mov ecx, 0xa
lea rdi, [rsp + 0x190]
mov rsi, rax
rep movsq qword [rdi], qword [rsi]
movabs rax, 0x8000000000000000
cmp r15, rax
jne 0x140043567
xor eax, eax
movabs r13, 0x8000000000000000
mov rdi, qword [rsp + 0x58]
jmp 0x140042ef5
mov qword [rsp + 0x2b0], r15
mov ecx, 0xa
lea rdi, [rsp + 0x2b8]
lea rsi, [rsp + 0x190]
rep movsq qword [rdi], qword [rsi]
mov rdi, qword [rsp + 0x2e8]
mov rsi, qword [rsp + 0x2f0]
lea rcx, [rsp + 0x2b0]
call fcn.14004043c
shl rdi, 1
mov eax, 0
test rdi, rdi
movabs r13, 0x8000000000000000
mov rdi, qword [rsp + 0x58]
je 0x140042ef5
mov rcx, qword [0x14008fb30]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
xor eax, eax
jmp 0x140042ef5
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x288], rax
movups xmm0, xmmword [rsp + 0x1e8]
movups xmmword [rsp + 0x278], xmm0
mov qword [rsp + 0x270], 1
lea rdx, [0x14007e3c3]
lea rsi, [rsp + 0xa0]
mov r8d, 4
mov rcx, rsi
call fcn.1400514c1
mov rax, qword [rsi + 8]
mov rcx, qword [rsi + 0x10]
add rcx, rax
lea rdx, [rsp + 0x130]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
mov word [rdx + 0x10], 0
lea rdi, [rsp + 0x2d0]
mov rcx, rdi
call fcn.14004ca2c
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movaps xmmword [rdi - 0x20], xmm0
movaps xmmword [rdi - 0x10], xmm1
mov r14, qword [rsp + 0x278]
test r14, r14
je 0x140043720
mov r15, qword [rsp + 0x280]
mov rsi, qword [rsp + 0x2d8]
mov rdi, qword [rsp + 0x2e0]
lea rcx, [r14 + 0x168]
movzx eax, word [r14 + 0x3d2]
mov qword [rsp + 0x58], rax
imul rbp, rax, 0x38
xor r12d, r12d
test rbp, rbp
je 0x1400436ed
mov r13, r12
mov eax, r13d
and eax, 1
mov rdx, r12
xor rdx, 1
lea r12, [rdx + rax*2]
lea rbx, [rcx + 0x38]
mov r8, qword [rcx + 0x28]
mov r9, qword [rcx + 0x30]
mov rcx, rsi
mov rdx, rdi
call fcn.1400426a3
add rbp, 0xffffffffffffffc8
mov rcx, rbx
cmp al, 1
je 0x1400436a9
movzx eax, al
test eax, eax
jne 0x1400436f2
jmp 0x140043706
mov r13, qword [rsp + 0x58]
sub r15, 1
jb 0x140043910
mov r14, qword [r14 + r13*8 + 0x3d8]
jmp 0x14004368e
test r14, r14
je 0x140043720
shl r13, 5
mov r15, qword [r14 + r13 + 8]
mov rax, qword [r14 + r13 + 0x10]
mov qword [rsp + 0x58], rax
jmp 0x140043723
xor r15d, r15d
mov rsi, qword [rsp + 0x60]
lea rcx, [rsp + 0x2b0]
call fcn.14004043c
mov r14, qword [rsp + 0x68]
mov r12, qword [r14 + 0x10]
lea rbp, str.program_path_has_no_file_name
test r12, r12
je 0x140044630
mov rdi, qword [r14 + 8]
cmp r12, 3
ja 0x140043799
mov cl, byte [r12 + rdi - 1]
call fcn.140051532
test al, al
jne 0x140044630
xor eax, eax
movabs r13, 0x8000000000000000
cmp r12, rax
je 0x1400439fa
movzx ecx, byte [rdi + rax]
cmp ecx, 0x2f
je 0x140043948
inc rax
cmp ecx, 0x5c
jne 0x140043776
jmp 0x140043948
mov eax, dword [rdi]
bswap eax
xor ecx, ecx
cmp eax, 0x5c5c3f5c
setb cl
cmp eax, 0x5c5c3f5d
adc ecx, 0xffffffff
lea rax, [0x14005152b]
lea rdx, [fcn.140051532]
cmove rdx, rax
mov cl, byte [r12 + rdi - 1]
call rdx
test al, al
jne 0x140044630
lea rcx, [rdi + r12]
add rcx, 0xfffffffffffffffc
lea rdx, [rdi + r12]
movabs rax, 0xd15e620dae77ab40
add rdx, rax
sub rdx, rcx
sub rdx, rax
cmp rdx, 4
mov eax, 4
cmovb rax, rdx
test rax, rax
movabs r13, 0x8000000000000000
je 0x1400439fa
mov dl, byte [rcx]
lea r8d, [rdx - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, dl
cmp r8b, 0x2e
jne 0x1400438f2
xor edx, edx
lea r8, str..exeprogram_not_found
mov r9d, edx
and r9d, 1
xor rdx, 1
lea rdx, [rdx + r9*2]
cmp rdx, rax
je 0x14004391d
mov r10b, byte [rcx + rdx]
mov r9d, r10d
and r9b, 0x3f
add r9b, r9b
mov r11d, r10d
xor r11b, 0xbf
add r11b, r9b
cmp r11b, 0x1a
mov r9d, 0
adc r9b, 0xff
or r9b, 0xdf
mov r11d, r10d
not r11b
mov ebx, r9d
and bl, 0xe0
or r9b, r11b
and r11b, 0xe0
and r10b, 0x1f
or r10b, r11b
xor r10b, bl
not r9b
or r9b, r10b
mov r10b, byte [rdx + r8]
mov r11d, r10d
and r11b, 0x3f
add r11b, r11b
mov ebx, r10d
xor bl, 0xbf
add bl, r11b
cmp bl, 0x1a
setb r11b
shl r11b, 5
mov ebx, r11d
xor bl, r10b
not r10b
and r10b, r11b
add bl, r11b
sub bl, r10b
cmp r9b, bl
je 0x140043837
jmp 0x140043920
mov rsi, r8
mov qword [rsp + 0x270], 0
xor r15d, r15d
jmp 0x14004373a
xor eax, eax
cmp r12, rax
je 0x1400439fa
movzx ecx, byte [rdi + rax]
cmp ecx, 0x2f
je 0x140043948
inc rax
cmp ecx, 0x5c
jne 0x1400438f4
jmp 0x140043948
mov rsi, qword [rsp + 0x60]
xor r15d, r15d
jmp 0x140043728
mov rdx, rax
xor ecx, ecx
cmp r12, rcx
je 0x1400439fa
movzx r8d, byte [rdi + rcx]
cmp r8d, 0x2f
je 0x14004393f
inc rcx
cmp r8d, 0x5c
jne 0x140043922
cmp rdx, rax
jae 0x1400443d8
lea rbx, [rsp + 0xa0]
mov rcx, rbx
mov rdx, rdi
mov r8, r12
call fcn.1400514c1
movaps xmm0, xmmword [rbx]
movaps xmm1, xmmword [rbx + 0x10]
lea rsi, [rsp + 0x2b0]
movaps xmmword [rsi + 0x10], xmm1
movaps xmmword [rsi], xmm0
lea rdx, str..exeprogram_not_found
mov r8d, 4
mov rcx, rsi
call fcn.1400512ee
movaps xmm0, xmmword [rsi]
movaps xmm1, xmmword [rsi + 0x10]
movaps xmmword [rbx + 0x10], xmm1
movaps xmmword [rbx], xmm0
mov rsi, qword [rbx + 8]
mov r8, qword [rbx + 0x10]
lea rdi, [rsp + 0x2b0]
and al, 0xb0
add al, byte [rax]
add byte [rax - 0x77], cl
stc
mov rdx, rsi
call fcn.140045a34
add byte [rax], al
cmp qword [rdi], r13
jne 0x140043a4f
lea rdi, [rsp + 0xa0]
mov edx, 1
mov rcx, rdi
xor r8d, r8d
call fcn.1400423da
mov rsi, qword [rdi + 8]
mov r8, qword [rdi + 0x10]
lea rcx, [rsp + 0x200]
mov rdx, rsi
call fcn.140045ac2
add byte [rax], al
cmp qword [rdi], 0
jne 0x140043a7a
invalid
test dword [rax], eax
add byte [rax], al
jmp 0x140043a8c
lea rbx, [rsp + 0x2b0]
mov rcx, rbx
mov rdx, rdi
mov r8, r12
call fcn.1400458fb
cmp qword [rbx], 0
je 0x140043ab9
cmp r12, 0xf
ja case.0x14005d840.409
lea rax, [r12 - 1]
xor ecx, ecx
mov r9, qword [rsp + 0x58]
cmp byte [rdi + rcx], 0x2e
sete r8b
je 0x140043adf
lea rdx, [rcx + 1]
cmp rax, rcx
mov rcx, rdx
jne 0x140043a30
jmp 0x140043adf
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0x210], rax
movups xmm0, xmmword [rsp + 0x2b0]
test byte [rax + rsi*4], ah
add al, byte [rax]
add byte [rdi], cl
sub dword [rsp + 0x200], eax
mov rbp, qword [rsp + 0x2b8]
jmp 0x140044630
invalid
lea rcx, [rsp + 0x200]
mov rdx, rdi
mov r8, r12
call fcn.140045ac2
jmp 0x140043a91
call sub.kernel32.dll_GetLastError
ud2