Function at 0x14003c950
Capabilities:
Connect to wmi namespace via wbemlocator
Contain obfuscated stackstrings
Encode data using base64
Get system information on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x500]
sub rsp, 0x600
mov rax, qword [0x1400e0180]
xor rax, rsp
mov qword [rbp + 0x4f0], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
js 0x14003d747
xor r15d, r15d
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x38], r15d
mov qword [rsp + 0x30], r15
mov r12d, 3
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
mov rsi, 0xffffffffffffffff
mov edx, esi
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
jns 0x14003c9e3
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x14003d747
mov qword [rbp + 0x70], r15
lea rax, [rbp + 0x70]
mov qword [rsp + 0x20], rax
lea r9, [0x1400b8800]
xor edx, edx
mov r8d, 1
lea rcx, [0x1400b8820]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov qword [rbp + 0x78], r15
lea rcx, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.DLL_GetNativeSystemInfo]
cmp word [rbp + 0xc0], 9
jne 0x14003ccce
lea rax, [rbp + 0x78]
mov qword [rsp + 0x20], rax
lea r9, [0x1400b8810]
xor edx, edx
mov r8d, 1
lea rcx, [0x1400b8830]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x14003c9d8
mov qword [rbp + 0x90], r15
mov byte [rsp + 0x50], r15b
mov byte [rsp + 0x51], 0x5c
mov byte [rsp + 0x52], 7
mov byte [rsp + 0x53], 0x5c
mov byte [rsp + 0x54], 7
mov byte [rsp + 0x55], 0x70
mov byte [rsp + 0x56], 7
mov byte [rsp + 0x57], 0x6d
mov byte [rsp + 0x58], 7
mov byte [rsp + 0x59], 0x71
mov byte [rsp + 0x5a], 7
mov byte [rsp + 0x5b], 0x13
mov byte [rsp + 0x5c], 7
mov byte [rsp + 0x5d], 0x79
mov byte [rsp + 0x5e], 7
mov byte [rsp + 0x5f], 0x2b
mov byte [rsp + 0x60], 7
mov byte [rsp + 0x61], 0x54
mov byte [rsp + 0x62], 7
mov byte [rsp + 0x63], 0x6d
mov byte [rsp + 0x64], 7
mov byte [rsp + 0x65], 5
mov byte [rsp + 0x66], 7
mov byte [rsp + 0x67], 0x6d
mov byte [rsp + 0x68], 7
mov byte [rsp + 0x69], 2
mov byte [rsp + 0x6a], 7
mov byte [rsp + 0x6b], 0x50
mov byte [rsp + 0x6c], 7
mov byte [rsp + 0x6d], 0x79
mov byte [rsp + 0x6e], 7
mov byte [rsp + 0x6f], 0x40
mov byte [rsp + 0x70], 7
mov byte [rsp + 0x71], 0x54
mov byte [rsp + 0x72], 7
mov byte [rsp + 0x73], 2
mov byte [rsp + 0x74], 7
mov byte [rsp + 0x75], 0x40
mov byte [rsp + 0x76], 7
mov byte [rsp + 0x77], 0x69
mov byte [rsp + 0x78], 7
mov byte [rsp + 0x79], 0x6d
mov byte [rsp + 0x7a], 7
mov byte [rsp + 0x7b], 0x54
mov byte [rsp + 0x7c], 7
mov byte [rsp + 0x7d], 7
mov byte [rsp + 0x7e], 7
movzx eax, byte [rsp + 0x51]
movzx eax, byte [rsp + 0x50]
test al, al
jne 0x14003cbb5
mov r9, r15
nop word [rax + rax]
movzx ecx, byte [rsp + r9 + 0x51]
sub ecx, 7
imul r8d, ecx, 0x1f
mov eax, 0x81020409
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
add r8d, 0x7f
mov eax, 0x81020409
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov byte [rsp + r9 + 0x51], r8b
inc r9
cmp r9, 0x2e
jb 0x14003cb60
mov ecx, 0x18
call fcn.14005ff50
mov rdi, rax
mov qword [rbp + 0xa8], rax
test rax, rax
je 0x14003cbfe
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rax
mov qword [rdi + 8], r15
mov dword [rdi + 0x10], 1
lea rcx, [rsp + 0x51]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14003d782
jmp 0x14003cc01
mov rdi, r15
mov qword [rbp + 0x90], rdi
test rdi, rdi
je 0x14003d7b4
lea rcx, [rbp + 0x50]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov word [rbp + 0x50], r12w
mov dword [rbp + 0x58], 0x40
mov rcx, qword [rbp + 0x78]
mov rax, qword [rcx]
lea r9, [rbp + 0x50]
xor r8d, r8d
mov rdx, qword [rdi]
call qword [rax + 0x40]
mov ebx, eax
lea rcx, [rbp + 0x50]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
test ebx, ebx
jns 0x14003cc8b
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
lock xadd dword [rdi + 0x10], esi
cmp esi, 1
jne 0x14003d747
mov rcx, qword [rdi]
test rcx, rcx
je 0x14003cc71
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r15
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14003cc83
call fcn.14005ff8c
mov qword [rdi + 8], r15
mov rcx, rdi
jmp 0x14003d73d
mov eax, esi
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14003ccc7
mov rcx, qword [rdi]
test rcx, rcx
je 0x14003cca8
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r15
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14003ccba
call fcn.14005ff8c
mov qword [rdi + 8], r15
mov edx, 0x18
mov rcx, rdi
call fcn.14005ff8c
mov qword [rbp + 0x90], r15
mov qword [rbp + 0x68], r15
mov qword [rbp + 0xb0], r15
mov byte [rbp + 0x50], 0
mov byte [rbp + 0x51], 0x64
mov byte [rbp + 0x52], 0x48
mov byte [rbp + 0x53], 0x44
mov byte [rbp + 0x54], 0x48
mov byte [rbp + 0x55], 0x44
mov byte [rbp + 0x56], 0x48
mov byte [rbp + 0x57], 0x4f
mov byte [rbp + 0x58], 0x48
mov byte [rbp + 0x59], 0x7a
mov byte [rbp + 0x5a], 0x48
mov byte [rbp + 0x5b], 0x43
mov byte [rbp + 0x5c], 0x48
mov byte [rbp + 0x5d], 4
mov byte [rbp + 0x5e], 0x48
mov byte [rbp + 0x5f], 0x59
mov byte [rbp + 0x60], 0x48
mov byte [rbp + 0x61], 0x3a
mov byte [rbp + 0x62], 0x48
mov byte [rbp + 0x63], 0x37
mov byte [rbp + 0x64], 0x48
mov byte [rbp + 0x65], 0x48
mov byte [rbp + 0x66], 0x48
movzx eax, byte [rbp + 0x51]
movzx eax, byte [rbp + 0x50]
test al, al
jne 0x14003cda9
mov r9, r15
nop dword [rax]
nop dword [rax + rax]
movzx ecx, byte [rbp + r9 + 0x51]
sub ecx, 0x48
lea r8d, [rcx + rcx*2]
shl r8d, 2
mov eax, 0x81020409
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
add r8d, 0x7f
mov eax, 0x81020409
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov byte [rbp + r9 + 0x51], r8b
inc r9
cmp r9, 0x16
jb 0x14003cd50
mov ecx, 0x18
call fcn.14005ff50
mov r14, rax
mov qword [rbp + 0xa8], rax
test rax, rax
je 0x14003cdf3
xorps xmm0, xmm0
xor eax, eax
movups xmmword [r14], xmm0
mov qword [r14 + 0x10], rax
mov qword [r14 + 8], r15
mov dword [r14 + 0x10], 1
lea rcx, [rbp + 0x51]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [r14], rax
test rax, rax
je 0x14003d78d
jmp 0x14003cdf6
mov r14, r15
mov qword [rbp + 0xb0], r14
test r14, r14
je 0x14003d7bf
mov rcx, qword [rbp + 0x70]
mov r10, qword [rcx]
lea rax, [rbp + 0x68]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp + 0x78]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [r14]
call qword [r10 + 0x18]
test eax, eax
jns 0x14003ce4e
mov rcx, qword [rbp + 0x70]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x14003d70c
mov dword [rsp + 0x38], r15d
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x14003ce9a
mov rcx, qword [rbp + 0x68]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x70]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x14003d70c
mov qword [rbp + 0xb8], r15
mov byte [rbp + 0x90], 0
mov byte [rbp + 0x91], 0x51
mov byte [rbp + 0x92], 0x7b
mov byte [rbp + 0x93], 0x3e
mov byte [rbp + 0x94], 0x7b
mov byte [rbp + 0x95], 0x19
mov byte [rbp + 0x96], 0x7b
mov byte [rbp + 0x97], 0x7b
mov byte [rbp + 0x98], 0x7b
movzx eax, byte [rbp + 0x91]
movzx eax, byte [rbp + 0x90]
test al, al
jne 0x14003cf5b
mov r9, r15
nop word [rax + rax]
movzx ecx, byte [rbp + r9 + 0x91]
sub ecx, 0x7b
imul r8d, ecx, 7
mov eax, 0x81020409
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
add r8d, 0x7f
mov eax, 0x81020409
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov byte [rbp + r9 + 0x91], r8b
inc r9
cmp r9, 8
jb 0x14003cf00
mov ecx, 0x18
call fcn.14005ff50
mov rdi, rax
mov qword [rbp + 0xa8], rax
test rax, rax
je 0x14003cfa6
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rax
mov qword [rdi + 8], r15
mov dword [rdi + 0x10], 1
lea rcx, [rbp + 0x91]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14003d798
jmp 0x14003cfa9
mov rdi, r15
mov qword [rbp + 0xb8], rdi
test rdi, rdi
je 0x14003d7ca
mov qword [rbp + 0xa8], r15
mov byte [rbp - 0x80], 0
mov byte [rbp - 0x7f], 0x1d
mov byte [rbp - 0x7e], 0x4c
mov byte [rbp - 0x7d], 0x42
mov byte [rbp - 0x7c], 0x4c
mov byte [rbp - 0x7b], 0x6f
mov byte [rbp - 0x7a], 0x4c
mov byte [rbp - 0x79], 0x42
mov byte [rbp - 0x78], 0x4c
mov byte [rbp - 0x77], 0x23
mov byte [rbp - 0x76], 0x4c
mov byte [rbp - 0x75], 0x6c
mov byte [rbp - 0x74], 0x4c
mov byte [rbp - 0x73], 0x40
mov byte [rbp - 0x72], 0x4c
mov byte [rbp - 0x71], 0x5c
mov byte [rbp - 0x70], 0x4c
mov byte [rbp - 0x6f], 0x40
mov byte [rbp - 0x6e], 0x4c
mov byte [rbp - 0x6d], 0x12
mov byte [rbp - 0x6c], 0x4c
mov byte [rbp - 0x6b], 0x4d
mov byte [rbp - 0x6a], 0x4c
mov byte [rbp - 0x69], 0x5e
mov byte [rbp - 0x68], 0x4c
mov byte [rbp - 0x67], 0x3f
mov byte [rbp - 0x66], 0x4c
mov byte [rbp - 0x65], 0x40
mov byte [rbp - 0x64], 0x4c
mov byte [rbp - 0x63], 0x5b
mov byte [rbp - 0x62], 0x4c
mov byte [rbp - 0x61], 0x74
mov byte [rbp - 0x60], 0x4c
mov byte [rbp - 0x5f], 3
mov byte [rbp - 0x5e], 0x4c
mov byte [rbp - 0x5d], 0x29
mov byte [rbp - 0x5c], 0x4c
mov byte [rbp - 0x5b], 0x59
mov byte [rbp - 0x5a], 0x4c
mov byte [rbp - 0x59], 0x58
mov byte [rbp - 0x58], 0x4c
mov byte [rbp - 0x57], 0x1d
mov byte [rbp - 0x56], 0x4c
mov byte [rbp - 0x55], 0x25
mov byte [rbp - 0x54], 0x4c
mov byte [rbp - 0x53], 0x77
mov byte [rbp - 0x52], 0x4c
mov byte [rbp - 0x51], 0x66
mov byte [rbp - 0x50], 0x4c
mov byte [rbp - 0x4f], 0x52
mov byte [rbp - 0x4e], 0x4c
mov byte [rbp - 0x4d], 0x4f
mov byte [rbp - 0x4c], 0x4c
mov byte [rbp - 0x4b], 0x23
mov byte [rbp - 0x4a], 0x4c
mov byte [rbp - 0x49], 0x52
mov byte [rbp - 0x48], 0x4c
mov byte [rbp - 0x47], 0x22
mov byte [rbp - 0x46], 0x4c
mov byte [rbp - 0x45], 0x6e
mov byte [rbp - 0x44], 0x4c
mov byte [rbp - 0x43], 0x4c
mov byte [rbp - 0x42], 0x4c
movzx eax, byte [rbp - 0x7f]
movzx eax, byte [rbp - 0x80]
test al, al
jne 0x14003d121
mov r8, r15
nop dword [rax + rax]
movzx ecx, byte [rbp + r8 - 0x7f]
mov eax, 0x4c
sub eax, ecx
imul ecx, eax, 0x2d
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
add ecx, 0x7f
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [rbp + r8 - 0x7f], cl
inc r8
cmp r8, 0x3e
jb 0x14003d0d0
mov ecx, 0x18
call fcn.14005ff50
mov rbx, rax
mov qword [rbp + 0xa8], rax
test rax, rax
je 0x14003d169
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r15
mov dword [rbx + 0x10], 1
lea rcx, [rbp - 0x7f]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14003d7a3
jmp 0x14003d16c
mov rbx, r15
mov qword [rbp + 0xa8], rbx
test rbx, rbx
je 0x14003d777
mov qword [rbp + 0x80], r15
mov rcx, qword [rbp + 0x68]
mov rax, qword [rcx]
lea rdx, [rbp + 0x80]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], r15
mov r9d, 0x30
mov r8, qword [rbx]
mov rdx, qword [rdi]
call qword [rax + 0xa0]
test eax, eax
jns 0x14003d1ca
mov rcx, qword [rbp + 0x68]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x70]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x14003d692
mov qword [rbp + 0x88], r15
mov dword [rbp + 0xa0], r15d
mov rcx, qword [rbp + 0x80]
test rcx, rcx
je 0x14003d65b
nop dword [rax + rax]
mov rax, qword [rcx]
lea rdx, [rbp + 0xa0]
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x88]
mov r8d, 1
mov edx, esi
call qword [rax + 0x20]
cmp dword [rbp + 0xa0], 0
je 0x14003d65b
mov byte [rbp + 0x90], 0
mov byte [rbp + 0x91], 0x44
mov byte [rbp + 0x92], 0x63
mov byte [rbp + 0x93], 0x5b
mov byte [rbp + 0x94], 0x63
mov byte [rbp + 0x95], 0x63
mov byte [rbp + 0x96], 0x63
movzx eax, byte [rbp + 0x91]
movzx eax, byte [rbp + 0x90]
test al, al
jne 0x14003d2cb
mov r9, r15
nop dword [rax]
nop dword [rax + rax]
movzx ecx, byte [rbp + r9 + 0x91]
sub ecx, 0x63
imul r8d, ecx, 0x37
mov eax, 0x81020409
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
add r8d, 0x7f
mov eax, 0x81020409
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov byte [rbp + r9 + 0x91], r8b
inc r9
cmp r9, 6
jb 0x14003d270
mov rcx, qword [rbp + 0x88]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x50]
xor r8d, r8d
lea rdx, [rbp + 0x91]
call qword [rax + 0x20]
mov byte [rbp - 0x40], 0
mov byte [rbp - 0x3f], 0x6f
mov byte [rbp - 0x3e], 0x6c
mov byte [rbp - 0x3d], 0x43
mov byte [rbp - 0x3c], 0x6c
mov byte [rbp - 0x3b], 0x4e
mov byte [rbp - 0x3a], 0x6c
mov byte [rbp - 0x39], 0x6e
mov byte [rbp - 0x38], 0x6c
mov byte [rbp - 0x37], 0x47
mov byte [rbp - 0x36], 0x6c
mov byte [rbp - 0x35], 0x27
mov byte [rbp - 0x34], 0x6c
mov byte [rbp - 0x33], 0x67
mov byte [rbp - 0x32], 0x6c
mov byte [rbp - 0x31], 0x3a
mov byte [rbp - 0x30], 0x6c
mov byte [rbp - 0x2f], 0x53
mov byte [rbp - 0x2e], 0x6c
mov byte [rbp - 0x2d], 7
mov byte [rbp - 0x2c], 0x6c
mov byte [rbp - 0x2b], 0x4e
mov byte [rbp - 0x2a], 0x6c
mov byte [rbp - 0x29], 0x22
mov byte [rbp - 0x28], 0x6c
mov byte [rbp - 0x27], 0x79
mov byte [rbp - 0x26], 0x6c
mov byte [rbp - 0x25], 7
mov byte [rbp - 0x24], 0x6c
mov byte [rbp - 0x23], 0x1a
mov byte [rbp - 0x22], 0x6c
mov byte [rbp - 0x21], 0x7a
mov byte [rbp - 0x20], 0x6c
mov byte [rbp - 0x1f], 0x14
mov byte [rbp - 0x1e], 0x6c
mov byte [rbp - 0x1d], 0x3d
mov byte [rbp - 0x1c], 0x6c
mov byte [rbp - 0x1b], 0x2a
mov byte [rbp - 0x1a], 0x6c
mov byte [rbp - 0x19], 0x4e
mov byte [rbp - 0x18], 0x6c
mov byte [rbp - 0x17], 0x53
mov byte [rbp - 0x16], 0x6c
mov byte [rbp - 0x15], 0x41
mov byte [rbp - 0x14], 0x6c
mov byte [rbp - 0x13], 0x7a
mov byte [rbp - 0x12], 0x6c
mov byte [rbp - 0x11], 0x14
mov byte [rbp - 0x10], 0x6c
mov byte [rbp - 0xf], 0x4e
mov byte [rbp - 0xe], 0x6c
mov byte [rbp - 0xd], 0x6e
mov byte [rbp - 0xc], 0x6c
mov byte [rbp - 0xb], 0x2f
mov byte [rbp - 0xa], 0x6c
mov byte [rbp - 9], 0x62
mov byte [rbp - 8], 0x6c
mov byte [rbp - 7], 0x6f
mov byte [rbp - 6], 0x6c
mov byte [rbp - 5], 0x5d
mov byte [rbp - 4], 0x6c
mov byte [rbp - 3], 0x7a
mov byte [rbp - 2], 0x6c
mov byte [rbp - 1], 0x66
mov byte [rbp], 0x6c
mov byte [rbp + 1], 0x7a
mov byte [rbp + 2], 0x6c
mov byte [rbp + 3], 0x51
mov byte [rbp + 4], 0x6c
mov byte [rbp + 5], 7
mov byte [rbp + 6], 0x6c
mov byte [rbp + 7], 0x34
mov byte [rbp + 8], 0x6c
mov byte [rbp + 9], 0x2e
mov byte [rbp + 0xa], 0x6c
mov byte [rbp + 0xb], 0x67
mov byte [rbp + 0xc], 0x6c
mov byte [rbp + 0xd], 0x3a
mov byte [rbp + 0xe], 0x6c
mov byte [rbp + 0xf], 0x53
mov byte [rbp + 0x10], 0x6c
mov byte [rbp + 0x11], 0x54
mov byte [rbp + 0x12], 0x6c
mov byte [rbp + 0x13], 0x3a
mov byte [rbp + 0x14], 0x6c
mov byte [rbp + 0x15], 0x4d
mov byte [rbp + 0x16], 0x6c
mov byte [rbp + 0x17], 0x79
mov byte [rbp + 0x18], 0x6c
mov byte [rbp + 0x19], 0x51
mov byte [rbp + 0x1a], 0x6c
mov byte [rbp + 0x1b], 0x53
mov byte [rbp + 0x1c], 0x6c
mov byte [rbp + 0x1d], 0x34
mov byte [rbp + 0x1e], 0x6c
mov byte [rbp + 0x1f], 0x7a
mov byte [rbp + 0x20], 0x6c
mov byte [rbp + 0x21], 0x73
mov byte [rbp + 0x22], 0x6c
mov byte [rbp + 0x23], 0x7a
mov byte [rbp + 0x24], 0x6c
mov byte [rbp + 0x25], 0x51
mov byte [rbp + 0x26], 0x6c
mov byte [rbp + 0x27], 0x77
mov byte [rbp + 0x28], 0x6c
mov byte [rbp + 0x29], 0x62
mov byte [rbp + 0x2a], 0x6c
mov byte [rbp + 0x2b], 3
mov byte [rbp + 0x2c], 0x6c
mov byte [rbp + 0x2d], 0x7c
mov byte [rbp + 0x2e], 0x6c
mov byte [rbp + 0x2f], 0x57
mov byte [rbp + 0x30], 0x6c
mov byte [rbp + 0x31], 0x31
mov byte [rbp + 0x32], 0x6c
mov byte [rbp + 0x33], 7
mov byte [rbp + 0x34], 0x6c
mov byte [rbp + 0x35], 0x57
mov byte [rbp + 0x36], 0x6c
mov byte [rbp + 0x37], 0x77
mov byte [rbp + 0x38], 0x6c
mov byte [rbp + 0x39], 0x51
mov byte [rbp + 0x3a], 0x6c
mov byte [rbp + 0x3b], 0x67
mov byte [rbp + 0x3c], 0x6c
mov byte [rbp + 0x3d], 0x7a
mov byte [rbp + 0x3e], 0x6c
mov byte [rbp + 0x3f], 1
mov byte [rbp + 0x40], 0x6c
mov byte [rbp + 0x41], 0x7a
mov byte [rbp + 0x42], 0x6c
mov byte [rbp + 0x43], 0x1a
mov byte [rbp + 0x44], 0x6c
mov byte [rbp + 0x45], 0x7a
mov byte [rbp + 0x46], 0x6c
mov byte [rbp + 0x47], 0x6c
mov byte [rbp + 0x48], 0x6c
movzx eax, byte [rbp - 0x3f]
movzx eax, byte [rbp - 0x40]
test al, al
jne 0x14003d587
mov r8, r15
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rbp + r8 - 0x3f]
mov eax, 0x6c
sub eax, ecx
lea ecx, [rax + rax*4]
shl ecx, 2
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
add ecx, 0x7f
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [rbp + r8 - 0x3f], cl
inc r8
cmp r8, 0x88
jb 0x14003d530
mov r8, qword [rbp + 0x58]
lea rdx, [rbp - 0x3f]
lea rcx, [rbp + 0xf0]
call fcn.140042370
cmp eax, 0xffffffff
je 0x14003d64b
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
lea rax, [rbp + 0xf0]
mov r8, rsi
inc r8
cmp word [rax + r8*2], 0
jne 0x14003d5c0
lea rdx, [rbp + 0xf0]
lea rcx, [rsp + 0x50]
call fcn.1400276b0
nop
lea rcx, [rsp + 0x50]
call fcn.14003c670
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x14003d62a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003d625
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003d7ae
call fcn.14005ff8c
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r15w
mov rcx, qword [rbp + 0x88]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x80]
test rcx, rcx
jne 0x14003d1f0
mov rcx, qword [rbp + 0x78]
test rcx, rcx
je 0x14003d66a
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x68]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x70]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x80]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
mov eax, esi
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14003d6cf
mov rcx, qword [rbx]
test rcx, rcx
je 0x14003d6af
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r15
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14003d6c1
call fcn.14005ff8c
mov qword [rbx + 8], r15
mov edx, 0x18
mov rcx, rbx
call fcn.14005ff8c
nop
mov eax, esi
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14003d70c
mov rcx, qword [rdi]
test rcx, rcx
je 0x14003d6ec
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r15
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14003d6fe
call fcn.14005ff8c
mov qword [rdi + 8], r15
mov edx, 0x18
mov rcx, rdi
call fcn.14005ff8c
nop
lock xadd dword [r14 + 0x10], esi
cmp esi, 1
jne 0x14003d747
mov rcx, qword [r14]
test rcx, rcx
je 0x14003d728
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [r14], r15
mov rcx, qword [r14 + 8]
test rcx, rcx
je 0x14003d73a
call fcn.14005ff8c
mov qword [r14 + 8], r15
mov rcx, r14
mov edx, 0x18
call fcn.14005ff8c
mov rcx, qword [rbp + 0x4f0]
xor rcx, rsp
call fcn.14005ff30
lea r11, [rsp + 0x600]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov ecx, 0x8007000e
call fcn.1400849a0
nop
mov ecx, 0x8007000e
call fcn.1400849a0
nop
mov ecx, 0x8007000e
call fcn.1400849a0
nop
mov ecx, 0x8007000e
call fcn.1400849a0
nop
mov ecx, 0x8007000e
call fcn.1400849a0
nop
call fcn.140091b44
nop
mov ecx, 0x8007000e
call fcn.1400849a0
int3
mov ecx, 0x8007000e
call fcn.1400849a0
nop
mov ecx, 0x8007000e
call fcn.1400849a0
int3