Function at 0x140004e32
Capabilities:
Get hostname

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x438
lea rbx, [rsp + 0xe0]
and dword [rbx], 0
xor r14d, r14d
xor ecx, ecx
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_GetComputerNameExW
mov ecx, dword [rbx]
xor edx, edx
call fcn.140019856
mov rdi, rax
mov rsi, rdx
mov rax, rdx
shr rax, 0x20
neg rax
sbb r14d, r14d
or r14d, esi
mov dword [rbx], r14d
xor ecx, ecx
mov rdx, rdi
mov r8, rbx
call sub.KERNEL32.dll_GetComputerNameExW
test eax, eax
jne 0x140004ed3
mov ecx, 9
call fcn.140007e3a
movabs rcx, 0x736f686c61636f6c
mov qword [rax], rcx
mov byte [rax + 8], 0x74
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x298], rdx
mov qword [rsp + 0x2a0], 9
mov byte [rsp + 0x2a8], 1
jmp 0x140004eeb
mov r8d, dword [rsp + 0xe0]
lea rcx, [rsp + 0x290]
mov rdx, rdi
call fcn.140019c2d
mov rcx, rdi
mov rdx, rsi
call fcn.140019c17
lea rdi, [rsp + 0xe0]
lea rsi, [rsp + 0x290]
mov rcx, rdi
mov rdx, rsi
call fcn.14001c524
cmp byte [rdi + 0x18], 2
mov r15, qword [rdi]
mov r14, qword [rdi + 8]
mov rbx, qword [rdi + 0x10]
je 0x140004f95
lea r12, [rsp + 0xe0]
mov rcx, r12
mov rdx, r15
mov r8, rbx
call fcn.14001c650
mov rbp, qword [r12]
mov rbx, qword [r12 + 0x10]
test rbp, rbp
jne 0x140004f4e
mov rbp, qword [rsp + 0xe8]
mov rcx, rbx
call fcn.140007e3a
mov r12, rax
mov r13, rdx
mov rcx, rax
mov rdx, rbp
mov r8, rbx
call sub.msvcrt.dll_memcpy
mov rcx, qword [rsp + 0xe0]
test rcx, rcx
je 0x140004f84
mov rdx, qword [rsp + 0xe8]
call fcn.140007ddb
mov rcx, r15
mov rdx, r14
call fcn.140007ddb
mov r14, r13
mov r15, r12
xor eax, eax
cmp rbx, rax
je 0x140004fb7
mov cl, byte [r15 + rax]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
mov byte [r15 + rax], dl
inc rax
jmp 0x140004f97
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], rbx
lea rax, [0x14002bad0]
mov qword [rsp + 0xe0], rax
mov rcx, qword [rsp + 0xe0]
movabs rax, 0x2c89820298e8a46d
mov qword [rsp + 0xe0], rax
mov rdx, qword [rsp + 0xe0]
call fcn.140004508
and qword [rsp + 0xe0], 0
mov r8b, 1
xor ecx, ecx
lea rdx, str._xh
test r8b, 1
je 0x1400050bc
movzx r9d, byte [rcx + rdx]
mov r8, rcx
or r8, 1
movzx r8d, byte [r8 + rdx]
mov r10, rcx
or r10, 2
movzx r10d, byte [r10 + rdx]
mov r11, rcx
or r11, 3
movzx r11d, byte [r11 + rdx]
mov rdi, rcx
or rdi, 4
movzx edi, byte [rdi + rdx]
mov rbx, rcx
or rbx, 5
movzx ebx, byte [rbx + rdx]
mov r14, rcx
or r14, 6
mov r15, rcx
or r15, 7
movzx r14d, byte [r14 + rdx]
movzx r15d, byte [r15 + rdx]
shl r15, 0x38
shl r14, 0x30
or r14, r15
shl rbx, 0x28
shl rdi, 0x20
shl r11, 0x18
shl r10, 0x10
shl r8, 8
or r8, r9
or r8, r10
or r8, r11
or r8, rdi
or r8, rbx
or r8, r14
xor r8, qword [rax + rcx]
mov qword [rsp + rcx + 0xe0], r8
mov ecx, 8
xor r8d, r8d
jmp 0x140005011
movzx ecx, byte [rax + 0xa]
movzx eax, word [rax + 8]
xor eax, 0x30d3
lea rdx, [rsp + 0xe0]
mov word [rdx + 8], ax
xor cl, 0x4b
mov byte [rdx + 0xa], cl
mov rax, qword [rdx]
lea rcx, [rsp + 0xa0]
mov qword [rcx], rax
mov eax, dword [rdx + 7]
mov dword [rcx + 7], eax
lea rax, [rsp + 0x60]
mov qword [rax], rcx
mov qword [rax + 8], 0xb
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x290], rcx
lea rcx, [0x1400042c3]
mov qword [rsp + 0x298], rcx
mov qword [rsp + 0x2a0], rax
lea rax, str.description___is_deprecated__use_Display
mov qword [rdx], rax
mov eax, 2
mov qword [rdx + 8], rax
and qword [rdx + 0x20], 0
lea rcx, [fcn.140010a62]
mov qword [rsp + 0x2a8], rcx
mov qword [rdx + 0x10], rsi
mov qword [rdx + 0x18], rax
lea rsi, [rsp + 0xc8]
mov rcx, rsi
call fcn.140003ee8
mov rdi, qword [rsi]
mov rbx, qword [rsi + 0x10]
lea rsi, [rsp + 0xe0]
mov rcx, rsi
call fcn.14002550d
cmp byte [rsi], 0x12
jne 0x140005c23
call fcn.140003dc7
lea r14, [rsp + 0x290]
mov rcx, r14
mov rdx, rdi
mov r8, rbx
mov r9, rax
call fcn.14002558c
mov bl, byte [r14]
cmp bl, 0x12
jne 0x140005248
mov rax, qword [rsp + 0x2a8]
mov qword [rsp + 0xb0], rax
movdqu xmm0, xmmword [rsp + 0x298]
movdqa xmmword [rsp + 0xa0], xmm0
lea rax, [0x14002455a]
mov qword [rsp + 0xe0], rax
mov rcx, qword [rsp + 0xe0]
movabs rax, 0x512dc7c9aab103d1
mov qword [rsp + 0xe0], rax
mov rdx, qword [rsp + 0xe0]
call fcn.140004536
pxor xmm0, xmm0
movdqu xmmword [rsp + 0xfc], xmm0
movdqa xmmword [rsp + 0xf0], xmm0
movdqa xmmword [rsp + 0xe0], xmm0
xor edx, edx
lea rcx, [0x14003044b]
cmp rdx, 0x28
jae 0x14000525a
mov r8, qword [rdx + rcx]
xor r8, qword [rax + rdx]
mov qword [rsp + rdx + 0xe0], r8
add rdx, 8
jmp 0x14000522c
lea rcx, [rsp + 0x290]
call fcn.1400032ab
jmp 0x140005450
mov edx, 0x28
cmp rdx, 0x2b
ja 0x140005290
movzx r8d, byte [rdx + rcx + 2]
shl r8d, 0x10
movzx r9d, word [rdx + rcx]
add r8d, r9d
add r8d, 0x7f000000
xor r8d, dword [rax + rdx]
mov dword [rsp + rdx + 0xe0], r8d
add rdx, 4
jmp 0x14000525f
mov byte [rsp + 0x98], bl
mov qword [rsp + 0x38], rdi
mov al, byte [rax + 0x2c]
lea rsi, [rsp + 0xe0]
mov byte [rsi + 0x2c], al
movdqa xmm0, xmmword [rsi]
movaps xmm1, xmmword [rsi + 0x10]
lea r8, [rsp + 0x290]
movdqa xmmword [r8], xmm0
movaps xmmword [r8 + 0x10], xmm1
mov rax, qword [rsi + 0x1d]
mov qword [r8 + 0x1d], rax
mov eax, dword [rsi + 0x25]
mov dword [r8 + 0x25], eax
movzx eax, word [rsi + 0x29]
mov word [r8 + 0x29], ax
mov al, byte [rsi + 0x2b]
mov byte [r8 + 0x2b], al
mov al, byte [rsi + 0x2c]
mov byte [r8 + 0x2c], al
lea rdx, [rsp + 0xa0]
mov r9d, 0x2d
mov rcx, rsi
call fcn.140002d88
cmp byte [rsi], 0x12
jne 0x140005c23
lea rdi, [rsp + 0xe8]
mov rsi, qword [rdi]
mov rbx, qword [rdi + 8]
imul rbp, qword [rdi + 0x10], 0x30
lea rcx, [rsp + 0xa0]
call fcn.140003349
add rbp, rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x78], rbp
lea rbx, [rsp + 0x290]
lea r14, [rsp + 0xe0]
lea r15, [0x140030478]
lea r12, [0x140030498]
cmp rsi, rbp
je 0x140005ffe
lea r13, [rsi + 0x30]
mov rax, qword [rsi]
test rax, rax
je 0x140005ffb
mov qword [rsp + 0xe0], rax
mov rcx, qword [rsi + 0x28]
mov qword [rdi + 0x20], rcx
movups xmm0, xmmword [rsi + 8]
movups xmm1, xmmword [rsi + 0x18]
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
mov rcx, qword [rsp + 0xe8]
mov rdx, qword [rsp + 0xf8]
lea rcx, [rcx + rax + 1]
movdqa xmm0, xmmword [rax]
pmovmskb r8d, xmm0
not r8d
mov qword [rsp + 0x290], rax
add rax, 0x10
mov qword [rsp + 0x298], rax
mov qword [rsp + 0x2a0], rcx
mov word [rsp + 0x2a8], r8w
mov qword [rsp + 0x2b0], rdx
mov rcx, rbx
call fcn.140004930
test rax, rax
je 0x140005416
mov rsi, rax
add rsi, 0xffffffffffffffe0
je 0x140005416
mov rcx, rsi
mov rdx, r15
call fcn.140004358
test al, al
jne 0x140005426
mov rcx, rsi
mov rdx, r12
call fcn.140004358
test al, al
je 0x1400053e0
jmp 0x140005426
mov rcx, r14
call fcn.14000314c
mov rsi, r13
jmp 0x14000535a
lea rsi, [rsp + 0x60]
mov qword [rsi + 0x10], r13
lea rcx, [rsp + 0xe0]
call fcn.14000314c
mov rcx, rsi
call fcn.140003274
mov rdi, qword [rsp + 0x38]
mov bl, byte [rsp + 0x98]
mov rdx, qword [rsp + 0xd0]
mov rcx, rdi
call fcn.140007ddb
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
call fcn.140007ddb
cmp bl, 0x12
je 0x140005a1a
lea rsi, [rsp + 0xe0]
mov rcx, rsi
call fcn.14002550d
cmp byte [rsi], 0x12
jne 0x140005c23
call fcn.140003dc7
lea rsi, [rsp + 0xe0]
mov rcx, rsi
mov rdx, rax
call fcn.140025577
cmp byte [rsi], 0x12
jne 0x140005c23
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0xb0], rax
movdqu xmm0, xmmword [rsp + 0xe8]
movdqa xmmword [rsp + 0xa0], xmm0
lea rax, [0x14002aa7a]
mov qword [rsp + 0xe0], rax
mov rcx, qword [rsp + 0xe0]
movabs rax, 0xc398740f78ae343f
mov qword [rsp + 0xe0], rax
mov rdx, qword [rsp + 0xe0]
call fcn.140004561
pxor xmm0, xmm0
movdqu xmmword [rsp + 0xec], xmm0
movdqa xmmword [rsp + 0xe0], xmm0
xor edx, edx
lea rcx, [0x1400304b8]
cmp rdx, 0x18
jae 0x140005545
mov r8, qword [rdx + rcx]
xor r8, qword [rax + rdx]
mov qword [rsp + rdx + 0xe0], r8
add rdx, 8
jmp 0x140005529
mov edx, 0x18
cmp rdx, 0x1b
ja 0x14000557b
movzx r8d, byte [rdx + rcx + 2]
shl r8d, 0x10
movzx r9d, word [rdx + rcx]
add r8d, r9d
add r8d, 0xc3000000
xor r8d, dword [rax + rdx]
mov dword [rsp + rdx + 0xe0], r8d
add rdx, 4
jmp 0x14000554a
movzx ecx, byte [rax + 0x1e]
movzx eax, word [rax + 0x1c]
xor eax, 0x418f
lea rsi, [rsp + 0xe0]
mov word [rsi + 0x1c], ax
xor cl, 0xca
mov byte [rsi + 0x1e], cl
movdqa xmm0, xmmword [rsi]
lea r8, [rsp + 0x290]
movdqa xmmword [r8], xmm0
mov rax, qword [rsi + 0xf]
mov qword [r8 + 0xf], rax
mov eax, dword [rsi + 0x17]
mov dword [r8 + 0x17], eax
mov al, byte [rsi + 0x1b]
mov byte [r8 + 0x1b], al
movzx eax, word [rsi + 0x1c]
mov word [r8 + 0x1c], ax
mov al, byte [rsi + 0x1e]
mov byte [r8 + 0x1e], al
lea rdx, [rsp + 0xa0]
mov r9d, 0x1f
mov rcx, rsi
call fcn.140002d88
cmp byte [rsi], 0x12
jne 0x140005c23
mov rax, qword [rsp + 0xf8]
lea rsi, [rsp + 0x60]
mov qword [rsi + 0x10], rax
movdqu xmm0, xmmword [rsp + 0xe8]
movdqa xmmword [rsi], xmm0
lea rcx, [rsp + 0xa0]
call fcn.140003349
mov rdi, qword [rsi + 0x10]
mov rcx, rsi
call fcn.140003219
cmp rdi, 1
jbe 0x140005a1a
call fcn.140021055
mov rsi, rax
mov rdi, rdx
lea rbx, [rsp + 0xe0]
mov edx, 0x158
mov r8d, 0x1f4
mov rcx, rbx
call fcn.1400205fb
mov qword [rbx + 0x20], rsi
mov qword [rbx + 0x28], rdi
movdqu xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
movdqa xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x70], xmm1
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x80], rax
mov rax, qword [rbx + 0x28]
mov qword [rsp + 0x88], rax
mov ecx, 9
call fcn.140007e3a
mov rdi, rax
mov rbp, rdx
movabs rax, 0x5043206c61746f54
mov qword [rdi], rax
mov byte [rdi + 8], 0x55
mov ecx, 8
mov edx, 0x120
call fcn.140019984
test rax, rax
je 0x140005c23
mov r15, rax
call fcn.140021055
mov r12, rax
mov r13, rdx
call fcn.14001c7a5
shl rdx, 0x20
mov eax, eax
or rax, rdx
movabs rcx, 0x19db1ded53e8000
cmp rax, rcx
jge 0x1400056f2
xor esi, esi
jmp 0x140005724
movabs rcx, 0xfe624e212ac18000
add rax, rcx
xor ebx, ebx
mov ecx, 0x989680
xor edx, edx
div rcx
mov rsi, rax
call sub.KERNEL32.dll_GetTickCount64
mov ecx, 0x3e8
xor edx, edx
div rcx
sub rsi, rax
cmovb rsi, rbx
pxor xmm0, xmm0
lea rbx, [rsp + 0xe0]
movdqu xmmword [rbx + 0x100], xmm0
lea r14, [rsp + 0x60]
movaps xmm1, xmmword [r14]
movaps xmm2, xmmword [r14 + 0x10]
movaps xmm3, xmmword [r14 + 0x20]
movups xmmword [rbx + 0x40], xmm1
movups xmmword [rbx + 0x50], xmm2
movups xmmword [rbx + 0x60], xmm3
movdqu xmmword [rbx + 0xa0], xmm0
movdqu xmmword [rbx + 0xb0], xmm0
mov qword [rbx + 0x110], rdi
mov qword [rbx + 0x118], rbp
mov qword [rbx + 0x120], 9
mov eax, 1
mov qword [rbx + 0x128], rax
movdqu xmmword [rbx + 0x130], xmm0
mov qword [rbx + 0x140], rax
and qword [rbx + 0x158], 0
movdqu xmmword [rbx + 0x148], xmm0
lea rcx, [rsp + 0xa0]
movups xmm1, xmmword [rcx]
movups xmmword [rbx + 0x160], xmm1
and qword [rbx + 0x170], 0
and dword [rbx + 0x178], 0
mov eax, 8
mov qword [rbx + 0x180], rax
movdqu xmmword [rbx + 0x188], xmm0
mov byte [rbx + 0x198], 0
mov qword [rbx + 0xc8], rax
movdqu xmmword [rbx + 0xd0], xmm0
mov qword [rbx + 0xe0], r15
mov qword [rbx + 0xe8], 2
and qword [rbx + 0xf0], 0
and qword [rbx], 0
movups xmm0, xmmword [0x140035850]
movups xmmword [rbx + 0x80], xmm0
movups xmm0, xmmword [0x140035840]
movups xmmword [rbx + 0x70], xmm0
mov qword [rbx + 0x90], r12
mov qword [rbx + 0x98], r13
mov r13, rcx
mov qword [rbx + 0xc0], rsi
mov qword [rbx + 0xf8], rax
lea rsi, [rsp + 0x290]
mov r8d, 0x1a0
mov rcx, rsi
mov rdx, rbx
call sub.msvcrt.dll_memcpy
mov rcx, rsi
call fcn.140021061
mov rcx, rsi
xor edx, edx
call fcn.140021146
mov rcx, qword [rsi + 0xc8]
mov rdx, qword [rsi + 0xd8]
call fcn.1400214ad
mov rcx, rsi
mov edx, 0x10101
call fcn.140021876
mov rcx, qword [rsi + 0xe0]
mov rdx, qword [rsi + 0xf0]
call fcn.140021f43
lea rsi, [rsp + 0x300]
mov rcx, rsi
call fcn.140021745
mov rax, qword [rsi - 0x30]
mov rcx, qword [rsi - 0x28]
add rcx, rax
inc rcx
movdqa xmm0, xmmword [rax]
pmovmskb edx, xmm0
not edx
mov word [r13 + 0x18], dx
mov qword [r13], rax
add rax, 0x10
mov qword [r13 + 8], rax
mov qword [r13 + 0x10], rcx
mov rax, qword [rsi - 0x18]
mov qword [r13 + 0x20], rax
mov rcx, r13
call fcn.140020474
test rax, rax
je 0x140005a21
cmp qword [rax - 0xb0], 0
je 0x1400058ef
mov rax, qword [rax - 0xc0]
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
mov rcx, rbx
call fcn.140019cd4
mov rcx, r14
mov rdx, rbx
call fcn.14001acbd
mov al, byte [rsp + 0x60]
cmp al, 0xa
je 0x1400058ef
cmp al, 9
jne 0x1400058ef
mov r15, qword [rsp + 0x68]
test r15, r15
je 0x1400058ef
mov rdi, qword [rsp + 0x70]
cmp rdi, 2
jne 0x140005964
cmp word [r15], 0x2e2e
jne 0x140005964
test r15, r15
sete al
mov esi, 2
jmp 0x1400059f4
mov r14, r13
mov qword [rsp + 0xe8], r15
mov qword [rsp + 0xf0], rdi
mov byte [rsp + 0xf8], 0
mov qword [rsp + 0xe0], 2
mov rcx, rbx
call fcn.14001c599
mov rbp, rax
mov r12, rdx
mov rcx, rbx
call fcn.14001c599
mov r13, rax
mov rsi, rdx
test rax, rax
je 0x1400059d0
mov rcx, r13
mov rdx, rsi
lea r8, str.description___is_deprecated__use_Display
xor r9d, r9d
call fcn.14000f966
test al, al
je 0x1400059e6
test r15, r15
sete al
mov rsi, rdi
jmp 0x1400059ec
sete al
or r13, rbp
mov r13, r14
lea r14, [rsp + 0x60]
je 0x1400058ef
jmp 0x1400059f4
test r13, r13
sete al
mov r13, r14
lea r14, [rsp + 0x60]
test al, al
cmovne rsi, r12
cmp rsi, 0x80
je 0x140005a0d
cmp rsi, 0x40
jne 0x1400058ef
lea rcx, [rsp + 0x290]
call fcn.140003377
call fcn.14001c788
ud2
lea rcx, [rsp + 0x290]
call fcn.140003377
lea rsi, [rsp + 0xe0]
mov rcx, rsi
call fcn.14002550d
cmp byte [rsi], 0x12
jne 0x140005c23
call fcn.140003dc7
lea rsi, [rsp + 0xe0]
mov rcx, rsi
mov rdx, rax
call fcn.140025577
cmp byte [rsi], 0x12
jne 0x140005c23
lea rbx, [rsp + 0xe0]
mov rax, qword [rbx + 0x18]
mov qword [rsp + 0x50], rax
movdqu xmm0, xmmword [rbx + 8]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, str.Im_just_here_for_the_fields
mov edx, 0x1c
call fcn.1400042d5
mov rcx, rax
call fcn.140003336
lea rsi, str.Win32_VideoControllerCaptionAdapterRAMVideoModeDescription
mov r8d, 0x15
mov rcx, rbx
mov rdx, rsi
call fcn.140002cb6
cmp qword [rbx], 0
je 0x140005b75
mov rbx, qword [rsp + 0xe8]
mov r14, qword [rsp + 0xf0]
mov r15b, 0xe
mov al, byte [rsp + 0x32]
mov byte [rsp + 0x36], al
movzx eax, word [rsp + 0x30]
mov word [rsp + 0x34], ax
mov ecx, 0x28
call fcn.140003f2f
mov rsi, rax
mov byte [rax], r15b
movzx eax, word [rsp + 0x34]
mov word [rsi + 1], ax
mov al, byte [rsp + 0x36]
mov byte [rsi + 3], al
mov dword [rsi + 4], ebp
mov qword [rsi + 8], rbx
mov qword [rsi + 0x10], r14
mov qword [rsi + 0x18], r13
mov qword [rsi + 0x20], r12
mov qword [rsp + 0xe8], rsi
lea r13, fcn.1400032ab
mov qword [rsp + 0xf0], r13
and qword [rsp + 0xe0], 0
lea rcx, [rsp + 0x40]
call fcn.140003349
mov r14, rsi
mov rcx, r14
call qword [r13]
mov r8, qword [r13 + 8]
test r8, r8
je 0x140005b60
mov rdx, qword [r13 + 0x10]
mov rcx, r14
call fcn.1400044ee
nop
add rsp, 0x438
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rax, [0x140030970]
xor edi, edi
lea rbx, [rsp + 0xe0]
xor r14d, r14d
mov r12, r14
mov r14, rax
test r12, r12
je 0x140005bbe
cmp r12, r15
je 0x140005bbe
mov rdx, qword [r12]
mov r8, qword [r12 + 8]
mov rcx, rbx
call fcn.140002cb6
add r12, 0x10
cmp qword [rsp + 0xe0], 0
je 0x140005b8f
jmp 0x140005abf
test dil, 1
jne 0x140005bcf
lea r15, [r14 + 0x30]
mov dil, 1
xor eax, eax
jmp 0x140005b89
mov qword [rsp + 0x280], rsi
mov qword [rsp + 0x288], 0x15
pxor xmm0, xmm0
movdqu xmmword [rsp + 0xd0], xmm0
mov qword [rsp + 0xc8], 1
mov ebx, 2
lea rcx, [0x140030970]
mov eax, 0x30
test rax, rax
je 0x140005c27
mov rdx, qword [rcx + 8]
add rcx, 0x10
add rax, 0xfffffffffffffff0
add rbx, rdx
jae 0x140005c0d
ud2
xor esi, esi
mov rcx, rbx
xor edx, edx
call fcn.140007def
lea r12, [rsp + 0xe8]
mov qword [r12 - 8], rax
mov qword [r12], rdx
and qword [r12 + 8], 0
lea rdx, [0x140030945]
lea r8, [0x14003094c]
lea r14, [rsp + 0xe0]
mov rcx, r14
call fcn.140007a71
mov r13, qword [r14]
mov rax, qword [r14 + 0x10]
lea rcx, [rax + r13]
mov rdi, rbx
sub rdi, rax
lea r15, [0x140030970]
cmp rsi, 0x20
je 0x140005cb8
test rdi, rdi
je 0x140005c23
mov rdx, qword [rsi + r15 + 0x10]
mov r8, qword [rsi + r15 + 0x18]
dec rdi
mov byte [rcx], 0x2c
sub rdi, r8
jb 0x140005c23
lea rbp, [rcx + r8]
inc rbp
inc rcx
call sub.msvcrt.dll_memcpy
add rsi, 0x10
mov rcx, rbp
jmp 0x140005c80
sub rbx, rdi
lea r15, [rsp + 0xe0]
mov qword [r15 + 0x10], rbx
movdqu xmm0, xmmword [r12]
movdqu xmmword [rsp + 0xa8], xmm0
mov qword [rsp + 0xa0], r13
lea rax, [rsp + 0xa0]
mov qword [r15], rax
lea rcx, [0x1400042c3]
mov qword [r15 + 8], rcx
lea rax, [rsp + 0x280]
mov qword [r15 + 0x10], rax
lea rax, [fcn.140010a62]
mov qword [r15 + 0x18], rax
lea rax, [rsp + 0xc8]
mov qword [r15 + 0x20], rax
lea rax, [0x1400302c0]
lea rdx, [rsp + 0x290]
mov qword [rdx], rax
mov eax, 3
mov qword [rdx + 8], rax
and qword [rdx + 0x20], 0
mov qword [r15 + 0x28], rcx
mov qword [rdx + 0x10], r14
mov qword [rdx + 0x18], rax
lea rdi, [rsp + 0x68]
mov rcx, rdi
call fcn.140003ee8
mov rcx, qword [rsp + 0xa0]
mov rdx, qword [rsp + 0xa8]
call fcn.140007ddb
mov rcx, qword [rsp + 0xc8]
mov rdx, qword [rsp + 0xd0]
call fcn.140007ddb
mov rsi, qword [rdi]
mov r12, qword [rdi + 8]
mov rbx, qword [rdi + 0x10]
lea rdx, [0x1400302f0]
mov r8d, 3
mov rcx, r15
call fcn.140025446
mov r15b, byte [r15]
cmp r15b, 0x12
mov qword [rsp + 0x38], r12
jne 0x140005fb1
lea r14, [rsp + 0xe0]
mov rdi, qword [r14 + 8]
mov rcx, r14
mov rdx, rsi
mov r8, rbx
call fcn.140025446
mov r15b, byte [r14]
cmp r15b, 0x12
jne 0x140006032
mov rbx, qword [rsp + 0xe8]
and qword [rsp + 0xe0], 0
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x140005c23
mov rax, qword [rcx]
mov qword [rsp + 0x28], r14
and qword [rsp + 0x20], 0
mov rdx, rdi
mov r8, rbx
mov r9d, 0x30
call qword [rax + 0xa0]
test eax, eax
js 0x1400060a3
lea r14, [rsp + 0xe0]
mov r15, qword [r14]
mov rcx, rbx
call sub.oleaut32.dll_SysFreeString
mov rcx, rdi
call sub.oleaut32.dll_SysFreeString
lea r8, [rsp + 0x290]
mov byte [r8], 0x12
mov rcx, r14
mov rdx, r15
call fcn.140001540
cmp qword [r14], 0
je 0x1400061da
mov qword [rsp + 0x98], rsi
mov ecx, 0xe0
call fcn.1400044f8
test rax, rax
je 0x140005c23
mov rbx, rax
lea r12, [rsp + 0xe0]
mov rax, qword [r12 + 0x30]
mov qword [rbx + 0x30], rax
movdqu xmm0, xmmword [r12]
movups xmm1, xmmword [r12 + 0x10]
movups xmm2, xmmword [r12 + 0x20]
movups xmmword [rbx + 0x20], xmm2
movups xmmword [rbx + 0x10], xmm1
movdqu xmmword [rbx], xmm0
mov r13d, 1
lea rsi, [rsp + 0x290]
lea rdi, [rsp + 0x60]
mov r14d, 4
mov rcx, r12
mov rdx, r15
mov r8, rsi
call fcn.140001540
cmp qword [rsp + 0xe0], 0
je 0x140006079
cmp r13, r14
jne 0x140005f32
mov rbp, r13
inc rbp
je 0x140005c23
lea r14, [r13*2]
cmp r14, rbp
cmovbe r14, rbp
cmp r14, 5
mov eax, 4
cmovb r14, rax
xor edx, edx
movabs rax, 0x24924924924924a
cmp r14, rax
setb al
test r13, r13
je 0x140005f38
imul rcx, r13, 0x38
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x70], rcx
mov ecx, 8
jmp 0x140005f3a
lea rbp, [r13 + 1]
jmp 0x140005f70
xor ecx, ecx
imul r8, r14, 0x38
mov dl, al
shl rdx, 3
mov qword [rsp + 0x68], rcx
lea rcx, [rsp + 0xa0]
mov r9, rdi
call fcn.140007b8a
cmp qword [rsp + 0xa0], 0
jne 0x140006267
mov rbx, qword [rsp + 0xa8]
imul rax, r13, 0x38
mov rcx, qword [rsp + 0x110]
mov qword [rbx + rax + 0x30], rcx
movdqu xmm0, xmmword [rsp + 0xe0]
movups xmm1, xmmword [rsp + 0xf0]
movups xmm2, xmmword [rsp + 0x100]
movups xmmword [rbx + rax + 0x20], xmm2
movups xmmword [rbx + rax + 0x10], xmm1
movdqu xmmword [rbx + rax], xmm0
mov r13, rbp
jmp 0x140005ebc
mov al, byte [rsp + 0xe3]
mov byte [rsp + 0x292], al
movzx eax, word [rsp + 0xe1]
mov word [rsp + 0x290], ax
mov ebp, dword [rsp + 0xe4]
mov rbx, qword [rsp + 0xe8]
mov r14, qword [rsp + 0xf0]
mov r13, qword [rsp + 0xf8]
mov r12, qword [rsp + 0x100]
jmp 0x1400060b8
mov rbp, r13
lea rcx, [rsp + 0x60]
mov qword [rcx + 0x10], rbp
call fcn.140003274
mov rdx, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0x38]
call fcn.140007ddb
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
call fcn.140007ddb
jmp 0x140005478
mov al, byte [rsp + 0xe3]
mov byte [rsp + 0x292], al
movzx eax, word [rsp + 0xe1]
mov word [rsp + 0x290], ax
mov ebp, dword [rsp + 0xe4]
mov rbx, qword [rsp + 0xe8]
mov r14, qword [rsp + 0xf0]
mov r13, qword [rsp + 0xf8]
mov r12, qword [rsp + 0x100]
jmp 0x1400060b0
test r15, r15
je 0x140006087
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x10]
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], r13
mov rsi, qword [rsp + 0x98]
jmp 0x140006206
mov ebp, eax
mov rcx, rbx
call sub.oleaut32.dll_SysFreeString
xor r15d, r15d
mov rcx, rdi
call sub.oleaut32.dll_SysFreeString
mov al, byte [rsp + 0x292]
mov byte [rsp + 0x32], al
movzx eax, word [rsp + 0x290]
mov word [rsp + 0x30], ax
mov rcx, rsi
mov rdx, qword [rsp + 0x38]
call fcn.140007ddb
cmp r15b, 0x12
jne 0x140005ad2
lea rcx, [rsp + 0x40]
call fcn.140003349
mov qword [rsp + 0xe0], rbx
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0xf0], r13
test rbx, rbx
je 0x140005b44
imul r12, r13, 0x38
lea rsi, [0x140030405]
lea rdi, [0x14003040f]
lea r14, [0x140030413]
lea r15, [0x140030419]
test r12, r12
je 0x1400061bf
mov rcx, qword [rbx]
mov rdx, qword [rbx + 0x10]
mov r9d, 0xa
mov r8, rsi
call fcn.1400036aa
test al, al
jne 0x140005a1a
mov rcx, qword [rbx]
mov rdx, qword [rbx + 0x10]
mov r9d, 4
mov r8, rdi
call fcn.1400036aa
test al, al
jne 0x140005a1a
mov rcx, qword [rbx]
mov rdx, qword [rbx + 0x10]
mov r9d, 6
mov r8, r14
call fcn.1400036aa
test al, al
jne 0x140005a1a
lea rbp, [rbx + 0x38]
mov rcx, qword [rbx]
mov rdx, qword [rbx + 0x10]
mov r9d, 2
mov r8, r15
call fcn.1400036aa
add r12, 0xffffffffffffffc8
mov rbx, rbp
test al, al
je 0x140006132
jmp 0x140005a1a
test r13, r13
je 0x140005a1a
lea rcx, [rsp + 0xe0]
call fcn.140003640
jmp 0x140005b60
mov qword [rsp + 0x60], 8
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov ebx, 8
test r15, r15
je 0x140006200
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x10]
xor r13d, r13d
xor r14d, r14d
mov r15b, byte [rsp + 0x290]
cmp r15b, 0x12
jne 0x140006219
jmp 0x1400060d0
mov al, byte [rsp + 0x293]
mov byte [rsp + 0x32], al
movzx eax, word [rsp + 0x291]
mov word [rsp + 0x30], ax
mov ebp, dword [rsp + 0x294]
mov rbx, qword [rsp + 0x298]
mov r14, qword [rsp + 0x2a0]
mov r13, qword [rsp + 0x2a8]
mov r12, qword [rsp + 0x2b0]
lea rcx, [rsp + 0x60]
call fcn.140003640
jmp 0x1400060d0
cmp qword [rsp + 0xa8], 0
jmp 0x140005c23