Function at 0x1800082b0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x180230100]
xor rax, rsp
mov qword [rbp], rax
mov r15, r8
mov rsi, rdx
mov r12, rcx
mov qword [rbp - 0x60], rcx
mov qword [rbp - 0x58], rcx
mov dword [rbp - 0x68], 1
mov byte [rbp - 0x78], 0x5f
mov al, Ordinal_50
mov cl, 0x30
movzx edx, al
mov r8b, Ordinal_60
xor r9d, r9d
xor al, 0x5f
mov byte [rbp - 0x77], al
xor cl, 0x5f
mov byte [rbp - 0x76], cl
xor dl, 0x5f
mov byte [rbp - 0x75], dl
xor r8b, 0x5f
mov byte [rbp - 0x74], r8b
mov byte [rbp - 0x73], r9b
lea rdx, [rbp - 0x77]
mov rcx, r12
call fcn.18000a1d0
nop
mov dword [rbp - 0x68], 1
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
mov ebx, eax
test eax, eax
jns 0x18000847f
movdqa xmm1, xmmword [0x180212a00]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x180212a50]
movdqu xmmword [rsp + 0x60], xmm2
movdqa xmm3, xmmword [0x1802128d0]
movdqu xmmword [rsp + 0x70], xmm3
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], cl
xor byte [rsp + 0x62], cl
xor byte [rsp + 0x63], cl
xor byte [rsp + 0x64], cl
xor byte [rsp + 0x65], cl
xor byte [rsp + 0x66], cl
xor byte [rsp + 0x67], cl
xor byte [rsp + 0x68], cl
xor byte [rsp + 0x69], cl
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
movd eax, xmm3
xor al, cl
mov byte [rsp + 0x70], al
xor byte [rsp + 0x71], cl
xor byte [rsp + 0x72], cl
xor byte [rsp + 0x73], cl
xor byte [rsp + 0x74], cl
xor byte [rsp + 0x75], cl
xor byte [rsp + 0x76], cl
xor byte [rsp + 0x77], cl
xor byte [rsp + 0x78], cl
xor byte [rsp + 0x79], cl
xor byte [rsp + 0x7a], cl
xor byte [rsp + 0x7b], cl
xor byte [rsp + 0x7c], cl
xor byte [rsp + 0x7d], cl
xor byte [rsp + 0x7e], cl
mov byte [rsp + 0x7f], 0
lea rdx, [rsp + 0x51]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.18000cf10
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x18000d0e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1800087d8
xor r14d, r14d
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x38], r14d
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
lea edx, [r14 - 1]
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
mov dword [rbp - 0x70], eax
test eax, eax
jns 0x180008650
movdqa xmm1, xmmword [0x180212ab0]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [str.DIL__]
movdqu xmmword [rsp + 0x60], xmm2
mov cl, 0x60
mov dl, 0x57
movzx r8d, dl
mov r10b, 0x4a
movzx r11d, dl
mov bl, 5
mov dil, 0x46
movzx esi, r10b
mov r14b, 0x41
mov r15b, 0x40
mov r12b, Ordinal_33
movzx r13d, bl
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r9d, xmm1
xor al, r9b
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], r9b
xor byte [rsp + 0x53], r9b
xor byte [rsp + 0x54], r9b
xor byte [rsp + 0x55], r9b
xor byte [rsp + 0x56], r9b
xor byte [rsp + 0x57], r9b
xor byte [rsp + 0x58], r9b
xor byte [rsp + 0x59], r9b
xor byte [rsp + 0x5a], r9b
xor byte [rsp + 0x5b], r9b
xor byte [rsp + 0x5c], r9b
xor byte [rsp + 0x5d], r9b
xor byte [rsp + 0x5e], r9b
xor byte [rsp + 0x5f], r9b
movd eax, xmm2
xor al, r9b
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], r9b
xor byte [rsp + 0x62], r9b
xor byte [rsp + 0x63], r9b
xor byte [rsp + 0x64], r9b
xor byte [rsp + 0x65], r9b
xor byte [rsp + 0x66], r9b
xor byte [rsp + 0x67], r9b
xor byte [rsp + 0x68], r9b
xor byte [rsp + 0x69], r9b
xor byte [rsp + 0x6a], r9b
xor byte [rsp + 0x6b], r9b
xor byte [rsp + 0x6c], r9b
xor byte [rsp + 0x6d], r9b
xor byte [rsp + 0x6e], r9b
xor byte [rsp + 0x6f], r9b
xor cl, r9b
mov byte [rsp + 0x70], cl
xor dl, r9b
mov byte [rsp + 0x71], dl
xor r8b, r9b
mov byte [rsp + 0x72], r8b
xor r10b, r9b
mov byte [rsp + 0x73], r10b
xor r11b, r9b
mov byte [rsp + 0x74], r11b
xor bl, r9b
mov byte [rsp + 0x75], bl
xor dil, r9b
mov byte [rsp + 0x76], dil
xor sil, r9b
mov byte [rsp + 0x77], sil
xor r14b, r9b
mov byte [rsp + 0x78], r14b
xor r15b, r9b
mov byte [rsp + 0x79], r15b
xor r12b, r9b
mov byte [rsp + 0x7a], r12b
xor r13b, r9b
mov byte [rsp + 0x7b], r13b
mov byte [rsp + 0x7c], 0
lea rdx, [rsp + 0x51]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.18000cf10
mov edx, dword [rbp - 0x70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x18000d0e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
mov rax, qword [rbp - 0x60]
jmp 0x1800087db
mov qword [rbp - 0x38], r14
lea rax, [rbp - 0x38]
mov qword [rsp + 0x20], rax
lea r9, [0x1801e6c20]
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [0x1801e6c30]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov ebx, eax
test eax, eax
jns 0x180008802
movdqa xmm1, xmmword [0x180212af0]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x180212a90]
movdqu xmmword [rsp + 0x60], xmm2
movdqa xmm3, xmmword [0x180212a80]
movdqu xmmword [rsp + 0x70], xmm3
mov dl, 0x46
mov r8b, Ordinal_27
mov r9b, 3
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], cl
xor byte [rsp + 0x62], cl
xor byte [rsp + 0x63], cl
xor byte [rsp + 0x64], cl
xor byte [rsp + 0x65], cl
xor byte [rsp + 0x66], cl
xor byte [rsp + 0x67], cl
xor byte [rsp + 0x68], cl
xor byte [rsp + 0x69], cl
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
movd eax, xmm3
xor al, cl
mov byte [rsp + 0x70], al
xor byte [rsp + 0x71], cl
xor byte [rsp + 0x72], cl
xor byte [rsp + 0x73], cl
xor byte [rsp + 0x74], cl
xor byte [rsp + 0x75], cl
xor byte [rsp + 0x76], cl
xor byte [rsp + 0x77], cl
xor byte [rsp + 0x78], cl
xor byte [rsp + 0x79], cl
xor byte [rsp + 0x7a], cl
xor byte [rsp + 0x7b], cl
xor byte [rsp + 0x7c], cl
xor byte [rsp + 0x7d], cl
xor byte [rsp + 0x7e], cl
xor byte [rsp + 0x7f], cl
xor dl, cl
mov byte [rbp - 0x80], dl
xor r8b, cl
mov byte [rbp - 0x7f], r8b
xor r9b, cl
mov byte [rbp - 0x7e], r9b
mov byte [rbp - 0x7d], r14b
lea rdx, [rsp + 0x51]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.18000cf10
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x18000d0e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
mov rax, r12
mov rcx, qword [rbp]
xor rcx, rsp
call fcn.1800d08e0
mov rbx, qword [rsp + 0x168]
add rsp, 0x110
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov qword [rbp - 0x40], r14
mov rax, qword [rbp - 0x38]
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x18]
mov ecx, Ordinal_27
call fcn.1800d0a4c
mov rbx, rax
mov qword [rbp - 0x60], rax
test rax, rax
je 0x180008859
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r14
mov dword [rbx + 0x10], 1
lea rcx, str.ROOTCIMV2
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x180009000
jmp 0x18000885c
mov rbx, r14
mov qword [rbp - 0x60], rbx
test rbx, rbx
je 0x18000900b
lea rax, [rbp - 0x40]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbx]
mov rcx, qword [rbp - 0x38]
call rdi
mov edi, eax
mov ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x1800088d6
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800088b7
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1800088c9
call fcn.1800d084c
mov qword [rbx + 8], r14
mov edx, Ordinal_27
mov rcx, rbx
call fcn.1800d084c
test edi, edi
jns 0x180008a29
movdqa xmm1, xmmword [0x180212900]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x180212940]
movdqu xmmword [rsp + 0x60], xmm2
movdqa xmm3, xmmword [0x180212b10]
movdqu xmmword [rsp + 0x70], xmm3
mov dl, 0x41
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], cl
xor byte [rsp + 0x62], cl
xor byte [rsp + 0x63], cl
xor byte [rsp + 0x64], cl
xor byte [rsp + 0x65], cl
xor byte [rsp + 0x66], cl
xor byte [rsp + 0x67], cl
xor byte [rsp + 0x68], cl
xor byte [rsp + 0x69], cl
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
movd eax, xmm3
xor al, cl
mov byte [rsp + 0x70], al
xor byte [rsp + 0x71], cl
xor byte [rsp + 0x72], cl
xor byte [rsp + 0x73], cl
xor byte [rsp + 0x74], cl
xor byte [rsp + 0x75], cl
xor byte [rsp + 0x76], cl
xor byte [rsp + 0x77], cl
xor byte [rsp + 0x78], cl
xor byte [rsp + 0x79], cl
xor byte [rsp + 0x7a], cl
xor byte [rsp + 0x7b], cl
xor byte [rsp + 0x7c], cl
xor byte [rsp + 0x7d], cl
xor byte [rsp + 0x7e], cl
xor byte [rsp + 0x7f], cl
xor dl, cl
mov byte [rbp - 0x80], dl
mov byte [rbp - 0x7f], 0
lea rdx, [rsp + 0x51]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.18000cf10
mov edx, edi
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x18000d0e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp - 0x38]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
jmp 0x1800087d1
mov dword [rsp + 0x38], r14d
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xa]
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov r13d, eax
test eax, eax
jns 0x180008bca
movdqa xmm1, xmmword [0x180212b70]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x180212b90]
movdqu xmmword [rsp + 0x60], xmm2
mov cl, 0x6b
mov r8b, 0x76
movzx r9d, cl
mov r10b, reloc.WS2_32.dll_gethostname
mov r11b, 0x7a
movzx ebx, r8b
mov dil, 0x7d
mov sil, 0x7c
mov r14b, reloc.WLDAP32.dll_Ordinal_35
movzx r15d, r10b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd edx, xmm1
xor al, dl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], dl
xor byte [rsp + 0x53], dl
xor byte [rsp + 0x54], dl
xor byte [rsp + 0x55], dl
xor byte [rsp + 0x56], dl
xor byte [rsp + 0x57], dl
xor byte [rsp + 0x58], dl
xor byte [rsp + 0x59], dl
xor byte [rsp + 0x5a], dl
xor byte [rsp + 0x5b], dl
xor byte [rsp + 0x5c], dl
xor byte [rsp + 0x5d], dl
xor byte [rsp + 0x5e], dl
xor byte [rsp + 0x5f], dl
movd eax, xmm2
xor al, dl
xor byte [rsp + 0x61], dl
xor byte [rsp + 0x62], dl
xor byte [rsp + 0x63], dl
xor byte [rsp + 0x64], dl
xor byte [rsp + 0x65], dl
xor byte [rsp + 0x66], dl
xor byte [rsp + 0x67], dl
xor byte [rsp + 0x68], dl
xor byte [rsp + 0x69], dl
xor byte [rsp + 0x6a], dl
xor byte [rsp + 0x6b], dl
xor byte [rsp + 0x6c], dl
xor byte [rsp + 0x6d], dl
xor byte [rsp + 0x6e], dl
xor byte [rsp + 0x6f], dl
xor cl, dl
xor r8b, dl
xor r9b, dl
xor r10b, dl
xor r11b, dl
xor bl, dl
xor dil, dl
xor sil, dl
xor r14b, dl
xor r15b, dl
lea rdx, [rsp + 0x51]
mov byte [rsp + 0x60], al
mov byte [rsp + 0x7a], 0
mov byte [rsp + 0x79], r15b
mov byte [rsp + 0x78], r14b
mov byte [rsp + 0x77], sil
mov byte [rsp + 0x76], dil
mov byte [rsp + 0x75], bl
mov byte [rsp + 0x74], r11b
mov byte [rsp + 0x73], r10b
mov byte [rsp + 0x72], r9b
mov byte [rsp + 0x71], r8b
mov byte [rsp + 0x70], cl
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.18000cf10
mov edx, r13d
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x18000d0e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp - 0x40]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x38]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
jmp 0x1800087d1
mov qword [rbp - 0x30], r14
mov rax, qword [rbp - 0x40]
mov rcx, qword [rax]
mov r14, qword [rcx + 0xa0]
mov ecx, Ordinal_27
call fcn.1800d0a4c
mov rbx, rax
mov qword [rbp - 0x70], rax
xor r13d, r13d
test rax, rax
je 0x180008c19
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r13
mov dword [rbx + 0x10], 1
mov rcx, rsi
call fcn.1800d1c20
mov qword [rbx], rax
jmp 0x180008c1c
mov rbx, r13
mov qword [rbp - 0x50], rbx
test rbx, rbx
je 0x18000900b
mov rsi, qword [rbx]
mov ecx, Ordinal_27
call fcn.1800d0a4c
mov rdi, rax
mov qword [rbp - 0x70], rax
test rax, rax
je 0x180008c6a
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rax
mov qword [rdi + 8], r13
mov dword [rdi + 0x10], 1
lea rcx, [0x180210ea8]
call fcn.1800d1c20
mov qword [rdi], rax
jmp 0x180008c6d
mov rdi, r13
mov qword [rbp - 0x48], rdi
test rdi, rdi
je 0x180008ff5
lea rax, [rbp - 0x30]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov r9d, Ordinal_50
mov r8, rsi
mov rdx, qword [rdi]
mov rcx, qword [rbp - 0x40]
call r14
mov r13d, eax
mov ecx, 0xffffffff
lock xadd dword [rdi + 0x10], ecx
cmp ecx, 1
jne 0x180008ce5
mov rcx, qword [rdi]
test rcx, rcx
je 0x180008cc2
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
xor esi, esi
mov qword [rdi], rsi
jmp 0x180008cc4
xor esi, esi
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x180008cd6
call fcn.1800d084c
mov qword [rdi + 8], rsi
mov edx, Ordinal_27
mov rcx, rdi
call fcn.1800d084c
jmp 0x180008ce7
xor esi, esi
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x180008d26
mov rcx, qword [rbx]
test rcx, rcx
je 0x180008d07
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], rsi
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x180008d19
call fcn.1800d084c
mov qword [rbx + 8], rsi
mov edx, Ordinal_27
mov rcx, rbx
call fcn.1800d084c
test r13d, r13d
jns 0x180008e22
movdqa xmm1, xmmword [0x180212a40]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x180212a30]
movdqu xmmword [rsp + 0x60], xmm2
mov cl, 0x33
mov r8b, reloc.WLDAP32.dll_Ordinal_46
movzx r9d, cl
mov r10b, 0x61
mov r11b, Ordinal_35
movzx ebx, r8b
mov dil, 0x25
mov sil, 0x24
mov r14b, 0x7b
movzx r15d, r10b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd edx, xmm1
xor al, dl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], dl
xor byte [rsp + 0x53], dl
xor byte [rsp + 0x54], dl
xor byte [rsp + 0x55], dl
xor byte [rsp + 0x56], dl
xor byte [rsp + 0x57], dl
xor byte [rsp + 0x58], dl
xor byte [rsp + 0x59], dl
xor byte [rsp + 0x5a], dl
xor byte [rsp + 0x5b], dl
xor byte [rsp + 0x5c], dl
xor byte [rsp + 0x5d], dl
xor byte [rsp + 0x5e], dl
xor byte [rsp + 0x5f], dl
movd eax, xmm2
xor al, dl
xor byte [rsp + 0x61], dl
xor byte [rsp + 0x62], dl
xor byte [rsp + 0x63], dl
xor byte [rsp + 0x64], dl
xor byte [rsp + 0x65], dl
xor byte [rsp + 0x66], dl
xor byte [rsp + 0x67], dl
xor byte [rsp + 0x68], dl
xor byte [rsp + 0x69], dl
xor byte [rsp + 0x6a], dl
xor byte [rsp + 0x6b], dl
xor byte [rsp + 0x6c], dl
xor byte [rsp + 0x6d], dl
xor byte [rsp + 0x6e], dl
xor byte [rsp + 0x6f], dl
xor cl, dl
xor r8b, dl
xor r9b, dl
xor r10b, dl
xor r11b, dl
xor bl, dl
xor dil, dl
xor sil, dl
xor r14b, dl
xor r15b, dl
lea rdx, [rsp + 0x51]
jmp 0x180008b50
xor edi, edi
mov qword [rbp - 0x28], rdi
mov dword [rbp - 8], edi
mov rcx, qword [rbp - 0x30]
test rcx, rcx
je 0x180008fcb
nop dword [rax + rax]
mov rax, qword [rcx]
lea rdx, [rbp - 8]
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 0x28]
mov edx, 0xffffffff
lea r8d, [rdx + 2]
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
cmp dword [rbp - 8], 0
je 0x180008fcb
mov rcx, qword [rbp - 0x28]
mov rax, qword [rcx]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x20]
xor r8d, r8d
mov rdx, r15
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
test eax, eax
js 0x180008fb4
mov rcx, qword [rbp - 0x18]
call fcn.1800d1b00
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x180008ea0
mov rcx, qword [r12 + 0x18]
cmp rbx, rcx
ja 0x180008edb
mov rdi, r12
cmp rcx, 0xf
jbe 0x180008ec0
mov rdi, qword [r12]
mov qword [r12 + 0x10], rbx
mov r8, rbx
mov rdx, rax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
xor edi, edi
jmp 0x180008eec
mov r9, rax
xor r8d, r8d
mov rdx, rbx
mov rcx, r12
call fcn.18000e490
mov rdx, r12
lea rcx, [rsp + 0x50]
call fcn.180008170
mov rbx, rax
cmp r12, rax
je 0x180008f71
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x180008f3d
mov rcx, qword [r12]
inc rdx
cmp rdx, 0x1000
jb 0x180008f38
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180008fee
mov rcx, r8
call fcn.1800d084c
mov qword [r12 + 0x10], rdi
mov qword [r12 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r12], 0
movups xmm0, xmmword [rbx]
movups xmmword [r12], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [r12 + 0x10], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x180008faa
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008fa5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008fee
call fcn.1800d084c
lea rcx, [rbp - 0x20]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rbp - 0x28]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x30]
test rcx, rcx
jne 0x180008e40
mov rcx, qword [rbp - 0x40]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x38]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x30]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
jmp 0x1800087d1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ecx, 0x8007000e
call fcn.1800d1af0
nop
mov ecx, 0x8007000e
call fcn.1800d1af0
nop
mov ecx, 0x8007000e
call fcn.1800d1af0
int3