Function at 0x1400b6080
Capabilities:
Get hostname

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x298
movaps xmmword [rsp + 0x280], xmm6
mov rsi, rcx
mov rax, qword [0x140297028]
xor rax, rsp
mov qword [rsp + 0x278], rax
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x28], rax
mov qword [rcx + 0x10], rax
movaps xmm6, xmmword [0x140268c70]
movups xmmword [rcx], xmm6
cmp byte [rdx + 0x17], 0
js 0x1400b6c03
mov rax, qword [rdx + 0x10]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rdx]
movups xmmword [rsi], xmm0
movzx ecx, byte [rsi + 0x17]
mov eax, ecx
and eax, 0x7f
test cl, cl
mov rdx, qword [rsi + 8]
cmovs rax, rdx
test rax, rax
je 0x1400b6715
mov r8d, ecx
and r8d, 0x7e
test cl, cl
cmovs r8, rdx
cmp r8, 2
jb 0x1400b61bd
test cl, cl
js 0x1400b6d75
test rcx, rcx
je 0x1400b6d72
movzx edx, word [rsi]
cmp edx, 0x22
je 0x1400b6144
cmp edx, 0x27
jne 0x1400b61bd
cmp word [rsi + rcx*2 - 2], 0x27
je 0x1400b614c
jmp 0x1400b61bd
cmp word [rsi + rcx*2 - 2], 0x22
jne 0x1400b61bd
cmp rax, 0xc
jae 0x1400b6db7
dec rax
mov byte [rsi + 0x17], al
mov rcx, rsi
mov word [rcx + rax*2], 0
movzx eax, byte [rsi + 0x17]
mov rcx, rax
mov rbx, rsi
test al, al
jns 0x1400b617a
mov rcx, qword [rsi + 8]
mov rbx, qword [rsi]
xor edx, edx
test rcx, rcx
setne dl
mov rdi, rcx
sub rdi, rdx
cmp rcx, 2
jb 0x1400b61a1
lea rdx, [rbx + rdx*2]
lea r8, [rdi + rdi]
mov rcx, rbx
call fcn.140184b40
mov al, byte [rsi + 0x17]
test al, al
js 0x1400b6bea
cmp rdi, 0xb
jae 0x1400b6dba
mov byte [rsi + 0x17], dil
mov word [rbx + rdi*2], 0
lea rcx, str.shell32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rdi, rax
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x38], rax
test rdi, rdi
je 0x1400b61f6
lea rdx, [0x14027757d]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rdi
xor r12d, r12d
lea rdi, str._windows
lea rax, [rsp + 0x70]
mov qword [rsp + 0x30], rax
jmp 0x1400b62b5
mov rdx, r10
sub rdx, r11
add r11, r14
add r11, 2
sub rdx, r14
sar rdx, 1
cmp rdx, rax
jge 0x1400b6284
jmp 0x1400b62a8
mov r13, r11
add r13, r14
je 0x1400b62a8
xor edx, edx
movzx r15d, word [r13 + rdx*2]
cmp r15w, word [rbp + rdx*2]
jne 0x1400b6214
inc rdx
cmp rax, rdx
jne 0x1400b6238
cmp r13, r8
je 0x1400b62a8
sub r13, rcx
mov rax, r13
add rax, 2
je 0x1400b62a8
sar r13, 1
jmp 0x1400b62f7
mov rdx, qword [rsi + 8]
cmp rdx, rax
jl 0x1400b62a8
lea r8, [rcx + rdx*2]
movzx r9d, word [rbp]
lea r10, [rcx + rdx*2]
add r10, 0xfffffffffffffffe
mov r11, rcx
mov r14, rdx
sub r14, rax
inc r14
je 0x1400b62a8
inc rdx
xor r14d, r14d
cmp word [r11 + r14], r9w
je 0x1400b622e
add r14, 2
dec rdx
cmp rax, rdx
jne 0x1400b6295
inc r12
cmp r12, 7
je 0x1400b6532
mov rbx, r12
shl rbx, 4
mov rbp, qword [rbx + rdi]
test rbp, rbp
je 0x1400b6d69
mov rcx, rbp
call fcn.140180ff4
movzx edx, byte [rsi + 0x17]
mov rcx, rsi
test dl, dl
jns 0x1400b62df
mov rcx, qword [rsi]
test rax, rax
je 0x1400b62f4
test dl, dl
js 0x1400b6267
and edx, 0x7f
jmp 0x1400b626b
xor r13d, r13d
mov rcx, rbp
call fcn.140180ff4
mov rbp, rax
mov r8d, 0x208
lea r14, [rsp + 0x70]
mov rcx, r14
mov dl, 0xaa
call fcn.1401851f0
mov r8d, dword [rbx + rdi + 8]
xor ecx, ecx
mov rdx, r14
xor r9d, r9d
mov rax, qword [rsp + 0x38]
call qword [case.0x1401e9be0.0]
test eax, eax
jne 0x1400b633a
mov word [rsp + 0x70], 0
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x60], rax
movaps xmmword [rsp + 0x50], xmm6
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x70]
call fcn.1401bf270
mov al, byte [rsp + 0x67]
movzx r9d, al
mov ecx, r9d
and ecx, 0x7f
test r9b, r9b
mov rdx, qword [rsp + 0x58]
mov r8, rcx
cmovs r8, rdx
test r8, r8
je 0x1400b6423
test al, al
jns 0x1400b6bf3
test rdx, rdx
je 0x1400b6d6f
mov r10, qword [rsp + 0x50]
mov r9, rdx
cmp word [r10 + r9*2 - 2], 0x5c
jne 0x1400b6423
movzx r10d, byte [rsi + 0x17]
mov ebx, r10d
and ebx, 0x7f
test r10b, r10b
mov r11, qword [rsi + 8]
cmovs rbx, r11
mov r9, rbp
add r9, r13
cmp rbx, r9
jbe 0x1400b6423
test r10b, r10b
jns 0x1400b6c1a
cmp r11, r9
jb 0x1400b6c26
mov r11, qword [rsi]
cmp word [r11 + r9*2], 0x5c
jne 0x1400b6423
lea rdx, [r8 - 1]
lea rcx, [rsp + 0x50]
test al, al
jns 0x1400b63f5
mov rcx, qword [rsp + 0x50]
js 0x1400b6407
cmp r8, 0xc
jae 0x1400b6d6c
mov byte [rsp + 0x67], dl
jmp 0x1400b640c
mov qword [rsp + 0x58], rdx
mov word [rcx + r8*2 - 2], 0
movzx eax, byte [rsp + 0x67]
mov rdx, qword [rsp + 0x58]
mov ecx, eax
and ecx, 0x7f
test al, al
cmovs rcx, rdx
mov r9, qword [rsp + 0x50]
lea rax, [rsp + 0x50]
cmovns r9, rax
mov qword [rsp + 0x20], rcx
mov rcx, rsi
mov rdx, r13
mov r8, rbp
call fcn.1401e5e70
cmp byte [rsp + 0x67], 0
jns 0x1400b62a8
mov rcx, qword [rsp + 0x50]
call fcn.14018039c
jmp 0x1400b62a8
mov r13, rdi
add r13, rbx
je 0x1400b65af
cmp word [rdi + rbx + 2], 0x7b
jne 0x1400b649c
cmp word [rdi + rbx + 4], 0x75
jne 0x1400b649c
cmp word [rdi + rbx + 6], 0x73
jne 0x1400b649c
cmp word [rdi + rbx + 8], 0x65
jne 0x1400b649c
cmp word [rdi + rbx + 0xa], 0x72
je 0x1400b6c29
mov r13, r11
sub r13, rdi
add rdi, rbx
add rdi, 2
sub r13, rbx
cmp r13, 0x18
jge 0x1400b6592
jmp 0x1400b65af
mov r15, r9
add r15, r10
je 0x1400b65f0
cmp word [r9 + r10 + 2], 0x7b
jne 0x1400b64f8
cmp word [r9 + r10 + 4], 0x6d
jne 0x1400b64f8
cmp word [r9 + r10 + 6], 0x61
jne 0x1400b64f8
cmp word [r9 + r10 + 8], 0x63
jne 0x1400b64f8
cmp word [r9 + r10 + 0xa], 0x68
je 0x1400b68ca
mov rcx, r8
sub rcx, r9
add r9, r10
add r9, 2
sub rcx, r10
cmp rcx, 0x1e
jge 0x1400b65d1
jmp 0x1400b65f0
movabs r12, 0xaaaaaaaaaaaaaaaa
jmp 0x1400b655a
movabs r13, 0xaaaaaaaaaaaaaaaa
jmp 0x1400b661c
lea rcx, str.advapi32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r14, rax
test rax, rax
je 0x1400b6517
lea rdx, [0x140277622]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, rax
movzx edx, byte [rsi + 0x17]
mov ecx, edx
and ecx, 0x7f
test dl, dl
mov rax, qword [rsi]
mov r8, qword [rsi + 8]
mov r9, rsi
cmovs r9, rax
mov r13, rcx
cmovs r13, r8
cmp r13, 0xc
jl 0x1400b65af
lea r10, [r9 + r13*2]
lea r11, [r9 + r13*2]
add r11, 0xfffffffffffffffe
add r13, r13
mov rdi, r9
shr r13, 1
add r13, 0xfffffffffffffff5
xor ebx, ebx
cmp word [rdi + rbx], 0x24
je 0x1400b6464
add rbx, 2
dec r13
jne 0x1400b659b
test dl, dl
cmovns rax, rsi
cmovs rcx, r8
cmp rcx, 0xf
jl 0x1400b65f0
lea rdx, [rax + rcx*2]
lea r8, [rax + rcx*2]
add r8, 0xfffffffffffffffe
add rcx, rcx
mov r9, rax
shr rcx, 1
add rcx, 0xfffffffffffffff2
xor r10d, r10d
cmp word [r9 + r10], 0x24
je 0x1400b64bb
add r10, 2
dec rcx
jne 0x1400b65db
lea rcx, str.wtsapi32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r15, rax
test rax, rax
je 0x1400b6523
lea rdx, [0x140277631]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r13, rax
lea rcx, str.wtsapi32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r12, rax
test rax, rax
je 0x1400b6646
lea rdx, [0x14027766a]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x28], rax
movzx edx, byte [rsi + 0x17]
mov ecx, edx
and ecx, 0x7f
test dl, dl
mov rax, qword [rsi]
mov r8, qword [rsi + 8]
mov r9, rsi
cmovs r9, rax
mov rbp, rcx
cmovs rbp, r8
cmp rbp, 0xe
jl 0x1400b669b
lea r10, [r9 + rbp*2]
lea r11, [r9 + rbp*2]
add r11, 0xfffffffffffffffe
add rbp, rbp
mov rdi, r9
shr rbp, 1
add rbp, 0xfffffffffffffff3
xor ebx, ebx
cmp word [rdi + rbx], 0x24
je 0x1400b6798
add rbx, 2
dec rbp
jne 0x1400b6687
test dl, dl
cmovns rax, rsi
cmovs rcx, r8
cmp rcx, 0xf
jl 0x1400b66d8
lea rdx, [rax + rcx*2]
lea r8, [rax + rcx*2]
add r8, 0xfffffffffffffffe
add rcx, rcx
mov r9, rax
shr rcx, 1
add rcx, 0xfffffffffffffff2
xor r10d, r10d
cmp word [r9 + r10], 0x24
je 0x1400b6744
add r10, 2
dec rcx
jne 0x1400b66c7
test r12, r12
je 0x1400b66e6
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
test r15, r15
je 0x1400b66f4
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
test r14, r14
mov rdi, qword [rsp + 0x40]
je 0x1400b6707
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
test rdi, rdi
je 0x1400b6715
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rcx, qword [rsp + 0x278]
xor rcx, rsp
call fcn.1401830b0
mov rax, rsi
movaps xmm6, xmmword [rsp + 0x280]
add rsp, 0x298
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rbp, r9
add rbp, r10
je 0x1400b66d8
cmp word [r9 + r10 + 2], 0x7b
jne 0x1400b6779
cmp word [r9 + r10 + 4], 0x73
jne 0x1400b6779
cmp word [r9 + r10 + 6], 0x65
jne 0x1400b6779
cmp word [r9 + r10 + 8], 0x73
jne 0x1400b6779
cmp word [r9 + r10 + 0xa], 0x73
je 0x1400b67f7
mov rcx, r8
sub rcx, r9
add r9, r10
add r9, 2
sub rcx, r10
cmp rcx, 0x1e
jge 0x1400b66bd
jmp 0x1400b66d8
mov rbp, rdi
add rbp, rbx
je 0x1400b669b
cmp word [rdi + rbx + 2], 0x7b
jne 0x1400b67d8
cmp word [rdi + rbx + 4], 0x63
jne 0x1400b67d8
cmp word [rdi + rbx + 6], 0x6c
jne 0x1400b67d8
cmp word [rdi + rbx + 8], 0x69
jne 0x1400b67d8
cmp word [rdi + rbx + 0xa], 0x65
jne 0x1400b67d8
cmp word [rdi + rbx + 0xc], 0x6e
je 0x1400b6871
mov rbp, r11
sub rbp, rdi
add rdi, rbx
add rdi, 2
sub rbp, rbx
cmp rbp, 0x1c
jge 0x1400b667e
jmp 0x1400b669b
cmp word [r9 + r10 + 0xc], 0x69
jne 0x1400b6779
cmp word [r9 + r10 + 0xe], 0x6f
jne 0x1400b6779
cmp word [r9 + r10 + 0x10], 0x6e
jne 0x1400b6779
cmp word [r9 + r10 + 0x12], 0x5f
jne 0x1400b6779
cmp word [r9 + r10 + 0x14], 0x6e
jne 0x1400b6779
cmp word [r9 + r10 + 0x16], 0x61
jne 0x1400b6779
cmp word [r9 + r10 + 0x18], 0x6d
jne 0x1400b6779
cmp word [r9 + r10 + 0x1a], 0x65
jne 0x1400b6779
cmp word [r9 + r10 + 0x1c], 0x7d
jne 0x1400b6779
jmp 0x1400b69ef
cmp word [rdi + rbx + 0xe], 0x74
jne 0x1400b67d8
cmp word [rdi + rbx + 0x10], 0x5f
jne 0x1400b67d8
cmp word [rdi + rbx + 0x12], 0x6e
jne 0x1400b67d8
cmp word [rdi + rbx + 0x14], 0x61
jne 0x1400b67d8
cmp word [rdi + rbx + 0x16], 0x6d
jne 0x1400b67d8
cmp word [rdi + rbx + 0x18], 0x65
jne 0x1400b67d8
cmp word [rdi + rbx + 0x1a], 0x7d
jne 0x1400b67d8
jmp 0x1400b6987
cmp word [r9 + r10 + 0xc], 0x69
jne 0x1400b64f8
cmp word [r9 + r10 + 0xe], 0x6e
jne 0x1400b64f8
cmp word [r9 + r10 + 0x10], 0x65
jne 0x1400b64f8
cmp word [r9 + r10 + 0x12], 0x5f
jne 0x1400b64f8
cmp word [r9 + r10 + 0x14], 0x6e
jne 0x1400b64f8
cmp word [r9 + r10 + 0x16], 0x61
jne 0x1400b64f8
cmp word [r9 + r10 + 0x18], 0x6d
jne 0x1400b64f8
cmp word [r9 + r10 + 0x1a], 0x65
jne 0x1400b64f8
cmp word [r9 + r10 + 0x1c], 0x7d
jne 0x1400b64f8
cmp r15, rdx
je 0x1400b65f0
sub r15, rax
mov rax, r15
add rax, 2
je 0x1400b65f0
lea r12, [rsp + 0x50]
mov dword [r12], 0
mov ecx, 5
xor edx, edx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
mov ecx, dword [r12]
test rcx, rcx
je 0x1400b65f0
jmp 0x1400b6b4b
cmp rbp, r10
je 0x1400b669b
sub rbp, r9
mov r9, rbp
add r9, 2
je 0x1400b669b
lea r9, [rsp + 0x50]
mov qword [r9], 0
lea rax, [rsp + 0x4c]
mov dword [rax], 0
mov qword [rsp + 0x20], rax
xor ecx, ecx
mov edx, 0xffffffff
mov r8d, 0xa
mov rax, r13
call qword [case.0x1401e9be0.0]
test eax, eax
jne 0x1400b6ac8
movzx edx, byte [rsi + 0x17]
mov rax, qword [rsi]
mov r8, qword [rsi + 8]
mov ecx, edx
and ecx, 0x7f
jmp 0x1400b669b
cmp rbp, rdx
je 0x1400b66d8
sub rbp, rax
mov rax, rbp
add rax, 2
je 0x1400b66d8
lea r9, [rsp + 0x50]
mov qword [r9], 0
lea rax, [rsp + 0x4c]
mov dword [rax], 0
mov qword [rsp + 0x20], rax
xor ecx, ecx
mov edx, 0xffffffff
mov r8d, 6
mov rax, r13
call qword [case.0x1401e9be0.0]
test eax, eax
je 0x1400b66d8
sar rbp, 1
movabs rax, 0xaaaaaaaaaaaaaaaa
lea r13, [rsp + 0x70]
mov qword [r13 + 0x10], rax
movaps xmmword [r13], xmm6
mov rdx, qword [rsp + 0x50]
mov rcx, r13
call fcn.1401bf270
movzx eax, byte [r13 + 0x17]
test al, al
js 0x1400b6a78
and eax, 0x7f
jmp 0x1400b6a82
mov rax, qword [rsp + 0x78]
mov r13, qword [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov r8d, 0xf
mov rcx, rsi
mov rdx, rbp
mov r9, r13
call fcn.1401e5e70
mov rcx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x28]
call qword [case.0x1401e9be0.0]
cmp byte [rsp + 0x87], 0
jns 0x1400b66d8
mov rcx, qword [rsp + 0x70]
call fcn.14018039c
jmp 0x1400b66d8
sar rbp, 1
movabs rax, 0xaaaaaaaaaaaaaaaa
lea rdi, [rsp + 0x70]
mov qword [rdi + 0x10], rax
movaps xmmword [rdi], xmm6
mov rdx, qword [rsp + 0x50]
mov rcx, rdi
call fcn.1401bf270
movzx eax, byte [rdi + 0x17]
test al, al
js 0x1400b6afb
and eax, 0x7f
jmp 0x1400b6b05
mov rax, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov r8d, 0xe
mov rcx, rsi
mov rdx, rbp
mov r9, rdi
call fcn.1401e5e70
mov rcx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x28]
call qword [case.0x1401e9be0.0]
cmp byte [rsp + 0x87], 0
jns 0x1400b69da
mov rcx, qword [rsp + 0x70]
call fcn.14018039c
jmp 0x1400b69da
sar r15, 1
add rcx, rcx
call fcn.140180694
mov r12, rax
lea r8, [rsp + 0x50]
mov ecx, 5
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
movabs rax, 0xaaaaaaaaaaaaaaaa
lea r13, [rsp + 0x70]
mov qword [r13 + 0x10], rax
movaps xmmword [r13], xmm6
mov rcx, r13
mov rdx, r12
call fcn.1401bf270
movzx eax, byte [r13 + 0x17]
test al, al
js 0x1400b6b9d
and eax, 0x7f
jmp 0x1400b6ba7
mov rax, qword [rsp + 0x78]
mov r13, qword [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov r8d, 0xf
mov rcx, rsi
mov rdx, r15
mov r9, r13
call fcn.1401e5e70
cmp byte [rsp + 0x87], 0
jns 0x1400b6bd4
mov rcx, qword [rsp + 0x70]
call fcn.14018039c
test r12, r12
je 0x1400b65f0
mov rcx, r12
call fcn.1401805c4
jmp 0x1400b65f0
mov qword [rsi + 8], rdi
jmp 0x1400b61b7
je 0x1400b6d6f
lea r10, [rsp + 0x50]
jmp 0x1400b639c
mov rax, qword [rdx]
mov r8, qword [rdx + 8]
mov rcx, rsi
mov rdx, rax
call fcn.14001e050
jmp 0x1400b60e5
mov r11, rsi
cmp r9, r10
jbe 0x1400b63db
int3
cmp word [rdi + rbx + 0xc], 0x5f
jne 0x1400b649c
cmp word [rdi + rbx + 0xe], 0x6e
jne 0x1400b649c
cmp word [rdi + rbx + 0x10], 0x61
jne 0x1400b649c
cmp word [rdi + rbx + 0x12], 0x6d
jne 0x1400b649c
cmp word [rdi + rbx + 0x14], 0x65
jne 0x1400b649c
cmp word [rdi + rbx + 0x16], 0x7d
jne 0x1400b649c
cmp r13, r10
je 0x1400b65af
sub r13, r9
mov r9, r13
add r9, 2
je 0x1400b65af
lea rbp, [rsp + 0x50]
mov dword [rbp], 0
xor ecx, ecx
mov rdx, rbp
mov rax, r12
call qword [case.0x1401e9be0.0]
mov ecx, dword [rbp]
test rcx, rcx
jne 0x1400b6cc1
movzx edx, byte [rsi + 0x17]
mov rax, qword [rsi]
mov r8, qword [rsi + 8]
mov ecx, edx
and ecx, 0x7f
jmp 0x1400b65af
sar r13, 1
add rcx, rcx
call fcn.140180694
mov rbp, rax
lea rdx, [rsp + 0x50]
mov rcx, rax
mov rax, r12
call qword [case.0x1401e9be0.0]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x80], rax
movaps xmmword [rsp + 0x70], xmm6
lea rcx, [rsp + 0x70]
mov rdx, rbp
call fcn.1401bf270
movzx eax, byte [rsp + 0x87]
test al, al
js 0x1400b6d15
and eax, 0x7f
jmp 0x1400b6d24
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x20], rax
mov r8d, 0xc
mov rcx, rsi
mov rdx, r13
mov r9, qword [rsp + 0x30]
call fcn.1401e5e70
cmp byte [rsp + 0x87], 0
jns 0x1400b6d53
mov rcx, qword [rsp + 0x70]
call fcn.14018039c
test rbp, rbp
je 0x1400b6cac
mov rcx, rbp
call fcn.1401805c4
jmp 0x1400b6cac
int3
int3
int3
int3
test rdx, rdx
je 0x1400b6d72
mov rcx, qword [rsi]
movzx r8d, word [rcx]
cmp r8d, 0x22
je 0x1400b6d9f
cmp r8d, 0x27
jne 0x1400b61bd
cmp word [rcx + rdx*2 - 2], 0x27
jne 0x1400b61bd
jmp 0x1400b6dab
cmp word [rcx + rdx*2 - 2], 0x22
jne 0x1400b61bd
dec rax
mov qword [rsi + 8], rax
jmp 0x1400b615f
int3
int3