Function at 0x14007c000
Capabilities:
Connect to wmi namespace via wbemlocator
Encode data using xor

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1c0
movaps xmmword [r11 - 0x38], xmm6
movaps xmmword [r11 - 0x48], xmm7
mov rax, qword [0x140391620]
xor rax, rsp
mov qword [rsp + 0x190], rax
mov r14, rcx
mov qword [rsp + 0xc8], rcx
xor ebx, ebx
mov r13d, ebx
mov dword [rsp + 0x98], ebx
mov qword [r11 - 0xe0], rbx
mov qword [r11 - 0xc8], 0xf
mov qword [r11 - 0xd0], rbx
mov byte [rsp + 0x108], bl
mov qword [r11 - 0x100], rbx
mov qword [r11 - 0xe8], 0xf
mov qword [r11 - 0xf0], rbx
mov byte [rsp + 0xe8], bl
lea ecx, [rbx + 0x40]
call fcn.140255070
mov rsi, rax
mov qword [rsp + 0x50], rax
lea rdi, [rax + 0x40]
mov qword [rsp + 0x60], rdi
mov qword [rax], rbx
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x20], rbx
mov qword [rax + 0x30], rbx
mov qword [rax + 0x38], 0xf
mov byte [rax + 0x20], bl
lea r15, [rax + 0x40]
mov qword [rsp + 0x58], r15
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
jns 0x14007c1c4
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x50], rbx
mov qword [r14], rsi
mov qword [r14 + 8], r15
mov qword [r14 + 0x10], rdi
mov rdx, qword [rsp + 0x100]
cmp rdx, 0x10
jb 0x14007c141
inc rdx
mov rcx, qword [rsp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c13c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d271
call fcn.1402550ac
mov qword [rsp + 0xf8], rbx
mov qword [rsp + 0x100], 0xf
mov byte [rsp + 0xe8], 0
mov rdx, qword [rsp + 0x120]
cmp rdx, 0x10
jb 0x14007c1a0
inc rdx
mov rcx, qword [rsp + 0x108]
mov r8, rcx
cmp rdx, 0x1000
jb 0x14007c19b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub r8, rcx
add r8, 0xfffffffffffffff8
cmp r8, 0x1f
ja 0x14007d277
call fcn.1402550ac
mov qword [rsp + 0x118], rbx
mov qword [rsp + 0x120], 0xf
mov byte [rsp + 0x108], 0
mov rax, r14
jmp 0x14007d165
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], ebx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 - 1]
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
jns 0x14007c2de
call qword [sym.imp.ole32.dll_CoUninitialize]
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x50], rbx
mov qword [r14], rsi
mov qword [r14 + 8], r15
mov qword [r14 + 0x10], rdi
mov rdx, qword [rsp + 0x100]
cmp rdx, 0x10
jb 0x14007c25b
inc rdx
mov rcx, qword [rsp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c256
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d271
call fcn.1402550ac
mov qword [rsp + 0xf8], rbx
mov qword [rsp + 0x100], 0xf
mov byte [rsp + 0xe8], 0
mov rdx, qword [rsp + 0x120]
cmp rdx, 0x10
jb 0x14007c2ba
inc rdx
mov rcx, qword [rsp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c2b5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d277
call fcn.1402550ac
mov qword [rsp + 0x118], rbx
mov qword [rsp + 0x120], 0xf
mov byte [rsp + 0x108], 0
mov rax, r14
jmp 0x14007d165
mov qword [rsp + 0x78], rbx
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
lea r9, [0x140325610]
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [0x140325600]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x14007c3f5
call qword [sym.imp.ole32.dll_CoUninitialize]
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x50], rbx
mov qword [r14], rsi
mov qword [r14 + 8], r15
mov qword [r14 + 0x10], rdi
mov rdx, qword [rsp + 0x100]
cmp rdx, 0x10
jb 0x14007c372
inc rdx
mov rcx, qword [rsp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c36d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d271
call fcn.1402550ac
mov qword [rsp + 0xf8], rbx
mov qword [rsp + 0x100], 0xf
mov byte [rsp + 0xe8], 0
mov rdx, qword [rsp + 0x120]
cmp rdx, 0x10
jb 0x14007c3d1
inc rdx
mov rcx, qword [rsp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c3cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d277
call fcn.1402550ac
mov qword [rsp + 0x118], rbx
mov qword [rsp + 0x120], 0xf
mov byte [rsp + 0x108], 0
mov rax, r14
jmp 0x14007d165
mov qword [rsp + 0x70], rbx
mov ecx, 0x18
call fcn.140255070
mov rdi, rax
mov qword [rsp + 0x90], rax
test rax, rax
je 0x14007c43a
mov qword [rax + 8], rbx
mov dword [rax + 0x10], 1
lea rcx, [0x14033fbf0]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14007d19c
jmp 0x14007c43d
mov rdi, rbx
mov qword [rsp + 0x90], rdi
test rdi, rdi
je 0x14007d1a7
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
lea rdx, [rsp + 0x70]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rdi]
call qword [rax + 0x18]
mov r12d, eax
mov ecx, 0xffffffff
lock xadd dword [rdi + 0x10], ecx
cmp ecx, 1
jne 0x14007c4c1
mov rcx, qword [rdi]
test rcx, rcx
je 0x14007c4a2
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], rbx
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14007c4b4
call fcn.1402550ac
mov qword [rdi + 8], rbx
mov edx, 0x18
mov rcx, rdi
call fcn.1402550ac
test r12d, r12d
jns 0x14007c5c0
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x50], rbx
mov qword [r14], rsi
mov qword [r14 + 8], r15
mov qword [r14 + 0x10], rax
mov rdx, qword [rsp + 0x100]
cmp rdx, 0x10
jb 0x14007c53d
inc rdx
mov rcx, qword [rsp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c538
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d271
call fcn.1402550ac
mov qword [rsp + 0xf8], rbx
mov qword [rsp + 0x100], 0xf
mov byte [rsp + 0xe8], 0
mov rdx, qword [rsp + 0x120]
cmp rdx, 0x10
jb 0x14007c59c
inc rdx
mov rcx, qword [rsp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c597
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d277
call fcn.1402550ac
mov qword [rsp + 0x118], rbx
mov qword [rsp + 0x120], 0xf
mov byte [rsp + 0x108], 0
mov rax, r14
jmp 0x14007d165
mov dword [rsp + 0x38], ebx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xa]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x14007c6f7
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x50], rbx
mov qword [r14], rsi
mov qword [r14 + 8], r15
mov qword [r14 + 0x10], rax
mov rdx, qword [rsp + 0x100]
cmp rdx, 0x10
jb 0x14007c674
inc rdx
mov rcx, qword [rsp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c66f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d271
call fcn.1402550ac
mov qword [rsp + 0xf8], rbx
mov qword [rsp + 0x100], 0xf
mov byte [rsp + 0xe8], 0
mov rdx, qword [rsp + 0x120]
cmp rdx, 0x10
jb 0x14007c6d3
inc rdx
mov rcx, qword [rsp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c6ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d277
call fcn.1402550ac
mov qword [rsp + 0x118], rbx
mov qword [rsp + 0x120], 0xf
mov byte [rsp + 0x108], 0
mov rax, r14
jmp 0x14007d165
mov qword [rsp + 0x80], rbx
movdqa xmm6, xmmword [0x140344700]
movdqa xmm7, xmmword [0x1403446d0]
mov dword [rsp + 0x148], 0x4242415c
mov word [rsp + 0x14c], 0x5c4b
mov r12d, 0x3000
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [r12 + rcx]
cmp dword [0x1403a2590], eax
jg 0x14007d1b1
lea rdx, [0x1403a2640]
cmp byte [0x1403a2666], 0
je 0x14007c78d
mov rax, rbx
movdqa xmm1, xmmword [0x140344640]
movdqu xmm0, xmmword [rax + rdx]
pxor xmm0, xmm1
movdqu xmmword [rax + rdx], xmm0
add rax, 0x10
cmp rax, 0x20
jb 0x14007c761
cmp rax, 0x27
jae 0x14007c78d
nop
xor byte [rax + rdx], 0x2e
inc rax
cmp rax, 0x27
jb 0x14007c780
lea rcx, [rsp + 0xa8]
call fcn.14007b460
mov rdi, rax
lea rdx, [0x14033fbec]
lea rcx, [rsp + 0xa0]
call fcn.14007b460
nop
mov rcx, qword [rdi]
test rcx, rcx
je 0x14007c7bf
mov r8, qword [rcx]
jmp 0x14007c7c2
mov r8, rbx
mov rax, qword [rax]
test rax, rax
je 0x14007c7cf
mov rdx, qword [rax]
jmp 0x14007c7d2
mov rdx, rbx
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
lea r9, [rsp + 0x80]
mov qword [rsp + 0x28], r9
mov qword [rsp + 0x20], rbx
mov r9d, 0x30
call qword [rax + 0xa0]
mov edi, eax
lea rcx, [rsp + 0xa0]
call fcn.14007b560
nop
lea rcx, [rsp + 0xa8]
call fcn.14007b560
test edi, edi
jns 0x14007c91e
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x50], rbx
mov qword [r14], rsi
mov qword [r14 + 8], r15
mov qword [r14 + 0x10], rax
mov rdx, qword [rsp + 0x100]
cmp rdx, 0x10
jb 0x14007c89b
inc rdx
mov rcx, qword [rsp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c896
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d271
call fcn.1402550ac
mov qword [rsp + 0xf8], rbx
mov qword [rsp + 0x100], 0xf
mov byte [rsp + 0xe8], 0
mov rdx, qword [rsp + 0x120]
cmp rdx, 0x10
jb 0x14007c8fa
inc rdx
mov rcx, qword [rsp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c8f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d277
call fcn.1402550ac
mov qword [rsp + 0x118], rbx
mov qword [rsp + 0x120], 0xf
mov byte [rsp + 0x108], 0
mov rax, r14
jmp 0x14007d165
mov qword [rsp + 0x88], rbx
mov dword [rsp + 0x68], ebx
lea rsi, [0x14033add0]
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x14007cb7a
mov rax, qword [rcx]
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x88]
mov edx, 0xffffffff
lea r8d, [rdx + 2]
call qword [rax + 0x20]
cmp dword [rsp + 0x68], 0
je 0x14007cb72
mov rcx, qword [rsp + 0x88]
mov rax, qword [rcx]
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0xd0]
xor r8d, r8d
lea rdx, str.Name
call qword [rax + 0x20]
mov rdx, qword [rsp + 0xd8]
lea rcx, [rsp + 0xb0]
call fcn.14007b4d0
nop
mov rdi, qword [rax]
test rdi, rdi
je 0x14007c9cd
mov rax, qword [rdi + 8]
test rax, rax
jne 0x14007c9d0
mov rcx, qword [rdi]
call fcn.140256290
mov qword [rdi + 8], rax
jmp 0x14007c9d0
mov rax, rbx
mov qword [rsp + 0x128], rbx
mov qword [rsp + 0x138], rbx
mov qword [rsp + 0x140], 0xf
mov byte [rsp + 0x128], 0
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14007ca00
mov rdx, rax
lea rcx, [rsp + 0x128]
call fcn.140012e90
nop
lea r8, [0x140334b10]
cmp qword [rsp + 0xf8], 0
cmova r8, rsi
mov r9, 0xffffffffffffffff
inc r9
cmp byte [r8 + r9], 0
jne 0x14007ca36
xor edx, edx
lea rcx, [rsp + 0x128]
call fcn.140058260
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x150], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x160], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or r13d, 2
lea rdx, [rsp + 0x150]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
lea rcx, [rsp + 0xe8]
call fcn.140013100
nop
mov rdx, qword [rsp + 0x168]
cmp rdx, 0x10
jb 0x14007caf3
inc rdx
mov rcx, qword [rsp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007caed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d219
call fcn.1402550ac
nop
mov rdx, qword [rsp + 0x140]
cmp rdx, 0x10
jb 0x14007cb36
inc rdx
mov rcx, qword [rsp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007cb31
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d21f
call fcn.1402550ac
mov qword [rsp + 0x138], rbx
mov qword [rsp + 0x140], 0xf
mov byte [rsp + 0x128], 0
lea rcx, [rsp + 0xb0]
call fcn.14007b560
lea rcx, [rsp + 0xd0]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x14007c931
mov rcx, qword [rsp + 0x80]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x88]
mov rax, qword [rcx]
call qword [rax + 0x10]
movdqa xmm6, xmmword [0x140344700]
movdqa xmm7, xmmword [0x1403446e0]
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [r12 + rcx]
cmp dword [0x1403a2668], eax
jg 0x14007d225
lea rdx, [0x1403a25b0]
cmp byte [0x1403a25d0], 0
je 0x14007cc0f
mov rax, rbx
movdqa xmm2, xmmword [0x140344640]
nop word [rax + rax]
movdqu xmm0, xmmword [rax + rdx]
movdqa xmm1, xmm2
pxor xmm1, xmm0
movdqu xmmword [rax + rdx], xmm1
add rax, 0x10
cmp rax, 0x20
jb 0x14007cbe0
cmp rax, 0x21
jae 0x14007cc0f
xor byte [rax + rdx], 0x2e
inc rax
cmp rax, 0x21
jb 0x14007cc02
lea rcx, [rsp + 0xc0]
call fcn.14007b460
mov rdi, rax
lea rdx, [0x14033fbec]
lea rcx, [rsp + 0xb8]
call fcn.14007b460
nop
mov rcx, qword [rdi]
test rcx, rcx
je 0x14007cc41
mov r8, qword [rcx]
jmp 0x14007cc44
mov r8, rbx
mov rax, qword [rax]
test rax, rax
je 0x14007cc51
mov rdx, qword [rax]
jmp 0x14007cc54
mov rdx, rbx
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
lea r10, [rsp + 0x80]
mov qword [rsp + 0x28], r10
mov qword [rsp + 0x20], rbx
mov r9d, 0x30
call qword [rax + 0xa0]
mov edi, eax
lea rcx, [rsp + 0xb8]
call fcn.14007b560
nop
lea rcx, [rsp + 0xc0]
call fcn.14007b560
test edi, edi
jns 0x14007cdb0
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x60], rbx
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x58], rbx
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x50], rbx
mov qword [r14], rax
mov qword [r14 + 8], rcx
mov qword [r14 + 0x10], rdx
mov rdx, qword [rsp + 0x100]
cmp rdx, 0x10
jb 0x14007cd27
inc rdx
mov rcx, qword [rsp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007cd22
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d271
call fcn.1402550ac
mov qword [rsp + 0xf8], rbx
mov qword [rsp + 0x100], 0xf
mov byte [rsp + 0xe8], 0
mov rdx, qword [rsp + 0x120]
cmp rdx, 0x10
jb 0x14007cd86
inc rdx
mov rcx, qword [rsp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007cd81
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d277
call fcn.1402550ac
mov qword [rsp + 0x118], rbx
mov qword [rsp + 0x120], 0xf
mov byte [rsp + 0x108], 0
mov rax, r14
jmp 0x14007d165
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x14007cff2
mov rax, qword [rcx]
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x88]
mov edx, 0xffffffff
lea r8d, [rdx + 2]
call qword [rax + 0x20]
cmp dword [rsp + 0x68], 0
je 0x14007cff2
mov rcx, qword [rsp + 0x88]
mov rax, qword [rcx]
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0xd0]
xor r8d, r8d
lea rdx, str.Name
call qword [rax + 0x20]
mov rdx, qword [rsp + 0xd8]
lea rcx, [rsp + 0x90]
call fcn.14007b4d0
nop
mov rdi, qword [rax]
test rdi, rdi
je 0x14007ce4c
mov rax, qword [rdi + 8]
test rax, rax
jne 0x14007ce4f
mov rcx, qword [rdi]
call fcn.140256290
mov qword [rdi + 8], rax
jmp 0x14007ce4f
mov rax, rbx
mov qword [rsp + 0x128], rbx
mov qword [rsp + 0x138], rbx
mov qword [rsp + 0x140], 0xf
mov byte [rsp + 0x128], 0
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14007ce80
mov rdx, rax
lea rcx, [rsp + 0x128]
call fcn.140012e90
nop
lea r8, [0x140334b10]
cmp qword [rsp + 0x118], 0
cmova r8, rsi
mov r9, 0xffffffffffffffff
inc r9
cmp byte [r8 + r9], 0
jne 0x14007ceb6
xor edx, edx
lea rcx, [rsp + 0x128]
call fcn.140058260
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x170], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x180], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or r13d, 4
lea rdx, [rsp + 0x170]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
lea rcx, [rsp + 0x108]
call fcn.140013100
nop
mov rdx, qword [rsp + 0x188]
cmp rdx, 0x10
jb 0x14007cf73
inc rdx
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007cf6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d27d
call fcn.1402550ac
nop
mov rdx, qword [rsp + 0x140]
cmp rdx, 0x10
jb 0x14007cfb6
inc rdx
mov rcx, qword [rsp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007cfb1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d283
call fcn.1402550ac
mov qword [rsp + 0x138], rbx
mov qword [rsp + 0x140], 0xf
mov byte [rsp + 0x128], 0
lea rcx, [rsp + 0x90]
call fcn.14007b560
lea rcx, [rsp + 0xd0]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x14007cdb0
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x80]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x88]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
jmp 0x14007d037
lea rax, [rsp + 0x108]
mov rdi, qword [rsp + 0x50]
cmp rdi, rax
je 0x14007d073
lea rdx, [rsp + 0x108]
cmp qword [rsp + 0x120], 0x10
cmovae rdx, qword [rsp + 0x108]
mov r8, qword [rsp + 0x118]
mov rcx, rdi
call fcn.140012e90
lea rcx, [rdi + 0x20]
lea rax, [rsp + 0xe8]
cmp rcx, rax
je 0x14007d0ab
lea rdx, [rsp + 0xe8]
cmp qword [rsp + 0x100], 0x10
cmovae rdx, qword [rsp + 0xe8]
mov r8, qword [rsp + 0xf8]
call fcn.140012e90
mov qword [r14], rdi
mov rax, qword [rsp + 0x58]
mov qword [r14 + 8], rax
mov rax, qword [rsp + 0x60]
mov qword [r14 + 0x10], rax
mov rdx, qword [rsp + 0x100]
cmp rdx, 0x10
jb 0x14007d103
inc rdx
mov rcx, qword [rsp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d0fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d289
call fcn.1402550ac
mov qword [rsp + 0xf8], rbx
mov qword [rsp + 0x100], 0xf
mov byte [rsp + 0xe8], 0
mov rdx, qword [rsp + 0x120]
cmp rdx, 0x10
jb 0x14007d162
inc rdx
mov rcx, qword [rsp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d15d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d28f
call fcn.1402550ac
mov rax, r14
mov rcx, qword [rsp + 0x190]
xor rcx, rsp
call fcn.140255050
lea r11, [rsp + 0x1c0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov ecx, 0x8007000e
call fcn.140256280
nop
mov ecx, 0x8007000e
call fcn.140256280
lea rcx, [0x1403a2590]
call fcn.14025550c
cmp dword [0x1403a2590], 0xffffffff
jne 0x14007c746
movaps xmmword [0x1403a2640], xmm6
movaps xmmword [0x1403a2650], xmm7
mov eax, dword [rsp + 0x148]
mov dword [0x1403a2660], eax
movzx eax, word [rsp + 0x14c]
mov word [0x1403a2664], ax
mov byte [0x1403a2666], 0x2e
lea rcx, [0x140298d50]
call fcn.140255924
lea rcx, [0x1403a2590]
call fcn.1402554ac
nop
jmp 0x14007c746
call fcn.140260990
nop
call fcn.140260990
nop
lea rcx, [0x1403a2668]
call fcn.14025550c
cmp dword [0x1403a2668], 0xffffffff
jne 0x14007cbba
movaps xmmword [0x1403a25b0], xmm6
movaps xmmword [0x1403a25c0], xmm7
mov byte [0x1403a25d0], 0x2e
lea rcx, [0x140298d30]
call fcn.140255924
lea rcx, [0x1403a2668]
call fcn.1402554ac
nop
jmp 0x14007cbba
call fcn.140260990
nop
call fcn.140260990
nop
call fcn.140260990
nop
call fcn.140260990
nop
call fcn.140260990
nop
call fcn.140260990
int3