Function at 0x7ff65ed431b0
Capabilities:
Get hostname
Get session user name

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x2a0
mov rax, qword [str.e41k2]
xor rax, rsp
mov qword [rsp + 0x290], rax
mov rsi, rcx
mov rdx, qword [rcx + 0x140]
mov rax, qword [rdx + 0x30]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx + 8]
mov r13d, dword [rax + 0xc]
cmp byte [rdx + 0x2e8], 0
je 0x7ff65ed43a3e
mov byte [rdx + 0x2e8], 0
mov rdx, qword [rsi + 0x140]
mov rax, qword [rdx + 0x30]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx + 8]
mov rcx, qword [rax + 0x1a0]
mov eax, dword [rcx + 0x68]
mov dword [rdx + 0x444], eax
mov dword [rsp + 0x40], 0x10
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x270]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
xor r14d, r14d
mov qword [rsp + 0x168], r14
mov qword [rsp + 0x178], r14
mov qword [rsp + 0x180], 7
mov word [rsp + 0x168], r14w
lea rax, [rsp + 0x270]
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp word [rax + r8*2], r14w
jne 0x7ff65ed43282
lea rdx, [rsp + 0x270]
lea rcx, [rsp + 0x168]
call fcn.7ff65ec85900
nop
lea r8, [rsp + 0x168]
cmp qword [rsp + 0x180], 8
cmovae r8, qword [rsp + 0x168]
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
mov r9d, dword [rsp + 0x178]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd rbx, eax
mov qword [rsp + 0x128], r14
mov qword [rsp + 0x138], r14
mov qword [rsp + 0x140], 0xf
mov rdx, rbx
xor r8d, r8d
lea rcx, [rsp + 0x128]
call fcn.7ff65eca3590
lea rcx, [rsp + 0x128]
cmp qword [rsp + 0x140], 0x10
cmovae rcx, qword [rsp + 0x128]
lea r8, [rsp + 0x168]
cmp qword [rsp + 0x180], 8
cmovae r8, qword [rsp + 0x168]
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rcx
mov r9d, dword [rsp + 0x178]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov rbx, qword [rsi + 0x140]
add rbx, 0x358
lea rax, [rsp + 0x128]
cmp rbx, rax
je 0x7ff65ed433cc
mov rcx, rbx
call fcn.7ff65ec85a50
movups xmm0, xmmword [rsp + 0x128]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rsp + 0x138]
movups xmmword [rbx + 0x10], xmm1
mov qword [rsp + 0x138], r14
mov eax, 0xf
mov qword [rsp + 0x140], rax
mov byte [rsp + 0x128], 0
jmp 0x7ff65ed433d4
mov rax, qword [rsp + 0x140]
cmp rax, 0x10
jb 0x7ff65ed43410
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ed4340b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ed440cc
call fcn.7ff65efe070c
mov qword [rsp + 0x138], r14
mov qword [rsp + 0x140], 0xf
mov byte [rsp + 0x128], 0
mov rdx, qword [rsp + 0x180]
cmp rdx, 8
jb 0x7ff65ed43474
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ed4346f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ed440d2
call fcn.7ff65efe070c
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x270]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov qword [rsp + 0x188], r14
mov qword [rsp + 0x198], r14
mov qword [rsp + 0x1a0], 7
mov word [rsp + 0x188], r14w
lea rax, [rsp + 0x270]
mov r8, rdi
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x7ff65ed434c0
lea rdx, [rsp + 0x270]
lea rcx, [rsp + 0x188]
call fcn.7ff65ec85900
nop
lea r8, [rsp + 0x188]
cmp qword [rsp + 0x1a0], 8
cmovae r8, qword [rsp + 0x188]
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
mov r9d, dword [rsp + 0x198]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd rbx, eax
mov qword [rsp + 0x148], r14
mov qword [rsp + 0x158], r14
mov qword [rsp + 0x160], 0xf
mov rdx, rbx
xor r8d, r8d
lea rcx, [rsp + 0x148]
call fcn.7ff65eca3590
lea rcx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0x10
cmovae rcx, qword [rsp + 0x148]
lea r8, [rsp + 0x188]
cmp qword [rsp + 0x1a0], 8
cmovae r8, qword [rsp + 0x188]
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rcx
mov r9d, dword [rsp + 0x198]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov rbx, qword [rsi + 0x140]
add rbx, 0x378
lea rax, [rsp + 0x148]
cmp rbx, rax
je 0x7ff65ed4360b
mov rcx, rbx
call fcn.7ff65ec85a50
movups xmm0, xmmword [rsp + 0x148]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rsp + 0x158]
movups xmmword [rbx + 0x10], xmm1
mov qword [rsp + 0x158], r14
mov eax, 0xf
mov qword [rsp + 0x160], rax
mov byte [rsp + 0x148], 0
jmp 0x7ff65ed43613
mov rax, qword [rsp + 0x160]
cmp rax, 0x10
jb 0x7ff65ed4364f
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ed4364a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ed440d8
call fcn.7ff65efe070c
mov qword [rsp + 0x158], r14
mov qword [rsp + 0x160], 0xf
mov byte [rsp + 0x148], 0
mov rdx, qword [rsp + 0x1a0]
cmp rdx, 8
jb 0x7ff65ed436b3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ed436ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ed440de
call fcn.7ff65efe070c
xor ecx, ecx
call fcn.7ff65efee0f8
mov rcx, rax
call fcn.7ff65efedb74
mov rax, qword [rsi + 0x140]
mov dword [rax + 0x440], 6
lea rcx, [rsp + 0x60]
call fcn.7ff65ed3d870
nop
mov r15, qword [rsp + 0x60]
mov rdx, r15
lea rcx, [rsp + 0x210]
call fcn.7ff65ecbd290
mov rbx, rax
mov r12, qword [rsi + 0x140]
add r12, 0x398
cmp r12, rax
je 0x7ff65ed43732
mov rcx, r12
call fcn.7ff65ec85a50
movups xmm0, xmmword [rbx]
movups xmmword [r12], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [r12 + 0x10], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rsp + 0x228]
cmp rdx, 0x10
jb 0x7ff65ed43775
inc rdx
mov rcx, qword [rsp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ed43770
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ed440e4
call fcn.7ff65efe070c
lea rdx, [r15 + 0x20]
lea rcx, [rsp + 0x230]
call fcn.7ff65ecbd290
mov rbx, rax
mov r12, qword [rsi + 0x140]
add r12, 0x3b8
cmp r12, rax
je 0x7ff65ed437c5
mov rcx, r12
call fcn.7ff65ec85a50
movups xmm0, xmmword [rbx]
movups xmmword [r12], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [r12 + 0x10], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rsp + 0x248]
cmp rdx, 0x10
jb 0x7ff65ed43808
inc rdx
mov rcx, qword [rsp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ed43803
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ed440ea
call fcn.7ff65efe070c
mov rdx, qword [rsi + 0x140]
mov rax, qword [rdx + 0x30]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx + 8]
mov rcx, qword [rax + 0x10]
lea rbx, [0x7ff65f146170]
mov rax, rbx
test rcx, rcx
cmovne rax, rcx
lea rcx, [rdx + 0x318]
mov r8, rdi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x7ff65ed43840
mov rdx, rax
call fcn.7ff65ec85ad0
mov rdx, qword [rsi + 0x140]
mov rax, qword [rdx + 0x30]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx + 8]
mov rcx, qword [rax + 0x20]
mov rax, rbx
test rcx, rcx
cmovne rax, rcx
lea rcx, [rdx + 0x338]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x7ff65ed43880
mov rdx, rax
call fcn.7ff65ec85ad0
mov rdx, qword [rsi + 0x140]
mov rax, qword [rdx + 0x30]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx + 8]
mov rcx, qword [rax + 0x30]
mov rax, rbx
test rcx, rcx
cmovne rax, rcx
lea rcx, [rdx + 0x3d8]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x7ff65ed438c0
mov rdx, rax
call fcn.7ff65ec85ad0
mov rdx, qword [rsi + 0x140]
mov rax, qword [rdx + 0x30]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx + 8]
mov rcx, qword [rax + 0x40]
test rcx, rcx
cmovne rbx, rcx
lea rcx, [rdx + 0x3f8]
inc rdi
cmp byte [rbx + rdi], 0
jne 0x7ff65ed438f7
mov r8, rdi
mov rdx, rbx
call fcn.7ff65ec85ad0
mov rdx, qword [rsi + 0x140]
add rdx, 0x3d8
lea rcx, [rsp + 0xa8]
call fcn.7ff65ec983f0
mov rdx, qword [rsi + 0x140]
add rdx, 0x7f0
mov rcx, rax
call fcn.7ff65ed3d5f0
mov rdx, qword [rsi + 0x140]
add rdx, 0x3f8
lea rcx, [rsp + 0xc8]
call fcn.7ff65ec983f0
mov rdx, qword [rsi + 0x140]
add rdx, 0x808
mov rcx, rax
call fcn.7ff65ed3d5f0
mov rdx, qword [rsi + 0x140]
add rdx, 0x318
lea rcx, [rsp + 0xe8]
call fcn.7ff65ec983f0
mov rdx, qword [rsi + 0x140]
add rdx, 0x820
mov rcx, rax
call fcn.7ff65ed3d5f0
mov rcx, rsi
call fcn.7ff65ed44450
mov rdx, qword [rsi + 0x140]
add rdx, 0x338
lea rcx, [rsp + 0x108]
call fcn.7ff65ec983f0
mov rdx, qword [rsi + 0x140]
add rdx, 0x838
mov rcx, rax
call fcn.7ff65ed3d5f0
mov rcx, rsi
call fcn.7ff65ed45d90
nop
test r15, r15
je 0x7ff65ed43a41
mov rbx, r15
mov rdi, qword [rsp + 0x68]
cmp r15, rdi
je 0x7ff65ed43a03
mov rcx, rbx
call fcn.7ff65ec85820
add rbx, 0x20
cmp rbx, rdi
jne 0x7ff65ed439f2
mov rdx, qword [rsp + 0x70]
sub rdx, r15
and rdx, 0xffffffffffffffe0
mov rax, r15
cmp rdx, 0x1000
jb 0x7ff65ed43a34
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ed440f0
mov rcx, r15
call fcn.7ff65efe070c
jmp 0x7ff65ed43a41
xor r14d, r14d
mov rdx, qword [rsi + 0x140]
mov rax, qword [rdx + 0x30]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx + 8]
mov r15d, r14d
cmp dword [rax + 8], 0x64
cmovbe r15d, dword [rax + 8]
lea rax, [rsp + 0x78]
mov qword [rsp + 0x48], rax
add rdx, 0x808
lea rcx, [rsp + 0x78]
call fcn.7ff65ed48220
mov rbx, rax
mov rdx, qword [rsi + 0x140]
add rdx, 0x7f0
lea rcx, [rsp + 0x90]
call fcn.7ff65ed48220
mov rcx, qword [rsi + 0x140]
mov rdx, qword [rcx + 0x30]
mov rcx, qword [rdx + 0x10]
mov rdx, qword [rcx + 8]
movzx r9d, byte [rdx + 0x70]
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x250]
call fcn.7ff65ed3cbf0
mov rbx, rax
mov rdi, qword [rsi + 0x140]
add rdi, 0x418
cmp rdi, rax
je 0x7ff65ed43aff
mov rcx, rdi
call fcn.7ff65ec85a50
movups xmm0, xmmword [rbx]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rsp + 0x268]
cmp rdx, 0x10
jb 0x7ff65ed43b42
inc rdx
mov rcx, qword [rsp + 0x250]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff65ed43b3d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff65ed440f6
call fcn.7ff65efe070c
mov r8, qword [rsi + 0x140]
lea rdx, [r8 + 0x418]
cmp qword [r8 + 0x430], 0x10
jb 0x7ff65ed43b61
mov rdx, qword [r8 + 0x418]
cmp qword [r8 + 0x428], 4
jne 0x7ff65ed43c83
mov rcx, r14
lea r9, str.none
nop dword [rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r9 + rcx - 1]
jne 0x7ff65ed43b99
cmp rcx, 4
jne 0x7ff65ed43b80
mov eax, r14d
jmp 0x7ff65ed43b9e
sbb eax, eax
or eax, 1
test eax, eax
jne 0x7ff65ed43c83
mov byte [r8 + 0x2ea], al
mov rdx, qword [rsi + 0x140]
cmp byte [rdx + 0x2e9], al
je 0x7ff65ed43bf2
test r15d, r15d
jg 0x7ff65ed43bfb
xor edx, edx
mov rcx, rsi
call fcn.7ff65ed41af0
nop dword [rax + rax]
mov rcx, qword [rsi + 0x140]
mov eax, r14d
cmp byte [rcx + 0x2e9], 0
setne al
add eax, 2
mov dword [rcx + 0x440], eax
jmp 0x7ff65ed43ca6
cmp dword [rdx + 0x444], 0
jbe 0x7ff65ed43bc1
cmp byte [rdx + 0x23], 1
je 0x7ff65ed43bd0
mov rax, qword [rdx + 0x30]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx + 8]
mov rcx, qword [rax + 0x1a0]
cmp byte [rcx], 0
je 0x7ff65ed43c1f
cmp byte [rdx + 0x21], 0
jne 0x7ff65ed43bd0
mov byte [rdx + 0x23], 1
mov ecx, 0x110
call fcn.7ff65efe06d0
mov rdi, rax
mov qword [rsp + 0x58], rax
lea rdx, [rsi + 0x18]
mov rcx, rax
call fcn.7ff65ee19280
nop
mov qword [0x7ff65f42f620], rdi
mov rax, qword [rsi + 0x140]
cmp byte [rax + 0x20], 0
je 0x7ff65ed43bd0
mov eax, r14d
xchg byte [0x7ff65f191341], al
lea rcx, [0x7ff65f191358]
lea rax, [0x7ff65f191370]
lock inc qword [rcx]
add rcx, 8
cmp rcx, rax
jne 0x7ff65ed43c71
jmp 0x7ff65ed43bd0
mov byte [r8 + 0x2ea], 1
xor edx, edx
mov rcx, rsi
call fcn.7ff65ed41af0
mov rax, qword [rsi + 0x140]
mov dword [rax + 0x440], 4
test r13d, r13d
jle 0x7ff65ed43d34
xor ecx, ecx
call fcn.7ff65efee0f8
mov rcx, qword [rsi + 0x140]
mov rdx, qword [rcx + 0x858]
add rdx, 0x1e
cmp rax, rdx
jle 0x7ff65ed43d05
call fcn.7ff65ed3ed80
mov ebx, eax
mov rcx, qword [rsi + 0x140]
cmp dword [rcx + 0x850], eax
je 0x7ff65ed43d05
xor ecx, ecx
call fcn.7ff65efee0f8
mov rcx, qword [rsi + 0x140]
mov qword [rcx + 0x858], rax
mov rcx, qword [rsi + 0x140]
mov dword [rcx + 0x850], ebx
xor ecx, ecx
call fcn.7ff65efee0f8
mov r8, qword [rsi + 0x140]
imul ecx, r13d, 0x3c
movsxd rdx, ecx
add rdx, qword [r8 + 0x858]
cmp rax, rdx
jle 0x7ff65ed43d34
cmp dword [r8 + 0x850], 0
je 0x7ff65ed43d34
mov al, 1
jmp 0x7ff65ed43d3d
mov r8, qword [rsi + 0x140]
xor al, al
mov byte [r8 + 0x2e9], al
mov rdx, qword [rsi + 0x140]
mov rax, qword [rdx + 0x30]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx + 8]
mov r8, qword [rax + 0x1a0]
mov ecx, dword [r8 + 0x68]
movzx eax, byte [rdx + 0x2e9]
test al, al
je 0x7ff65ed43d77
cmp ecx, r15d
jne 0x7ff65ed43d83
jmp 0x7ff65ed4404e
cmp ecx, dword [rdx + 0x444]
je 0x7ff65ed4404e
test al, al
je 0x7ff65ed43d97
cmp ecx, r15d
je 0x7ff65ed43d97
mov dword [r8 + 0x68], r15d
mov rdx, qword [rsi + 0x140]
mov rax, rdx
cmp byte [rdx + 0x2e9], 0
jne 0x7ff65ed43dcd
mov r8d, dword [rdx + 0x444]
cmp ecx, r8d
je 0x7ff65ed43dcd
mov rax, qword [rdx + 0x30]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx + 8]
mov rcx, qword [rax + 0x1a0]
mov dword [rcx + 0x68], r8d
mov rax, qword [rsi + 0x140]
cmp byte [rax + 0x2e9], 0
je 0x7ff65ed43de0
test r15d, r15d
jg 0x7ff65ed43ded
jmp 0x7ff65ed4404e
cmp dword [rax + 0x444], 0
jbe 0x7ff65ed4404e
mov rax, qword [rax + 0x30]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx + 8]
mov rcx, qword [rax + 0x1a0]
add rcx, 8
call fcn.7ff65ed2d700
xorps xmm0, xmm0
movups xmmword [rsp + 0x1b0], xmm0
mov word [rsp + 0x1be], r14w
movdqa xmmword [rsp + 0x1c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x1d0], xmm1
movdqa xmmword [rsp + 0x1e0], xmm0
mov qword [rsp + 0x1f0], r14
mov qword [rsp + 0x1f8], 0x400
mov dword [rsp + 0x200], r14d
mov qword [rsp + 0x208], r14
mov ecx, 0x18
call fcn.7ff65efe06d0
mov qword [rsp + 0x58], rax
mov rcx, rax
call fcn.7ff65eca3740
nop
mov qword [rsp + 0x1c0], rax
mov qword [rsp + 0x1c8], rax
mov rax, qword [rsi + 0x140]
mov rcx, qword [rax + 0x30]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax + 8]
mov rax, qword [rcx]
lea rdx, [rsp + 0x1b0]
call qword [rax + 0x28]
mov rax, qword [rsi + 0x140]
mov r15, qword [rax + 0x30]
lea rax, vtable.xmrig::JsonReader.0
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x50], rax
cmp word [rsp + 0x1be], 3
jne 0x7ff65ed43f74
cmp dword [rsp + 0x1b0], 0
je 0x7ff65ed43f74
mov ecx, 0x1a8
call fcn.7ff65efe06d0
mov qword [rsp + 0x58], rax
mov rcx, rax
call fcn.7ff65ed28e90
mov rdi, rax
mov rbx, qword [rax]
mov rcx, qword [r15 + 0x10]
mov rcx, qword [rcx + 8]
mov rdx, qword [rcx]
call qword [rdx + 0x20]
mov r8, qword [rax]
lea rdx, [rsp + 0x48]
mov rcx, rdi
call qword [rbx + 0x10]
mov r8, qword [rdi]
mov rcx, rdi
test al, al
jne 0x7ff65ed43f36
mov edx, 1
call qword [r8]
jmp 0x7ff65ed43f74
call qword [r8 + 0x18]
movzx ebx, al
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 8]
test al, al
je 0x7ff65ed43f68
mov rcx, qword [r15 + 0x10]
cmp qword [rcx + 0x28], 0
je 0x7ff65ed43f68
test bl, bl
je 0x7ff65ed43f68
mov rax, qword [rdi]
mov edx, 1
mov rcx, rdi
call qword [rax]
jmp 0x7ff65ed43f74
mov rdx, rdi
mov rcx, qword [r15 + 0x10]
call fcn.7ff65eca65e0
mov rax, qword [rsi + 0x140]
cmp byte [rax + 0x2ea], 0
jne 0x7ff65ed43f8f
mov dl, 1
mov rcx, rsi
call fcn.7ff65ed41af0
nop
mov rdi, qword [rsp + 0x1c8]
test rdi, rdi
je 0x7ff65ed4402f
xorps xmm0, xmm0
movups xmmword [rsp + 0x1b0], xmm0
mov word [rsp + 0x1be], r14w
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x7ff65ed44022
mov rax, qword [rcx + 0x10]
cmp rax, 1
jbe 0x7ff65ed43fd0
dec rax
mov qword [rcx + 0x10], rax
jmp 0x7ff65ed44022
mov rax, qword [rcx]
mov rdx, qword [rax + 0x10]
test rdx, rdx
je 0x7ff65ed43ffb
nop dword [rax]
mov qword [rcx], rdx
mov rcx, rax
call fcn.7ff65efec05c
mov rcx, qword [rdi + 0x10]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x10]
test rdx, rdx
jne 0x7ff65ed43fe0
mov rax, qword [rcx]
mov qword [rax + 8], r14
mov rcx, qword [rdi + 0x10]
mov rbx, qword [rcx + 8]
cmp byte [rcx + 0x18], 0
je 0x7ff65ed44015
call fcn.7ff65efec05c
mov edx, 1
mov rcx, rbx
call fcn.7ff65efe070c
mov edx, 0x18
mov rcx, rdi
call fcn.7ff65efe070c
mov rcx, qword [rsp + 0x1e0]
call fcn.7ff65efec05c
mov edx, 1
mov rcx, qword [rsp + 0x1d8]
call fcn.7ff65efe070c
xor ecx, ecx
call fcn.7ff65efee0f8
mov rdx, qword [rsi + 0x140]
mov rdx, qword [rdx + 0x2f0]
mov rcx, rax
call fcn.7ff65efefa0c
comisd xmm0, xmmword [0x7ff65f153818]
jb 0x7ff65ed4409f
xor ecx, ecx
call fcn.7ff65efee0f8
mov rdx, qword [rsi + 0x140]
mov qword [rdx + 0x2f0], rax
mov rcx, rsi
call fcn.7ff65ed45d90
nop
mov ecx, 0x80000041
call qword [sym.imp.KERNEL32.dll_SetThreadExecutionState]
nop
mov rcx, qword [rsp + 0x290]
xor rcx, rsp
call fcn.7ff65efe06b0
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.7ff65efe777c
nop
call fcn.7ff65efe777c
nop
call fcn.7ff65efe777c
nop
call fcn.7ff65efe777c
nop
call fcn.7ff65efe777c
int3
call fcn.7ff65efe777c
nop
call fcn.7ff65efe777c
int3
call fcn.7ff65efe777c
int3