Function at 0x180004a00
Capabilities:
Get hostname
Get session user name

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x318
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0x280], xmm7
movaps xmmword [rbp + 0x270], xmm6
mov qword [rbp + 0x268], 0xfffffffffffffffe
lea rbx, [rbp + 0xf0]
mov rcx, rbx
call fcn.180006890
mov rdx, qword [rbp + 0xf8]
test rdx, rdx
je 0x180004a62
mov rcx, qword [rbp + 0xf0]
mov r8d, 1
call fcn.18000b030
lea rcx, [rbp + 0x1f0]
call fcn.18000b240
lea rdi, [rbp + 0xd0]
mov rcx, rdi
call fcn.18000b240
lea rcx, [rbp + 0x88]
call fcn.18000c7f0
mov r8d, dword [rbp + 0x94]
lea rcx, [rbp + 0xb0]
lea rdx, [rbp + 0x88]
call fcn.18000c0c0
lea rcx, [rbp + 0x94]
mov esi, dword [rbp + 0xb8]
movq xmm6, qword [rbp + 0xb0]
mov qword [rbp + 0x1c0], 1
pxor xmm0, xmm0
movdqu xmmword [rbp + 0x1c8], xmm0
mov qword [rbp + 0x240], 0x20
mov byte [rbp + 0x248], 3
mov qword [rbp + 0x210], 0
mov qword [rbp + 0x220], 0
lea rax, [rbp + 0x1c0]
mov qword [rbp + 0x230], rax
lea rax, [0x18012b540]
mov qword [rbp + 0x238], rax
lea r14, [rbp + 0x210]
mov rdx, r14
call fcn.18000c7e0
test al, al
jne 0x180005aa7
movdqu xmm0, xmmword [rbp + 0x1c0]
movdqu xmmword [rbp + 0x118], xmm0
mov rax, qword [rbp + 0x1d0]
mov qword [rbp + 0x128], rax
mov eax, dword [rbp + 0x94]
lea rcx, str._Y__m__d__H__M__S
mov qword [rbp + 0xf8], rcx
mov qword [rbp + 0x100], 0x11
lea rcx, [0x18012bef8]
mov qword [rbp + 0x108], rcx
mov qword [rbp + 0x110], 0
mov dword [rbp + 0xf0], 1
mov dword [rbp + 0xf4], esi
mov dword [rbp + 0x138], 1
movq qword [rbp + 0x13c], xmm6
mov dword [rbp + 0x130], eax
lea rax, [rbp + 0x1f0]
mov qword [rbp + 0x210], rax
lea rsi, [0x180004960]
mov qword [rbp + 0x218], rsi
mov qword [rbp + 0x220], rdi
mov qword [rbp + 0x228], rsi
mov qword [rbp + 0x230], rbx
lea rax, [0x180001200]
mov qword [rbp + 0x238], rax
lea rax, str.C:UsersAppDataLocalTemp_tasklist.txt
mov qword [rbp + 0x1c0], rax
mov qword [rbp + 0x1c8], 4
mov qword [rbp + 0x1e0], 0
mov qword [rbp + 0x1d0], r14
mov qword [rbp + 0x1d8], 3
lea rcx, [rbp + 0xb0]
lea rdx, [rbp + 0x1c0]
call fcn.18010f720
mov rcx, qword [rbp + 0x118]
test rcx, rcx
je 0x180004c53
mov rdx, qword [rbp + 0x120]
test rdx, rdx
je 0x180004c53
mov r8d, 1
call fcn.18000b030
mov rdx, qword [rbp + 0xd8]
test rdx, rdx
je 0x180004c71
mov rcx, qword [rbp + 0xd0]
mov r8d, 1
call fcn.18000b030
mov rdx, qword [rbp + 0x1f8]
test rdx, rdx
je 0x180004c8f
mov rcx, qword [rbp + 0x1f0]
mov r8d, 1
call fcn.18000b030
mov rdx, qword [rbp + 0xb0]
mov rax, qword [rbp + 0xb8]
mov qword [rbp + 0x260], rax
mov r8, qword [rbp + 0xc0]
mov dword [rbp + 0xf0], 0
pxor xmm0, xmm0
movdqu xmmword [rbp + 0xf8], xmm0
mov dword [rbp + 0x108], 7
mov qword [rbp + 0x10c], 0
mov word [rbp + 0x114], 0
mov byte [rbp + 0x111], 1
mov byte [rbp + 0x114], 1
mov byte [rbp + 0x113], 1
lea rcx, [rbp + 0xf0]
mov qword [rbp + 0x250], rdx
call fcn.1800f4360
mov rbx, rax
mov r14, rdx
mov rdx, qword [rbp + 0x260]
test rdx, rdx
je 0x180004d2b
mov r8d, 1
mov rcx, qword [rbp + 0x250]
call fcn.18000b030
mov qword [rbp + 0x250], r14
test rbx, rbx
jne 0x180005ad7
lea rbx, [rbp + 0x210]
mov rcx, rbx
call fcn.18000b240
mov qword [rbp + 0xd0], rbx
mov qword [rbp + 0xd8], rsi
lea rax, str.C:UsersAppDataLocalTemp_tasklist.txt
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], 2
mov qword [rbp + 0x110], 0
mov qword [rbp + 0x100], rdi
mov qword [rbp + 0x108], 1
lea rcx, [rbp + 0x1c0]
lea rdx, [rbp + 0xf0]
call fcn.18010f720
mov rdx, qword [rbp + 0x218]
test rdx, rdx
je 0x180004dbf
mov rcx, qword [rbp + 0x210]
mov r8d, 1
call fcn.18000b030
mov rdx, qword [rbp + 0x1c0]
mov rax, qword [rbp + 0x1c8]
mov qword [rbp + 0x260], rax
mov r8, qword [rbp + 0x1d0]
mov dword [rbp + 0xf0], 0
pxor xmm0, xmm0
movdqu xmmword [rbp + 0xf8], xmm0
mov dword [rbp + 0x108], 7
mov qword [rbp + 0x10c], 0
mov word [rbp + 0x114], 0
mov byte [rbp + 0x111], 1
mov byte [rbp + 0x114], 1
mov byte [rbp + 0x113], 1
lea rcx, [rbp + 0xf0]
mov qword [rbp + 0x258], rdx
call fcn.1800f4360
mov rbx, rax
mov rdi, rdx
mov rdx, qword [rbp + 0x260]
test rdx, rdx
je 0x180004e5b
mov r8d, 1
mov rcx, qword [rbp + 0x258]
call fcn.18000b030
test rbx, rbx
jne 0x180005b15
mov qword [rbp + 0xa8], rdi
lea rcx, [rbp + 0x30]
call fcn.180006890
lea rcx, [rbp + 0x10]
call fcn.18000b920
mov qword [rbp + 0x88], 1
mov dword [rbp + 0x210], 0
lea r8, [rbp + 0x210]
mov ecx, 1
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
test eax, eax
jne 0x180005b4c
mov ebx, dword [rbp + 0x210]
test rbx, rbx
je 0x180004ee8
lea rdi, [rbx + rbx]
movzx eax, byte [0x1801e4bc1]
mov edx, 2
mov rcx, rdi
call fcn.18000b020
test rax, rax
jne 0x180004eed
mov ecx, 2
mov rdx, rdi
call fcn.180129e70
jmp 0x180005c02
mov eax, 2
mov qword [rbp + 0x258], rbx
mov dword [rbp + 0x210], ebx
lea rdi, [rbp + 0x210]
mov ecx, 1
mov qword [rbp + 0x260], rax
mov rdx, rax
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
test eax, eax
je 0x180004fd0
mov r8d, dword [rbp + 0x210]
lea rcx, [rbp + 0xf0]
mov rdx, qword [rbp + 0x260]
call fcn.1800f58d0
mov rdx, qword [rbp + 0x258]
test edx, edx
je 0x180004f5b
add rdx, rdx
mov r8d, 2
mov rcx, qword [rbp + 0x260]
call fcn.18000b030
lea rcx, [rbp - 8]
lea rdx, [rbp + 0xf0]
call fcn.18000b090
mov dword [rbp + 0xf0], 0
lea r8, [rbp + 0xf0]
mov ecx, 1
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
test eax, eax
jne 0x180005b69
mov r14d, dword [rbp + 0xf0]
test r14, r14
je 0x180005034
lea rbx, [r14 + r14]
movzx eax, byte [0x1801e4bc1]
mov edx, 2
mov rcx, rbx
call fcn.18000b020
test rax, rax
jne 0x180005039
mov ecx, 2
mov rdx, rbx
call fcn.180129e70
jmp 0x180005c02
movzx eax, byte [0x1801e4bc1]
mov ecx, 7
mov edx, 1
call fcn.18000b020
test rax, rax
je 0x180005bd1
mov dword [rax + 3], 0x6e776f6e
mov dword [rax], 0x6e6b6e55
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], 7
mov qword [rbp + 0x100], 7
mov byte [rbp + 0x108], 1
mov rdx, qword [rbp + 0x258]
test edx, edx
jne 0x180004f46
jmp 0x180004f5b
mov eax, 2
mov qword [rbp + 0x258], r14
mov dword [rbp + 0xf0], r14d
lea r8, [rbp + 0xf0]
mov ecx, 1
mov qword [rbp + 0x260], rax
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
test eax, eax
je 0x1800050db
mov r8d, dword [rbp + 0xf0]
lea rcx, [rbp + 0xb0]
mov rdx, qword [rbp + 0x260]
call fcn.1800f58d0
mov rdx, qword [rbp + 0x258]
test edx, edx
je 0x1800050a1
add rdx, rdx
mov r8d, 2
mov rcx, qword [rbp + 0x260]
call fcn.18000b030
lea rcx, [rbp + 0xd0]
call fcn.18000b5a0
cmp qword [rbp + 0xd0], 0
je 0x18000513f
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x80], rax
movdqu xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rbp + 0x70], xmm0
jmp 0x1800051f1
movzx eax, byte [0x1801e4bc1]
mov ecx, 7
mov edx, 1
call fcn.18000b020
test rax, rax
je 0x180005be2
mov dword [rax + 3], 0x6e776f6e
mov dword [rax], 0x6e6b6e55
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0xb8], 7
mov qword [rbp + 0xc0], 7
mov byte [rbp + 0xc8], 1
mov rdx, qword [rbp + 0x258]
test edx, edx
jne 0x18000508c
jmp 0x1800050a1
mov qword [rbp + 0x210], 2
mov qword [rbp + 0x1f0], rdi
lea rax, [0x18000bc00]
mov qword [rbp + 0x1f8], rax
lea rax, str.Unknown_X
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], 1
mov qword [rbp + 0x110], 0
lea rax, [rbp + 0x1f0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0x108], 1
lea rcx, [rbp + 0x1c0]
lea rdx, [rbp + 0xf0]
call fcn.18010f720
cmp dword [rbp + 0x210], 0xc
jb 0x1800051d6
mov rdx, qword [rbp + 0x220]
test rdx, rdx
je 0x1800051d6
mov rcx, qword [rbp + 0x218]
mov r8d, 1
call fcn.18000b030
movdqu xmm0, xmmword [rbp + 0x1c0]
movdqa xmmword [rbp + 0x70], xmm0
mov rax, qword [rbp + 0x1d0]
mov qword [rbp + 0x80], rax
lea r13, [rbp + 0x1c0]
mov rcx, r13
call fcn.18000b560
cmp byte [rbp + 0x1d8], 2
jne 0x1800052cb
mov qword [rbp + 0x210], 2
mov qword [rbp + 0x1f0], rdi
lea rax, [0x18000bc00]
mov qword [rbp + 0x1f8], rax
lea rax, str.Unknown_X
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], 1
mov qword [rbp + 0x110], 0
lea rax, [rbp + 0x1f0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0x108], 1
lea rcx, [rbp + 0xd0]
lea rdx, [rbp + 0xf0]
call fcn.18010f720
cmp dword [rbp + 0x210], 0xc
jb 0x1800052a4
mov rdx, qword [rbp + 0x220]
test rdx, rdx
je 0x1800052a4
mov rcx, qword [rbp + 0x218]
mov r8d, 1
call fcn.18000b030
movdqu xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rbp + 0x1f0], xmm0
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0x200], rax
mov byte [rbp + 0x208], 1
jmp 0x1800052eb
movdqu xmm0, xmmword [rbp + 0x1c0]
movdqu xmm1, xmmword [rbp + 0x1d0]
movdqa xmmword [rbp + 0x200], xmm1
movdqa xmmword [rbp + 0x1f0], xmm0
lea rcx, [rbp + 0xf0]
call fcn.18000b3f0
mov rdx, qword [rbp + 0xf0]
mov r8, qword [rbp + 0x100]
test r8, r8
je 0x180005446
mov rcx, rdx
cmp r8, 8
jb 0x18000541c
cmp r8, 0x20
jae 0x180005328
xor eax, eax
jmp 0x1800053b6
mov rax, r8
and rax, 0xffffffffffffffe0
xor ecx, ecx
movdqa xmm0, xmmword [0x18012bdf0]
movdqa xmm1, xmmword [0x18012be00]
movdqa xmm2, xmmword [0x18012be10]
nop dword [rax]
movdqu xmm3, xmmword [rdx + rcx]
movdqu xmm4, xmmword [rdx + rcx + 0x10]
movdqa xmm5, xmm3
paddb xmm5, xmm0
movdqa xmm6, xmm4
paddb xmm6, xmm0
movdqa xmm7, xmm5
pminub xmm7, xmm1
pcmpeqb xmm7, xmm5
pand xmm7, xmm2
movdqa xmm5, xmm6
pminub xmm5, xmm1
pcmpeqb xmm5, xmm6
pand xmm5, xmm2
por xmm7, xmm3
por xmm5, xmm4
movdqu xmmword [rdx + rcx], xmm7
movdqu xmmword [rdx + rcx + 0x10], xmm5
add rcx, 0x20
cmp rax, rcx
jne 0x180005350
cmp r8, rax
je 0x180005446
test r8b, 0x18
je 0x180005416
mov r9, r8
and r9, 0xfffffffffffffff8
lea rcx, [rdx + r9]
movdqa xmm0, xmmword [0x18012be20]
movdqa xmm1, xmmword [0x18012be30]
movdqa xmm2, xmmword [0x18012be40]
nop dword [rax]
movq xmm3, qword [rdx + rax]
movdqa xmm4, xmm3
paddb xmm4, xmm0
movdqa xmm5, xmm4
pmaxub xmm5, xmm1
pcmpeqb xmm5, xmm4
pandn xmm5, xmm2
por xmm5, xmm3
movq qword [rdx + rax], xmm5
add rax, 8
cmp r9, rax
jne 0x1800053e0
cmp r8, r9
jne 0x18000541c
jmp 0x180005446
add rax, rdx
mov rcx, rax
lea rax, [rdx + r8]
movzx r10d, byte [rcx]
lea r9d, [r10 - 0x41]
cmp r9b, 0x1a
setb r9b
shl r9b, 5
or r9b, r10b
mov byte [rcx], r9b
lea r9, [rcx + 1]
mov rcx, r9
cmp r9, rax
jne 0x180005420
mov rax, qword [rbp + 0xf8]
mov qword [rbp + 0x260], rax
lea rdi, [rbp - 0x20]
mov rcx, rdi
mov qword [rbp + 0x60], rdx
call fcn.18010f8d0
lea rcx, [rbp + 0xf0]
call fcn.18000b3f0
mov rdx, qword [rbp + 0xf0]
mov r8, qword [rbp + 0x100]
test r8, r8
je 0x1800055c6
mov rcx, rdx
cmp r8, 8
jb 0x18000559c
cmp r8, 0x20
jae 0x1800054a1
xor eax, eax
jmp 0x180005536
mov rax, r8
and rax, 0xffffffffffffffe0
xor ecx, ecx
movdqa xmm0, xmmword [0x18012bdf0]
movdqa xmm1, xmmword [0x18012be00]
movdqa xmm2, xmmword [0x18012be10]
nop word cs:[rax + rax]
movdqu xmm3, xmmword [rdx + rcx]
movdqu xmm4, xmmword [rdx + rcx + 0x10]
movdqa xmm5, xmm3
paddb xmm5, xmm0
movdqa xmm6, xmm4
paddb xmm6, xmm0
movdqa xmm7, xmm5
pminub xmm7, xmm1
pcmpeqb xmm7, xmm5
pand xmm7, xmm2
movdqa xmm5, xmm6
pminub xmm5, xmm1
pcmpeqb xmm5, xmm6
pand xmm5, xmm2
por xmm7, xmm3
por xmm5, xmm4
movdqu xmmword [rdx + rcx], xmm7
movdqu xmmword [rdx + rcx + 0x10], xmm5
add rcx, 0x20
cmp rax, rcx
jne 0x1800054d0
cmp r8, rax
je 0x1800055c6
test r8b, 0x18
je 0x180005596
mov r9, r8
and r9, 0xfffffffffffffff8
lea rcx, [rdx + r9]
movdqa xmm0, xmmword [0x18012be20]
movdqa xmm1, xmmword [0x18012be30]
movdqa xmm2, xmmword [0x18012be40]
nop dword [rax]
movq xmm3, qword [rdx + rax]
movdqa xmm4, xmm3
paddb xmm4, xmm0
movdqa xmm5, xmm4
pmaxub xmm5, xmm1
pcmpeqb xmm5, xmm4
pandn xmm5, xmm2
por xmm5, xmm3
movq qword [rdx + rax], xmm5
add rax, 8
cmp r9, rax
jne 0x180005560
cmp r8, r9
jne 0x18000559c
jmp 0x1800055c6
add rax, rdx
mov rcx, rax
lea rax, [rdx + r8]
movzx r10d, byte [rcx]
lea r9d, [r10 - 0x41]
cmp r9b, 0x1a
setb r9b
shl r9b, 5
or r9b, r10b
mov byte [rcx], r9b
lea r9, [rcx + 1]
mov rcx, r9
cmp r9, rax
jne 0x1800055a0
mov rax, qword [rbp + 0xf8]
mov qword [rbp + 0x258], rax
lea rbx, [rbp + 0xd0]
mov rcx, rbx
mov qword [rbp + 0x68], rdx
call fcn.1800f4150
mov qword [rbp + 0x1c0], 2
mov dword [rbp + 0x48], 0
lea r8, [rbp + 0x48]
mov ecx, 3
xor edx, edx
call qword [sym.imp.Secur32.dll_GetUserNameExW]
test al, al
jne 0x180005b83
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xea
jne 0x180005657
mov r15d, dword [rbp + 0x48]
test r15, r15
je 0x180005665
lea r14, [r15 + r15]
movzx eax, byte [0x1801e4bc1]
mov edx, 2
mov rcx, r14
call fcn.18000b020
test rax, rax
jne 0x18000566a
mov ecx, 2
mov rdx, r14
call fcn.180129e70
jmp 0x180005c02
lea rcx, [rbp + 0xf0]
call fcn.18000b270
jmp 0x1800056d6
mov eax, 2
mov qword [rbp + 0x1b8], r15
mov dword [rbp + 0x210], r15d
lea r8, [rbp + 0x210]
mov ecx, 3
mov qword [rbp + 0x1b0], rax
mov rdx, rax
call qword [sym.imp.Secur32.dll_GetUserNameExW]
test al, al
je 0x180005a43
mov r8d, dword [rbp + 0x210]
lea rcx, [rbp + 0xf0]
mov rdx, qword [rbp + 0x1b0]
call fcn.1800f58d0
mov rdx, qword [rbp + 0x1b8]
test edx, edx
je 0x1800056d6
add rdx, rdx
mov r8d, 2
mov rcx, qword [rbp + 0x1b0]
call fcn.18000b030
lea r15, [rbp - 0x38]
lea r14, [rbp + 0xf0]
mov rcx, r15
mov rdx, r14
call fcn.18000b090
lea r12, [rbp + 0x48]
mov rcx, r12
call fcn.18000b240
lea rax, [rbp + 0x30]
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], rsi
lea rax, [rbp + 0x10]
mov qword [rbp + 0x100], rax
lea rax, [0x1800041d0]
mov qword [rbp + 0x108], rax
lea rax, [rbp + 0x88]
mov qword [rbp + 0x110], rax
lea rax, [0x1800047d0]
mov qword [rbp + 0x118], rax
lea rax, [rbp - 8]
mov qword [rbp + 0x120], rax
lea rax, [0x180004940]
mov qword [rbp + 0x128], rax
lea rcx, [rbp + 0xb0]
mov qword [rbp + 0x130], rcx
lea rcx, [0x1800f7510]
mov qword [rbp + 0x138], rcx
lea rdx, [rbp + 0x70]
mov qword [rbp + 0x140], rdx
mov qword [rbp + 0x148], rax
lea rdx, [rbp + 0x1f0]
mov qword [rbp + 0x150], rdx
mov qword [rbp + 0x158], rcx
mov qword [rbp + 0x160], rdi
mov qword [rbp + 0x168], rax
mov qword [rbp + 0x170], rbx
mov qword [rbp + 0x178], rcx
mov qword [rbp + 0x180], r13
lea rcx, [0x1800046a0]
mov qword [rbp + 0x188], rcx
mov qword [rbp + 0x190], r15
mov qword [rbp + 0x198], rax
mov qword [rbp + 0x1a0], r12
mov qword [rbp + 0x1a8], rax
lea rax, [0x18012c888]
mov qword [rbp + 0x210], rax
mov qword [rbp + 0x218], 0xc
mov qword [rbp + 0x230], 0
mov qword [rbp + 0x220], r14
mov qword [rbp + 0x228], 0xc
lea rcx, [rbp - 0x50]
lea rdx, [rbp + 0x210]
call fcn.18010f720
mov rdx, qword [rbp + 0x50]
test rdx, rdx
je 0x180005846
mov rcx, qword [rbp + 0x48]
mov r8d, 1
call fcn.18000b030
mov rdx, qword [rbp - 0x30]
test rdx, rdx
je 0x18000585e
mov rcx, qword [rbp - 0x38]
mov r8d, 1
call fcn.18000b030
cmp dword [rbp + 0x1c0], 0xc
jb 0x180005885
mov rdx, qword [rbp + 0x1d0]
test rdx, rdx
je 0x180005885
mov rcx, qword [rbp + 0x1c8]
mov r8d, 1
call fcn.18000b030
mov rdx, qword [rbp + 0xd8]
test rdx, rdx
je 0x1800058a3
mov rcx, qword [rbp + 0xd0]
mov r8d, 1
call fcn.18000b030
mov rdx, qword [rbp + 0x258]
test rdx, rdx
je 0x1800058be
mov r8d, 1
mov rcx, qword [rbp + 0x68]
call fcn.18000b030
mov rdx, qword [rbp - 0x18]
test rdx, rdx
je 0x1800058d6
mov rcx, qword [rbp - 0x20]
mov r8d, 1
call fcn.18000b030
mov rdx, qword [rbp + 0x260]
test rdx, rdx
je 0x1800058f1
mov r8d, 1
mov rcx, qword [rbp + 0x60]
call fcn.18000b030
mov rdx, qword [rbp + 0x1f8]
test rdx, rdx
je 0x18000590f
mov rcx, qword [rbp + 0x1f0]
mov r8d, 1
call fcn.18000b030
mov rdx, qword [rbp + 0x78]
test rdx, rdx
je 0x180005927
mov rcx, qword [rbp + 0x70]
mov r8d, 1
call fcn.18000b030
mov rdx, qword [rbp + 0xb8]
test rdx, rdx
je 0x180005945
mov rcx, qword [rbp + 0xb0]
mov r8d, 1
call fcn.18000b030
mov rdx, qword [rbp]
test rdx, rdx
je 0x18000595d
mov rcx, qword [rbp - 8]
mov r8d, 1
call fcn.18000b030
cmp dword [rbp + 0x88], 0x11
jb 0x180005984
mov rdx, qword [rbp + 0x98]
test rdx, rdx
je 0x180005984
mov rcx, qword [rbp + 0x90]
mov r8d, 1
call fcn.18000b030
cmp dword [rbp + 0x10], 0x16
jb 0x1800059a2
mov rdx, qword [rbp + 0x20]
test rdx, rdx
je 0x1800059a2
mov rcx, qword [rbp + 0x18]
mov r8d, 1
call fcn.18000b030
mov rdx, qword [rbp + 0x38]
test rdx, rdx
je 0x1800059ba
mov rcx, qword [rbp + 0x30]
mov r8d, 1
call fcn.18000b030
mov rdx, qword [rbp - 0x50]
mov rax, qword [rbp - 0x48]
mov qword [rbp + 0x260], rax
mov r8, qword [rbp - 0x40]
lea rcx, [rbp + 0xa8]
mov qword [rbp + 0x258], rdx
call fcn.1800098d0
test rax, rax
jne 0x180005b9d
mov rdx, qword [rbp + 0x260]
test rdx, rdx
je 0x180005a07
mov r8d, 1
mov rcx, qword [rbp + 0x258]
call fcn.18000b030
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x250]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movaps xmm6, xmmword [rbp + 0x270]
movaps xmm7, xmmword [rbp + 0x280]
add rsp, 0x318
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
movzx eax, byte [0x1801e4bc1]
mov ecx, 7
mov edx, 1
call fcn.18000b020
test rax, rax
je 0x180005bf3
mov dword [rax + 3], 0x6e776f6e
mov dword [rax], 0x6e6b6e55
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], 7
mov qword [rbp + 0x100], 7
mov byte [rbp + 0x108], 1
mov rdx, qword [rbp + 0x1b8]
test edx, edx
jne 0x1800056c1
jmp 0x1800056d6
lea rax, [0x18012b5f8]
mov qword [rsp + 0x20], rax
lea rcx, [0x18012b570]
lea r9, [0x18012b610]
lea r8, [rbp + 0xf0]
mov edx, 0x37
call fcn.18012a4e0
jmp 0x180005c02
mov rax, qword [rbp + 0x250]
mov qword [rbp + 0xf0], rax
lea rax, str.src_tools.rs
mov qword [rsp + 0x20], rax
lea rcx, [0x18012bef8]
lea r9, fcn.180004380
lea r8, [rbp + 0xf0]
mov edx, 0x2b
call fcn.18012a4e0
jmp 0x180005c02
mov qword [rbp + 0xf0], rdi
lea rax, str.src_tools.rs
mov qword [rsp + 0x20], rax
lea rcx, [0x18012bef8]
lea r9, fcn.180004380
lea r8, [rbp + 0xf0]
mov edx, 0x2b
call fcn.18012a4e0
jmp 0x180005c02
lea rcx, [0x18012c070]
lea r8, [0x18012c108]
mov edx, 0x19
call fcn.18012a170
jmp 0x180005c02
lea rcx, [0x18012c070]
lea r8, [0x18012c108]
mov edx, 0x19
call fcn.18012a170
jmp 0x180005c02
lea rcx, [0x18012c070]
lea r8, [0x18012c0f0]
mov edx, 0x19
call fcn.18012a170
jmp 0x180005c02
mov qword [rbp + 0xf0], rax
lea rax, str.src_tools.rs
mov qword [rsp + 0x20], rax
lea rcx, [0x18012bef8]
lea r9, fcn.180004380
lea r8, [rbp + 0xf0]
mov edx, 0x2b
call fcn.18012a4e0
jmp 0x180005c02
mov ecx, 1
mov edx, 7
call fcn.180129e70
jmp 0x180005c02
mov ecx, 1
mov edx, 7
call fcn.180129e70
jmp 0x180005c02
mov ecx, 1
mov edx, 7
call fcn.180129e70
ud2