Function at 0x14000b310
Capabilities:
Reference wmi statements

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x810
mov rax, qword [0x140b29680]
xor rax, rsp
mov qword [rsp + 0x800], rax
mov r13, rcx
mov qword [rsp + 0x48], rcx
xor edi, edi
mov dword [rsp + 0x40], edi
lea rsi, [rcx + 0x80]
mov qword [rsp + 0x30], rsi
xor r8d, r8d
lea rdx, [0x14021f681]
mov rcx, rsi
call fcn.14001d760
lea rax, [r13 + 0x78]
mov qword [rsp + 0x140], rax
mov byte [rax], dil
lea r8, str.SerialNumber
lea rdx, str.SELECT__FROM_Win32_DiskDrive
lea rcx, [rsp + 0x5a0]
call fcn.140017eb0
mov rdx, qword [rsp + 0x5b8]
cmp rdx, 0xf
jbe 0x14000b3d9
inc rdx
mov rcx, qword [rsp + 0x5a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b3d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b3d3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140148f88
nop
jmp 0x14000b3e7
lea rdx, str.keyauth_hwid
lea rcx, [rsp + 0x620]
call fcn.140021d40
nop
lea rcx, [rsp + 0x150]
call fcn.140018450
nop
mov rdx, rax
lea rcx, [rsp + 0x638]
call fcn.140021e00
nop
lea rax, [rsp + 0x620]
mov qword [rsp + 0x570], rax
lea rax, [rsp + 0x650]
mov qword [rsp + 0x578], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0x370]
call fcn.1400194c0
mov qword [rsp + 0x380], rdi
lea rdx, str.pnp_id
lea rcx, [rsp + 0x270]
call fcn.140021e90
nop
lea r8, str.PNPDeviceID
lea rdx, str.SELECT__FROM_Win32_VideoController
lea rcx, [rsp + 0x180]
call fcn.140017eb0
nop
mov rdx, rax
lea rcx, [rsp + 0x288]
call fcn.140021e00
nop
lea rax, [rsp + 0x270]
mov qword [rsp + 0x570], rax
lea rax, [rsp + 0x2a0]
mov qword [rsp + 0x578], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0x388]
call fcn.1400194c0
mov qword [rsp + 0x398], rdi
lea rcx, [rsp + 0x240]
call fcn.140021f50
nop
lea r8, str.Product
lea rdx, str.SELECT__FROM_Win32_BaseBoard
lea rcx, [rsp + 0x4a0]
call fcn.140017eb0
nop
mov rdx, rax
lea rcx, [rsp + 0x258]
call fcn.140021e00
nop
lea rax, [rsp + 0x240]
mov qword [rsp + 0x570], rax
lea rax, [rsp + 0x270]
mov qword [rsp + 0x578], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0x3a0]
call fcn.1400194c0
mov qword [rsp + 0x3b0], rdi
lea rdx, [0x14021fb78]
lea rcx, [rsp + 0x210]
call fcn.140022010
nop
lea r8, str.Name
lea rdx, str.SELECT__FROM_Win32_Processor
lea rcx, [rsp + 0x480]
call fcn.140017eb0
nop
mov rdx, rax
lea rcx, [rsp + 0x228]
call fcn.140021e00
nop
lea rax, [rsp + 0x210]
mov qword [rsp + 0x570], rax
lea rax, [rsp + 0x240]
mov qword [rsp + 0x578], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0x3b8]
call fcn.1400194c0
mov qword [rsp + 0x3c8], rdi
lea rdx, [0x14021fbb0]
lea rcx, [rsp + 0x80]
call fcn.140022010
nop
lea r8, str.PartNumber
lea rdx, str.SELECT__FROM_Win32_PhysicalMemory
lea rcx, [rsp + 0x4c0]
call fcn.140017eb0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x14000b621
mov rax, qword [rax]
mov rcx, rax
call fcn.1400183e0
mov r15, rax
mov byte [rsp + 0x98], 0
xor eax, eax
mov qword [rsp + 0xa0], rax
xor edx, edx
lea rcx, [rsp + 0xa0]
call fcn.14001c200
mov byte [rsp + 0x98], 3
xorps xmm0, xmm0
movups xmmword [rsp + 0x570], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140148f4c
mov rbx, rax
lea rax, [rsp + 0x580]
mov qword [rsp + 0x570], rax
mov qword [rsp + 0x578], rbx
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rdi
mov r14, 0xffffffffffffffff
mov r8, r14
nop dword [rax]
inc r8
cmp byte [r15 + r8], 0
jne 0x14000b6a0
mov rdx, r15
mov rcx, rbx
call fcn.140024450
nop
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], rdi
lea rax, [rsp + 0x80]
mov qword [rsp + 0x570], rax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x578], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0x3d0]
call fcn.1400194c0
mov qword [rsp + 0x3e0], rdi
lea rdx, [0x14021fc40]
lea rcx, [rsp + 0x1e0]
call fcn.140022010
nop
lea r8, str.Name
lea rdx, str.SELECT__FROM_Win32_VideoController
lea rcx, [rsp + 0x460]
call fcn.140017eb0
nop
mov rdx, rax
lea rcx, [rsp + 0x1f8]
call fcn.140021e00
nop
lea rax, [rsp + 0x1e0]
mov qword [rsp + 0x570], rax
lea rax, [rsp + 0x210]
mov qword [rsp + 0x578], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0x3e8]
call fcn.1400194c0
mov qword [rsp + 0x3f8], rdi
lea rdx, str.discord
lea rcx, [rsp + 0xe0]
call fcn.140022190
nop
lea rdx, str.username
lea rcx, [rsp + 0x1b0]
call fcn.140022250
nop
lea rdx, [0x140b6912b]
lea rcx, [rsp + 0x1c8]
call fcn.140022310
nop
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x570], rax
lea rax, [rsp + 0x1e0]
mov qword [rsp + 0x578], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0x6d0]
call fcn.1400194c0
mov qword [rsp + 0x6e0], rdi
lea rcx, [rsp + 0x340]
call fcn.1400223d0
nop
lea r15, [0x140b69022]
mov rdx, r15
lea rcx, [rsp + 0x358]
call fcn.140022310
nop
lea rax, [rsp + 0x340]
mov qword [rsp + 0x570], rax
lea rax, [rsp + 0x370]
mov qword [rsp + 0x578], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0x6e8]
call fcn.1400194c0
mov qword [rsp + 0x6f8], rdi
mov byte [rsp + 0xb0], 0
xor eax, eax
mov qword [rsp + 0xb8], rax
xor edx, edx
lea rcx, [rsp + 0xb8]
call fcn.14001c200
mov byte [rsp + 0xb0], 3
xorps xmm0, xmm0
movups xmmword [rsp + 0x570], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140148f4c
mov rbx, rax
lea rax, [rsp + 0x580]
mov qword [rsp + 0x570], rax
mov qword [rsp + 0x578], rbx
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rdi
mov r8d, 0xa
lea rdx, str.avatar_url
mov rcx, rbx
call fcn.140024450
nop
mov qword [rsp + 0xb8], rbx
mov qword [rsp + 0xc0], rdi
lea rdx, [0x140b69234]
lea rcx, [rsp + 0xc8]
call fcn.140022310
nop
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x570], rax
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x578], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0x700]
call fcn.1400194c0
mov qword [rsp + 0x710], rdi
lea rdx, [0x14021fc60]
lea rcx, [rsp + 0x2b0]
call fcn.140022010
nop
inc r14
cmp byte [r15 + r14], 0
jne 0x14000b973
test r14, r14
je 0x14000ba17
lea rax, [0x14021fc64]
mov qword [rsp + 0x590], rax
mov qword [rsp + 0x598], 5
mov qword [rsp + 0x578], r15
movabs rax, 0xb000000000000000
mov qword [rsp + 0x570], rax
mov qword [rsp + 0x30], 1
lea rax, [rsp + 0x570]
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
movaps xmm1, xmmword [rsp + 0x590]
movdqa xmmword [rsp + 0x590], xmm1
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x590]
lea rcx, [rsp + 0x600]
call fcn.14002e9f0
lea rdx, [rsp + 0x600]
mov r14d, 0x401
jmp 0x14000ba53
xorps xmm0, xmm0
movups xmmword [rsp + 0x5a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x5b0], xmm1
xor r8d, r8d
lea rdx, [0x14021f681]
lea rcx, [rsp + 0x5a0]
call fcn.140024450
lea rdx, [rsp + 0x5a0]
mov r14d, 2
mov dword [rsp + 0x40], r14d
lea rcx, [rsp + 0x2c8]
call fcn.140021e00
nop
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x570], rax
lea rax, [rsp + 0x2e0]
mov qword [rsp + 0x578], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0x718]
call fcn.1400194c0
mov qword [rsp + 0x728], rdi
lea rdx, str.is_running
lea rcx, [rsp + 0x110]
call fcn.140022490
lea rdx, [0x140b69020]
lea rcx, [rsp + 0x128]
call fcn.14002c550
mov qword [rsp + 0x138], rdi
lea rax, [rsp + 0x110]
mov qword [rsp + 0x570], rax
lea rax, [rsp + 0x140]
mov qword [rsp + 0x578], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0x730]
call fcn.1400194c0
mov qword [rsp + 0x740], rdi
lea rax, [rsp + 0x6d0]
mov qword [rsp + 0x570], rax
lea rax, [rsp + 0x748]
mov qword [rsp + 0x578], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0xf8]
call fcn.1400194c0
mov qword [rsp + 0x108], rdi
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x570], rax
lea rax, [rsp + 0x110]
mov qword [rsp + 0x578], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0x400]
call fcn.1400194c0
mov qword [rsp + 0x410], rdi
lea rdx, str.computer_name
lea rcx, [rsp + 0x2e0]
call fcn.1400225b0
nop
lea rcx, [rsp + 0x4e0]
call fcn.140017c60
nop
mov rdx, rax
lea rcx, [rsp + 0x2f8]
call fcn.140021e00
nop
lea rax, [rsp + 0x2e0]
mov qword [rsp + 0x570], rax
lea rax, [rsp + 0x310]
mov qword [rsp + 0x578], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0x418]
call fcn.1400194c0
mov qword [rsp + 0x428], rdi
lea rdx, str.ipaddress
lea rcx, [rsp + 0x310]
call fcn.140022a20
nop
lea rax, [r13 + 0x58]
cmp qword [rax + 0x18], 0xf
jbe 0x14000bc3c
mov rax, qword [rax]
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x328]
call fcn.1400220d0
nop
lea rax, [rsp + 0x310]
mov qword [rsp + 0x570], rax
lea rax, [rsp + 0x340]
mov qword [rsp + 0x578], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0x430]
call fcn.1400194c0
mov qword [rsp + 0x440], rdi
lea rdx, [0x14021fca0]
lea rcx, [rsp + 0x50]
call fcn.140022190
nop
mov byte [rsp + 0x68], 0
xor eax, eax
mov qword [rsp + 0x70], rax
lea rdx, [r13 + 0x20]
lea rcx, [rsp + 0x68]
call fcn.1400411c0
mov qword [rsp + 0x78], rdi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x570], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x578], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0x448]
call fcn.1400194c0
mov qword [rsp + 0x458], rdi
lea rax, [rsp + 0x370]
mov qword [rsp + 0x570], rax
lea rax, [rsp + 0x460]
mov qword [rsp + 0x578], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0x6b8]
call fcn.1400194c0
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0xe]
lea rcx, [rsp + 0x370]
call fcn.140148e34
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x50]
call fcn.140148e34
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x310]
call fcn.140148e34
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x2e0]
call fcn.140148e34
nop
lea rcx, [rsp + 0x4e0]
call fcn.14001aa80
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0xe0]
call fcn.140148e34
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x13]
lea rcx, [rsp + 0x6d0]
call fcn.140148e34
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x110]
call fcn.140148e34
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x2b0]
call fcn.140148e34
nop
test r14b, 2
je 0x14000be57
and r14d, 0xfffffffd
lea rcx, [rsp + 0x5a0]
call fcn.14001aa80
nop
test r14b, 1
je 0x14000be6f
and r14d, 0xfffffffe
lea rcx, [rsp + 0x600]
call fcn.14001aa80
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0xb0]
call fcn.140148e34
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x340]
call fcn.140148e34
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x1b0]
call fcn.140148e34
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x1e0]
call fcn.140148e34
nop
lea rcx, [rsp + 0x460]
call fcn.14001aa80
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x80]
call fcn.140148e34
nop
lea rcx, [rsp + 0x4c0]
call fcn.14001aa80
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x210]
call fcn.140148e34
nop
lea rcx, [rsp + 0x480]
call fcn.14001aa80
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x240]
call fcn.140148e34
nop
lea rcx, [rsp + 0x4a0]
call fcn.14001aa80
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x270]
call fcn.140148e34
nop
lea rcx, [rsp + 0x180]
call fcn.14001aa80
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x620]
call fcn.140148e34
nop
lea rcx, [rsp + 0x150]
call fcn.14001aa80
lea rax, [rsp + 0x6b8]
mov qword [rsp + 0x590], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x620], xmm0
movups xmmword [rsp + 0x630], xmm0
movups xmmword [rsp + 0x640], xmm0
movups xmmword [rsp + 0x650], xmm0
movups xmmword [rsp + 0x660], xmm0
movups xmmword [rsp + 0x670], xmm0
movups xmmword [rsp + 0x680], xmm0
lea rdx, [rsp + 0x620]
lea rcx, [rsp + 0x590]
call fcn.140018da0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x6d0], xmm0
movups xmmword [rsp + 0x6e0], xmm0
movups xmmword [rsp + 0x6f0], xmm0
movups xmmword [rsp + 0x700], xmm0
movups xmmword [rsp + 0x710], xmm0
movups xmmword [rsp + 0x720], xmm0
movups xmmword [rsp + 0x730], xmm0
lea rdx, [rsp + 0x6d0]
lea rcx, [rsp + 0x590]
call fcn.140018d20
nop
lea rdx, [rsp + 0x6d0]
lea rcx, [rsp + 0x620]
call fcn.140023700
test al, al
je 0x14000c24e
lea rbx, [0x140000000]
nop word [rax + rax]
xorps xmm0, xmm0
movups xmmword [rsp + 0x790], xmm0
movups xmmword [rsp + 0x7a0], xmm0
movups xmmword [rsp + 0x7b0], xmm0
movups xmmword [rsp + 0x7c0], xmm0
movups xmmword [rsp + 0x7d0], xmm0
movups xmmword [rsp + 0x7e0], xmm0
movups xmmword [rsp + 0x7f0], xmm0
mov rax, qword [rsp + 0x620]
mov qword [rsp + 0x790], rax
movups xmm0, xmmword [rsp + 0x628]
movups xmmword [rsp + 0x798], xmm0
movsd xmm1, qword [rsp + 0x638]
movsd qword [rsp + 0x7a8], xmm1
mov rax, qword [rsp + 0x640]
mov qword [rsp + 0x7b0], rax
mov rax, qword [rsp + 0x648]
mov qword [rsp + 0x7b8], rax
lea rdx, [rsp + 0x650]
lea rcx, [rsp + 0x7c0]
call fcn.14001ac80
nop
lea rdx, [rsp + 0x670]
lea rcx, [rsp + 0x7e0]
call fcn.14001ac80
nop
mov rdx, qword [rsp + 0x7f8]
cmp rdx, 0xf
jbe 0x14000c1ac
inc rdx
mov rcx, qword [rsp + 0x7e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c1a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c33b
call fcn.140148f88
mov rdx, qword [rsp + 0x7d8]
cmp rdx, 0xf
jbe 0x14000c1ef
inc rdx
mov rcx, qword [rsp + 0x7c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c1ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c342
call fcn.140148f88
mov rax, qword [rsp + 0x620]
movzx ecx, byte [rax]
cmp ecx, 9
ja case.0x14000c209.0
mov ecx, dword [rbx + rcx*4 + 0xca04]
add rcx, rbx
jmp rcx
add qword [rsp + 0x628], 0x30
jmp 0x14000c229
add qword [rsp + 0x630], 0x10
jmp 0x14000c229
inc qword [rsp + 0x638]
inc qword [rsp + 0x640]
lea rdx, [rsp + 0x6d0]
lea rcx, [rsp + 0x620]
call fcn.140023700
test al, al
jne 0x14000c0b0
lea rcx, [rsp + 0x6d0]
call fcn.14000b0e0
nop
lea rcx, [rsp + 0x620]
call fcn.14000b0e0
xorps xmm0, xmm0
movups xmmword [rsp + 0x698], xmm0
mov qword [rsp + 0x6a8], rdi
mov ebx, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x6b0], rbx
mov byte [rsp + 0x698], 0
lea rax, [rsp + 0x570]
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x6b8]
lea rcx, [rsp + 0x570]
call fcn.140019230
mov r15, rax
lea r8, str._init
mov rdx, r13
lea rcx, [rsp + 0x150]
call fcn.140021540
nop
mov r8, r15
mov rdx, rax
lea rcx, [rsp + 0x180]
call fcn.140017060
mov ecx, dword [rax]
mov dword [rsp + 0x690], ecx
lea rdx, [rax + 8]
lea rcx, [rsp + 0x698]
call fcn.14001ab00
mov rdx, qword [rsp + 0x1a0]
cmp rdx, rbx
jbe 0x14000c34e
inc rdx
mov rcx, qword [rsp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c349
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c349
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140148f88
xorps xmm0, xmm0
movups xmmword [rsp + 0x600], xmm0
mov qword [rsp + 0x610], rdi
mov qword [rsp + 0x618], rdi
lea rcx, [rsp + 0x698]
mov rax, qword [rsp + 0x698]
mov qword [rsp + 0x590], rax
cmp qword [rsp + 0x6b0], 0xf
cmova rcx, rax
mov qword [rsp + 0x30], rcx
movabs r15, 0x7fffffffffffffff
mov r12, qword [rsp + 0x6a8]
cmp r12, r15
ja 0x14000c94d
mov qword [rsp + 0x618], rbx
cmp r12, 0xf
ja 0x14000c3d4
mov qword [rsp + 0x610], r12
movups xmm0, xmmword [rcx]
movups xmmword [rsp + 0x600], xmm0
jmp 0x14000c478
mov rax, r12
or rax, 0xf
cmp rax, r15
jbe 0x14000c40c
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140148f4c
mov rcx, rax
test rax, rax
je 0x14000c437
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000c44d
mov r15, rax
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rax, rcx
cmovb r15, rcx
lea rcx, [r15 + 1]
cmp rcx, 0x1000
jb 0x14000c43e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000c953
jmp 0x14000c3ee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000c44a
call fcn.140148f4c
jmp 0x14000c44d
mov rax, rdi
mov qword [rsp + 0x600], rax
mov qword [rsp + 0x610], r12
mov qword [rsp + 0x618], r15
lea r8, [r12 + 1]
mov rdx, qword [rsp + 0x30]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
mov qword [rsp + 0x658], rdi
mov byte [rsp + 0x20], 0
mov r9b, 1
lea r8, [rsp + 0x620]
lea rdx, [rsp + 0x600]
lea rcx, [rsp + 0x570]
cmp dword [rsp + 0x690], 0xc8
jne 0x14000c6c3
call fcn.140022760
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x5a0], xmm0
mov qword [rsp + 0x5b0], rdi
mov qword [rsp + 0x5b8], rdi
mov r8d, 7
lea rdx, [0x14021fcd0]
lea rcx, [rsp + 0x5a0]
call fcn.140024450
lea rdx, [rsp + 0x5a0]
lea rcx, [rsp + 0x570]
call fcn.1400272a0
mov rcx, rax
call fcn.140022900
movzx r12d, al
xorps xmm0, xmm0
movups xmmword [rsp + 0x5a0], xmm0
mov qword [rsp + 0x5b0], rdi
mov qword [rsp + 0x5b8], rdi
mov r8d, 7
lea rdx, str.message
lea rcx, [rsp + 0x5a0]
call fcn.140024450
lea rdx, [rsp + 0x5a0]
lea rcx, [rsp + 0x570]
call fcn.1400272a0
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x5e0], xmm0
mov qword [rsp + 0x5f0], rdi
mov qword [rsp + 0x5f8], rbx
mov byte [rsp + 0x5e0], 0
bts r14d, 9
mov dword [rsp + 0x40], r14d
cmp byte [rax], 3
jne 0x14000c959
mov r9, qword [rax + 8]
lea rax, [rsp + 0x5e0]
cmp rax, r9
je 0x14000c5f2
mov rbx, qword [r9 + 0x10]
cmp qword [r9 + 0x18], 0xf
jbe 0x14000c5af
mov r9, qword [r9]
lea rcx, [rsp + 0x5e0]
cmp rbx, 0xf
ja 0x14000c5da
mov qword [rsp + 0x5f0], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + rbx + 0x5e0], 0
jmp 0x14000c5e2
mov rdx, rbx
call fcn.1400258f0
mov rdi, qword [rsp + 0x5f0]
mov rbx, qword [rsp + 0x5f8]
mov rax, qword [rsp + 0x140]
mov byte [rax], r12b
lea rax, [rsp + 0x5e0]
cmp rsi, rax
je 0x14000c660
lea r9, [rsp + 0x5e0]
cmp rbx, 0xf
cmova r9, qword [rsp + 0x5e0]
mov rax, qword [rsi + 0x18]
cmp rdi, rax
ja 0x14000c64d
mov r14, rsi
cmp rax, 0xf
jbe 0x14000c634
mov r14, qword [rsi]
mov qword [rsi + 0x10], rdi
mov r8, rdi
mov rdx, r9
mov rcx, r14
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + r14], 0
jmp 0x14000c660
mov rdx, rdi
mov rcx, rsi
call fcn.1400258f0
mov rbx, qword [rsp + 0x5f8]
mov byte [r13 + 0x100], 1
cmp rbx, 0xf
jbe 0x14000c6a8
lea rdx, [rbx + 1]
mov rcx, qword [rsp + 0x5e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c6a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c6a2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140148f88
nop
movzx edx, byte [rsp + 0x570]
lea rcx, [rsp + 0x578]
call fcn.14001c200
nop
jmp 0x14000c871
mov rax, qword [rsp + 0x140]
mov byte [rax], 0
call fcn.140022760
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x5a0], xmm0
mov qword [rsp + 0x5b0], rdi
mov qword [rsp + 0x5b8], rdi
mov r8d, 7
lea rdx, str.message
lea rcx, [rsp + 0x5a0]
call fcn.140024450
lea rdx, [rsp + 0x5a0]
lea rcx, [rsp + 0x570]
call fcn.1400272a0
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x5c0], xmm0
mov qword [rsp + 0x5d0], rdi
mov qword [rsp + 0x5d8], rbx
mov byte [rsp + 0x5c0], 0
or r14d, 0x10
mov dword [rsp + 0x40], r14d
cmp byte [rax], 3
jne 0x14000c9ad
mov r9, qword [rax + 8]
lea rax, [rsp + 0x5c0]
cmp rax, r9
je 0x14000c7b8
mov rbx, qword [r9 + 0x10]
cmp qword [r9 + 0x18], 0xf
jbe 0x14000c775
mov r9, qword [r9]
lea rcx, [rsp + 0x5c0]
cmp rbx, 0xf
ja 0x14000c7a0
mov qword [rsp + 0x5d0], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + rbx + 0x5c0], 0
jmp 0x14000c7a8
mov rdx, rbx
call fcn.1400258f0
mov rdi, qword [rsp + 0x5d0]
mov rbx, qword [rsp + 0x5d8]
lea rax, [rsp + 0x5c0]
cmp rsi, rax
je 0x14000c81b
lea r9, [rsp + 0x5c0]
cmp rbx, 0xf
cmova r9, qword [rsp + 0x5c0]
mov rax, qword [rsi + 0x18]
cmp rdi, rax
ja 0x14000c808
mov r14, rsi
cmp rax, 0xf
jbe 0x14000c7ef
mov r14, qword [rsi]
mov qword [rsi + 0x10], rdi
mov r8, rdi
mov rdx, r9
mov rcx, r14
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + r14], 0
jmp 0x14000c81b
mov rdx, rdi
mov rcx, rsi
call fcn.1400258f0
mov rbx, qword [rsp + 0x5d8]
cmp rbx, 0xf
jbe 0x14000c85b
lea rdx, [rbx + 1]
mov rcx, qword [rsp + 0x5c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c855
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c855
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140148f88
nop
movzx edx, byte [rsp + 0x570]
lea rcx, [rsp + 0x578]
call fcn.14001c200
nop
mov rdx, qword [rsp + 0x618]
cmp rdx, 0xf
jbe 0x14000c8b8
inc rdx
mov rcx, qword [rsp + 0x600]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c8b2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c8b2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140148f88
nop
mov rcx, qword [rsp + 0x590]
jmp 0x14000c8ca
mov rax, qword [rsp + 0x6b0]
cmp rax, 0xf
jbe 0x14000c90a
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c904
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c904
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140148f88
nop
movzx edx, byte [rsp + 0x6b8]
lea rcx, [rsp + 0x6c0]
call fcn.14001c200
nop
mov rcx, qword [rsp + 0x800]
xor rcx, rsp
call fcn.140148c30
lea r11, [rsp + 0x810]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.1400039d0
nop
call fcn.140003830
nop
mov rcx, rax
call fcn.14001e8c0
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x30]
lea rdx, [0x140221668]
lea rcx, [rsp + 0x150]
call fcn.140048f30
nop
mov r9, r15
mov r8, rax
mov edx, 0x12e
lea rcx, [rsp + 0x500]
call fcn.1400256a0
lea rdx, [0x1402510f0]
lea rcx, [rsp + 0x500]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rax
call fcn.14001e8c0
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x30]
lea rdx, [0x140221668]
lea rcx, [rsp + 0x150]
call fcn.140048f30
nop
mov r9, r15
mov r8, rax
mov edx, 0x12e
lea rcx, [rsp + 0x538]
call fcn.1400256a0
lea rdx, [0x1402510f0]
lea rcx, [rsp + 0x538]
call sub.VCRUNTIME140.dll__CxxThrowException
int3