Function at 0x14002c2e0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x240]
sub rsp, 0x340
mov rax, qword [0x1400c4040]
xor rax, rsp
mov qword [rbp + 0x230], rax
mov r12, rdx
mov rsi, rcx
xor r13d, r13d
mov dword [rsp + 0x50], r13d
call fcn.14002bdf0
test al, al
jne 0x14002c351
lea rdx, str.No_permissions_or_WMI_service_isnt_running.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14000b890
lea rdx, [0x14000be30]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor al, al
jmp 0x14002d8cc
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
mov ebx, eax
test eax, eax
jns 0x14002c3a8
lea rdx, str.Failed_to_initialize_COM_library._Error_code__0x
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14000b890
lea rdx, [0x140004a80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x14000be30]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Attempting_fallback_spoofing_via_registry_manipulation.
jmp 0x14002c32e
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x38], r13d
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
mov edx, 0xffffffff
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
mov ebx, eax
test eax, eax
jns 0x14002c3e9
lea rdx, str.Failed_to_initialize_security._Error_code__0x
jmp 0x14002d888
mov qword [rsp + 0x78], r13
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
lea r9, [0x14009c018]
xor edx, edx
mov r8d, 1
lea rcx, [0x14009c028]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov ebx, eax
test eax, eax
js 0x14002d881
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x14002d881
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x70], r13
mov rax, qword [rax]
mov rdi, qword [rax + 0x18]
mov ecx, 0x18
call fcn.140091dd0
mov rbx, rax
mov qword [rbp - 0x68], rax
test rax, rax
je 0x14002c478
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
lea rcx, [0x1400ac320]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14002d901
jmp 0x14002c47b
mov rbx, r13
mov qword [rbp - 0x68], rbx
test rbx, rbx
je 0x14002d917
lea rax, [rsp + 0x70]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbx]
mov rcx, qword [rsp + 0x78]
call rdi
mov edi, eax
mov ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x14002c4f7
mov rcx, qword [rbx]
test rcx, rcx
je 0x14002c4d8
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r13
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14002c4ea
call fcn.140092320
mov qword [rbx + 8], r13
mov edx, 0x18
mov rcx, rbx
call fcn.140092320
test edi, edi
js 0x14002d82e
mov rbx, qword [rsp + 0x70]
test rbx, rbx
je 0x14002d82e
mov qword [rbp - 0x68], rbx
mov dword [rsp + 0x38], r13d
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa
mov rcx, rbx
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov edi, eax
test eax, eax
jns 0x14002c58b
lea rdx, str.Could_not_set_proxy_blanket._Error_code__0x
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14000b890
lea rdx, [0x140004a80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov edx, edi
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x14000be30]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor dil, dil
jmp 0x14002d81d
mov rdx, rsi
lea rcx, [rbp + 0x168]
call fcn.1400298f0
mov r15, rax
mov rdx, r12
lea rcx, [rbp + 0x148]
call fcn.1400298f0
mov rdi, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 7
jb 0x14002c661
lea rax, [r8 + 7]
mov qword [rdi + 0x10], rax
mov r14, rdi
cmp rcx, 7
jbe 0x14002c5db
mov r14, qword [rdi]
lea rax, [0x1400ac796]
lea rcx, str.SELECT
cmp rax, r14
jbe 0x14002c60c
lea rax, [r14 + r8*2]
cmp rcx, rax
ja 0x14002c60c
cmp r14, rcx
ja 0x14002c601
mov rsi, r13
jmp 0x14002c611
mov rsi, r14
sub rsi, rcx
sar rsi, 1
jmp 0x14002c611
mov esi, 7
lea rcx, [r14 + 0xe]
lea r8, [r8*2 + 2]
mov rdx, r14
call sub.VCRUNTIME140.dll_memmove
lea rbx, [rsi + rsi]
mov r8, rbx
lea rdx, str.SELECT
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
lea rdx, str.SELECT
lea rdx, [rdx + 0xe]
lea rdx, [rdx + rsi*2]
lea rcx, [r14 + rbx]
mov r8d, 7
sub r8, rsi
add r8, r8
call sub.VCRUNTIME140.dll_memcpy
jmp 0x14002c67a
mov qword [rsp + 0x28], 7
mov edx, 7
mov rcx, rdi
call fcn.14002ed10
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x88], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x98], xmm1
movups xmm0, xmmword [rdi]
movups xmmword [rbp + 0x88], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp + 0x98], xmm1
mov qword [rdi + 0x18], 7
mov qword [rdi + 0x10], r13
mov word [rdi], r13w
mov ebx, dword [rsp + 0x50]
bts ebx, 0xe
mov r8d, 6
lea rdx, str._FROM
lea rcx, [rbp + 0x88]
call fcn.14000aa60
movups xmm0, xmmword [rax]
movups xmmword [rbp + 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x18], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
bts ebx, 0xf
mov r9, r15
lea r8, [rbp + 8]
lea rcx, [rbp + 0xc8]
call fcn.14002e5c0
bts ebx, 0xd
mov dword [rsp + 0x50], ebx
mov rdx, qword [rbp + 0x20]
cmp rdx, 7
jbe 0x14002c757
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002c751
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002c751
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 7
jbe 0x14002c7a0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002c79b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002c79b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
movdqa xmm0, xmmword [0x1400b1170]
movdqu xmmword [rbp + 0x98], xmm0
mov word [rbp + 0x88], r13w
mov rdx, qword [rbp + 0x160]
cmp rdx, 7
jbe 0x14002c809
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002c7fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002c7fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
movdqa xmm0, xmmword [0x1400b1170]
movdqu xmmword [rbp + 0x158], xmm0
mov word [rbp + 0x148], r13w
mov rdx, qword [rbp + 0x180]
cmp rdx, 7
jbe 0x14002c86a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002c85d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002c85d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
movdqa xmm0, xmmword [0x1400b1170]
movdqu xmmword [rbp + 0x178], xmm0
mov word [rbp + 0x168], r13w
mov qword [rbp - 0x80], r13
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax]
mov r14, qword [rcx + 0xa0]
lea rdi, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 7
cmova rdi, qword [rbp + 0xc8]
mov ecx, 0x18
call fcn.140091dd0
mov rbx, rax
mov qword [rbp - 0x70], rax
test rax, rax
je 0x14002c8e1
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x14002c8e4
test rdi, rdi
jne 0x14002d90c
jmp 0x14002c8e4
mov rbx, r13
mov qword [rbp - 0x70], rbx
test rbx, rbx
je 0x14002d922
mov rsi, qword [rbx]
mov ecx, 0x18
call fcn.140091dd0
mov rdi, rax
mov qword [rbp - 0x78], rax
test rax, rax
je 0x14002c926
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
lea rcx, [0x1400ac3d0]
call fcn.140093ad0
mov qword [rdi], rax
jmp 0x14002c929
mov rdi, r13
mov qword [rbp - 0x78], rdi
test rdi, rdi
je 0x14002d92d
lea rax, [rbp - 0x80]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov r9d, 0x30
mov r8, rsi
mov rdx, qword [rdi]
mov rcx, qword [rsp + 0x70]
call r14
mov esi, eax
mov ecx, 0xffffffff
lock xadd dword [rdi + 0x10], ecx
cmp ecx, 1
jne 0x14002c99a
mov rcx, qword [rdi]
test rcx, rcx
je 0x14002c97a
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r13
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14002c98c
call fcn.140092320
mov qword [rdi + 8], r13
mov edx, 0x18
mov rcx, rdi
call fcn.140092320
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14002c9d9
mov rcx, qword [rbx]
test rcx, rcx
je 0x14002c9ba
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r13
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14002c9cc
call fcn.140092320
mov qword [rbx + 8], r13
mov edx, 0x18
mov rcx, rbx
call fcn.140092320
test esi, esi
js 0x14002d777
mov rbx, qword [rbp - 0x80]
test rbx, rbx
je 0x14002d777
mov qword [rbp - 0x70], rbx
mov qword [rsp + 0x58], r13
mov dword [rsp + 0x68], r13d
mov rax, qword [rbx]
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x58]
mov edx, 0xffffffff
mov r8d, 1
mov rcx, rbx
call qword [rax + 0x20]
test eax, eax
jne 0x14002d6fe
lea r15, [0x1400a2930]
nop
mov rax, qword [rsp + 0x58]
mov qword [rbp - 0x78], rax
lea rcx, [rbp - 0x30]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax]
mov rsi, qword [rcx + 0x20]
mov rdi, r12
cmp qword [r12 + 0x18], 0xf
jbe 0x14002ca5e
mov rdi, qword [r12]
mov ecx, 0x18
call fcn.140091dd0
mov rbx, rax
mov qword [rbp - 0x40], rax
test rax, rax
je 0x14002ca8c
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
mov rcx, rdi
call fcn.140093ad0
mov qword [rbx], rax
jmp 0x14002ca8f
mov rbx, r13
mov qword [rsp + 0x60], rbx
test rbx, rbx
je 0x14002d8f6
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
lea r9, [rbp - 0x30]
xor r8d, r8d
mov rdx, qword [rbx]
mov rcx, qword [rsp + 0x58]
call rsi
mov edi, eax
mov ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x14002caf9
mov rcx, qword [rbx]
test rcx, rcx
je 0x14002cada
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r13
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14002caec
call fcn.140092320
mov qword [rbx + 8], r13
mov edx, 0x18
mov rcx, rbx
call fcn.140092320
test edi, edi
js 0x14002d6b3
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
mov rbx, r13
mov qword [rbp + 0x38], rbx
mov esi, 0xf
mov qword [rbp + 0x40], rsi
mov byte [rbp + 0x28], bl
mov edi, dword [rsp + 0x50]
or edi, 0x20
mov dword [rsp + 0x50], edi
mov r14d, 0xc
nop dword [rax]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14002cb44
dec eax
or eax, 0xfffffff0
inc eax
movsxd rcx, eax
movzx r9d, byte [rcx + r15]
cmp rbx, rsi
jae 0x14002cb71
lea rax, [rbx + 1]
mov qword [rbp + 0x38], rax
lea rax, [rbp + 0x28]
cmp rsi, 0xf
cmova rax, qword [rbp + 0x28]
mov byte [rax + rbx], r9b
mov byte [rax + rbx + 1], 0
jmp 0x14002cb7a
lea rcx, [rbp + 0x28]
call fcn.14000c6a0
sub r14, 1
je 0x14002cb8a
mov rsi, qword [rbp + 0x40]
mov rbx, qword [rbp + 0x38]
jmp 0x14002cb30
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov qword [rbp + 0x20], 0xf
or edi, 0x40
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14002cbb0
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx eax, byte [rax + r15]
mov byte [rbp + 8], al
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14002cbce
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx eax, byte [rax + r15]
mov byte [rbp + 9], al
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14002cbec
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx eax, byte [rax + r15]
mov byte [rbp + 0xa], al
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14002cc0a
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx ecx, byte [rax + r15]
mov qword [rbp + 0x18], 4
mov byte [rbp + 0xb], cl
mov byte [rbp + 0xc], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x48], xmm0
mov qword [rbp + 0x60], 0xf
bts edi, 7
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14002cc47
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx eax, byte [rax + r15]
mov byte [rbp + 0x48], al
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14002cc65
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx eax, byte [rax + r15]
mov byte [rbp + 0x49], al
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14002cc83
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx eax, byte [rax + r15]
mov byte [rbp + 0x4a], al
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14002cca1
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx ecx, byte [rax + r15]
mov qword [rbp + 0x58], 4
mov byte [rbp + 0x4b], cl
mov byte [rbp + 0x4c], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x80], 0xf
bts edi, 8
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14002cce1
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx eax, byte [rax + r15]
mov byte [rbp + 0x68], al
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14002ccff
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx eax, byte [rax + r15]
mov byte [rbp + 0x69], al
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14002cd1d
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx eax, byte [rax + r15]
mov byte [rbp + 0x6a], al
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14002cd3b
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx ecx, byte [rax + r15]
mov qword [rbp + 0x78], 4
mov byte [rbp + 0x6b], cl
mov byte [rbp + 0x6c], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], r13
mov qword [rbp], 0xf
mov byte [rbp - 0x18], 0
bts edi, 9
mov dword [rsp + 0x50], edi
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14002cd84
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx r9d, byte [rax + r15]
mov rcx, qword [rbp - 8]
mov rdx, qword [rbp]
cmp rcx, rdx
jae 0x14002cdb8
lea rax, [rcx + 1]
mov qword [rbp - 8], rax
lea rax, [rbp - 0x18]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x18]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14002cdc1
lea rcx, [rbp - 0x18]
call fcn.14000c6a0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14002cdd5
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx r9d, byte [rax + r15]
mov rcx, qword [rbp - 8]
mov rdx, qword [rbp]
cmp rcx, rdx
jae 0x14002ce09
lea rax, [rcx + 1]
mov qword [rbp - 8], rax
lea rax, [rbp - 0x18]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x18]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14002ce12
lea rcx, [rbp - 0x18]
call fcn.14000c6a0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14002ce26
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx r9d, byte [rax + r15]
mov rcx, qword [rbp - 8]
mov rdx, qword [rbp]
cmp rcx, rdx
jae 0x14002ce5a
lea rax, [rcx + 1]
mov qword [rbp - 8], rax
lea rax, [rbp - 0x18]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x18]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14002ce63
lea rcx, [rbp - 0x18]
call fcn.14000c6a0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14002ce77
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx r9d, byte [rax + r15]
mov rcx, qword [rbp - 8]
mov rdx, qword [rbp]
cmp rcx, rdx
jae 0x14002ceab
lea rax, [rcx + 1]
mov qword [rbp - 8], rax
lea rax, [rbp - 0x18]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x18]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14002ceb4
lea rcx, [rbp - 0x18]
call fcn.14000c6a0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14002cec8
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx r9d, byte [rax + r15]
mov rcx, qword [rbp - 8]
mov rdx, qword [rbp]
cmp rcx, rdx
jae 0x14002cefc
lea rax, [rcx + 1]
mov qword [rbp - 8], rax
lea rax, [rbp - 0x18]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x18]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14002cf05
lea rcx, [rbp - 0x18]
call fcn.14000c6a0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14002cf19
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx r9d, byte [rax + r15]
mov rcx, qword [rbp - 8]
mov rdx, qword [rbp]
cmp rcx, rdx
jae 0x14002cf4d
lea rax, [rcx + 1]
mov qword [rbp - 8], rax
lea rax, [rbp - 0x18]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x18]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14002cf56
lea rcx, [rbp - 0x18]
call fcn.14000c6a0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14002cf6a
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx r9d, byte [rax + r15]
mov rcx, qword [rbp - 8]
mov rdx, qword [rbp]
cmp rcx, rdx
jae 0x14002cf9e
lea rax, [rcx + 1]
mov qword [rbp - 8], rax
lea rax, [rbp - 0x18]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x18]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14002cfa7
lea rcx, [rbp - 0x18]
call fcn.14000c6a0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14002cfbb
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx r9d, byte [rax + r15]
mov rcx, qword [rbp - 8]
mov rdx, qword [rbp]
cmp rcx, rdx
jae 0x14002cfef
lea rax, [rcx + 1]
mov qword [rbp - 8], rax
lea rax, [rbp - 0x18]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x18]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14002cff8
lea rcx, [rbp - 0x18]
call fcn.14000c6a0
mov r8d, 1
lea rdx, [0x1400ac338]
lea rcx, [rbp - 0x18]
call fcn.14000b380
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1e8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1f8], xmm1
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], r13
mov byte [rax], 0
bts edi, 0xa
mov dword [rsp + 0x50], edi
lea r9, [rbp + 0x68]
lea r8, [rbp + 0x1e8]
lea rcx, [rbp + 0x128]
call fcn.140026e20
bts edi, 0xb
mov dword [rsp + 0x50], edi
mov r8d, 1
lea rdx, [0x1400ac338]
lea rcx, [rbp + 0x128]
call fcn.14000b380
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1c8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1d8], xmm1
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], r13
mov byte [rax], 0
bts edi, 0xc
mov dword [rsp + 0x50], edi
lea r9, [rbp + 0x48]
lea r8, [rbp + 0x1c8]
lea rcx, [rbp + 0x108]
call fcn.140026e20
or edi, 1
mov dword [rsp + 0x50], edi
mov r8d, 1
lea rdx, [0x1400ac338]
lea rcx, [rbp + 0x108]
call fcn.14000b380
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1a8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1b8], xmm1
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], r13
mov byte [rax], 0
or edi, 4
mov dword [rsp + 0x50], edi
lea r9, [rbp + 8]
lea r8, [rbp + 0x1a8]
lea rcx, [rbp + 0xe8]
call fcn.140026e20
or edi, 2
mov dword [rsp + 0x50], edi
mov r8d, 1
lea rdx, [0x1400ac338]
lea rcx, [rbp + 0xe8]
call fcn.14000b380
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x188], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x198], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or edi, 8
mov dword [rsp + 0x50], edi
lea r9, [rbp + 0x28]
lea r8, [rbp + 0x188]
lea rcx, [rbp + 0x208]
call fcn.140026e20
or edi, 0x10
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 0xf
jbe 0x14002d1be
inc rdx
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002d1b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002d715
call fcn.140092320
nop
mov rdx, qword [rbp + 0x100]
cmp rdx, 0xf
jbe 0x14002d1ff
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002d1fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002d71c
call fcn.140092320
mov qword [rbp + 0xf8], r13
mov qword [rbp + 0x100], 0xf
mov byte [rbp + 0xe8], 0
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0xf
jbe 0x14002d25a
inc rdx
mov rcx, qword [rbp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002d254
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002d723
call fcn.140092320
nop
mov rdx, qword [rbp + 0x120]
cmp rdx, 0xf
jbe 0x14002d29b
inc rdx
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002d296
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002d72a
call fcn.140092320
mov qword [rbp + 0x118], r13
mov qword [rbp + 0x120], 0xf
mov byte [rbp + 0x108], 0
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 0xf
jbe 0x14002d2f6
inc rdx
mov rcx, qword [rbp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002d2f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002d731
call fcn.140092320
nop
mov rdx, qword [rbp + 0x140]
cmp rdx, 0xf
jbe 0x14002d337
inc rdx
mov rcx, qword [rbp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002d332
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002d738
call fcn.140092320
mov qword [rbp + 0x138], r13
mov qword [rbp + 0x140], 0xf
mov byte [rbp + 0x128], 0
mov rdx, qword [rbp + 0x200]
cmp rdx, 0xf
jbe 0x14002d391
inc rdx
mov rcx, qword [rbp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002d38c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002d73f
call fcn.140092320
btr edi, 9
mov rdx, qword [rbp]
cmp rdx, 0xf
jbe 0x14002d3d0
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002d3cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002d746
call fcn.140092320
mov qword [rbp - 8], r13
mov qword [rbp], 0xf
mov byte [rbp - 0x18], 0
btr edi, 8
mov rdx, qword [rbp + 0x80]
cmp rdx, 0xf
jbe 0x14002d422
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002d41d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002d74d
call fcn.140092320
btr edi, 7
mov rdx, qword [rbp + 0x60]
cmp rdx, 0xf
jbe 0x14002d461
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002d45c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002d754
call fcn.140092320
and edi, 0xffffffbf
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x14002d49f
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002d49a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002d75b
call fcn.140092320
and edi, 0xffffffdf
mov dword [rsp + 0x50], edi
mov rdx, qword [rbp + 0x40]
cmp rdx, 0xf
jbe 0x14002d4e1
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002d4dc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002d762
call fcn.140092320
lea rdx, [rbp + 0x208]
lea rcx, [rbp + 0xa8]
call fcn.1400298f0
nop
lea rcx, [rbp - 0x58]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, 8
mov word [rbp - 0x58], ax
lea rcx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 7
cmova rcx, qword [rbp + 0xa8]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbp - 0x50], rax
test rax, rax
je 0x14002d5ee
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax]
mov rsi, qword [rcx + 0x28]
mov rdi, r12
cmp qword [r12 + 0x18], 0xf
jbe 0x14002d54d
mov rdi, qword [r12]
mov ecx, 0x18
call fcn.140091dd0
mov rbx, rax
mov qword [rbp - 0x38], rax
test rax, rax
je 0x14002d57b
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
mov rcx, rdi
call fcn.140093ad0
mov qword [rbx], rax
jmp 0x14002d57e
mov rbx, r13
mov qword [rsp + 0x60], rbx
test rbx, rbx
je 0x14002d938
mov dword [rsp + 0x20], r13d
lea r9, [rbp - 0x58]
xor r8d, r8d
mov rdx, qword [rbx]
mov rcx, qword [rsp + 0x58]
call rsi
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14002d5e2
mov rcx, qword [rbx]
test rcx, rcx
je 0x14002d5c3
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r13
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14002d5d5
call fcn.140092320
mov qword [rbx + 8], r13
mov edx, 0x18
mov rcx, rbx
call fcn.140092320
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x14002d612
lea rdx, str.Failed_to_allocate_BSTR_for_new_value.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14000b890
lea rdx, [0x14000be30]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0xc0]
cmp rdx, 7
jbe 0x14002d658
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002d653
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002d769
call fcn.140092320
mov qword [rbp + 0xb8], r13
mov qword [rbp + 0xc0], 7
mov word [rbp + 0xa8], r13w
mov rdx, qword [rbp + 0x220]
cmp rdx, 0xf
jbe 0x14002d6b3
inc rdx
mov rcx, qword [rbp + 0x208]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002d6ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002d770
call fcn.140092320
lea rcx, [rbp - 0x30]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
mov rcx, qword [rbp - 0x78]
test rcx, rcx
je 0x14002d6ce
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x58]
mov edx, 0xffffffff
mov r8d, 1
call qword [rax + 0x20]
test eax, eax
je 0x14002ca30
mov rbx, qword [rbp - 0x70]
mov dil, 1
test rbx, rbx
je 0x14002d710
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
jmp 0x14002d7b8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rdx, str.WMI_query_failed._Error_code__0x
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14000b890
lea rdx, [0x140004a80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov edx, esi
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x14000be30]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor dil, dil
mov rdx, qword [rbp + 0xe0]
cmp rdx, 7
jbe 0x14002d801
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002d7fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002d7fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092320
movdqa xmm0, xmmword [0x1400b1170]
movdqu xmmword [rbp + 0xd8], xmm0
mov word [rbp + 0xc8], r13w
mov rbx, qword [rbp - 0x68]
test rbx, rbx
je 0x14002d82c
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
jmp 0x14002d86f
lea rdx, str.Could_not_connect_to_WMI_namespace._Error_code__0x
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14000b890
lea rdx, [0x140004a80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov edx, edi
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x14000be30]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor dil, dil
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x14002d87f
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
jmp 0x14002d8c2
lea rdx, str.Failed_to_create_IWbemLocator_object._Err_code__0x
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14000b890
lea rdx, [0x140004a80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x14000be30]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor dil, dil
call qword [sym.imp.ole32.dll_CoUninitialize]
movzx eax, dil
mov rcx, qword [rbp + 0x230]
xor rcx, rsp
call fcn.140091db0
mov rbx, qword [rsp + 0x390]
add rsp, 0x340
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x8007000e
call fcn.140093ac0
nop
mov ecx, 0x8007000e
call fcn.140093ac0
nop
mov ecx, 0x8007000e
call fcn.140093ac0
nop
mov ecx, 0x8007000e
call fcn.140093ac0
nop
mov ecx, 0x8007000e
call fcn.140093ac0
nop
mov ecx, 0x8007000e
call fcn.140093ac0
nop
mov ecx, 0x8007000e
call fcn.140093ac0
int3