Function at 0x140009780
Capabilities:
Reference wmi statements

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x8a0
mov rax, qword [0x140b29680]
xor rax, rsp
mov qword [rsp + 0x890], rax
mov r15, r8
mov r12, rdx
mov r14, rcx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x160], rcx
mov qword [rsp + 0x600], rdx
mov qword [rsp + 0x608], r8
xor ebx, ebx
mov dword [rsp + 0x630], ebx
lea rsi, [rcx + 0x80]
xor r8d, r8d
lea rdx, [0x14021f681]
mov rcx, rsi
call fcn.14001d760
mov byte [r14 + 0x78], bl
lea rdx, str.keyauth_hwid
lea rcx, [rsp + 0x6b0]
call fcn.140021d40
nop
lea rcx, [rsp + 0x288]
call fcn.140018450
nop
mov rdx, rax
lea rcx, [rsp + 0x6c8]
call fcn.140021e00
nop
lea rax, [rsp + 0x6b0]
mov qword [rsp + 0x610], rax
lea rax, [rsp + 0x6e0]
mov qword [rsp + 0x618], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x610]
lea rcx, [rsp + 0x3d0]
call fcn.1400194c0
mov qword [rsp + 0x3e0], rbx
lea rdx, str.pnp_id
lea rcx, [rsp + 0x258]
call fcn.140021e90
nop
lea r8, str.PNPDeviceID
lea rdx, str.SELECT__FROM_Win32_VideoController
lea rcx, [rsp + 0x2b0]
call fcn.140017eb0
nop
mov rdx, rax
lea rcx, [rsp + 0x270]
call fcn.140021e00
nop
lea rax, [rsp + 0x258]
mov qword [rsp + 0x610], rax
lea rax, [rsp + 0x288]
mov qword [rsp + 0x618], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x610]
lea rcx, [rsp + 0x3e8]
call fcn.1400194c0
mov qword [rsp + 0x3f8], rbx
lea rcx, [rsp + 0x198]
call fcn.140021f50
nop
lea r8, str.Product
lea rdx, str.SELECT__FROM_Win32_BaseBoard
lea rcx, [rsp + 0x4f0]
call fcn.140017eb0
nop
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.140021e00
nop
lea rax, [rsp + 0x198]
mov qword [rsp + 0x610], rax
lea rax, [rsp + 0x1c8]
mov qword [rsp + 0x618], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x610]
lea rcx, [rsp + 0x400]
call fcn.1400194c0
mov qword [rsp + 0x410], rbx
lea rdx, [0x14021fb78]
lea rcx, [rsp + 0x1c8]
call fcn.140022010
nop
lea r8, str.Name
lea rdx, str.SELECT__FROM_Win32_Processor
lea rcx, [rsp + 0x550]
call fcn.140017eb0
nop
mov rdx, rax
lea rcx, [rsp + 0x1e0]
call fcn.140021e00
nop
lea rax, [rsp + 0x1c8]
mov qword [rsp + 0x610], rax
lea rax, [rsp + 0x1f8]
mov qword [rsp + 0x618], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x610]
lea rcx, [rsp + 0x418]
call fcn.1400194c0
mov qword [rsp + 0x428], rbx
lea rdx, [0x14021fbb0]
lea rcx, [rsp + 0xa0]
call fcn.140022010
nop
lea r8, str.PartNumber
lea rdx, str.SELECT__FROM_Win32_PhysicalMemory
lea rcx, [rsp + 0x510]
call fcn.140017eb0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x140009a2b
mov rax, qword [rax]
mov rcx, rax
call fcn.1400183e0
mov rdi, rax
mov byte [rsp + 0xb8], 0
xor eax, eax
mov qword [rsp + 0xc0], rax
xor edx, edx
lea rcx, [rsp + 0xc0]
call fcn.14001c200
mov byte [rsp + 0xb8], 3
xorps xmm0, xmm0
movups xmmword [rsp + 0x610], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140148f4c
mov r13, rax
lea rax, [rsp + 0x620]
mov qword [rsp + 0x610], rax
mov qword [rsp + 0x618], r13
xorps xmm0, xmm0
movups xmmword [r13], xmm0
mov qword [r13 + 0x10], rbx
mov qword [r13 + 0x18], rbx
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdi + r8], 0
jne 0x140009aa6
mov rdx, rdi
mov rcx, r13
call fcn.140024450
nop
mov qword [rsp + 0xc0], r13
mov qword [rsp + 0xc8], rbx
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x610], rax
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x618], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x610]
lea rcx, [rsp + 0x430]
call fcn.1400194c0
mov qword [rsp + 0x440], rbx
lea rdx, str.SSD_HDD
lea rcx, [rsp + 0x1f8]
call fcn.140022190
nop
lea r8, str.SerialNumber
lea rdx, str.SELECT__FROM_Win32_DiskDrive
lea rcx, [rsp + 0x530]
call fcn.140017eb0
nop
mov rdx, rax
lea rcx, [rsp + 0x210]
call fcn.140021e00
nop
lea rax, [rsp + 0x1f8]
mov qword [rsp + 0x610], rax
lea rax, [rsp + 0x228]
mov qword [rsp + 0x618], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x610]
lea rcx, [rsp + 0x448]
call fcn.1400194c0
mov qword [rsp + 0x458], rbx
lea rdx, [0x14021fc40]
lea rcx, [rsp + 0x228]
call fcn.140022010
nop
lea r8, str.Name
lea rdx, str.SELECT__FROM_Win32_VideoController
lea rcx, [rsp + 0x570]
call fcn.140017eb0
nop
mov rdx, rax
lea rcx, [rsp + 0x240]
call fcn.140021e00
nop
lea rax, [rsp + 0x228]
mov qword [rsp + 0x610], rax
lea rax, [rsp + 0x258]
mov qword [rsp + 0x618], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x610]
lea rcx, [rsp + 0x460]
call fcn.1400194c0
mov qword [rsp + 0x470], rbx
mov byte [rsp + 0x168], 0
xor eax, eax
mov qword [rsp + 0x170], rax
xor edx, edx
lea rcx, [rsp + 0x170]
call fcn.14001c200
mov byte [rsp + 0x168], 3
xorps xmm0, xmm0
movups xmmword [rsp + 0x610], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140148f4c
mov rdi, rax
lea rax, [rsp + 0x620]
mov qword [rsp + 0x610], rax
mov qword [rsp + 0x618], rdi
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], rbx
mov r8d, 7
lea rdx, str.discord
mov rcx, rdi
call fcn.140024450
nop
mov qword [rsp + 0x170], rdi
mov qword [rsp + 0x178], rbx
lea rdx, str.username
lea rcx, [rsp + 0x2d8]
call fcn.140022250
nop
lea rdx, [0x140b6912b]
lea rcx, [rsp + 0x2f0]
call fcn.140022310
nop
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0x610], rax
lea rax, [rsp + 0x308]
mov qword [rsp + 0x618], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x610]
lea rcx, [rsp + 0x760]
call fcn.1400194c0
mov qword [rsp + 0x770], rbx
lea rcx, [rsp + 0x308]
call fcn.1400223d0
nop
lea rdi, [0x140b69022]
mov rdx, rdi
lea rcx, [rsp + 0x320]
call fcn.140022310
nop
lea rax, [rsp + 0x308]
mov qword [rsp + 0x610], rax
lea rax, [rsp + 0x338]
mov qword [rsp + 0x618], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x610]
lea rcx, [rsp + 0x778]
call fcn.1400194c0
mov qword [rsp + 0x788], rbx
lea rdx, [0x14021fc60]
lea rcx, [rsp + 0x338]
call fcn.140022010
nop
lea rax, [0x14021fc64]
mov qword [rsp + 0x630], rax
mov qword [rsp + 0x638], 5
mov qword [rsp + 0x618], rdi
movabs rax, 0xb000000000000000
mov qword [rsp + 0x610], rax
mov qword [rsp + 0x30], 1
lea rax, [rsp + 0x610]
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
movaps xmm1, xmmword [rsp + 0x630]
movdqa xmmword [rsp + 0x630], xmm1
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x630]
lea rcx, [rsp + 0x50]
call fcn.14002e9f0
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x350]
call fcn.140021e00
nop
lea rax, [rsp + 0x338]
mov qword [rsp + 0x610], rax
lea rax, [rsp + 0x368]
mov qword [rsp + 0x618], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x610]
lea rcx, [rsp + 0x790]
call fcn.1400194c0
mov qword [rsp + 0x7a0], rbx
lea rdx, str.avatar_url
lea rcx, [rsp + 0x368]
call fcn.140022490
nop
lea rdx, [0x140b69234]
lea rcx, [rsp + 0x380]
call fcn.140022310
nop
lea rax, [rsp + 0x368]
mov qword [rsp + 0x610], rax
lea rax, [rsp + 0x398]
mov qword [rsp + 0x618], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x610]
lea rcx, [rsp + 0x7a8]
call fcn.1400194c0
mov qword [rsp + 0x7b8], rbx
lea rdx, str.is_running
lea rcx, [rsp + 0xd0]
call fcn.140022490
mov byte [rsp + 0xe8], 0
xor eax, eax
mov qword [rsp + 0xf0], rax
movzx edi, byte [0x140b69020]
xor edx, edx
lea rcx, [rsp + 0xf0]
call fcn.14001c200
mov byte [rsp + 0xe8], 4
mov byte [rsp + 0x630], dil
mov rax, qword [rsp + 0x630]
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0xf8], rbx
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x610], rax
lea rax, [rsp + 0x100]
mov qword [rsp + 0x618], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x610]
lea rcx, [rsp + 0x7c0]
call fcn.1400194c0
mov qword [rsp + 0x7d0], rbx
lea rax, [rsp + 0x760]
mov qword [rsp + 0x610], rax
lea rax, [rsp + 0x7d8]
mov qword [rsp + 0x618], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x610]
lea rcx, [rsp + 0x180]
call fcn.1400194c0
mov qword [rsp + 0x190], rbx
lea rax, [rsp + 0x168]
mov qword [rsp + 0x610], rax
lea rax, [rsp + 0x198]
mov qword [rsp + 0x618], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x610]
lea rcx, [rsp + 0x478]
call fcn.1400194c0
mov qword [rsp + 0x488], rbx
lea rdx, str.computer_name
lea rcx, [rsp + 0x398]
call fcn.1400225b0
nop
lea rcx, [rsp + 0x690]
call fcn.140017c60
nop
mov rdx, rax
lea rcx, [rsp + 0x3b0]
call fcn.140021e00
nop
lea rax, [rsp + 0x398]
mov qword [rsp + 0x610], rax
lea rax, [rsp + 0x3c8]
mov qword [rsp + 0x618], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x610]
lea rcx, [rsp + 0x490]
call fcn.1400194c0
mov qword [rsp + 0x4a0], rbx
lea rdx, [0x14021fca0]
lea rcx, [rsp + 0x70]
call fcn.140022190
nop
mov byte [rsp + 0x88], 0
xor eax, eax
mov qword [rsp + 0x90], rax
lea rdx, [r14 + 0x20]
lea rcx, [rsp + 0x88]
call fcn.1400411c0
mov qword [rsp + 0x98], rbx
lea rax, [rsp + 0x70]
mov qword [rsp + 0x610], rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x618], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x610]
lea rcx, [rsp + 0x4a8]
call fcn.1400194c0
mov qword [rsp + 0x4b8], rbx
lea rdx, str.seller_version
lea rcx, [rsp + 0x100]
call fcn.1400226a0
nop
mov byte [rsp + 0x118], 0
xor eax, eax
mov qword [rsp + 0x120], rax
mov rdx, r15
lea rcx, [rsp + 0x118]
call fcn.1400411c0
mov qword [rsp + 0x128], rbx
lea rax, [rsp + 0x100]
mov qword [rsp + 0x610], rax
lea rax, [rsp + 0x130]
mov qword [rsp + 0x618], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x610]
lea rcx, [rsp + 0x4c0]
call fcn.1400194c0
mov qword [rsp + 0x4d0], rbx
lea rdx, str.seller
lea rcx, [rsp + 0x130]
call fcn.140021e90
nop
mov byte [rsp + 0x148], 0
xor eax, eax
mov qword [rsp + 0x150], rax
mov rdx, r12
lea rcx, [rsp + 0x148]
call fcn.1400411c0
mov qword [rsp + 0x158], rbx
lea rax, [rsp + 0x130]
mov qword [rsp + 0x610], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x618], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x610]
lea rcx, [rsp + 0x4d8]
call fcn.1400194c0
mov qword [rsp + 0x4e8], rbx
lea rax, [rsp + 0x3d0]
mov qword [rsp + 0x610], rax
lea rax, [rsp + 0x4f0]
mov qword [rsp + 0x618], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rsp + 0x610]
lea rcx, [rsp + 0x748]
call fcn.1400194c0
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0xc]
lea rcx, [rsp + 0x3d0]
call fcn.140148e34
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x130]
call fcn.140148e34
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x100]
call fcn.140148e34
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x70]
call fcn.140148e34
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x398]
call fcn.140148e34
nop
lea rcx, [rsp + 0x690]
call fcn.14001aa80
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x168]
call fcn.140148e34
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x13]
lea rcx, [rsp + 0x760]
call fcn.140148e34
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0xd0]
call fcn.140148e34
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x368]
call fcn.140148e34
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x338]
call fcn.140148e34
nop
lea rcx, [rsp + 0x50]
call fcn.14001aa80
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x308]
call fcn.140148e34
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x2d8]
call fcn.140148e34
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x228]
call fcn.140148e34
nop
lea rcx, [rsp + 0x570]
call fcn.14001aa80
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x1f8]
call fcn.140148e34
nop
lea rcx, [rsp + 0x530]
call fcn.14001aa80
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0xa0]
call fcn.140148e34
nop
lea rcx, [rsp + 0x510]
call fcn.14001aa80
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x1c8]
call fcn.140148e34
nop
lea rcx, [rsp + 0x550]
call fcn.14001aa80
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x198]
call fcn.140148e34
nop
lea rcx, [rsp + 0x4f0]
call fcn.14001aa80
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x258]
call fcn.140148e34
nop
lea rcx, [rsp + 0x2b0]
call fcn.14001aa80
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x6b0]
call fcn.140148e34
nop
lea rcx, [rsp + 0x288]
call fcn.14001aa80
lea rax, [rsp + 0x748]
mov qword [rsp + 0x630], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x6b0], xmm0
movups xmmword [rsp + 0x6c0], xmm0
movups xmmword [rsp + 0x6d0], xmm0
movups xmmword [rsp + 0x6e0], xmm0
movups xmmword [rsp + 0x6f0], xmm0
movups xmmword [rsp + 0x700], xmm0
movups xmmword [rsp + 0x710], xmm0
lea rdx, [rsp + 0x6b0]
lea rcx, [rsp + 0x630]
call fcn.140018da0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x760], xmm0
movups xmmword [rsp + 0x770], xmm0
movups xmmword [rsp + 0x780], xmm0
movups xmmword [rsp + 0x790], xmm0
movups xmmword [rsp + 0x7a0], xmm0
movups xmmword [rsp + 0x7b0], xmm0
movups xmmword [rsp + 0x7c0], xmm0
lea rdx, [rsp + 0x760]
lea rcx, [rsp + 0x630]
call fcn.140018d20
nop
lea rdx, [rsp + 0x760]
lea rcx, [rsp + 0x6b0]
call fcn.140023700
test al, al
je 0x14000a75e
lea rdi, [0x140000000]
nop dword [rax + rax]
xorps xmm0, xmm0
movups xmmword [rsp + 0x820], xmm0
movups xmmword [rsp + 0x830], xmm0
movups xmmword [rsp + 0x840], xmm0
movups xmmword [rsp + 0x850], xmm0
movups xmmword [rsp + 0x860], xmm0
movups xmmword [rsp + 0x870], xmm0
movups xmmword [rsp + 0x880], xmm0
mov rax, qword [rsp + 0x6b0]
mov qword [rsp + 0x820], rax
movups xmm0, xmmword [rsp + 0x6b8]
movups xmmword [rsp + 0x828], xmm0
movsd xmm1, qword [rsp + 0x6c8]
movsd qword [rsp + 0x838], xmm1
mov rax, qword [rsp + 0x6d0]
mov qword [rsp + 0x840], rax
mov rax, qword [rsp + 0x6d8]
mov qword [rsp + 0x848], rax
lea rdx, [rsp + 0x6e0]
lea rcx, [rsp + 0x850]
call fcn.14001ac80
nop
lea rdx, [rsp + 0x700]
lea rcx, [rsp + 0x870]
call fcn.14001ac80
nop
mov rdx, qword [rsp + 0x888]
cmp rdx, 0xf
jbe 0x14000a6bc
inc rdx
mov rcx, qword [rsp + 0x870]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a6b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a84b
call fcn.140148f88
mov rdx, qword [rsp + 0x868]
cmp rdx, 0xf
jbe 0x14000a6ff
inc rdx
mov rcx, qword [rsp + 0x850]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a6fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a84b
call fcn.140148f88
mov rax, qword [rsp + 0x6b0]
movzx ecx, byte [rax]
cmp ecx, 9
ja case.0x14000a719.0
mov ecx, dword [rdi + rcx*4 + 0xaf94]
add rcx, rdi
jmp rcx
add qword [rsp + 0x6b8], 0x30
jmp 0x14000a739
add qword [rsp + 0x6c0], 0x10
jmp 0x14000a739
inc qword [rsp + 0x6c8]
inc qword [rsp + 0x6d0]
lea rdx, [rsp + 0x760]
lea rcx, [rsp + 0x6b0]
call fcn.140023700
test al, al
jne 0x14000a5c0
lea rcx, [rsp + 0x760]
call fcn.14000b0e0
nop
lea rcx, [rsp + 0x6b0]
call fcn.14000b0e0
xorps xmm0, xmm0
movups xmmword [rsp + 0x728], xmm0
mov qword [rsp + 0x738], rbx
mov qword [rsp + 0x740], 0xf
mov byte [rsp + 0x728], 0
lea rax, [rsp + 0x610]
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x748]
lea rcx, [rsp + 0x610]
call fcn.140019230
mov rdi, rax
lea r8, str._version
mov rdx, r14
lea rcx, [rsp + 0x288]
call fcn.140021540
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0x2b0]
call fcn.140017060
mov ecx, dword [rax]
mov dword [rsp + 0x720], ecx
lea rdx, [rax + 8]
lea rcx, [rsp + 0x728]
call fcn.14001ab00
mov rdx, qword [rsp + 0x2d0]
cmp rdx, 0xf
jbe 0x14000a857
inc rdx
mov rcx, qword [rsp + 0x2b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a852
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a852
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140148f88
xorps xmm0, xmm0
movups xmmword [rsp + 0x690], xmm0
mov qword [rsp + 0x6a0], rbx
mov qword [rsp + 0x6a8], rbx
lea rax, [rsp + 0x728]
mov r13, qword [rsp + 0x728]
cmp qword [rsp + 0x740], 0xf
cmova rax, r13
mov qword [rsp + 0x630], rax
movabs rdi, 0x7fffffffffffffff
mov r14, qword [rsp + 0x738]
cmp r14, rdi
ja 0x14000aedd
mov qword [rsp + 0x6a8], 0xf
cmp r14, 0xf
ja 0x14000a8dc
mov qword [rsp + 0x6a0], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x690], xmm0
jmp 0x14000a982
mov rax, r14
or rax, 0xf
cmp rax, rdi
jbe 0x14000a914
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140148f4c
mov rcx, rax
test rax, rax
je 0x14000a93f
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000a955
mov rdi, rax
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rax, rcx
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14000a946
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000aee2
jmp 0x14000a8f6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000a952
call fcn.140148f4c
jmp 0x14000a955
mov rax, rbx
mov qword [rsp + 0x690], rax
mov qword [rsp + 0x6a0], r14
mov qword [rsp + 0x6a8], rdi
lea r8, [r14 + 1]
mov rdx, qword [rsp + 0x630]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
mov qword [rsp + 0x6e8], rbx
mov byte [rsp + 0x20], 0
mov r9b, 1
lea r8, [rsp + 0x6b0]
lea rdx, [rsp + 0x690]
lea rcx, [rsp + 0x610]
cmp dword [rsp + 0x720], 0xc8
jne 0x14000abea
call fcn.140022760
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x630], xmm0
mov qword [rsp + 0x640], rbx
mov qword [rsp + 0x648], rbx
mov r8d, 7
lea rdx, [0x14021fcd0]
lea rcx, [rsp + 0x630]
call fcn.140024450
lea rdx, [rsp + 0x630]
lea rcx, [rsp + 0x610]
call fcn.1400272a0
mov rcx, rax
call fcn.140022900
mov byte [rsp + 0x620], al
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rbx
mov r8d, 7
lea rdx, str.message
lea rcx, [rsp + 0x50]
call fcn.140024450
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x610]
call fcn.1400272a0
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x650], xmm0
mov rdi, rbx
mov qword [rsp + 0x660], rbx
mov r14d, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x668], r14
mov byte [rsp + 0x650], bl
mov dword [rsp + 0x630], 0x84
cmp byte [rax], 3
jne 0x14000aee8
mov r9, qword [rax + 8]
lea rax, [rsp + 0x650]
cmp rax, r9
je 0x14000aaf9
mov rdi, qword [r9 + 0x10]
cmp qword [r9 + 0x18], r14
jbe 0x14000aab7
mov r9, qword [r9]
lea rcx, [rsp + 0x650]
cmp rdi, r14
ja 0x14000aae1
mov qword [rsp + 0x660], rdi
mov r8, rdi
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + rdi + 0x650], 0
jmp 0x14000aae9
mov rdx, rdi
call fcn.1400258f0
mov rdi, qword [rsp + 0x660]
mov r14, qword [rsp + 0x668]
mov rax, qword [rsp + 0x40]
movzx ecx, byte [rsp + 0x620]
mov byte [rax + 0x78], cl
lea rax, [rsp + 0x650]
cmp rsi, rax
je 0x14000ab83
lea r9, [rsp + 0x650]
cmp r14, 0xf
cmova r9, qword [rsp + 0x650]
mov rcx, qword [rsi + 0x18]
cmp rdi, rcx
ja 0x14000ab70
mov rax, rsi
mov qword [rsp + 0x630], rax
cmp rcx, 0xf
jbe 0x14000ab50
mov rax, qword [rsi]
mov qword [rsp + 0x630], rax
mov qword [rsi + 0x10], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov rax, qword [rsp + 0x630]
mov byte [rdi + rax], 0
jmp 0x14000ab83
mov rdx, rdi
mov rcx, rsi
call fcn.1400258f0
mov r14, qword [rsp + 0x668]
mov rdi, qword [rsp + 0x40]
mov byte [rdi + 0x100], 1
cmp r14, 0xf
jbe 0x14000abcf
lea rdx, [r14 + 1]
mov rcx, qword [rsp + 0x650]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000abc9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000abc9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140148f88
nop
movzx edx, byte [rsp + 0x610]
lea rcx, [rsp + 0x618]
call fcn.14001c200
nop
jmp 0x14000ad5b
mov rax, qword [rsp + 0x40]
mov byte [rax + 0x78], 0
call fcn.140022760
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rbx
mov r8d, 7
lea rdx, str.message
lea rcx, [rsp + 0x50]
call fcn.140024450
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x610]
call fcn.1400272a0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x670], xmm0
mov qword [rsp + 0x680], rbx
mov eax, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x688], rax
mov byte [rsp + 0x670], 0
mov dword [rsp + 0x630], 0xc0
cmp byte [rdi], 3
jne 0x14000af3e
mov r9, qword [rdi + 8]
lea rcx, [rsp + 0x670]
cmp rcx, r9
je 0x14000accb
mov rdi, qword [r9 + 0x10]
cmp qword [r9 + 0x18], rax
jbe 0x14000ac91
mov r9, qword [r9]
lea rcx, [rsp + 0x670]
cmp rdi, rax
ja 0x14000acbb
mov qword [rsp + 0x680], rdi
mov r8, rdi
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + rdi + 0x670], 0
jmp 0x14000acc3
mov rdx, rdi
call fcn.1400258f0
mov rax, qword [rsp + 0x688]
lea rcx, [rsp + 0x670]
cmp rsi, rcx
je 0x14000ad05
lea rdx, [rsp + 0x670]
cmp rax, 0xf
cmova rdx, qword [rsp + 0x670]
mov r8, qword [rsp + 0x680]
mov rcx, rsi
call fcn.14001d760
mov rax, qword [rsp + 0x688]
cmp rax, 0xf
jbe 0x14000ad45
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x670]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ad3f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ad3f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140148f88
nop
movzx edx, byte [rsp + 0x610]
lea rcx, [rsp + 0x618]
call fcn.14001c200
nop
mov rdx, qword [rsp + 0x6a8]
cmp rdx, 0xf
jbe 0x14000ada2
inc rdx
mov rcx, qword [rsp + 0x690]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ad9c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ad9c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140148f88
nop
jmp 0x14000adbe
mov rax, qword [rsp + 0x740]
cmp rax, 0xf
jbe 0x14000ae01
lea rdx, [rax + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x14000adf8
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000adf8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r13
call fcn.140148f88
nop
movzx edx, byte [rsp + 0x748]
lea rcx, [rsp + 0x750]
call fcn.14001c200
nop
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x14000ae53
mov rcx, qword [r12]
inc rdx
cmp rdx, 0x1000
jb 0x14000ae4e
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000aecf
mov rcx, r8
call fcn.140148f88
mov qword [r12 + 0x10], rbx
mov qword [r12 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r12], 0
mov rdx, qword [r15 + 0x18]
cmp rdx, 0xf
jbe 0x14000ae9c
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x14000ae97
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000aed6
mov rcx, r8
call fcn.140148f88
mov qword [r15 + 0x10], rbx
mov qword [r15 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r15], 0
mov rcx, qword [rsp + 0x890]
xor rcx, rsp
call fcn.140148c30
add rsp, 0x8a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400039d0
call fcn.140003830
nop
mov rcx, rax
call fcn.14001e8c0
mov qword [rsp + 0x40], rax
lea r8, [rsp + 0x40]
lea rdx, [0x140221668]
lea rcx, [rsp + 0x288]
call fcn.140048f30
nop
mov r9, qword [rsp + 0x30]
mov r8, rax
mov edx, 0x12e
lea rcx, [rsp + 0x590]
call fcn.1400256a0
lea rdx, [0x1402510f0]
lea rcx, [rsp + 0x590]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rdi
call fcn.14001e8c0
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x30]
lea rdx, [0x140221668]
lea rcx, [rsp + 0x288]
call fcn.140048f30
nop
mov r9, rdi
mov r8, rax
mov edx, 0x12e
lea rcx, [rsp + 0x5c8]
call fcn.1400256a0
lea rdx, [0x1402510f0]
lea rcx, [rsp + 0x5c8]
call sub.VCRUNTIME140.dll__CxxThrowException
int3