Function at 0x18003dd50
Capabilities:
Get geographical location
Get hostname
Get session information
Get session user name

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x290
mov rax, qword [0x1801d0100]
xor rax, rsp
mov qword [rsp + 0x288], rax
xor esi, esi
mov dword [rsp + 0x1b8], esi
lea rcx, [rsp + 0x30]
call fcn.18003fd40
mov rbx, rax
mov rdx, rax
lea rcx, [0x1801d0f68]
call fcn.1800244f0
mov ecx, dword [rbx + 0x20]
mov dword [0x1801d0f88], ecx
mov eax, dword [rbx + 0x24]
mov dword [0x1801d0f8c], eax
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x18003dded
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003dde8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003f073
call fcn.18007bb20
lea rcx, [rsp + 0x268]
call fcn.1800414a0
mov rdx, rax
lea rcx, [0x1801d0ee0]
call fcn.1800244f0
mov rdx, qword [rsp + 0x280]
cmp rdx, 7
jbe 0x18003de51
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003de4c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003f079
call fcn.18007bb20
xor eax, eax
mov qword [rsp + 0x210], rax
mov dword [rsp + 0x218], eax
lea rcx, [rsp + 0x210]
call qword [sym.imp.KERNEL32.dll_GetSystemPowerStatus]
test eax, eax
mov eax, esi
je 0x18003de81
cmp byte [rsp + 0x211], 0x80
setne al
mov dword [0x1801d0f60], eax
call qword [sym.imp.KERNEL32.dll_WTSGetActiveConsoleSessionId]
cmp eax, 0xffffffff
je 0x18003dfb9
mov qword [rsp + 0x1b0], rsi
mov dword [rsp + 0x1b8], esi
lea rcx, [rsp + 0x1b8]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x1b0]
mov r8d, 5
mov edx, eax
xor ecx, ecx
call qword [sym.imp.WTSAPI32.dll_WTSQuerySessionInformationW]
test eax, eax
je 0x18003dfb9
xorps xmm0, xmm0
movups xmmword [rsp + 0x220], xmm0
mov qword [rsp + 0x230], rsi
mov qword [rsp + 0x238], rsi
mov rdx, qword [rsp + 0x1b0]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop
inc r8
cmp word [rdx + r8*2], si
jne 0x18003df00
lea rcx, [rsp + 0x220]
call fcn.180007ce0
nop
mov rcx, qword [rsp + 0x1b0]
call qword [sym.imp.WTSAPI32.dll_WTSFreeMemory]
cmp qword [rsp + 0x230], 0
jne 0x18003df90
lea rcx, [rsp + 0x1c0]
call fcn.1800408a0
nop
mov rdx, qword [rsp + 0x238]
cmp rdx, 7
jbe 0x18003df87
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003df82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003f07f
call fcn.18007bb20
lea rdi, [0x1801b6bc0]
jmp 0x18003dff4
movups xmm0, xmmword [rsp + 0x220]
movups xmmword [rsp + 0x1c0], xmm0
movups xmm1, xmmword [rsp + 0x230]
movups xmmword [rsp + 0x1d0], xmm1
lea rdi, [0x1801b6bc0]
jmp 0x18003dff4
xorps xmm0, xmm0
movups xmmword [rsp + 0x1c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1d0], xmm1
mov r8d, 3
lea rdi, [0x1801b6bc0]
mov rdx, rdi
lea rcx, [rsp + 0x1c0]
call fcn.180007ce0
mov rbx, 0xffffffffffffffff
lea rdx, [rsp + 0x1c0]
lea rcx, [0x1801d0ea0]
call fcn.1800244f0
mov rdx, qword [rsp + 0x1d8]
cmp rdx, 7
jbe 0x18003e050
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003e04b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003f0d9
call fcn.18007bb20
mov dword [rsp + 0x1b8], Ordinal_26
lea rdx, [rsp + 0x1b8]
lea rcx, [rsp + 0x268]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x1e0], xmm0
movdqu xmmword [rsp + 0x1f0], xmm1
test eax, eax
je 0x18003e0ac
lea rdi, [rsp + 0x268]
lea rax, [rsp + 0x268]
nop dword [rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x18003e0a0
jmp 0x18003e0b1
mov ebx, 3
mov r8, rbx
mov rdx, rdi
lea rcx, [rsp + 0x1e0]
call fcn.180007ce0
lea rdx, [rsp + 0x1e0]
lea rdi, [0x1801d0ec0]
mov rcx, rdi
call fcn.1800244f0
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 7
jbe 0x18003e123
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003e11e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003f0d9
call fcn.18007bb20
lea rcx, [rsp + 0x268]
call fcn.1800405b0
mov rdx, rax
lea rbx, [0x1801d0f20]
mov rcx, rbx
call fcn.1800244f0
mov rdx, qword [rsp + 0x280]
cmp rdx, 7
jbe 0x18003e18a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003e185
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003f085
call fcn.18007bb20
lea rcx, [rsp + 0x268]
call fcn.18003f0e0
mov rdx, rax
lea rcx, [0x1801d0f00]
call fcn.1800244f0
mov rdx, qword [rsp + 0x280]
cmp rdx, 7
jbe 0x18003e1ee
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003e1e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003f08b
call fcn.18007bb20
lea rax, str._
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x218], 5
cmp qword [0x1801d0ed8], 7
cmova rdi, qword [0x1801d0ec0]
mov qword [rsp + 0x200], rdi
mov rax, qword [0x1801d0ed0]
mov qword [rsp + 0x208], rax
movups xmm0, xmmword [rsp + 0x200]
movups xmmword [rsp + 0x40], xmm0
movabs rdi, 0xc000000000000000
mov qword [rsp + 0x30], rdi
cmp qword [0x1801d0f38], 7
cmova rbx, qword [0x1801d0f20]
mov qword [rsp + 0x200], rbx
mov rax, qword [0x1801d0f30]
mov qword [rsp + 0x208], rax
movups xmm0, xmmword [rsp + 0x200]
movups xmmword [rsp + 0x50], xmm0
movabs rax, 0xc000000000000010
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x200], 2
lea rax, [rsp + 0x30]
mov qword [rsp + 0x208], rax
movaps xmm0, xmmword [rsp + 0x200]
movdqa xmmword [rsp + 0x200], xmm0
movaps xmm1, xmmword [rsp + 0x210]
movdqa xmmword [rsp + 0x210], xmm1
lea r8, [rsp + 0x200]
lea rdx, [rsp + 0x210]
lea rcx, [rsp + 0x268]
call fcn.1800093a0
mov dword [rsp + 0x1b8], 7
lea rdx, [rsp + 0x268]
lea rcx, [0x1801d0f40]
call fcn.1800244f0
mov rdx, qword [rsp + 0x280]
cmp rdx, 7
jbe 0x18003e34e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003e349
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003f091
call fcn.18007bb20
xorps xmm0, xmm0
movups xmmword [rsp + 0x268], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x278], xmm1
mov r8d, reloc.LIBPQ.dll_Ordinal_22
lea rdx, str.https:__ipinfo.io_json
lea rcx, [rsp + 0x268]
call fcn.180003ff0
nop
lea rdx, [rsp + 0x268]
lea rcx, [rsp + 0x240]
call fcn.180026ec0
nop
mov rdx, qword [rsp + 0x280]
cmp rdx, 0xf
jbe 0x18003e3d9
inc rdx
mov rcx, qword [rsp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003e3d4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003f097
call fcn.18007bb20
movdqa xmm0, xmmword [0x1801ba490]
movdqu xmmword [rsp + 0x278], xmm0
mov byte [rsp + 0x268], 0
cmp byte [rsp + 0x260], 0
jne 0x18003e58b
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0x220]
call fcn.180004200
nop
lea rcx, str.hardware_manager::download_json_error:_
mov qword [rsp + 0x210], rcx
mov qword [rsp + 0x218], Ordinal_47
mov rcx, rax
cmp qword [rax + 0x18], 7
jbe 0x18003e43e
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x200], rcx
mov qword [rsp + 0x208], rax
movups xmm0, xmmword [rsp + 0x200]
movups xmmword [rsp + 0x1c8], xmm0
mov qword [rsp + 0x1c0], rdi
mov qword [rsp + 0x200], 1
lea rax, [rsp + 0x1c0]
mov qword [rsp + 0x208], rax
movaps xmm0, xmmword [rsp + 0x200]
movdqa xmmword [rsp + 0x200], xmm0
movaps xmm1, xmmword [rsp + 0x210]
movdqa xmmword [rsp + 0x210], xmm1
lea r8, [rsp + 0x200]
lea rdx, [rsp + 0x210]
lea rcx, [rsp + 0x1e0]
call fcn.1800093a0
nop
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x1e0]
call fcn.18003cf10
nop
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 7
jbe 0x18003e521
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003e51c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003f09d
call fcn.18007bb20
movdqa xmm0, xmmword [0x1801ba480]
movdqu xmmword [rsp + 0x1f0], xmm0
mov word [rsp + 0x1e0], si
mov rdx, qword [rsp + 0x238]
cmp rdx, 7
jbe 0x18003f00b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003e581
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003f0a3
call fcn.18007bb20
jmp 0x18003f00b
mov qword [rsp + 0xb0], rsi
lea rax, [rsp + 0x78]
mov qword [rsp + 0x1b0], rax
xor edx, edx
lea rcx, [rsp + 0x200]
call fcn.18002bb60
nop
mov dword [rsp + 0x1b8], Ordinal_26
lea rax, [rsp + 0x30]
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x68], rsi
mov rcx, qword [rsp + 0xb0]
test rcx, rcx
je 0x18003e5e9
mov rax, qword [rcx]
lea rdx, [rsp + 0x30]
call qword [rax]
mov qword [rsp + 0x68], rax
lea rcx, [rsp + 0x240]
cmp qword [rsp + 0x258], 0xf
cmova rcx, qword [rsp + 0x240]
add rcx, qword [rsp + 0x250]
lea rax, [rsp + 0x240]
cmp qword [rsp + 0x258], 0xf
cmova rax, qword [rsp + 0x240]
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x218], rcx
movaps xmm0, xmmword [rsp + 0x210]
movdqa xmmword [rsp + 0x210], xmm0
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x210]
lea rcx, [rsp + 0xc0]
call fcn.18002def0
nop
lea r8, [rsp + 0x200]
mov rcx, rax
call fcn.18002a5a0
nop
lea rcx, [rsp + 0x108]
call fcn.18002a090
mov rcx, qword [rsp + 0xf8]
test rcx, rcx
je 0x18003e6a1
mov rax, qword [rcx]
lea rdx, [rsp + 0xc0]
cmp rcx, rdx
setne dl
call qword [rax + Ordinal_34]
nop
mov rcx, qword [rsp + 0xb0]
test rcx, rcx
je 0x18003e6c7
mov rax, qword [rcx]
lea rdx, [rsp + 0x78]
cmp rcx, rdx
setne dl
call qword [rax + Ordinal_34]
mov qword [rsp + 0xb0], rsi
xorps xmm0, xmm0
movups xmmword [rsp + 0x1e0], xmm0
mov qword [rsp + 0x1f0], rsi
mov qword [rsp + 0x1f8], rsi
mov r8d, 2
lea rdx, [0x1801b6b34]
lea rcx, [rsp + 0x1e0]
call fcn.180003ff0
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0x200]
call fcn.18002ac40
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x1c0], xmm0
mov qword [rsp + 0x1d0], rsi
mov qword [rsp + 0x1d8], reloc.LIBPQ.dll_Ordinal_15
mov byte [rsp + 0x1c0], 0
mov dword [rsp + 0x1b8], 0x97
lea rdx, [rsp + 0x1c0]
mov rcx, rax
call fcn.1800325a0
nop
mov dword [rsp + 0x1b8], Ordinal_126
cmp qword [rsp + 0x1d0], 0
jne 0x18003e794
xorps xmm0, xmm0
movups xmmword [rsp + 0x220], xmm0
movdqa xmm1, xmmword [0x1801ba480]
movdqu xmmword [rsp + 0x230], xmm1
mov word [rsp + 0x220], si
jmp 0x18003e86a
lea r8, [rsp + 0x1c0]
cmp qword [rsp + 0x1d8], 0xf
cmova r8, qword [rsp + 0x1c0]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
mov r9d, dword [rsp + 0x1d0]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x1e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1f0], xmm1
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x1e0]
call fcn.180007bb0
lea rcx, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 7
cmova rcx, qword [rsp + 0x1e0]
lea r8, [rsp + 0x1c0]
cmp qword [rsp + 0x1d8], 0xf
cmova r8, qword [rsp + 0x1c0]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rcx
mov r9d, dword [rsp + 0x1d0]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movups xmm0, xmmword [rsp + 0x1e0]
movups xmmword [rsp + 0x220], xmm0
movups xmm1, xmmword [rsp + 0x1f0]
movups xmmword [rsp + 0x230], xmm1
mov dword [rsp + 0x1b8], 0x177
lea rdx, [rsp + 0x220]
lea rcx, [0x1801d0f90]
call fcn.1800244f0
mov rdx, qword [rsp + 0x238]
cmp rdx, 7
jbe 0x18003e8d2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003e8cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003f0a9
call fcn.18007bb20
nop
mov rdx, qword [rsp + 0x1d8]
cmp rdx, 0xf
jbe 0x18003e915
inc rdx
mov rcx, qword [rsp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003e910
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003f0af
call fcn.18007bb20
xorps xmm0, xmm0
movups xmmword [rsp + 0x1e0], xmm0
mov qword [rsp + 0x1f0], rsi
mov qword [rsp + 0x1f8], rsi
mov r8d, 7
lea rdx, str.country
lea rcx, [rsp + 0x1e0]
call fcn.180003ff0
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0x200]
call fcn.18002ac40
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x1c0], xmm0
mov qword [rsp + 0x1d0], rsi
mov qword [rsp + 0x1d8], reloc.LIBPQ.dll_Ordinal_15
mov byte [rsp + 0x1c0], 0
mov dword [rsp + 0x1b8], 0x977
lea rdx, [rsp + 0x1c0]
mov rcx, rax
call fcn.1800325a0
nop
mov dword [rsp + 0x1b8], 0x777
cmp qword [rsp + 0x1d0], 0
jne 0x18003e9e2
xorps xmm0, xmm0
movups xmmword [rsp + 0x220], xmm0
movdqa xmm1, xmmword [0x1801ba480]
movdqu xmmword [rsp + 0x230], xmm1
mov word [rsp + 0x220], si
jmp 0x18003eab8
lea r8, [rsp + 0x1c0]
cmp qword [rsp + 0x1d8], 0xf
cmova r8, qword [rsp + 0x1c0]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
mov r9d, dword [rsp + 0x1d0]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x1e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1f0], xmm1
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x1e0]
call fcn.180007bb0
lea rcx, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 7
cmova rcx, qword [rsp + 0x1e0]
lea r8, [rsp + 0x1c0]
cmp qword [rsp + 0x1d8], 0xf
cmova r8, qword [rsp + 0x1c0]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rcx
mov r9d, dword [rsp + 0x1d0]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movups xmm0, xmmword [rsp + 0x1e0]
movups xmmword [rsp + 0x220], xmm0
movups xmm1, xmmword [rsp + 0x1f0]
movups xmmword [rsp + 0x230], xmm1
mov dword [rsp + 0x1b8], 0x1777
lea rdx, [rsp + 0x220]
lea rcx, [0x1801d0fb0]
call fcn.1800244f0
mov rdx, qword [rsp + 0x238]
cmp rdx, 7
jbe 0x18003eb20
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003eb1a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003f0b5
call fcn.18007bb20
nop
mov rdx, qword [rsp + 0x1d8]
cmp rdx, 0xf
jbe 0x18003eb63
inc rdx
mov rcx, qword [rsp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003eb5e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003f0bb
call fcn.18007bb20
xorps xmm0, xmm0
movups xmmword [rsp + 0x1e0], xmm0
mov qword [rsp + 0x1f0], rsi
mov qword [rsp + 0x1f8], rsi
mov r8d, 4
lea rdx, str.city
lea rcx, [rsp + 0x1e0]
call fcn.180003ff0
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0x200]
call fcn.18002ac40
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x1c0], xmm0
mov qword [rsp + 0x1d0], rsi
mov qword [rsp + 0x1d8], reloc.LIBPQ.dll_Ordinal_15
mov byte [rsp + 0x1c0], 0
mov dword [rsp + 0x1b8], 0x9777
lea rdx, [rsp + 0x1c0]
mov rcx, rax
call fcn.1800325a0
nop
mov dword [rsp + 0x1b8], 0x7777
cmp qword [rsp + 0x1d0], 0
jne 0x18003ec30
xorps xmm0, xmm0
movups xmmword [rsp + 0x220], xmm0
movdqa xmm1, xmmword [0x1801ba480]
movdqu xmmword [rsp + 0x230], xmm1
mov word [rsp + 0x220], si
jmp 0x18003ed06
lea r8, [rsp + 0x1c0]
cmp qword [rsp + 0x1d8], 0xf
cmova r8, qword [rsp + 0x1c0]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
mov r9d, dword [rsp + 0x1d0]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x1e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1f0], xmm1
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x1e0]
call fcn.180007bb0
lea rcx, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 7
cmova rcx, qword [rsp + 0x1e0]
lea r8, [rsp + 0x1c0]
cmp qword [rsp + 0x1d8], 0xf
cmova r8, qword [rsp + 0x1c0]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rcx
mov r9d, dword [rsp + 0x1d0]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movups xmm0, xmmword [rsp + 0x1e0]
movups xmmword [rsp + 0x220], xmm0
movups xmm1, xmmword [rsp + 0x1f0]
movups xmmword [rsp + 0x230], xmm1
mov dword [rsp + 0x1b8], 0x17777
lea rdx, [rsp + 0x220]
lea rcx, [0x1801d0fd0]
call fcn.1800244f0
mov rdx, qword [rsp + 0x238]
cmp rdx, 7
jbe 0x18003ed6e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003ed68
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003f0c1
call fcn.18007bb20
nop
mov rdx, qword [rsp + 0x1d8]
cmp rdx, 0xf
jbe 0x18003edb1
inc rdx
mov rcx, qword [rsp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003edac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003f0c7
call fcn.18007bb20
xorps xmm0, xmm0
movups xmmword [rsp + 0x1e0], xmm0
mov qword [rsp + 0x1f0], rsi
mov qword [rsp + 0x1f8], rsi
mov r8d, 6
lea rdx, str.region
lea rcx, [rsp + 0x1e0]
call fcn.180003ff0
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0x200]
call fcn.18002ac40
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x1c0], xmm0
mov qword [rsp + 0x1d0], rsi
mov qword [rsp + 0x1d8], reloc.LIBPQ.dll_Ordinal_15
mov byte [rsp + 0x1c0], 0
mov dword [rsp + 0x1b8], 0x97777
lea rdx, [rsp + 0x1c0]
mov rcx, rax
call fcn.1800325a0
nop
mov dword [rsp + 0x1b8], 0x77777
cmp qword [rsp + 0x1d0], 0
jne 0x18003ee7e
xorps xmm0, xmm0
movups xmmword [rsp + 0x220], xmm0
movdqa xmm1, xmmword [0x1801ba480]
movdqu xmmword [rsp + 0x230], xmm1
mov word [rsp + 0x220], si
jmp 0x18003ef54
lea r8, [rsp + 0x1c0]
cmp qword [rsp + 0x1d8], 0xf
cmova r8, qword [rsp + 0x1c0]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
mov r9d, dword [rsp + 0x1d0]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x1e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1f0], xmm1
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x1e0]
call fcn.180007bb0
lea rdx, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 7
cmova rdx, qword [rsp + 0x1e0]
lea r8, [rsp + 0x1c0]
cmp qword [rsp + 0x1d8], 0xf
cmova r8, qword [rsp + 0x1c0]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rdx
mov r9d, dword [rsp + 0x1d0]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movups xmm0, xmmword [rsp + 0x1e0]
movups xmmword [rsp + 0x220], xmm0
movups xmm1, xmmword [rsp + 0x1f0]
movups xmmword [rsp + 0x230], xmm1
lea rdx, [rsp + 0x220]
lea rcx, [0x1801d0ff0]
call fcn.1800244f0
mov rdx, qword [rsp + 0x238]
cmp rdx, 7
jbe 0x18003efb1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003efab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003f0cd
call fcn.18007bb20
nop
mov rdx, qword [rsp + 0x1d8]
cmp rdx, 0xf
jbe 0x18003eff5
inc rdx
mov rcx, qword [rsp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003efef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003f0d3
call fcn.18007bb20
nop
movzx edx, byte [rsp + 0x200]
lea rcx, [rsp + 0x208]
call fcn.180028f30
nop
mov rdx, qword [rsp + 0x258]
cmp rdx, 0xf
jbe 0x18003f04e
inc rdx
mov rcx, qword [rsp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003f049
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003f0d9
call fcn.18007bb20
mov rcx, qword [rsp + 0x288]
xor rcx, rsp
call fcn.18007bb00
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret
call fcn.18008a6e4
int3
call fcn.18008a6e4
int3
call fcn.18008a6e4
int3
call fcn.18008a6e4
int3
call fcn.18008a6e4
int3
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
int3