Function at 0x180008230
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x180229ec0]
xor rax, rsp
mov qword [rbp], rax
mov r15, r8
mov rsi, rdx
mov r12, rcx
mov qword [rbp - 0x60], rcx
mov qword [rbp - 0x58], rcx
mov dword [rbp - 0x68], 1
mov byte [rbp - 0x78], 0x5f
mov al, Ordinal_50
mov cl, 0x30
movzx edx, al
mov r8b, Ordinal_60
xor r9d, r9d
xor al, 0x5f
mov byte [rbp - 0x77], al
xor cl, 0x5f
mov byte [rbp - 0x76], cl
xor dl, 0x5f
mov byte [rbp - 0x75], dl
xor r8b, 0x5f
mov byte [rbp - 0x74], r8b
mov byte [rbp - 0x73], r9b
lea rdx, [rbp - 0x77]
mov rcx, r12
call fcn.18000a150
nop
mov dword [rbp - 0x68], 1
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
mov ebx, eax
test eax, eax
jns 0x1800083ff
movdqa xmm1, xmmword [0x18020d030]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x18020d080]
movdqu xmmword [rsp + 0x60], xmm2
movdqa xmm3, xmmword [0x18020cf00]
movdqu xmmword [rsp + 0x70], xmm3
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], cl
xor byte [rsp + 0x62], cl
xor byte [rsp + 0x63], cl
xor byte [rsp + 0x64], cl
xor byte [rsp + 0x65], cl
xor byte [rsp + 0x66], cl
xor byte [rsp + 0x67], cl
xor byte [rsp + 0x68], cl
xor byte [rsp + 0x69], cl
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
movd eax, xmm3
xor al, cl
mov byte [rsp + 0x70], al
xor byte [rsp + 0x71], cl
xor byte [rsp + 0x72], cl
xor byte [rsp + 0x73], cl
xor byte [rsp + 0x74], cl
xor byte [rsp + 0x75], cl
xor byte [rsp + 0x76], cl
xor byte [rsp + 0x77], cl
xor byte [rsp + 0x78], cl
xor byte [rsp + 0x79], cl
xor byte [rsp + 0x7a], cl
xor byte [rsp + 0x7b], cl
xor byte [rsp + 0x7c], cl
xor byte [rsp + 0x7d], cl
xor byte [rsp + 0x7e], cl
mov byte [rsp + 0x7f], 0
lea rdx, [rsp + 0x51]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.18000ce90
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x18000d060]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x180008758
xor r14d, r14d
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x38], r14d
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
lea edx, [r14 - 1]
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
mov dword [rbp - 0x70], eax
test eax, eax
jns 0x1800085d0
movdqa xmm1, xmmword [0x18020d0e0]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [str.DIL__]
movdqu xmmword [rsp + 0x60], xmm2
mov cl, 0x60
mov dl, 0x57
movzx r8d, dl
mov r10b, 0x4a
movzx r11d, dl
mov bl, 5
mov dil, 0x46
movzx esi, r10b
mov r14b, 0x41
mov r15b, 0x40
mov r12b, Ordinal_33
movzx r13d, bl
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r9d, xmm1
xor al, r9b
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], r9b
xor byte [rsp + 0x53], r9b
xor byte [rsp + 0x54], r9b
xor byte [rsp + 0x55], r9b
xor byte [rsp + 0x56], r9b
xor byte [rsp + 0x57], r9b
xor byte [rsp + 0x58], r9b
xor byte [rsp + 0x59], r9b
xor byte [rsp + 0x5a], r9b
xor byte [rsp + 0x5b], r9b
xor byte [rsp + 0x5c], r9b
xor byte [rsp + 0x5d], r9b
xor byte [rsp + 0x5e], r9b
xor byte [rsp + 0x5f], r9b
movd eax, xmm2
xor al, r9b
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], r9b
xor byte [rsp + 0x62], r9b
xor byte [rsp + 0x63], r9b
xor byte [rsp + 0x64], r9b
xor byte [rsp + 0x65], r9b
xor byte [rsp + 0x66], r9b
xor byte [rsp + 0x67], r9b
xor byte [rsp + 0x68], r9b
xor byte [rsp + 0x69], r9b
xor byte [rsp + 0x6a], r9b
xor byte [rsp + 0x6b], r9b
xor byte [rsp + 0x6c], r9b
xor byte [rsp + 0x6d], r9b
xor byte [rsp + 0x6e], r9b
xor byte [rsp + 0x6f], r9b
xor cl, r9b
mov byte [rsp + 0x70], cl
xor dl, r9b
mov byte [rsp + 0x71], dl
xor r8b, r9b
mov byte [rsp + 0x72], r8b
xor r10b, r9b
mov byte [rsp + 0x73], r10b
xor r11b, r9b
mov byte [rsp + 0x74], r11b
xor bl, r9b
mov byte [rsp + 0x75], bl
xor dil, r9b
mov byte [rsp + 0x76], dil
xor sil, r9b
mov byte [rsp + 0x77], sil
xor r14b, r9b
mov byte [rsp + 0x78], r14b
xor r15b, r9b
mov byte [rsp + 0x79], r15b
xor r12b, r9b
mov byte [rsp + 0x7a], r12b
xor r13b, r9b
mov byte [rsp + 0x7b], r13b
mov byte [rsp + 0x7c], 0
lea rdx, [rsp + 0x51]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.18000ce90
mov edx, dword [rbp - 0x70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x18000d060]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
mov rax, qword [rbp - 0x60]
jmp 0x18000875b
mov qword [rbp - 0x38], r14
lea rax, [rbp - 0x38]
mov qword [rsp + 0x20], rax
lea r9, [0x1801e1270]
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [0x1801e1280]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov ebx, eax
test eax, eax
jns 0x180008782
movdqa xmm1, xmmword [0x18020d120]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x18020d0c0]
movdqu xmmword [rsp + 0x60], xmm2
movdqa xmm3, xmmword [0x18020d0b0]
movdqu xmmword [rsp + 0x70], xmm3
mov dl, 0x46
mov r8b, Ordinal_27
mov r9b, 3
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], cl
xor byte [rsp + 0x62], cl
xor byte [rsp + 0x63], cl
xor byte [rsp + 0x64], cl
xor byte [rsp + 0x65], cl
xor byte [rsp + 0x66], cl
xor byte [rsp + 0x67], cl
xor byte [rsp + 0x68], cl
xor byte [rsp + 0x69], cl
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
movd eax, xmm3
xor al, cl
mov byte [rsp + 0x70], al
xor byte [rsp + 0x71], cl
xor byte [rsp + 0x72], cl
xor byte [rsp + 0x73], cl
xor byte [rsp + 0x74], cl
xor byte [rsp + 0x75], cl
xor byte [rsp + 0x76], cl
xor byte [rsp + 0x77], cl
xor byte [rsp + 0x78], cl
xor byte [rsp + 0x79], cl
xor byte [rsp + 0x7a], cl
xor byte [rsp + 0x7b], cl
xor byte [rsp + 0x7c], cl
xor byte [rsp + 0x7d], cl
xor byte [rsp + 0x7e], cl
xor byte [rsp + 0x7f], cl
xor dl, cl
mov byte [rbp - 0x80], dl
xor r8b, cl
mov byte [rbp - 0x7f], r8b
xor r9b, cl
mov byte [rbp - 0x7e], r9b
mov byte [rbp - 0x7d], r14b
lea rdx, [rsp + 0x51]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.18000ce90
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x18000d060]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
mov rax, r12
mov rcx, qword [rbp]
xor rcx, rsp
call fcn.1800cbe10
mov rbx, qword [rsp + 0x168]
add rsp, 0x110
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov qword [rbp - 0x40], r14
mov rax, qword [rbp - 0x38]
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x18]
mov ecx, Ordinal_27
call fcn.1800cbf7c
mov rbx, rax
mov qword [rbp - 0x60], rax
test rax, rax
je 0x1800087d9
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r14
mov dword [rbx + 0x10], 1
lea rcx, str.ROOTCIMV2
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x180008f80
jmp 0x1800087dc
mov rbx, r14
mov qword [rbp - 0x60], rbx
test rbx, rbx
je 0x180008f8b
lea rax, [rbp - 0x40]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbx]
mov rcx, qword [rbp - 0x38]
call rdi
mov edi, eax
mov ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x180008856
mov rcx, qword [rbx]
test rcx, rcx
je 0x180008837
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x180008849
call fcn.1800cbd7c
mov qword [rbx + 8], r14
mov edx, Ordinal_27
mov rcx, rbx
call fcn.1800cbd7c
test edi, edi
jns 0x1800089a9
movdqa xmm1, xmmword [0x18020cf30]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x18020cf70]
movdqu xmmword [rsp + 0x60], xmm2
movdqa xmm3, xmmword [0x18020d140]
movdqu xmmword [rsp + 0x70], xmm3
mov dl, 0x41
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], cl
xor byte [rsp + 0x62], cl
xor byte [rsp + 0x63], cl
xor byte [rsp + 0x64], cl
xor byte [rsp + 0x65], cl
xor byte [rsp + 0x66], cl
xor byte [rsp + 0x67], cl
xor byte [rsp + 0x68], cl
xor byte [rsp + 0x69], cl
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
movd eax, xmm3
xor al, cl
mov byte [rsp + 0x70], al
xor byte [rsp + 0x71], cl
xor byte [rsp + 0x72], cl
xor byte [rsp + 0x73], cl
xor byte [rsp + 0x74], cl
xor byte [rsp + 0x75], cl
xor byte [rsp + 0x76], cl
xor byte [rsp + 0x77], cl
xor byte [rsp + 0x78], cl
xor byte [rsp + 0x79], cl
xor byte [rsp + 0x7a], cl
xor byte [rsp + 0x7b], cl
xor byte [rsp + 0x7c], cl
xor byte [rsp + 0x7d], cl
xor byte [rsp + 0x7e], cl
xor byte [rsp + 0x7f], cl
xor dl, cl
mov byte [rbp - 0x80], dl
mov byte [rbp - 0x7f], 0
lea rdx, [rsp + 0x51]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.18000ce90
mov edx, edi
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x18000d060]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp - 0x38]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
jmp 0x180008751
mov dword [rsp + 0x38], r14d
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xa]
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov r13d, eax
test eax, eax
jns 0x180008b4a
movdqa xmm1, xmmword [0x18020d1a0]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x18020d1c0]
movdqu xmmword [rsp + 0x60], xmm2
mov cl, 0x6b
mov r8b, 0x76
movzx r9d, cl
mov r10b, reloc.WS2_32.dll_gethostname
mov r11b, 0x7a
movzx ebx, r8b
mov dil, 0x7d
mov sil, 0x7c
mov r14b, reloc.WLDAP32.dll_Ordinal_35
movzx r15d, r10b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd edx, xmm1
xor al, dl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], dl
xor byte [rsp + 0x53], dl
xor byte [rsp + 0x54], dl
xor byte [rsp + 0x55], dl
xor byte [rsp + 0x56], dl
xor byte [rsp + 0x57], dl
xor byte [rsp + 0x58], dl
xor byte [rsp + 0x59], dl
xor byte [rsp + 0x5a], dl
xor byte [rsp + 0x5b], dl
xor byte [rsp + 0x5c], dl
xor byte [rsp + 0x5d], dl
xor byte [rsp + 0x5e], dl
xor byte [rsp + 0x5f], dl
movd eax, xmm2
xor al, dl
xor byte [rsp + 0x61], dl
xor byte [rsp + 0x62], dl
xor byte [rsp + 0x63], dl
xor byte [rsp + 0x64], dl
xor byte [rsp + 0x65], dl
xor byte [rsp + 0x66], dl
xor byte [rsp + 0x67], dl
xor byte [rsp + 0x68], dl
xor byte [rsp + 0x69], dl
xor byte [rsp + 0x6a], dl
xor byte [rsp + 0x6b], dl
xor byte [rsp + 0x6c], dl
xor byte [rsp + 0x6d], dl
xor byte [rsp + 0x6e], dl
xor byte [rsp + 0x6f], dl
xor cl, dl
xor r8b, dl
xor r9b, dl
xor r10b, dl
xor r11b, dl
xor bl, dl
xor dil, dl
xor sil, dl
xor r14b, dl
xor r15b, dl
lea rdx, [rsp + 0x51]
mov byte [rsp + 0x60], al
mov byte [rsp + 0x7a], 0
mov byte [rsp + 0x79], r15b
mov byte [rsp + 0x78], r14b
mov byte [rsp + 0x77], sil
mov byte [rsp + 0x76], dil
mov byte [rsp + 0x75], bl
mov byte [rsp + 0x74], r11b
mov byte [rsp + 0x73], r10b
mov byte [rsp + 0x72], r9b
mov byte [rsp + 0x71], r8b
mov byte [rsp + 0x70], cl
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.18000ce90
mov edx, r13d
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x18000d060]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp - 0x40]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x38]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
jmp 0x180008751
mov qword [rbp - 0x30], r14
mov rax, qword [rbp - 0x40]
mov rcx, qword [rax]
mov r14, qword [rcx + 0xa0]
mov ecx, Ordinal_27
call fcn.1800cbf7c
mov rbx, rax
mov qword [rbp - 0x70], rax
xor r13d, r13d
test rax, rax
je 0x180008b99
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r13
mov dword [rbx + 0x10], 1
mov rcx, rsi
call fcn.1800cd150
mov qword [rbx], rax
jmp 0x180008b9c
mov rbx, r13
mov qword [rbp - 0x50], rbx
test rbx, rbx
je 0x180008f8b
mov rsi, qword [rbx]
mov ecx, Ordinal_27
call fcn.1800cbf7c
mov rdi, rax
mov qword [rbp - 0x70], rax
test rax, rax
je 0x180008bea
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rax
mov qword [rdi + 8], r13
mov dword [rdi + 0x10], 1
lea rcx, [0x18020b4d8]
call fcn.1800cd150
mov qword [rdi], rax
jmp 0x180008bed
mov rdi, r13
mov qword [rbp - 0x48], rdi
test rdi, rdi
je 0x180008f75
lea rax, [rbp - 0x30]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov r9d, Ordinal_50
mov r8, rsi
mov rdx, qword [rdi]
mov rcx, qword [rbp - 0x40]
call r14
mov r13d, eax
mov ecx, 0xffffffff
lock xadd dword [rdi + 0x10], ecx
cmp ecx, 1
jne 0x180008c65
mov rcx, qword [rdi]
test rcx, rcx
je 0x180008c42
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
xor esi, esi
mov qword [rdi], rsi
jmp 0x180008c44
xor esi, esi
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x180008c56
call fcn.1800cbd7c
mov qword [rdi + 8], rsi
mov edx, Ordinal_27
mov rcx, rdi
call fcn.1800cbd7c
jmp 0x180008c67
xor esi, esi
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x180008ca6
mov rcx, qword [rbx]
test rcx, rcx
je 0x180008c87
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], rsi
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x180008c99
call fcn.1800cbd7c
mov qword [rbx + 8], rsi
mov edx, Ordinal_27
mov rcx, rbx
call fcn.1800cbd7c
test r13d, r13d
jns 0x180008da2
movdqa xmm1, xmmword [0x18020d070]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x18020d060]
movdqu xmmword [rsp + 0x60], xmm2
mov cl, 0x33
mov r8b, reloc.WLDAP32.dll_Ordinal_46
movzx r9d, cl
mov r10b, 0x61
mov r11b, Ordinal_35
movzx ebx, r8b
mov dil, 0x25
mov sil, 0x24
mov r14b, 0x7b
movzx r15d, r10b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd edx, xmm1
xor al, dl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], dl
xor byte [rsp + 0x53], dl
xor byte [rsp + 0x54], dl
xor byte [rsp + 0x55], dl
xor byte [rsp + 0x56], dl
xor byte [rsp + 0x57], dl
xor byte [rsp + 0x58], dl
xor byte [rsp + 0x59], dl
xor byte [rsp + 0x5a], dl
xor byte [rsp + 0x5b], dl
xor byte [rsp + 0x5c], dl
xor byte [rsp + 0x5d], dl
xor byte [rsp + 0x5e], dl
xor byte [rsp + 0x5f], dl
movd eax, xmm2
xor al, dl
xor byte [rsp + 0x61], dl
xor byte [rsp + 0x62], dl
xor byte [rsp + 0x63], dl
xor byte [rsp + 0x64], dl
xor byte [rsp + 0x65], dl
xor byte [rsp + 0x66], dl
xor byte [rsp + 0x67], dl
xor byte [rsp + 0x68], dl
xor byte [rsp + 0x69], dl
xor byte [rsp + 0x6a], dl
xor byte [rsp + 0x6b], dl
xor byte [rsp + 0x6c], dl
xor byte [rsp + 0x6d], dl
xor byte [rsp + 0x6e], dl
xor byte [rsp + 0x6f], dl
xor cl, dl
xor r8b, dl
xor r9b, dl
xor r10b, dl
xor r11b, dl
xor bl, dl
xor dil, dl
xor sil, dl
xor r14b, dl
xor r15b, dl
lea rdx, [rsp + 0x51]
jmp 0x180008ad0
xor edi, edi
mov qword [rbp - 0x28], rdi
mov dword [rbp - 8], edi
mov rcx, qword [rbp - 0x30]
test rcx, rcx
je 0x180008f4b
nop dword [rax + rax]
mov rax, qword [rcx]
lea rdx, [rbp - 8]
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 0x28]
mov edx, 0xffffffff
lea r8d, [rdx + 2]
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
cmp dword [rbp - 8], 0
je 0x180008f4b
mov rcx, qword [rbp - 0x28]
mov rax, qword [rcx]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x20]
xor r8d, r8d
mov rdx, r15
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
test eax, eax
js 0x180008f34
mov rcx, qword [rbp - 0x18]
call fcn.1800cd030
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x180008e20
mov rcx, qword [r12 + 0x18]
cmp rbx, rcx
ja 0x180008e5b
mov rdi, r12
cmp rcx, 0xf
jbe 0x180008e40
mov rdi, qword [r12]
mov qword [r12 + 0x10], rbx
mov r8, rbx
mov rdx, rax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
xor edi, edi
jmp 0x180008e6c
mov r9, rax
xor r8d, r8d
mov rdx, rbx
mov rcx, r12
call fcn.18000e3d0
mov rdx, r12
lea rcx, [rsp + 0x50]
call fcn.1800080f0
mov rbx, rax
cmp r12, rax
je 0x180008ef1
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x180008ebd
mov rcx, qword [r12]
inc rdx
cmp rdx, 0x1000
jb 0x180008eb8
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180008f6e
mov rcx, r8
call fcn.1800cbd7c
mov qword [r12 + 0x10], rdi
mov qword [r12 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r12], 0
movups xmm0, xmmword [rbx]
movups xmmword [r12], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [r12 + 0x10], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x180008f2a
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008f25
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008f6e
call fcn.1800cbd7c
lea rcx, [rbp - 0x20]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rbp - 0x28]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x30]
test rcx, rcx
jne 0x180008dc0
mov rcx, qword [rbp - 0x40]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x38]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x30]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
jmp 0x180008751
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ecx, 0x8007000e
call fcn.1800cd020
nop
mov ecx, 0x8007000e
call fcn.1800cd020
nop
mov ecx, 0x8007000e
call fcn.1800cd020
int3