Function at 0x140016f50
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x14006db18]
xor rax, rsp
mov qword [rbp + 0x78], rax
mov r13, r8
mov rsi, rdx
mov r15, rcx
mov qword [rbp - 0x80], rcx
xor r12d, r12d
mov dword [rbp - 0x78], r12d
lea rcx, str.wmi_query
call qword [sym.imp.VMProtectSDK64.dll_VMProtectBeginUltra]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
mov edi, eax
test eax, eax
jns 0x140017010
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rcx, str.Failed_to_initialize_COM_library._Error_code__0x
call qword [sym.imp.VMProtectSDK64.dll_VMProtectDecryptStringA]
mov rdx, rax
mov rcx, rbx
call fcn.140006d50
lea rdx, [0x140016940]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov edx, edi
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x140015280]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [r15], xmm0
mov qword [r15 + 0x10], r12
mov qword [r15 + 0x18], 0xf
mov byte [r15], r12b
jmp 0x1400179a0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x38], r12d
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
mov rdi, 0xffffffffffffffff
mov edx, edi
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
lea r9, [0x140051800]
xor edx, edx
lea r8d, [rdi + 2]
lea rcx, [0x140051810]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov r14d, eax
test eax, eax
jns 0x1400170ce
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rcx, str.Failed_to_create_IWbemLocator_object._Error_code__0x
call qword [sym.imp.VMProtectSDK64.dll_VMProtectDecryptStringA]
mov rdx, rax
mov rcx, rbx
call fcn.140006d50
lea rdx, [0x140016940]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov edx, r14d
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x140015280]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x140016ff5
mov rax, qword [rsp + 0x60]
mov rcx, qword [rax]
mov r12, qword [rcx + 0x18]
lea rcx, str.ROOTCIMV2
call qword [sym.imp.VMProtectSDK64.dll_VMProtectDecryptStringW]
mov r14, rax
mov ecx, 0x18
call fcn.14002e8ec
mov rbx, rax
mov qword [rbp - 0x80], rax
test rax, rax
je 0x14001712d
mov qword [rax + 8], 0
mov dword [rax + 0x10], 1
mov rcx, r14
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x140017129
test r14, r14
jne 0x1400179d0
xor ecx, ecx
jmp 0x140017131
xor ecx, ecx
mov ebx, ecx
mov qword [rbp - 0x68], rbx
test rbx, rbx
je 0x1400179db
lea rax, [rsp + 0x58]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rcx
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbx]
mov rcx, qword [rsp + 0x60]
call r12
mov r14d, eax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x1400171b3
mov rcx, qword [rbx]
test rcx, rcx
je 0x140017190
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], 0
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400171a6
call fcn.14002e7fc
mov qword [rbx + 8], 0
mov edx, 0x18
mov rcx, rbx
call fcn.14002e7fc
test r14d, r14d
jns 0x140017231
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rcx, str.Could_not_connect._Error_code__0x
call qword [sym.imp.VMProtectSDK64.dll_VMProtectDecryptStringA]
mov rdx, rax
mov rcx, rbx
call fcn.140006d50
lea rdx, [0x140016940]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov edx, r14d
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x140015280]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
movups xmmword [r15], xmm0
xor eax, eax
mov qword [r15 + 0x10], rax
mov qword [r15 + 0x18], 0xf
mov byte [r15], al
jmp 0x1400179a0
xor eax, eax
mov dword [rsp + 0x38], eax
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov r12d, 0xa
mov edx, r12d
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov r14d, eax
test eax, eax
jns 0x1400172c8
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rcx, str.Could_not_set_proxy_blanket._Error_code__0x
call qword [sym.imp.VMProtectSDK64.dll_VMProtectDecryptStringA]
mov rdx, rax
mov rcx, rbx
call fcn.140006d50
lea rdx, [0x140016940]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov edx, r14d
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x140015280]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x140017203
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xor eax, eax
mov ebx, eax
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], al
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x68], eax
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax]
mov r14, qword [rcx + 0xa0]
lea rcx, str.SELECT__FROM
call qword [sym.imp.VMProtectSDK64.dll_VMProtectDecryptStringA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x48], xmm1
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140017320
mov rdx, rax
lea rcx, [rbp + 0x38]
call fcn.140014de0
nop
mov r8, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0x10
jb 0x140017345
mov rsi, qword [rsi]
mov rdx, rsi
lea rcx, [rbp + 0x38]
call fcn.1400156b0
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 8], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov dword [rbp - 0x78], 8
lea rdx, [rbp - 8]
cmp qword [rbp + 0x10], 0x10
cmovae rdx, qword [rbp - 8]
lea rcx, [rbp - 0x80]
call fcn.1400152c0
nop
mov rsi, qword [rax]
test rsi, rsi
je 0x1400173ac
mov rsi, qword [rsi]
lea rcx, [0x140042e38]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectDecryptStringA]
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.1400152c0
nop
mov rdx, qword [rax]
test rdx, rdx
je 0x1400173d1
mov rdx, qword [rdx]
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0
mov r9d, 0x30
mov r8, rsi
mov rcx, qword [rsp + 0x58]
call r14
mov r14d, eax
mov rsi, qword [rbp - 0x70]
test rsi, rsi
je 0x140017456
mov ecx, edi
lock xadd dword [rsi + 0x10], ecx
cmp ecx, 1
jne 0x14001744a
test rsi, rsi
je 0x14001744a
mov rcx, qword [rsi]
test rcx, rcx
je 0x140017427
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], 0
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001743d
call fcn.14002e7fc
mov qword [rsi + 8], 0
mov edx, 0x18
mov rcx, rsi
call fcn.14002e7fc
mov qword [rbp - 0x70], 0
mov rbx, qword [rbp - 0x18]
mov rsi, qword [rbp - 0x80]
test rsi, rsi
je 0x1400174b2
mov eax, edi
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x1400174a8
test rsi, rsi
je 0x1400174a8
mov rcx, qword [rsi]
test rcx, rcx
je 0x140017485
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], 0
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14001749b
call fcn.14002e7fc
mov qword [rsi + 8], 0
mov edx, 0x18
mov rcx, rsi
call fcn.14002e7fc
xor esi, esi
mov qword [rbp - 0x80], rsi
mov rbx, qword [rbp - 0x18]
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x1400174f0
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400174eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400174eb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002e7fc
movdqa xmm0, xmmword [0x140043020]
movdqu xmmword [rbp + 8], xmm0
mov byte [rbp - 8], 0
mov rdx, qword [rbp + 0x50]
cmp rdx, 0x10
jb 0x14001753f
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001753a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001753a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002e7fc
test r14d, r14d
jns 0x1400175cb
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rcx, str.Query_failed._Error_code__0x
call qword [sym.imp.VMProtectSDK64.dll_VMProtectDecryptStringA]
mov rdx, rax
mov rcx, rbx
call fcn.140006d50
lea rdx, [0x140016940]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov edx, r14d
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___long_int____ptr64]
lea rdx, [0x140015280]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
xorps xmm0, xmm0
movups xmmword [r15], xmm0
mov qword [r15 + 0x10], rsi
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
jmp 0x1400179a0
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400177bb
nop dword [rax]
mov rax, qword [rcx]
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x70]
mov r8d, 1
mov edx, edi
call qword [rax + 0x20]
cmp dword [rsp + 0x68], 0
je 0x1400177a7
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax]
mov r14, qword [rcx + 0x20]
mov rsi, r13
cmp qword [r13 + 0x18], 0x10
jb 0x140017622
mov rsi, qword [r13]
mov ecx, 0x18
call fcn.14002e8ec
mov rbx, rax
mov qword [rbp - 0x60], rax
test rax, rax
je 0x140017656
mov qword [rax + 8], 0
mov dword [rax + 0x10], 1
mov rcx, rsi
call fcn.14002f940
mov qword [rbx], rax
xor esi, esi
jmp 0x14001765a
xor esi, esi
mov ebx, esi
mov qword [rbp - 0x58], rbx
test rbx, rbx
je 0x1400179f1
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x40]
xor r8d, r8d
mov rdx, qword [rbx]
mov rcx, qword [rsp + 0x70]
call r14
nop
mov eax, edi
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x1400176c0
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400176a1
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], rsi
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400176b3
call fcn.14002e7fc
mov qword [rbx + 8], rsi
mov edx, 0x18
mov rcx, rbx
call fcn.14002e7fc
mov rsi, qword [rbp - 0x38]
mov ecx, 0x18
call fcn.14002e8ec
mov rbx, rax
mov qword [rbp - 0x50], rax
test rax, rax
je 0x140017707
mov qword [rax + 8], 0
mov dword [rax + 0x10], 1
mov rcx, rsi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x140017703
test rsi, rsi
jne 0x1400179e6
xor esi, esi
jmp 0x14001770b
xor esi, esi
mov ebx, esi
mov qword [rbp - 0x48], rbx
test rbx, rbx
je 0x1400179f1
mov rax, qword [rbx + 8]
test rax, rax
jne 0x14001772d
mov rcx, qword [rbx]
call fcn.14002f820
mov qword [rbx + 8], rax
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140017730
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.140008090
nop
mov eax, edi
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140017783
mov rcx, qword [rbx]
test rcx, rcx
je 0x140017764
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], rsi
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140017776
call fcn.14002e7fc
mov qword [rbx + 8], rsi
mov edx, 0x18
mov rcx, rbx
call fcn.14002e7fc
lea rcx, [rbp - 0x40]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400177b7
jmp 0x1400175e0
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400177b7
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rbx, qword [rbp - 0x18]
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov rsi, qword [rbp - 0x28]
test rbx, rbx
jne 0x140017821
lea rcx, [0x140042e60]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectDecryptStringA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x68], xmm1
nop dword [rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x140017800
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0x58]
call fcn.140014de0
lea rax, [rbp + 0x58]
jmp 0x1400178b1
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
lea r14, [rbp - 0x28]
cmp qword [rbp - 0x10], 0x10
cmovae r14, rsi
movabs rdi, 0x7fffffffffffffff
cmp rbx, rdi
ja 0x1400179ca
cmp rbx, 0x10
jae 0x140017864
mov qword [rbp + 0x28], rbx
mov qword [rbp + 0x30], 0xf
movups xmm0, xmmword [r14]
movups xmmword [rbp + 0x18], xmm0
jmp 0x1400178a7
mov rax, rbx
or rax, 0xf
cmp rax, rdi
ja 0x14001787f
mov rdi, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rdi, rcx
lea rdx, [rdi + 1]
lea rcx, [rbp + 0x18]
call fcn.140015650
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x28], rbx
mov qword [rbp + 0x30], rdi
lea r8, [rbx + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 0x18]
mov r12d, 0xc
xor ecx, ecx
movups xmm0, xmmword [rax]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [r15 + 0x10], xmm1
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], 0xf
mov byte [rax], cl
or r12d, 1
test r12b, 4
je 0x14001791e
and r12d, 0xfffffffb
mov rdx, qword [rbp + 0x30]
cmp rdx, 0x10
jb 0x14001791e
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017918
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140017918
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002e7fc
nop
test r12b, 2
je 0x140017963
mov rdx, qword [rbp + 0x70]
cmp rdx, 0x10
jb 0x140017963
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001795d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001795d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002e7fc
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x1400179a0
inc rdx
mov rax, rsi
cmp rdx, 0x1000
jb 0x140017998
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140017998
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.14002e7fc
mov rax, r15
mov rcx, qword [rbp + 0x78]
xor rcx, rsp
call fcn.14002e8a0
mov rbx, qword [rsp + 0x1d8]
add rsp, 0x180
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140007e80
nop
mov ecx, 0x8007000e
call fcn.14002f810
nop
mov ecx, 0x8007000e
call fcn.14002f810
nop
mov ecx, 0x8007000e
call fcn.14002f810
nop
mov ecx, 0x8007000e
call fcn.14002f810
int3