Function at 0x14000aa90
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2a0]
sub rsp, 0x3a0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x290], rax
mov r15, rdx
mov r12, rcx
xor r13d, r13d
mov dword [rsp + 0x50], r13d
mov qword [rbp + 0x108], r13
mov qword [rbp + 0x100], r13
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
js 0x14000ac8a
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x38], r13d
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
mov edx, 0xffffffff
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
js 0x14000ac84
lea rax, [rbp + 0x108]
mov qword [rsp + 0x20], rax
lea r9, [0x1400117f0]
xor edx, edx
mov r8d, 1
lea rcx, [0x140011800]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x14000ac84
mov rax, qword [rbp + 0x108]
mov rcx, qword [rax]
mov rdi, qword [rcx + 0x18]
mov ecx, 0x18
call fcn.14000e440
mov rbx, rax
mov qword [rsp + 0x78], rax
test rax, rax
je 0x14000abac
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r13
mov dword [rbx + 0x10], 1
lea rcx, str.ROOTCIMV2
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000bf55
jmp 0x14000abaf
mov rbx, r13
mov qword [rsp + 0x78], rbx
test rbx, rbx
je 0x14000bf6b
lea rax, [rbp + 0x100]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbx]
mov rcx, qword [rbp + 0x108]
call rdi
mov edi, eax
mov ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x14000ac30
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000ac11
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r13
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000ac23
call fcn.14000e47c
mov qword [rbx + 8], r13
mov edx, 0x18
mov rcx, rbx
call fcn.14000e47c
test edi, edi
js 0x14000ac77
mov dword [rsp + 0x38], r13d
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa
mov rcx, qword [rbp + 0x100]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x14000acb6
mov rcx, qword [rbp + 0x100]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x108]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
xor al, al
mov rcx, qword [rbp + 0x290]
xor rcx, rsp
call fcn.14000e420
mov rbx, qword [rsp + 0x3f0]
add rsp, 0x3a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov qword [rbp + 0x118], r13
mov rax, qword [rbp + 0x100]
mov rcx, qword [rax]
mov r14, qword [rcx + 0xa0]
mov rdi, r12
cmp qword [r12 + 0x18], 0xf
jbe 0x14000acdd
mov rdi, qword [r12]
mov ecx, 0x18
call fcn.14000e440
mov rbx, rax
mov qword [rsp + 0x78], rax
test rax, rax
je 0x14000ad18
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r13
mov dword [rbx + 0x10], 1
mov rcx, rdi
call fcn.14000f430
mov qword [rbx], rax
jmp 0x14000ad1b
mov rbx, r13
mov qword [rsp + 0x78], rbx
test rbx, rbx
je 0x14000bf6b
mov rsi, qword [rbx]
mov ecx, 0x18
call fcn.14000e440
mov rdi, rax
mov qword [rbp - 0x20], rax
test rax, rax
je 0x14000ad6a
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rax
mov qword [rdi + 8], r13
mov dword [rdi + 0x10], 1
lea rcx, [0x140011c68]
call fcn.14000f430
mov qword [rdi], rax
jmp 0x14000ad6d
mov rdi, r13
mov qword [rbp - 0x20], rdi
test rdi, rdi
je 0x14000bf76
lea rax, [rbp + 0x118]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov r9d, 0x30
mov r8, rsi
mov rdx, qword [rdi]
mov rcx, qword [rbp + 0x100]
call r14
mov esi, eax
mov ecx, 0xffffffff
lock xadd dword [rdi + 0x10], ecx
cmp ecx, 1
jne 0x14000ade3
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000adc3
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r13
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000add5
call fcn.14000e47c
mov qword [rdi + 8], r13
mov edx, 0x18
mov rcx, rdi
call fcn.14000e47c
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14000ae22
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000ae03
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r13
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000ae15
call fcn.14000e47c
mov qword [rbx + 8], r13
mov edx, 0x18
mov rcx, rbx
call fcn.14000e47c
test esi, esi
js 0x14000ac6a
mov qword [rbp + 0x110], r13
mov dword [rbp + 0x150], r13d
mov rcx, qword [rbp + 0x118]
test rcx, rcx
je 0x14000bea6
nop dword [rax + rax]
mov rax, qword [rcx]
lea rdx, [rbp + 0x150]
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x110]
mov edx, 0xffffffff
mov r8d, 1
call qword [rax + 0x20]
cmp dword [rbp + 0x150], 0
je 0x14000bea6
mov rax, qword [rbp + 0x110]
mov rcx, qword [rax]
mov rsi, qword [rcx + 0x20]
mov rdi, r15
cmp qword [r15 + 0x18], 0xf
jbe 0x14000ae9c
mov rdi, qword [r15]
mov ecx, 0x18
call fcn.14000e440
mov rbx, rax
mov qword [rbp - 0x20], rax
test rax, rax
je 0x14000aed6
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r13
mov dword [rbx + 0x10], 1
mov rcx, rdi
call fcn.14000f430
mov qword [rbx], rax
jmp 0x14000aed9
mov rbx, r13
mov qword [rsp + 0x78], rbx
test rbx, rbx
je 0x14000bf4a
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x138]
xor r8d, r8d
mov rdx, qword [rbx]
mov rcx, qword [rbp + 0x110]
call rsi
mov edi, eax
mov ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x14000af48
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000af29
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r13
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000af3b
call fcn.14000e47c
mov qword [rbx + 8], r13
mov edx, 0x18
mov rcx, rbx
call fcn.14000e47c
test edi, edi
js 0x14000be89
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x180]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp - 0x60]
call fcn.140003000
nop
mov r8, rax
lea rcx, [rbp - 0x40]
call fcn.140006820
nop
mov r8d, 0xa
lea rdx, str._TITAN.dat
mov rcx, rax
call fcn.140003e10
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov edi, dword [rsp + 0x50]
or edi, 2
mov dword [rsp + 0x50], edi
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x180]
call fcn.140006330
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14000b014
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b00f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000beda
call fcn.14000e47c
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x14000b05f
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b05a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bee1
call fcn.14000e47c
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x14000b0aa
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b0a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bee8
call fcn.14000e47c
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
cmp qword [rbp + 0x208], 0
je 0x14000b206
mov rdx, r12
cmp qword [r12 + 0x18], 0xf
jbe 0x14000b0d7
mov rdx, qword [r12]
mov r8, qword [r12 + 0x10]
lea rcx, [rbp + 0x180]
call fcn.140006a80
lea rdx, [0x140011c44]
mov rcx, rax
call fcn.1400043a0
mov rsi, rax
mov rdi, qword [rbp + 0x140]
mov ecx, 0x18
call fcn.14000e440
mov rbx, rax
mov qword [rbp + 0xe8], rax
test rax, rax
je 0x14000b14d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r13
mov dword [rbx + 0x10], 1
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x14000b150
test rdi, rdi
jne 0x14000bf60
jmp 0x14000b150
mov rbx, r13
mov qword [rsp + 0x78], rbx
test rbx, rbx
je 0x14000bf81
mov rax, qword [rbx + 8]
test rax, rax
jne 0x14000b173
mov rcx, qword [rbx]
call fcn.14000f310
mov qword [rbx + 8], rax
mov rdx, rax
mov rcx, rsi
call fcn.1400043a0
lea rdx, [0x140004580]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14000b1ce
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000b1af
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r13
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000b1c1
call fcn.14000e47c
mov qword [rbx + 8], r13
mov edx, 0x18
mov rcx, rbx
call fcn.14000e47c
lea rcx, [rbp + 0x188]
call fcn.140006620
test rax, rax
jne 0x14000b202
mov rax, qword [rbp + 0x180]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x180]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov edi, dword [rsp + 0x50]
lea rcx, [rbp + 0x138]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov rbx, r13
mov qword [rbp - 0x70], rbx
mov esi, 0xf
mov qword [rbp - 0x68], rsi
mov byte [rbp - 0x80], 0
or edi, 4
mov dword [rsp + 0x50], edi
mov r14d, 0xc
lea r13, str.0123456789ABCDEF
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14000b257
dec eax
or eax, 0xfffffff0
inc eax
movsxd rcx, eax
movzx r9d, byte [rcx + r13]
cmp rbx, rsi
jae 0x14000b284
lea rax, [rbx + 1]
mov qword [rbp - 0x70], rax
lea rax, [rbp - 0x80]
cmp rsi, 0xf
cmova rax, qword [rbp - 0x80]
mov byte [rax + rbx], r9b
mov byte [rax + rbx + 1], 0
jmp 0x14000b28d
lea rcx, [rbp - 0x80]
call fcn.140004f20
sub r14, 1
je 0x14000b29d
mov rsi, qword [rbp - 0x68]
mov rbx, qword [rbp - 0x70]
jmp 0x14000b243
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
mov qword [rbp + 0x40], 0xf
or edi, 8
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
mov r13d, 0
jge 0x14000b2c9
dec eax
or eax, 0xfffffff0
inc eax
cdqe
lea r14, str.0123456789ABCDEF
movzx eax, byte [rax + r14]
mov byte [rbp + 0x28], al
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14000b2ee
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx eax, byte [rax + r14]
mov byte [rbp + 0x29], al
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14000b30c
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx eax, byte [rax + r14]
mov byte [rbp + 0x2a], al
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14000b32a
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx ecx, byte [rax + r14]
mov qword [rbp + 0x38], 4
mov byte [rbp + 0x2b], cl
mov byte [rbp + 0x2c], r13b
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov qword [rbp + 0x20], 0xf
or edi, 0x10
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14000b366
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx eax, byte [rax + r14]
mov byte [rbp + 8], al
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14000b384
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx eax, byte [rax + r14]
mov byte [rbp + 9], al
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14000b3a2
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx eax, byte [rax + r14]
mov byte [rbp + 0xa], al
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14000b3c0
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx ecx, byte [rax + r14]
mov qword [rbp + 0x18], 4
mov byte [rbp + 0xb], cl
mov byte [rbp + 0xc], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
mov qword [rbp], 0xf
or edi, 0x20
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14000b3fc
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx eax, byte [rax + r14]
mov byte [rbp - 0x18], al
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14000b41a
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx eax, byte [rax + r14]
mov byte [rbp - 0x17], al
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14000b438
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx eax, byte [rax + r14]
mov byte [rbp - 0x16], al
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14000b456
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx ecx, byte [rax + r14]
mov qword [rbp - 8], 4
mov byte [rbp - 0x15], cl
mov byte [rbp - 0x14], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
or edi, 0x40
mov dword [rsp + 0x50], edi
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14000b4a2
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx r9d, byte [rax + r14]
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
cmp rcx, rdx
jae 0x14000b4db
lea rax, [rcx + 1]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x58]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14000b4e5
lea rcx, [rsp + 0x58]
call fcn.140004f20
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14000b4f9
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx r9d, byte [rax + r14]
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
cmp rcx, rdx
jae 0x14000b532
lea rax, [rcx + 1]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x58]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14000b53c
lea rcx, [rsp + 0x58]
call fcn.140004f20
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14000b550
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx r9d, byte [rax + r14]
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
cmp rcx, rdx
jae 0x14000b589
lea rax, [rcx + 1]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x58]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14000b593
lea rcx, [rsp + 0x58]
call fcn.140004f20
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14000b5a7
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx r9d, byte [rax + r14]
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
cmp rcx, rdx
jae 0x14000b5e0
lea rax, [rcx + 1]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x58]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14000b5ea
lea rcx, [rsp + 0x58]
call fcn.140004f20
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14000b5fe
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx r9d, byte [rax + r14]
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
cmp rcx, rdx
jae 0x14000b637
lea rax, [rcx + 1]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x58]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14000b641
lea rcx, [rsp + 0x58]
call fcn.140004f20
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14000b655
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx r9d, byte [rax + r14]
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
cmp rcx, rdx
jae 0x14000b68e
lea rax, [rcx + 1]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x58]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14000b698
lea rcx, [rsp + 0x58]
call fcn.140004f20
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14000b6ac
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx r9d, byte [rax + r14]
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
cmp rcx, rdx
jae 0x14000b6e5
lea rax, [rcx + 1]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x58]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14000b6ef
lea rcx, [rsp + 0x58]
call fcn.140004f20
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000000f
jge 0x14000b703
dec eax
or eax, 0xfffffff0
inc eax
cdqe
movzx r9d, byte [rax + r14]
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
cmp rcx, rdx
jae 0x14000b73c
lea rax, [rcx + 1]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x58]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14000b746
lea rcx, [rsp + 0x58]
call fcn.140004f20
mov r8d, 1
lea rdx, [0x140011c48]
lea rcx, [rsp + 0x58]
call fcn.140003e10
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xc8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xd8], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts edi, 7
mov dword [rsp + 0x50], edi
lea r9, [rbp - 0x18]
lea r8, [rbp + 0xc8]
lea rcx, [rbp - 0x40]
call fcn.14000c550
bts edi, 8
mov dword [rsp + 0x50], edi
mov r8d, 1
lea rdx, [0x140011c48]
lea rcx, [rbp - 0x40]
call fcn.140003e10
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xa8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xb8], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts edi, 9
mov dword [rsp + 0x50], edi
lea r9, [rbp + 8]
lea r8, [rbp + 0xa8]
lea rcx, [rbp - 0x60]
call fcn.14000c550
or edi, 1
mov dword [rsp + 0x50], edi
mov r8d, 1
lea rdx, [0x140011c48]
lea rcx, [rbp - 0x60]
call fcn.140003e10
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x88], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x98], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts edi, 0xa
mov dword [rsp + 0x50], edi
lea r9, [rbp + 0x28]
lea r8, [rbp + 0x88]
lea rcx, [rbp + 0x48]
call fcn.14000c550
bts edi, 0xb
mov dword [rsp + 0x50], edi
mov r8d, 1
lea rdx, [0x140011c48]
lea rcx, [rbp + 0x48]
call fcn.140003e10
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x78], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts edi, 0xc
mov dword [rsp + 0x50], edi
lea r9, [rbp - 0x80]
lea r8, [rbp + 0x68]
lea rcx, [rbp + 0x158]
call fcn.14000c550
bts edi, 0xd
mov rdx, qword [rbp + 0x80]
cmp rdx, 0xf
jbe 0x14000b8f3
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b8ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000beef
call fcn.14000e47c
nop
mov rdx, qword [rbp + 0x60]
cmp rdx, 0xf
jbe 0x14000b92e
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b929
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bef6
call fcn.14000e47c
mov qword [rbp + 0x58], r13
mov qword [rbp + 0x60], 0xf
mov byte [rbp + 0x48], 0
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0xf
jbe 0x14000b980
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b97a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000befd
call fcn.14000e47c
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x14000b9bb
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b9b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bf04
call fcn.14000e47c
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0xf
jbe 0x14000ba0d
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ba07
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bf0b
call fcn.14000e47c
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x14000ba48
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ba43
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bf12
call fcn.14000e47c
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0xf
jbe 0x14000ba99
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ba94
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bf19
call fcn.14000e47c
and edi, 0xffffffbf
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x14000bad9
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bad4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bf20
call fcn.14000e47c
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
and edi, 0xffffffdf
mov rdx, qword [rbp]
cmp rdx, 0xf
jbe 0x14000bb2a
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bb25
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bf27
call fcn.14000e47c
and edi, 0xffffffef
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x14000bb68
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bb63
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bf2e
call fcn.14000e47c
and edi, 0xfffffff7
mov rdx, qword [rbp + 0x40]
cmp rdx, 0xf
jbe 0x14000bba6
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bba1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bf35
call fcn.14000e47c
and edi, 0xfffffffb
mov dword [rsp + 0x50], edi
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14000bbe8
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bbe3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bf3c
call fcn.14000e47c
mov eax, 8
mov word [rbp + 0x120], ax
lea rdi, [rbp + 0x158]
cmp qword [rbp + 0x170], 0xf
cmova rdi, qword [rbp + 0x158]
mov ecx, 0x18
call fcn.14000e440
mov rbx, rax
mov qword [rbp + 0xf0], rax
test rax, rax
je 0x14000bc48
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r13
mov dword [rbx + 0x10], 1
mov rcx, rdi
call fcn.14000f430
mov qword [rbx], rax
jmp 0x14000bc4b
mov rbx, r13
test rbx, rbx
je 0x14000bf8c
mov rax, qword [rbx]
mov qword [rbp + 0x128], rax
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14000bc9d
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000bc7e
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r13
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000bc90
call fcn.14000e47c
mov qword [rbx + 8], r13
mov edx, 0x18
mov rcx, rbx
call fcn.14000e47c
mov rax, qword [rbp + 0x110]
mov rcx, qword [rax]
mov rsi, qword [rcx + 0x28]
mov rdi, r15
cmp qword [r15 + 0x18], 0xf
jbe 0x14000bcb8
mov rdi, qword [r15]
mov ecx, 0x18
call fcn.14000e440
mov rbx, rax
mov qword [rbp + 0xf8], rax
test rax, rax
je 0x14000bcf5
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r13
mov dword [rbx + 0x10], 1
mov rcx, rdi
call fcn.14000f430
mov qword [rbx], rax
jmp 0x14000bcf8
mov rbx, r13
mov qword [rsp + 0x78], rbx
test rbx, rbx
je 0x14000bf8c
mov dword [rsp + 0x20], r13d
lea r9, [rbp + 0x120]
xor r8d, r8d
mov rdx, qword [rbx]
mov rcx, qword [rbp + 0x110]
call rsi
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14000bd61
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000bd42
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r13
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000bd54
call fcn.14000e47c
mov qword [rbx + 8], r13
mov edx, 0x18
mov rcx, rbx
call fcn.14000e47c
lea rcx, [rbp + 0x120]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
mov rdx, qword [rbp + 0x170]
cmp rdx, 0xf
jbe 0x14000bdb0
inc rdx
mov rcx, qword [rbp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bdab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bf43
call fcn.14000e47c
mov qword [rbp + 0x168], r13
mov qword [rbp + 0x170], 0xf
mov byte [rbp + 0x158], 0
mov rax, qword [rbp + 0x180]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x180], rax
mov rax, qword [rbp + 0x180]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x17c], edx
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp + 0x188], rax
cmp qword [rbp + 0x208], 0
je 0x14000be4c
lea rcx, [rbp + 0x1f8]
mov rax, qword [rbp + 0x1a0]
cmp qword [rax], rcx
jne 0x14000be4c
mov rdx, qword [rbp + 0x218]
mov rcx, qword [rbp + 0x210]
mov qword [rax], rcx
mov rax, qword [rbp + 0x1c0]
mov qword [rax], rcx
sub edx, ecx
mov rax, qword [rbp + 0x1d8]
mov dword [rax], edx
cmp byte [rbp + 0x204], 0
je 0x14000be61
lea rcx, [rbp + 0x188]
call fcn.140006620
lea rcx, [rbp + 0x188]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x190]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x228]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rcx, qword [rbp + 0x110]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x118]
test rcx, rcx
jne 0x14000ae50
mov rcx, qword [rbp + 0x100]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x108]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x118]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov al, 1
jmp 0x14000ac8c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ecx, 0x8007000e
call fcn.14000f300
nop
mov ecx, 0x8007000e
call fcn.14000f300
nop
mov ecx, 0x8007000e
call fcn.14000f300
nop
mov ecx, 0x8007000e
call fcn.14000f300
nop
mov ecx, 0x8007000e
call fcn.14000f300
nop
mov ecx, 0x8007000e
call fcn.14000f300
nop
mov ecx, 0x8007000e
call fcn.14000f300
int3