Function at 0x180012360
Capabilities:
Access the windows event log
Check for time delay via gettickcount
Enumerate services
Get disk information
Get disk size
Get graphical window text
Get hostname
Get installed programs
Get memory capacity
Get process image filename
Get system information on windows
List tcp connections and listeners
Log keystrokes via polling
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xc4d0]
mov eax, 0xc5d0
call fcn.1800197c0
sub rsp, rax
movaps xmmword [rsp + 0xc5c0], xmm6
movaps xmmword [rsp + 0xc5b0], xmm7
movaps xmmword [rsp + 0xc5a0], xmm8
movaps xmmword [rsp + 0xc590], xmm9
movaps xmmword [rsp + 0xc580], xmm10
movaps xmmword [rsp + 0xc570], xmm11
mov rax, qword [0x180053028]
xor rax, rsp
mov qword [rbp + 0xc460], rax
lea rcx, str.Boolean_value:_true_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800123ef
lea rcx, str.Boolean_value:_true_n
call fcn.180001120
lea rcx, str.Pi:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180012419
movsd xmm1, qword [0x18004d240]
movq rdx, xmm1
lea rcx, str.Pi:__lf_n
call fcn.180001120
lea rcx, str.Unsigned_long_long_integer:__llu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18001243d
mov rdx, 0xffffffffffffffff
lea rcx, str.Unsigned_long_long_integer:__llu_n
call fcn.180001120
xor r12d, r12d
mov qword [rbp + 0x1b0], r12
lea rcx, str.The_surface_area_of_the_sphere_with_radius__lf_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsd xmm11, qword [0x18004d210]
test eax, eax
jns 0x180012483
movsd xmm2, qword [0x18004d278]
movq r8, xmm2
movaps xmm1, xmm11
movq rdx, xmm1
lea rcx, str.The_surface_area_of_the_sphere_with_radius__lf_is:__lf_n
call fcn.180001120
lea rcx, str.Key_State:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rdi, str.Pressed
test eax, eax
jns 0x1800124c2
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
lea rdx, str.Released
cmovb rdx, rdi
lea rcx, str.Key_State:__s_n
call fcn.180001120
mov dword [rbp + 0x1c0], 0x40
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
test eax, eax
je 0x180012512
lea rcx, str.Memory_Usage:__d_MB_Total___d_MB_Available_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18001252f
mov r8, qword [rbp + 0x1d0]
shr r8, 0x14
mov rdx, qword [rbp + 0x1c8]
shr rdx, 0x14
lea rcx, str.Memory_Usage:__d_MB_Total___d_MB_Available_n
call fcn.180001120
jmp 0x18001252f
lea rcx, str.Failed_to_get_memory_usage__n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18001252f
lea rcx, str.Failed_to_get_memory_usage__n
call fcn.180001120
mov dword [rbp + 0x1a8], r12d
lea rdx, str.System
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_OpenEventLogA]
mov rdi, rax
test rax, rax
je 0x1800126cf
mov ecx, 0x10000
call fcn.180020ffc
mov rbx, rax
test rax, rax
je 0x1800126b8
mov qword [rsp + 0x30], r12
lea rax, [rbp + 0x1a4]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x10000
mov r9, rbx
xor r8d, r8d
lea edx, [r8 + 5]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
test eax, eax
je 0x1800126a5
nop dword [rax + rax]
lea rcx, str.Event_ID:__lu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800125c0
mov edx, dword [rbx + 0x14]
lea rcx, str.Event_ID:__lu_n
call fcn.180001120
lea rcx, str.Event_Type:__lu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800125e1
movzx edx, word [rbx + 0x18]
lea rcx, str.Event_Type:__lu_n
call fcn.180001120
lea rcx, str.Event_Category:__lu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180012602
movzx edx, word [rbx + 0x1c]
lea rcx, str.Event_Category:__lu_n
call fcn.180001120
lea rcx, str.Time_Generated:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18001262b
lea rcx, [rbx + 0xc]
call fcn.180020f88
mov rdx, rax
lea rcx, str.Time_Generated:__s_n
call fcn.180001120
lea rcx, str.Source_Name:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18001264e
mov edx, dword [rbx + 0x24]
add rdx, rbx
lea rcx, str.Source_Name:__s_n
call fcn.180001120
lea rcx, str.Event_String:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180012671
mov edx, dword [rbx + 0x34]
add rdx, rbx
lea rcx, str.Event_String:__s_n
call fcn.180001120
mov qword [rsp + 0x30], r12
lea rax, [rbp + 0x1a4]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x10000
mov r9, rbx
xor r8d, r8d
lea edx, [r8 + 5]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
test eax, eax
jne 0x1800125a0
mov rcx, rbx
call fcn.180020c30
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_CloseEventLog]
jmp 0x1800126db
lea rcx, str.Error_allocating_memory_for_event_log_record
call fcn.18001db60
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_CloseEventLog]
jmp 0x1800126db
lea rcx, str.Error_opening_event_log
call fcn.18001db60
mov dword [rbp + 0x1a0], 0x10
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xc220]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
je 0x180012723
lea rcx, str.Computer_Name:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180012740
lea rdx, [rbp + 0xc220]
lea rcx, str.Computer_Name:__s_n
call fcn.180001120
jmp 0x180012740
lea rcx, str.Failed_to_get_computer_name__n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180012740
lea rcx, str.Failed_to_get_computer_name__n
call fcn.180001120
mov dword [rbp + 0x1a0], 0x10
lea r8, [rbp + 0x1a0]
lea rdx, [rbp + 0xc230]
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_GetComputerNameExA]
test eax, eax
je 0x18001278d
lea rcx, str.Domain_Name:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800127aa
lea rdx, [rbp + 0xc230]
lea rcx, str.Domain_Name:__s_n
call fcn.180001120
jmp 0x1800127aa
lea rcx, str.Failed_to_get_domain_name__n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800127aa
lea rcx, str.Failed_to_get_domain_name__n
call fcn.180001120
mov dword [rbp + 0x1c0], 0x40
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
test eax, eax
je 0x1800127ef
lea rcx, str.Physical_Memory_Total:__llu_MB_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800127fb
mov rdx, qword [rbp + 0x1c8]
shr rdx, 0x14
lea rcx, str.Physical_Memory_Total:__llu_MB_n
call fcn.180001120
jmp 0x1800127fb
lea rcx, str.Error_getting_physical_memory
call fcn.18001db60
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetTopWindow]
mov rbx, rax
test rax, rax
je 0x180012860
nop dword [rax + rax]
mov r8d, 0x100
lea rdx, [rbp + 0xc250]
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowTextA]
lea rcx, str.Window_Title:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18001284a
lea rdx, [rbp + 0xc250]
lea rcx, str.Window_Title:__s_n
call fcn.180001120
mov edx, 2
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindow]
mov rbx, rax
test rax, rax
jne 0x180012810
mov ecx, 2
nop word [rax + rax]
mov eax, 0x11
cdq
idiv ecx
test edx, edx
je 0x18001289d
inc ecx
cmp ecx, 8
jle 0x180012870
lea rcx, str._d_is_a_prime_number._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800128bf
lea rcx, str._d_is_a_prime_number._n
jmp 0x1800128b5
lea rcx, str._d_is_not_a_prime_number._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800128bf
lea rcx, str._d_is_not_a_prime_number._n
mov edx, 0x11
call fcn.180001120
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov edi, eax
mov bl, 0x41
nop dword [rax]
test dil, 1
je 0x180012993
mov byte [rbp + 0x1a0], bl
mov word [rbp + 0x1a1], 0x5c3a
mov byte [rbp + 0x1a3], r12b
lea r9, [rbp + 0xc230]
lea r8, [rbp + 0xc220]
xor edx, edx
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExA]
test eax, eax
je 0x180012987
lea rcx, str.Disk_Drive__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180012935
lea rdx, [rbp + 0x1a0]
lea rcx, str.Disk_Drive__s_n
call fcn.180001120
lea rcx, str.__Total_Space:__llu_GB_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18001295d
mov rdx, qword [rbp + 0xc220]
shr rdx, 0x1e
lea rcx, str.__Total_Space:__llu_GB_n
call fcn.180001120
lea rcx, str.__Free_Space:__llu_GB_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180012993
mov rdx, qword [rbp + 0xc230]
shr rdx, 0x1e
lea rcx, str.__Free_Space:__llu_GB_n
call fcn.180001120
jmp 0x180012993
lea rcx, str.Error_getting_disk_drive_information
call fcn.18001db60
shr edi, 1
inc bl
cmp bl, 0x5a
jle 0x1800128d0
lea rcx, str.Array_max:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800129c2
mov edx, 5
lea rcx, str.Array_max:__d_n
call fcn.180001120
mov dword [rbp + 0x1a4], r12d
mov ecx, 0x1c
call fcn.180020ffc
mov rsi, rax
test rax, rax
jne 0x1800129e7
lea rcx, str.Error_allocating_memory_needed_to_call_GetExtendedTcpTable
call fcn.18001db60
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 5
mov r9d, 2
xor r8d, r8d
lea rdx, [rbp + 0x1a4]
mov rcx, rsi
call qword [sym.imp.IPHLPAPI.DLL_GetExtendedTcpTable]
cmp eax, 0x7a
jne 0x180012a39
mov rcx, rsi
call fcn.180020c30
mov ecx, dword [rbp + 0x1a4]
call fcn.180020ffc
mov rsi, rax
test rax, rax
jne 0x180012a39
lea rcx, str.Error_allocating_memory_needed_to_call_GetExtendedTcpTable
call fcn.18001db60
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 5
mov r9d, 2
xor r8d, r8d
lea rdx, [rbp + 0x1a4]
mov rcx, rsi
call qword [sym.imp.IPHLPAPI.DLL_GetExtendedTcpTable]
test eax, eax
jne 0x180012b59
mov r15d, r12d
cmp dword [rsi], r12d
jbe 0x180012b6a
nop dword [rax]
nop word [rax + rax]
mov r14d, r15d
lea rcx, str.Local_Address:__s:_u_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180012ac2
lea rdi, [r14 + r14*2]
movzx ecx, word [rsi + rdi*8 + 0xc]
call qword [sym.imp.WS2_32.dll_ntohs]
movzx ebx, ax
mov ecx, dword [rsi + rdi*8 + 8]
call qword [sym.imp.WS2_32.dll_inet_ntoa]
mov rdx, rax
mov r8d, ebx
lea rcx, str.Local_Address:__s:_u_n
call fcn.180001120
lea rcx, str.Remote_Address:__s:_u_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180012b01
lea rdi, [r14 + r14*2]
movzx ecx, word [rsi + rdi*8 + 0x14]
call qword [sym.imp.WS2_32.dll_ntohs]
movzx ebx, ax
mov ecx, dword [rsi + rdi*8 + 0x10]
call qword [sym.imp.WS2_32.dll_inet_ntoa]
mov rdx, rax
mov r8d, ebx
lea rcx, str.Remote_Address:__s:_u_n
call fcn.180001120
lea rcx, str.State:__u_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180012b26
lea rax, [r14 + r14*2]
mov edx, dword [rsi + rax*8 + 4]
lea rcx, str.State:__u_n
call fcn.180001120
lea rcx, str.PID:__u_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180012b4b
lea rax, [r14 + r14*2]
mov edx, dword [rsi + rax*8 + 0x18]
lea rcx, str.PID:__u_n
call fcn.180001120
inc r15d
cmp r15d, dword [rsi]
jb 0x180012a80
jmp 0x180012b6a
lea rcx, str.GetExtendedTcpTable_failed_with_error
call fcn.18001db60
test rsi, rsi
je 0x180012b72
mov rcx, rsi
call fcn.180020c30
mov ebx, r12d
nop word [rax + rax]
lea rcx, str._d:__c_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180012ba2
mov r8d, ebx
mov edx, ebx
lea rcx, str._d:__c_n
call fcn.180001120
inc ebx
cmp ebx, 0x80
jl 0x180012b80
mov r8d, 0x104
lea rdx, [rbp + 0xc350]
mov rcx, 0xffffffffffffffff
call qword [sym.imp.PSAPI.DLL_GetProcessImageFileNameA]
lea rcx, str.Quotient_of__d_and__d_is:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180012bf0
mov edx, 0x64
lea r9d, [rdx - 0x4b]
lea r8d, [rdx - 0x60]
lea rcx, str.Quotient_of__d_and__d_is:__d_n
call fcn.180001120
lea rcx, str.Factorial_of__d:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180012c16
mov edx, 5
lea r8d, [rdx + 0x73]
lea rcx, str.Factorial_of__d:__d_n
call fcn.180001120
lea rax, [rbp + 0xc230]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionUninstall
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180012d43
mov ebx, r12d
mov r9d, 0x100
lea r8, [rbp + 0xc250]
xor edx, edx
mov rcx, qword [rbp + 0xc230]
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
jne 0x180012d34
nop
inc ebx
lea rax, [rbp + 0xc220]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rbp + 0xc250]
mov rcx, qword [rbp + 0xc230]
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180012d10
mov dword [rbp + 0x1a0], 0x100
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x220]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DisplayName
mov rcx, qword [rbp + 0xc220]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x180012d03
lea rcx, str.Installed_Program:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180012d03
lea rdx, [rbp + 0x220]
lea rcx, str.Installed_Program:__s_n
call fcn.180001120
mov rcx, qword [rbp + 0xc220]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov r9d, 0x100
lea r8, [rbp + 0xc250]
mov edx, ebx
mov rcx, qword [rbp + 0xc230]
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
je 0x180012c70
mov rcx, qword [rbp + 0xc230]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x180012d4f
lea rcx, str.Error_opening_registry_key
call fcn.18001db60
mov qword [rbp + 0x200], r12
mov qword [rbp + 0x210], r12
mov qword [rbp + 0x218], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x200], r12b
lea rax, [rbp + 0xc350]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], r12b
jne 0x180012d80
lea rdx, [rbp + 0xc350]
lea rcx, [rbp + 0x200]
call fcn.1800149b0
nop
lea rcx, str.The_10th_Fibonacci_number_is:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180012dbf
mov edx, 0x37
lea rcx, str.The_10th_Fibonacci_number_is:__d_n
call fcn.180001120
lea rcx, str.Float:__.2f_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180012de9
movsd xmm1, qword [0x18004d230]
movq rdx, xmm1
lea rcx, str.Float:__.2f_n
call fcn.180001120
movsd xmm9, qword [0x18004d228]
movaps xmm1, xmm9
movaps xmm0, xmm11
call fcn.180023360
movaps xmm7, xmm0
movaps xmm6, xmm0
movsd xmm8, qword [0x18004d250]
mulsd xmm6, xmm8
lea rcx, str.The_volume_of_the_sphere_with_radius__lf_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180012e41
movaps xmm2, xmm6
movq r8, xmm6
movaps xmm1, xmm11
movq rdx, xmm1
lea rcx, str.The_volume_of_the_sphere_with_radius__lf_is:__lf_n
call fcn.180001120
lea rcx, str.Natural_Logarithm_of_10:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsd xmm6, qword [0x18004d270]
test eax, eax
jns 0x180012e76
movaps xmm0, xmm6
call fcn.18003a3a0
movaps xmm1, xmm0
movq rdx, xmm0
lea rcx, str.Natural_Logarithm_of_10:__lf_n
call fcn.180001120
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rbx, rax
movabs rax, 0x8daea1d7f4cf721b
mul rbx
mov rsi, rbx
sub rsi, rdx
shr rsi, 1
add rsi, rdx
shr rsi, 0x1a
imul rax, rsi, 0x5265c00
mov rcx, rbx
sub rcx, rax
movabs r8, 0x4a90be587de6e565
mov rax, r8
mul rcx
mov r14, rdx
shr r14, 0x14
mov rax, r8
mul rbx
shr rdx, 0x14
imul rax, rdx, 0x36ee80
mov rdi, rbx
sub rdi, rax
movabs rcx, 0x179ec9cbd821dc3b
mov rax, rcx
mul rdi
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 0xf
mov rax, rcx
mul rbx
mov rax, rbx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 0xf
imul rax, rax, 0xea60
sub rbx, rax
movabs rax, 0x624dd2f1a9fbe77
mul rbx
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 9
lea rcx, str.System_Uptime:__d_days___d_hours___d_minutes___d_seconds_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180012f57
mov dword [rsp + 0x20], ebx
mov r9d, edi
mov r8d, r14d
mov edx, esi
lea rcx, str.System_Uptime:__d_days___d_hours___d_minutes___d_seconds_n
call fcn.180001120
mov ebx, r12d
mov dword [rbp + 0xc220], 8
lea rcx, [rbp + 0xc220]
call qword [sym.imp.USER32.dll_GetLastInputInfo]
test eax, eax
je 0x180012f8f
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, dword [rbp + 0xc224]
mov eax, 0x10624dd3
mul ecx
mov ebx, edx
shr ebx, 6
lea rcx, str.Idle_Time:__d_seconds_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180012fae
mov edx, ebx
lea rcx, str.Idle_Time:__d_seconds_n
call fcn.180001120
movaps xmm0, xmm11
call fcn.180039fa0
movaps xmm10, xmm0
lea rcx, str.The_value_of_the_natural_logarithm_e_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180012fe1
movaps xmm1, xmm10
movq rdx, xmm1
lea rcx, str.The_value_of_the_natural_logarithm_e_is:__lf_n
call fcn.180001120
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov r14, rax
lea rcx, str.The_natural_logarithm_of_10_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013024
movaps xmm0, xmm6
call fcn.18003a3a0
movaps xmm1, xmm0
movq rdx, xmm0
lea rcx, str.The_natural_logarithm_of_10_is:__lf_n
call fcn.180001120
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea rcx, str.Processor_Architecture:
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18001304e
lea rcx, str.Processor_Architecture:
call fcn.180001120
movzx eax, word [rbp + 0x1c0]
test eax, eax
je 0x1800130b1
cmp eax, 5
je 0x180013097
cmp eax, 9
je 0x18001307d
lea rcx, str.Unknown_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800130ce
lea rcx, str.Unknown_n
jmp 0x1800130c9
lea rcx, str.AMD64_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800130ce
lea rcx, str.AMD64_n
jmp 0x1800130c9
lea rcx, str.ARM_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800130ce
lea rcx, str.ARM_n
jmp 0x1800130c9
lea rcx, str.Intel_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800130ce
lea rcx, str.Intel_n
call fcn.180001120
lea rcx, str.Number_of_Processors:__u_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800130f1
mov edx, dword [rbp + 0x1e0]
lea rcx, str.Number_of_Processors:__u_n
call fcn.180001120
lea rcx, [rbp + 0xc220]
call qword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x18001312e
lea rcx, str.Mouse_Position:__ld___ld_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18001313a
mov r8d, dword [rbp + 0xc224]
mov edx, dword [rbp + 0xc220]
lea rcx, str.Mouse_Position:__ld___ld_n
call fcn.180001120
jmp 0x18001313a
lea rcx, str.Error_getting_mouse_position
call fcn.18001db60
lea rcx, str.Boolean_value:_true_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013157
lea rcx, str.Boolean_value:_true_n
call fcn.180001120
lea rcx, str.Decimal_integer:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013179
mov edx, 0x3039
lea rcx, str.Decimal_integer:__d_n
call fcn.180001120
lea rcx, str.Hello__World__n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013196
lea rcx, str.Hello__World__n
call fcn.180001120
lea rcx, str.ASCII_value_of__c:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800131bb
mov edx, 0x41
mov r8d, edx
lea rcx, str.ASCII_value_of__c:__d_n
call fcn.180001120
lea rcx, str.Character:__c_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800131dd
mov edx, 0x41
lea rcx, str.Character:__c_n
call fcn.180001120
lea rcx, str.Array_length:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800131ff
mov edx, 5
lea rcx, str.Array_length:__d_n
call fcn.180001120
mov dword [rsp + 0x60], 0x238
lea rcx, str.Array_sum:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013229
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, str.Array_sum:__d_n
call fcn.180001120
lea rcx, str.Named_Pipe_List:_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013246
lea rcx, str.Named_Pipe_List:_n
call fcn.180001120
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, str..pipe
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x1800132a0
lea rcx, str.Failed_to_open_the_pipe_list._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800132e8
lea rcx, str.Failed_to_open_the_pipe_list._n
call fcn.180001120
jmp 0x1800132e8
mov r8d, 0x100
lea rdx, [rbp + 0x220]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_QueryDosDeviceA]
test eax, eax
je 0x1800132df
lea rcx, [0x18004bd88]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800132a0
lea rdx, [rbp + 0x220]
lea rcx, [0x18004bd88]
call fcn.180001120
jmp 0x1800132a0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.Unsigned_short_integer:__hu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18001330a
mov edx, 0xffff
lea rcx, str.Unsigned_short_integer:__hu_n
call fcn.180001120
lea rdx, [rsp + 0x60]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_Module32Next]
mov esi, eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov edi, eax
mov bl, 0x41
test dil, 1
je 0x1800133e7
mov byte [rbp + 0x1a0], bl
mov word [rbp + 0x1a1], 0x5c3a
mov byte [rbp + 0x1a3], 0
lea r9, [rbp + 0xc230]
lea r8, [rbp + 0xc220]
xor edx, edx
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExA]
test eax, eax
je 0x1800133db
lea rcx, str.Disk_Drive__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013389
lea rdx, [rbp + 0x1a0]
lea rcx, str.Disk_Drive__s_n
call fcn.180001120
lea rcx, str.__Total_Space:__llu_GB_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800133b1
mov rdx, qword [rbp + 0xc220]
shr rdx, 0x1e
lea rcx, str.__Total_Space:__llu_GB_n
call fcn.180001120
lea rcx, str.__Free_Space:__llu_GB_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800133e7
mov rdx, qword [rbp + 0xc230]
shr rdx, 0x1e
lea rcx, str.__Free_Space:__llu_GB_n
call fcn.180001120
jmp 0x1800133e7
lea rcx, str.Error_getting_disk_drive_information
call fcn.18001db60
shr edi, 1
inc bl
cmp bl, 0x5a
jle 0x180013324
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
call fcn.180014bf0
movzx ecx, word [rbp + 0x1c0]
test ecx, ecx
je 0x180013488
sub ecx, 5
je 0x18001346e
sub ecx, 1
je 0x180013454
cmp ecx, 3
je 0x18001343a
lea rcx, str.Unknown_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800134a5
lea rcx, str.Unknown_n
jmp 0x1800134a0
lea rcx, str.x64_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800134a5
lea rcx, str.x64_n
jmp 0x1800134a0
lea rcx, str.IA64_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800134a5
lea rcx, str.IA64_n
jmp 0x1800134a0
lea rcx, str.ARM_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800134a5
lea rcx, str.ARM_n
jmp 0x1800134a0
lea rcx, str.x86_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800134a5
lea rcx, str.x86_n
call fcn.180001120
lea rcx, str.Number_of_Processors:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800134c8
mov edx, dword [rbp + 0x1e0]
lea rcx, str.Number_of_Processors:__d_n
call fcn.180001120
lea rcx, str.Processor_Type:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800134eb
mov edx, dword [rbp + 0x1e4]
lea rcx, str.Processor_Type:__d_n
call fcn.180001120
lea rcx, str.Processor_Level:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18001350f
movzx edx, word [rbp + 0x1ec]
lea rcx, str.Processor_Level:__d_n
call fcn.180001120
lea rcx, str.Processor_Revision:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013533
movzx edx, word [rbp + 0x1ee]
lea rcx, str.Processor_Revision:__d_n
call fcn.180001120
lea rcx, str.Array_max:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013555
mov edx, 5
lea rcx, str.Array_max:__d_n
call fcn.180001120
mov r13, qword [rbp + 0x218]
mov r15, qword [rbp + 0x200]
test esi, esi
je 0x18001373b
mov rsi, qword [rbp + 0x210]
lea rax, [rbp + 0x1c0]
mov qword [rbp + 0xc220], rax
mov qword [rbp + 0x1c0], r12
mov qword [rbp + 0x1d0], r12
mov qword [rbp + 0x1d8], reloc.WS2_32.dll_ntohs
lea rax, [rbp - 0x70]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1800135a4
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x1c0]
call fcn.1800149b0
nop
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
lea rdi, [rbp + 0x200]
cmp r13, 0x10
cmovae rdi, r15
cmp rsi, 0x10
jae 0x1800135f6
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
jmp 0x180013672
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18001364a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180014548
mov rcx, rax
call fcn.180018cc8
mov rcx, rax
test rax, rax
je 0x180014542
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180013659
test rcx, rcx
je 0x180013656
call fcn.180018cc8
jmp 0x180013659
mov rax, r12
mov qword [rsp + 0x40], rax
lea r8, [rsi + 1]
mov rdx, rdi
mov rcx, rax
call fcn.18001a740
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x50], rsi
xor r8d, r8d
lea rdx, [rbp + 0x1c0]
lea rcx, [rsp + 0x40]
call fcn.1800105d0
cmp rax, 0xffffffffffffffff
jne 0x1800137cd
lea rdx, [rsp + 0x60]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_Module32Next]
mov ebx, eax
lea rcx, str.The_natural_logarithm_of_10_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800136d2
movaps xmm0, xmm6
call fcn.18003a3a0
movaps xmm1, xmm0
movq rdx, xmm0
lea rcx, str.The_natural_logarithm_of_10_is:__lf_n
call fcn.180001120
lea rcx, str.Key_State:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013711
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
lea rdx, str.Released
lea rax, str.Pressed
cmovb rdx, rax
lea rcx, str.Key_State:__s_n
call fcn.180001120
lea rcx, str._c_is_a_digit._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013733
mov edx, 0x35
lea rcx, str._c_is_a_digit._n
call fcn.180001120
test ebx, ebx
jne 0x180013572
mov rdi, r12
mov ebx, dword [rbp + 0x1a8]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.Pointer_address:__p_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18001376c
xor edx, edx
lea rcx, str.Pointer_address:__p_n
call fcn.180001120
lea r9, [rbp + 0xc220]
lea r8, [rbp + 0xc230]
lea rdx, [rbp + 0x1a8]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExA]
test eax, eax
je 0x180013978
lea rcx, str.Disk_Usage:__d_MB_Total___d_MB_Free_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800139a0
mov r8, qword [rbp + 0xc220]
shr r8, 0x14
mov rdx, qword [rbp + 0xc230]
shr rdx, 0x14
lea rcx, str.Disk_Usage:__d_MB_Total___d_MB_Free_n
call fcn.180001120
jmp 0x1800139a0
mov rdi, qword [rsp + 0x78]
mov qword [rbp + 0x1b0], rdi
lea rcx, str.Array_min:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800137fb
mov edx, 1
lea rcx, str.Array_min:__d_n
call fcn.180001120
lea rcx, str.Long_long_integer:__lld_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013822
movabs rdx, 0x8000000000000000
lea rcx, str.Long_long_integer:__lld_n
call fcn.180001120
lea rcx, str.The_value_of_Eulers_number_e_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013848
movaps xmm1, xmm10
movq rdx, xmm1
lea rcx, str.The_value_of_Eulers_number_e_is:__lf_n
call fcn.180001120
mov ebx, dword [rbp - 0x80]
mov dword [rbp + 0x1a0], 0x10
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0xc220]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
je 0x180013893
lea rcx, str.Computer_Name:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800138b0
lea rdx, [rbp + 0xc220]
lea rcx, str.Computer_Name:__s_n
call fcn.180001120
jmp 0x1800138b0
lea rcx, str.Failed_to_get_computer_name__n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800138b0
lea rcx, str.Failed_to_get_computer_name__n
call fcn.180001120
mov dword [rbp + 0x1a0], 0x10
lea r8, [rbp + 0x1a0]
lea rdx, [rbp + 0xc230]
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_GetComputerNameExA]
test eax, eax
je 0x1800138fd
lea rcx, str.Domain_Name:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18001391a
lea rdx, [rbp + 0xc230]
lea rcx, str.Domain_Name:__s_n
call fcn.180001120
jmp 0x18001391a
lea rcx, str.Failed_to_get_domain_name__n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18001391a
lea rcx, str.Failed_to_get_domain_name__n
call fcn.180001120
lea rcx, str._c_is_a_lowercase_letter._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18001393c
mov edx, 0x65
lea rcx, str._c_is_a_lowercase_letter._n
call fcn.180001120
mulsd xmm7, xmm8
lea rcx, str.The_volume_of_the_sphere_with_radius__lf_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013744
movaps xmm2, xmm7
movq r8, xmm7
movaps xmm1, xmm11
movq rdx, xmm1
lea rcx, str.The_volume_of_the_sphere_with_radius__lf_is:__lf_n
call fcn.180001120
jmp 0x180013744
lea rcx, str.Failed_to_get_disk_usage__n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800139a0
lea rcx, str.Failed_to_get_disk_usage__n
call fcn.180001120
nop word [rax + rax]
lea rcx, str.Sum:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800139c2
mov edx, 8
lea rcx, str.Sum:__d_n
call fcn.180001120
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea rcx, str.Processor_Architecture:
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800139ec
lea rcx, str.Processor_Architecture:
call fcn.180001120
movzx eax, word [rbp + 0x1c0]
test eax, eax
je 0x180013a4f
cmp eax, 5
je 0x180013a35
cmp eax, 9
je 0x180013a1b
lea rcx, str.Unknown_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013a6c
lea rcx, str.Unknown_n
jmp 0x180013a67
lea rcx, str.AMD64_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013a6c
lea rcx, str.AMD64_n
jmp 0x180013a67
lea rcx, str.ARM_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013a6c
lea rcx, str.ARM_n
jmp 0x180013a67
lea rcx, str.Intel_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013a6c
lea rcx, str.Intel_n
call fcn.180001120
lea rcx, str.Number_of_Processors:__u_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013a8f
mov edx, dword [rbp + 0x1e0]
lea rcx, str.Number_of_Processors:__u_n
call fcn.180001120
lea rcx, str.Difference_between__d_and__d_is__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013ab9
mov edx, 0xa
lea r9d, [rdx - 7]
lea r8d, [rdx - 3]
lea rcx, str.Difference_between__d_and__d_is__d_n
call fcn.180001120
lea rcx, str.Hello__World__n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013ad6
lea rcx, str.Hello__World__n
call fcn.180001120
test rdi, rdi
je 0x1800144bb
test ebx, ebx
je 0x1800144bb
lea rcx, str.Square_of__d_is__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013b0d
mov edx, 4
lea r8d, [rdx + 0xc]
lea rcx, str.Square_of__d_is__d_n
call fcn.180001120
lea rcx, str._d_is_negative_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013b2f
mov edx, 0xfffffffb
lea rcx, str._d_is_negative_n
call fcn.180001120
lea rcx, str.Natural_Logarithm:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013b60
movaps xmm1, xmm10
movq rdx, xmm1
lea rcx, str.Natural_Logarithm:__lf_n
call fcn.180001120
nop word [rax + rax]
lea rcx, str.Array_sum:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013b82
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, str.Array_sum:__d_n
call fcn.180001120
xorps xmm0, xmm0
ucomisd xmm0, xmm9
ja 0x180013b96
xorps xmm6, xmm6
sqrtsd xmm6, xmm9
jmp 0x180013ba2
movaps xmm0, xmm9
call fcn.18003ae3c
movaps xmm6, xmm0
mulsd xmm6, qword [0x18004d200]
lea rcx, str.The_height_of_the_equilateral_triangle_with_side__lf_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013bd8
movaps xmm2, xmm6
movq r8, xmm6
movaps xmm1, xmm11
movq rdx, xmm1
lea rcx, str.The_height_of_the_equilateral_triangle_with_side__lf_is:__lf_n
call fcn.180001120
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
call fcn.180014bf0
movzx edx, word [rbp + 0x1c0]
test edx, edx
je 0x180013c6c
sub edx, 5
je 0x180013c52
sub edx, 1
je 0x180013c38
cmp edx, 3
je 0x180013c1e
lea rcx, str.Unknown_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013c89
lea rcx, str.Unknown_n
jmp 0x180013c84
lea rcx, str.x64_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013c89
lea rcx, str.x64_n
jmp 0x180013c84
lea rcx, str.IA64_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013c89
lea rcx, str.IA64_n
jmp 0x180013c84
lea rcx, str.ARM_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013c89
lea rcx, str.ARM_n
jmp 0x180013c84
lea rcx, str.x86_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013c89
lea rcx, str.x86_n
call fcn.180001120
lea rcx, str.Number_of_Processors:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013cac
mov edx, dword [rbp + 0x1e0]
lea rcx, str.Number_of_Processors:__d_n
call fcn.180001120
lea rcx, str.Processor_Type:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013ccf
mov edx, dword [rbp + 0x1e4]
lea rcx, str.Processor_Type:__d_n
call fcn.180001120
lea rcx, str.Processor_Level:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013cf3
movzx edx, word [rbp + 0x1ec]
lea rcx, str.Processor_Level:__d_n
call fcn.180001120
lea rcx, str.Processor_Revision:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013d17
movzx edx, word [rbp + 0x1ee]
lea rcx, str.Processor_Revision:__d_n
call fcn.180001120
lea rcx, str.Octal_integer:__o_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013d39
mov edx, 0x53
lea rcx, str.Octal_integer:__o_n
call fcn.180001120
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rbx, rax
movabs rax, 0x8daea1d7f4cf721b
mul rbx
mov rsi, rbx
sub rsi, rdx
shr rsi, 1
add rsi, rdx
shr rsi, 0x1a
imul rcx, rsi, 0x5265c00
mov rdx, rbx
sub rdx, rcx
movabs rcx, 0x4a90be587de6e565
mov rax, rcx
mul rdx
mov r14, rdx
shr r14, 0x14
mov rax, rcx
mul rbx
shr rdx, 0x14
imul rax, rdx, 0x36ee80
mov rdi, rbx
sub rdi, rax
movabs rcx, 0x179ec9cbd821dc3b
mov rax, rcx
mul rdi
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 0xf
mov rax, rcx
mul rbx
mov rcx, rbx
sub rcx, rdx
shr rcx, 1
add rcx, rdx
shr rcx, 0xf
imul rcx, rcx, 0xea60
sub rbx, rcx
movabs rax, 0x624dd2f1a9fbe77
mul rbx
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 9
lea rcx, str.System_Uptime:__d_days___d_hours___d_minutes___d_seconds_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013e1a
mov dword [rsp + 0x20], ebx
mov r9d, edi
mov r8d, r14d
mov edx, esi
lea rcx, str.System_Uptime:__d_days___d_hours___d_minutes___d_seconds_n
call fcn.180001120
mov ebx, r12d
mov dword [rbp + 0xc220], 8
lea rcx, [rbp + 0xc220]
call qword [sym.imp.USER32.dll_GetLastInputInfo]
test eax, eax
je 0x180013e52
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, eax
sub edx, dword [rbp + 0xc224]
mov eax, 0x10624dd3
mul edx
mov ebx, edx
shr ebx, 6
lea rcx, str.Idle_Time:__d_seconds_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013e71
mov edx, ebx
lea rcx, str.Idle_Time:__d_seconds_n
call fcn.180001120
xor ecx, ecx
call fcn.180020884
mov qword [rbp + 0xc220], rax
lea rcx, [rbp + 0xc220]
call fcn.180020be0
mov r9, rax
lea r8, str._Y__m__d__H:_M:_S
mov edx, 0x14
lea rcx, [rbp + 0xc230]
call fcn.18001e084
lea rcx, str.Current_Time_3:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013eca
lea rdx, [rbp + 0xc230]
lea rcx, str.Current_Time_3:__s_n
call fcn.180001120
mov rdi, qword [rbp + 0x1b0]
movsxd rbx, dword [rdi + 0x3c]
lea rcx, str.The_value_of_Eulers_number_e_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013efb
movaps xmm1, xmm10
movq rdx, xmm1
lea rcx, str.The_value_of_Eulers_number_e_is:__lf_n
call fcn.180001120
mov dword [rbp + 0x1c0], 0x40
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
test eax, eax
je 0x180013f4b
lea rcx, str.Memory_Usage:__d_MB_Total___d_MB_Available_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013f68
mov r8, qword [rbp + 0x1d0]
shr r8, 0x14
mov rdx, qword [rbp + 0x1c8]
shr rdx, 0x14
lea rcx, str.Memory_Usage:__d_MB_Total___d_MB_Available_n
call fcn.180001120
jmp 0x180013f68
lea rcx, str.Failed_to_get_memory_usage__n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013f68
lea rcx, str.Failed_to_get_memory_usage__n
call fcn.180001120
lea r9, [rbp + 0x1b0]
lea r8, [rbp + 0xc220]
lea rdx, [rbp + 0xc230]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExA]
test eax, eax
je 0x180013fbe
lea rcx, str.Disk_Usage:__d_MB_Total___d_MB_Free_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013fdb
mov r8, qword [rbp + 0x1b0]
shr r8, 0x14
mov rdx, qword [rbp + 0xc220]
shr rdx, 0x14
lea rcx, str.Disk_Usage:__d_MB_Total___d_MB_Free_n
call fcn.180001120
jmp 0x180013fdb
lea rcx, str.Failed_to_get_disk_usage__n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180013fdb
lea rcx, str.Failed_to_get_disk_usage__n
call fcn.180001120
mov esi, dword [rbx + rdi + 0x28]
add rsi, rdi
mov edi, r12d
mov ebx, r12d
lea eax, [rbx + rdi]
test al, 1
jne 0x180014009
lea rcx, [0x18004cf28]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180014026
lea rcx, [0x18004cf28]
jmp 0x180014021
lea rcx, [0x18004cf2c]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180014026
lea rcx, [0x18004cf2c]
call fcn.180001120
inc ebx
cmp ebx, 8
jl 0x180013fe8
lea rcx, [0x18004bd68]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18001404a
lea rcx, [0x18004bd68]
call fcn.180001120
inc edi
cmp edi, 8
jl 0x180013fe5
lea rcx, str.Remainder_of__d_and__d_is:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18001407b
mov edx, 0x11
lea r9d, [rdx - 0x10]
lea r8d, [rdx - 0xd]
lea rcx, str.Remainder_of__d_and__d_is:__d_n
call fcn.180001120
lea rcx, str.Product_of__d_and__d_is:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800140a5
mov edx, 5
lea r9d, [rdx + 0x19]
lea r8d, [rdx + 1]
lea rcx, str.Product_of__d_and__d_is:__d_n
call fcn.180001120
lea rdx, [0x18000cd40]
mov rcx, rsi
call fcn.180010f60
lea rcx, str._c_is_a_digit._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800140d6
mov edx, 0x35
lea rcx, str._c_is_a_digit._n
call fcn.180001120
lea rdx, str.Security
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_OpenEventLogA]
mov rdi, rax
test rax, rax
je 0x18001426f
mov ecx, 0x10000
call fcn.180020ffc
mov rbx, rax
test rax, rax
je 0x180014258
mov qword [rsp + 0x30], r12
lea rax, [rbp + 0x1a8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x10000
mov r9, rbx
xor r8d, r8d
lea edx, [r8 + 5]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
test eax, eax
je 0x180014245
nop dword [rax + rax]
lea rcx, str.Event_ID:__lu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180014160
mov edx, dword [rbx + 0x14]
lea rcx, str.Event_ID:__lu_n
call fcn.180001120
lea rcx, str.Event_Type:__lu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180014181
movzx edx, word [rbx + 0x18]
lea rcx, str.Event_Type:__lu_n
call fcn.180001120
lea rcx, str.Event_Category:__lu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800141a2
movzx edx, word [rbx + 0x1c]
lea rcx, str.Event_Category:__lu_n
call fcn.180001120
lea rcx, str.Time_Generated:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800141cb
lea rcx, [rbx + 0xc]
call fcn.180020f88
mov rdx, rax
lea rcx, str.Time_Generated:__s_n
call fcn.180001120
lea rcx, str.Source_Name:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800141ee
mov edx, dword [rbx + 0x24]
add rdx, rbx
lea rcx, str.Source_Name:__s_n
call fcn.180001120
lea rcx, str.Event_String:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180014211
mov edx, dword [rbx + 0x34]
add rdx, rbx
lea rcx, str.Event_String:__s_n
call fcn.180001120
mov qword [rsp + 0x30], r12
lea rax, [rbp + 0x1a8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x10000
mov r9, rbx
xor r8d, r8d
lea edx, [r8 + 5]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
test eax, eax
jne 0x180014140
mov rcx, rbx
call fcn.180020c30
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_CloseEventLog]
jmp 0x18001427b
lea rcx, str.Error_allocating_memory_for_event_log_record
call fcn.18001db60
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_CloseEventLog]
jmp 0x18001427b
lea rcx, str.Error_opening_event_log
call fcn.18001db60
lea rcx, str.Sum:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18001429d
mov edx, 8
lea rcx, str.Sum:__d_n
call fcn.180001120
lea rcx, str.Square_root_of__.2f:__.2f_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800142f4
xorps xmm0, xmm0
movss xmm1, dword [0x18004d288]
ucomiss xmm0, xmm1
ja 0x1800142c7
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x1800142cf
movaps xmm0, xmm1
call fcn.18003af10
xorps xmm2, xmm2
cvtss2sd xmm2, xmm0
movq r8, xmm2
movsd xmm1, qword [0x18004d280]
movq rdx, xmm1
lea rcx, str.Square_root_of__.2f:__.2f_n
call fcn.180001120
mov dword [rbp + 0x1a0], r12d
xor edx, edx
xor ecx, ecx
mov r8d, 0xf003f
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov rdi, rax
test rax, rax
jne 0x180014324
lea rcx, str.Error_opening_service_control_manager
call fcn.18001db60
jmp 0x18001446a
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x1a8]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0xc230]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc000
lea r9, [rbp + 0x220]
mov edx, 0x30
lea r8d, [rdx - 0x2d]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
test eax, eax
jne 0x180014386
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xea
je 0x180014386
lea rcx, str.Error_enumerating_services
call fcn.18001db60
cmp dword [rbp + 0x1a8], 0
jbe 0x180014461
nop dword [rax]
nop word [rax + rax]
mov ebx, r12d
lea rcx, str.Service_Name:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800143cf
lea rdx, [rbx + rbx*2]
add rdx, rdx
mov rdx, qword [rbp + rdx*8 + 0x220]
lea rcx, str.Service_Name:__s_n
call fcn.180001120
lea rcx, str.Display_Name:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800143fb
lea rdx, [rbx + rbx*2]
add rdx, rdx
mov rdx, qword [rbp + rdx*8 + 0x228]
lea rcx, str.Display_Name:__s_n
call fcn.180001120
lea rcx, str.Service_Type:__lu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180014426
lea rax, [rbx + rbx*2]
add rax, rax
mov edx, dword [rbp + rax*8 + 0x230]
lea rcx, str.Service_Type:__lu_n
call fcn.180001120
lea rcx, str.Service_State:__lu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180014451
lea rax, [rbx + rbx*2]
add rax, rax
mov edx, dword [rbp + rax*8 + 0x234]
lea rcx, str.Service_State:__lu_n
call fcn.180001120
inc r12d
cmp r12d, dword [rbp + 0x1a8]
jb 0x1800143a0
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
lea rcx, str.Remainder_of__d_and__d_is:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180014494
mov edx, 0x11
lea r9d, [rdx - 0x10]
lea r8d, [rdx - 0xd]
lea rcx, str.Remainder_of__d_and__d_is:__d_n
call fcn.180001120
lea rcx, str.Square_of__d_is__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800144bb
mov edx, 4
lea r8d, [rdx + 0xc]
lea rcx, str.Square_of__d_is__d_n
call fcn.180001120
nop
cmp r13, 0x10
jb 0x1800144ee
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x1800144e6
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001453c
mov rcx, r15
call fcn.180018cc0
mov rcx, qword [rbp + 0xc460]
xor rcx, rsp
call fcn.180018ca0
lea r11, [rsp + 0xc5d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18001e488
nop
call fcn.18001e488
nop
call fcn.1800012e0
int3