Function at 0x140179b08
Capabilities:
Get mac address on windows
Get memory capacity
Get session user name
Get system firmware table

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x5f8]
sub rsp, 0x6f8
mov r13, rdx
mov qword [rbp - 0x70], rdx
xor r15d, r15d
mov dword [rsp + 0x60], r15d
mov al, al
mov bl, bl
mov cl, cl
mov rbx, qword [0x1410a1040]
lea rdx, str.hardware_1
lea rcx, [rsp + 0x40]
call fcn.140155ce0
nop
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.14016b958
nop
lea rcx, [rsp + 0x40]
call fcn.140155bc8
lea rcx, [rbp + 0x1c0]
call fcn.140177690
nop
mov dword [rsp + 0x60], 0x80
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov esi, 0x52534d42
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_GetSystemFirmwareTable]
mov ebx, eax
lea rcx, [rbp - 0x10]
test eax, eax
je 0x14017b86e
call fcn.14017be2c
nop
mov edx, ebx
lea rcx, [rbp - 0x10]
call fcn.14017c3bc
mov r9d, ebx
mov rdi, qword [rbp - 0x10]
mov r8, rdi
xor edx, edx
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_GetSystemFirmwareTable]
lea rbx, [rdi + 8]
mov qword [rbp + 0x650], rbx
test rbx, rbx
je 0x14017b88b
mov esi, dword [rdi + 4]
add rsi, qword [rbx]
cmp rbx, rsi
jae 0x140179e3c
mov rdx, rbx
mov rdi, rbx
mov r8, rbx
mov r14, rbx
mov r9, rbx
mov rcx, rbx
mov rax, qword [rbp + 0x650]
cmp byte [rax], 0x7f
jne 0x140179c24
mov rbx, rdx
mov rdi, r8
mov r14, r9
cmp byte [rcx + 1], 4
je 0x140179e3c
lea rcx, [rbp + 0x650]
mov qword [rbp + 0x640], rcx
movzx ecx, byte [rax]
test ecx, ecx
je 0x140179d61
sub ecx, 1
je 0x140179ccc
cmp ecx, 1
jne 0x140179deb
mov r8b, byte [rbx + 4]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x640]
call fcn.140177760
mov rdx, rax
lea rcx, [rbp + 0x280]
call fcn.140155c24
lea rcx, [rsp + 0x40]
call fcn.140155bc8
mov r8b, byte [rbx + 5]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x640]
call fcn.140177760
mov rdx, rax
lea rcx, [rbp + 0x2a0]
call fcn.140155c24
lea rcx, [rsp + 0x40]
call fcn.140155bc8
mov r8b, byte [rbx + 7]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x640]
call fcn.140177760
lea rcx, [rbp + 0x2c0]
jmp 0x140179dd9
mov r8b, byte [rdi + 4]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x640]
call fcn.140177760
mov rdx, rax
lea rcx, [rbp + 0x220]
call fcn.140155c24
lea rcx, [rsp + 0x40]
call fcn.140155bc8
mov r8b, byte [rdi + 5]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x640]
call fcn.140177760
mov rdx, rax
lea rcx, [rbp + 0x240]
call fcn.140155c24
lea rcx, [rsp + 0x40]
call fcn.140155bc8
cmp byte [rdi + 1], 8
jbe 0x140179deb
lea r8, [rdi + 8]
lea rcx, [rsp + 0x70]
call fcn.140174678
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x10], xmm0
lea r8, [rbp + 0x10]
lea rdx, [rsp + 0x40]
call fcn.1401777cc
lea rcx, [rbp + 0x260]
jmp 0x140179dd9
mov r8b, byte [r14 + 8]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x640]
call fcn.140177760
mov rdx, rax
lea rcx, [rbp + 0x200]
call fcn.140155c24
lea rcx, [rsp + 0x40]
call fcn.140155bc8
mov r8b, byte [r14 + 4]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x640]
call fcn.140177760
mov rdx, rax
lea rcx, [rbp + 0x1c0]
call fcn.140155c24
lea rcx, [rsp + 0x40]
call fcn.140155bc8
mov r8b, byte [r14 + 5]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x640]
call fcn.140177760
lea rcx, [rbp + 0x1e0]
mov rdx, rax
call fcn.140155c24
lea rcx, [rsp + 0x40]
call fcn.140155bc8
mov rcx, qword [rbp + 0x650]
movzx ebx, byte [rcx + 1]
add rbx, rcx
lea rdx, [rsi - 1]
cmp rbx, rdx
jae 0x140179e16
mov al, byte [rbx]
lea rcx, [rbx + 1]
or al, byte [rcx]
je 0x140179e16
mov rbx, rcx
mov al, byte [rcx]
cmp rcx, rdx
jb 0x140179e04
add rbx, 2
mov rcx, rbx
mov qword [rbp + 0x650], rbx
mov rdx, rbx
mov rdi, rbx
mov r8, rbx
mov r14, rbx
mov r9, rbx
cmp rbx, rsi
jb 0x140179c05
mov dword [rsp + 0x60], r15d
lea rcx, [rbp - 0x10]
call fcn.14015f748
nop
mov rbx, qword [0x1410a1040]
lea rdx, str.hardware_2
lea rcx, [rsp + 0x40]
call fcn.140155ce0
nop
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.14016b958
nop
lea rcx, [rsp + 0x40]
call fcn.140155bc8
lea rcx, [rbp + 0x180]
call fcn.140178918
nop
mov dword [rsp + 0x60], 0x40
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rbp + 0x10]
mov edx, 8
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x14017b8ac
mov rcx, qword [rbp + 0x10]
or rsi, 0xffffffffffffffff
cmp rcx, rsi
je 0x14017b8fd
mov dword [rbp + 0x640], r15d
lea rax, [rbp + 0x640]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea r12d, [rsi + 2]
mov edx, r12d
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
jne 0x140179efb
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14017b91e
mov ebx, dword [rbp + 0x640]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8d, ebx
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rdi, rax
mov rcx, qword [rbp + 0x10]
test rax, rax
je 0x14017b979
lea rax, [rbp + 0x640]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp + 0x640]
mov r8, rdi
mov edx, r12d
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
je 0x14017b9a0
lea rdx, [rsp + 0x70]
mov rcx, qword [rdi]
call qword [sym.imp.ADVAPI32.dll_ConvertSidToStringSidW]
test eax, eax
je 0x14017ba0f
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
mov r9d, esi
mov r8, qword [rsp + 0x70]
xor edx, edx
mov r14d, 0xfde9
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd rbx, eax
mov rdx, rbx
xor r8d, r8d
lea rcx, [rbp + 0x50]
call fcn.1401691e0
nop
lea rcx, [rbp + 0x50]
call fcn.140155b3c
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, esi
mov r8, qword [rsp + 0x70]
xor edx, edx
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x1a0]
call fcn.140155b5c
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0x658], 0x101
lea rdx, [rbp + 0x658]
lea rcx, [rbp + 0x3e0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
je 0x14017ba7e
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
mov r9d, esi
lea r8, [rbp + 0x3e0]
xor edx, edx
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd rbx, eax
mov rdx, rbx
xor r8d, r8d
lea rcx, [rsp + 0x40]
call fcn.1401691e0
nop
lea rcx, [rsp + 0x40]
call fcn.140155b3c
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, esi
lea r8, [rbp + 0x3e0]
xor edx, edx
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x180]
call fcn.140155b5c
mov dword [rsp + 0x60], r15d
lea rcx, [rsp + 0x40]
call fcn.140155bc8
nop
lea rcx, [rbp + 0x50]
call fcn.140155bc8
nop
mov rbx, qword [0x1410a1040]
lea rdx, str.hardware_3
lea rcx, [rsp + 0x40]
call fcn.140155ce0
nop
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.14016b958
nop
lea rcx, [rsp + 0x40]
call fcn.140155bc8
lea rcx, [rbp - 0x60]
call fcn.14017c39c
nop
lea rax, [rsp + 0x70]
mov qword [rbp + 0x640], rax
movdqa xmm0, xmmword [0x140fcf4c0]
movdqu xmmword [rsp + 0x70], xmm0
mov eax, 0x80000000
xor ecx, ecx
cpuid
mov r9d, eax
mov dword [rsp + 0x74], ebx
mov dword [rsp + 0x78], ecx
mov dword [rsp + 0x7c], edx
mov r8d, 0x80000000
cmp eax, r8d
jb 0x14017a19c
mov eax, r8d
xor ecx, ecx
cpuid
mov dword [rsp + 0x70], eax
mov dword [rsp + 0x74], ebx
mov dword [rsp + 0x78], ecx
mov dword [rsp + 0x7c], edx
cmp r8d, 0x80000002
jne 0x14017a166
movups xmm0, xmmword [rsp + 0x70]
movdqu xmmword [rbp + 0x70], xmm0
jmp 0x14017a194
cmp r8d, 0x80000003
jne 0x14017a17e
movups xmm0, xmmword [rsp + 0x70]
movdqu xmmword [rbp + 0x80], xmm0
jmp 0x14017a194
cmp r8d, 0x80000004
jne 0x14017a194
movups xmm0, xmmword [rsp + 0x70]
movdqu xmmword [rbp + 0x90], xmm0
add r8d, r12d
cmp r8d, r9d
jbe 0x14017a13a
lea rdx, [rbp + 0x70]
lea rcx, [rsp + 0x40]
call fcn.140155ce0
mov dword [rsp + 0x60], 0x20
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x70]
call fcn.14017e460
mov rbx, rax
lea rdx, [0x140fc8054]
lea rcx, [rbp - 0x60]
call fcn.14017e418
mov rcx, rax
mov rdx, rbx
call fcn.14017c364
nop
lea rcx, [rsp + 0x40]
call fcn.140155bc8
mov rbx, qword [0x1410a1040]
lea rdx, str.hardware_4
lea rcx, [rsp + 0x40]
call fcn.140155ce0
nop
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.14016b958
nop
lea rcx, [rsp + 0x40]
call fcn.140155bc8
lea rax, [rsp + 0x70]
mov qword [rbp + 0x640], rax
lea rdx, [rbp + 0x1c0]
lea rcx, [rsp + 0x70]
call fcn.14017e4e8
mov rbx, rax
lea rdx, str.BiosVendor
lea rcx, [rbp - 0x60]
call fcn.14017e418
mov rcx, rax
mov rdx, rbx
call fcn.14017c364
lea rax, [rsp + 0x70]
mov qword [rbp + 0x640], rax
lea rdx, [rbp + 0x1e0]
lea rcx, [rsp + 0x70]
call fcn.14017e4e8
mov rbx, rax
lea rdx, str.BiosVersion
lea rcx, [rbp - 0x60]
call fcn.14017e418
mov rcx, rax
mov rdx, rbx
call fcn.14017c364
lea rax, [rsp + 0x70]
mov qword [rbp + 0x640], rax
lea rdx, [rbp + 0x200]
lea rcx, [rsp + 0x70]
call fcn.14017e4e8
mov rbx, rax
lea rdx, str.BiosReleaseData
lea rcx, [rbp - 0x60]
call fcn.14017e418
mov rcx, rax
mov rdx, rbx
call fcn.14017c364
lea rax, [rsp + 0x70]
mov qword [rbp + 0x640], rax
lea rdx, [rbp + 0x220]
lea rcx, [rsp + 0x70]
call fcn.14017e4e8
mov rbx, rax
lea rdx, str.SystemVendor
lea rcx, [rbp - 0x60]
call fcn.14017e418
mov rcx, rax
mov rdx, rbx
call fcn.14017c364
lea rax, [rsp + 0x70]
mov qword [rbp + 0x640], rax
lea rdx, [rbp + 0x240]
lea rcx, [rsp + 0x70]
call fcn.14017e4e8
mov rbx, rax
lea rdx, str.SystemProduct
lea rcx, [rbp - 0x60]
call fcn.14017e418
mov rcx, rax
mov rdx, rbx
call fcn.14017c364
lea rax, [rsp + 0x70]
mov qword [rbp + 0x640], rax
lea rdx, [rbp + 0x280]
lea rcx, [rsp + 0x70]
call fcn.14017e4e8
mov rbx, rax
lea rdx, str.MotherBoardVendor
lea rcx, [rbp - 0x60]
call fcn.14017e418
mov rcx, rax
mov rdx, rbx
call fcn.14017c364
lea rax, [rsp + 0x70]
mov qword [rbp + 0x640], rax
lea rdx, [rbp + 0x2a0]
lea rcx, [rsp + 0x70]
call fcn.14017e4e8
mov rbx, rax
lea rdx, str.MotherBoardProduct
lea rcx, [rbp - 0x60]
call fcn.14017e418
mov rcx, rax
mov rdx, rbx
call fcn.14017c364
lea rax, [rsp + 0x70]
mov qword [rbp + 0x640], rax
lea rcx, [rsp + 0x70]
call fcn.14017e57c
mov rbx, rax
lea rdx, str.ComputerName
lea rcx, [rbp - 0x60]
call fcn.14017e418
mov rcx, rax
mov rdx, rbx
call fcn.14017c364
lea rax, [rsp + 0x70]
mov qword [rbp + 0x650], rax
mov dword [rbp + 0x70], 0x40
lea rcx, [rbp + 0x70]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov rax, qword [rbp + 0x78]
shr rax, 0x14
mov dword [rbp + 0x640], eax
lea rdx, [rbp + 0x640]
lea rcx, [rsp + 0x70]
call fcn.14017e610
mov rbx, rax
lea rdx, str.RamSize
lea rcx, [rbp - 0x60]
call fcn.14017e418
mov rcx, rax
mov rdx, rbx
call fcn.14017c364
mov rbx, qword [0x1410a1040]
lea rdx, str.hardware_5
lea rcx, [rsp + 0x40]
call fcn.140155ce0
nop
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.14016b958
nop
lea rcx, [rsp + 0x40]
call fcn.140155bc8
mov rbx, qword [0x1410a1040]
lea rdx, str.hardware_1
lea rcx, [rsp + 0x40]
call fcn.140155ce0
nop
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.14016b958
nop
lea rcx, [rsp + 0x40]
call fcn.140155bc8
lea rcx, [rbp + 0x50]
call fcn.14017be2c
nop
mov dword [rsp + 0x60], 0x120
mov ecx, 0x2c0
mov dword [rbp + 0x650], ecx
call fcn.140cf2d70
mov r14, rax
test rax, rax
je 0x14017a942
lea rdx, [rbp + 0x650]
mov rcx, rax
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
cmp eax, 0x6f
jne 0x14017a50a
mov rcx, r14
call fcn.140ceb430
mov ecx, dword [rbp + 0x650]
call fcn.140cf2d70
mov r14, rax
test rax, rax
je 0x14017a942
lea rdx, [rbp + 0x650]
mov rcx, r14
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
test eax, eax
jne 0x14017a93a
mov rsi, r14
test r14, r14
je 0x14017a942
mov byte [rbp + 0x640], getprotobyname
lea rcx, [rbp + 0xe0]
call fcn.14017872c
nop
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
or r9d, 0xffffffff
lea r8, [rsi + 0xc]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
xor r8d, r8d
mov rdx, rbx
lea rcx, [rbp - 0x50]
call fcn.14017c5f8
nop
xor edx, edx
lea rcx, [rbp - 0x50]
call fcn.14017c5e8
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
or r9d, 0xffffffff
lea r8, [rsi + 0xc]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea rcx, [rbp - 0x50]
call fcn.1401624b4
mov r8, rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
or r9d, 0xffffffff
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd rdi, eax
mov rdx, rdi
xor r8d, r8d
lea rcx, [rsp + 0x70]
call fcn.1401691e0
nop
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.140155b4c
mov rbx, rax
lea rcx, [rbp - 0x50]
call fcn.1401624b4
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rbx
or r9d, 0xffffffff
mov r8, rax
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0xe0]
call fcn.140155b5c
lea rdi, [rsi + 0x110]
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
or r9d, 0xffffffff
mov r8, rdi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.14017c5f8
nop
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.14017c5e8
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
or r9d, 0xffffffff
mov r8, rdi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea rcx, [rsp + 0x40]
call fcn.1401624b4
mov r8, rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
or r9d, 0xffffffff
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd rdi, eax
mov rdx, rdi
xor r8d, r8d
lea rcx, [rbp + 0x30]
call fcn.1401691e0
nop
xor edx, edx
lea rcx, [rbp + 0x30]
call fcn.140155b4c
mov rbx, rax
lea rcx, [rsp + 0x40]
call fcn.1401624b4
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rbx
or r9d, 0xffffffff
mov r8, rax
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x100]
call fcn.140155b5c
lea rdx, [rsi + 0x1c0]
lea rcx, [rbp + 0x160]
call fcn.140164508
lea rcx, [rbp - 0x10]
call fcn.140155d74
nop
mov edx, dword [rsi + 0x1a4]
mov eax, edx
sub eax, 1
je 0x14017a7e0
sub eax, 5
je 0x14017a7d7
sub eax, 3
je 0x14017a7ce
sub eax, 6
je 0x14017a7c5
sub eax, 8
je 0x14017a7bc
sub eax, 1
je 0x14017a7b3
cmp eax, 4
je 0x14017a7aa
lea rcx, [rbp + 0x70]
call fcn.140174770
nop
mov r8, rax
lea rdx, str.Unknown_type
lea rcx, [rbp + 0x10]
call fcn.140158f98
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.140155c24
lea rcx, [rbp + 0x10]
call fcn.140155bc8
nop
lea rcx, [rbp + 0x70]
call fcn.140155bc8
jmp 0x14017a7f0
lea rdx, str.SLIP
jmp 0x14017a7e7
lea rdx, str.Loopback
jmp 0x14017a7e7
lea rdx, [0x140fc7cfc]
jmp 0x14017a7e7
lea rdx, str.FDDI
jmp 0x14017a7e7
lea rdx, str.Token_Ring
jmp 0x14017a7e7
lea rdx, str.Ethernet
jmp 0x14017a7e7
lea rdx, str.Other
lea rcx, [rbp - 0x10]
call fcn.140164508
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x140]
call fcn.140155b5c
mov edx, r12d
lea rcx, [rbp + 0x2e0]
call fcn.1401684e8
nop
lea rdx, [0x140165964]
lea rcx, [rbp + 0x2f0]
call fcn.1401690e0
lea rdx, [0x140174858]
mov rcx, rax
call fcn.1401690e0
lea rdx, [rbp + 0x640]
mov rcx, rax
call fcn.14016b944
mov ebx, r15d
cmp dword [rsi + 0x194], r15d
jbe 0x14017a8a9
lea rdi, [rsi + 0x198]
mov edx, 2
lea rcx, [rbp - 0x30]
call fcn.140cdbcc0
mov rdx, rax
lea rcx, [rbp + 0x2f0]
call fcn.14016b91c
movzx edx, byte [rdi]
mov rcx, rax
call fcn.14017c42c
inc ebx
lea rcx, [0x140fc5430]
lea rdx, [0x140ec18ff]
cmp ebx, dword [rsi + 0x194]
cmovb rdx, rcx
mov rcx, rax
call fcn.140172ac8
add rdi, r12
cmp ebx, dword [rsi + 0x194]
jb 0x14017a854
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x2e0]
call fcn.14016832c
mov rdx, rax
lea rcx, [rbp + 0x120]
call fcn.140155c24
lea rcx, [rbp + 0x70]
call fcn.140155bc8
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x50]
call fcn.14017be70
mov rsi, qword [rsi]
lea rcx, [rbp + 0x2e0]
call fcn.140165ac0
nop
lea rcx, [rbp - 0x10]
call fcn.140155bc8
nop
lea rcx, [rbp + 0x30]
call fcn.140155bc8
nop
lea rcx, [rsp + 0x40]
call fcn.140162508
nop
lea rcx, [rsp + 0x70]
call fcn.140155bc8
nop
lea rcx, [rbp - 0x50]
call fcn.140162508
nop
lea rcx, [rbp + 0xe0]
call fcn.140178790
test rsi, rsi
jne 0x14017a535
mov rcx, r14
call fcn.140ceb430
mov dword [rsp + 0x60], r15d
mov esi, r15d
lea rcx, [rbp + 0x50]
call fcn.14017be4c
test rax, rax
je 0x14017ab3a
mov rdi, r15
lea r14, str.InternetAdapters
lea rax, [rsp + 0x70]
mov qword [rbp + 0x640], rax
mov rdx, rdi
lea rcx, [rbp + 0x50]
call fcn.14017be40
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.14017e4e8
mov rbx, rax
mov rdx, r14
lea rcx, [rbp - 0x60]
call fcn.14017e418
mov rdx, rdi
mov rcx, rax
call fcn.14017c00c
lea rdx, str.Name
mov rcx, rax
call fcn.14017e418
mov rcx, rax
mov rdx, rbx
call fcn.14017c364
lea rax, [rbp + 0x10]
mov qword [rbp + 0x640], rax
mov rdx, rdi
lea rcx, [rbp + 0x50]
call fcn.14017be40
lea rdx, [rax + 0x20]
lea rcx, [rbp + 0x10]
call fcn.14017e4e8
mov rbx, rax
mov rdx, r14
lea rcx, [rbp - 0x60]
call fcn.14017e418
mov rdx, rdi
mov rcx, rax
call fcn.14017c00c
lea rdx, str.Desc
mov rcx, rax
call fcn.14017e418
mov rcx, rax
mov rdx, rbx
call fcn.14017c364
lea rax, [rbp + 0x30]
mov qword [rbp + 0x640], rax
mov rdx, rdi
lea rcx, [rbp + 0x50]
call fcn.14017be40
lea rdx, [rax + 0x40]
lea rcx, [rbp + 0x30]
call fcn.14017e4e8
mov rbx, rax
mov rdx, r14
lea rcx, [rbp - 0x60]
call fcn.14017e418
mov rdx, rdi
mov rcx, rax
call fcn.14017c00c
lea rdx, [0x140fc814c]
mov rcx, rax
call fcn.14017e418
mov rcx, rax
mov rdx, rbx
call fcn.14017c364
lea rax, [rbp - 0x50]
mov qword [rbp + 0x640], rax
mov rdx, rdi
lea rcx, [rbp + 0x50]
call fcn.14017be40
lea rdx, [rax + 0x80]
lea rcx, [rbp - 0x50]
call fcn.14017e4e8
mov rbx, rax
mov rdx, r14
lea rcx, [rbp - 0x60]
call fcn.14017e418
mov rdx, rdi
mov rcx, rax
call fcn.14017c00c
lea rdx, str.AdapterIP
mov rcx, rax
call fcn.14017e418
mov rcx, rax
mov rdx, rbx
call fcn.14017c364
lea rax, [rbp - 0x30]
mov qword [rbp + 0x640], rax
mov rdx, rdi
lea rcx, [rbp + 0x50]
call fcn.14017be40
lea rdx, [rax + 0x60]
lea rcx, [rbp - 0x30]
call fcn.14017e4e8
mov rbx, rax
mov rdx, r14
lea rcx, [rbp - 0x60]
call fcn.14017e418
mov rdx, rdi
mov rcx, rax
call fcn.14017c00c
lea rdx, str.AdapterType
mov rcx, rax
call fcn.14017e418
mov rcx, rax
mov rdx, rbx
call fcn.14017c364
add esi, r12d
movsxd rdi, esi
lea rcx, [rbp + 0x50]
call fcn.14017be4c
cmp rdi, rax
jb 0x14017a966
mov rbx, qword [0x1410a1040]
lea rdx, str.hardware_6
lea rcx, [rsp + 0x40]
call fcn.140155ce0
nop
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.14016b958
nop
lea rcx, [rsp + 0x40]
call fcn.140155bc8
lea rdx, [rbp + 0xc8]
call fcn.140177318
nop
mov esi, r15d
lea rcx, [rbp + 0xc8]
call fcn.14017bf60
test rax, rax
je 0x14017ac6b
mov rdi, r15
lea rax, [rbp - 0x30]
mov qword [rbp + 0x640], rax
mov rdx, rdi
lea rcx, [rbp + 0xc8]
call fcn.14017bf54
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.14017e4e8
mov rbx, rax
lea rdx, str.AccountGPU
lea rcx, [rbp - 0x60]
call fcn.14017e418
mov rdx, rdi
mov rcx, rax
call fcn.14017c00c
lea rdx, str.Name
mov rcx, rax
call fcn.14017e418
mov rcx, rax
mov rdx, rbx
call fcn.14017c364
lea rax, [rbp - 0x50]
mov qword [rbp + 0x640], rax
mov rdx, rdi
lea rcx, [rbp + 0xc8]
call fcn.14017bf54
lea rdx, [rax + 0x20]
lea rcx, [rbp - 0x50]
call fcn.14017e650
mov rbx, rax
lea rdx, str.AccountGPU
lea rcx, [rbp - 0x60]
call fcn.14017e418
mov rdx, rdi
mov rcx, rax
call fcn.14017c00c
lea rdx, str.IsActive
mov rcx, rax
call fcn.14017e418
mov rcx, rax
mov rdx, rbx
call fcn.14017c364
add esi, r12d
movsxd rdi, esi
lea rcx, [rbp + 0xc8]
call fcn.14017bf60
cmp rdi, rax
jb 0x14017ab93
mov rbx, qword [0x1410a1040]
lea rdx, str.hardware_7
lea rcx, [rsp + 0x40]
call fcn.140155ce0
nop
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.14016b958
nop
lea rcx, [rsp + 0x40]
call fcn.140155bc8
lea rcx, [rbp - 0x10]
call fcn.14017be2c
nop
mov dword [rsp + 0x60], reloc.WS2_32.dll_recv
lea rdx, str.SOFTWAREValveSteam
lea rcx, [rbp - 0x30]
call fcn.140155ce0
nop
lea r8, [rbp - 0x30]
mov rdx, 0xffffffff80000001
lea rcx, [rbp + 0x70]
call fcn.14015e4c4
nop
lea rcx, [rbp - 0x30]
call fcn.140155bc8
lea rdx, str.SteamPath
lea rcx, [rbp - 0x30]
call fcn.140155ce0
nop
lea r8, [rbp - 0x30]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x70]
call fcn.14015e9a0
nop
lea rcx, [rbp - 0x30]
call fcn.140155bc8
lea rdx, str.configloginusers.vdf
lea rcx, [rsp + 0x40]
call fcn.14017c62c
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x50]
call fcn.140162928
nop
lea rcx, [rbp - 0x50]
call fcn.140165c54
mov bl, al
lea rcx, [rbp - 0x50]
call fcn.140162508
test bl, bl
jne 0x14017ad56
mov r14d, r15d
mov dword [rbp + 0x640], r15d
mov dword [rsp + 0x60], r15d
jmp 0x14017af0d
mov dword [rsp + 0x20], r12d
mov r9d, 0x40
mov r8d, r12d
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x3e0]
call fcn.140168108
nop
lea rcx, [rbp + 0x640]
call fcn.140174874
mov r8, rax
lea rdx, [rbp + 0x3e0]
lea rcx, [rbp + 0x2e0]
call fcn.14017e37c
nop
lea rdx, [rbp + 0x640]
lea rcx, [rbp + 0x340]
call fcn.14017bb08
mov rdx, qword [rbp + 0x348]
mov qword [rbp + 0x658], rdx
jmp 0x14017aec9
lea rcx, [rbp + 0x640]
call fcn.14017baf4
mov rdi, rax
lea rcx, [rbp + 0xe0]
call fcn.140178940
nop
mov rbx, qword [rdi + 0x20]
lea rdx, str.AccountName
lea rcx, [rbp - 0x30]
call fcn.140155ce0
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbx + 0x20]
call fcn.14017bb18
mov rdx, rax
lea rcx, [rbp + 0x100]
call fcn.140155b5c
nop
lea rcx, [rbp - 0x30]
call fcn.140155bc8
mov rbx, qword [rdi + 0x20]
lea rdx, str.PersonaName
lea rcx, [rbp - 0x30]
call fcn.140155ce0
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbx + 0x20]
call fcn.14017bb18
mov rdx, rax
lea rcx, [rbp + 0x120]
call fcn.140155b5c
nop
lea rcx, [rbp - 0x30]
call fcn.140155bc8
mov rdx, rdi
lea rcx, [rbp + 0xe0]
call fcn.140155b5c
mov rbx, qword [rdi + 0x20]
lea rdx, str.mostrecent
lea rcx, [rbp - 0x30]
call fcn.140155ce0
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbx + 0x20]
call fcn.14017bb18
mov rcx, rax
lea rdx, [0x140ec1d38]
call fcn.140164c80
mov byte [rbp + 0x140], al
lea rcx, [rbp - 0x30]
call fcn.140155bc8
lea rdx, [rbp + 0xe0]
lea rcx, [rbp - 0x10]
call fcn.14017bd54
nop
lea rcx, [rbp + 0xe0]
call fcn.14016620c
lea rcx, [rbp + 0x640]
call fcn.14017bae4
lea rdx, [rbp + 0x658]
lea rcx, [rbp + 0x640]
call fcn.14017bafc
test al, al
je 0x14017adbf
mov r14d, r15d
mov dword [rbp + 0x640], r15d
mov dword [rsp + 0x60], r15d
lea rcx, [rbp + 0x2e0]
call fcn.140178978
nop
lea rcx, [rbp + 0x3e0]
call fcn.140167260
nop
lea rcx, [rsp + 0x40]
call fcn.140155bc8
nop
lea rcx, [rbp + 0x70]
call fcn.14015e734
nop
mov rcx, qword [rbp - 8]
mov r12, qword [rbp - 0x10]
sub rcx, r12
movabs rax, 0x4ec4ec4ec4ec4ec5
imul rcx
mov r15, rdx
sar r15, 5
mov rax, r15
shr rax, 0x3f
add r15, rax
je 0x14017b203
xor ebx, ebx
mov r13d, ebx
mov r14d, ebx
lea rax, [rbp - 0x30]
mov qword [rbp + 0x658], rax
imul rsi, r13, 0x68
add rsi, r12
lea rdx, [rsi + 0x40]
lea rcx, [rbp - 0x30]
call fcn.14017e4e8
mov rdi, rax
mov word [rsp + 0x4e], bx
mov qword [rsp + 0x50], reloc.WS2_32.dll_listen
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.SteamAccounts]
movsd qword [rsp + 0x40], xmm0
mov ecx, dword [0x140fc81c8]
mov dword [rsp + 0x48], ecx
mov al, byte [reloc.WS2_32.dll_WSAStartup]
mov byte [rsp + 0x4c], al
mov byte [rsp + 0x4d], bl
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x60]
call fcn.14017f464
mov rdx, r13
mov rcx, rax
call fcn.14017c00c
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 4
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov dword [rsp + 0x40], 0x656d614e
mov byte [rsp + 0x44], bl
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.14017f464
nop
mov dl, byte [rax]
mov cl, byte [rdi]
mov byte [rax], cl
mov byte [rdi], dl
lea rcx, [rdi + 8]
mov rdx, qword [rax + 8]
mov rbx, qword [rcx]
mov qword [rax + 8], rbx
mov qword [rcx], rdx
mov dl, byte [rdi]
call fcn.14017d640
nop
lea rax, [rbp - 0x50]
mov qword [rbp + 0x658], rax
lea rdx, [rsi + 0x20]
lea rcx, [rbp - 0x50]
call fcn.14017e4e8
mov rdi, rax
xor ebx, ebx
mov word [rsp + 0x4e], bx
mov qword [rsp + 0x50], reloc.WS2_32.dll_listen
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.SteamAccounts]
movsd qword [rsp + 0x40], xmm0
mov ecx, dword [0x140fc81c8]
mov dword [rsp + 0x48], ecx
mov al, byte [reloc.WS2_32.dll_WSAStartup]
mov byte [rsp + 0x4c], al
mov byte [rsp + 0x4d], bl
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x60]
call fcn.14017f464
mov rdx, r13
mov rcx, rax
call fcn.14017c00c
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 5
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov ecx, dword [str.Login]
mov dword [rsp + 0x40], ecx
mov cl, byte [0x140fc81b8]
mov byte [rsp + 0x44], cl
mov byte [rsp + 0x45], bl
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.14017f464
nop
mov dl, byte [rax]
mov cl, byte [rdi]
mov byte [rax], cl
mov byte [rdi], dl
lea rcx, [rdi + 8]
mov rbx, qword [rax + 8]
mov r8, qword [rcx]
mov qword [rax + 8], r8
mov qword [rcx], rbx
mov dl, byte [rdi]
call fcn.14017d640
nop
lea rax, [rbp + 0x30]
mov qword [rbp + 0x658], rax
mov rdx, rsi
lea rcx, [rbp + 0x30]
call fcn.14017e4e8
mov rbx, rax
xor edx, edx
mov word [rsp + 0x4e], dx
mov qword [rsp + 0x50], reloc.WS2_32.dll_listen
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.SteamAccounts]
movsd qword [rsp + 0x40], xmm0
mov ecx, dword [0x140fc81c8]
mov dword [rsp + 0x48], ecx
mov al, byte [reloc.WS2_32.dll_WSAStartup]
mov byte [rsp + 0x4c], al
mov byte [rsp + 0x4d], dl
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x60]
call fcn.14017f464
mov rdx, r13
mov rcx, rax
call fcn.14017c00c
lea rdx, str.SteamID
mov rcx, rax
call fcn.14017e418
mov rcx, rax
mov rdx, rbx
call fcn.14017c364
lea rax, [rbp + 0x10]
mov qword [rbp + 0x658], rax
mov rdx, r13
lea rcx, [rbp - 0x10]
call fcn.14017bd4c
lea rdx, [rax + 0x60]
lea rcx, [rbp + 0x10]
call fcn.14017e650
mov rbx, rax
lea rdx, str.SteamAccounts
lea rcx, [rbp - 0x60]
call fcn.14017e418
mov rdx, r13
mov rcx, rax
call fcn.14017c00c
lea rdx, str.IsRecent
mov rcx, rax
call fcn.14017e418
mov rcx, rax
mov rdx, rbx
call fcn.14017c364
inc r14d
movsxd r13, r14d
cmp r13, r15
mov ebx, 0
jb 0x14017af59
mov r14d, dword [rbp + 0x640]
mov r13, qword [rbp - 0x70]
mov rbx, qword [0x1410a1040]
lea rdx, str.hardware_8
lea rcx, [rsp + 0x40]
call fcn.140155ce0
nop
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.14016b958
nop
lea rcx, [rsp + 0x40]
call fcn.140155bc8
lea rax, [rbp - 0x30]
mov qword [rbp + 0x640], rax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp - 0x30]
call fcn.14017e4e8
mov rbx, rax
lea rdi, [0x140fc81e8]
mov rdx, rdi
lea rcx, [rbp - 0x60]
call fcn.14017e418
lea rdx, str.field_1
mov rcx, rax
call fcn.14017e418
mov rcx, rax
mov rdx, rbx
call fcn.14017c364
lea rax, [rbp - 0x50]
mov qword [rbp + 0x640], rax
lea rdx, [rbp + 0x260]
lea rcx, [rbp - 0x50]
call fcn.14017e4e8
mov rbx, rax
mov rdx, rdi
lea rcx, [rbp - 0x60]
call fcn.14017e418
xor r15d, r15d
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], 7
lea r12d, [r15 + 0xf]
mov qword [rsp + 0x58], r12
mov rcx, qword [str.field_2]
mov dword [rsp + 0x40], ecx
movzx ecx, word [0x140fc8204]
mov word [rsp + 0x44], cx
mov cl, byte [0x140fc8206]
mov byte [rsp + 0x46], cl
mov byte [rsp + 0x47], r15b
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.14017f464
nop
mov rdx, rbx
mov rcx, rax
call fcn.14017c364
lea rax, [rbp + 0x30]
mov qword [rbp + 0x640], rax
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x30]
call fcn.14017e4e8
mov rbx, rax
mov rdx, rdi
lea rcx, [rbp - 0x60]
call fcn.14017e418
lea rdx, str.field_3
mov rcx, rax
call fcn.14017e418
mov rcx, rax
mov rdx, rbx
call fcn.14017c364
mov rbx, qword [0x1410a1040]
lea rdx, str.hardware_9
lea rcx, [rsp + 0x40]
call fcn.140155ce0
nop
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.14016b958
nop
lea rcx, [rsp + 0x40]
call fcn.140155bc8
lea rdx, [rbp + 0xb0]
call fcn.140177cdc
nop
mov esi, r15d
mov rax, qword [rbp + 0xb8]
mov rcx, qword [rbp + 0xb0]
sub rax, rcx
sar rax, 5
test rax, rax
je 0x14017b493
mov ebx, r15d
mov r13d, 0x7175
lea rax, [rbp - 0x30]
mov qword [rbp + 0x640], rax
mov rdx, rbx
shl rdx, 5
add rdx, rcx
lea rcx, [rbp - 0x30]
call fcn.14017e4e8
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], 2
mov qword [rbp - 0x38], r12
mov word [rbp - 0x50], r13w
mov byte [rbp - 0x4e], r15b
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x60]
call fcn.14017f464
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], r12
mov rcx, qword [str.field_4]
mov dword [rsp + 0x40], ecx
movzx ecx, word [0x140fc823c]
mov word [rsp + 0x44], cx
mov cl, byte [reloc.WS2_32.dll_gethostbyname]
mov byte [rsp + 0x46], cl
mov byte [rsp + 0x47], r15b
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.14017f464
mov rdx, rbx
mov rcx, rax
call fcn.14017c00c
nop
mov dl, byte [rax]
mov cl, byte [rdi]
mov byte [rax], cl
mov byte [rdi], dl
lea rcx, [rdi + 8]
mov rdx, qword [rax + 8]
mov rbx, qword [rcx]
mov qword [rax + 8], rbx
mov qword [rcx], rdx
mov dl, byte [rdi]
call fcn.14017d640
nop
inc esi
movsxd rbx, esi
mov rax, qword [rbp + 0xb8]
mov rcx, qword [rbp + 0xb0]
sub rax, rcx
sar rax, 5
cmp rbx, rax
jb 0x14017b3ae
mov r13, qword [rbp - 0x70]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_inet_addr]
movdqu xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [str.hardware_10]
movsd qword [rsp + 0x40], xmm0
movzx eax, word [0x140fc8230]
mov word [rsp + 0x48], ax
mov al, byte [0x140fc8232]
mov byte [rsp + 0x4a], al
mov byte [rsp + 0x4b], r15b
lea rdx, [rsp + 0x40]
mov rcx, qword [0x1410a1040]
call fcn.14016b958
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, r12
jbe 0x14017b520
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14017b51b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14017bacf
call fcn.140cd8948
lea rsi, [rbp - 0x70]
mov qword [rbp + 0x640], rsi
lea rdx, [rbp - 0x50]
call fcn.140178a58
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xor eax, eax
mov qword [rbp - 0x68], rax
mov dl, byte [rbp - 0x70]
lea rcx, [rbp - 0x68]
call fcn.14017d640
mov byte [rbp - 0x70], 3
mov ecx, 0x20
call fcn.140cd8ad8
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r15
movups xmm0, xmmword [rbx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rax + 0x10], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], r12
mov byte [rbx], r15b
lea rdi, [rsi + 8]
mov qword [rdi], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], 2
mov qword [rbp - 0x18], r12
mov eax, 0x7175
mov word [rbp - 0x30], ax
mov byte [rbp - 0x2e], r15b
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x60]
call fcn.14017f464
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], r12
mov rcx, qword [str.field_5]
mov dword [rsp + 0x40], ecx
movzx ecx, word [0x140fc8254]
mov word [rsp + 0x44], cx
mov cl, byte [reloc.WS2_32.dll_getprotobyname]
mov byte [rsp + 0x46], cl
mov byte [rsp + 0x47], r15b
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.14017f464
nop
mov r8b, byte [rax]
mov bl, byte [rsi]
mov byte [rax], bl
mov byte [rsi], r8b
mov rbx, qword [rax + 8]
mov r8, qword [rdi]
mov qword [rax + 8], r8
mov qword [rdi], rbx
mov dl, byte [rsi]
mov rcx, rdi
call fcn.14017d640
nop
mov rdx, qword [rbp - 0x38]
mov ebx, 0x1000
cmp rdx, r12
jbe 0x14017b65e
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, rbx
jb 0x14017b659
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14017bad5
call fcn.140cd8948
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov edi, reloc.WS2_32.dll_inet_addr
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], r12
movsd xmm0, qword [str.hardware_11]
movsd qword [rsp + 0x70], xmm0
movzx eax, word [0x140fc8248]
mov word [rsp + 0x78], ax
mov al, byte [0x140fc824a]
mov byte [rsp + 0x7a], al
mov byte [rsp + 0x7b], r15b
mov rax, qword [0x1410a1040]
lea rcx, [rsp + 0x70]
mov qword [rbp - 0x70], rcx
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x40], r15
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rbp - 0x50]
movaps xmmword [rbp + 0x30], xmm1
movsd xmm0, qword [rbp - 0x40]
movsd qword [rbp + 0x40], xmm0
lea r9, [rbp - 0x30]
lea r8d, [rdi - 9]
lea rdx, [rbp + 0x30]
mov rcx, qword [rax]
call fcn.140162f7c
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, r12
jbe 0x14017b723
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, rbx
jb 0x14017b71e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14017badb
call fcn.140cd8948
mov rdx, r13
lea rcx, [rbp - 0x60]
call fcn.14017c154
or r14d, 1
mov dword [rsp + 0x60], r14d
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], r12
movsd xmm0, qword [str.hardware_12]
movsd qword [rsp + 0x70], xmm0
movzx eax, word [0x140fc8260]
mov word [rsp + 0x78], ax
mov al, byte [0x140fc8262]
mov byte [rsp + 0x7a], al
mov byte [rsp + 0x7b], r15b
mov rax, qword [0x1410a1040]
lea rcx, [rsp + 0x70]
mov qword [rbp - 0x70], rcx
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x40], r15
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rbp - 0x50]
movaps xmmword [rbp + 0x30], xmm1
movsd xmm0, qword [rbp - 0x40]
movsd qword [rbp + 0x40], xmm0
lea r9, [rbp - 0x30]
mov r8d, 2
lea rdx, [rbp + 0x30]
mov rcx, qword [rax]
call fcn.140162f7c
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, r12
jbe 0x14017b7f6
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, rbx
jb 0x14017b7f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14017b868
call fcn.140cd8948
mov al, al
mov cl, cl
mov al, al
nop
lea rcx, [rbp + 0xb0]
call fcn.140172414
nop
lea rcx, [rbp - 0x10]
call fcn.14017bd84
nop
lea rcx, [rbp + 0xc8]
call fcn.14017bf84
nop
lea rcx, [rbp + 0x50]
call fcn.14017bea4
nop
mov dl, byte [rbp - 0x60]
lea rcx, [rbp - 0x58]
call fcn.14017d640
nop
lea rcx, [rbp + 0x180]
call fcn.14015e010
nop
lea rcx, [rbp + 0x1c0]
call fcn.140177a08
mov rax, r13
add rsp, 0x6f8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140cf5acc
nop
lea rdx, str.Failed_to_get_the_size_of_the_firmware.
call fcn.1401514c0
lea rdx, [0x141007ae8]
lea rcx, [rbp - 0x10]
call fcn.140cded0c
nop
lea rdx, str.Failed_to_get_the_bios_header.
lea rcx, [rbp + 0x50]
call fcn.1401514c0
lea rdx, [0x141007ae8]
lea rcx, [rbp + 0x50]
call fcn.140cded0c
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x650], eax
lea rax, str.Profile_Information:_Failed_to_open_process_token._Error_code:_
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], 0x41
lea r8, [rbp + 0x650]
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x70]
call fcn.14017e2b8
nop
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.14015e464
lea rdx, [0x141007ae8]
lea rcx, [rbp - 0x10]
call fcn.140cded0c
nop
lea rdx, str.Profile_Information:_Invalid_token
lea rcx, [rbp - 0x10]
call fcn.1401514c0
lea rdx, [0x141007ae8]
lea rcx, [rbp - 0x10]
call fcn.140cded0c
int3
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x650], eax
lea rax, str.Profile_Information:_Failed_to_get_token_information_length._Error_code:_
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], 0x4b
lea r8, [rbp + 0x650]
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x70]
call fcn.14017e2b8
nop
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.14015e464
lea rdx, [0x141007ae8]
lea rcx, [rbp - 0x10]
call fcn.140cded0c
nop
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.Profile_Information:_Failed_to_allocate_memory_for_token_user
lea rcx, [rbp - 0x10]
call fcn.1401514c0
lea rdx, [0x141007ae8]
lea rcx, [rbp - 0x10]
call fcn.140cded0c
int3
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x650], eax
lea rax, str.Profile_Information:_Failed_to_get_token_information._Error_code:_
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], 0x44
lea r8, [rbp + 0x650]
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x70]
call fcn.14017e2b8
nop
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.14015e464
lea rdx, [0x141007ae8]
lea rcx, [rbp - 0x10]
call fcn.140cded0c
nop
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x650], eax
lea rax, str.Profile_Information:_Failed_to_convert_SID_to_string._Error_code:_
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], 0x44
lea r8, [rbp + 0x650]
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x70]
call fcn.14017e2b8
nop
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.14015e464
lea rdx, [0x141007ae8]
lea rcx, [rbp - 0x10]
call fcn.140cded0c
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x650], eax
lea rax, str.Profile_Information:_Failed_to_get_username._Error_code:_
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], 0x3b
lea r8, [rbp + 0x650]
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x70]
call fcn.14017e2b8
nop
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.14015e464
lea rdx, [0x141007ae8]
lea rcx, [rbp - 0x10]
call fcn.140cded0c
nop
call fcn.140cf5acc
int3
call fcn.140cf5acc
int3
call fcn.140cf5acc
int3