Function at 0x1800045f0
Capabilities:
Get hostname
Get system information on windows
Log keystrokes via polling
Query or enumerate registry value

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x348]
sub rsp, 0x410
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
movaps xmmword [rax - 0xb8], xmm13
mov rax, qword [0x180053028]
xor rax, rsp
mov qword [rbp + 0x280], rax
mov r13, r8
mov r15, rdx
mov r12, rcx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x48], r8
xor edi, edi
mov dword [rsp + 0x30], edi
mov dword [rbp - 0x60], 0x1a8
mov ebx, edi
xor r9d, r9d
lea r8, [rbp - 0x60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_EnumDisplayDevicesA]
mov esi, 0x9c
test eax, eax
je 0x180004792
nop dword [rax + rax]
lea rcx, str.Display_Device:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800046c1
lea rdx, [rbp - 0x5c]
lea rcx, str.Display_Device:__s_n
call fcn.180001120
lea rcx, str.Display_Device_String:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800046e2
lea rdx, [rbp - 0x3c]
lea rcx, str.Display_Device_String:__s_n
call fcn.180001120
mov word [rbp + 0x1a4], si
lea r8, [rbp + 0x180]
mov edx, 0xffffffff
lea rcx, [rbp - 0x5c]
call qword [sym.imp.USER32.dll_EnumDisplaySettingsA]
test eax, eax
je 0x180004757
lea rcx, str.Display_Settings:__d_x__d___d_bit_color_depth_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004734
mov r9d, dword [rbp + 0x1e8]
mov r8d, dword [rbp + 0x1f0]
mov edx, dword [rbp + 0x1ec]
lea rcx, str.Display_Settings:__d_x__d___d_bit_color_depth_n
call fcn.180001120
lea rcx, str.Display_Refresh_Rate:__d_Hz_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004757
mov edx, dword [rbp + 0x1f8]
lea rcx, str.Display_Refresh_Rate:__d_Hz_n
call fcn.180001120
lea rcx, str.Display_Device_State:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004777
mov edx, dword [rbp + 0x44]
lea rcx, str.Display_Device_State:__d_n
call fcn.180001120
inc ebx
xor r9d, r9d
lea r8, [rbp - 0x60]
mov edx, ebx
xor ecx, ecx
call qword [sym.imp.USER32.dll_EnumDisplayDevicesA]
test eax, eax
jne 0x1800046a0
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
call fcn.180014bf0
movzx ecx, word [rsp + 0x60]
test ecx, ecx
je 0x180004822
sub ecx, 5
je 0x180004808
sub ecx, 1
je 0x1800047ee
cmp ecx, 3
je 0x1800047d4
lea rcx, str.Unknown_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000483f
lea rcx, str.Unknown_n
jmp 0x18000483a
lea rcx, str.x64_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000483f
lea rcx, str.x64_n
jmp 0x18000483a
lea rcx, str.IA64_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000483f
lea rcx, str.IA64_n
jmp 0x18000483a
lea rcx, str.ARM_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000483f
lea rcx, str.ARM_n
jmp 0x18000483a
lea rcx, str.x86_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000483f
lea rcx, str.x86_n
call fcn.180001120
lea rcx, str.Number_of_Processors:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000485f
mov edx, dword [rbp - 0x80]
lea rcx, str.Number_of_Processors:__d_n
call fcn.180001120
lea rcx, str.Processor_Type:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000487f
mov edx, dword [rbp - 0x7c]
lea rcx, str.Processor_Type:__d_n
call fcn.180001120
lea rcx, str.Processor_Level:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800048a0
movzx edx, word [rbp - 0x74]
lea rcx, str.Processor_Level:__d_n
call fcn.180001120
lea rcx, str.Processor_Revision:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800048c1
movzx edx, word [rbp - 0x72]
lea rcx, str.Processor_Revision:__d_n
call fcn.180001120
lea rcx, str.Short_integer:__hd_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800048e3
mov edx, 0x7fff
lea rcx, str.Short_integer:__hd_n
call fcn.180001120
xorps xmm0, xmm0
movups xmmword [r12], xmm0
mov qword [r12], rdi
mov qword [r12 + 8], rdi
mov qword [r12 + 0x10], rdi
mov dword [rsp + 0x30], 1
mov ebx, 0x64
nop word [rax + rax]
mov eax, 0x51eb851f
mul ebx
mov r9d, edx
shr r9d, 5
mov eax, 0xcccccccd
mul ebx
mov ecx, edx
shr ecx, 3
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
add eax, eax
mov edx, ecx
sub edx, eax
lea eax, [rcx + rcx*4]
add eax, eax
mov ecx, ebx
sub ecx, eax
mov r8d, ecx
imul r8d, ecx
imul r8d, ecx
mov eax, edx
imul eax, edx
imul eax, edx
add r8d, eax
mov eax, r9d
imul eax, r9d
imul eax, r9d
add r8d, eax
cmp ebx, r8d
jne 0x180004995
lea rcx, str.Narcissistic_Number:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004995
mov edx, ebx
lea rcx, str.Narcissistic_Number:__d_n
call fcn.180001120
inc ebx
cmp ebx, 0x3e8
jl 0x180004910
lea rcx, str.Octal_integer:__o_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800049c5
mov edx, 0x53
lea rcx, str.Octal_integer:__o_n
call fcn.180001120
lea rcx, str._c_is_an_uppercase_letter._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800049e7
mov edx, 0x48
lea rcx, str._c_is_an_uppercase_letter._n
call fcn.180001120
mov r14, rdi
lea rcx, str.Square_root_of__.2f:__.2f_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004a41
xorps xmm0, xmm0
movss xmm1, dword [0x18004d288]
ucomiss xmm0, xmm1
ja 0x180004a14
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x180004a1c
movaps xmm0, xmm1
call fcn.18003af10
xorps xmm2, xmm2
cvtss2sd xmm2, xmm0
movq r8, xmm2
movsd xmm1, qword [0x18004d280]
movq rdx, xmm1
lea rcx, str.Square_root_of__.2f:__.2f_n
call fcn.180001120
mov edi, 1
nop word [rax + rax]
mov ebx, 1
mov esi, edi
nop word [rax + rax]
lea rcx, str._d___d___d
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004a85
mov r9d, esi
mov r8d, edi
mov edx, ebx
lea rcx, str._d___d___d
call fcn.180001120
inc ebx
add esi, edi
cmp ebx, edi
jle 0x180004a60
lea rcx, [0x18004bd68]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004aaa
lea rcx, [0x18004bd68]
call fcn.180001120
inc edi
cmp edi, 9
jle 0x180004a50
movdqa xmm0, xmmword [0x18004d2a0]
movdqu xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [0x18004d2b0]
movdqu xmmword [rsp + 0x70], xmm1
mov dword [rbp - 0x80], 9
lea rcx, str.Array_elements:_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004af1
lea rcx, str.Array_elements:_n
call fcn.180001120
xor esi, esi
mov edi, esi
nop word [rax + rax]
mov rbx, rsi
lea rcx, [0x18004c408]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004b28
lea rax, [rbx + rdi]
mov edx, dword [rsp + rax*4 + 0x60]
lea rcx, [0x18004c408]
call fcn.180001120
inc rbx
cmp rbx, 3
jl 0x180004b03
lea rcx, [0x18004bd68]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004b4e
lea rcx, [0x18004bd68]
call fcn.180001120
add rdi, 3
cmp rdi, 9
jl 0x180004b00
xor r8d, r8d
mov rdx, r13
mov rcx, r15
call fcn.1800145c0
mov rbx, rax
lea rcx, str.Character:__c_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004b8b
mov edx, 0x5a
lea rcx, str.Character:__c_n
call fcn.180001120
xor ecx, ecx
call fcn.180020884
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x58]
call fcn.180020be0
mov r9, rax
lea r8, str._Y__m__d__H:_M:_S
mov edx, 0x14
lea rcx, [rbp + 0x150]
call fcn.18001e084
lea rcx, str.Current_Time_3:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004be0
lea rdx, [rbp + 0x150]
lea rcx, str.Current_Time_3:__s_n
call fcn.180001120
movsd xmm6, qword [0x18004d208]
movaps xmm0, xmm6
call fcn.18003a8d0
movaps xmm8, xmm0
lea rcx, str.The_sine_value_of__lf_radians_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004c22
movaps xmm2, xmm8
movq r8, xmm2
movaps xmm1, xmm6
movq rdx, xmm6
lea rcx, str.The_sine_value_of__lf_radians_is:__lf_n
call fcn.180001120
movsd xmm7, qword [0x18004d210]
movsd xmm6, qword [0x18004d228]
mov edi, dword [rsp + 0x30]
cmp rbx, 0xffffffffffffffff
je 0x180005171
movsd xmm9, qword [0x18004d240]
movsd xmm10, qword [0x18004d268]
movsd xmm11, qword [0x18004d248]
movsd xmm12, qword [0x18004d220]
movsd xmm13, qword [0x18004d238]
nop dword [rax]
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
mov rax, qword [r15 + 0x10]
cmp rax, r14
jb 0x180005660
mov r8, rbx
sub r8, r14
sub rax, r14
cmp rax, r8
cmovb r8, rax
mov rax, r15
cmp qword [r15 + 0x18], 0x10
jb 0x180004cb2
mov rax, qword [r15]
lea rdx, [rax + r14]
lea rcx, [rsp + 0x60]
call fcn.1800149b0
or edi, 2
mov dword [rsp + 0x30], edi
mov rdx, qword [r12 + 8]
cmp rdx, qword [r12 + 0x10]
je 0x180004cf6
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsp + 0x70]
movups xmmword [rdx + 0x10], xmm1
mov eax, reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
add qword [r12 + 8], 0x20
jmp 0x180004d08
lea r8, [rsp + 0x60]
mov rcx, r12
call fcn.180014f20
mov rax, qword [rsp + 0x78]
cmp rax, 0x10
jb 0x180004d41
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004d3c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005666
call fcn.180018cc0
lea rcx, str.Difference_of__d_and__d_is:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004d6c
mov edx, 0x1e
mov r9d, reloc.WS2_32.dll_ntohs
mov r8d, r9d
lea rcx, str.Difference_of__d_and__d_is:__d_n
call fcn.180001120
lea rcx, str.The_value_of_pi_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004d92
movaps xmm1, xmm9
movq rdx, xmm1
lea rcx, str.The_value_of_pi_is:__lf_n
call fcn.180001120
lea rcx, str.Current_time:_07:38:26_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004daf
lea rcx, str.Current_time:_07:38:26_n
call fcn.180001120
lea rcx, str.Current_time:_07:38:26_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004dcc
lea rcx, str.Current_time:_07:38:26_n
call fcn.180001120
lea rcx, str.Key_State:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004e0b
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
lea rdx, str.Released
lea rax, str.Pressed
cmovb rdx, rax
lea rcx, str.Key_State:__s_n
call fcn.180001120
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov ecx, eax
cmp eax, 0x80000000
jae 0x180004e3a
shr eax, 8
movzx r9d, al
movzx r8d, cl
lea rdx, str.Windows_NT__d._d
lea rcx, [rbp + 0x180]
call fcn.180001180
jmp 0x180004e6a
jne 0x180004e59
movups xmm0, xmmword [str.Windows_95_98_Me]
movaps xmmword [rbp + 0x180], xmm0
movzx eax, byte [0x18004c968]
mov byte [rbp + 0x190], al
jmp 0x180004e6a
movabs rax, 0x6e776f6e6b6e55
mov qword [rbp + 0x180], rax
lea rcx, str.Operating_System_Name:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004e8e
lea rdx, [rbp + 0x180]
lea rcx, str.Operating_System_Name:__s_n
call fcn.180001120
mov r14, qword [r13 + 0x10]
add r14, rbx
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersion
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180004f3f
mov dword [rbp - 0x70], 0x14
lea rax, [rbp - 0x70]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x6c]
xor r8d, r8d
lea rdx, str.InstallDate
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x180004f26
lea rcx, str.Operating_System_Install_Date:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004f32
lea rdx, [rsp + 0x60]
lea rcx, str.Operating_System_Install_Date:__s_n
call fcn.180001120
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x180004f4b
lea rcx, str.Error_getting_OS_install_date
call fcn.18001db60
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x180004f4b
lea rcx, str.Error_opening_registry_key
call fcn.18001db60
mov dword [rsp + 0x50], 0x10
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x168]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
je 0x180004f8f
lea rcx, str.Computer_Name:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004fac
lea rdx, [rbp + 0x168]
lea rcx, str.Computer_Name:__s_n
call fcn.180001120
jmp 0x180004fac
lea rcx, str.Failed_to_get_computer_name__n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004fac
lea rcx, str.Failed_to_get_computer_name__n
call fcn.180001120
mov dword [rsp + 0x50], 0x10
lea r8, [rsp + 0x50]
lea rdx, [rbp + 0x150]
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_GetComputerNameExA]
test eax, eax
je 0x180004ff5
lea rcx, str.Domain_Name:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180005012
lea rdx, [rbp + 0x150]
lea rcx, str.Domain_Name:__s_n
call fcn.180001120
jmp 0x180005012
lea rcx, str.Failed_to_get_domain_name__n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180005012
lea rcx, str.Failed_to_get_domain_name__n
call fcn.180001120
lea rcx, str.Product_of__.2f_and__.2f_is__.2f_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000504a
movaps xmm3, xmm10
movq r9, xmm3
movaps xmm2, xmm11
movq r8, xmm2
movaps xmm1, xmm12
movq rdx, xmm1
lea rcx, str.Product_of__.2f_and__.2f_is__.2f_n
call fcn.180001120
lea rcx, str._d_is_a_leap_year._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000506c
mov edx, 0x7e4
lea rcx, str._d_is_a_leap_year._n
call fcn.180001120
lea rcx, str.The_volume_of_the_cylinder_with_radius__lf_and_height__lf_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800050a2
movaps xmm3, xmm13
movq r9, xmm3
movaps xmm2, xmm7
movq r8, xmm7
movaps xmm1, xmm7
movq rdx, xmm7
lea rcx, str.The_volume_of_the_cylinder_with_radius__lf_and_height__lf_is:__lf_n
call fcn.180001120
lea rcx, str.Mouse_Button_State:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800050e1
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
lea rdx, str.Released
lea rax, str.Pressed
cmovb rdx, rax
lea rcx, str.Mouse_Button_State:__s_n
call fcn.180001120
mov r8, r14
mov rdx, r13
mov rcx, r15
call fcn.1800145c0
mov rbx, rax
lea rcx, str.Sine_Value:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180005118
movaps xmm1, xmm8
movq rdx, xmm1
lea rcx, str.Sine_Value:__lf_n
call fcn.180001120
lea rcx, str.Product_of__d_and__d_is:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180005142
mov edx, 5
lea r9d, [rdx + 0x19]
lea r8d, [rdx + 1]
lea rcx, str.Product_of__d_and__d_is:__d_n
call fcn.180001120
lea rcx, str.Array_average:__.2f_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180005167
movaps xmm1, xmm6
movq rdx, xmm6
lea rcx, str.Array_average:__.2f_n
call fcn.180001120
cmp rbx, 0xffffffffffffffff
jne 0x180004c70
lea rcx, str.The_surface_area_of_the_cuboid_with_length__lf__width__lf__and_height__lf_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800051b4
movsd xmm0, qword [0x18004d260]
movsd qword [rsp + 0x20], xmm0
movaps xmm3, xmm7
movq r9, xmm7
movaps xmm2, xmm7
movq r8, xmm7
movaps xmm1, xmm7
movq rdx, xmm7
lea rcx, str.The_surface_area_of_the_cuboid_with_length__lf__width__lf__and_height__lf_is:__lf_n
call fcn.180001120
xorps xmm0, xmm0
ucomisd xmm0, xmm6
ja 0x1800051c3
sqrtsd xmm6, xmm6
jmp 0x1800051ce
movaps xmm0, xmm6
call fcn.18003ae3c
movaps xmm6, xmm0
mulsd xmm6, qword [0x18004d200]
lea rcx, str.The_height_of_the_equilateral_triangle_with_side__lf_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180005203
movaps xmm2, xmm6
movq r8, xmm6
movaps xmm1, xmm7
movq rdx, xmm7
lea rcx, str.The_height_of_the_equilateral_triangle_with_side__lf_is:__lf_n
call fcn.180001120
mov dword [rbp - 0x60], 0x1a8
mov ebx, esi
xor r9d, r9d
lea r8, [rbp - 0x60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_EnumDisplayDevicesA]
test eax, eax
je 0x180005324
mov esi, 0x9c
nop word [rax + rax]
lea rcx, str.Display_Device:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180005251
lea rdx, [rbp - 0x5c]
lea rcx, str.Display_Device:__s_n
call fcn.180001120
lea rcx, str.Display_Device_String:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180005272
lea rdx, [rbp - 0x3c]
lea rcx, str.Display_Device_String:__s_n
call fcn.180001120
mov word [rbp + 0x1a4], si
lea r8, [rbp + 0x180]
mov edx, 0xffffffff
lea rcx, [rbp - 0x5c]
call qword [sym.imp.USER32.dll_EnumDisplaySettingsA]
test eax, eax
je 0x1800052e7
lea rcx, str.Display_Settings:__d_x__d___d_bit_color_depth_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800052c4
mov r9d, dword [rbp + 0x1e8]
mov r8d, dword [rbp + 0x1f0]
mov edx, dword [rbp + 0x1ec]
lea rcx, str.Display_Settings:__d_x__d___d_bit_color_depth_n
call fcn.180001120
lea rcx, str.Display_Refresh_Rate:__d_Hz_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800052e7
mov edx, dword [rbp + 0x1f8]
lea rcx, str.Display_Refresh_Rate:__d_Hz_n
call fcn.180001120
lea rcx, str.Display_Device_State:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180005307
mov edx, dword [rbp + 0x44]
lea rcx, str.Display_Device_State:__d_n
call fcn.180001120
inc ebx
xor r9d, r9d
lea r8, [rbp - 0x60]
mov edx, ebx
xor ecx, ecx
call qword [sym.imp.USER32.dll_EnumDisplayDevicesA]
test eax, eax
jne 0x180005230
xor esi, esi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
mov rax, qword [r15 + 0x10]
cmp rax, r14
jb 0x180005660
sub rax, r14
mov r8, 0xffffffffffffffff
cmp rax, r8
cmovb r8, rax
mov rax, r15
cmp qword [r15 + 0x18], 0x10
jb 0x180005367
mov rax, qword [r15]
lea rdx, [rax + r14]
lea rcx, [rsp + 0x60]
call fcn.1800149b0
or edi, 4
mov dword [rsp + 0x30], edi
mov rdx, qword [r12 + 8]
cmp rdx, qword [r12 + 0x10]
je 0x1800053ab
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsp + 0x70]
movups xmmword [rdx + 0x10], xmm1
mov edx, reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
add qword [r12 + 8], 0x20
jmp 0x1800053bd
lea r8, [rsp + 0x60]
mov rcx, r12
call fcn.180014f20
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x1800053f5
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800053f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005666
call fcn.180018cc0
lea rcx, str.Short_integer:__hd_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180005417
mov edx, 0x7fff
lea rcx, str.Short_integer:__hd_n
call fcn.180001120
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rbx, rax
movabs rax, 0x8daea1d7f4cf721b
mul rbx
mov rsi, rbx
sub rsi, rdx
shr rsi, 1
add rsi, rdx
shr rsi, 0x1a
imul rax, rsi, 0x5265c00
mov rcx, rbx
sub rcx, rax
movabs r8, 0x4a90be587de6e565
mov rax, r8
mul rcx
mov r14, rdx
shr r14, 0x14
mov rax, r8
mul rbx
shr rdx, 0x14
imul rax, rdx, 0x36ee80
mov rdi, rbx
sub rdi, rax
movabs rcx, 0x179ec9cbd821dc3b
mov rax, rcx
mul rdi
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 0xf
mov rax, rcx
mul rbx
mov rax, rbx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 0xf
imul rax, rax, 0xea60
sub rbx, rax
movabs rax, 0x624dd2f1a9fbe77
mul rbx
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 9
lea rcx, str.System_Uptime:__d_days___d_hours___d_minutes___d_seconds_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800054f8
mov dword [rsp + 0x20], ebx
mov r9d, edi
mov r8d, r14d
mov edx, esi
lea rcx, str.System_Uptime:__d_days___d_hours___d_minutes___d_seconds_n
call fcn.180001120
xor edi, edi
mov ebx, edi
mov dword [rsp + 0x58], 8
lea rcx, [rsp + 0x58]
call qword [sym.imp.USER32.dll_GetLastInputInfo]
test eax, eax
je 0x18000552b
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, dword [rsp + 0x5c]
mov eax, 0x10624dd3
mul ecx
mov ebx, edx
shr ebx, 6
lea rcx, str.Idle_Time:__d_seconds_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000554a
mov edx, ebx
lea rcx, str.Idle_Time:__d_seconds_n
call fcn.180001120
lea rcx, str.Integer:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000556d
mov edx, 0x3039
lea rcx, str.Integer:__d_n
call fcn.180001120
nop
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x1800055a7
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x1800055a2
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180005654
mov rcx, r8
call fcn.180018cc0
mov qword [r15 + 0x10], rdi
mov qword [r15 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r15], 0
mov rdx, qword [r13 + 0x18]
cmp rdx, 0x10
jb 0x1800055ee
inc rdx
mov rcx, qword [r13]
cmp rdx, 0x1000
jb 0x1800055e9
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18000565a
mov rcx, r8
call fcn.180018cc0
mov qword [r13 + 0x10], rdi
mov qword [r13 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r13], 0
mov rax, r12
mov rcx, qword [rbp + 0x280]
xor rcx, rsp
call fcn.180018ca0
lea r11, [rsp + 0x410]
mov rbx, qword [r11 + 0x58]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18001e488
nop
call fcn.18001e488
nop
call fcn.180014b90
int3
call fcn.18001e488
int3