Function at 0x1800030c0
Capabilities:
Connect to wmi namespace via wbemlocator
Reference wmi statements

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xb58]
sub rsp, 0xc20
mov qword [rbp + 0x48], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
movaps xmmword [rax - 0x48], xmm6
mov rax, qword [0x1803b0b00]
xor rax, rsp
mov qword [rbp + 0xb00], rax
mov r12, rdx
mov r13, rcx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
js 0x180003298
xor r14d, r14d
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x38], r14d
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
or edx, 0xffffffff
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
test eax, eax
jns 0x180003152
cmp eax, 0x80010119
jne 0x180003292
mov qword [rsp + 0x78], r14
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
lea r9, [0x180315c20]
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [0x180315cf0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x180003292
mov qword [rsp + 0x70], r14
mov ecx, 0x18
call fcn.18000c5b8
mov rdi, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x1800031ca
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, str.ROOTCIMV2
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
jne 0x1800031cd
mov ecx, 0x8007000e
call fcn.18018a480
int3
mov rdi, r14
mov qword [rbp + 0x58], rdi
test rdi, rdi
jne 0x1800031e1
mov ecx, 0x8007000e
call fcn.18018a480
nop
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
lea rdx, [rsp + 0x70]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rdi]
call qword [rax + 0x18]
mov ebx, eax
or ecx, 0xffffffff
lock xadd dword [rdi + 0x10], ecx
dec ecx
jne 0x180003245
mov rcx, qword [rdi]
test rcx, rcx
je 0x18000322f
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x18000323d
call fcn.18000c5fc
mov rcx, rdi
call fcn.18000c5fc
test ebx, ebx
js 0x180003287
mov dword [rsp + 0x38], r14d
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0xa]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x18000329f
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
xor al, al
jmp 0x180003ed5
mov qword [rsp + 0x50], r14
mov dword [rsp + 0x58], r14d
mov ecx, 0x18
call fcn.18000c5b8
mov rdi, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x1800032dc
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_ComputerSystem
call fcn.18018a490
mov qword [rdi], rax
jmp 0x1800032df
mov rdi, r14
mov qword [rbp + 0x50], rdi
test rdi, rdi
jne 0x1800032f3
mov ecx, 0x8007000e
call fcn.18018a480
nop
mov ecx, 0x18
call fcn.18000c5b8
mov rbx, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x180003326
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, [0x1803646d4]
call fcn.18018a490
mov qword [rbx], rax
jmp 0x180003329
mov rbx, r14
mov qword [rbp + 0x60], rbx
test rbx, rbx
jne 0x18000333d
mov ecx, 0x8007000e
call fcn.18018a480
nop
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], r14
mov r9d, gethostbyname
mov r8, qword [rdi]
mov rdx, qword [rbx]
call qword [rax + 0xa0]
mov esi, eax
or ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
dec ecx
jne 0x180003399
mov rcx, qword [rbx]
test rcx, rcx
je 0x180003382
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x180003390
call fcn.18000c5fc
mov rcx, rbx
call fcn.18000c5fc
nop
or eax, 0xffffffff
lock xadd dword [rdi + 0x10], eax
dec eax
jne 0x1800033c9
mov rcx, qword [rdi]
test rcx, rcx
je 0x1800033b3
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1800033c1
call fcn.18000c5fc
mov rcx, rdi
call fcn.18000c5fc
test esi, esi
js 0x18000327c
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x1800034b9
nop
mov rax, qword [rcx]
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x60]
mov r8d, 1
or edx, 0xffffffff
call qword [rax + 0x20]
cmp dword [rsp + 0x58], 0
je 0x1800034b4
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rbp - 0x68]
xor r8d, r8d
lea rdx, [0x1803646d8]
call qword [rax + 0x20]
mov r8, qword [rbp - 0x60]
mov edx, 0x104
mov rcx, r12
call fcn.180148040
lea r8, [0x1803646f4]
mov edx, 0x104
mov rcx, r12
call fcn.1801480ac
lea rcx, [rbp - 0x68]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rbp - 0x68]
xor r8d, r8d
lea rdx, [0x1803646f8]
call qword [rax + 0x20]
mov r8, qword [rbp - 0x60]
mov edx, 0x104
mov rcx, r12
call fcn.1801480ac
lea rcx, [rbp - 0x68]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsp + 0x50]
test rcx, rcx
jne 0x1800033e0
jmp 0x1800034b9
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rsp + 0x50], r14
mov ecx, 0x18
call fcn.18000c5b8
mov rdi, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x1800034f7
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_OperatingSystem
call fcn.18018a490
mov qword [rdi], rax
jmp 0x1800034fa
mov rdi, r14
mov qword [rbp + 0x70], rdi
test rdi, rdi
jne 0x18000350e
mov ecx, 0x8007000e
call fcn.18018a480
nop
mov ecx, 0x18
call fcn.18000c5b8
mov rbx, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x180003541
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, [0x1803646d4]
call fcn.18018a490
mov qword [rbx], rax
jmp 0x180003544
mov rbx, r14
mov qword [rbp + 0x30], rbx
test rbx, rbx
jne 0x180003558
mov ecx, 0x8007000e
call fcn.18018a480
nop
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], r14
mov r9d, gethostbyname
mov r8, qword [rdi]
mov rdx, qword [rbx]
call qword [rax + 0xa0]
mov esi, eax
or ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
dec ecx
jne 0x1800035b4
mov rcx, qword [rbx]
test rcx, rcx
je 0x18000359d
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1800035ab
call fcn.18000c5fc
mov rcx, rbx
call fcn.18000c5fc
nop
or eax, 0xffffffff
lock xadd dword [rdi + 0x10], eax
dec eax
jne 0x1800035e4
mov rcx, qword [rdi]
test rcx, rcx
je 0x1800035ce
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1800035dc
call fcn.18000c5fc
mov rcx, rdi
call fcn.18000c5fc
test esi, esi
js 0x18000327c
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x18000373a
nop word [rax + rax]
mov rax, qword [rcx]
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x60]
mov r8d, 1
or edx, 0xffffffff
call qword [rax + 0x20]
cmp dword [rsp + 0x58], 0
je 0x180003735
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rbp - 0x80]
xor r8d, r8d
lea rdx, str.Caption
call qword [rax + 0x20]
mov r8, qword [rbp - 0x78]
mov edx, 0x104
lea rcx, [r12 + 0x208]
call fcn.180148040
lea r8, str.__Build
mov edx, 0x104
lea rcx, [r12 + 0x208]
call fcn.1801480ac
lea rcx, [rbp - 0x80]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rbp - 0x80]
xor r8d, r8d
lea rdx, str.BuildNumber
call qword [rax + 0x20]
mov r8, qword [rbp - 0x78]
mov edx, 0x104
lea rcx, [r12 + 0x208]
call fcn.1801480ac
lea r8, [0x180364770]
mov edx, 0x104
lea rcx, [r12 + 0x208]
call fcn.1801480ac
lea rcx, [rbp - 0x80]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rbp - 0x80]
xor r8d, r8d
lea rdx, str.OSArchitecture
call qword [rax + 0x20]
mov r8, qword [rbp - 0x78]
mov edx, 0x104
lea rcx, [r12 + 0x208]
call fcn.1801480ac
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsp + 0x50]
test rcx, rcx
jne 0x180003600
jmp 0x18000373a
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rsp + 0x50], r14
mov ecx, 0x18
call fcn.18000c5b8
mov rdi, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x180003778
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_DiskDrive
call fcn.18018a490
mov qword [rdi], rax
jmp 0x18000377b
mov rdi, r14
mov qword [rbp + 0x38], rdi
test rdi, rdi
jne 0x18000378f
mov ecx, 0x8007000e
call fcn.18018a480
nop
mov ecx, 0x18
call fcn.18000c5b8
mov rbx, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x1800037c2
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, [0x1803646d4]
call fcn.18018a490
mov qword [rbx], rax
jmp 0x1800037c5
mov rbx, r14
mov qword [rbp + 0x28], rbx
test rbx, rbx
jne 0x1800037d9
mov ecx, 0x8007000e
call fcn.18018a480
nop
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], r14
mov r9d, gethostbyname
mov r8, qword [rdi]
mov rdx, qword [rbx]
call qword [rax + 0xa0]
mov esi, eax
or ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
dec ecx
jne 0x180003835
mov rcx, qword [rbx]
test rcx, rcx
je 0x18000381e
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x18000382c
call fcn.18000c5fc
mov rcx, rbx
call fcn.18000c5fc
nop
or eax, 0xffffffff
lock xadd dword [rdi + 0x10], eax
dec eax
jne 0x180003865
mov rcx, qword [rdi]
test rcx, rcx
je 0x18000384f
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x18000385d
call fcn.18000c5fc
mov rcx, rdi
call fcn.18000c5fc
test esi, esi
js 0x18000327c
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x180003cae
movabs r15, 0xfc0fc0fc0fc0fc1
movsd xmm6, qword [0x180365dc8]
nop dword [rax]
mov rax, qword [rcx]
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x60]
mov r8d, 1
or edx, 0xffffffff
call qword [rax + 0x20]
cmp dword [rsp + 0x58], 0
je 0x180003ca9
mov word [rbp + 0x300], r14w
xor edx, edx
mov r8d, 0x7fe
lea rcx, [rbp + 0x302]
call fcn.18014af80
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rbp - 0x38]
xor r8d, r8d
lea rdx, [0x1803647b8]
call qword [rax + 0x20]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rbp - 0x20]
xor r8d, r8d
lea rdx, str.Caption
call qword [rax + 0x20]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rbp - 0x50]
xor r8d, r8d
lea rdx, str.SerialNumber
call qword [rax + 0x20]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x10]
xor r8d, r8d
lea rdx, str.InterfaceType
call qword [rax + 0x20]
mov rbx, qword [rbp - 0x48]
xor eax, eax
or rcx, 0xffffffffffffffff
mov r9, qword [rbp + 0x18]
mov rdi, r9
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [0x180364808]
mov rcx, r9
call fcn.180148134
test eax, eax
je 0x180003b52
mov rcx, qword [rbp - 0x30]
call fcn.180148300
pxor xmm3, xmm3
cvtsi2sd xmm3, rax
mulsd xmm3, xmm6
mulsd xmm3, xmm6
mulsd xmm3, xmm6
movq r9, xmm3
mov r8, qword [rbp - 0x18]
lea rdx, str._s__0.2f_GB_
lea rcx, [rbp + 0xf0]
call fcn.180008160
movzx edx, word [rbp - 0x50]
test dx, dx
je 0x180003a42
cmp dx, 1
je 0x180003a42
test rbx, rbx
je 0x180003a42
cmp ebx, 0xcccccccc
je 0x180003a42
mov rcx, rbx
call fcn.180002f10
lea r8, [0x180364830]
mov edx, 0x104
lea rcx, [rbp + 0xf0]
call fcn.1801480ac
cmp word [rbx], 0x20
jne 0x180003a1a
nop
add rbx, 2
cmp word [rbx], 0x20
je 0x180003a10
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
dec rcx
je 0x180003a42
mov r8, rbx
mov edx, 0x104
lea rcx, [rbp + 0xf0]
call fcn.1801480ac
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0xa0]
call fcn.180001310
nop
cmp qword [rax + 0x18], 0x10
jb 0x180003a60
mov rax, qword [rax]
mov r8, rax
mov rdx, qword [rbp + 0x18]
lea rcx, [0x180364848]
call fcn.18000b040
nop
cmp qword [rbp + 0xb8], 0x10
jb 0x180003a8a
mov rcx, qword [rbp + 0xa0]
call fcn.18000c5fc
mov r8, qword [r12 + 0x418]
lea rax, [rbp + 0xf0]
cmp rax, r8
jae 0x180003b0b
mov rax, qword [r12 + 0x410]
lea rcx, [rbp + 0xf0]
cmp rax, rcx
ja 0x180003b0b
lea rcx, [rbp + 0xf0]
sub rcx, rax
mov rax, r15
imul rcx
mov rbx, rdx
sar rbx, 5
mov rax, rbx
shr rax, 0x3f
add rbx, rax
cmp r8, qword [r12 + 0x420]
jne 0x180003aea
lea rcx, [r12 + 0x410]
call fcn.180005ce0
imul rbx, rbx, 0x208
add rbx, qword [r12 + 0x410]
mov rcx, qword [r12 + 0x418]
test rcx, rcx
je 0x180003b41
mov rdx, rbx
jmp 0x180003b36
cmp r8, qword [r12 + 0x420]
jne 0x180003b22
lea rcx, [r12 + 0x410]
call fcn.180005ce0
mov rcx, qword [r12 + 0x418]
test rcx, rcx
je 0x180003b41
lea rdx, [rbp + 0xf0]
mov r8d, 0x208
call fcn.180147850
add qword [r12 + 0x418], 0x208
jmp 0x180003c66
mov r9d, 6
xor r8d, r8d
lea rdx, [0x180364854]
lea rcx, [r13 + 0x518]
call fcn.180005bf0
cmp rax, 0xffffffffffffffff
jne 0x180003c66
lea rcx, [0x180364860]
call fcn.18000b040
mov rcx, qword [rbp - 0x30]
call fcn.180148300
pxor xmm3, xmm3
cvtsi2sd xmm3, rax
mulsd xmm3, xmm6
mulsd xmm3, xmm6
mulsd xmm3, xmm6
movq r9, xmm3
mov r8, qword [rbp - 0x18]
lea rdx, str._s__0.2f_GB_
lea rcx, [rbp + 0x300]
call fcn.180008160
movzx edx, word [rbp - 0x50]
test dx, dx
je 0x180003c32
cmp dx, 1
je 0x180003c32
test rbx, rbx
je 0x180003c32
cmp ebx, 0xcccccccc
je 0x180003c32
mov rcx, rbx
call fcn.180002f10
lea r8, [0x180364830]
mov edx, 0x104
lea rcx, [rbp + 0x300]
call fcn.1801480ac
cmp word [rbx], 0x20
jne 0x180003c0a
add rbx, 2
cmp word [rbx], 0x20
je 0x180003c00
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
dec rcx
je 0x180003c32
mov r8, rbx
mov edx, 0x104
lea rcx, [rbp + 0x300]
call fcn.1801480ac
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0x78]
call fcn.180001310
nop
mov rdx, rax
lea rcx, [r13 + 0x518]
call fcn.1800087f0
nop
cmp qword [rbp + 0x90], 0x10
jb 0x180003c66
mov rcx, qword [rbp + 0x78]
call fcn.18000c5fc
lea rcx, [rbp - 0x38]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
lea rcx, [rbp - 0x20]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
lea rcx, [rbp - 0x50]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
lea rcx, [rbp + 0x10]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsp + 0x50]
test rcx, rcx
jne 0x180003890
jmp 0x180003cae
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rsp + 0x50], r14
mov ecx, 0x18
call fcn.18000c5b8
mov rdi, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x180003cec
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_NetworkAdapterConfiguration
call fcn.18018a490
mov qword [rdi], rax
jmp 0x180003cef
mov rdi, r14
mov qword [rbp + 0x68], rdi
test rdi, rdi
jne 0x180003d03
mov ecx, 0x8007000e
call fcn.18018a480
nop
mov ecx, 0x18
call fcn.18000c5b8
mov rbx, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x180003d36
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, [0x1803646d4]
call fcn.18018a490
mov qword [rbx], rax
jmp 0x180003d39
mov rbx, r14
mov qword [rbp + 0x40], rbx
test rbx, rbx
jne 0x180003d4d
mov ecx, 0x8007000e
call fcn.18018a480
nop
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], r14
mov r9d, gethostbyname
mov r8, qword [rdi]
mov rdx, qword [rbx]
call qword [rax + 0xa0]
mov esi, eax
or ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
dec ecx
jne 0x180003da9
mov rcx, qword [rbx]
test rcx, rcx
je 0x180003d92
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x180003da0
call fcn.18000c5fc
mov rcx, rbx
call fcn.18000c5fc
nop
or eax, 0xffffffff
lock xadd dword [rdi + 0x10], eax
dec eax
jne 0x180003dd9
mov rcx, qword [rdi]
test rcx, rcx
je 0x180003dc3
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x180003dd1
call fcn.18000c5fc
mov rcx, rdi
call fcn.18000c5fc
test esi, esi
js 0x18000327c
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x180003eac
nop
mov rax, qword [rcx]
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x60]
mov r8d, 1
or edx, 0xffffffff
call qword [rax + 0x20]
cmp dword [rsp + 0x58], 0
je 0x180003ea7
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rbp - 8]
xor r8d, r8d
lea rdx, str.MACAddress
call qword [rax + 0x20]
movzx edx, word [rbp - 8]
test dx, dx
je 0x180003e82
cmp dx, 1
je 0x180003e82
mov r8, qword [rbp]
test r8, r8
je 0x180003e82
cmp r8d, 0xcccccccc
je 0x180003e82
mov edx, reloc.WS2_32.dll_select
lea rcx, [rbp + 0xc8]
call fcn.180148040
lea rcx, [r12 + 0x430]
lea rdx, [rbp + 0xc8]
call fcn.1800053e0
lea rcx, [rbp - 8]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsp + 0x50]
test rcx, rcx
jne 0x180003df0
jmp 0x180003eac
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rsp + 0x50], r14
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov al, 1
mov rcx, qword [rbp + 0xb00]
xor rcx, rsp
call fcn.180146c80
mov rbx, qword [rsp + 0xc70]
movaps xmm6, xmmword [rsp + 0xc10]
add rsp, 0xc20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret