Function at 0x465300
Capabilities:
Link many functions at runtime
Rebuild import table

Disassembly:
sub esp, 0x98
mov eax, dword [0x619e70]
xor eax, esp
mov dword [esp + 0x94], eax
push ebx
push esi
push edi
push 0x94
lea eax, [esp + 0x10]
push 0
push eax
mov esi, ecx
call fcn.0057f470
add esp, 0xc
lea ecx, [esp + 0xc]
push ecx
mov dword [esp + 0x10], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push str.setupapi.dll
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esi + 8], eax
test eax, eax
je 0x46546b
push str.SetupDiEnumDeviceInterfaces
push eax
call edi
mov edx, dword [esi + 8]
push str.SetupDiDestroyDeviceInfoList
push edx
mov dword [esi + 0x84], eax
call edi
mov dword [esi + 0x88], eax
mov eax, dword [esi + 8]
push str.SetupDiGetDeviceInterfaceDetailA
push eax
call edi
mov ecx, dword [esi + 8]
push str.SetupDiGetClassDevsA
push ecx
mov dword [esi + 0x8c], eax
call edi
mov edx, dword [esi + 8]
push str.SetupDiGetDeviceRegistryPropertyA
push edx
mov dword [esi + 0x94], eax
call edi
mov dword [esi + 0x98], eax
mov eax, dword [esi + 8]
push str.SetupDiGetDeviceInstanceIdA
push eax
call edi
mov ecx, dword [esi + 8]
push str.SetupDiEnumDeviceInfo
push ecx
mov dword [esi + 0x90], eax
call edi
mov edx, dword [esi + 8]
push str.SetupDiOpenDevRegKey
push edx
mov dword [esi + 0x9c], eax
call edi
mov dword [esi + 0xa0], eax
mov eax, dword [esi + 8]
push str.CM_Get_DevNode_Registry_PropertyA
push eax
call edi
mov ecx, dword [esi + 8]
push str.CM_Locate_DevNodeA
push ecx
mov dword [esi + 0xa4], eax
call edi
mov edx, dword [esi + 8]
push str.CM_Get_Device_IDA
push edx
mov dword [esi + 0xb8], eax
call edi
mov dword [esi + 0xbc], eax
mov eax, dword [esi + 8]
push str.CM_Get_Device_Interface_List_SizeA
push eax
call edi
mov ecx, dword [esi + 8]
push str.CM_Get_Child
push ecx
mov dword [esi + 0xc0], eax
call edi
mov edx, dword [esi + 8]
push str.CM_Get_Sibling
push edx
mov dword [esi + 0xa8], eax
call edi
mov dword [esi + 0xac], eax
mov eax, dword [esi + 8]
push str.CM_Get_Parent
push eax
call edi
mov ecx, dword [esi + 8]
push str.CM_Get_Device_ID_Size
push ecx
mov dword [esi + 0xb0], eax
call edi
mov dword [esi + 0xb4], eax
push str.kernel32.dll
call ebx
mov dword [esi + 4], eax
test eax, eax
je 0x465576
push str.LoadLibraryExA
push eax
call edi
mov edx, dword [esi + 4]
push str.SetSearchPathMode
push edx
mov dword [esi + 0x24], eax
call edi
mov dword [esi + 0x28], eax
mov eax, dword [esi + 4]
push str.GetNativeSystemInfo
push eax
call edi
mov ecx, dword [esi + 4]
push str.GetLogicalProcessorInformation
push ecx
mov dword [esi + 0x2c], eax
call edi
mov edx, dword [esi + 4]
push str.GetLogicalProcessorInformationEx
push edx
mov dword [esi + 0x30], eax
call edi
mov dword [esi + 0x34], eax
mov eax, dword [esi + 4]
push str.GetActiveProcessorGroupCount
push eax
call edi
mov ecx, dword [esi + 4]
push str.GetMaximumProcessorCount
push ecx
mov dword [esi + 0x40], eax
call edi
mov edx, dword [esi + 4]
push str.GetActiveProcessorCount
push edx
mov dword [esi + 0x3c], eax
call edi
mov dword [esi + 0x38], eax
mov eax, dword [esi + 4]
push str.IsWow64Process2
push eax
call edi
mov ecx, dword [esi + 4]
push str.GetSystemFirmwareTable
push ecx
mov dword [esi + 0x54], eax
call edi
mov edx, dword [esi + 4]
push str.GetThreadGroupAffinity
push edx
mov dword [esi + 0x60], eax
call edi
mov dword [esi + 0x44], eax
mov eax, dword [esi + 4]
push str.SetThreadGroupAffinity
push eax
call edi
mov ecx, dword [esi + 4]
push str.SetThreadDescription
push ecx
mov dword [esi + 0x48], eax
call edi
mov edx, dword [esi + 4]
push str.GetThreadDescription
push edx
mov dword [esi + 0x4c], eax
call edi
mov dword [esi + 0x50], eax
mov eax, dword [esi + 4]
push str.GetDevicePowerState
push eax
call edi
mov ecx, dword [esi + 4]
push str.GetProductInfo
push ecx
mov dword [esi + 0x64], eax
call edi
mov edx, dword [esi + 4]
mov dword [esi + 0x68], eax
push str.GetPhysicallyInstalledSystemMemory
push edx
call edi
mov dword [esi + 0x6c], eax
mov eax, dword [esi + 4]
push str.GlobalMemoryStatusEx
push eax
call edi
mov dword [esi + 0x70], eax
push str.gdi32.dll
call ebx
mov dword [esi + 0xc], eax
test eax, eax
je 0x4655e7
push str.D3DKMTOpenAdapterFromDeviceName
push eax
call edi
mov ecx, dword [esi + 0xc]
push str.D3DKMTOpenAdapterFromGdiDisplayName
push ecx
mov dword [esi + 0xc8], eax
call edi
mov edx, dword [esi + 0xc]
push str.D3DKMTCloseAdapter
push edx
mov dword [esi + 0xcc], eax
call edi
mov dword [esi + 0xd0], eax
mov eax, dword [esi + 0xc]
push str.D3DKMTQueryStatistics
push eax
call edi
mov ecx, dword [esi + 0xc]
push str.D3DKMTQueryAdapterInfo
push ecx
mov dword [esi + 0xd4], eax
call edi
mov edx, dword [esi + 0xc]
push str.D3DKMTOpenAdapterFromHdc
push edx
mov dword [esi + 0xd8], eax
call edi
mov dword [esi + 0xdc], eax
push str.NtDll.dll
call ebx
mov dword [esi + 0x10], eax
test eax, eax
je 0x46561f
push str.NtQuerySystemInformation
push eax
call edi
mov dword [esi + 0x78], eax
mov eax, dword [esi + 0x10]
push str.RtlGetVersion
push eax
call edi
mov ecx, dword [esi + 0x10]
push str.RtlGetNtVersionNumbers
push ecx
mov dword [esi + 0x7c], eax
call edi
mov dword [esi + 0x80], eax
push str.User32.dll
call ebx
mov dword [esi + 0x14], eax
test eax, eax
je 0x465646
cmp dword [esp + 0x1c], 2
jne 0x465646
cmp dword [esp + 0x10], 4
jb 0x465646
push str.EnumDisplayDevicesA
push eax
call edi
mov dword [esi + 0x74], eax
push str.DXGI.dll
call ebx
mov dword [esi + 0x1c], eax
test eax, eax
je 0x465662
push str.CreateDXGIFactory
push eax
call edi
mov dword [esi + 0xe0], eax
push str.pdh.dll
call ebx
mov dword [esi + 0x20], eax
test eax, eax
je 0x46574e
push str.PdhEnumObjectItemsA
push eax
call edi
mov edx, dword [esi + 0x20]
push str.PdhOpenQueryA
push edx
mov dword [esi + 0xe4], eax
call edi
mov dword [esi + 0xe8], eax
mov eax, dword [esi + 0x20]
push str.PdhAddCounterA
push eax
call edi
mov ecx, dword [esi + 0x20]
push str.PdhEnumMachinesA
push ecx
mov dword [esi + 0xec], eax
call edi
mov edx, dword [esi + 0x20]
push str.PdhConnectMachineA
push edx
mov dword [esi + 0xf0], eax
call edi
mov dword [esi + 0xf4], eax
mov eax, dword [esi + 0x20]
push str.PdhEnumObjectsA
push eax
call edi
mov ecx, dword [esi + 0x20]
push str.PdhLookupPerfNameByIndexA
push ecx
mov dword [esi + 0xf8], eax
call edi
mov edx, dword [esi + 0x20]
push str.PdhLookupPerfIndexByNameA
push edx
mov dword [esi + 0xfc], eax
call edi
mov dword [esi + 0x100], eax
mov eax, dword [esi + 0x20]
push str.PdhAddEnglishCounterA
push eax
call edi
mov ecx, dword [esi + 0x20]
push str.PdhCloseQuery
push ecx
mov dword [esi + 0x104], eax
call edi
mov edx, dword [esi + 0x20]
push str.PdhCollectQueryData
push edx
mov dword [esi + 0x10c], eax
call edi
mov dword [esi + 0x108], eax
mov eax, dword [esi + 0x20]
push str.PdhGetFormattedCounterValue
push eax
call edi
mov ecx, dword [esi + 0x20]
push str.PdhGetRawCounterValue
push ecx
mov dword [esi + 0x110], eax
call edi
mov dword [esi + 0x114], eax
push str.advapi32.dll
call ebx
mov dword [esi + 0x18], eax
test eax, eax
je 0x4657d0
push 0x5aadd4
push eax
call edi
mov edx, dword [esi + 0x18]
push 0x5aadcc
push edx
mov dword [esi + 0x118], eax
call edi
mov dword [esi + 0x11c], eax
mov eax, dword [esi + 0x18]
push 0x5aadbc
push eax
call edi
mov ecx, dword [esi + 0x18]
push 0x5aadac
push ecx
mov dword [esi + 0x120], eax
call edi
mov edx, dword [esi + 0x18]
push 0x5aad8c
push edx
mov dword [esi + 0x124], eax
call edi
mov dword [esi + 0x128], eax
mov eax, dword [esi + 0x18]
push 0x5aad70
push eax
call edi
mov ecx, dword [esi + 0x18]
push str.AddAce
push ecx
mov dword [esi + 0x12c], eax
call edi
mov dword [esi + 0x130], eax
mov ecx, dword [esp + 0xa0]
pop edi
pop esi
pop ebx
xor ecx, esp
mov eax, 1
call fcn.0057db4c
add esp, 0x98
ret