Function at 0x140003360
Capabilities:
Execute command
Get disk information
Get memory capacity

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x430]
sub rsp, 0x530
mov rax, qword [0x14000b038]
xor rax, rsp
mov qword [rbp + 0x420], rax
xor r15d, r15d
xor edx, edx
mov r8d, 0x105
lea rcx, [rbp + 0x310]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x105
lea rcx, [rbp + 0x200]
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0x118], r15d
mov dword [rbp + 0x11c], r15d
mov dword [rbp + 0x160], r15d
xorps xmm0, xmm0
movups xmmword [rbp + 0x168], xmm0
mov qword [rbp + 0x178], r15
mov qword [rbp + 0x180], 0xf
mov byte [rbp + 0x168], r15b
mov dword [rsp + 0x38], 0x105
lea rax, [rbp + 0x200]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x160]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x11c]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x118]
mov r8d, 0x105
lea rdx, [rbp + 0x310]
lea rcx, [0x1400089b4]
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
lea r12d, [r15 + 0x16]
test eax, eax
je 0x140003890
mov edx, dword [rbp + 0x118]
lea rcx, [rsp + 0x68]
call fcn.1400052e0
nop
mov r8, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
sub rax, r8
lea r14d, [r15 + 0xc]
lea rsi, str.HDD_Serial:
cmp rax, r14
jb 0x140003500
lea rax, [r8 + 0xc]
mov qword [rsp + 0x78], rax
lea rbx, [rsp + 0x68]
cmp rcx, 0x10
cmovae rbx, qword [rsp + 0x68]
lea rax, [0x1400089c4]
cmp rax, rbx
jbe 0x1400034c3
lea rax, [rbx + r8]
cmp rsi, rax
ja 0x1400034c3
cmp rbx, rsi
ja 0x1400034bb
mov edi, r15d
jmp 0x1400034c6
mov rdi, rbx
sub rdi, rsi
jmp 0x1400034c6
mov rdi, r14
inc r8
lea rcx, [rbx + 0xc]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
sub r14, rdi
lea rdx, [rsi + 0xc]
add rdx, rdi
lea rcx, [rbx + rdi]
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x68]
jmp 0x140003517
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
mov rdx, r14
lea rcx, [rsp + 0x68]
call fcn.1400061d0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1f0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1e0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1f0], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 2
lea rdx, [0x140008530]
lea rcx, [rbp + 0x1e0]
call fcn.140005000
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x130], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x168]
call fcn.140004c80
nop
mov rdx, qword [rbp + 0x138]
cmp rdx, 0x10
jb 0x1400035e6
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400035e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400035e0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
nop
mov rdx, qword [rbp + 0x1f8]
cmp rdx, 0x10
jb 0x14000362a
inc rdx
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003625
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003625
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
movdqa xmm0, xmmword [0x140008a90]
movdqu xmmword [rbp + 0x1f0], xmm0
mov byte [rbp + 0x1e0], 0
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x140003680
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000367b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000367b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
mov edx, dword [rbp + 0x11c]
lea rcx, [rbp - 0x78]
call fcn.1400052e0
nop
mov r8, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
sub rax, r8
lea rsi, str.Max_Component_Length:
cmp rax, 0x16
jb 0x140003726
lea rax, [r8 + 0x16]
mov qword [rbp - 0x68], rax
lea rbx, [rbp - 0x78]
cmp rcx, 0x10
cmovae rbx, qword [rbp - 0x78]
lea rax, [0x1400089de]
cmp rax, rbx
jbe 0x1400036e7
lea rax, [rbx + r8]
cmp rsi, rax
ja 0x1400036e7
cmp rbx, rsi
ja 0x1400036df
mov rdi, r15
jmp 0x1400036ea
mov rdi, rbx
sub rdi, rsi
jmp 0x1400036ea
mov rdi, r12
inc r8
lea rcx, [rbx + 0x16]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov r8, r12
sub r8, rdi
lea rdx, [0x1400089de]
add rdx, rdi
lea rcx, [rbx + rdi]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x78]
jmp 0x14000373c
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rsi
mov rdx, r12
lea rcx, [rbp - 0x78]
call fcn.1400061d0
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x38], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x28], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x38], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 2
lea rdx, [0x140008530]
lea rcx, [rbp + 0x28]
call fcn.140005000
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x130], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x168]
call fcn.140004c80
nop
mov rdx, qword [rbp + 0x138]
cmp rdx, 0x10
jb 0x1400037fc
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400037f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400037f6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
nop
mov rdx, qword [rbp + 0x40]
cmp rdx, 0x10
jb 0x14000383a
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003835
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003835
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
movdqa xmm0, xmmword [0x140008a90]
movdqu xmmword [rbp + 0x38], xmm0
mov byte [rbp + 0x28], 0
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x140003890
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003884
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003884
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
nop dword [rax]
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1e0], xmm0
xor eax, eax
xor ecx, ecx
cpuid
mov dword [rbp + 0x1e0], eax
mov dword [rbp + 0x1e4], ebx
mov dword [rbp + 0x1e8], ecx
mov dword [rbp + 0x1ec], edx
movq xmm1, qword [rbp + 0x1e0]
punpcklwd xmm1, xmm0
movq xmm2, qword [rbp + 0x1e8]
punpcklwd xmm2, xmm0
paddd xmm2, xmm1
movdqa xmm0, xmm2
psrldq xmm0, 8
paddd xmm2, xmm0
movdqa xmm0, xmm2
psrldq xmm0, 4
paddd xmm2, xmm0
movd edx, xmm2
lea rcx, [rbp - 0x58]
call fcn.1400052e0
nop
mov r8, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
sub rax, r8
mov r14d, 0xa
lea rsi, str.CPU_Hash:
cmp rax, r14
jb 0x140003995
lea rax, [r8 + 0xa]
mov qword [rbp - 0x48], rax
lea rbx, [rbp - 0x58]
cmp rcx, 0x10
cmovae rbx, qword [rbp - 0x58]
lea rax, [0x1400089ea]
cmp rax, rbx
jbe 0x140003959
lea rax, [rbx + r8]
cmp rsi, rax
ja 0x140003959
cmp rbx, rsi
ja 0x140003951
mov rdi, r15
jmp 0x14000395c
mov rdi, rbx
sub rdi, rsi
jmp 0x14000395c
mov rdi, r14
inc r8
lea rcx, [rbx + 0xa]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
sub r14, rdi
lea rdx, [rsi + 0xa]
add rdx, rdi
lea rcx, [rbx + rdi]
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x58]
jmp 0x1400039ab
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
mov rdx, r14
lea rcx, [rbp - 0x58]
call fcn.1400061d0
xorps xmm0, xmm0
movups xmmword [rbp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x58], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x58], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 2
lea rdx, [0x140008530]
lea rcx, [rbp + 0x48]
call fcn.140005000
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x130], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x168]
call fcn.140004c80
nop
mov rdx, qword [rbp + 0x138]
cmp rdx, 0x10
jb 0x140003a6b
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003a65
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003a65
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
nop
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x140003aa9
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003aa4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003aa4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
movdqa xmm0, xmmword [0x140008a90]
movdqu xmmword [rbp + 0x58], xmm0
mov byte [rbp + 0x48], 0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x140003af8
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003af3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003af3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x188], xmm0
mov qword [rbp + 0x198], rax
lea rcx, [rbp + 0x188]
call fcn.140002170
nop
mov rsi, qword [rbp + 0x188]
mov rax, qword [rbp + 0x190]
mov qword [rsp + 0x60], rax
movabs rcx, 0x8000000000000000
movabs r14, 0x7fffffffffffffff
cmp rsi, rax
je 0x140003d40
nop dword [rax + rax]
mov r13, qword [rsi + 0x10]
mov rax, r14
sub rax, r13
cmp rax, 0xf
jb 0x140004b26
mov r12, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x140003b71
mov r12, qword [rsi]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
lea r15, [r13 + 0xf]
mov ebx, 0xf
lea rdi, [rsp + 0x40]
cmp r15, rbx
jbe 0x140003c07
mov rbx, r15
or rbx, 0xf
cmp rbx, r14
jbe 0x140003bab
mov rbx, r14
lea rax, [rcx + 0x27]
jmp 0x140003bd2
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140003bf1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004b20
mov rcx, rax
call fcn.140006808
test rax, rax
je 0x140003d39
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140003c02
test rcx, rcx
je 0x140003c00
call fcn.140006808
mov rdi, rax
jmp 0x140003c02
xor edi, edi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], rbx
movsd xmm0, qword [str.Graphics_Card:]
movsd qword [rdi], xmm0
mov eax, dword [0x1400089f8]
mov dword [rdi + 8], eax
movzx eax, word [0x1400089fc]
mov word [rdi + 0xc], ax
movzx eax, byte [0x1400089fe]
mov byte [rdi + 0xe], al
lea rcx, [rdi + 0xf]
mov r8, r13
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r15], 0
mov r8d, 2
lea rdx, [0x140008530]
lea rcx, [rsp + 0x40]
call fcn.140005000
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x130], xmm1
xor r15d, r15d
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x168]
call fcn.140004c80
nop
mov rdx, qword [rbp + 0x138]
cmp rdx, 0x10
jb 0x140003cdf
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003cd9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003d32
call fcn.140006800
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140003d18
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003d13
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003d39
call fcn.140006800
add rsi, 0x20
cmp rsi, qword [rsp + 0x60]
je 0x140003d40
movabs rcx, 0x8000000000000000
jmp 0x140003b50
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov dword [rbp + 0x120], 0x40
lea rcx, [rbp + 0x120]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov rdx, qword [rbp + 0x128]
shr rdx, 0x14
lea rcx, [rbp - 0x38]
call fcn.140005480
nop
mov r8, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
sub rax, r8
mov r15d, 0x15
lea rsi, str.Total_System_Memory:
cmp rax, r15
jb 0x140003e03
lea rax, [r8 + 0x15]
mov qword [rbp - 0x28], rax
lea rbx, [rbp - 0x38]
cmp rcx, 0x10
cmovae rbx, qword [rbp - 0x38]
lea rax, [0x140008a1d]
cmp rax, rbx
jbe 0x140003dc7
lea rax, [rbx + r8]
cmp rsi, rax
ja 0x140003dc7
cmp rbx, rsi
ja 0x140003dbf
xor edi, edi
jmp 0x140003dca
mov rdi, rbx
sub rdi, rsi
jmp 0x140003dca
mov rdi, r15
inc r8
lea rcx, [rbx + 0x15]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
sub r15, rdi
lea rdx, [rsi + 0x15]
add rdx, rdi
lea rcx, [rbx + rdi]
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x38]
jmp 0x140003e19
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rsi
mov rdx, r15
lea rcx, [rbp - 0x38]
call fcn.1400061d0
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x78], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x78], xmm1
xor r13d, r13d
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], r13b
lea r8d, [r13 + 5]
lea rdx, str._MB_n
lea rcx, [rbp + 0x68]
call fcn.140005000
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x130], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], r13b
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x168]
call fcn.140004c80
nop
mov rdx, qword [rbp + 0x138]
cmp rdx, 0x10
jb 0x140003eda
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003ed4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003ed4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
nop
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x140003f1b
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003f16
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003f16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
movdqa xmm0, xmmword [0x140008a90]
movdqu xmmword [rbp + 0x78], xmm0
mov byte [rbp + 0x68], 0
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x140003f6a
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003f65
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003f65
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
lea rcx, [rbp + 0x1a0]
call fcn.140002500
nop
mov rax, r14
mov r15, qword [rbp + 0x1b0]
sub rax, r15
cmp rax, 0xd
jb 0x140004b2c
lea r12, [rbp + 0x1a0]
mov rax, qword [rbp + 0x1a0]
mov qword [rbp + 0x110], rax
mov rcx, qword [rbp + 0x1b8]
mov qword [rbp + 0x108], rcx
cmp rcx, 0x10
cmovae r12, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x88], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x98], xmm1
lea rsi, [r15 + 0xd]
mov ebx, 0xf
lea rdi, [rbp + 0x88]
cmp rsi, rbx
jbe 0x140004061
mov rbx, rsi
or rbx, 0xf
cmp rbx, r14
jbe 0x14000401f
mov rbx, r14
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140006808
test rax, rax
je 0x14000416f
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000405a
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140004048
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004b0e
jmp 0x140004000
test rcx, rcx
je 0x140004057
call fcn.140006808
mov rdi, rax
jmp 0x14000405a
mov rdi, r13
mov qword [rbp + 0x88], rdi
mov qword [rbp + 0x98], rsi
mov qword [rbp + 0xa0], rbx
movsd xmm0, qword [str.MAC_Address:]
movsd qword [rdi], xmm0
mov eax, dword [0x140008a28]
mov dword [rdi + 8], eax
movzx eax, byte [0x140008a2c]
mov byte [rdi + 0xc], al
lea rcx, [rdi + 0xd]
mov r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
mov r8d, 2
lea rdx, [0x140008530]
lea rcx, [rbp + 0x88]
call fcn.140005000
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x130], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x168]
call fcn.140004c80
nop
mov rdx, qword [rbp + 0x138]
cmp rdx, 0x10
jb 0x140004137
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004131
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004131
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0x10
jb 0x14000417b
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004176
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004176
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
lea rcx, [rbp + 0x1c0]
call fcn.140002770
nop
mov rax, r14
mov r15, qword [rbp + 0x1d0]
sub rax, r15
cmp rax, 0xd
jb 0x140004b32
lea r12, [rbp + 0x1c0]
mov r13, qword [rbp + 0x1c0]
mov rax, qword [rbp + 0x1d8]
mov qword [rsp + 0x60], rax
cmp rax, 0x10
cmovae r12, r13
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb8], xmm1
lea rsi, [r15 + 0xd]
mov ebx, 0xf
lea rdi, [rbp + 0xa8]
cmp rsi, rbx
jbe 0x140004268
mov rbx, rsi
or rbx, 0xf
cmp rbx, r14
jbe 0x140004227
mov rbx, r14
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140006808
test rax, rax
je 0x140004379
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140004261
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140004250
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004b14
jmp 0x140004208
test rcx, rcx
je 0x14000425f
call fcn.140006808
mov rdi, rax
jmp 0x140004261
xor edi, edi
mov qword [rbp + 0xa8], rdi
mov qword [rbp + 0xb8], rsi
mov qword [rbp + 0xc0], rbx
movsd xmm0, qword [str.BIOS_Serial:]
movsd qword [rdi], xmm0
mov eax, dword [0x140008a38]
mov dword [rdi + 8], eax
movzx eax, byte [0x140008a3c]
mov byte [rdi + 0xc], al
lea rcx, [rdi + 0xd]
mov r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
mov r8d, 2
lea rdx, [0x140008530]
lea rcx, [rbp + 0xa8]
call fcn.140005000
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x130], xmm1
xor r12d, r12d
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x168]
call fcn.140004c80
nop
mov rdx, qword [rbp + 0x138]
cmp rdx, 0x10
jb 0x140004341
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000433b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000433b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
nop
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0x10
jb 0x140004385
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004380
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004380
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov edx, eax
lea rcx, [rbp - 0x18]
call fcn.140005100
nop
mov r8, qword [rbp - 8]
mov rcx, qword [rbp]
mov rax, rcx
sub rax, r8
mov edi, 8
lea r15, str.ScreenX
cmp rax, rdi
jb 0x140004430
lea rax, [r8 + 8]
mov qword [rbp - 8], rax
lea rbx, [rbp - 0x18]
cmp rcx, 0x10
cmovae rbx, qword [rbp - 0x18]
lea rax, [0x140008a48]
cmp rax, rbx
jbe 0x1400043f4
lea rax, [rbx + r8]
cmp r15, rax
ja 0x1400043f4
cmp rbx, r15
ja 0x1400043ec
mov rsi, r12
jmp 0x1400043f7
mov rsi, rbx
sub rsi, r15
jmp 0x1400043f7
mov rsi, rdi
inc r8
lea rcx, [rbx + 8]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rsi
mov rdx, r15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov r8, rdi
sub r8, rsi
lea rdx, [r15 + 8]
add rdx, rsi
lea rcx, [rbx + rsi]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x18]
jmp 0x140004446
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r15
mov rdx, rdi
lea rcx, [rbp - 0x18]
call fcn.1400061d0
xorps xmm0, xmm0
movups xmmword [rbp + 0xc8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xc8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xd8], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 2
lea rdx, [0x140008530]
lea rcx, [rbp + 0xc8]
call fcn.140005000
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x130], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x168]
call fcn.140004c80
nop
mov rdx, qword [rbp + 0x138]
cmp rdx, 0x10
jb 0x140004515
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000450f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000450f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x140004559
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004554
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004554
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
movdqa xmm0, xmmword [0x140008a90]
movdqu xmmword [rbp + 0xd8], xmm0
mov byte [rbp + 0xc8], 0
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x1400045ae
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400045a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400045a9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov edx, eax
lea rcx, [rbp + 8]
call fcn.140005100
nop
mov r8, qword [rbp + 0x18]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
sub rax, r8
lea r15, str.ScreenY
cmp rax, 8
jb 0x140004658
lea rax, [r8 + 8]
mov qword [rbp + 0x18], rax
lea rbx, [rbp + 8]
cmp rcx, 0x10
cmovae rbx, qword [rbp + 8]
lea rax, [0x140008a58]
cmp rax, rbx
jbe 0x14000461c
lea rax, [rbx + r8]
cmp r15, rax
ja 0x14000461c
cmp rbx, r15
ja 0x140004614
mov rsi, r12
jmp 0x14000461f
mov rsi, rbx
sub rsi, r15
jmp 0x14000461f
mov rsi, rdi
inc r8
lea rcx, [rbx + 8]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rsi
mov rdx, r15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
sub rdi, rsi
lea rdx, [r15 + 8]
add rdx, rsi
lea rcx, [rbx + rsi]
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 8]
jmp 0x14000466e
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r15
mov rdx, rdi
lea rcx, [rbp + 8]
call fcn.1400061d0
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xe8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xf8], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 2
lea rdx, [0x140008530]
lea rcx, [rbp + 0xe8]
call fcn.140005000
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x130], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x168]
call fcn.140004c80
nop
mov rdx, qword [rbp + 0x138]
cmp rdx, 0x10
jb 0x14000473d
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004737
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004737
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
nop
mov rdx, qword [rbp + 0x100]
cmp rdx, 0x10
jb 0x140004781
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000477c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000477c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
movdqa xmm0, xmmword [0x140008a90]
movdqu xmmword [rbp + 0xf8], xmm0
mov byte [rbp + 0xe8], 0
mov rdx, qword [rbp + 0x20]
cmp rdx, 0x10
jb 0x1400047d6
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400047d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400047d1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
lea rcx, [rbp + 0x120]
call fcn.1400012d0
nop
mov rdx, rax
lea rcx, [rbp + 0x168]
call fcn.140004c80
nop
mov rdx, qword [rbp + 0x138]
cmp rdx, 0x10
jb 0x140004837
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004832
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004832
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
lea rcx, [rbp + 0x120]
call fcn.1400018f0
nop
mov rdx, rax
lea rcx, [rbp + 0x168]
call fcn.140004c80
nop
mov rdx, qword [rbp + 0x138]
cmp rdx, 0x10
jb 0x140004898
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004893
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004893
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov rbx, qword [rbp + 0x178]
lea rdi, [rbp + 0x168]
cmp qword [rbp + 0x180], 0x10
cmovae rdi, qword [rbp + 0x168]
cmp rbx, r14
ja 0x140004b08
mov qword [rsp + 0x58], 0xf
cmp rbx, 0x10
jae 0x1400048f2
mov qword [rsp + 0x50], rbx
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x40], xmm0
jmp 0x14000498a
mov rax, rbx
or rax, 0xf
cmp rax, r14
jbe 0x14000492a
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140006808
mov rcx, rax
test rax, rax
je 0x140004956
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000496c
mov r14, rax
cmp rax, 0x16
mov eax, 0x16
cmovb r14, rax
lea rcx, [r14 + 1]
cmp rcx, 0x1000
jb 0x14000495d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004b1a
jmp 0x14000490c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140004969
call fcn.140006808
jmp 0x14000496c
mov rax, r12
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], r14
lea r8, [rbx + 1]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rsp + 0x40]
call fcn.140002d80
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x1400049e1
inc rdx
mov rax, r13
cmp rdx, 0x1000
jb 0x1400049d8
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400049d8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r13
call fcn.140006800
nop
mov rdx, qword [rbp + 0x108]
cmp rdx, 0x10
jb 0x140004a26
inc rdx
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004a20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004a20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
nop
mov rcx, qword [rbp + 0x188]
test rcx, rcx
je 0x140004a92
mov rdx, qword [rbp + 0x190]
call fcn.1400059b0
mov rdx, qword [rbp + 0x198]
mov rcx, qword [rbp + 0x188]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004a7b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004a7b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x188], xmm0
mov qword [rbp + 0x198], r12
mov rdx, qword [rbp + 0x180]
cmp rdx, 0x10
jb 0x140004ad6
inc rdx
mov rcx, qword [rbp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004ad1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004ad1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006800
xor eax, eax
mov rcx, qword [rbp + 0x420]
xor rcx, rsp
call fcn.1400067e0
lea r11, [rsp + 0x530]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001220
nop
call fcn.140001180
nop
call fcn.140001180
int3
call fcn.140001180
nop
call fcn.140001180
int3
call fcn.140001220
nop
call fcn.140001220
nop
call fcn.140001220
int3