Function at 0x1400d4fa0
Capabilities:
Get geographical location

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x1406b82c0]
xor rax, rsp
mov qword [rbp - 8], rax
mov rdi, rdx
mov rbx, rcx
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
mov r8d, 0xa
lea rdx, str.BootDevice
lea rcx, [rbp - 0x28]
call fcn.1400055c0
nop
mov r9, rbx
lea r8, [rbp - 0x28]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x28]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
mov r8d, SafeArrayGetDim
lea rdx, str.BuildNumber
lea rcx, [rbp - 0x28]
call fcn.1400055c0
nop
lea r9, [rbx + 0x20]
lea r8, [rbp - 0x28]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x28]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
mov r8d, 9
lea rdx, str.BuildType
lea rcx, [rbp - 0x28]
call fcn.1400055c0
nop
lea r9, [rbx + 0x40]
lea r8, [rbp - 0x28]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x28]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
mov r8d, 7
lea rdx, str.Caption
lea rcx, [rbp - 0x28]
call fcn.1400055c0
nop
lea r9, [rbx + 0x60]
lea r8, [rbp - 0x28]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x28]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
mov r8d, 7
lea rdx, str.CodeSet
lea rcx, [rbp - 0x28]
call fcn.1400055c0
nop
lea r9, [rbx + 0x80]
lea r8, [rbp - 0x28]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x28]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
mov r8d, SafeArrayGetDim
lea rdx, str.CountryCode
lea rcx, [rbp - 0x28]
call fcn.1400055c0
nop
lea r9, [rbx + 0xa0]
lea r8, [rbp - 0x28]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x28]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.CreationClassName
lea rcx, [rbp - 0x28]
call fcn.1400055c0
nop
lea r9, [rbx + 0xc0]
lea r8, [rbp - 0x28]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x28]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetLBound
lea rdx, str.CSCreationClassName
lea rcx, [rbp - 0x28]
call fcn.1400055c0
nop
lea r9, [rbx + 0xe0]
lea r8, [rbp - 0x28]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x28]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
mov r8d, 6
lea rdx, str.CSName
lea rcx, [rbp - 0x28]
call fcn.1400055c0
nop
lea r9, [rbx + 0x100]
lea r8, [rbp - 0x28]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x28]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.CurrentTimeZone
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1405072b0]
movdqu xmmword [rbp - 0x18], xmm1
mov byte [rbp - 0x28], 0
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
test al, al
je 0x1400d5287
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
xor r8d, r8d
lea rdx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov dword [rbx + 0x120], eax
lea rcx, [rbp - 0x28]
call fcn.1400155f0
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.WLDAP32.dll_Ordinal_41
lea rdx, str.DataExecutionPrevention_32BitApplications
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x124]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023b90
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.WLDAP32.dll_Ordinal_33
lea rdx, str.DataExecutionPrevention_Available
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x125]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023b90
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, Ordinal_32
lea rdx, str.DataExecutionPrevention_Drivers
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x126]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023b90
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, Ordinal_41
lea rdx, str.DataExecutionPrevention_SupportPolicy
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1405072b0]
movdqu xmmword [rbp - 0x18], xmm1
mov byte [rbp - 0x28], 0
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
test al, al
je 0x1400d53d6
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
xor r8d, r8d
lea rdx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov dword [rbx + 0x128], eax
lea rcx, [rbp - 0x28]
call fcn.1400155f0
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, 5
lea rdx, str.Debug
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x12c]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023b90
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, SafeArrayGetDim
lea rdx, str.Description
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x130]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, SafeArrayGetDim
lea rdx, str.Distributed
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x150]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023b90
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.EncryptionLevel
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1405072b0]
movdqu xmmword [rbp - 0x18], xmm1
mov byte [rbp - 0x28], 0
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
test al, al
je 0x1400d5525
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
xor r8d, r8d
lea rdx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov dword [rbx + 0x154], eax
lea rcx, [rbp - 0x28]
call fcn.1400155f0
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str.ForegroundApplicationBoost
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1405072b0]
movdqu xmmword [rbp - 0x18], xmm1
mov byte [rbp - 0x28], 0
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
test al, al
je 0x1400d55ab
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
xor r8d, r8d
lea rdx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov dword [rbx + 0x158], eax
lea rcx, [rbp - 0x28]
call fcn.1400155f0
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.FreePhysicalMemory
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1405072b0]
movdqu xmmword [rbp - 0x18], xmm1
mov byte [rbp - 0x28], 0
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
test al, al
je 0x1400d5632
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
xor r8d, r8d
lea rdx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoull]
mov qword [rbx + 0x160], rax
lea rcx, [rbp - 0x28]
call fcn.1400155f0
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.WLDAP32.dll_Ordinal_22
lea rdx, str.FreeSpaceInPagingFiles
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1405072b0]
movdqu xmmword [rbp - 0x18], xmm1
mov byte [rbp - 0x28], 0
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
test al, al
je 0x1400d56b9
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
xor r8d, r8d
lea rdx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoull]
mov qword [rbx + 0x168], rax
lea rcx, [rbp - 0x28]
call fcn.1400155f0
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.FreeVirtualMemory
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1405072b0]
movdqu xmmword [rbp - 0x18], xmm1
mov byte [rbp - 0x28], 0
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
test al, al
je 0x1400d5740
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
xor r8d, r8d
lea rdx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoull]
mov qword [rbx + 0x170], rax
lea rcx, [rbp - 0x28]
call fcn.1400155f0
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, SafeArrayGetDim
lea rdx, str.InstallDate
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x178]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.LastBootUpTime
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x198]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.LocalDateTime
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x1b8]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, 6
lea rdx, str.Locale
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x1d8]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, SafeArrayGetDim
lea rdx, str.Manufacturer
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x1f8]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.OLEAUT32.dll_SafeArrayLock
lea rdx, str.MaxNumberOfProcesses
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1405072b0]
movdqu xmmword [rbp - 0x18], xmm1
mov byte [rbp - 0x28], 0
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
test al, al
je 0x1400d5916
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
xor r8d, r8d
lea rdx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoull]
mov qword [rbx + 0x218], rax
lea rcx, [rbp - 0x28]
call fcn.1400155f0
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.OLEAUT32.dll_SafeArrayLock
lea rdx, str.MaxProcessMemorySize
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1405072b0]
movdqu xmmword [rbp - 0x18], xmm1
mov byte [rbp - 0x28], 0
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
test al, al
je 0x1400d599d
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
xor r8d, r8d
lea rdx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoull]
mov qword [rbx + 0x220], rax
lea rcx, [rbp - 0x28]
call fcn.1400155f0
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, SafeArrayGetDim
lea rdx, str.MUILanguages
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x228]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, 4
lea rdx, str.Name
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x248]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.NumberOfProcesses
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1405072b0]
movdqu xmmword [rbp - 0x18], xmm1
mov byte [rbp - 0x28], 0
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
test al, al
je 0x1400d5aa9
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
xor r8d, r8d
lea rdx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov dword [rbx + 0x268], eax
lea rcx, [rbp - 0x28]
call fcn.1400155f0
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.NumberOfUsers
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1405072b0]
movdqu xmmword [rbp - 0x18], xmm1
mov byte [rbp - 0x28], 0
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
test al, al
je 0x1400d5b2f
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
xor r8d, r8d
lea rdx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov dword [rbx + 0x26c], eax
lea rcx, [rbp - 0x28]
call fcn.1400155f0
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.OperatingSystemSKU
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1405072b0]
movdqu xmmword [rbp - 0x18], xmm1
mov byte [rbp - 0x28], 0
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
test al, al
je 0x1400d5bb5
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
xor r8d, r8d
lea rdx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov dword [rbx + 0x270], eax
lea rcx, [rbp - 0x28]
call fcn.1400155f0
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, SafeArrayGetDim
lea rdx, str.Organization
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x278]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.OSArchitecture
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x298]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, 0xa
lea rdx, str.OSLanguage
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1405072b0]
movdqu xmmword [rbp - 0x18], xmm1
mov byte [rbp - 0x28], 0
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
test al, al
je 0x1400d5cc1
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
xor r8d, r8d
lea rdx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov dword [rbx + 0x2b8], eax
lea rcx, [rbp - 0x28]
call fcn.1400155f0
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.OSProductSuite
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1405072b0]
movdqu xmmword [rbp - 0x18], xmm1
mov byte [rbp - 0x28], 0
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
test al, al
je 0x1400d5d47
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
xor r8d, r8d
lea rdx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov dword [rbx + 0x2bc], eax
lea rcx, [rbp - 0x28]
call fcn.1400155f0
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, 6
lea rdx, str.OSType
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1405072b0]
movdqu xmmword [rbp - 0x18], xmm1
mov byte [rbp - 0x28], 0
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
test al, al
je 0x1400d5dcd
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
xor r8d, r8d
lea rdx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov dword [rbx + 0x2c0], eax
lea rcx, [rbp - 0x28]
call fcn.1400155f0
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.PortableOperatingSystem
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x2c4]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023b90
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, 7
lea rdx, str.Primary
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x2c5]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023b90
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, SafeArrayGetDim
lea rdx, str.ProductType
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1405072b0]
movdqu xmmword [rbp - 0x18], xmm1
mov byte [rbp - 0x28], 0
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
test al, al
je 0x1400d5ed9
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
xor r8d, r8d
lea rdx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov dword [rbx + 0x2c8], eax
lea rcx, [rbp - 0x28]
call fcn.1400155f0
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.RegisteredUser
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x2d0]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, SafeArrayGetDim
lea rdx, str.SerialNumber
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x2f0]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.ServicePackMajorVersion
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1405072b0]
movdqu xmmword [rbp - 0x18], xmm1
mov byte [rbp - 0x28], 0
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
test al, al
je 0x1400d5fe5
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
xor r8d, r8d
lea rdx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov dword [rbx + 0x310], eax
lea rcx, [rbp - 0x28]
call fcn.1400155f0
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.ServicePackMinorVersion
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1405072b0]
movdqu xmmword [rbp - 0x18], xmm1
mov byte [rbp - 0x28], 0
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
test al, al
je 0x1400d606b
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
xor r8d, r8d
lea rdx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov dword [rbx + 0x314], eax
lea rcx, [rbp - 0x28]
call fcn.1400155f0
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.SizeStoredInPagingFiles
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1405072b0]
movdqu xmmword [rbp - 0x18], xmm1
mov byte [rbp - 0x28], 0
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
test al, al
je 0x1400d60f2
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
xor r8d, r8d
lea rdx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoull]
mov qword [rbx + 0x318], rax
lea rcx, [rbp - 0x28]
call fcn.1400155f0
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, 6
lea rdx, str.Status
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x320]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, 9
lea rdx, str.SuiteMask
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1405072b0]
movdqu xmmword [rbp - 0x18], xmm1
mov byte [rbp - 0x28], 0
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
test al, al
je 0x1400d61bb
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
xor r8d, r8d
lea rdx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov dword [rbx + 0x340], eax
lea rcx, [rbp - 0x28]
call fcn.1400155f0
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, SafeArrayGetDim
lea rdx, str.SystemDevice
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x348]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.SystemDirectory
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x368]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, SafeArrayGetDim
lea rdx, str.SystemDrive
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x388]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.WLDAP32.dll_Ordinal_22
lea rdx, str.TotalVirtualMemorySize
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1405072b0]
movdqu xmmword [rbp - 0x18], xmm1
mov byte [rbp - 0x28], 0
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
test al, al
je 0x1400d630b
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
xor r8d, r8d
lea rdx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoull]
mov qword [rbx + 0x3a8], rax
lea rcx, [rbp - 0x28]
call fcn.1400155f0
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.WLDAP32.dll_Ordinal_22
lea rdx, str.TotalVisibleMemorySize
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1405072b0]
movdqu xmmword [rbp - 0x18], xmm1
mov byte [rbp - 0x28], 0
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
test al, al
je 0x1400d6392
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
xor r8d, r8d
lea rdx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoull]
mov qword [rbx + 0x3b0], rax
lea rcx, [rbp - 0x28]
call fcn.1400155f0
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, 7
lea rdx, str.Version
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x3b8]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rdx, str.WindowsDirectory
lea rcx, [rbp - 0x50]
call fcn.1400055c0
nop
lea r9, [rbx + 0x3d8]
lea r8, [rbp - 0x50]
mov rcx, rdi
call fcn.140023a60
nop
lea rcx, [rbp - 0x50]
call fcn.1400155f0
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.14028f2f0
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret