Function at 0x140011271
Capabilities:
Terminate process

Disassembly:
jmp 0x1400167a0
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x268
lea rbp, [rsp + 0x30]
mov rdi, rsp
mov ecx, 0x9a
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x288]
mov rax, qword [0x14002f018]
xor rax, rbp
mov qword [rbp + 0x228], rax
lea rcx, [0x140045039]
call fcn.140011181
mov qword [rbp + 0x28], 0
lea rax, [rbp + 0x48]
mov rdi, rax
xor eax, eax
mov ecx, 0x10
rep stosb byte [rdi], al
lea rdx, str.SELECT_BytesReceivedPerSec__BytesSentPerSec_FROM_Win32_PerfRawData_Tcpip_NetworkInterface
lea rcx, [rbp + 0x1c8]
call fcn.1400116b8
mov qword [rbp + 0x1f8], rax
mov rax, qword [rbp + 0x1f8]
mov qword [rbp + 0x200], rax
mov rcx, qword [rbp + 0x200]
call fcn.1400113cf
mov qword [rbp + 0x208], rax
lea rdx, [0x14002ac5c]
lea rcx, [rbp + 0x1e8]
call fcn.1400116b8
mov qword [rbp + 0x210], rax
mov rax, qword [rbp + 0x210]
mov qword [rbp + 0x218], rax
mov rcx, qword [rbp + 0x218]
call fcn.1400113cf
mov rcx, qword [rbp + 0x250]
mov rcx, qword [rcx]
mov qword [rbp + 0x220], rcx
lea rdx, [rbp + 0x28]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], 0
mov r9d, 0x30
mov rdx, qword [rbp + 0x208]
mov r8, rdx
mov rdx, rax
mov rcx, qword [rbp + 0x250]
mov rax, qword [rbp + 0x220]
call qword [rax + 0xa0]
mov dword [rbp + 4], eax
lea rcx, [rbp + 0x1e8]
call fcn.1400114b5
nop
lea rcx, [rbp + 0x1c8]
call fcn.1400114b5
cmp dword [rbp + 4], 0
jge 0x14001691e
xor r9d, r9d
lea r8, str.error
lea rdx, str.Query_for_network_statistics_failed._Error_code__0x_x_n
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rax, qword [rbp + 0x250]
mov rax, qword [rax]
mov rcx, qword [rbp + 0x250]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, 1
call qword [sym.imp.ucrtbased.dll_exit]
nop
jmp 0x140016a6e
mov dword [rbp + 0x74], 0
mov qword [rbp + 0x98], 0
cmp qword [rbp + 0x28], 0
je 0x140016a60
mov rax, qword [rbp + 0x28]
mov rax, qword [rax]
lea rcx, [rbp + 0x74]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x98]
mov r8d, 1
mov edx, 0xffffffff
mov rcx, qword [rbp + 0x28]
call qword [rax + 0x20]
mov dword [rbp + 0xb4], eax
cmp dword [rbp + 0x74], 0
jne 0x140016975
jmp 0x140016a60
mov rax, qword [rbp + 0x98]
mov rax, qword [rax]
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea r9, [rbp + 0xd8]
xor r8d, r8d
lea rdx, str.BytesReceivedPerSec
mov rcx, qword [rbp + 0x98]
call qword [rax + 0x20]
mov dword [rbp + 0xb4], eax
mov rcx, qword [rbp + 0xe0]
call qword [sym.imp.ucrtbased.dll__wtoi64]
mov rcx, qword [rbp + 0x48]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x48], rax
lea rcx, [rbp + 0xd8]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rax, qword [rbp + 0x98]
mov rax, qword [rax]
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea r9, [rbp + 0xd8]
xor r8d, r8d
lea rdx, str.BytesSentPerSec
mov rcx, qword [rbp + 0x98]
call qword [rax + 0x20]
mov dword [rbp + 0xb4], eax
mov rcx, qword [rbp + 0xe0]
call qword [sym.imp.ucrtbased.dll__wtoi64]
mov rcx, qword [rbp + 0x50]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x50], rax
lea rcx, [rbp + 0xd8]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rax, qword [rbp + 0x98]
mov rax, qword [rax]
mov rcx, qword [rbp + 0x98]
call qword [rax + 0x10]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140016930
mov rax, qword [rbp + 0x28]
mov rax, qword [rax]
mov rcx, qword [rbp + 0x28]
call qword [rax + 0x10]
lea rcx, [rbp - 0x30]
lea rdx, [0x140028e50]
call fcn.140011771
mov rcx, qword [rbp + 0x228]
xor rcx, rbp
call fcn.14001123f
lea rsp, [rbp + 0x238]
pop rdi
pop rbp
ret