Function at 0x14005aec0
Capabilities:
Access firewall policy via inetfwpolicy2
Get geographical location
Get hostname

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov qword [r11 + 0x20], r12
push r13
push r14
push r15
sub rsp, 0xa50
mov rax, qword [0x1403486d0]
xor rax, rsp
mov qword [rsp + 0xa40], rax
xor r14d, r14d
mov dword [r11 - 0x9d8], r14d
mov qword [r11 - 0x980], r14
mov qword [r11 - 0x970], r14
mov qword [r11 - 0x968], 7
mov word [r11 - 0x980], r14w
lea r8d, [r14 + 0x37]
lea rdx, str._r_n_________________Machine_Information_________________
lea rcx, [r11 - 0x980]
call fcn.1400523d0
nop
mov rdx, qword [0x140375520]
cmp rdx, qword [0x140375528]
je 0x14005af73
movups xmm0, xmmword [rsp + 0xe8]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsp + 0xf8]
movups xmmword [rdx + 0x10], xmm1
lea edx, [r14 + 7]
mov word [rsp + 0xe8], r14w
add qword [0x140375520], 0x20
jmp 0x14005af8f
lea r8, [rsp + 0xe8]
lea rcx, [0x140375518]
call fcn.140058270
mov rdx, qword [rsp + 0x100]
cmp rdx, 8
jb 0x14005afd2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005afcd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005afcd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
lea rcx, [rsp + 0x168]
call fcn.1400c85d0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14005afea
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x210]
call fcn.1400c4060
nop
lea rcx, [rsp + 0x168]
call fcn.140052ad0
mov rax, qword [0x140375520]
cmp rax, qword [0x140375528]
je 0x14005b032
lea rdx, [rsp + 0x210]
mov rcx, rax
call fcn.1400591a0
add qword [0x140375520], 0x20
jmp 0x14005b049
lea r8, [rsp + 0x210]
mov rdx, rax
lea rcx, [0x140375518]
call fcn.140057f70
lea rcx, [rsp + 0x108]
call fcn.14005df90
nop
mov rdx, qword [0x140375520]
cmp rdx, qword [0x140375528]
je 0x14005b09a
mov qword [rdx], r14
mov qword [rdx + 0x10], r14
mov qword [rdx + 0x18], r14
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
add qword [0x140375520], 0x20
jmp 0x14005b0aa
mov r8, rax
lea rcx, [0x140375518]
call fcn.140058270
nop
lea rcx, [rsp + 0x108]
call fcn.140052120
xor edx, edx
mov r8d, 0x800
lea rcx, [rsp + 0x240]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x98], 0x400
lea r8, [rsp + 0x98]
lea rdx, [rsp + 0x240]
mov ecx, 3
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
lea r8, [rsp + 0x240]
lea rdx, str.Machine_Name:__s
lea rcx, [rsp + 0x108]
call fcn.1400c48a0
nop
mov rdx, qword [0x140375520]
cmp rdx, qword [0x140375528]
je 0x14005b165
mov qword [rdx], r14
mov qword [rdx + 0x10], r14
mov qword [rdx + 0x18], r14
movups xmm0, xmmword [rsp + 0x108]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsp + 0x118]
movups xmmword [rdx + 0x10], xmm1
movdqa xmm0, xmmword [0x140272430]
movdqu xmmword [rsp + 0x118], xmm0
mov word [rsp + 0x108], r14w
add qword [0x140375520], 0x20
jmp 0x14005b17a
lea r8, [rsp + 0x108]
lea rcx, [0x140375518]
call fcn.140058270
nop
lea rcx, [rsp + 0x108]
call fcn.140052120
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
mov rdi, rax
mov edx, 0x58
mov rcx, rax
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
mov esi, eax
mov edx, 0x5a
mov rcx, rdi
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
mov ebx, eax
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
imul ecx, ebx, 0x64
mov eax, 0x2aaaaaab
imul ecx
mov r9d, edx
sar r9d, 4
mov ecx, r9d
shr ecx, 0x1f
add r9d, ecx
imul ecx, esi, 0x64
mov eax, 0x2aaaaaab
imul ecx
sar edx, 4
mov r8d, edx
shr r8d, 0x1f
add r8d, edx
lea rdx, str.Font_Scaling:__d_____d__
lea rcx, [rsp + 0x108]
call fcn.1400c48a0
mov dword [rsp + 0x90], SafeArrayGetLBound
mov rdx, qword [0x140375520]
cmp rdx, qword [0x140375528]
je 0x14005b263
mov qword [rdx], r14
mov qword [rdx + 0x10], r14
mov qword [rdx + 0x18], r14
movups xmm0, xmmword [rsp + 0x108]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsp + 0x118]
movups xmmword [rdx + 0x10], xmm1
movdqa xmm0, xmmword [0x140272430]
movdqu xmmword [rsp + 0x118], xmm0
mov word [rsp + 0x108], r14w
add qword [0x140375520], 0x20
jmp 0x14005b278
lea r8, [rsp + 0x108]
lea rcx, [0x140375518]
call fcn.140058270
nop
lea rcx, [rsp + 0x108]
call fcn.140052120
mov byte [rsp + 0x34], 0
lea rdx, [rsp + 0x34]
lea rcx, [rsp + 0x188]
call fcn.1400cb100
nop
lea rax, str.Has_HDR
lea r9, str.No_HDR
cmp byte [rsp + 0x34], 0
cmovne r9, rax
lea r8, [rsp + 0x188]
cmp qword [rsp + 0x1a0], 8
cmovae r8, qword [rsp + 0x188]
lea rdx, str.VideoModes:__s___s
lea rcx, [rsp + 0x1a8]
call fcn.1400c48a0
nop
mov rax, qword [0x140375520]
cmp rax, qword [0x140375528]
je 0x14005b30d
lea rdx, [rsp + 0x1a8]
mov rcx, rax
call fcn.1400591a0
add qword [0x140375520], 0x20
jmp 0x14005b324
lea r8, [rsp + 0x1a8]
mov rdx, rax
lea rcx, [0x140375518]
call fcn.140057f70
lea rcx, [rsp + 0x168]
call fcn.14005e170
nop
mov rdx, qword [0x140375520]
cmp rdx, qword [0x140375528]
je 0x14005b375
mov qword [rdx], r14
mov qword [rdx + 0x10], r14
mov qword [rdx + 0x18], r14
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
add qword [0x140375520], 0x20
jmp 0x14005b385
mov r8, rax
lea rcx, [0x140375518]
call fcn.140058270
nop
lea rcx, [rsp + 0x168]
call fcn.140052120
lea rcx, [rsp + 0x168]
call fcn.14005eb80
nop
mov rdx, rax
lea rcx, [0x140375518]
call fcn.140062d70
nop
lea rcx, [rsp + 0x168]
call fcn.140052120
lea rcx, [rsp + 0x168]
call fcn.14005f4f0
nop
mov rdx, rax
lea rcx, [0x140375518]
call fcn.140062d70
nop
lea rcx, [rsp + 0x168]
call fcn.140052120
lea rdx, [0x140270b0c]
lea rcx, [rsp + 0x168]
call fcn.140059240
nop
lea rdx, [rsp + 0x168]
lea rcx, [0x140375518]
call fcn.140062d70
nop
lea rcx, [rsp + 0x168]
call fcn.140052120
call fcn.140061b30
lea rdx, [0x140270b0c]
lea rcx, [rsp + 0x168]
call fcn.140059240
nop
lea rdx, [rsp + 0x168]
lea rcx, [0x140375518]
call fcn.140062d70
nop
lea rcx, [rsp + 0x168]
call fcn.140052120
lea rcx, [rsp + 0xd8]
call fcn.14005e9a0
test eax, eax
js 0x14005c032
mov ecx, dword [0x140376e10]
mov rax, qword gs:[0x58]
mov edx, 4
mov rbx, qword [rax + rcx*8]
add rbx, rdx
mov eax, dword [rbx]
cmp dword [0x140375558], eax
jg 0x14005c618
mov eax, dword [rbx]
cmp dword [0x140375588], eax
jg 0x14005c74f
mov eax, dword [rbx]
cmp dword [0x1403755b8], eax
jg 0x14005c96d
mov eax, dword [rbx]
cmp dword [0x1403755e8], eax
jg 0x14005cace
mov eax, dword [rbx]
cmp dword [0x140375618], eax
jg 0x14005cbc6
mov eax, dword [rbx]
cmp dword [0x140375648], eax
jg 0x14005ccd3
mov eax, dword [rbx]
cmp dword [0x140375678], eax
jg 0x14005cdcb
mov eax, dword [rbx]
cmp dword [0x1403756a8], eax
jg 0x14005cec3
mov eax, dword [rbx]
cmp dword [0x1403756d8], eax
jg 0x14005cfe5
mov eax, dword [rbx]
cmp dword [0x140375708], eax
jg 0x14005d131
mov eax, dword [rbx]
cmp dword [0x140375738], eax
jg 0x14005d229
mov eax, dword [rbx]
cmp dword [0x140375768], eax
jg 0x14005d375
lea rdx, [0x140375530]
lea rcx, [rsp + 0x240]
call fcn.140059280
nop
lea rdx, [0x140375560]
lea rcx, [rsp + 0x268]
call fcn.140059280
nop
lea rdx, [0x140375590]
lea rcx, [rsp + 0x290]
call fcn.140059280
nop
lea rdx, [0x1403755c0]
lea rcx, [rsp + 0x2b8]
call fcn.140059280
nop
lea rdx, [0x1403755f0]
lea rcx, [rsp + 0x2e0]
call fcn.140059280
nop
lea rdx, [0x140375620]
lea rcx, [rsp + 0x308]
call fcn.140059280
nop
lea rdx, [0x140375650]
lea rcx, [rsp + 0x330]
call fcn.140059280
nop
lea rdx, [0x140375680]
lea rcx, [rsp + 0x358]
call fcn.140059280
nop
lea rdx, [0x1403756b0]
lea rcx, [rsp + 0x380]
call fcn.140059280
nop
lea rdx, [0x1403756e0]
lea rcx, [rsp + 0x3a8]
call fcn.140059280
nop
lea rdx, [0x140375710]
lea rcx, [rsp + 0x3d0]
call fcn.140059280
nop
lea rdx, [0x140375740]
lea rcx, [rsp + 0x3f8]
call fcn.140059280
nop
lea rax, [rsp + 0x240]
mov qword [rsp + 0x230], rax
lea rax, [rsp + 0x420]
mov qword [rsp + 0x238], rax
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0xc0]
call fcn.1400594b0
nop
lea r9, [fcn.140059900]
mov edx, 0x28
lea r8d, [rdx - 0x1c]
lea rcx, [rsp + 0x240]
call fcn.1400e71a0
mov r13, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0xc8]
mov qword [rsp + 0x98], rcx
movabs r12, 0x7ffffffffffffffe
mov qword [rsp + 0x60], r13
cmp r13, rcx
je 0x14005c023
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r14
mov qword [rsp + 0x80], r14
mov qword [rsp + 0x88], r14
lea rax, [rsp + 0x30]
mov qword [rsp + 0xb8], rax
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.1400e69ec
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x68]
mov qword [rax], rcx
mov qword [rax + 8], r14
mov qword [rsp + 0x68], rax
mov r8, qword [r13 + 0x18]
mov r15, qword [r13 + 0x20]
add r15, r8
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0xa8], r8
movaps xmm0, xmmword [rsp + 0xa0]
movdqa xmmword [rsp + 0x40], xmm0
lea rax, [rsp + 0x68]
mov qword [rsp + 0x230], rax
mov rdx, qword [rsp + 0x88]
cmp r8, r15
je 0x14005b803
mov rdi, qword [rsp + 0x48]
mov rcx, qword [r13 + 0x10]
dec rcx
and rcx, r8
mov rax, qword [r13 + 8]
mov rsi, qword [rax + rcx*8]
lea rax, [rdx + 1]
mov rcx, qword [rsp + 0x78]
cmp rcx, rax
ja 0x14005b78d
mov edx, 1
lea rcx, [rsp + 0x68]
call fcn.140061e60
mov rdx, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x78]
dec rcx
mov rax, qword [rsp + 0x80]
and rax, rcx
mov qword [rsp + 0x80], rax
add rax, rdx
and rcx, rax
lea rbx, [rcx*8]
mov rcx, qword [rsp + 0x70]
cmp qword [rbx + rcx], 0
jne 0x14005b7d5
mov ecx, 0x20
call fcn.1400e69ec
mov rcx, qword [rsp + 0x70]
mov qword [rbx + rcx], rax
mov rcx, qword [rsp + 0x70]
mov rdx, rsi
mov rcx, qword [rbx + rcx]
call fcn.1400591a0
mov rdx, qword [rsp + 0x88]
inc rdx
mov qword [rsp + 0x88], rdx
inc rdi
mov r8, rdi
cmp rdi, r15
jne 0x14005b751
mov qword [rsp + 0xb0], r14
test rdx, rdx
je 0x14005bff4
mov rcx, qword [rsp + 0x78]
lea rax, [rcx - 1]
mov rdx, qword [rsp + 0x80]
and rax, rdx
mov r8, qword [rsp + 0x70]
mov rdi, qword [r8 + rax*8]
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0xf8], r14
mov qword [rsp + 0x100], r14
mov rsi, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 8
jb 0x14005b857
mov rdi, qword [rdi]
cmp rsi, 8
jae 0x14005b876
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0xe8], xmm0
mov qword [rsp + 0x100], 7
jmp 0x14005b8ca
mov rbx, rsi
or rbx, 7
cmp rbx, r12
cmova rbx, r12
lea rdx, [rbx + 1]
lea rcx, [rsp + 0xe8]
call fcn.1400521e0
mov qword [rsp + 0xe8], rax
lea r8, [rsi*2 + 2]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x100], rbx
mov rdx, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x78]
mov r8, qword [rsp + 0x70]
mov qword [rsp + 0xf8], rsi
dec rcx
and rcx, rdx
mov rcx, qword [r8 + rcx*8]
call fcn.140052120
sub qword [rsp + 0x88], 1
jne 0x14005b8f6
mov qword [rsp + 0x80], r14
jmp 0x14005b8fe
inc qword [rsp + 0x80]
lea r8, [rsp + 0xe8]
cmp qword [rsp + 0x100], 8
cmovae r8, qword [rsp + 0xe8]
lea rdx, str.__________________s_________________
lea rcx, [rsp + 0x108]
call fcn.1400c48a0
nop
mov rdx, qword [0x140375520]
cmp rdx, qword [0x140375528]
je 0x14005b970
mov qword [rdx], r14
mov qword [rdx + 0x10], r14
mov qword [rdx + 0x18], r14
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
add qword [0x140375520], 0x20
jmp 0x14005b980
mov r8, rax
lea rcx, [0x140375518]
call fcn.140058270
nop
mov r8, qword [rsp + 0x120]
cmp r8, 8
jb 0x14005b9a6
inc r8
mov rdx, qword [rsp + 0x108]
lea rcx, [rsp + 0x108]
call fcn.1400627f0
cmp qword [rsp + 0x88], 0
jne 0x14005b9da
lea rcx, [rsp + 0xe8]
call fcn.140052120
nop
lea rcx, [rsp + 0x68]
call fcn.140059900
add r13, 0x28
mov rcx, qword [rsp + 0x98]
jmp 0x14005b6a9
lea rcx, [rsp + 0x68]
call fcn.140062830
mov rdx, rax
lea rcx, [rsp + 0x168]
call fcn.1400591a0
nop
lea rcx, [rsp + 0x68]
call fcn.140062bd0
nop
lea r9, [rsp + 0x68]
lea r8, [rsp + 0x168]
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x40]
call fcn.140061280
nop
mov rbx, qword [rsp + 0x40]
mov r13, rbx
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x230], rax
cmp r13, rax
je 0x14005be00
mov rdx, r13
lea rcx, [rsp + 0x1d0]
call fcn.1400591a0
nop
lea rdx, [r13 + 0x20]
lea rcx, [rsp + 0x1f0]
call fcn.1400591a0
nop
mov qword [rsp + 0x128], r14
mov qword [rsp + 0x138], r14
mov qword [rsp + 0x140], r14
mov rdi, qword [rsp + 0x1e0]
lea rsi, [rsp + 0x1d0]
cmp qword [rsp + 0x1e8], 8
cmovae rsi, qword [rsp + 0x1d0]
cmp rdi, 8
jae 0x14005bab3
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x128], xmm0
mov ebx, 7
jmp 0x14005baed
mov rbx, rdi
or rbx, 7
cmp rbx, r12
cmova rbx, r12
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x128]
call fcn.1400521e0
mov qword [rsp + 0x128], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x140], rbx
mov qword [rsp + 0x138], rdi
mov qword [rsp + 0x148], r14
mov qword [rsp + 0x158], r14
mov qword [rsp + 0x160], r14
mov rsi, qword [rsp + 0x200]
lea r15, [rsp + 0x1f0]
cmp qword [rsp + 0x208], 8
cmovae r15, qword [rsp + 0x1f0]
cmp rsi, 8
jae 0x14005bb50
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x148], xmm0
mov edi, 7
jmp 0x14005bb92
mov rdi, rsi
or rdi, 7
cmp rdi, r12
cmova rdi, r12
lea rdx, [rdi + 1]
lea rcx, [rsp + 0x148]
call fcn.1400521e0
mov qword [rsp + 0x148], rax
lea r8, [rsi*2 + 2]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rbx, qword [rsp + 0x140]
mov qword [rsp + 0x160], rdi
mov qword [rsp + 0x158], rsi
lea r9, [rsp + 0x148]
cmp rdi, 8
cmovae r9, qword [rsp + 0x148]
lea r8, [rsp + 0x128]
cmp rbx, 8
cmovae r8, qword [rsp + 0x128]
lea rdx, str.__30s:__s
lea rcx, [rsp + 0x108]
call fcn.1400c48a0
nop
cmp qword [rsp + 0x138], 0
jne 0x14005bc72
lea r9, [rsp + 0x148]
cmp qword [rsp + 0x160], 8
cmovae r9, qword [rsp + 0x148]
mov rcx, qword [rsp + 0x158]
cmp rcx, 1
jne 0x14005bc72
lea r10, [0x140270fe8]
mov rax, r10
test rcx, rcx
je 0x14005bc5e
movzx edx, word [r9]
mov r8d, 0x3f
cmp dx, r8w
jb 0x14005bc72
sub r9, r10
cmp dx, r8w
ja 0x14005bc72
cmp rcx, 1
je 0x14005bc5e
dec rcx
add rax, 2
movzx edx, word [r9 + rax]
movzx r8d, word [rax]
cmp dx, r8w
jae 0x14005bc3e
jmp 0x14005bc72
lea rdx, [0x140270b0c]
lea rcx, [rsp + 0x108]
call fcn.140059b60
mov rax, qword [0x140375520]
cmp rax, qword [0x140375528]
je 0x14005bc9c
lea rdx, [rsp + 0x108]
mov rcx, rax
call fcn.1400591a0
add qword [0x140375520], 0x20
jmp 0x14005bcb4
lea r8, [rsp + 0x108]
mov rdx, rax
lea rcx, [0x140375518]
call fcn.140057f70
nop
mov rdx, qword [rsp + 0x120]
cmp rdx, 8
jb 0x14005bcff
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005bcfa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005bcfa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
mov qword [rsp + 0x118], r14
mov qword [rsp + 0x120], 7
mov word [rsp + 0x108], r14w
mov rdx, qword [rsp + 0x160]
cmp rdx, 8
jb 0x14005bd67
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005bd62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005bd62
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
mov qword [rsp + 0x158], r14
mov qword [rsp + 0x160], 7
mov word [rsp + 0x148], r14w
mov rdx, qword [rsp + 0x140]
cmp rdx, 8
jb 0x14005bdd0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005bdca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005bdca
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
nop
lea rcx, [rsp + 0x1f0]
call fcn.140052120
lea rcx, [rsp + 0x1d0]
call fcn.140052120
add r13, 0x40
mov rbx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x230]
jmp 0x14005ba35
test rbx, rbx
je 0x14005be6c
mov rdi, qword [rsp + 0x48]
cmp rbx, rdi
je 0x14005be2f
nop
lea rcx, [rbx + 0x20]
call fcn.140052120
mov rcx, rbx
call fcn.140052120
add rbx, 0x40
cmp rbx, rdi
jne 0x14005be10
mov rbx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x50]
sub rdx, rbx
and rdx, 0xffffffffffffffc0
mov rax, rbx
cmp rdx, 0x1000
jb 0x14005be63
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005be63
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400e6a28
nop
jmp 0x14005be7b
mov r13, qword [rsp + 0x60]
mov qword [rsp + 0x128], r14
mov qword [rsp + 0x138], r14
mov qword [rsp + 0x140], 7
mov word [rsp + 0x128], r14w
xor r8d, r8d
lea rdx, [0x140270b0c]
lea rcx, [rsp + 0x128]
call fcn.1400523d0
nop
mov rdx, qword [0x140375520]
cmp rdx, qword [0x140375528]
je 0x14005befc
movups xmm0, xmmword [rsp + 0x128]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsp + 0x138]
movups xmmword [rdx + 0x10], xmm1
mov edx, 7
mov word [rsp + 0x128], r14w
add qword [0x140375520], 0x20
jmp 0x14005bf18
lea r8, [rsp + 0x128]
lea rcx, [0x140375518]
call fcn.140058270
mov rdx, qword [rsp + 0x140]
cmp rdx, 8
jb 0x14005bf5c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005bf56
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005bf56
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
nop
mov rdx, qword [rsp + 0x180]
cmp rdx, 8
jb 0x14005bfa8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005bfa2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005bfa2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
nop
mov rdx, qword [rsp + 0x100]
cmp rdx, 8
jb 0x14005bff4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005bfee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005bfee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
nop
lea rcx, [rsp + 0x68]
call fcn.140062210
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x68], r14
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.1400e6a28
add r13, 0x28
mov rcx, qword [rsp + 0x98]
jmp 0x14005b6a9
lea rcx, [rsp + 0xc0]
call fcn.1400623b0
jmp 0x14005c069
lea rdx, str.WMI_Init_failed
lea rcx, [rsp + 0x168]
call fcn.140059240
nop
lea rdx, [rsp + 0x168]
lea rcx, [0x140375518]
call fcn.140062d70
nop
lea rcx, [rsp + 0x168]
call fcn.140052120
lea rcx, [rsp + 0x40]
call fcn.14005f100
nop
movzx ecx, byte [rsp + 0x30]
mov byte [rsp + 0x20], cl
mov r9, qword [rax + 8]
mov r8, qword [rax]
mov rdx, qword [0x140375520]
lea rcx, [0x140375518]
call fcn.1400583b0
nop
mov rbx, qword [rsp + 0x40]
test rbx, rbx
je 0x14005c102
mov rdi, qword [rsp + 0x48]
cmp rbx, rdi
je 0x14005c0c6
nop dword [rax]
mov rcx, rbx
call fcn.140052120
add rbx, 0x20
cmp rbx, rdi
jne 0x14005c0b0
mov rbx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x50]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x14005c0fa
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c0fa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400e6a28
lea rcx, [rsp + 0x40]
call fcn.14005a480
nop
movzx ecx, byte [rsp + 0x30]
mov byte [rsp + 0x20], cl
mov r9, qword [rax + 8]
mov r8, qword [rax]
mov rdx, qword [0x140375520]
lea rcx, [0x140375518]
call fcn.1400583b0
nop
mov rbx, qword [rsp + 0x40]
test rbx, rbx
je 0x14005c197
mov rdi, qword [rsp + 0x48]
cmp rbx, rdi
je 0x14005c15b
mov rcx, rbx
call fcn.140052120
add rbx, 0x20
cmp rbx, rdi
jne 0x14005c145
mov rbx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x50]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x14005c18f
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c18f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400e6a28
lea rcx, [rsp + 0x40]
call fcn.14005fd30
nop
movzx ecx, byte [rsp + 0x30]
mov byte [rsp + 0x20], cl
mov r9, qword [rax + 8]
mov r8, qword [rax]
mov rdx, qword [0x140375520]
lea rcx, [0x140375518]
call fcn.1400583b0
nop
mov rbx, qword [rsp + 0x40]
test rbx, rbx
je 0x14005c232
mov rdi, qword [rsp + 0x48]
cmp rbx, rdi
je 0x14005c1f6
nop word [rax + rax]
mov rcx, rbx
call fcn.140052120
add rbx, 0x20
cmp rbx, rdi
jne 0x14005c1e0
mov rbx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x50]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x14005c22a
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c22a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400e6a28
lea rcx, [rsp + 0x40]
call fcn.14005f6d0
nop
movzx ecx, byte [rsp + 0x30]
mov byte [rsp + 0x20], cl
mov r9, qword [rax + 8]
mov r8, qword [rax]
mov rdx, qword [0x140375520]
lea rcx, [0x140375518]
call fcn.1400583b0
nop
mov rbx, qword [rsp + 0x40]
test rbx, rbx
je 0x14005c2c8
mov rdi, qword [rsp + 0x48]
cmp rbx, rdi
je 0x14005c28b
mov rcx, rbx
call fcn.140052120
add rbx, 0x20
cmp rbx, rdi
jne 0x14005c275
mov rbx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x50]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x14005c2bf
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c2bf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400e6a28
nop
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0xf8], r14
mov qword [rsp + 0x100], 7
mov word [rsp + 0xe8], r14w
or dword [rsp + 0x90], 1
mov dword [rsp + 0x98], r14d
mov qword [rsp + 0x60], r14
xor r15b, r15b
mov dword [rsp + 0x230], 1
mov dword [rsp + 0x234], 2
mov dword [rsp + 0x238], 4
xor sil, sil
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
lea r9, [0x1402714b8]
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [0x1402714a8]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x14005c361
mov edx, eax
lea rcx, str.CoCreateInstance_for_INetFwPolicy2_failed:_0x_08lx_r_n
call fcn.1400634f0
jmp 0x14005c3ce
mov r15b, 1
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
lea rdx, [rsp + 0x98]
call qword [rax + 0x38]
test eax, eax
js 0x14005c3ce
mov ebx, r14d
lea rdi, [rsp + 0x230]
nop word [rax + rax]
mov edx, dword [rdi]
test dword [rsp + 0x98], edx
je 0x14005c3bd
mov word [rsp + 0x30], r14w
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
lea r8, [rsp + 0x30]
call qword [rax + 0x40]
test eax, eax
js 0x14005c3bd
cmp word [rsp + 0x30], 0xffff
je 0x14005c3ca
inc ebx
add rdi, 4
cmp ebx, 3
jge 0x14005c3ce
jmp 0x14005c390
movzx esi, r15b
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x14005c3de
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
test r15b, r15b
je 0x14005c42c
mov r8, 0xffffffffffffffff
test sil, sil
je 0x14005c40d
mov rdx, qword [str.p_n_]
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14005c400
jmp 0x14005c41f
mov rdx, qword [str.Windows_Firewall_is_off.]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14005c414
lea rcx, [rsp + 0xe8]
call fcn.140052250
mov rdx, qword [0x140375520]
cmp rdx, qword [0x140375528]
je 0x14005c46b
movups xmm0, xmmword [rsp + 0xe8]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsp + 0xf8]
movups xmmword [rdx + 0x10], xmm1
mov edx, 7
mov word [rsp + 0xe8], r14w
add qword [0x140375520], 0x20
jmp 0x14005c487
lea r8, [rsp + 0xe8]
lea rcx, [0x140375518]
call fcn.140058270
mov rdx, qword [rsp + 0x100]
cmp rdx, 8
jb 0x14005c4cb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c4c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c4c5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
nop
mov rdx, qword [rsp + 0x1c0]
cmp rdx, 8
jb 0x14005c516
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c511
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c511
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
mov qword [rsp + 0x1b8], r14
mov qword [rsp + 0x1c0], 7
mov word [rsp + 0x1a8], r14w
mov rdx, qword [rsp + 0x1a0]
cmp rdx, 8
jb 0x14005c57e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c579
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c579
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
mov qword [rsp + 0x198], r14
mov qword [rsp + 0x1a0], 7
mov word [rsp + 0x188], r14w
mov rdx, qword [rsp + 0x228]
cmp rdx, 8
jb 0x14005c5e6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c5e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c5e1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e6a28
mov rcx, qword [rsp + 0xa40]
xor rcx, rsp
call fcn.1400e6b50
lea r11, [rsp + 0xa50]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
lea rcx, [0x140375558]
call fcn.1400e73f8
cmp dword [0x140375558], 0xffffffff
jne 0x14005b499
lea rdx, str.Computer
lea rcx, [rsp + 0x240]
call fcn.140059240
nop
lea rdx, str.Win32_ComputerSystem
lea rcx, [rsp + 0x260]
call fcn.140059240
nop
lea rdx, str.Manufacturer
lea rcx, [rsp + 0x280]
call fcn.140059240
nop
lea rdx, str.Model
lea rcx, [rsp + 0x2a0]
call fcn.140059240
nop
lea rdx, str.TotalPhysicalMemory_B_
lea rcx, [rsp + 0x2c0]
call fcn.140059240
nop
lea rdx, str.NumberOfProcessors
lea rcx, [rsp + 0x2e0]
call fcn.140059240
nop
lea rdx, str.NumberOfLogicalProcessors
lea rcx, [rsp + 0x300]
call fcn.140059240
nop
lea rdx, str.CurrentTimeZone
lea rcx, [rsp + 0x320]
call fcn.140059240
nop
lea rax, [rsp + 0x240]
mov qword [rsp + 0x230], rax
lea rax, [rsp + 0x340]
mov qword [rsp + 0x238], rax
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x230]
lea rcx, [0x140375530]
call fcn.1400593c0
nop
lea r9, [fcn.1400517b0]
mov edx, 0x20
lea r8d, [rdx - 0x18]
lea rcx, [rsp + 0x240]
call fcn.1400e71a0
lea rcx, [0x1402677a0]
call fcn.1400e7188
nop
lea rcx, [0x140375558]
call fcn.1400e7398
nop
jmp 0x14005b499
lea rcx, [0x140375588]
call fcn.1400e73f8
cmp dword [0x140375588], 0xffffffff
jne 0x14005b4a7
lea rdx, str.Operating_System
lea rcx, [rsp + 0x240]
call fcn.140059240
nop
lea rdx, str.Win32_OperatingSystem
lea rcx, [rsp + 0x260]
call fcn.140059240
nop
lea rdx, str.Caption
lea rcx, [rsp + 0x280]
call fcn.140059240
nop
lea rdx, str.CSDVersion
lea rcx, [rsp + 0x2a0]
call fcn.140059240
nop
lea rdx, str.OSType
lea rcx, [rsp + 0x2c0]
call fcn.140059240
nop
lea rdx, str.OSArchitecture
lea rcx, [rsp + 0x2e0]
call fcn.140059240
nop
lea rdx, str.OSLanguage
lea rcx, [rsp + 0x300]
call fcn.140059240
nop
lea rdx, [0x140271968]
lea rcx, [rsp + 0x320]
call fcn.140059240
nop
lea rdx, str.BuildNumber
lea rcx, [rsp + 0x340]
call fcn.140059240
nop
lea rdx, str.OperatingSystemSKU
lea rcx, [rsp + 0x360]
call fcn.140059240
nop
lea rdx, str.InstallDate
lea rcx, [rsp + 0x380]
call fcn.140059240
nop
lea rdx, str.LastBootUpTime
lea rcx, [rsp + 0x3a0]
call fcn.140059240
nop
lea rdx, str.CurrentTimeZone
lea rcx, [rsp + 0x3c0]
call fcn.140059240
nop
lea rdx, str.Locale
lea rcx, [rsp + 0x3e0]
call fcn.140059240
nop
lea rdx, str.CountryCode
lea rcx, [rsp + 0x400]
call fcn.140059240
nop
lea rdx, str.MaxProcessMemorySize_KB_
lea rcx, [rsp + 0x420]
call fcn.140059240
nop
lea rdx, str.FreePhysicalMemory_KB_
lea rcx, [rsp + 0x440]
call fcn.140059240
nop
lea rdx, str.FreeVirtualMemory_KB_
lea rcx, [rsp + 0x460]
call fcn.140059240
nop
lea rdx, str.TotalVisibleMemorySize_KB_
lea rcx, [rsp + 0x480]
call fcn.140059240
nop
lea rax, [rsp + 0x240]
mov qword [rsp + 0x230], rax
lea rax, [rsp + 0x4a0]
mov qword [rsp + 0x238], rax
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x230]
lea rcx, [0x140375560]
call fcn.1400593c0
nop
lea r9, [fcn.1400517b0]
mov edx, 0x20
lea r8d, [rdx - 0xd]
lea rcx, [rsp + 0x240]
call fcn.1400e71a0
lea rcx, [0x140267930]
call fcn.1400e7188
nop
lea rcx, [0x140375588]
call fcn.1400e7398
nop
jmp 0x14005b4a7
lea rcx, [0x1403755b8]
call fcn.1400e73f8
cmp dword [0x1403755b8], 0xffffffff
jne 0x14005b4b5
lea rdx, str.Processor
lea rcx, [rsp + 0x240]
call fcn.140059240
nop
lea rdx, str.Win32_Processor
lea rcx, [rsp + 0x260]
call fcn.140059240
nop
lea rdx, str.Name
lea rcx, [rsp + 0x280]
call fcn.140059240
nop
lea rdx, str.NumberOfCores
lea rcx, [rsp + 0x2a0]
call fcn.140059240
nop
lea rdx, str.CurrentClockSpeed_MHz_
lea rcx, [rsp + 0x2c0]
call fcn.140059240
nop
lea rdx, str.MaxClockSpeed_MHz_
lea rcx, [rsp + 0x2e0]
call fcn.140059240
nop
lea rdx, str.L2CacheSize
lea rcx, [rsp + 0x300]
call fcn.140059240
nop
lea rdx, str.L2CacheSpeed_MHz_
lea rcx, [rsp + 0x320]
call fcn.140059240
nop
lea rdx, str.L3CacheSize
lea rcx, [rsp + 0x340]
call fcn.140059240
nop
lea rdx, str.L3CacheSpeed_MHz_
lea rcx, [rsp + 0x360]
call fcn.140059240
nop
lea rax, [rsp + 0x240]
mov qword [rsp + 0x230], rax
lea rax, [rsp + 0x380]
mov qword [rsp + 0x238], rax
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x230]
lea rcx, [0x140375590]
call fcn.1400593c0
nop
lea r9, [fcn.1400517b0]
mov edx, 0x20
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x240]
call fcn.1400e71a0
lea rcx, [0x140267990]
call fcn.1400e7188
nop
lea rcx, [0x1403755b8]
call fcn.1400e7398
nop
jmp 0x14005b4b5
lea rcx, [0x1403755e8]
call fcn.1400e73f8
cmp dword [0x1403755e8], 0xffffffff
jne 0x14005b4c3
lea rdx, str.Motherboard
lea rcx, [rsp + 0x240]
call fcn.140059240
nop
lea rdx, str.Win32_BaseBoard
lea rcx, [rsp + 0x260]
call fcn.140059240
nop
lea rdx, str.Manufacturer
lea rcx, [rsp + 0x280]
call fcn.140059240
nop
lea rdx, str.Product
lea rcx, [rsp + 0x2a0]
call fcn.140059240
nop
lea rdx, [0x140271968]
lea rcx, [rsp + 0x2c0]
call fcn.140059240
nop
lea rax, [rsp + 0x240]
mov qword [rsp + 0x230], rax
lea rax, [rsp + 0x2e0]
mov qword [rsp + 0x238], rax
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x230]
lea rcx, [0x1403755c0]
call fcn.1400593c0
nop
lea r9, [fcn.1400517b0]
mov edx, 0x20
lea r8d, [rdx - 0x1b]
lea rcx, [rsp + 0x240]
call fcn.1400e71a0
lea rcx, [0x140267770]
call fcn.1400e7188
nop
lea rcx, [0x1403755e8]
call fcn.1400e7398
nop
jmp 0x14005b4c3
lea rcx, [0x140375618]
call fcn.1400e73f8
cmp dword [0x140375618], 0xffffffff
jne 0x14005b4d1
lea rdx, str.Memory
lea rcx, [rsp + 0x240]
call fcn.140059240
nop
lea rdx, str.Win32_PhysicalMemory
lea rcx, [rsp + 0x260]
call fcn.140059240
nop
lea rdx, str.BankLabel
lea rcx, [rsp + 0x280]
call fcn.140059240
nop
lea rdx, str.DeviceLocator
lea rcx, [rsp + 0x2a0]
call fcn.140059240
nop
lea rdx, str.Capacity_B_
lea rcx, [rsp + 0x2c0]
call fcn.140059240
nop
lea rdx, str.Speed_MHz_
lea rcx, [rsp + 0x2e0]
call fcn.140059240
nop
lea rax, [rsp + 0x240]
mov qword [rsp + 0x230], rax
lea rax, [rsp + 0x300]
mov qword [rsp + 0x238], rax
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x230]
lea rcx, [0x1403755f0]
call fcn.1400593c0
nop
lea r9, [fcn.1400517b0]
mov edx, 0x20
lea r8d, [rdx - 0x1a]
lea rcx, [rsp + 0x240]
call fcn.1400e71a0
lea rcx, [0x140267900]
call fcn.1400e7188
nop
lea rcx, [0x140375618]
call fcn.1400e7398
nop
jmp 0x14005b4d1
lea rcx, [0x140375648]
call fcn.1400e73f8
cmp dword [0x140375648], 0xffffffff
jne 0x14005b4df
lea rdx, str.Page_File
lea rcx, [rsp + 0x240]
call fcn.140059240
nop
lea rdx, str.Win32_PageFileUsage
lea rcx, [rsp + 0x260]
call fcn.140059240
nop
lea rdx, str.AllocatedBaseSize_MB_
lea rcx, [rsp + 0x280]
call fcn.140059240
nop
lea rdx, str.PeakUsage_MB_
lea rcx, [rsp + 0x2a0]
call fcn.140059240
nop
lea rdx, str.CurrentUsage_MB_
lea rcx, [rsp + 0x2c0]
call fcn.140059240
nop
lea rax, [rsp + 0x240]
mov qword [rsp + 0x230], rax
lea rax, [rsp + 0x2e0]
mov qword [rsp + 0x238], rax
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x230]
lea rcx, [0x140375620]
call fcn.1400593c0
nop
lea r9, [fcn.1400517b0]
mov edx, 0x20
lea r8d, [rdx - 0x1b]
lea rcx, [rsp + 0x240]
call fcn.1400e71a0
lea rcx, [0x140267960]
call fcn.1400e7188
nop
lea rcx, [0x140375648]
call fcn.1400e7398
nop
jmp 0x14005b4df
lea rcx, [0x140375678]
call fcn.1400e73f8
cmp dword [0x140375678], 0xffffffff
jne 0x14005b4ed
lea rdx, str.DiskDrive
lea rcx, [rsp + 0x240]
call fcn.140059240
nop
lea rdx, str.Win32_DiskDrive
lea rcx, [rsp + 0x260]
call fcn.140059240
nop
lea rdx, str.Caption
lea rcx, [rsp + 0x280]
call fcn.140059240
nop
lea rdx, str.Model
lea rcx, [rsp + 0x2a0]
call fcn.140059240
nop
lea rdx, str.Size_B_
lea rcx, [rsp + 0x2c0]
call fcn.140059240
nop
lea rax, [rsp + 0x240]
mov qword [rsp + 0x230], rax
lea rax, [rsp + 0x2e0]
mov qword [rsp + 0x238], rax
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x230]
lea rcx, [0x140375650]
call fcn.1400593c0
nop
lea r9, [fcn.1400517b0]
mov edx, 0x20
lea r8d, [rdx - 0x1b]
lea rcx, [rsp + 0x240]
call fcn.1400e71a0
lea rcx, [0x1402677d0]
call fcn.1400e7188
nop
lea rcx, [0x140375678]
call fcn.1400e7398
nop
jmp 0x14005b4ed
lea rcx, [0x1403756a8]
call fcn.1400e73f8
cmp dword [0x1403756a8], 0xffffffff
jne 0x14005b4fb
lea rdx, str.Video
lea rcx, [rsp + 0x240]
call fcn.140059240
nop
lea rdx, str.Win32_VideoController
lea rcx, [rsp + 0x260]
call fcn.140059240
nop
lea rdx, str.Name
lea rcx, [rsp + 0x280]
call fcn.140059240
nop
lea rdx, str.AdapterRAM_B_
lea rcx, [rsp + 0x2a0]
call fcn.140059240
nop
lea rdx, [0x140271e78]
lea rcx, [rsp + 0x2c0]
call fcn.140059240
nop
lea rdx, str.VideoModeDescription
lea rcx, [rsp + 0x2e0]
call fcn.140059240
nop
lea rdx, str.CurrentBitsPerPixel
lea rcx, [rsp + 0x300]
call fcn.140059240
nop
lea rax, [rsp + 0x240]
mov qword [rsp + 0x230], rax
lea rax, [rsp + 0x320]
mov qword [rsp + 0x238], rax
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x230]
lea rcx, [0x140375680]
call fcn.1400593c0
nop
lea r9, [fcn.1400517b0]
mov edx, 0x20
lea r8d, [rdx - 0x19]
lea rcx, [rsp + 0x240]
call fcn.1400e71a0
lea rcx, [0x140267a20]
call fcn.1400e7188
nop
lea rcx, [0x1403756a8]
call fcn.1400e7398
nop
jmp 0x14005b4fb
lea rcx, [0x1403756d8]
call fcn.1400e73f8
cmp dword [0x1403756d8], 0xffffffff
jne 0x14005b509
lea rdx, str.Display
lea rcx, [rsp + 0x240]
call fcn.140059240
nop
lea rdx, str.Win32_DesktopMonitor
lea rcx, [rsp + 0x260]
call fcn.140059240
nop
lea rdx, str.Caption
lea rcx, [rsp + 0x280]
call fcn.140059240
nop
lea rdx, str.MonitorManufacturer
lea rcx, [rsp + 0x2a0]
call fcn.140059240
nop
lea rdx, str.Name
lea rcx, [rsp + 0x2c0]
call fcn.140059240
nop
lea rdx, str.ScreenWidth
lea rcx, [rsp + 0x2e0]
call fcn.140059240
nop
lea rdx, str.ScreenHeight
lea rcx, [rsp + 0x300]
call fcn.140059240
nop
lea rdx, str.PixelsPerXLogicalInch
lea rcx, [rsp + 0x320]
call fcn.140059240
nop
lea rdx, str.PixelsPerYLogicalInch
lea rcx, [rsp + 0x340]
call fcn.140059240
nop
lea rax, [rsp + 0x240]
mov qword [rsp + 0x230], rax
lea rax, [rsp + 0x360]
mov qword [rsp + 0x238], rax
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x230]
lea rcx, [0x1403756b0]
call fcn.1400593c0
nop
lea r9, [fcn.1400517b0]
mov edx, 0x20
lea r8d, [rdx - 0x17]
lea rcx, [rsp + 0x240]
call fcn.1400e71a0
lea rcx, [0x140267800]
call fcn.1400e7188
nop
lea rcx, [0x1403756d8]
call fcn.1400e7398
nop
jmp 0x14005b509
lea rcx, [0x140375708]
call fcn.1400e73f8
cmp dword [0x140375708], 0xffffffff
jne 0x14005b517
lea rdx, str.Input
lea rcx, [rsp + 0x240]
call fcn.140059240
nop
lea rdx, str.Win32_PointingDevice
lea rcx, [rsp + 0x260]
call fcn.140059240
nop
lea rdx, str.Name
lea rcx, [rsp + 0x280]
call fcn.140059240
nop
lea rdx, str.NumberOfButtons
lea rcx, [rsp + 0x2a0]
call fcn.140059240
nop
lea rdx, str.PointingType
lea rcx, [rsp + 0x2c0]
call fcn.140059240
nop
lea rax, [rsp + 0x240]
mov qword [rsp + 0x230], rax
lea rax, [rsp + 0x2e0]
mov qword [rsp + 0x238], rax
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x230]
lea rcx, [0x1403756e0]
call fcn.1400593c0
nop
lea r9, [fcn.1400517b0]
mov edx, 0x20
lea r8d, [rdx - 0x1b]
lea rcx, [rsp + 0x240]
call fcn.1400e71a0
lea rcx, [0x1402678d0]
call fcn.1400e7188
nop
lea rcx, [0x140375708]
call fcn.1400e7398
nop
jmp 0x14005b517
lea rcx, [0x140375738]
call fcn.1400e73f8
cmp dword [0x140375738], 0xffffffff
jne 0x14005b525
lea rdx, str.Time_Zone
lea rcx, [rsp + 0x240]
call fcn.140059240
nop
lea rdx, str.Win32_TimeZone
lea rcx, [rsp + 0x260]
call fcn.140059240
nop
lea rdx, str.Caption
lea rcx, [rsp + 0x280]
call fcn.140059240
nop
lea rdx, str.Description
lea rcx, [rsp + 0x2a0]
call fcn.140059240
nop
lea rdx, str.Bias
lea rcx, [rsp + 0x2c0]
call fcn.140059240
nop
lea rdx, str.StandardName
lea rcx, [rsp + 0x2e0]
call fcn.140059240
nop
lea rdx, str.StandardBias
lea rcx, [rsp + 0x300]
call fcn.140059240
nop
lea rdx, str.DaylightName
lea rcx, [rsp + 0x320]
call fcn.140059240
nop
lea rdx, str.DaylightBias
lea rcx, [rsp + 0x340]
call fcn.140059240
nop
lea rax, [rsp + 0x240]
mov qword [rsp + 0x230], rax
lea rax, [rsp + 0x360]
mov qword [rsp + 0x238], rax
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x230]
lea rcx, [0x140375710]
call fcn.1400593c0
nop
lea r9, [fcn.1400517b0]
mov edx, 0x20
lea r8d, [rdx - 0x17]
lea rcx, [rsp + 0x240]
call fcn.1400e71a0
lea rcx, [0x1402679f0]
call fcn.1400e7188
nop
lea rcx, [0x140375738]
call fcn.1400e7398
nop
jmp 0x14005b525
lea rcx, [0x140375768]
call fcn.1400e73f8
cmp dword [0x140375768], 0xffffffff
jne 0x14005b533
lea rdx, str.Processes
lea rcx, [rsp + 0x240]
call fcn.140059240
nop
lea rdx, str.Win32_Process_where__ExecutablePath_LIKE___Apple___
lea rcx, [rsp + 0x260]
call fcn.140059240
nop
lea rdx, str.Caption
lea rcx, [rsp + 0x280]
call fcn.140059240
nop
lea rdx, str.WorkingSetSize_B_
lea rcx, [rsp + 0x2a0]
call fcn.140059240
nop
lea rdx, str.PeakWorkingSetSize_KB_
lea rcx, [rsp + 0x2c0]
call fcn.140059240
nop
lea rdx, str.VirtualSize_B_
lea rcx, [rsp + 0x2e0]
call fcn.140059240
nop
lea rdx, str.PageFaults
lea rcx, [rsp + 0x300]
call fcn.140059240
nop
lea rdx, str.ThreadCount
lea rcx, [rsp + 0x320]
call fcn.140059240
nop
lea rdx, str.HandleCount
lea rcx, [rsp + 0x340]
call fcn.140059240
nop
lea rdx, str.ReadTransferCount
lea rcx, [rsp + 0x360]
call fcn.140059240
nop
lea rdx, str.WriteTransferCount
lea rcx, [rsp + 0x380]
call fcn.140059240
nop
lea rdx, [0x140270b0c]
lea rcx, [rsp + 0x3a0]
call fcn.140059240
nop
lea rax, [rsp + 0x240]
mov qword [rsp + 0x230], rax
lea rax, [rsp + 0x3c0]
mov qword [rsp + 0x238], rax
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x230]
lea rcx, [0x140375740]
call fcn.1400593c0
nop
lea r9, [fcn.1400517b0]
mov edx, 0x20
lea r8d, [rdx - 0x14]
lea rcx, [rsp + 0x240]
call fcn.1400e71a0
lea rcx, [0x1402679c0]
call fcn.1400e7188
nop
lea rcx, [0x140375768]
call fcn.1400e7398
nop
jmp 0x14005b533