Function at 0x1400086a0
Capabilities:
Check os version
Get hostname
Get system information on windows
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x948
xor edx, edx
mov r8d, 0x3f8
mov qword [rsp + 0x140], 0
mov rbx, rcx
lea rcx, [rsp + 0x148]
call fcn.140010a70
xor edx, edx
mov r8d, 0x3f8
mov qword [rsp + 0x540], 0
lea rcx, [rsp + 0x548]
call fcn.140010a70
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov rdi, qword [rbx + 8]
movabs rax, 0x7fffffffffffffff
sub rax, rdi
cmp rax, 0x17
jbe 0x14000ab46
mov rax, qword [rbx]
lea rsi, [rbx + 0x10]
lea rbp, [rdi + 0x18]
cmp rax, rsi
je 0x14000a378
mov rdx, qword [rbx + 0x10]
cmp rbp, rdx
ja 0x140008800
movabs rcx, 0x6f737365636f7250
add rax, rdi
mov qword [rax], rcx
movabs rcx, 0x6574696863724172
mov qword [rax + 8], rcx
movabs rcx, 0x203a206572757463
mov qword [rax + 0x10], rcx
mov rax, qword [rbx]
mov qword [rbx + 8], rbp
mov byte [rax + rdi + 0x18], 0
movzx eax, word [rsp + 0x70]
mov rdi, qword [rbx + 8]
cmp ax, 6
je 0x140008828
cmp ax, 9
je 0x1400088e0
test ax, ax
movabs rax, 0x7fffffffffffffff
je 0x140008890
sub rax, rdi
cmp rax, 6
jbe 0x14000ab46
mov rax, qword [rbx]
lea rbp, [rdi + 7]
cmp rsi, rax
je 0x14000aa23
mov rdx, qword [rbx + 0x10]
cmp rbp, rdx
ja 0x140009f35
add rax, rdi
mov r15d, 0x776f
mov dword [rax], 0x6e6b6e55
mov word [rax + 4], r15w
mov byte [rax + 6], 0x6e
mov rax, qword [rbx]
mov qword [rbx + 8], rbp
mov byte [rax + rdi + 7], 0
jmp 0x140008940
mov qword [rsp + 0x20], 0x18
lea r9, str.ProcessorArchitecture_:
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.1400acba0
jmp 0x14000876b
movabs rax, 0x7fffffffffffffff
sub rax, rdi
cmp rax, 0xc
jbe 0x14000ab46
mov rax, qword [rbx]
lea rbp, [rdi + 0xd]
cmp rsi, rax
je 0x14000aa41
mov rdx, qword [rbx + 0x10]
cmp rbp, rdx
ja 0x140009f9e
movabs rcx, 0x7361622d34364149
add rax, rdi
mov qword [rax], rcx
mov dword [rax + 8], 0x50206465
mov byte [rax + 0xc], 0x43
mov rax, qword [rbx]
mov qword [rbx + 8], rbp
mov byte [rax + rdi + 0xd], 0
jmp 0x140008940
sub rax, rdi
cmp rax, 0xb
jbe 0x14000ab46
mov rax, qword [rbx]
lea rbp, [rdi + 0xc]
cmp rsi, rax
je 0x14000aa2d
mov rdx, qword [rbx + 0x10]
cmp rbp, rdx
ja 0x140009f7b
movabs rcx, 0x657361622d363858
add rax, rdi
mov qword [rax], rcx
mov dword [rax + 8], 0x43502064
mov rax, qword [rbx]
mov qword [rbx + 8], rbp
mov byte [rax + rdi + 0xc], 0
jmp 0x140008940
movabs rax, 0x7fffffffffffffff
sub rax, rdi
cmp rax, 0xd
jbe 0x14000ab46
mov rax, qword [rbx]
lea rbp, [rdi + 0xe]
cmp rsi, rax
je 0x14000aa37
mov rdx, qword [rbx + 0x10]
cmp rbp, rdx
ja 0x140009f58
add rax, rdi
mov edx, 0x4350
movabs rcx, 0x61622d3436444d41
mov qword [rax], rcx
mov dword [rax + 8], 0x20646573
mov word [rax + 0xc], dx
mov rax, qword [rbx]
mov qword [rbx + 8], rbp
mov byte [rax + rdi + 0xe], 0
movabs rax, 0x7fffffffffffffff
mov rdi, qword [rbx + 8]
sub rax, rdi
cmp rax, 1
jbe 0x14000ab46
mov rax, qword [rbx]
lea rbp, [rdi + 2]
cmp rsi, rax
je 0x14000a348
mov rdx, qword [rbx + 0x10]
cmp rbp, rdx
ja 0x140009fc8
mov r14d, 0xa0d
mov word [rax + rdi], r14w
mov rax, qword [rbx]
mov qword [rbx + 8], rbp
lea rdx, [rsp + 0x38]
lea r12, [rsp + 0x540]
mov rcx, r12
mov byte [rax + rdi + 2], 0
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov rdi, qword [rbx + 8]
movabs rax, 0x7fffffffffffffff
sub rax, rdi
cmp rax, 0xe
jbe 0x14000ab46
mov rax, qword [rbx]
lea rbp, [rdi + 0xf]
cmp rsi, rax
je 0x14000a368
mov rdx, qword [rbx + 0x10]
cmp rbp, rdx
ja 0x14000a010
add rax, rdi
mov r13d, 0x3a20
movabs rcx, 0x72657475706d6f43
mov qword [rax], rcx
mov dword [rax + 8], 0x656d614e
mov word [rax + 0xc], r13w
mov byte [rax + 0xe], 0x20
mov rax, qword [rbx]
mov qword [rbx + 8], rbp
mov rcx, r12
mov byte [rax + rdi + 0xf], 0
call sub.msvcrt.dll_strlen
mov rdx, qword [rbx + 8]
mov r8, rax
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp r8, rax
ja 0x14000ab46
mov rcx, qword [rbx]
lea rdi, [r8 + rdx]
cmp rsi, rcx
je 0x14000a358
mov rax, qword [rbx + 0x10]
cmp rdi, rax
ja 0x140009ff0
test r8, r8
je 0x140008a6e
add rcx, rdx
cmp r8, 1
je 0x14000a7d0
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rcx, qword [rbx]
movabs rax, 0x7fffffffffffffff
mov qword [rbx + 8], rdi
mov byte [rcx + rdi], 0
mov rdi, qword [rbx + 8]
sub rax, rdi
cmp rax, 1
jbe 0x14000ab46
mov rax, qword [rbx]
lea rbp, [rdi + 2]
cmp rsi, rax
je 0x14000a328
mov rdx, qword [rbx + 0x10]
cmp rbp, rdx
ja 0x14000a060
mov r11d, 0xa0d
mov word [rax + rdi], r11w
mov rax, qword [rbx]
mov qword [rbx + 8], rbp
mov ecx, 0x12
lea r8, [rsp + 0xa0]
mov byte [rax + rdi + 2], 0
xor eax, eax
mov rdi, r8
rep stosq qword [rdi], rax
mov rcx, r8
mov dword [rsp + 0xa0], 0x94
mov dword [rdi], 0
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov rdi, qword [rbx + 8]
movabs rax, 0x7fffffffffffffff
sub rax, rdi
cmp rax, 0xc
jbe 0x14000ab46
mov rax, qword [rbx]
lea rbp, [rdi + 0xd]
cmp rsi, rax
je 0x14000a338
mov rdx, qword [rbx + 0x10]
cmp rbp, rdx
ja 0x14000a038
movabs rcx, 0x6d754e726f6a614d
add rax, rdi
mov qword [rax], rcx
mov dword [rax + 8], 0x3a726562
mov byte [rax + 0xc], 0x20
mov rax, qword [rbx]
mov qword [rbx + 8], rbp
mov byte [rax + rdi + 0xd], 0
mov ebp, dword [rsp + 0xa4]
cmp ebp, 9
jbe 0x14000aa4b
cmp ebp, 0x63
jbe 0x14000aa5a
cmp ebp, 0x3e7
jbe 0x14000aaac
cmp ebp, 0x270f
mov eax, ebp
mov r8d, 1
mov ecx, 0xd1b71759
ja 0x140008bbc
jmp 0x14000aa94
cmp edx, 0xf423f
jbe 0x14000a298
cmp edx, 0x98967f
jbe 0x14000a2a8
cmp edx, 0x5f5e0ff
jbe 0x14000a2c8
mov eax, eax
mov r9d, r8d
add r8d, 4
mov rdx, rax
imul rax, rcx
shr rax, 0x2d
cmp edx, 0x1869f
ja 0x140008b98
mov r12d, r8d
lea rdi, [rsp + 0x60]
cmp r12, 0xf
mov qword [rsp + 0x50], rdi
ja 0x14000a1a8
test r12, r12
jne 0x14000a810
mov byte [rsp + 0x60], 0
mov r9, rdi
mov r8d, 0xffffffff
mov qword [rsp + 0x58], 0
lea rcx, str.00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899
nop word cs:[rax + rax]
mov edx, ebp
mov eax, ebp
imul rdx, rdx, 0x51eb851f
shr rdx, 0x25
imul r10d, edx, 0x64
sub eax, r10d
mov r10d, ebp
mov ebp, edx
add eax, eax
mov edx, r8d
lea r11d, [rax + 1]
movzx eax, byte [rcx + rax]
movzx r11d, byte [rcx + r11]
mov byte [r9 + rdx], r11b
lea edx, [r8 - 1]
sub r8d, 2
cmp r10d, 0x270f
mov byte [r9 + rdx], al
ja 0x140008c20
lea eax, [rbp + 0x30]
cmp ebp, 9
jbe 0x140008c86
lea rcx, str.00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899
add ebp, ebp
lea eax, [rbp + 1]
movzx eax, byte [rcx + rax]
mov byte [r9 + 1], al
movzx eax, byte [rcx + rbp]
mov byte [r9], al
mov rcx, qword [rbx]
mov r8, qword [rsp + 0x58]
mov rdx, qword [rbx + 8]
mov r9, qword [rsp + 0x50]
cmp rsi, rcx
lea rbp, [r8 + rdx]
je 0x14000a388
mov rax, qword [rbx + 0x10]
cmp rbp, rax
ja 0x14000a088
test r8, r8
je 0x140008cd1
add rcx, rdx
cmp r8, 1
je 0x14000a7e8
mov rdx, r9
call sub.msvcrt.dll_memcpy
mov rcx, qword [rbx]
mov qword [rbx + 8], rbp
mov byte [rcx + rbp], 0
mov rcx, qword [rsp + 0x50]
cmp rcx, rdi
je 0x140008cf1
mov rax, qword [rsp + 0x60]
lea rdx, [rax + 1]
call fcn.1400bf650
movabs rax, 0x7fffffffffffffff
mov rbp, qword [rbx + 8]
sub rax, rbp
cmp rax, 1
jbe 0x14000ab46
mov rax, qword [rbx]
lea r12, [rbp + 2]
cmp rsi, rax
je 0x14000a398
mov rdx, qword [rbx + 0x10]
cmp r12, rdx
ja 0x14000a0a0
mov r10d, 0xa0d
mov word [rax + rbp], r10w
mov rax, qword [rbx]
mov qword [rbx + 8], r12
mov byte [rax + rbp + 2], 0
mov rbp, qword [rbx + 8]
movabs rax, 0x7fffffffffffffff
sub rax, rbp
cmp rax, 0xd
jbe 0x14000ab46
mov rax, qword [rbx]
lea r12, [rbp + 0xe]
cmp rsi, rax
je 0x14000a3a8
mov rdx, qword [rbx + 0x10]
cmp r12, rdx
ja 0x14000a0c8
add rax, rbp
mov r9d, 0x203a
movabs rcx, 0x726556726f6e694d
mov qword [rax], rcx
mov dword [rax + 8], 0x6e6f6973
mov word [rax + 0xc], r9w
mov rax, qword [rbx]
mov qword [rbx + 8], r12
mov byte [rax + rbp + 0xe], 0
mov ebp, dword [rsp + 0xa8]
cmp ebp, 9
jbe 0x14000aa72
cmp ebp, 0x63
jbe 0x14000aa7c
cmp ebp, 0x3e7
jbe 0x14000aace
cmp ebp, 0x270f
mov eax, ebp
mov r8d, 1
mov ecx, 0xd1b71759
ja 0x140008e0c
jmp 0x14000aae6
cmp edx, 0xf423f
jbe 0x14000a2b8
cmp edx, 0x98967f
jbe 0x14000a2d8
cmp edx, 0x5f5e0ff
jbe 0x14000a2f8
mov eax, eax
mov r9d, r8d
add r8d, 4
mov rdx, rax
imul rax, rcx
shr rax, 0x2d
cmp edx, 0x1869f
ja 0x140008de8
mov r12d, r8d
cmp r12, 0xf
mov qword [rsp + 0x50], rdi
ja 0x14000a1f8
test r12, r12
jne 0x14000a840
mov byte [rsp + 0x60], 0
mov r9, rdi
mov r8d, 0xffffffff
mov qword [rsp + 0x58], 0
lea rcx, str.00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899
nop dword [rax]
mov edx, ebp
mov eax, ebp
imul rdx, rdx, 0x51eb851f
shr rdx, 0x25
imul r10d, edx, 0x64
sub eax, r10d
mov r10d, ebp
mov ebp, edx
add eax, eax
mov edx, r8d
lea r11d, [rax + 1]
movzx eax, byte [rcx + rax]
movzx r11d, byte [rcx + r11]
mov byte [r9 + rdx], r11b
lea edx, [r8 - 1]
sub r8d, 2
cmp r10d, 0x270f
mov byte [r9 + rdx], al
ja 0x140008e68
lea eax, [rbp + 0x30]
cmp ebp, 9
jbe 0x140008ece
lea rcx, str.00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899
add ebp, ebp
lea eax, [rbp + 1]
movzx eax, byte [rcx + rax]
mov byte [r9 + 1], al
movzx eax, byte [rcx + rbp]
mov byte [r9], al
mov rcx, qword [rbx]
mov r8, qword [rsp + 0x58]
mov rdx, qword [rbx + 8]
mov r9, qword [rsp + 0x50]
cmp rsi, rcx
lea rbp, [r8 + rdx]
je 0x14000a3c8
mov rax, qword [rbx + 0x10]
cmp rbp, rax
ja 0x14000a0f0
test r8, r8
je 0x140008f19
add rcx, rdx
cmp r8, 1
je 0x14000a800
mov rdx, r9
call sub.msvcrt.dll_memcpy
mov rcx, qword [rbx]
mov qword [rbx + 8], rbp
mov byte [rcx + rbp], 0
mov rcx, qword [rsp + 0x50]
cmp rcx, rdi
je 0x140008f39
mov rax, qword [rsp + 0x60]
lea rdx, [rax + 1]
call fcn.1400bf650
movabs rax, 0x7fffffffffffffff
mov rbp, qword [rbx + 8]
sub rax, rbp
cmp rax, 1
jbe 0x14000ab46
mov rax, qword [rbx]
lea r12, [rbp + 2]
cmp rsi, rax
je 0x14000a3b8
mov rdx, qword [rbx + 0x10]
cmp r12, rdx
ja 0x14000a138
mov r8d, 0xa0d
mov word [rax + rbp], r8w
mov rax, qword [rbx]
mov qword [rbx + 8], r12
mov byte [rax + rbp + 2], 0
mov rbp, qword [rbx + 8]
movabs rax, 0x7fffffffffffffff
sub rax, rbp
cmp rax, 0xc
jbe 0x14000ab46
mov rax, qword [rbx]
lea r12, [rbp + 0xd]
cmp rsi, rax
je 0x14000a3d8
mov rdx, qword [rbx + 0x10]
cmp r12, rdx
ja 0x14000a110
movabs rcx, 0x6d754e646c697542
add rax, rbp
mov qword [rax], rcx
mov dword [rax + 8], 0x3a726562
mov byte [rax + 0xc], 0x20
mov rax, qword [rbx]
mov qword [rbx + 8], r12
mov byte [rax + rbp + 0xd], 0
mov ebp, dword [rsp + 0xac]
cmp ebp, 9
jbe 0x14000aac4
cmp ebp, 0x63
jbe 0x14000aafe
cmp ebp, 0x3e7
jbe 0x14000ab16
cmp ebp, 0x270f
mov eax, ebp
mov r8d, 1
mov ecx, 0xd1b71759
ja 0x140009054
jmp 0x14000ab2e
cmp edx, 0xf423f
jbe 0x14000a2e8
cmp edx, 0x98967f
jbe 0x14000a308
cmp edx, 0x5f5e0ff
jbe 0x14000a318
mov eax, eax
mov r9d, r8d
add r8d, 4
mov rdx, rax
imul rax, rcx
shr rax, 0x2d
cmp edx, 0x1869f
ja 0x140009030
mov r12d, r8d
cmp r12, 0xf
mov qword [rsp + 0x50], rdi
ja 0x14000a248
test r12, r12
jne 0x14000a860
mov byte [rsp + 0x60], 0
mov r9, rdi
mov r8d, 0xffffffff
mov qword [rsp + 0x58], 0
lea rcx, str.00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899
nop dword [rax]
mov edx, ebp
mov eax, ebp
imul rdx, rdx, 0x51eb851f
shr rdx, 0x25
imul r10d, edx, 0x64
sub eax, r10d
mov r10d, ebp
mov ebp, edx
add eax, eax
mov edx, r8d
lea r11d, [rax + 1]
movzx eax, byte [rcx + rax]
movzx r11d, byte [rcx + r11]
mov byte [r9 + rdx], r11b
lea edx, [r8 - 1]
sub r8d, 2
cmp r10d, 0x270f
mov byte [r9 + rdx], al
ja 0x1400090b0
lea eax, [rbp + 0x30]
cmp ebp, 9
jbe 0x140009116
lea rax, str.00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899
add ebp, ebp
lea edx, [rbp + 1]
movzx edx, byte [rax + rdx]
movzx eax, byte [rax + rbp]
mov byte [r9 + 1], dl
mov byte [r9], al
mov rcx, qword [rbx]
mov r8, qword [rsp + 0x58]
mov rdx, qword [rbx + 8]
mov r9, qword [rsp + 0x50]
cmp rsi, rcx
lea rbp, [r8 + rdx]
je 0x14000a3e8
mov rax, qword [rbx + 0x10]
cmp rbp, rax
ja 0x14000a160
test r8, r8
je 0x140009161
add rcx, rdx
cmp r8, 1
je 0x14000a830
mov rdx, r9
call sub.msvcrt.dll_memcpy
mov rcx, qword [rbx]
mov qword [rbx + 8], rbp
mov byte [rcx + rbp], 0
mov rcx, qword [rsp + 0x50]
cmp rcx, rdi
je 0x140009181
mov rax, qword [rsp + 0x60]
lea rdx, [rax + 1]
call fcn.1400bf650
movabs rax, 0x7fffffffffffffff
mov rdi, qword [rbx + 8]
sub rax, rdi
cmp rax, 1
jbe 0x14000ab46
mov rax, qword [rbx]
lea rbp, [rdi + 2]
cmp rsi, rax
je 0x14000a3f8
mov rdx, qword [rbx + 0x10]
cmp rbp, rdx
ja 0x14000a180
mov ecx, 0xa0d
mov word [rax + rdi], cx
mov rax, qword [rbx]
mov qword [rbx + 8], rbp
xor r8d, r8d
mov r9d, 0x101
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersion
mov rcx, 0xffffffff80000002
mov byte [rax + rdi + 2], 0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x140009f21
mov r14, qword [rsp + 0x40]
lea r12, [rsp + 0x140]
xor edx, edx
mov r8d, 0x400
lea rdi, [rsp + 0x50]
mov rcx, r12
mov dword [rsp + 0x48], 0x800
lea r13, [rsp + 0x48]
mov dword [rsp + 0x50], 0
call fcn.140010a70
xor r8d, r8d
mov qword [rsp + 0x28], r13
mov r9, rdi
mov rbp, qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov qword [rsp + 0x20], r12
lea rdx, str.ProductName
mov rcx, r14
call rbp
test eax, eax
jne 0x140009269
mov eax, dword [rsp + 0x50]
cmp eax, 1
je 0x140009274
cmp eax, 7
je 0x140009274
mov dword [rsp + 0x140], 0x412f4e
movabs rax, 0x7fffffffffffffff
mov r14, qword [rbx + 8]
sub rax, r14
cmp rax, 0xd
jbe 0x14000ab46
mov rax, qword [rbx]
lea r15, [r14 + 0xe]
cmp rsi, rax
je 0x14000a8e1
mov rdx, qword [rbx + 0x10]
cmp r15, rdx
ja 0x14000a408
add rax, r14
mov edx, 0x203a
movabs rcx, 0x4e656375646f7250
mov qword [rax], rcx
mov dword [rax + 8], 0x20656d61
mov word [rax + 0xc], dx
mov rax, qword [rbx]
mov qword [rbx + 8], r15
mov rcx, r12
mov byte [rax + r14 + 0xe], 0
call sub.msvcrt.dll_strlen
mov rdx, qword [rbx + 8]
mov r8, rax
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp r8, rax
ja 0x14000ab46
mov rax, qword [rbx]
lea r14, [r8 + rdx]
cmp rsi, rax
je 0x14000a87d
mov rcx, qword [rbx + 0x10]
cmp r14, rcx
ja 0x14000a430
test r8, r8
je 0x140009339
lea rcx, [rax + rdx]
cmp r8, 1
je 0x14000a981
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rax, qword [rbx]
mov qword [rbx + 8], r14
mov byte [rax + r14], 0
mov r14, qword [rbx + 8]
movabs rax, 0x7fffffffffffffff
sub rax, r14
cmp rax, 1
jbe 0x14000ab46
mov rax, qword [rbx]
lea r15, [r14 + 2]
cmp rsi, rax
je 0x14000a909
mov rdx, qword [rbx + 0x10]
cmp r15, rdx
ja 0x14000a658
mov r11d, 0xa0d
mov word [rax + r14], r11w
mov rax, qword [rbx]
mov qword [rbx + 8], r15
xor edx, edx
mov r8d, 0x400
mov rcx, r12
mov byte [rax + r14 + 2], 0
mov r14, qword [rsp + 0x40]
mov dword [rsp + 0x48], 0x800
mov dword [rsp + 0x50], 0
call fcn.140010a70
xor r8d, r8d
mov qword [rsp + 0x28], r13
mov r9, rdi
mov qword [rsp + 0x20], r12
lea rdx, str.CurrentType
mov rcx, r14
call rbp
test eax, eax
jne 0x1400093e5
mov eax, dword [rsp + 0x50]
cmp eax, 1
je 0x1400093f0
cmp eax, 7
je 0x1400093f0
mov dword [rsp + 0x140], 0x412f4e
movabs rax, 0x7fffffffffffffff
mov r14, qword [rbx + 8]
sub rax, r14
cmp rax, 0xd
jbe 0x14000ab46
mov rax, qword [rbx]
lea r15, [r14 + 0xe]
cmp rsi, rax
je 0x14000a8ff
mov rdx, qword [rbx + 0x10]
cmp r15, rdx
ja 0x14000a630
add rax, r14
mov r10d, 0x203a
movabs rcx, 0x4e656375646f7250
mov qword [rax], rcx
mov dword [rax + 8], 0x20656d61
mov word [rax + 0xc], r10w
mov rax, qword [rbx]
mov qword [rbx + 8], r15
mov rcx, r12
mov byte [rax + r14 + 0xe], 0
call sub.msvcrt.dll_strlen
mov rdx, qword [rbx + 8]
mov r8, rax
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp r8, rax
ja 0x14000ab46
mov rax, qword [rbx]
lea r14, [r8 + rdx]
cmp rsi, rax
je 0x14000a91d
mov rcx, qword [rbx + 0x10]
cmp r14, rcx
ja 0x14000a610
test r8, r8
je 0x1400094b7
lea rcx, [rax + rdx]
cmp r8, 1
je 0x14000a993
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rax, qword [rbx]
mov qword [rbx + 8], r14
mov byte [rax + r14], 0
mov r14, qword [rbx + 8]
movabs rax, 0x7fffffffffffffff
sub rax, r14
cmp rax, 1
jbe 0x14000ab46
mov rax, qword [rbx]
lea r15, [r14 + 2]
cmp rsi, rax
je 0x14000a913
mov rdx, qword [rbx + 0x10]
cmp r15, rdx
ja 0x14000a5e8
mov r9d, 0xa0d
mov word [rax + r14], r9w
mov rax, qword [rbx]
mov qword [rbx + 8], r15
xor edx, edx
mov r8d, 0x400
mov rcx, r12
mov byte [rax + r14 + 2], 0
mov r14, qword [rsp + 0x40]
mov dword [rsp + 0x48], 0x800
mov dword [rsp + 0x50], 0
call fcn.140010a70
xor r8d, r8d
mov qword [rsp + 0x28], r13
mov r9, rdi
mov qword [rsp + 0x20], r12
lea rdx, str.RegisteredOwner
mov rcx, r14
call rbp
test eax, eax
jne 0x140009563
mov eax, dword [rsp + 0x50]
cmp eax, 7
je 0x14000956e
cmp eax, 1
je 0x14000956e
mov dword [rsp + 0x140], 0x412f4e
movabs rax, 0x7fffffffffffffff
mov r14, qword [rbx + 8]
sub rax, r14
cmp rax, 0x11
jbe 0x14000ab46
mov rax, qword [rbx]
lea r15, [r14 + 0x12]
cmp rsi, rax
je 0x14000a931
mov rdx, qword [rbx + 0x10]
cmp r15, rdx
ja 0x14000a5c0
add rax, r14
mov r8d, 0x203a
movabs rcx, 0x7265747369676552
mov qword [rax], rcx
movabs rcx, 0x2072656e774f6465
mov qword [rax + 8], rcx
mov word [rax + 0x10], r8w
mov rax, qword [rbx]
mov qword [rbx + 8], r15
mov rcx, r12
mov byte [rax + r14 + 0x12], 0
call sub.msvcrt.dll_strlen
mov rdx, qword [rbx + 8]
mov r8, rax
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp r8, rax
ja 0x14000ab46
mov rax, qword [rbx]
lea r14, [r8 + rdx]
cmp rsi, rax
je 0x14000a927
mov rcx, qword [rbx + 0x10]
cmp r14, rcx
ja 0x14000a5a0
test r8, r8
je 0x14000963c
lea rcx, [rax + rdx]
cmp r8, 1
je 0x14000a9ff
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rax, qword [rbx]
mov qword [rbx + 8], r14
mov byte [rax + r14], 0
mov r14, qword [rbx + 8]
movabs rax, 0x7fffffffffffffff
sub rax, r14
cmp rax, 1
jbe 0x14000ab46
mov rax, qword [rbx]
lea r15, [r14 + 2]
cmp rsi, rax
je 0x14000a945
mov rdx, qword [rbx + 0x10]
cmp r15, rdx
ja 0x14000a578
mov ecx, 0xa0d
mov word [rax + r14], cx
mov rax, qword [rbx]
mov qword [rbx + 8], r15
xor edx, edx
mov r8d, 0x400
mov rcx, r12
mov byte [rax + r14 + 2], 0
mov r14, qword [rsp + 0x40]
mov dword [rsp + 0x48], 0x800
mov dword [rsp + 0x50], 0
call fcn.140010a70
xor r8d, r8d
mov qword [rsp + 0x28], r13
mov r9, rdi
mov qword [rsp + 0x20], r12
lea rdx, str.RegisteredOrganization
mov rcx, r14
call rbp
test eax, eax
jne 0x1400096e7
mov eax, dword [rsp + 0x50]
cmp eax, 1
je 0x1400096f2
cmp eax, 7
je 0x1400096f2
mov dword [rsp + 0x140], 0x412f4e
movabs rax, 0x7fffffffffffffff
mov r14, qword [rbx + 8]
sub rax, r14
cmp rax, 0x18
jbe 0x14000ab46
mov rax, qword [rbx]
lea r15, [r14 + 0x19]
cmp rsi, rax
je 0x14000a93b
mov rdx, qword [rbx + 0x10]
cmp r15, rdx
ja 0x14000a550
movabs rcx, 0x7265747369676552
add rax, r14
mov qword [rax], rcx
movabs rcx, 0x696e6167724f6465
mov qword [rax + 8], rcx
movabs rcx, 0x3a206e6f6974617a
mov qword [rax + 0x10], rcx
mov byte [rax + 0x18], 0x20
mov rax, qword [rbx]
mov qword [rbx + 8], r15
mov rcx, r12
mov byte [rax + r14 + 0x19], 0
call sub.msvcrt.dll_strlen
mov rdx, qword [rbx + 8]
mov r8, rax
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp r8, rax
ja 0x14000ab46
mov rax, qword [rbx]
lea r14, [r8 + rdx]
cmp rsi, rax
je 0x14000a89b
mov rcx, qword [rbx + 0x10]
cmp r14, rcx
ja 0x14000a530
test r8, r8
je 0x1400097c7
lea rcx, [rax + rdx]
cmp r8, 1
je 0x14000a9ed
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rax, qword [rbx]
mov qword [rbx + 8], r14
xor edx, edx
mov r8d, 0x400
mov rcx, r12
mov byte [rax + r14], 0
mov r14, qword [rsp + 0x40]
mov dword [rsp + 0x48], 0x800
mov dword [rsp + 0x50], 0
call fcn.140010a70
xor r8d, r8d
mov qword [rsp + 0x28], r13
mov r9, rdi
mov qword [rsp + 0x20], r12
lea rdx, str.ProductId
mov rcx, r14
call rbp
test eax, eax
jne 0x140009823
mov eax, dword [rsp + 0x50]
cmp eax, 7
je 0x14000982e
cmp eax, 1
je 0x14000982e
mov dword [rsp + 0x140], 0x412f4e
movabs rax, 0x7fffffffffffffff
mov r14, qword [rbx + 8]
sub rax, r14
cmp rax, 0xb
jbe 0x14000ab46
mov rax, qword [rbx]
lea r15, [r14 + 0xc]
cmp rsi, rax
je 0x14000a891
mov rdx, qword [rbx + 0x10]
cmp r15, rdx
ja 0x14000a508
movabs rcx, 0x49746375646f7250
add rax, r14
mov qword [rax], rcx
mov dword [rax + 8], 0x203a2064
mov rax, qword [rbx]
mov qword [rbx + 8], r15
mov rcx, r12
mov byte [rax + r14 + 0xc], 0
call sub.msvcrt.dll_strlen
mov rdx, qword [rbx + 8]
mov r8, rax
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp r8, rax
ja 0x14000ab46
mov rax, qword [rbx]
lea r14, [r8 + rdx]
cmp rsi, rax
je 0x14000a8af
mov rcx, qword [rbx + 0x10]
cmp r14, rcx
ja 0x14000a4e8
test r8, r8
je 0x1400098ea
lea rcx, [rax + rdx]
cmp r8, 1
je 0x14000a9db
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rax, qword [rbx]
mov qword [rbx + 8], r14
mov byte [rax + r14], 0
mov r14, qword [rbx + 8]
movabs rax, 0x7fffffffffffffff
sub rax, r14
cmp rax, 1
jbe 0x14000ab46
mov rax, qword [rbx]
lea r15, [r14 + 2]
cmp rsi, rax
je 0x14000a8a5
mov rdx, qword [rbx + 0x10]
cmp r15, rdx
ja 0x14000a4c0
mov edx, 0xa0d
mov word [rax + r14], dx
mov rax, qword [rbx]
mov qword [rbx + 8], r15
xor r8d, r8d
mov r9, rdi
lea rdx, str.InstallDate
mov byte [rax + r14 + 2], 0
lea rax, [rsp + 0x3c]
mov rcx, qword [rsp + 0x40]
mov dword [rsp + 0x48], 4
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rax
call rbp
test eax, eax
jne 0x14000997c
cmp dword [rsp + 0x50], 4
mov eax, dword [rsp + 0x3c]
je 0x140009986
mov dword [rsp + 0x3c], 0
xor eax, eax
mov rcx, r13
mov qword [rsp + 0x48], rax
xor ebp, ebp
call qword [sym.imp.msvcrt.dll__localtime64]
movzx edx, word [rax + 0x10]
movzx r9d, word [rax + 0x18]
movzx ecx, word [rax + 0x14]
lea r8d, [rdx + 1]
movzx edx, word [rax + 0xc]
movzx r8d, r8w
add cx, 0x76c
movzx ecx, cx
shl rdx, 0x10
or rdx, r9
xor r9d, r9d
shl rdx, 0x10
or rdx, r8
mov r8, rdi
shl rdx, 0x10
or rdx, rcx
movzx ecx, word [rax + 4]
mov qword [rsp + 0x50], rdx
movzx edx, word [rax + 8]
mov eax, dword [rax]
mov word [rsp + 0x5e], bp
mov dword [rsp + 0x28], 0x3fe
shl ecx, 0x10
mov qword [rsp + 0x20], r12
or edx, ecx
mov ecx, 0x800
mov dword [rsp + 0x58], edx
xor edx, edx
mov word [rsp + 0x5c], ax
call qword [sym.imp.KERNEL32.dll_GetDateFormatA]
mov rcx, r12
test eax, eax
mov ebp, eax
je 0x140009a20
lea ecx, [rax - 1]
mov rbp, rcx
add rcx, r12
lea r8, [0x1400c44fb]
lea rdx, [0x1400c41d0]
call fcn.140003fd0
mov edx, 0x400
xor r9d, r9d
mov r8, rdi
add eax, ebp
mov ecx, 0x800
sub edx, eax
add rax, r12
mov dword [rsp + 0x28], edx
xor edx, edx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_GetTimeFormatA]
mov rdi, qword [rbx + 8]
movabs rax, 0x7fffffffffffffff
sub rax, rdi
cmp rax, 0xd
jbe 0x14000ab46
mov rax, qword [rbx]
lea rbp, [rdi + 0xe]
cmp rsi, rax
je 0x14000a8d7
mov rdx, qword [rbx + 0x10]
cmp rbp, rdx
ja 0x14000a498
add rax, rdi
mov r11d, 0x203a
movabs rcx, 0x446c6c6174736e49
mov qword [rax], rcx
mov dword [rax + 8], 0x20657461
mov word [rax + 0xc], r11w
mov rax, qword [rbx]
mov qword [rbx + 8], rbp
mov rcx, r12
mov byte [rax + rdi + 0xe], 0
call sub.msvcrt.dll_strlen
mov rdx, qword [rbx + 8]
mov r8, rax
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp r8, rax
ja 0x14000ab46
mov rax, qword [rbx]
lea rdi, [r8 + rdx]
cmp rsi, rax
je 0x14000a8cd
mov rcx, qword [rbx + 0x10]
cmp rdi, rcx
ja 0x14000a478
test r8, r8
je 0x140009b21
lea rcx, [rax + rdx]
cmp r8, 1
je 0x14000a9c9
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rax, qword [rbx]
mov qword [rbx + 8], rdi
mov byte [rax + rdi], 0
mov rdi, qword [rbx + 8]
movabs rax, 0x7fffffffffffffff
sub rax, rdi
cmp rax, 1
jbe 0x14000ab46
mov rax, qword [rbx]
lea rbp, [rdi + 2]
cmp rsi, rax
je 0x14000a887
mov rdx, qword [rbx + 0x10]
cmp rbp, rdx
ja 0x14000a450
mov r10d, 0xa0d
mov word [rax + rdi], r10w
mov rax, qword [rbx]
lea r13, str.HARDWAREDESCRIPTIONSystem
mov qword [rbx + 8], rbp
mov byte [rax + rdi + 2], 0
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov r8, r12
mov rcx, r13
lea rdx, str.SystemBiosVersion
call fcn.140004000
mov rdi, qword [rbx + 8]
movabs rax, 0x7fffffffffffffff
sub rax, rdi
cmp rax, 0x13
jbe 0x14000ab46
mov rax, qword [rbx]
lea rbp, [rdi + 0x14]
cmp rsi, rax
je 0x14000a8b9
mov rdx, qword [rbx + 0x10]
cmp rbp, rdx
ja 0x14000a7a8
movabs rcx, 0x69426d6574737953
add rax, rdi
mov qword [rax], rcx
movabs rcx, 0x6f6973726556736f
mov qword [rax + 8], rcx
mov dword [rax + 0x10], 0x203a206e
mov rax, qword [rbx]
mov qword [rbx + 8], rbp
mov rcx, r12
mov byte [rax + rdi + 0x14], 0
call sub.msvcrt.dll_strlen
mov rdx, qword [rbx + 8]
mov r8, rax
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp r8, rax
ja 0x14000ab46
mov rax, qword [rbx]
lea rdi, [r8 + rdx]
cmp rsi, rax
je 0x14000a8f5
mov rcx, qword [rbx + 0x10]
cmp rdi, rcx
ja 0x14000a740
test r8, r8
je 0x140009c65
lea rcx, [rax + rdx]
cmp r8, 1
je 0x14000a9b7
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rax, qword [rbx]
mov qword [rbx + 8], rdi
mov byte [rax + rdi], 0
mov rdi, qword [rbx + 8]
movabs rax, 0x7fffffffffffffff
sub rax, rdi
cmp rax, 1
jbe 0x14000ab46
mov rax, qword [rbx]
lea rbp, [rdi + 2]
cmp rsi, rax
je 0x14000a8eb
mov rdx, qword [rbx + 0x10]
cmp rbp, rdx
ja 0x14000a718
mov r9d, 0xa0d
mov word [rax + rdi], r9w
mov rax, qword [rbx]
mov qword [rbx + 8], rbp
mov r8, r12
mov rcx, r13
lea rdx, str.SystemBiosDate
mov byte [rax + rdi + 2], 0
call fcn.140004000
mov rdi, qword [rbx + 8]
movabs rax, 0x7fffffffffffffff
sub rax, rdi
cmp rax, 0x10
jbe 0x14000ab46
mov rax, qword [rbx]
lea rbp, [rdi + 0x11]
cmp rsi, rax
je 0x14000a8c3
mov rdx, qword [rbx + 0x10]
cmp rbp, rdx
ja 0x14000a6f0
movabs rcx, 0x69426d6574737953
add rax, rdi
mov qword [rax], rcx
movabs rcx, 0x3a2065746144736f
mov qword [rax + 8], rcx
mov byte [rax + 0x10], 0x20
mov rax, qword [rbx]
mov qword [rbx + 8], rbp
mov rcx, r12
mov byte [rax + rdi + 0x11], 0
call sub.msvcrt.dll_strlen
mov rdx, qword [rbx + 8]
mov r8, rax
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp r8, rax
ja 0x14000ab46
mov rax, qword [rbx]
lea rdi, [r8 + rdx]
cmp rsi, rax
je 0x14000a959
add rsp, 0x948
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rsp + 0x20], 7
lea r9, str.Unknown
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.1400acba0
jmp 0x1400087e9
mov qword [rsp + 0x20], 0xe
lea r9, str.AMD64_based_PC
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.1400acba0
jmp 0x140008934
mov qword [rsp + 0x20], 0xc
lea r9, str.X86_based_PC
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.1400acba0
jmp 0x1400088d1
mov qword [rsp + 0x20], 0xd
lea r9, str.IA64_based_PC
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.1400acba0
jmp 0x140008877
mov qword [rsp + 0x20], 2
lea r9, [0x1400c4393]
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.1400acba0
jmp 0x140008983
mov qword [rsp + 0x20], r8
mov rcx, rbx
mov r9, r12
xor r8d, r8d
call fcn.1400acba0
mov rcx, qword [rbx]
jmp 0x140008a6e
mov qword [rsp + 0x20], 0xf
lea r9, str.ComputerName_:
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.1400acba0
jmp 0x140008a03
mov qword [rsp + 0x20], 0xd
lea r9, str.MajorNumber:
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.1400acba0
jmp 0x140008b47
mov qword [rsp + 0x20], 2
lea r9, [0x1400c4393]
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.1400acba0
jmp 0x140008ab9
mov qword [rsp + 0x20], r8
mov rcx, rbx
xor r8d, r8d
call fcn.1400acba0
mov rcx, qword [rbx]
jmp 0x140008cd1
mov qword [rsp + 0x20], 2
lea r9, [0x1400c4393]
xor r8d, r8d
mov rdx, rbp
mov rcx, rbx
call fcn.1400acba0
jmp 0x140008d34
mov qword [rsp + 0x20], 0xe
lea r9, str.MinorVersion:
xor r8d, r8d
mov rdx, rbp
mov rcx, rbx
call fcn.1400acba0
jmp 0x140008d9a
mov qword [rsp + 0x20], r8
mov rcx, rbx
xor r8d, r8d
call fcn.1400acba0
mov rcx, qword [rbx]
jmp 0x140008f19
mov qword [rsp + 0x20], 0xd
lea r9, str.BuildNumber:
xor r8d, r8d
mov rdx, rbp
mov rcx, rbx
call fcn.1400acba0
jmp 0x140008fdb
mov qword [rsp + 0x20], 2
lea r9, [0x1400c4393]
xor r8d, r8d
mov rdx, rbp
mov rcx, rbx
call fcn.1400acba0
jmp 0x140008f7c
mov qword [rsp + 0x20], r8
mov rcx, rbx
xor r8d, r8d
call fcn.1400acba0
mov rcx, qword [rbx]
jmp 0x140009161
mov qword [rsp + 0x20], 2
lea r9, [0x1400c4393]
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.1400acba0
jmp 0x1400091c2
lea rcx, [r12 + 1]
call fcn.1400bf690
mov qword [rsp + 0x60], r12
mov rcx, rax
mov qword [rsp + 0x50], rax
mov r8, r12
xor edx, edx
call fcn.140010a70
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x58], r12
cmp ebp, 0x63
mov byte [rax + r12], 0
mov eax, dword [rsp + 0x58]
mov r9, qword [rsp + 0x50]
lea r8d, [rax - 1]
ja 0x140008c0f
jmp 0x140008c66
lea rcx, [r12 + 1]
call fcn.1400bf690
mov qword [rsp + 0x60], r12
mov rcx, rax
mov qword [rsp + 0x50], rax
mov r8, r12
xor edx, edx
call fcn.140010a70
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x58], r12
cmp ebp, 0x63
mov byte [rax + r12], 0
mov eax, dword [rsp + 0x58]
mov r9, qword [rsp + 0x50]
lea r8d, [rax - 1]
ja 0x140008e5a
jmp 0x140008eae
lea rcx, [r12 + 1]
call fcn.1400bf690
mov qword [rsp + 0x60], r12
mov rcx, rax
mov qword [rsp + 0x50], rax
mov r8, r12
xor edx, edx
call fcn.140010a70
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x58], r12
cmp ebp, 0x63
mov byte [rax + r12], 0
mov eax, dword [rsp + 0x58]
mov r9, qword [rsp + 0x50]
lea r8d, [rax - 1]
ja 0x1400090a2
jmp 0x1400090f6
lea r12d, [r9 + 5]
jmp 0x140008bdb
lea r12d, [r9 + 6]
jmp 0x140008bdb
lea r12d, [r9 + 5]
jmp 0x140008e2b
lea r12d, [r9 + 7]
jmp 0x140008bdb
lea r12d, [r9 + 6]
jmp 0x140008e2b
lea r12d, [r9 + 5]
jmp 0x140009073
lea r12d, [r9 + 7]
jmp 0x140008e2b
lea r12d, [r9 + 6]
jmp 0x140009073
lea r12d, [r9 + 7]
jmp 0x140009073
mov edx, 0xf
jmp 0x140008aa5
mov edx, 0xf
jmp 0x140008b23
mov edx, 0xf
jmp 0x14000896f
mov eax, 0xf
jmp 0x140008a48
mov edx, 0xf
jmp 0x1400089d4
mov edx, 0xf
jmp 0x140008736
mov eax, 0xf
jmp 0x140008cab
mov edx, 0xf
jmp 0x140008d20
mov edx, 0xf
jmp 0x140008d6f
mov edx, 0xf
jmp 0x140008f68
mov eax, 0xf
jmp 0x140008ef3
mov edx, 0xf
jmp 0x140008fb7
mov eax, 0xf
jmp 0x14000913b
mov edx, 0xf
jmp 0x1400091b0
mov qword [rsp + 0x20], 0xe
lea r9, str.ProduceName_:
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
call fcn.1400acba0
jmp 0x1400092cc
mov qword [rsp + 0x20], r8
mov r9, r12
xor r8d, r8d
mov rcx, rbx
call fcn.1400acba0
mov rax, qword [rbx]
jmp 0x140009339
mov qword [rsp + 0x20], 2
lea r9, [0x1400c4393]
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.1400acba0
jmp 0x140009b6c
mov qword [rsp + 0x20], r8
mov r9, r12
xor r8d, r8d
mov rcx, rbx
call fcn.1400acba0
mov rax, qword [rbx]
jmp 0x140009b21
mov qword [rsp + 0x20], 0xe
lea r9, str.InstallDate_:
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.1400acba0
jmp 0x140009ab5
mov qword [rsp + 0x20], 2
lea r9, [0x1400c4393]
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
call fcn.1400acba0
jmp 0x140009935
mov qword [rsp + 0x20], r8
mov r9, r12
xor r8d, r8d
mov rcx, rbx
call fcn.1400acba0
mov rax, qword [rbx]
jmp 0x1400098ea
mov qword [rsp + 0x20], 0xc
lea r9, str.ProductId_:
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
call fcn.1400acba0
jmp 0x14000987d
mov qword [rsp + 0x20], r8
mov r9, r12
xor r8d, r8d
mov rcx, rbx
call fcn.1400acba0
mov rax, qword [rbx]
jmp 0x1400097c7
mov qword [rsp + 0x20], 0x19
lea r9, str.RegisteredOrganization_:
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
call fcn.1400acba0
jmp 0x14000975a
mov qword [rsp + 0x20], 2
lea r9, [0x1400c4393]
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
call fcn.1400acba0
jmp 0x140009687
mov qword [rsp + 0x20], r8
mov r9, r12
xor r8d, r8d
mov rcx, rbx
call fcn.1400acba0
mov rax, qword [rbx]
jmp 0x14000963c
mov qword [rsp + 0x20], 0x12
lea r9, str.RegisteredOwner_:
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
call fcn.1400acba0
jmp 0x1400095cf
mov qword [rsp + 0x20], 2
lea r9, [0x1400c4393]
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
call fcn.1400acba0
jmp 0x140009503
mov qword [rsp + 0x20], r8
mov r9, r12
xor r8d, r8d
mov rcx, rbx
call fcn.1400acba0
mov rax, qword [rbx]
jmp 0x1400094b7
mov qword [rsp + 0x20], 0xe
lea r9, str.ProduceName_:
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
call fcn.1400acba0
jmp 0x14000944a
mov qword [rsp + 0x20], 2
lea r9, [0x1400c4393]
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
call fcn.1400acba0
jmp 0x140009385
mov qword [rsp + 0x20], 0x11
lea r9, str.SystemBiosDate_:
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.1400acba0
jmp 0x140009d28
mov qword [rsp + 0x20], 2
lea r9, [0x1400c4393]
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.1400acba0
jmp 0x140009cb0
mov qword [rsp + 0x20], r8
mov r9, r12
xor r8d, r8d
mov rcx, rbx
call fcn.1400acba0
mov rax, qword [rbx]
jmp 0x140009c65
mov qword [rsp + 0x20], 0x14
lea r9, str.SystemBiosVersion_:
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.1400acba0
jmp 0x140009bf9
movzx eax, byte [rsp + 0x540]
mov byte [rcx], al
mov rcx, qword [rbx]
jmp 0x140008a6e
movzx eax, byte [r9]
mov byte [rcx], al
mov rcx, qword [rbx]
jmp 0x140008cd1
movzx eax, byte [r9]
mov byte [rcx], al
mov rcx, qword [rbx]
jmp 0x140008f19
cmp r12, 1
jne 0x14000ab62
mov byte [rsp + 0x60], 0
mov rax, rdi
mov r12d, 1
jmp 0x14000a1ce
movzx eax, byte [r9]
mov byte [rcx], al
mov rcx, qword [rbx]
jmp 0x140009161
cmp r12, 1
jne 0x14000ab5a
mov byte [rsp + 0x60], 0
mov rax, rdi
mov r12d, 1
jmp 0x14000a21e
cmp r12, 1
jne 0x14000ab52
mov byte [rsp + 0x60], 0
mov rax, rdi
mov r12d, 1
jmp 0x14000a26e
mov ecx, 0xf
jmp 0x140009312
mov edx, 0xf
jmp 0x140009b58
mov edx, 0xf
jmp 0x14000985d
mov ecx, 0xf
jmp 0x1400097a0
mov edx, 0xf
jmp 0x140009922
mov ecx, 0xf
jmp 0x1400098c3
mov edx, 0xf
jmp 0x140009bcb
mov edx, 0xf
jmp 0x140009cfd
mov ecx, 0xf
jmp 0x140009afa
mov edx, 0xf
jmp 0x140009a8a
mov edx, 0xf
jmp 0x1400092a3
mov edx, 0xf
jmp 0x140009c9c
mov ecx, 0xf
jmp 0x140009c3e
mov edx, 0xf
jmp 0x14000941f
mov edx, 0xf
jmp 0x140009371
mov edx, 0xf
jmp 0x1400094ef
mov ecx, 0xf
jmp 0x140009490
mov ecx, 0xf
jmp 0x140009615
mov edx, 0xf
jmp 0x14000959d
mov edx, 0xf
jmp 0x140009721
mov edx, 0xf
jmp 0x140009674
movzx eax, byte [rsp + 0x140]
mov byte [rcx], al
mov rax, qword [rbx]
jmp 0x140009339
movzx eax, byte [rsp + 0x140]
mov byte [rcx], al
mov rax, qword [rbx]
jmp 0x1400094b7
movzx eax, byte [rsp + 0x140]
mov byte [rcx], al
mov rax, qword [rbx]
jmp 0x140009c65
movzx eax, byte [rsp + 0x140]
mov byte [rcx], al
mov rax, qword [rbx]
jmp 0x140009b21
movzx eax, byte [rsp + 0x140]
mov byte [rcx], al
mov rax, qword [rbx]
jmp 0x1400098ea
movzx eax, byte [rsp + 0x140]
mov byte [rcx], al
mov rax, qword [rbx]
jmp 0x1400097c7
movzx eax, byte [rsp + 0x140]
mov byte [rcx], al
mov rax, qword [rbx]
jmp 0x14000963c
mov edx, 0xf
jmp 0x1400087c8
mov edx, 0xf
jmp 0x1400088b1
mov edx, 0xf
jmp 0x14000890b
mov edx, 0xf
jmp 0x140008853
lea rdi, [rsp + 0x60]
mov qword [rsp + 0x50], rdi
jmp 0x14000a81a
lea rdi, [rsp + 0x60]
mov r12d, 2
mov qword [rsp + 0x50], rdi
mov rcx, rdi
jmp 0x14000a1bf
mov qword [rsp + 0x50], rdi
jmp 0x14000a84a
mov qword [rsp + 0x50], rdi
lea rdi, [rsp + 0x60]
mov r12d, 2
mov rcx, rdi
jmp 0x14000a20f
lea rdi, [rsp + 0x60]
mov r12d, 4
mov qword [rsp + 0x50], rdi
mov rcx, rdi
jmp 0x14000a1bf
lea rdi, [rsp + 0x60]
mov r12d, 3
mov qword [rsp + 0x50], rdi
mov rcx, rdi
jmp 0x14000a1bf
mov qword [rsp + 0x50], rdi
jmp 0x14000a86a
mov qword [rsp + 0x50], rdi
lea rdi, [rsp + 0x60]
mov r12d, 3
mov rcx, rdi
jmp 0x14000a20f
mov qword [rsp + 0x50], rdi
lea rdi, [rsp + 0x60]
mov r12d, 4
mov rcx, rdi
jmp 0x14000a20f
mov qword [rsp + 0x50], rdi
lea rdi, [rsp + 0x60]
mov r12d, 2
mov rcx, rdi
jmp 0x14000a25f
mov qword [rsp + 0x50], rdi
lea rdi, [rsp + 0x60]
mov r12d, 3
mov rcx, rdi
jmp 0x14000a25f
mov qword [rsp + 0x50], rdi
lea rdi, [rsp + 0x60]
mov r12d, 4
mov rcx, rdi
jmp 0x14000a25f
lea rcx, [0x1400c437e]
call fcn.1400c0760
mov rcx, rdi
jmp 0x14000a25f
mov rcx, rdi
jmp 0x14000a20f
mov rcx, rdi
jmp 0x14000a1bf