Function at 0x180003490
Capabilities:
Check os version
Enumerate files on windows
Enumerate processes
Enumerate services
Get common file path
Get hostname
Get startup folder
Get system information on windows
List tcp connections and listeners
Persist via run registry key
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xc260]
mov eax, 0xc360
call fcn.1800197c0
sub rsp, rax
movaps xmmword [rsp + 0xc350], xmm6
movaps xmmword [rsp + 0xc340], xmm7
mov rax, qword [0x180053028]
xor rax, rsp
mov qword [rbp + 0xc230], rax
mov r12, r9
mov r15, r8
mov qword [rsp + 0x40], r8
mov r13, rcx
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], r8
mov qword [rbp - 0x80], r9
lea rcx, str._c_is_a_digit._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180003514
mov edx, 0x35
lea rcx, str._c_is_a_digit._n
call fcn.180001120
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x180003539
lea rcx, str.Error_creating_process_snapshot
call fcn.18001db60
jmp 0x1800035eb
mov dword [rbp - 0x30], 0x130
lea rdx, [rbp - 0x30]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
jne 0x180003570
lea rcx, str.Error_getting_first_process
call fcn.18001db60
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop word [rax + rax]
lea rcx, str.Process_ID:__lu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180003590
mov edx, dword [rbp - 0x28]
lea rcx, str.Process_ID:__lu_n
call fcn.180001120
lea rcx, str.Parent_Process_ID:__lu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800035b0
mov edx, dword [rbp - 0x10]
lea rcx, str.Parent_Process_ID:__lu_n
call fcn.180001120
lea rcx, str.Process_Name:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800035d1
lea rdx, [rbp - 4]
lea rcx, str.Process_Name:__s_n
call fcn.180001120
lea rdx, [rbp - 0x30]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x180003570
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.Pointer_address:__p_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000360a
xor edx, edx
lea rcx, str.Pointer_address:__p_n
call fcn.180001120
xor edi, edi
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x58], rdi
mov qword [rbp - 0x50], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x68], dil
lea rcx, str.Sum:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180003640
lea edx, [rdi + 8]
lea rcx, str.Sum:__d_n
call fcn.180001120
lea rcx, str.Quotient_of__d_and__d_is:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000366a
mov edx, 0x64
lea r9d, [rdx - 0x4b]
lea r8d, [rdx - 0x60]
lea rcx, str.Quotient_of__d_and__d_is:__d_n
call fcn.180001120
lea rcx, str.This_is_a_fixed_string._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180003687
lea rcx, str.This_is_a_fixed_string._n
call fcn.180001120
lea rcx, [rbp + 0xc100]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
lea rcx, str.Current_Time_1:__d:_d:_d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800036c8
movzx r9d, word [rbp + 0xc10c]
movzx r8d, word [rbp + 0xc10a]
movzx edx, word [rbp + 0xc108]
lea rcx, str.Current_Time_1:__d:_d:_d_n
call fcn.180001120
lea rcx, str.The_value_of_Eulers_number_e_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsd xmm7, qword [0x18004d210]
test eax, eax
jns 0x1800036fd
movaps xmm0, xmm7
call fcn.180039fa0
movaps xmm1, xmm0
movq rdx, xmm0
lea rcx, str.The_value_of_Eulers_number_e_is:__lf_n
call fcn.180001120
lea rcx, str.Square_of__d_is__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180003723
mov edx, 4
lea r8d, [rdx + 0xc]
lea rcx, str.Square_of__d_is__d_n
call fcn.180001120
mov dword [rsp + 0x6c], 0x3fff
lea rcx, str.Array_sum:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000374d
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, str.Array_sum:__d_n
call fcn.180001120
mov dword [rsp + 0x68], 0x10
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0xc100]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
je 0x180003791
lea rcx, str.Computer_Name:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800037ae
lea rdx, [rbp + 0xc100]
lea rcx, str.Computer_Name:__s_n
call fcn.180001120
jmp 0x1800037ae
lea rcx, str.Failed_to_get_computer_name__n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800037ae
lea rcx, str.Failed_to_get_computer_name__n
call fcn.180001120
mov dword [rsp + 0x68], 0x10
lea r8, [rsp + 0x68]
lea rdx, [rbp + 0xc110]
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_GetComputerNameExA]
test eax, eax
je 0x1800037f7
lea rcx, str.Domain_Name:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180003814
lea rdx, [rbp + 0xc110]
lea rcx, str.Domain_Name:__s_n
call fcn.180001120
jmp 0x180003814
lea rcx, str.Failed_to_get_domain_name__n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180003814
lea rcx, str.Failed_to_get_domain_name__n
call fcn.180001120
lea rcx, str.Factorial_of__d_is__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000383c
mov edx, 6
mov r8d, 0x2d0
lea rcx, str.Factorial_of__d_is__d_n
call fcn.180001120
mov edx, dword [rsp + 0x6c]
mov ebx, 1
mov ecx, ebx
call fcn.18001d968
mov qword [rbp + 0xc100], rax
mov r14d, edi
mov edi, ebx
lea esi, [rbx + 8]
nop dword [rax + rax]
lea ebx, [rdi + r14]
lea r14d, [rdi]
mov edi, ebx
lea rcx, [0x18004c408]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180003888
mov edx, ebx
lea rcx, [0x18004c408]
call fcn.180001120
sub rsi, 1
jne 0x180003860
lea rcx, [0x18004bd68]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800038ab
lea rcx, [0x18004bd68]
call fcn.180001120
movsd xmm1, qword [0x18004d228]
movaps xmm0, xmm7
call fcn.180023360
movaps xmm6, xmm0
mulsd xmm6, qword [0x18004d250]
lea rcx, str.The_volume_of_the_sphere_with_radius__lf_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800038f3
movaps xmm2, xmm6
movq r8, xmm6
movaps xmm1, xmm7
movq rdx, xmm7
lea rcx, str.The_volume_of_the_sphere_with_radius__lf_is:__lf_n
call fcn.180001120
lea rcx, str.Difference_between__d_and__d_is__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000391d
mov edx, 0xa
lea r9d, [rdx - 7]
lea r8d, [rdx - 3]
lea rcx, str.Difference_between__d_and__d_is__d_n
call fcn.180001120
cmp qword [rbp + 0xc100], 0
jne 0x1800039ca
xor ebx, ebx
movups xmm0, xmmword [rbp - 0x68]
movups xmmword [r13], xmm0
movups xmm1, xmmword [rbp - 0x58]
movups xmmword [r13 + 0x10], xmm1
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x180003979
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x180003974
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800045d4
mov rcx, r8
call fcn.180018cc0
mov qword [r15 + 0x10], rbx
mov qword [r15 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r15], 0
mov rdx, qword [r12 + 0x18]
cmp rdx, 0x10
jb 0x180004578
inc rdx
mov rcx, qword [r12]
cmp rdx, 0x1000
jb 0x180004573
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800045c8
jmp 0x180004570
xor r9d, r9d
lea r8d, [r9 + 7]
lea rdx, [rbp + 0xc120]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
test eax, eax
je 0x180003a6c
lea r8, [rbp + 0xc120]
lea rdx, str._s
lea rcx, [rbp - 0x30]
call fcn.180001180
lea rdx, [rbp + 0x100]
lea rcx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x180003a63
nop dword [rax]
lea rcx, str.Startup_Item:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180003a44
lea rdx, [rbp + 0x12c]
lea rcx, str.Startup_Item:__s_n
call fcn.180001120
lea rdx, [rbp + 0x100]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x180003a20
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x180003a78
lea rcx, str.Error_finding_startup_items
jmp 0x180003a73
lea rcx, str.Error_getting_startup_directory
call fcn.18001db60
xor edi, edi
mov dword [rsp + 0x68], edi
lea ecx, [rdi + 0x1c]
call fcn.180020ffc
mov rsi, rax
test rax, rax
jne 0x180003a9a
lea rcx, str.Error_allocating_memory_needed_to_call_GetExtendedTcpTable
call fcn.18001db60
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 5
mov r9d, 2
xor r8d, r8d
lea rdx, [rsp + 0x68]
mov rcx, rsi
call qword [sym.imp.IPHLPAPI.DLL_GetExtendedTcpTable]
cmp eax, 0x7a
jne 0x180003ae7
mov rcx, rsi
call fcn.180020c30
mov ecx, dword [rsp + 0x68]
call fcn.180020ffc
mov rsi, rax
test rax, rax
jne 0x180003ae7
lea rcx, str.Error_allocating_memory_needed_to_call_GetExtendedTcpTable
call fcn.18001db60
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 5
mov r9d, 2
xor r8d, r8d
lea rdx, [rsp + 0x68]
mov rcx, rsi
call qword [sym.imp.IPHLPAPI.DLL_GetExtendedTcpTable]
test eax, eax
jne 0x180003cfb
mov r15d, edi
cmp dword [rsi], edi
jbe 0x180003bf9
nop dword [rax]
mov r14d, r15d
lea rcx, str.Local_Address:__s:_u_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180003b62
lea rdi, [r14 + r14*2]
movzx ecx, word [rsi + rdi*8 + 0xc]
call qword [sym.imp.WS2_32.dll_ntohs]
movzx ebx, ax
mov ecx, dword [rsi + rdi*8 + 8]
call qword [sym.imp.WS2_32.dll_inet_ntoa]
mov rdx, rax
mov r8d, ebx
lea rcx, str.Local_Address:__s:_u_n
call fcn.180001120
lea rcx, str.Remote_Address:__s:_u_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180003ba1
lea rdi, [r14 + r14*2]
movzx ecx, word [rsi + rdi*8 + 0x14]
call qword [sym.imp.WS2_32.dll_ntohs]
movzx ebx, ax
mov ecx, dword [rsi + rdi*8 + 0x10]
call qword [sym.imp.WS2_32.dll_inet_ntoa]
mov rdx, rax
mov r8d, ebx
lea rcx, str.Remote_Address:__s:_u_n
call fcn.180001120
lea rcx, str.State:__u_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180003bc6
lea rax, [r14 + r14*2]
mov edx, dword [rsi + rax*8 + 4]
lea rcx, str.State:__u_n
call fcn.180001120
lea rcx, str.PID:__u_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180003beb
lea rax, [r14 + r14*2]
mov edx, dword [rsi + rax*8 + 0x18]
lea rcx, str.PID:__u_n
call fcn.180001120
inc r15d
cmp r15d, dword [rsi]
jb 0x180003b20
xor edi, edi
mov r15, qword [rsp + 0x40]
mov rcx, rsi
call fcn.180020c30
lea rcx, str.The_volume_of_the_cube_with_side__lf_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180003c33
movaps xmm2, xmm7
movq r8, xmm7
movaps xmm1, xmm7
movq rdx, xmm7
lea rcx, str.The_volume_of_the_cube_with_side__lf_is:__lf_n
call fcn.180001120
mov rdx, r15
cmp qword [r15 + 0x18], 0x10
jb 0x180003c40
mov rdx, qword [r15]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov r9d, 0x20119
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov r14d, eax
lea rcx, str.The_volume_of_the_cylinder_with_radius__lf_and_height__lf_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180003c9d
movsd xmm3, qword [0x18004d238]
movq r9, xmm3
movaps xmm2, xmm7
movq r8, xmm7
movaps xmm1, xmm7
movq rdx, xmm7
lea rcx, str.The_volume_of_the_cylinder_with_radius__lf_and_height__lf_is:__lf_n
call fcn.180001120
lea rcx, str.The_natural_logarithm_of_10_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180003ccf
movsd xmm0, qword [0x18004d270]
call fcn.18003a3a0
movaps xmm1, xmm0
movq rdx, xmm0
lea rcx, str.The_natural_logarithm_of_10_is:__lf_n
call fcn.180001120
mov dword [rbp - 0x78], edi
xor edx, edx
xor ecx, ecx
mov r8d, 0xf003f
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov rsi, rax
test rax, rax
jne 0x180003d15
lea rcx, str.Error_opening_service_control_manager
call fcn.18001db60
jmp 0x180003e46
lea rcx, str.GetExtendedTcpTable_failed_with_error
call fcn.18001db60
test rsi, rsi
je 0x180003c06
jmp 0x180003bfe
lea rax, [rbp - 0x78]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x74]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0xc110]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc000
lea r9, [rbp + 0x100]
mov edx, 0x30
lea r8d, [rdx - 0x2d]
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
test eax, eax
jne 0x180003d71
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xea
je 0x180003d71
lea rcx, str.Error_enumerating_services
call fcn.18001db60
cmp dword [rbp - 0x74], 0
jbe 0x180003e3b
nop dword [rax + rax]
mov ebx, edi
lea rcx, str.Service_Name:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180003dae
lea rdx, [rbx + rbx*2]
add rdx, rdx
mov rdx, qword [rbp + rdx*8 + 0x100]
lea rcx, str.Service_Name:__s_n
call fcn.180001120
lea rcx, str.Display_Name:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180003dda
lea rdx, [rbx + rbx*2]
add rdx, rdx
mov rdx, qword [rbp + rdx*8 + 0x108]
lea rcx, str.Display_Name:__s_n
call fcn.180001120
lea rcx, str.Service_Type:__lu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180003e05
lea rax, [rbx + rbx*2]
add rax, rax
mov edx, dword [rbp + rax*8 + 0x110]
lea rcx, str.Service_Type:__lu_n
call fcn.180001120
lea rcx, str.Service_State:__lu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180003e30
lea rax, [rbx + rbx*2]
add rax, rax
mov edx, dword [rbp + rax*8 + 0x114]
lea rcx, str.Service_State:__lu_n
call fcn.180001120
inc edi
cmp edi, dword [rbp - 0x74]
jb 0x180003d80
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor edi, edi
test r14d, r14d
je 0x180003ef1
movups xmm0, xmmword [rbp - 0x68]
movups xmmword [r13], xmm0
movups xmm1, xmmword [rbp - 0x58]
movups xmmword [r13 + 0x10], xmm1
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x180003e9b
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x180003e96
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800045da
mov rcx, r8
call fcn.180018cc0
mov qword [r15 + 0x10], rdi
mov qword [r15 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r15], 0
mov rdx, qword [r12 + 0x18]
cmp rdx, 0x10
jb 0x180003ee7
inc rdx
mov rcx, qword [r12]
cmp rdx, 0x1000
jb 0x180003ee2
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800045e0
mov rcx, r8
call fcn.180018cc0
mov qword [r12 + 0x10], rdi
jmp 0x18000457d
lea rax, [rbp + 0xc110]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionRun
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180003f95
mov ebx, edi
mov r9d, 0x100
lea r8, [rbp + 0xc120]
xor edx, edx
mov rcx, qword [rbp + 0xc110]
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
jne 0x180003f86
inc ebx
lea rcx, str.Startup_Item:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180003f66
lea rdx, [rbp + 0xc120]
lea rcx, str.Startup_Item:__s_n
call fcn.180001120
mov r9d, 0x100
lea r8, [rbp + 0xc120]
mov edx, ebx
mov rcx, qword [rbp + 0xc110]
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
je 0x180003f40
mov rcx, qword [rbp + 0xc110]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x180003fa1
lea rcx, str.Error_opening_registry_key
call fcn.18001db60
lea rcx, str.Factorial_of__d:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180003fc7
mov edx, 5
lea r8d, [rdx + 0x73]
lea rcx, str.Factorial_of__d:__d_n
call fcn.180001120
lea rcx, str.Square_root_of__.2f:__.2f_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000401e
xorps xmm0, xmm0
movss xmm1, dword [0x18004d288]
ucomiss xmm0, xmm1
ja 0x180003ff1
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x180003ff9
movaps xmm0, xmm1
call fcn.18003af10
xorps xmm2, xmm2
cvtss2sd xmm2, xmm0
movq r8, xmm2
movsd xmm1, qword [0x18004d280]
movq rdx, xmm1
lea rcx, str.Square_root_of__.2f:__.2f_n
call fcn.180001120
mov esi, 1
mov dword [rbp - 0x70], esi
lea rcx, str.Remainder_of__d_and__d_is:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000404d
mov r9d, esi
lea edx, [rsi + 0x10]
lea r8d, [rsi + 3]
lea rcx, str.Remainder_of__d_and__d_is:__d_n
call fcn.180001120
lea rcx, [rbp + 0xc110]
call qword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x18000408a
lea rcx, str.Mouse_Position:__ld___ld_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004096
mov r8d, dword [rbp + 0xc114]
mov edx, dword [rbp + 0xc110]
lea rcx, str.Mouse_Position:__ld___ld_n
call fcn.180001120
jmp 0x180004096
lea rcx, str.Error_getting_mouse_position
call fcn.18001db60
lea rcx, str.Square_of__d_is__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800040bc
mov edx, 4
lea r8d, [rdx + 0xc]
lea rcx, str.Square_of__d_is__d_n
call fcn.180001120
mov rdx, r12
cmp qword [r12 + 0x18], 0x10
jb 0x1800040cb
mov rdx, qword [r12]
lea rax, [rsp + 0x6c]
mov qword [rsp + 0x28], rax
mov r14, qword [rbp + 0xc100]
mov qword [rsp + 0x20], r14
lea r9, [rbp - 0x70]
xor r8d, r8d
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
movsd xmm6, qword [0x18004d208]
movaps xmm0, xmm6
call fcn.18003a8d0
movaps xmm7, xmm0
lea rcx, str.The_sine_value_of__lf_radians_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004133
movaps xmm2, xmm7
movq r8, xmm7
movaps xmm1, xmm6
movq rdx, xmm6
lea rcx, str.The_sine_value_of__lf_radians_is:__lf_n
call fcn.180001120
lea rcx, str.Sum:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004155
mov edx, 8
lea rcx, str.Sum:__d_n
call fcn.180001120
lea rcx, str.Hello__world__n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004172
lea rcx, str.Hello__world__n
call fcn.180001120
mov r8d, dword [rsp + 0x6c]
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
mov rdx, r14
lea rcx, [rsp + 0x48]
call fcn.1800149b0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xc124], xmm0
movups xmmword [rbp + 0xc134], xmm0
movups xmmword [rbp + 0xc144], xmm0
movups xmmword [rbp + 0xc154], xmm0
movups xmmword [rbp + 0xc164], xmm0
movups xmmword [rbp + 0xc174], xmm0
movups xmmword [rbp + 0xc184], xmm0
movups xmmword [rbp + 0xc194], xmm0
movups xmmword [rbp + 0xc1a4], xmm0
mov qword [rbp + 0xc1b4], rax
mov dword [rbp + 0xc120], 0x9c
lea rcx, [rbp + 0xc120]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x18000423c
lea rcx, str.Operating_System_Version:__d._d._d__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004248
lea rax, [rbp + 0xc134]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp + 0xc12c]
mov r8d, dword [rbp + 0xc128]
mov edx, dword [rbp + 0xc124]
lea rcx, str.Operating_System_Version:__d._d._d__s_n
call fcn.180001120
jmp 0x180004248
lea rcx, str.Error_getting_OS_version
call fcn.18001db60
lea rcx, [rbp - 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea rcx, str.Processor_Architecture:
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000426f
lea rcx, str.Processor_Architecture:
call fcn.180001120
movzx eax, word [rbp - 0x68]
test eax, eax
je 0x1800042cf
cmp eax, 5
je 0x1800042b5
cmp eax, 9
je 0x18000429b
lea rcx, str.Unknown_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800042ec
lea rcx, str.Unknown_n
jmp 0x1800042e7
lea rcx, str.AMD64_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800042ec
lea rcx, str.AMD64_n
jmp 0x1800042e7
lea rcx, str.ARM_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800042ec
lea rcx, str.ARM_n
jmp 0x1800042e7
lea rcx, str.Intel_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800042ec
lea rcx, str.Intel_n
call fcn.180001120
lea rcx, str.Number_of_Processors:__u_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000430c
mov edx, dword [rbp - 0x48]
lea rcx, str.Number_of_Processors:__u_n
call fcn.180001120
lea rcx, str.Unsigned_long_integer:__lu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000432e
mov edx, 0xffffffff
lea rcx, str.Unsigned_long_integer:__lu_n
call fcn.180001120
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov r15d, 9
nop
lea ebx, [rsi + rdi]
lea edi, [rsi]
mov esi, ebx
lea rcx, [0x18004c408]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004366
mov edx, ebx
lea rcx, [0x18004c408]
call fcn.180001120
sub r15, 1
jne 0x180004340
lea rcx, [0x18004bd68]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
mov r15, qword [rsp + 0x40]
jns 0x18000438e
lea rcx, [0x18004bd68]
call fcn.180001120
lea rcx, str.Hello__World__n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800043ab
lea rcx, str.Hello__World__n
call fcn.180001120
lea rax, [rbp + 0xc100]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersion
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x180004462
mov dword [rbp - 0x78], 0x14
lea rax, [rbp - 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xc110]
xor r8d, r8d
lea rdx, str.InstallDate
mov rcx, qword [rbp + 0xc100]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x180004447
lea rcx, str.Operating_System_Install_Date:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004453
lea rdx, [rbp - 0x68]
lea rcx, str.Operating_System_Install_Date:__s_n
call fcn.180001120
mov rcx, qword [rbp + 0xc100]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x18000446e
lea rcx, str.Error_getting_OS_install_date
call fcn.18001db60
mov rcx, qword [rbp + 0xc100]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x18000446e
lea rcx, str.Error_opening_registry_key
call fcn.18001db60
mov rcx, r14
call fcn.180020c30
lea rcx, str.Current_date:_2024_04_07_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180004493
lea rcx, str.Current_date:_2024_04_07_n
call fcn.180001120
lea rcx, str.Decimal_integer:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800044b5
mov edx, 0x3039
lea rcx, str.Decimal_integer:__d_n
call fcn.180001120
lea rcx, str.The_maximum_number_between__d_and__d_is__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800044e0
mov edx, reloc.WS2_32.dll_ntohs
mov r9d, 0x14
mov r8d, r9d
lea rcx, str.The_maximum_number_between__d_and__d_is__d_n
call fcn.180001120
xor ebx, ebx
movups xmm0, xmmword [rsp + 0x48]
movups xmmword [r13], xmm0
movups xmm1, xmmword [rsp + 0x58]
movups xmmword [r13 + 0x10], xmm1
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x180004530
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x18000452b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800045c2
mov rcx, r8
call fcn.180018cc0
mov qword [r15 + 0x10], rbx
mov qword [r15 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r15], 0
mov rdx, qword [r12 + 0x18]
cmp rdx, 0x10
jb 0x180004578
inc rdx
mov rcx, qword [r12]
cmp rdx, 0x1000
jb 0x180004573
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800045ce
mov rcx, r8
call fcn.180018cc0
mov qword [r12 + 0x10], rbx
mov qword [r12 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r12], 0
mov rax, r13
mov rcx, qword [rbp + 0xc230]
xor rcx, rsp
call fcn.180018ca0
lea r11, [rsp + 0xc360]
mov rbx, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18001e488
nop
call fcn.18001e488
int3
call fcn.18001e488
nop
call fcn.18001e488
int3
call fcn.18001e488
nop
call fcn.18001e488
int3