Function at 0x4020af
Capabilities:
Get cpu information
Get hostname
Get memory capacity
Get system information on windows
Query or enumerate registry value

Disassembly:
push rbp
push rdi
sub rsp, 0x478
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x410], rcx
lea rax, [rbp + 0x3c0]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetSystemInfo]
call rax
mov dword [rbp + 0x380], 0x40
lea rax, [rbp + 0x380]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
call rax
movabs rax, 0x206e776f6e6b6e55
mov edx, 0x534f
mov qword [rbp + 0x300], rax
mov qword [rbp + 0x308], rdx
lea rdx, [rbp + 0x310]
mov eax, 0
mov ecx, 0xe
mov rdi, rdx
rep stosq qword [rdi], rax
lea rax, [rbp + 0x300]
mov edx, pe_nt_image_headers64
mov rcx, rax
call sym.get_os_name
mov dword [rbp + 0x1fc], 0x100
lea rdx, [rbp + 0x1fc]
lea rax, [rbp + 0x200]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetComputerNameA]
call rax
movabs rax, 0x206e776f6e6b6e55
movabs rdx, 0x6f737365636f7250
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], rdx
mov qword [rbp + 0x100], 0x72
mov qword [rbp + 0x108], 0
lea rdx, [rbp + 0x110]
mov eax, 0
mov ecx, 0x1c
mov rdi, rdx
rep stosq qword [rdi], rax
mov dword [rbp + 0x1fc], 0x100
lea rax, [rbp + 0xe8]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
mov r8d, 0
lea rdx, str.HARDWAREDESCRIPTIONSystemCentralProcessor0
mov rcx, 0xffffffff80000002
mov rax, qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
call rax
test eax, eax
jne 0x402240
mov rax, qword [rbp + 0xe8]
lea rdx, [rbp + 0x1fc]
mov qword [rsp + 0x28], rdx
lea rdx, [rbp + 0xf0]
mov qword [rsp + 0x20], rdx
mov r9d, 0
mov r8d, 0
lea rdx, str.ProcessorNameString
mov rcx, rax
mov rax, qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
call rax
mov rax, qword [rbp + 0xe8]
mov rcx, rax
mov rax, qword [sym.imp.ADVAPI32.dll_RegCloseKey]
call rax
movabs rax, 0x206e776f6e6b6e55
movabs rdx, 0x6c65646f4d
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
lea rdx, [rbp - 0x10]
mov eax, 0
mov ecx, 0x1e
mov rdi, rdx
rep stosq qword [rdi], rax
mov dword [rbp + 0x1fc], 0x100
lea rax, [rbp + 0xe8]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
mov r8d, 0
lea rdx, str.HARDWAREDESCRIPTIONSystemBIOS
mov rcx, 0xffffffff80000002
mov rax, qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
call rax
test eax, eax
jne 0x4022fb
mov rax, qword [rbp + 0xe8]
lea rdx, [rbp + 0x1fc]
mov qword [rsp + 0x28], rdx
lea rdx, [rbp - 0x20]
mov qword [rsp + 0x20], rdx
mov r9d, 0
mov r8d, 0
lea rdx, str.SystemProductName
mov rcx, rax
mov rax, qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
call rax
mov rax, qword [rbp + 0xe8]
mov rcx, rax
mov rax, qword [sym.imp.ADVAPI32.dll_RegCloseKey]
call rax
movzx eax, word [rbp + 0x3c0]
cmp ax, 9
jne 0x402311
lea rax, [0x004063e2]
jmp 0x402318
lea rax, [0x004063e6]
mov rdx, qword [rbp + 0x388]
shr rdx, 0x14
mov r8, rdx
mov ecx, dword [rbp + 0x3e0]
lea rdx, str.Your_Secret_Token
mov qword [rsp + 0x58], rdx
lea rdx, [0x004064d9]
mov qword [rsp + 0x50], rdx
lea rdx, [rbp - 0x20]
mov qword [rsp + 0x48], rdx
lea rdx, [rbp + 0xf0]
mov qword [rsp + 0x40], rdx
lea rdx, [rbp + 0x300]
mov qword [rsp + 0x38], rdx
lea rdx, [rbp + 0x200]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
lea rax, str.Windows
mov qword [rsp + 0x20], rax
mov r9, r8
mov r8d, ecx
lea rdx, str._n___cpuCores_:___u___n___totalMemory_:___llu_MB___n___platform_:___s___n___arch_:___s___n___model_:___s___n___osVersion_:___s___n___processorName_:___s___n___systemModel_:___s___n___configuration_:___s___n___token_:___s__n
mov rcx, qword [rbp + 0x410]
call sym.sprintf
mov rdx, qword [rbp + 0x410]
lea rcx, str.System_Info_JSON:_n_s_n
call sym.printf
nop
add rsp, 0x478
pop rdi
pop rbp
ret