Function at 0x1000afff
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x1cc
mov eax, 0x1005e0fb
call fcn.100418da
xor ebx, ebx
push ebx
push ebx
lea eax, [ebp - 0xf8]
call fcn.10029909
mov dword [ebp - 4], 2
cmp edx, ebx
je 0x1000b039
mov esi, eax
mov ecx, edx
call fcn.1000322a
test al, al
je 0x1000bad5
lea eax, [ebp - 0x160]
push eax
call fcn.10009a4d
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 3
call fcn.1000c16c
lea eax, [ebp - 0x160]
mov dword [ebp - 0xd8], eax
lea eax, [ebp - 0xdc]
push eax
push 0x1003a14f
push str.select__from_Win32_DiskDrive
mov dword [ebp - 0xdc], str.SerialNumber
call fcn.10039fc0
mov eax, dword [ebp - 0x150]
sub eax, dword [ebp - 0x154]
push 0x1c
cdq
pop ecx
idiv ecx
test eax, eax
je 0x1000b128
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0xd8], esp
push 0x100641b8
call fcn.10002030
lea eax, [ebp - 0x130]
push eax
lea ecx, [ebp - 0x160]
call fcn.10009fc9
push eax
lea eax, [ebp - 0x114]
push eax
mov byte [ebp - 4], 4
call fcn.1000121f
add esp, 0x10
mov byte [ebp - 4], 5
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10028a1c
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_disk_sn
mov byte [ebp - 4], 6
call fcn.10029ba7
mov edi, eax
mov byte [ebp - 4], 5
call fcn.10028c6f
push ebx
push 1
lea ecx, [ebp - 0x114]
call fcn.10002243
push ebx
push 1
lea esi, [ebp - 0x130]
mov byte [ebp - 4], 3
call fcn.1000233f
lea eax, [ebp - 0x114]
push eax
call fcn.10036530
sub esp, 0x14
mov byte [ebp - 4], 7
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10028a1c
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_os
mov byte [ebp - 4], 8
call fcn.10029ba7
mov edi, eax
mov byte [ebp - 4], 7
call fcn.10028c6f
push ebx
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 3
call fcn.10002243
mov ebx, str.InstallDate
mov edi, str.select__from_Win32_OperatingSystem
lea ecx, [ebp - 0x114]
call fcn.1000a1ec
push eax
lea eax, [ebp - 0xd4]
push eax
mov byte [ebp - 4], 9
call fcn.1000ae72
pop ecx
pop ecx
xor ebx, ebx
push ebx
push 1
lea esi, [ebp - 0x114]
mov byte [ebp - 4], 0xb
call fcn.1000233f
cmp dword [ebp - 0xc0], ebx
je 0x1000b21b
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.1000121f
sub esp, 0x10
mov byte [ebp - 4], 0xc
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10028a1c
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_os_insttime
mov byte [ebp - 4], 0xd
call fcn.10029ba7
mov edi, eax
mov byte [ebp - 4], 0xc
call fcn.10028c6f
push ebx
push 1
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0xb
call fcn.10002243
lea eax, [ebp - 0x198]
push eax
call fcn.10009a4d
mov edi, str.SerialNumber
push edi
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0xe
call fcn.10002030
mov eax, esi
push eax
lea eax, [ebp - 0x198]
mov byte [ebp - 4], 0xf
call fcn.1000c105
push ebx
push 1
mov byte [ebp - 4], 0xe
call fcn.1000233f
push str.ReleaseDate
lea esi, [ebp - 0x2c]
call fcn.10002030
mov eax, esi
push eax
lea eax, [ebp - 0x198]
mov byte [ebp - 4], 0x10
call fcn.1000c105
push ebx
push 1
mov byte [ebp - 4], 0xe
call fcn.1000233f
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x1d8]
push str.select_SerialNumber__ReleaseDate_from_Win32_BIOS
push eax
call fcn.1003a2ed
add esp, 0xc
push edi
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x11
call fcn.10002030
mov eax, esi
push eax
lea ebx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x12
call fcn.1000c1a8
push eax
lea esi, [ebp - 0x9c]
call fcn.1000204f
xor edi, edi
push edi
push 1
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.1000233f
push str.ReleaseDate
lea esi, [ebp - 0x130]
call fcn.10002030
mov eax, esi
push eax
mov byte [ebp - 4], 0x15
call fcn.1000c1a8
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.1000ae72
pop ecx
pop ecx
push edi
push 1
mov byte [ebp - 4], 0x17
call fcn.1000233f
cmp dword [ebp - 0x88], edi
je 0x1000b374
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.1000121f
sub esp, 0x10
mov byte [ebp - 4], 0x18
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10028a1c
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_bios_sn
mov byte [ebp - 4], 0x19
call fcn.10029ba7
mov edi, eax
mov byte [ebp - 4], 0x18
call fcn.10028c6f
push 0
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x17
call fcn.10002243
cmp dword [ebp - 0xa4], 0
je 0x1000b3d9
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.1000121f
sub esp, 0x10
mov byte [ebp - 4], 0x1a
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10028a1c
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_delivery
mov byte [ebp - 4], 0x1b
call fcn.10029ba7
mov edi, eax
mov byte [ebp - 4], 0x1a
call fcn.10028c6f
push 0
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x17
call fcn.10002243
mov ebx, str.Vendor
mov edi, str.select__from_Win32_ComputerSystemProduct
lea ecx, [ebp - 0x2c]
call fcn.1000a1ec
push eax
lea eax, [ebp - 0x114]
push eax
mov byte [ebp - 4], 0x1c
call fcn.1000121f
sub esp, 0x10
mov byte [ebp - 4], 0x1d
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10028a1c
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_computer_vendor
mov byte [ebp - 4], 0x1e
call fcn.10029ba7
mov edi, eax
mov byte [ebp - 4], 0x1d
call fcn.10028c6f
push 0
push 1
lea ecx, [ebp - 0x114]
call fcn.10002243
push 0
push 1
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x17
call fcn.1000233f
mov ebx, 0x10064344
mov edi, str.select__from_Win32_ComputerSystemProduct
lea ecx, [ebp - 0x48]
call fcn.1000a1ec
xor esi, esi
mov byte [ebp - 4], 0x1f
cmp dword [ebp - 0x34], esi
je 0x1000b474
cmp dword [ebp - 0x34], 2
ja 0x1000b4aa
mov ebx, str.Model
mov edi, str.Select_Model_from_WIN32_ComputerSystem
lea ecx, [ebp - 0x114]
call fcn.1000a1ec
push 0xffffffffffffffff
push esi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x20
call fcn.1000228e
push esi
push 1
lea esi, [ebp - 0x114]
mov byte [ebp - 4], 0x1f
call fcn.1000233f
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.1000121f
sub esp, 0x10
mov byte [ebp - 4], 0x21
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10028a1c
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_computer_version
mov byte [ebp - 4], 0x22
call fcn.10029ba7
mov edi, eax
mov byte [ebp - 4], 0x21
call fcn.10028c6f
push 0
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x1f
call fcn.10002243
lea eax, [ebp - 0x148]
push eax
call fcn.10009a4d
mov edi, str.MaxClockSpeed
push edi
lea esi, [ebp - 0x130]
mov byte [ebp - 4], 0x23
call fcn.10002030
mov eax, esi
push eax
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x24
call fcn.1000c105
push 0
push 1
mov byte [ebp - 4], 0x23
call fcn.1000233f
mov ebx, str.Name
push ebx
lea esi, [ebp - 0x130]
call fcn.10002030
mov eax, esi
push eax
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x25
call fcn.1000c105
push 0
push 1
mov byte [ebp - 4], 0x23
call fcn.1000233f
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x1b8]
push str.select_Name__MaxClockSpeed_from_Win32_Processor
push eax
call fcn.1003a2ed
add esp, 0xc
push ebx
lea esi, [ebp - 0x130]
mov byte [ebp - 4], 0x26
call fcn.10002030
mov eax, esi
push eax
lea ebx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x27
call fcn.1000c1a8
push eax
lea esi, [ebp - 0x80]
call fcn.1000204f
push 0
push 1
lea esi, [ebp - 0x130]
mov byte [ebp - 4], 0x29
call fcn.1000233f
push edi
lea esi, [ebp - 0x2c]
call fcn.10002030
mov eax, esi
push eax
mov byte [ebp - 4], 0x2a
call fcn.1000c1a8
mov ecx, fcn.1000a072
test ecx, ecx
je 0x1000b605
cmp dword [eax + 0x18], 8
jb 0x1000b5f5
mov eax, dword [eax + 4]
jmp 0x1000b5f8
add eax, 4
push eax
call fcn.1000a072
pop ecx
mov ebx, eax
xor edi, edi
jmp 0x1000b609
xor edi, edi
xor ebx, ebx
push edi
push 1
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x29
call fcn.1000233f
cmp dword [ebp - 0x6c], edi
je 0x1000b678
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.1000121f
sub esp, 0x10
mov byte [ebp - 4], 0x2b
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10028a1c
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_cpu_model
mov byte [ebp - 4], 0x2c
call fcn.10029ba7
mov edi, eax
mov byte [ebp - 4], 0x2b
call fcn.10028c6f
push 0
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x29
call fcn.10002243
xor edi, edi
cmp ebx, edi
je 0x1000b6af
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0xd8], esp
push ebx
call fcn.1002893d
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_cpu_frequency
mov byte [ebp - 4], 0x2d
call fcn.10029ba7
mov edi, eax
mov byte [ebp - 4], 0x29
call fcn.10028c6f
xor edi, edi
lea eax, [ebp - 0x148]
call fcn.1000c16c
mov ebx, str.Manufacturer
push ebx
lea esi, [ebp - 0x2c]
call fcn.10002030
mov eax, esi
push eax
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x2e
call fcn.1000c105
push edi
push 1
mov byte [ebp - 4], 0x29
call fcn.1000233f
push str.Product
lea esi, [ebp - 0x2c]
call fcn.10002030
mov eax, esi
push eax
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x2f
call fcn.1000c105
push edi
push 1
mov byte [ebp - 4], 0x29
call fcn.1000233f
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x180]
push str.select_Manufacturer__Product_from_Win32_BaseBoard
push eax
call fcn.1003a2ed
add esp, 0xc
push eax
lea esi, [ebp - 0x1b8]
mov byte [ebp - 4], 0x30
call fcn.1000c2f7
lea eax, [ebp - 0x180]
push eax
mov byte [ebp - 4], 0x29
call fcn.1000c2cf
push ebx
lea esi, [ebp - 0x114]
call fcn.10002030
mov eax, esi
push eax
lea ebx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x31
call fcn.1000c1a8
push eax
lea esi, [ebp - 0x64]
call fcn.1000204f
push edi
push 1
lea esi, [ebp - 0x114]
mov byte [ebp - 4], 0x33
call fcn.1000233f
cmp dword [ebp - 0x50], edi
je 0x1000b868
push str.Product
lea esi, [ebp - 0x130]
call fcn.10002030
mov eax, esi
push eax
mov byte [ebp - 4], 0x34
call fcn.1000c1a8
push eax
lea esi, [ebp - 0x2c]
call fcn.1000204f
push edi
push 1
lea esi, [ebp - 0x130]
mov byte [ebp - 4], 0x36
call fcn.1000233f
cmp dword [ebp - 0x18], edi
je 0x1000b803
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x17c]
push 0x100644f4
push eax
call fcn.10006d4a
add esp, 0xc
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x37
call fcn.10005e7d
push edi
push 1
lea esi, [ebp - 0x17c]
mov byte [ebp - 4], 0x36
call fcn.1000233f
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x17c]
push eax
call fcn.1000121f
sub esp, 0x10
mov byte [ebp - 4], 0x38
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10028a1c
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_motherboard_model
mov byte [ebp - 4], 0x39
call fcn.10029ba7
mov edi, eax
mov byte [ebp - 4], 0x38
call fcn.10028c6f
push 0
push 1
lea ecx, [ebp - 0x17c]
call fcn.10002243
push 0
push 1
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x33
call fcn.1000233f
mov ebx, 0x100644f8
mov edi, str.select_TotalPhysicalMemory_from_Win32_ComputerSystem
lea ecx, [ebp - 0x17c]
call fcn.1000a1ec
mov byte [ebp - 4], 0x3a
cmp dword [eax + 0x18], 8
jb 0x1000b88c
mov eax, dword [eax + 4]
jmp 0x1000b88f
add eax, 4
push eax
call fcn.1000a072
pop ecx
push 0
push 1
lea esi, [ebp - 0x17c]
mov ebx, eax
mov edi, edx
mov byte [ebp - 4], 0x33
call fcn.1000233f
mov eax, ebx
or eax, edi
je 0x1000b8eb
shrd ebx, edi, 0x14
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0xd8], esp
push ebx
shr edi, 0x14
call fcn.1002893d
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_memory_size
mov byte [ebp - 4], 0x3b
call fcn.10029ba7
mov edi, eax
mov byte [ebp - 4], 0x33
call fcn.10028c6f
call fcn.1000af51
mov ecx, eax
or ecx, edx
je 0x1000b92e
shrd eax, edx, 0x14
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0xd8], esp
push eax
shr edx, 0x14
call fcn.1002893d
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_disk_size
mov byte [ebp - 4], 0x3c
call fcn.10029ba7
mov edi, eax
mov byte [ebp - 4], 0x33
call fcn.10028c6f
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0xd8], esp
push str.replace
call fcn.1002899b
lea eax, [ebp - 0xf8]
push eax
mov edx, str.i_action
mov byte [ebp - 4], 0x3d
call fcn.10029ba7
mov edi, eax
mov byte [ebp - 4], 0x33
call fcn.10028c6f
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0xd8], esp
push str.client_unique
call fcn.1002899b
lea eax, [ebp - 0xf8]
push eax
mov edx, str.i_key_columns
mov byte [ebp - 4], 0x3e
call fcn.10029ba7
mov edi, eax
mov byte [ebp - 4], 0x33
call fcn.10028c6f
lea eax, [ebp - 0xf8]
push eax
mov ecx, str.t_hardware_summary
call fcn.10039cc0
push 0x10063c88
call fcn.1000608a
pop ecx
test eax, eax
je 0x1000b9c5
lea eax, [ebp - 0xf8]
push eax
call fcn.1000a91b
pop ecx
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x130]
call fcn.1002a06c
push eax
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x3f
call fcn.100011df
cmp dword [eax + 0x18], 8
pop ecx
jb 0x1000b9f3
mov eax, dword [eax + 4]
jmp 0x1000b9f6
add eax, 4
push str.lastHardwareSummary
mov esi, eax
mov ebx, str.Softwareprojonepodlp_smpcache_
mov edi, reloc.WS2_32.dll_bind
call fcn.10034247
xor ebx, ebx
xor edi, edi
push ebx
inc edi
push edi
lea esi, [ebp - 0x17c]
call fcn.1000233f
push ebx
push edi
lea ecx, [ebp - 0x130]
call fcn.10002243
push ebx
push edi
lea esi, [ebp - 0x64]
call fcn.1000233f
push ebx
push edi
lea esi, [ebp - 0x80]
call fcn.1000233f
lea eax, [ebp - 0x1b8]
push eax
mov byte [ebp - 4], 0x23
call fcn.1000c2cf
lea esi, [ebp - 0x148]
call fcn.1000c52d
push dword [ebp - 0x148]
call fcn.1004062b
pop ecx
push ebx
push edi
lea esi, [ebp - 0x48]
call fcn.1000233f
push ebx
push edi
lea esi, [ebp - 0xb8]
call fcn.1000233f
push ebx
push edi
lea esi, [ebp - 0x9c]
call fcn.1000233f
lea eax, [ebp - 0x1d8]
push eax
mov byte [ebp - 4], 0xe
call fcn.1000c2cf
lea esi, [ebp - 0x198]
call fcn.1000c52d
push dword [ebp - 0x198]
call fcn.1004062b
pop ecx
push ebx
push edi
lea esi, [ebp - 0xd4]
call fcn.1000233f
lea esi, [ebp - 0x160]
call fcn.1000c52d
push dword [ebp - 0x160]
call fcn.1004062b
pop ecx
or dword [ebp - 4], 0xffffffff
lea esi, [ebp - 0xf8]
call fcn.10028bec
call fcn.1004195d
ret