Function at 0x1000ab6d
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x1cc
mov eax, 0x1004d675
call fcn.10032dfa
xor ebx, ebx
push ebx
push ebx
lea eax, [ebp - 0xf8]
call fcn.1001c8c4
mov dword [ebp - 4], 2
cmp edx, ebx
je 0x1000aba7
mov esi, eax
mov ecx, edx
call fcn.1000a0ea
test al, al
je 0x1000b647
lea eax, [ebp - 0x160]
push eax
call fcn.10002068
lea eax, [ebp - 0x160]
push eax
mov byte [ebp - 4], 3
call fcn.1000bcd6
lea eax, [ebp - 0x160]
mov dword [ebp - 0xd8], eax
lea eax, [ebp - 0xdc]
push eax
push 0x1002c91a
push str.select__from_Win32_DiskDrive
mov dword [ebp - 0xdc], str.SerialNumber
call fcn.1002c78b
mov eax, dword [ebp - 0x150]
sub eax, dword [ebp - 0x154]
push 0x1c
cdq
pop ecx
idiv ecx
test eax, eax
je 0x1000ac97
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0xd8], esp
push 0x1005308c
call fcn.10002018
lea eax, [ebp - 0x130]
push eax
lea ecx, [ebp - 0x160]
call fcn.10009fb2
push eax
lea eax, [ebp - 0x114]
push eax
mov byte [ebp - 4], 4
call fcn.100011f4
add esp, 0x10
mov byte [ebp - 4], 5
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.1001ba57
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_disk_sn
mov byte [ebp - 4], 6
call fcn.1001cb62
mov edi, eax
mov byte [ebp - 4], 5
call fcn.1001bcaa
push ebx
push 1
lea ecx, [ebp - 0x114]
call fcn.10002245
push ebx
push 1
lea esi, [ebp - 0x130]
mov byte [ebp - 4], 3
call fcn.1000233d
lea eax, [ebp - 0x114]
push eax
call fcn.10028b68
sub esp, 0x14
mov byte [ebp - 4], 7
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.1001ba57
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_os
mov byte [ebp - 4], 8
call fcn.1001cb62
mov edi, eax
mov byte [ebp - 4], 7
call fcn.1001bcaa
push ebx
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 3
call fcn.10002245
mov ebx, str.InstallDate
mov edi, str.select__from_Win32_OperatingSystem
lea ecx, [ebp - 0x114]
call fcn.1000a21d
lea ecx, [ebp - 0xd4]
push ecx
mov ebx, eax
mov byte [ebp - 4], 9
call fcn.1000a9e5
pop ecx
xor ebx, ebx
push ebx
push 1
lea esi, [ebp - 0x114]
mov byte [ebp - 4], 0xb
call fcn.1000233d
cmp dword [ebp - 0xc0], ebx
je 0x1000ad8a
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.100011f4
sub esp, 0x10
mov byte [ebp - 4], 0xc
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.1001ba57
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_os_insttime
mov byte [ebp - 4], 0xd
call fcn.1001cb62
mov edi, eax
mov byte [ebp - 4], 0xc
call fcn.1001bcaa
push ebx
push 1
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0xb
call fcn.10002245
lea eax, [ebp - 0x198]
push eax
call fcn.10002068
mov edi, str.SerialNumber
push edi
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0xe
call fcn.10002018
mov eax, esi
push eax
lea eax, [ebp - 0x198]
mov byte [ebp - 4], 0xf
call fcn.1000bc6f
push ebx
push 1
mov byte [ebp - 4], 0xe
call fcn.1000233d
push str.ReleaseDate
lea esi, [ebp - 0x2c]
call fcn.10002018
mov eax, esi
push eax
lea eax, [ebp - 0x198]
mov byte [ebp - 4], 0x10
call fcn.1000bc6f
push ebx
push 1
mov byte [ebp - 4], 0xe
call fcn.1000233d
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x1d8]
push str.select_SerialNumber__ReleaseDate_from_Win32_BIOS
push eax
call fcn.1002cab8
add esp, 0xc
push edi
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x11
call fcn.10002018
mov eax, esi
push eax
lea ebx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x12
call fcn.1000bd43
push eax
lea esi, [ebp - 0x9c]
call fcn.10002038
xor edi, edi
push edi
push 1
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.1000233d
push str.ReleaseDate
lea esi, [ebp - 0x130]
call fcn.10002018
mov eax, esi
push eax
mov byte [ebp - 4], 0x15
call fcn.1000bd43
lea ecx, [ebp - 0xb8]
push ecx
mov ebx, eax
call fcn.1000a9e5
pop ecx
push edi
push 1
mov byte [ebp - 4], 0x17
call fcn.1000233d
cmp dword [ebp - 0x88], edi
je 0x1000aee3
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.100011f4
sub esp, 0x10
mov byte [ebp - 4], 0x18
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.1001ba57
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_bios_sn
mov byte [ebp - 4], 0x19
call fcn.1001cb62
mov edi, eax
mov byte [ebp - 4], 0x18
call fcn.1001bcaa
push 0
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x17
call fcn.10002245
cmp dword [ebp - 0xa4], 0
je 0x1000af48
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.100011f4
sub esp, 0x10
mov byte [ebp - 4], 0x1a
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.1001ba57
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_delivery
mov byte [ebp - 4], 0x1b
call fcn.1001cb62
mov edi, eax
mov byte [ebp - 4], 0x1a
call fcn.1001bcaa
push 0
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x17
call fcn.10002245
mov ebx, str.Vendor
mov edi, str.select__from_Win32_ComputerSystemProduct
lea ecx, [ebp - 0x2c]
call fcn.1000a21d
push eax
lea eax, [ebp - 0x114]
push eax
mov byte [ebp - 4], 0x1c
call fcn.100011f4
sub esp, 0x10
mov byte [ebp - 4], 0x1d
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.1001ba57
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_computer_vendor
mov byte [ebp - 4], 0x1e
call fcn.1001cb62
mov edi, eax
mov byte [ebp - 4], 0x1d
call fcn.1001bcaa
push 0
push 1
lea ecx, [ebp - 0x114]
call fcn.10002245
push 0
push 1
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x17
call fcn.1000233d
mov ebx, str.Version
mov edi, str.select__from_Win32_ComputerSystemProduct
lea ecx, [ebp - 0x48]
call fcn.1000a21d
mov byte [ebp - 4], 0x1f
cmp dword [ebp - 0x34], 0
je 0x1000afe2
cmp dword [ebp - 0x34], 2
ja 0x1000b01a
mov ebx, str.Model
mov edi, str.Select_Model_from_WIN32_ComputerSystem
lea ecx, [ebp - 0x114]
call fcn.1000a21d
push 0xffffffffffffffff
lea ecx, [ebp - 0x48]
push ecx
xor ebx, ebx
mov byte [ebp - 4], 0x20
call fcn.10002290
push ebx
push 1
lea esi, [ebp - 0x114]
mov byte [ebp - 4], 0x1f
call fcn.1000233d
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.100011f4
sub esp, 0x10
mov byte [ebp - 4], 0x21
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.1001ba57
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_computer_version
mov byte [ebp - 4], 0x22
call fcn.1001cb62
mov edi, eax
mov byte [ebp - 4], 0x21
call fcn.1001bcaa
push 0
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x1f
call fcn.10002245
lea eax, [ebp - 0x148]
push eax
call fcn.10002068
mov edi, str.MaxClockSpeed
push edi
lea esi, [ebp - 0x130]
mov byte [ebp - 4], 0x23
call fcn.10002018
mov eax, esi
push eax
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x24
call fcn.1000bc6f
push 0
push 1
mov byte [ebp - 4], 0x23
call fcn.1000233d
mov ebx, str.Name
push ebx
lea esi, [ebp - 0x130]
call fcn.10002018
mov eax, esi
push eax
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x25
call fcn.1000bc6f
push 0
push 1
mov byte [ebp - 4], 0x23
call fcn.1000233d
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x1b8]
push str.select_Name__MaxClockSpeed_from_Win32_Processor
push eax
call fcn.1002cab8
add esp, 0xc
push ebx
lea esi, [ebp - 0x130]
mov byte [ebp - 4], 0x26
call fcn.10002018
mov eax, esi
push eax
lea ebx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x27
call fcn.1000bd43
push eax
lea esi, [ebp - 0x80]
call fcn.10002038
push 0
push 1
lea esi, [ebp - 0x130]
mov byte [ebp - 4], 0x29
call fcn.1000233d
push edi
lea esi, [ebp - 0x2c]
call fcn.10002018
mov eax, esi
push eax
mov byte [ebp - 4], 0x2a
call fcn.1000bd43
mov ecx, fcn.1000a05c
test ecx, ecx
je 0x1000b175
cmp dword [eax + 0x18], 8
jb 0x1000b165
mov eax, dword [eax + 4]
jmp 0x1000b168
add eax, 4
push eax
call fcn.1000a05c
pop ecx
mov ebx, eax
xor edi, edi
jmp 0x1000b179
xor edi, edi
xor ebx, ebx
push edi
push 1
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x29
call fcn.1000233d
cmp dword [ebp - 0x6c], edi
je 0x1000b1e8
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.100011f4
sub esp, 0x10
mov byte [ebp - 4], 0x2b
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.1001ba57
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_cpu_model
mov byte [ebp - 4], 0x2c
call fcn.1001cb62
mov edi, eax
mov byte [ebp - 4], 0x2b
call fcn.1001bcaa
push 0
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x29
call fcn.10002245
xor edi, edi
cmp ebx, edi
je 0x1000b21f
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0xd8], esp
push ebx
call fcn.1001b991
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_cpu_frequency
mov byte [ebp - 4], 0x2d
call fcn.1001cb62
mov edi, eax
mov byte [ebp - 4], 0x29
call fcn.1001bcaa
xor edi, edi
lea eax, [ebp - 0x148]
push eax
call fcn.1000bcd6
mov ebx, str.Manufacturer
push ebx
lea esi, [ebp - 0x2c]
call fcn.10002018
mov eax, esi
push eax
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x2e
call fcn.1000bc6f
push edi
push 1
mov byte [ebp - 4], 0x29
call fcn.1000233d
push str.Product
lea esi, [ebp - 0x2c]
call fcn.10002018
mov eax, esi
push eax
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x2f
call fcn.1000bc6f
push edi
push 1
mov byte [ebp - 4], 0x29
call fcn.1000233d
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x180]
push str.select_Manufacturer__Product_from_Win32_BaseBoard
push eax
call fcn.1002cab8
add esp, 0xc
push eax
lea esi, [ebp - 0x1b8]
mov byte [ebp - 4], 0x30
call fcn.1000beaf
lea eax, [ebp - 0x180]
push eax
mov byte [ebp - 4], 0x29
call fcn.1000be87
push ebx
lea esi, [ebp - 0x114]
call fcn.10002018
mov eax, esi
push eax
lea ebx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x31
call fcn.1000bd43
push eax
lea esi, [ebp - 0x64]
call fcn.10002038
push edi
push 1
lea esi, [ebp - 0x114]
mov byte [ebp - 4], 0x33
call fcn.1000233d
cmp dword [ebp - 0x50], edi
je 0x1000b3d9
push str.Product
lea esi, [ebp - 0x130]
call fcn.10002018
mov eax, esi
push eax
mov byte [ebp - 4], 0x34
call fcn.1000bd43
push eax
lea esi, [ebp - 0x2c]
call fcn.10002038
push edi
push 1
lea esi, [ebp - 0x130]
mov byte [ebp - 4], 0x36
call fcn.1000233d
cmp dword [ebp - 0x18], edi
je 0x1000b374
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x17c]
push 0x100533c4
push eax
call fcn.10006e8b
add esp, 0xc
push 0xffffffffffffffff
push edi
lea esi, [ebp - 0x64]
mov byte [ebp - 4], 0x37
call fcn.10005ff5
push edi
push 1
lea esi, [ebp - 0x17c]
mov byte [ebp - 4], 0x36
call fcn.1000233d
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x17c]
push eax
call fcn.100011f4
sub esp, 0x10
mov byte [ebp - 4], 0x38
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.1001ba57
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_motherboard_model
mov byte [ebp - 4], 0x39
call fcn.1001cb62
mov edi, eax
mov byte [ebp - 4], 0x38
call fcn.1001bcaa
push 0
push 1
lea ecx, [ebp - 0x17c]
call fcn.10002245
push 0
push 1
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x33
call fcn.1000233d
mov ebx, 0x100533c8
mov edi, str.select_TotalPhysicalMemory_from_Win32_ComputerSystem
lea ecx, [ebp - 0x17c]
call fcn.1000a21d
mov byte [ebp - 4], 0x3a
cmp dword [eax + 0x18], 8
jb 0x1000b3fd
mov eax, dword [eax + 4]
jmp 0x1000b400
add eax, 4
push eax
call fcn.1000a05c
pop ecx
push 0
push 1
lea esi, [ebp - 0x17c]
mov ebx, eax
mov edi, edx
mov byte [ebp - 4], 0x33
call fcn.1000233d
mov eax, ebx
or eax, edi
je 0x1000b45c
shrd ebx, edi, 0x14
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0xd8], esp
push ebx
shr edi, 0x14
call fcn.1001b991
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_memory_size
mov byte [ebp - 4], 0x3b
call fcn.1001cb62
mov edi, eax
mov byte [ebp - 4], 0x33
call fcn.1001bcaa
call fcn.1000aabf
mov ecx, eax
or ecx, edx
je 0x1000b49f
shrd eax, edx, 0x14
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0xd8], esp
push eax
shr edx, 0x14
call fcn.1001b991
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_disk_size
mov byte [ebp - 4], 0x3c
call fcn.1001cb62
mov edi, eax
mov byte [ebp - 4], 0x33
call fcn.1001bcaa
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0xd8], esp
push str.replace
call fcn.1001b9d6
lea eax, [ebp - 0xf8]
push eax
mov edx, str.i_action
mov byte [ebp - 4], 0x3d
call fcn.1001cb62
mov edi, eax
mov byte [ebp - 4], 0x33
call fcn.1001bcaa
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0xd8], esp
push str.client_unique
call fcn.1001b9d6
lea eax, [ebp - 0xf8]
push eax
mov edx, str.i_key_columns
mov byte [ebp - 4], 0x3e
call fcn.1001cb62
mov edi, eax
mov byte [ebp - 4], 0x33
call fcn.1001bcaa
lea eax, [ebp - 0xf8]
push eax
mov ecx, str.t_hardware_summary
call fcn.1002c490
push 0x10052c54
call fcn.100061f3
pop ecx
test eax, eax
je 0x1000b536
lea eax, [ebp - 0xf8]
push eax
call fcn.1000a496
pop ecx
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x130]
call fcn.1001cfe3
push eax
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x3f
call fcn.100011b4
cmp dword [eax + 0x18], 8
pop ecx
jb 0x1000b564
mov eax, dword [eax + 4]
jmp 0x1000b567
add eax, 4
push 0
push eax
mov ebx, str.lastHardwareSummary
mov edi, str.Softwareprojonepodlp_smpcache_
mov esi, reloc.WS2_32.dll_bind
call fcn.10026d88
xor ebx, ebx
xor edi, edi
push ebx
inc edi
push edi
lea esi, [ebp - 0x17c]
call fcn.1000233d
push ebx
push edi
lea ecx, [ebp - 0x130]
call fcn.10002245
push ebx
push edi
lea esi, [ebp - 0x64]
call fcn.1000233d
push ebx
push edi
lea esi, [ebp - 0x80]
call fcn.1000233d
lea eax, [ebp - 0x1b8]
push eax
mov byte [ebp - 4], 0x23
call fcn.1000be87
lea esi, [ebp - 0x148]
call fcn.1000c039
push dword [ebp - 0x148]
call fcn.10031d3a
pop ecx
push ebx
push edi
lea esi, [ebp - 0x48]
call fcn.1000233d
push ebx
push edi
lea esi, [ebp - 0xb8]
call fcn.1000233d
push ebx
push edi
lea esi, [ebp - 0x9c]
call fcn.1000233d
lea eax, [ebp - 0x1d8]
push eax
mov byte [ebp - 4], 0xe
call fcn.1000be87
lea esi, [ebp - 0x198]
call fcn.1000c039
push dword [ebp - 0x198]
call fcn.10031d3a
pop ecx
push ebx
push edi
lea esi, [ebp - 0xd4]
call fcn.1000233d
lea esi, [ebp - 0x160]
call fcn.1000c039
push dword [ebp - 0x160]
call fcn.10031d3a
pop ecx
or dword [ebp - 4], 0xffffffff
lea esi, [ebp - 0xf8]
call fcn.1001bc27
call fcn.10032e7d
ret