Function at 0x1000affb
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x1cc
mov eax, 0x1005ec1c
call fcn.100422ea
xor ebx, ebx
push ebx
push ebx
lea eax, [ebp - 0xf8]
call fcn.10029f1e
mov dword [ebp - 4], 2
cmp edx, ebx
je 0x1000b035
mov esi, eax
mov ecx, edx
call fcn.10003208
test al, al
je 0x1000bad1
lea eax, [ebp - 0x160]
push eax
call fcn.10018913
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 3
call fcn.1000c168
lea eax, [ebp - 0x160]
mov dword [ebp - 0xd8], eax
lea eax, [ebp - 0xdc]
push eax
push 0x1003abc9
push str.select__from_Win32_DiskDrive
mov dword [ebp - 0xdc], str.SerialNumber
call fcn.1003aa3a
mov eax, dword [ebp - 0x150]
sub eax, dword [ebp - 0x154]
push 0x1c
cdq
pop ecx
idiv ecx
test eax, eax
je 0x1000b124
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0xd8], esp
push 0x10065220
call fcn.10002030
lea eax, [ebp - 0x130]
push eax
lea ecx, [ebp - 0x160]
call fcn.10009fc5
push eax
lea eax, [ebp - 0x114]
push eax
mov byte [ebp - 4], 4
call fcn.1000121f
add esp, 0x10
mov byte [ebp - 4], 5
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10029031
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_disk_sn
mov byte [ebp - 4], 6
call fcn.1002a1bc
mov edi, eax
mov byte [ebp - 4], 5
call fcn.10029284
push ebx
push 1
lea ecx, [ebp - 0x114]
call fcn.10002274
push ebx
push 1
lea esi, [ebp - 0x130]
mov byte [ebp - 4], 3
call fcn.10002370
lea eax, [ebp - 0x114]
push eax
call fcn.10036c96
sub esp, 0x14
mov byte [ebp - 4], 7
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10029031
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_os
mov byte [ebp - 4], 8
call fcn.1002a1bc
mov edi, eax
mov byte [ebp - 4], 7
call fcn.10029284
push ebx
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 3
call fcn.10002274
mov ebx, str.InstallDate
mov edi, str.select__from_Win32_OperatingSystem
lea ecx, [ebp - 0x114]
call fcn.1000a1e8
push eax
lea eax, [ebp - 0xd4]
push eax
mov byte [ebp - 4], 9
call fcn.1000ae6e
pop ecx
pop ecx
xor ebx, ebx
push ebx
push 1
lea esi, [ebp - 0x114]
mov byte [ebp - 4], 0xb
call fcn.10002370
cmp dword [ebp - 0xc0], ebx
je 0x1000b217
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.1000121f
sub esp, 0x10
mov byte [ebp - 4], 0xc
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10029031
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_os_insttime
mov byte [ebp - 4], 0xd
call fcn.1002a1bc
mov edi, eax
mov byte [ebp - 4], 0xc
call fcn.10029284
push ebx
push 1
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0xb
call fcn.10002274
lea eax, [ebp - 0x198]
push eax
call fcn.10018913
mov edi, str.SerialNumber
push edi
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0xe
call fcn.10002030
mov eax, esi
push eax
lea eax, [ebp - 0x198]
mov byte [ebp - 4], 0xf
call fcn.1000c101
push ebx
push 1
mov byte [ebp - 4], 0xe
call fcn.10002370
push str.ReleaseDate
lea esi, [ebp - 0x2c]
call fcn.10002030
mov eax, esi
push eax
lea eax, [ebp - 0x198]
mov byte [ebp - 4], 0x10
call fcn.1000c101
push ebx
push 1
mov byte [ebp - 4], 0xe
call fcn.10002370
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x1d8]
push str.select_SerialNumber__ReleaseDate_from_Win32_BIOS
push eax
call fcn.1003ad67
add esp, 0xc
push edi
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x11
call fcn.10002030
mov eax, esi
push eax
lea ebx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x12
call fcn.1000c1a4
push eax
lea esi, [ebp - 0x9c]
call fcn.1000204f
xor edi, edi
push edi
push 1
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.10002370
push str.ReleaseDate
lea esi, [ebp - 0x130]
call fcn.10002030
mov eax, esi
push eax
mov byte [ebp - 4], 0x15
call fcn.1000c1a4
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.1000ae6e
pop ecx
pop ecx
push edi
push 1
mov byte [ebp - 4], 0x17
call fcn.10002370
cmp dword [ebp - 0x88], edi
je 0x1000b370
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.1000121f
sub esp, 0x10
mov byte [ebp - 4], 0x18
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10029031
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_bios_sn
mov byte [ebp - 4], 0x19
call fcn.1002a1bc
mov edi, eax
mov byte [ebp - 4], 0x18
call fcn.10029284
push 0
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x17
call fcn.10002274
cmp dword [ebp - 0xa4], 0
je 0x1000b3d5
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.1000121f
sub esp, 0x10
mov byte [ebp - 4], 0x1a
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10029031
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_delivery
mov byte [ebp - 4], 0x1b
call fcn.1002a1bc
mov edi, eax
mov byte [ebp - 4], 0x1a
call fcn.10029284
push 0
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x17
call fcn.10002274
mov ebx, str.Vendor
mov edi, str.select__from_Win32_ComputerSystemProduct
lea ecx, [ebp - 0x2c]
call fcn.1000a1e8
push eax
lea eax, [ebp - 0x114]
push eax
mov byte [ebp - 4], 0x1c
call fcn.1000121f
sub esp, 0x10
mov byte [ebp - 4], 0x1d
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10029031
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_computer_vendor
mov byte [ebp - 4], 0x1e
call fcn.1002a1bc
mov edi, eax
mov byte [ebp - 4], 0x1d
call fcn.10029284
push 0
push 1
lea ecx, [ebp - 0x114]
call fcn.10002274
push 0
push 1
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x17
call fcn.10002370
mov ebx, 0x100653ac
mov edi, str.select__from_Win32_ComputerSystemProduct
lea ecx, [ebp - 0x48]
call fcn.1000a1e8
xor esi, esi
mov byte [ebp - 4], 0x1f
cmp dword [ebp - 0x34], esi
je 0x1000b470
cmp dword [ebp - 0x34], 2
ja 0x1000b4a6
mov ebx, str.Model
mov edi, str.Select_Model_from_WIN32_ComputerSystem
lea ecx, [ebp - 0x114]
call fcn.1000a1e8
push 0xffffffffffffffff
push esi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x20
call fcn.100022bf
push esi
push 1
lea esi, [ebp - 0x114]
mov byte [ebp - 4], 0x1f
call fcn.10002370
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.1000121f
sub esp, 0x10
mov byte [ebp - 4], 0x21
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10029031
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_computer_version
mov byte [ebp - 4], 0x22
call fcn.1002a1bc
mov edi, eax
mov byte [ebp - 4], 0x21
call fcn.10029284
push 0
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x1f
call fcn.10002274
lea eax, [ebp - 0x148]
push eax
call fcn.10018913
mov edi, str.MaxClockSpeed
push edi
lea esi, [ebp - 0x130]
mov byte [ebp - 4], 0x23
call fcn.10002030
mov eax, esi
push eax
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x24
call fcn.1000c101
push 0
push 1
mov byte [ebp - 4], 0x23
call fcn.10002370
mov ebx, str.Name
push ebx
lea esi, [ebp - 0x130]
call fcn.10002030
mov eax, esi
push eax
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x25
call fcn.1000c101
push 0
push 1
mov byte [ebp - 4], 0x23
call fcn.10002370
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x1b8]
push str.select_Name__MaxClockSpeed_from_Win32_Processor
push eax
call fcn.1003ad67
add esp, 0xc
push ebx
lea esi, [ebp - 0x130]
mov byte [ebp - 4], 0x26
call fcn.10002030
mov eax, esi
push eax
lea ebx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x27
call fcn.1000c1a4
push eax
lea esi, [ebp - 0x80]
call fcn.1000204f
push 0
push 1
lea esi, [ebp - 0x130]
mov byte [ebp - 4], 0x29
call fcn.10002370
push edi
lea esi, [ebp - 0x2c]
call fcn.10002030
mov eax, esi
push eax
mov byte [ebp - 4], 0x2a
call fcn.1000c1a4
mov ecx, fcn.1000a06e
test ecx, ecx
je 0x1000b601
cmp dword [eax + 0x18], 8
jb 0x1000b5f1
mov eax, dword [eax + 4]
jmp 0x1000b5f4
add eax, 4
push eax
call fcn.1000a06e
pop ecx
mov ebx, eax
xor edi, edi
jmp 0x1000b605
xor edi, edi
xor ebx, ebx
push edi
push 1
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x29
call fcn.10002370
cmp dword [ebp - 0x6c], edi
je 0x1000b674
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.1000121f
sub esp, 0x10
mov byte [ebp - 4], 0x2b
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10029031
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_cpu_model
mov byte [ebp - 4], 0x2c
call fcn.1002a1bc
mov edi, eax
mov byte [ebp - 4], 0x2b
call fcn.10029284
push 0
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x29
call fcn.10002274
xor edi, edi
cmp ebx, edi
je 0x1000b6ab
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0xd8], esp
push ebx
call fcn.10028f52
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_cpu_frequency
mov byte [ebp - 4], 0x2d
call fcn.1002a1bc
mov edi, eax
mov byte [ebp - 4], 0x29
call fcn.10029284
xor edi, edi
lea eax, [ebp - 0x148]
call fcn.1000c168
mov ebx, str.Manufacturer
push ebx
lea esi, [ebp - 0x2c]
call fcn.10002030
mov eax, esi
push eax
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x2e
call fcn.1000c101
push edi
push 1
mov byte [ebp - 4], 0x29
call fcn.10002370
push str.Product
lea esi, [ebp - 0x2c]
call fcn.10002030
mov eax, esi
push eax
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x2f
call fcn.1000c101
push edi
push 1
mov byte [ebp - 4], 0x29
call fcn.10002370
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x180]
push str.select_Manufacturer__Product_from_Win32_BaseBoard
push eax
call fcn.1003ad67
add esp, 0xc
push eax
lea esi, [ebp - 0x1b8]
mov byte [ebp - 4], 0x30
call fcn.1000c2f3
lea eax, [ebp - 0x180]
push eax
mov byte [ebp - 4], 0x29
call fcn.1000c2cb
push ebx
lea esi, [ebp - 0x114]
call fcn.10002030
mov eax, esi
push eax
lea ebx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x31
call fcn.1000c1a4
push eax
lea esi, [ebp - 0x64]
call fcn.1000204f
push edi
push 1
lea esi, [ebp - 0x114]
mov byte [ebp - 4], 0x33
call fcn.10002370
cmp dword [ebp - 0x50], edi
je 0x1000b864
push str.Product
lea esi, [ebp - 0x130]
call fcn.10002030
mov eax, esi
push eax
mov byte [ebp - 4], 0x34
call fcn.1000c1a4
push eax
lea esi, [ebp - 0x2c]
call fcn.1000204f
push edi
push 1
lea esi, [ebp - 0x130]
mov byte [ebp - 4], 0x36
call fcn.10002370
cmp dword [ebp - 0x18], edi
je 0x1000b7ff
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x17c]
push 0x1006555c
push eax
call fcn.10006d16
add esp, 0xc
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x37
call fcn.10005e49
push edi
push 1
lea esi, [ebp - 0x17c]
mov byte [ebp - 4], 0x36
call fcn.10002370
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x17c]
push eax
call fcn.1000121f
sub esp, 0x10
mov byte [ebp - 4], 0x38
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10029031
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_motherboard_model
mov byte [ebp - 4], 0x39
call fcn.1002a1bc
mov edi, eax
mov byte [ebp - 4], 0x38
call fcn.10029284
push 0
push 1
lea ecx, [ebp - 0x17c]
call fcn.10002274
push 0
push 1
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x33
call fcn.10002370
mov ebx, 0x10065560
mov edi, str.select_TotalPhysicalMemory_from_Win32_ComputerSystem
lea ecx, [ebp - 0x17c]
call fcn.1000a1e8
mov byte [ebp - 4], 0x3a
cmp dword [eax + 0x18], 8
jb 0x1000b888
mov eax, dword [eax + 4]
jmp 0x1000b88b
add eax, 4
push eax
call fcn.1000a06e
pop ecx
push 0
push 1
lea esi, [ebp - 0x17c]
mov ebx, eax
mov edi, edx
mov byte [ebp - 4], 0x33
call fcn.10002370
mov eax, ebx
or eax, edi
je 0x1000b8e7
shrd ebx, edi, 0x14
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0xd8], esp
push ebx
shr edi, 0x14
call fcn.10028f52
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_memory_size
mov byte [ebp - 4], 0x3b
call fcn.1002a1bc
mov edi, eax
mov byte [ebp - 4], 0x33
call fcn.10029284
call fcn.1000af4d
mov ecx, eax
or ecx, edx
je 0x1000b92a
shrd eax, edx, 0x14
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0xd8], esp
push eax
shr edx, 0x14
call fcn.10028f52
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_disk_size
mov byte [ebp - 4], 0x3c
call fcn.1002a1bc
mov edi, eax
mov byte [ebp - 4], 0x33
call fcn.10029284
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0xd8], esp
push str.replace
call fcn.10028fb0
lea eax, [ebp - 0xf8]
push eax
mov edx, str.i_action
mov byte [ebp - 4], 0x3d
call fcn.1002a1bc
mov edi, eax
mov byte [ebp - 4], 0x33
call fcn.10029284
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0xd8], esp
push str.client_unique
call fcn.10028fb0
lea eax, [ebp - 0xf8]
push eax
mov edx, str.i_key_columns
mov byte [ebp - 4], 0x3e
call fcn.1002a1bc
mov edi, eax
mov byte [ebp - 4], 0x33
call fcn.10029284
lea eax, [ebp - 0xf8]
push eax
mov ecx, str.t_hardware_summary
call fcn.1003a73a
push 0x10064cf0
call fcn.10006056
pop ecx
test eax, eax
je 0x1000b9c1
lea eax, [ebp - 0xf8]
push eax
call fcn.1000a917
pop ecx
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x130]
call fcn.1002a681
push eax
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x3f
call fcn.100011df
cmp dword [eax + 0x18], 8
pop ecx
jb 0x1000b9ef
mov eax, dword [eax + 4]
jmp 0x1000b9f2
add eax, 4
push str.lastHardwareSummary
mov esi, eax
mov ebx, str.Softwareprojonepodlp_smpcache_
mov edi, reloc.WS2_32.dll_bind
call fcn.10034889
xor ebx, ebx
xor edi, edi
push ebx
inc edi
push edi
lea esi, [ebp - 0x17c]
call fcn.10002370
push ebx
push edi
lea ecx, [ebp - 0x130]
call fcn.10002274
push ebx
push edi
lea esi, [ebp - 0x64]
call fcn.10002370
push ebx
push edi
lea esi, [ebp - 0x80]
call fcn.10002370
lea eax, [ebp - 0x1b8]
push eax
mov byte [ebp - 4], 0x23
call fcn.1000c2cb
lea esi, [ebp - 0x148]
call fcn.1000c552
push dword [ebp - 0x148]
call fcn.10041033
pop ecx
push ebx
push edi
lea esi, [ebp - 0x48]
call fcn.10002370
push ebx
push edi
lea esi, [ebp - 0xb8]
call fcn.10002370
push ebx
push edi
lea esi, [ebp - 0x9c]
call fcn.10002370
lea eax, [ebp - 0x1d8]
push eax
mov byte [ebp - 4], 0xe
call fcn.1000c2cb
lea esi, [ebp - 0x198]
call fcn.1000c552
push dword [ebp - 0x198]
call fcn.10041033
pop ecx
push ebx
push edi
lea esi, [ebp - 0xd4]
call fcn.10002370
lea esi, [ebp - 0x160]
call fcn.1000c552
push dword [ebp - 0x160]
call fcn.10041033
pop ecx
or dword [ebp - 4], 0xffffffff
lea esi, [ebp - 0xf8]
call fcn.10029201
call fcn.1004236d
ret