Function at 0x18000ba50
Capabilities:
Access the windows event log
Check if file exists
Get disk information
Get disk size
Get mac address on windows
Query or enumerate registry value

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r14
lea rbp, [rax - 0x488]
sub rsp, 0x560
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x180053028]
xor rax, rsp
mov qword [rbp + 0x430], rax
mov r14, rcx
lea rcx, str.Hexadecimal_integer:_0x_X_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000baaa
mov edx, 0xabcd
lea rcx, str.Hexadecimal_integer:_0x_X_n
call fcn.180001120
lea rcx, str.Eulers_Number:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsd xmm7, qword [0x18004d210]
test eax, eax
jns 0x18000badf
movaps xmm0, xmm7
call fcn.180039fa0
movaps xmm1, xmm0
lea rcx, str.Eulers_Number:__lf_n
movq rdx, xmm0
call fcn.180001120
lea rcx, str.Unsigned_long_integer:__lu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000bb01
mov edx, 0xffffffff
lea rcx, str.Unsigned_long_integer:__lu_n
call fcn.180001120
call qword [sym.imp.KERNEL32.dll_GetVersion]
movabs r12, 0x6e776f6e6b6e55
cmp eax, 0x80000000
jae 0x18000bb3a
mov ecx, eax
movzx r8d, al
shr ecx, 8
lea rdx, str.Windows_NT__d._d
movzx r9d, cl
lea rcx, [rbp + 0x120]
call fcn.180001180
jmp 0x18000bb60
jne 0x18000bb59
movups xmm0, xmmword [str.Windows_95_98_Me]
movzx eax, byte [0x18004c968]
mov byte [rbp + 0x130], al
movaps xmmword [rbp + 0x120], xmm0
jmp 0x18000bb60
mov qword [rbp + 0x120], r12
lea rcx, str.Operating_System_Name:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000bb84
lea rdx, [rbp + 0x120]
lea rcx, str.Operating_System_Name:__s_n
call fcn.180001120
lea rcx, str.The_volume_of_the_cube_with_side__lf_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000bbb1
movaps xmm2, xmm7
lea rcx, str.The_volume_of_the_cube_with_side__lf_is:__lf_n
movq r8, xmm7
movaps xmm1, xmm7
movq rdx, xmm7
call fcn.180001120
lea rax, [rsp + 0x48]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersion
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x18000bc66
mov rcx, qword [rsp + 0x48]
lea rax, [rsp + 0x44]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x40]
lea rax, [rbp + 0x100]
mov dword [rsp + 0x44], 0x14
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.InstallDate
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x18000bc4d
lea rcx, str.Operating_System_Install_Date:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000bc59
lea rdx, [rbp + 0x100]
lea rcx, str.Operating_System_Install_Date:__s_n
call fcn.180001120
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x18000bc72
lea rcx, str.Error_getting_OS_install_date
call fcn.18001db60
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x18000bc72
lea rcx, str.Error_opening_registry_key
call fcn.18001db60
xor eax, eax
lea rdi, [rbp + 0x220]
mov ecx, 0x20a
rep stosb byte [rdi], al
lea rcx, str.Current_date:_2024_04_07_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000bc9f
lea rcx, str.Current_date:_2024_04_07_n
call fcn.180001120
lea rcx, str.The_area_of_the_triangle_with_base__lf_and_height__lf_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000bcd9
movsd xmm3, qword [0x18004d200]
lea rcx, str.The_area_of_the_triangle_with_base__lf_and_height__lf_is:__lf_n
movq r9, xmm3
movaps xmm2, xmm7
movq r8, xmm7
movaps xmm1, xmm7
movq rdx, xmm7
call fcn.180001120
mov ecx, 0x2c0
mov dword [rsp + 0x44], 0x2c0
call fcn.180020ffc
mov rsi, rax
test rax, rax
jne 0x18000bd04
lea rcx, str.Error_allocating_memory_needed_to_call_GetAdaptersInfo
call fcn.18001db60
jmp 0x18000bed2
lea rdx, [rsp + 0x44]
mov rcx, rsi
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
cmp eax, 0x6f
jne 0x18000bd3c
mov rcx, rsi
call fcn.180020c30
mov ecx, dword [rsp + 0x44]
call fcn.180020ffc
mov rsi, rax
test rax, rax
jne 0x18000bd3c
lea rcx, str.Error_allocating_memory_needed_to_call_GetAdaptersInfo
call fcn.18001db60
lea rdx, [rsp + 0x44]
mov rcx, rsi
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
test eax, eax
jne 0x18000beb9
mov rbx, rsi
test rsi, rsi
je 0x18000bed2
mov qword [rsp + 0x598], r15
lea r15, [0x18004c674]
nop dword [rax]
lea rcx, str.Adapter_Name:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000bd91
lea rdx, [rbx + 0xc]
lea rcx, str.Adapter_Name:__s_n
call fcn.180001120
lea rcx, str.Adapter_Description:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000bdb5
lea rdx, [rbx + 0x110]
lea rcx, str.Adapter_Description:__s_n
call fcn.180001120
lea rcx, str.Adapter_Address:__02X__02X__02X__02X__02X__02X_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000be0a
movzx ecx, byte [rbx + 0x19c]
movzx eax, byte [rbx + 0x19d]
movzx edi, byte [rbx + 0x19b]
movzx r9d, byte [rbx + 0x19a]
movzx r8d, byte [rbx + 0x199]
movzx edx, byte [rbx + 0x198]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
lea rcx, str.Adapter_Address:__02X__02X__02X__02X__02X__02X_n
mov dword [rsp + 0x20], edi
call fcn.180001120
lea rcx, str.Adapter_Index:__u_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000be2d
mov edx, dword [rbx + 0x1a0]
lea rcx, str.Adapter_Index:__u_n
call fcn.180001120
lea rcx, str.Type:__u_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000be50
mov edx, dword [rbx + 0x1a4]
lea rcx, str.Type:__u_n
call fcn.180001120
lea rcx, str.DHCP_Enabled:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000be7f
cmp dword [rbx + 0x1a8], 0
lea rdx, [0x18004c678]
lea rcx, str.DHCP_Enabled:__s_n
cmovne rdx, r15
call fcn.180001120
lea rcx, str.DHCP_Server:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000bea3
lea rdx, [rbx + 0x220]
lea rcx, str.DHCP_Server:__s_n
call fcn.180001120
mov rbx, qword [rbx]
test rbx, rbx
jne 0x18000bd70
mov r15, qword [rsp + 0x598]
jmp 0x18000beca
lea rcx, str.GetAdaptersInfo_failed_with_error
call fcn.18001db60
test rsi, rsi
je 0x18000bed2
mov rcx, rsi
call fcn.180020c30
lea rcx, str.Eulers_Number:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000beff
movaps xmm0, xmm7
call fcn.180039fa0
movaps xmm1, xmm0
lea rcx, str.Eulers_Number:__lf_n
movq rdx, xmm0
call fcn.180001120
lea rcx, str.Long_integer:__ld_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000bf21
mov edx, 0x499602d2
lea rcx, str.Long_integer:__ld_n
call fcn.180001120
lea rcx, str.Sine_Value:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsd xmm6, qword [0x18004d208]
test eax, eax
jns 0x18000bf56
movaps xmm0, xmm6
call fcn.18003a8d0
movaps xmm1, xmm0
lea rcx, str.Sine_Value:__lf_n
movq rdx, xmm0
call fcn.180001120
lea rcx, str.Fibonacci_number_at_position__d_is__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000bf7c
mov edx, 8
lea rcx, str.Fibonacci_number_at_position__d_is__d_n
lea r8d, [rdx + 0xd]
call fcn.180001120
xor esi, esi
mov ebx, esi
mov edi, esi
lea eax, [rdi + rbx]
test al, 1
jne 0x18000bfa3
lea rcx, [0x18004cf28]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000bfc0
lea rcx, [0x18004cf28]
jmp 0x18000bfbb
lea rcx, [0x18004cf2c]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000bfc0
lea rcx, [0x18004cf2c]
call fcn.180001120
inc edi
cmp edi, 8
jl 0x18000bf82
lea rcx, [0x18004bd68]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000bfe4
lea rcx, [0x18004bd68]
call fcn.180001120
inc ebx
cmp ebx, 8
jl 0x18000bf80
lea rcx, str.Long_integer:__ld_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c00d
mov edx, 0x499602d2
lea rcx, str.Long_integer:__ld_n
call fcn.180001120
mov r8d, 0x104
lea rdx, [rbp + 0x220]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x18000cd0b
lea rcx, str.Short_integer:__hd_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c04d
mov edx, 0x7fff
lea rcx, str.Short_integer:__hd_n
call fcn.180001120
lea rcx, str._c_is_a_digit._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c06f
mov edx, 0x35
lea rcx, str._c_is_a_digit._n
call fcn.180001120
lea rcx, str.Unsigned_long_long_integer:__llu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c093
mov rdx, 0xffffffffffffffff
lea rcx, str.Unsigned_long_long_integer:__llu_n
call fcn.180001120
lea rcx, [rbp + 0x220]
call fcn.18000a390
lea rcx, str.ASCII_character:__c_n
mov r14, rax
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c0c4
mov edx, 0x41
lea rcx, str.ASCII_character:__c_n
call fcn.180001120
mov ebx, 0x64
nop dword [rax]
mov eax, 0x51eb851f
mul ebx
mov eax, 0xcccccccd
mov r8d, edx
mul ebx
shr r8d, 5
mov eax, 0x66666667
mov ecx, edx
shr ecx, 3
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
mov edx, ecx
add eax, eax
sub edx, eax
lea eax, [rcx + rcx*4]
add eax, eax
mov ecx, ebx
sub ecx, eax
mov eax, edx
imul eax, edx
mov edi, ecx
imul edi, ecx
imul eax, edx
imul edi, ecx
add edi, eax
mov eax, r8d
imul eax, r8d
imul eax, r8d
add edi, eax
cmp ebx, edi
jne 0x18000c14f
lea rcx, str.Narcissistic_Number:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c14f
mov edx, ebx
lea rcx, str.Narcissistic_Number:__d_n
call fcn.180001120
inc ebx
cmp ebx, 0x3e8
jl 0x18000c0d0
lea rdx, str.System
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_OpenEventLogA]
mov rbx, rax
test rax, rax
je 0x18000c2ed
mov ecx, 0x10000
call fcn.180020ffc
mov rdi, rax
test rax, rax
je 0x18000c2d6
xor r8d, r8d
mov qword [rsp + 0x30], rsi
lea rax, [rsp + 0x40]
mov r9, rdi
mov qword [rsp + 0x28], rax
mov rcx, rbx
mov dword [rsp + 0x20], 0x10000
lea edx, [r8 + 5]
call qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
test eax, eax
je 0x18000c2c3
lea rcx, str.Event_ID:__lu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c1e0
mov edx, dword [rdi + 0x14]
lea rcx, str.Event_ID:__lu_n
call fcn.180001120
lea rcx, str.Event_Type:__lu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c201
movzx edx, word [rdi + 0x18]
lea rcx, str.Event_Type:__lu_n
call fcn.180001120
lea rcx, str.Event_Category:__lu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c222
movzx edx, word [rdi + 0x1c]
lea rcx, str.Event_Category:__lu_n
call fcn.180001120
lea rcx, str.Time_Generated:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c24b
lea rcx, [rdi + 0xc]
call fcn.180020f88
mov rdx, rax
lea rcx, str.Time_Generated:__s_n
call fcn.180001120
lea rcx, str.Source_Name:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c26e
mov edx, dword [rdi + 0x24]
lea rcx, str.Source_Name:__s_n
add rdx, rdi
call fcn.180001120
lea rcx, str.Event_String:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c291
mov edx, dword [rdi + 0x34]
lea rcx, str.Event_String:__s_n
add rdx, rdi
call fcn.180001120
xor r8d, r8d
mov qword [rsp + 0x30], rsi
lea rax, [rsp + 0x40]
mov r9, rdi
mov qword [rsp + 0x28], rax
mov rcx, rbx
mov dword [rsp + 0x20], 0x10000
lea edx, [r8 + 5]
call qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
test eax, eax
jne 0x18000c1c0
mov rcx, rdi
call fcn.180020c30
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseEventLog]
jmp 0x18000c2f9
lea rcx, str.Error_allocating_memory_for_event_log_record
call fcn.18001db60
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseEventLog]
jmp 0x18000c2f9
lea rcx, str.Error_opening_event_log
call fcn.18001db60
cmp r14, 0xffffffffffffffff
je 0x18000cd0b
lea rcx, str.Difference_of__d_and__d_is:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c32e
mov r9d, reloc.WS2_32.dll_ntohs
lea rcx, str.Difference_of__d_and__d_is:__d_n
mov r8d, r9d
mov edx, 0x1e
call fcn.180001120
lea rcx, str.Square_root_of__.2f:__.2f_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c385
movss xmm1, dword [0x18004d288]
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x18000c358
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x18000c360
movaps xmm0, xmm1
call fcn.18003af10
movsd xmm1, qword [0x18004d280]
lea rcx, str.Square_root_of__.2f:__.2f_n
xorps xmm2, xmm2
movq rdx, xmm1
cvtss2sd xmm2, xmm0
movq r8, xmm2
call fcn.180001120
lea rcx, str.Current_time:_07:38:26_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c3a2
lea rcx, str.Current_time:_07:38:26_n
call fcn.180001120
mov edi, esi
nop dword [rax]
nop dword [rax + rax]
lea rcx, str._d:__c_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c3d2
mov r8d, edi
lea rcx, str._d:__c_n
mov edx, edi
call fcn.180001120
inc edi
cmp edi, 0x80
jl 0x18000c3b0
lea rcx, str.Remainder_of__d_and__d_is:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c406
mov edx, 0x11
lea rcx, str.Remainder_of__d_and__d_is:__d_n
lea r9d, [rdx - 0x10]
lea r8d, [rdx - 0xd]
call fcn.180001120
call qword [sym.imp.KERNEL32.dll_GetVersion]
cmp eax, 0x80000000
jae 0x18000c435
mov ecx, eax
movzx r8d, al
shr ecx, 8
lea rdx, str.Windows_NT__d._d
movzx r9d, cl
lea rcx, [rbp + 0x120]
call fcn.180001180
jmp 0x18000c45b
jne 0x18000c454
movups xmm0, xmmword [str.Windows_95_98_Me]
movzx eax, byte [0x18004c968]
mov byte [rbp + 0x130], al
movaps xmmword [rbp + 0x120], xmm0
jmp 0x18000c45b
mov qword [rbp + 0x120], r12
lea rcx, str.Operating_System_Name:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c47f
lea rdx, [rbp + 0x120]
lea rcx, str.Operating_System_Name:__s_n
call fcn.180001120
mov rcx, r14
call fcn.18000a580
test eax, eax
je 0x18000cd0b
lea rcx, str._d_is_a_leap_year._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c4b1
mov edx, 0x7e4
lea rcx, str._d_is_a_leap_year._n
call fcn.180001120
lea rcx, str.The_sine_value_of__lf_radians_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c4e6
movaps xmm0, xmm6
call fcn.18003a8d0
movaps xmm2, xmm0
lea rcx, str.The_sine_value_of__lf_radians_is:__lf_n
movq r8, xmm0
movaps xmm1, xmm6
movq rdx, xmm6
call fcn.180001120
lea rcx, str.Sine_Value:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c513
movaps xmm0, xmm6
call fcn.18003a8d0
movaps xmm1, xmm0
lea rcx, str.Sine_Value:__lf_n
movq rdx, xmm0
call fcn.180001120
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.Array_average:__.2f_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c546
movsd xmm1, qword [0x18004d228]
lea rcx, str.Array_average:__.2f_n
movq rdx, xmm1
call fcn.180001120
lea rcx, str.Difference_of__d_and__d_is:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c571
mov r9d, reloc.WS2_32.dll_ntohs
lea rcx, str.Difference_of__d_and__d_is:__d_n
mov r8d, r9d
mov edx, 0x1e
call fcn.180001120
lea rcx, str.Null_pointer:__p_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c590
xor edx, edx
lea rcx, str.Null_pointer:__p_n
call fcn.180001120
lea rcx, [rbp + 0x100]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
lea rcx, str.Current_Time_2:__d__d__d__d:_d:_d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c5f4
movzx eax, word [rbp + 0x10c]
lea rcx, str.Current_Time_2:__d__d__d__d:_d:_d_n
movzx edi, word [rbp + 0x10a]
movzx r10d, word [rbp + 0x108]
movzx r9d, word [rbp + 0x106]
movzx r8d, word [rbp + 0x102]
movzx edx, word [rbp + 0x100]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], r10d
call fcn.180001120
xorps xmm0, xmm0
lea rcx, [rbp + 0x120]
xor eax, eax
mov r14d, 0x9c
movups xmmword [rbp + 0x124], xmm0
mov qword [rbp + 0x1b4], rax
movups xmmword [rbp + 0x134], xmm0
mov dword [rbp + 0x120], r14d
movups xmmword [rbp + 0x144], xmm0
movups xmmword [rbp + 0x154], xmm0
movups xmmword [rbp + 0x164], xmm0
movups xmmword [rbp + 0x174], xmm0
movups xmmword [rbp + 0x184], xmm0
movups xmmword [rbp + 0x194], xmm0
movups xmmword [rbp + 0x1a4], xmm0
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x18000c69c
lea rcx, str.Operating_System_Version:__d._d._d__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c6a8
mov r9d, dword [rbp + 0x12c]
lea rax, [rbp + 0x134]
mov r8d, dword [rbp + 0x128]
lea rcx, str.Operating_System_Version:__d._d._d__s_n
mov edx, dword [rbp + 0x124]
mov qword [rsp + 0x20], rax
call fcn.180001120
jmp 0x18000c6a8
lea rcx, str.Error_getting_OS_version
call fcn.18001db60
lea rcx, str.This_is_a_fixed_string._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c6c5
lea rcx, str.This_is_a_fixed_string._n
call fcn.180001120
lea rcx, str.Integer:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c6e7
mov edx, 0x3039
lea rcx, str.Integer:__d_n
call fcn.180001120
lea rcx, str._______________________________n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c704
lea rcx, str._______________________________n
call fcn.180001120
lea rcx, str.ASCII_value_of__c:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c729
mov edx, 0x41
lea rcx, str.ASCII_value_of__c:__d_n
mov r8d, edx
call fcn.180001120
lea rcx, [rbp + 0x220]
call fcn.18000a390
lea rcx, str.ASCII_character:__c_n
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c75a
mov edx, 0x41
lea rcx, str.ASCII_character:__c_n
call fcn.180001120
call qword [sym.imp.KERNEL32.dll_GetVersion]
cmp eax, 0x80000000
jae 0x18000c789
mov ecx, eax
movzx r8d, al
shr ecx, 8
lea rdx, str.Windows_NT__d._d
movzx r9d, cl
lea rcx, [rbp + 0x120]
call fcn.180001180
jmp 0x18000c7af
jne 0x18000c7a8
movups xmm0, xmmword [str.Windows_95_98_Me]
movzx eax, byte [0x18004c968]
mov byte [rbp + 0x130], al
movaps xmmword [rbp + 0x120], xmm0
jmp 0x18000c7af
mov qword [rbp + 0x120], r12
lea rcx, str.Operating_System_Name:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c7d3
lea rdx, [rbp + 0x120]
lea rcx, str.Operating_System_Name:__s_n
call fcn.180001120
lea rcx, str.Unsigned_short_integer:__hu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c7f5
mov edx, 0xffff
lea rcx, str.Unsigned_short_integer:__hu_n
call fcn.180001120
cmp rbx, 0xffffffffffffffff
je 0x18000cd0b
mov edi, esi
lea rcx, str._d:__c_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c823
mov r8d, edi
lea rcx, str._d:__c_n
mov edx, edi
call fcn.180001120
inc edi
cmp edi, 0x80
jl 0x18000c801
lea rcx, str.Current_date:_2024_04_07_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c84a
lea rcx, str.Current_date:_2024_04_07_n
call fcn.180001120
lea rcx, str.Array_min:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c86c
mov edx, 1
lea rcx, str.Array_min:__d_n
call fcn.180001120
mov rcx, rbx
call fcn.18000b430
test eax, eax
je 0x18000cd0b
lea rcx, str.String:_This_is_a_string_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c899
lea rcx, str.String:_This_is_a_string_n
call fcn.180001120
lea rcx, str.Sine_Value:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c8c6
movaps xmm0, xmm6
call fcn.18003a8d0
movaps xmm1, xmm0
lea rcx, str.Sine_Value:__lf_n
movq rdx, xmm0
call fcn.180001120
lea rcx, str.The_volume_of_the_cone_with_base_radius__lf_and_height__lf_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c900
movsd xmm3, qword [0x18004d218]
lea rcx, str.The_volume_of_the_cone_with_base_radius__lf_and_height__lf_is:__lf_n
movq r9, xmm3
movaps xmm2, xmm7
movq r8, xmm7
movaps xmm1, xmm7
movq rdx, xmm7
call fcn.180001120
mov edi, esi
lea rcx, str._d:__c_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c924
mov r8d, edi
lea rcx, str._d:__c_n
mov edx, edi
call fcn.180001120
inc edi
cmp edi, 0x80
jl 0x18000c902
lea rcx, str.Long_integer:__ld_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c950
mov edx, 0x499602d2
lea rcx, str.Long_integer:__ld_n
call fcn.180001120
lea rcx, str.The_natural_logarithm_of_10_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c982
movsd xmm0, qword [0x18004d270]
call fcn.18003a3a0
movaps xmm1, xmm0
lea rcx, str.The_natural_logarithm_of_10_is:__lf_n
movq rdx, xmm0
call fcn.180001120
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.Null_pointer:__p_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c9aa
xor edx, edx
lea rcx, str.Null_pointer:__p_n
call fcn.180001120
lea rcx, str.The_surface_area_of_the_cuboid_with_length__lf__width__lf__and_height__lf_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000c9ed
movsd xmm0, qword [0x18004d260]
lea rcx, str.The_surface_area_of_the_cuboid_with_length__lf__width__lf__and_height__lf_is:__lf_n
movaps xmm3, xmm7
movsd qword [rsp + 0x20], xmm0
movq r9, xmm7
movaps xmm2, xmm7
movq r8, xmm7
movaps xmm1, xmm7
movq rdx, xmm7
call fcn.180001120
lea rcx, str.Pointer_address:__p_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000ca0c
xor edx, edx
lea rcx, str.Pointer_address:__p_n
call fcn.180001120
lea rcx, str.Long_long_integer:__lld_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000ca33
movabs rdx, 0x8000000000000000
lea rcx, str.Long_long_integer:__lld_n
call fcn.180001120
xor r9d, r9d
mov dword [rsp + 0x50], 0x1a8
lea r8, [rsp + 0x50]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_EnumDisplayDevicesA]
test eax, eax
je 0x18000cb57
nop word [rax + rax]
lea rcx, str.Display_Device:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000ca82
lea rdx, [rsp + 0x54]
lea rcx, str.Display_Device:__s_n
call fcn.180001120
lea rcx, str.Display_Device_String:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000caa4
lea rdx, [rsp + 0x74]
lea rcx, str.Display_Device_String:__s_n
call fcn.180001120
lea r8, [rbp + 0x120]
mov word [rbp + 0x144], r14w
mov edx, 0xffffffff
lea rcx, [rsp + 0x54]
call qword [sym.imp.USER32.dll_EnumDisplaySettingsA]
test eax, eax
je 0x18000cb1b
lea rcx, str.Display_Settings:__d_x__d___d_bit_color_depth_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000caf8
mov r9d, dword [rbp + 0x188]
lea rcx, str.Display_Settings:__d_x__d___d_bit_color_depth_n
mov r8d, dword [rbp + 0x190]
mov edx, dword [rbp + 0x18c]
call fcn.180001120
lea rcx, str.Display_Refresh_Rate:__d_Hz_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000cb1b
mov edx, dword [rbp + 0x198]
lea rcx, str.Display_Refresh_Rate:__d_Hz_n
call fcn.180001120
lea rcx, str.Display_Device_State:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000cb3b
mov edx, dword [rbp - 0xc]
lea rcx, str.Display_Device_State:__d_n
call fcn.180001120
inc esi
lea r8, [rsp + 0x50]
mov edx, esi
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.USER32.dll_EnumDisplayDevicesA]
test eax, eax
jne 0x18000ca60
lea rcx, str.This_is_a_fixed_string._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000cb74
lea rcx, str.This_is_a_fixed_string._n
call fcn.180001120
lea rcx, str.Hello__World__n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000cb91
lea rcx, str.Hello__World__n
call fcn.180001120
lea rcx, str.Unsigned_long_long_integer:__llu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000cbb5
mov rdx, 0xffffffffffffffff
lea rcx, str.Unsigned_long_long_integer:__llu_n
call fcn.180001120
lea rcx, str.ASCII_value_of__c:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000cbda
mov edx, 0x41
lea rcx, str.ASCII_value_of__c:__d_n
mov r8d, edx
call fcn.180001120
lea rcx, [rbp + 0x220]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x18000cd0b
lea rcx, str.Unsigned_short_integer:__hu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000cc11
mov edx, 0xffff
lea rcx, str.Unsigned_short_integer:__hu_n
call fcn.180001120
lea rcx, str.ASCII_character:__c_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000cc33
mov edx, 0x41
lea rcx, str.ASCII_character:__c_n
call fcn.180001120
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov ebx, eax
mov dil, 0x41
nop
test bl, 1
je 0x18000ccf5
lea r9, [rbp + 0x100]
mov byte [rsp + 0x40], dil
lea r8, [rsp + 0x48]
mov word [rsp + 0x41], 0x5c3a
xor edx, edx
mov byte [rsp + 0x43], 0
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExA]
test eax, eax
je 0x18000cce9
lea rcx, str.Disk_Drive__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000cc99
lea rdx, [rsp + 0x40]
lea rcx, str.Disk_Drive__s_n
call fcn.180001120
lea rcx, str.__Total_Space:__llu_GB_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000ccbf
mov rdx, qword [rsp + 0x48]
lea rcx, str.__Total_Space:__llu_GB_n
shr rdx, 0x1e
call fcn.180001120
lea rcx, str.__Free_Space:__llu_GB_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000ccf5
mov rdx, qword [rbp + 0x100]
lea rcx, str.__Free_Space:__llu_GB_n
shr rdx, 0x1e
call fcn.180001120
jmp 0x18000ccf5
lea rcx, str.Error_getting_disk_drive_information
call fcn.18001db60
shr ebx, 1
inc dil
cmp dil, 0x5a
jle 0x18000cc40
mov eax, 1
jmp 0x18000cd0d
xor eax, eax
mov rcx, qword [rbp + 0x430]
xor rcx, rsp
call fcn.180018ca0
lea r11, [rsp + 0x560]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r14
pop r12
pop rdi
pop rsi
pop rbp
ret