Function at 0x180007f10
Capabilities:
Encrypt or decrypt via wincrypt
Get hostname
Get memory capacity

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x288]
sub rsp, 0x348
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
mov rax, qword [0x180057040]
xor rax, rsp
mov qword [rbp + 0x208], rax
mov rax, qword [rbp + 0x2b0]
mov r13, r9
mov qword [rsp + 0x30], rax
mov r12, rdx
mov dword [rbp + 0x20], r8d
mov qword [rbp + 0x28], rcx
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
movabs rdi, 0x179ec9cbd821dc3b
movabs r8, 0x4a90be587de6e565
mov rcx, rax
movabs rax, 0x8daea1d7f4cf721b
mul rcx
mov r14, rcx
mov rax, rdi
sub r14, rdx
mov rsi, rcx
shr r14, 1
mov rbx, rcx
add r14, rdx
mul rcx
mov rax, rcx
shr r14, 0x1a
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 0xf
imul rax, rax, 0xea60
sub rsi, rax
movabs rax, 0x624dd2f1a9fbe77
mul rsi
mov rax, r8
sub rsi, rdx
shr rsi, 1
add rsi, rdx
mul rcx
shr rsi, 9
shr rdx, 0x14
imul rax, rdx, 0x36ee80
sub rbx, rax
mov rax, rdi
mul rbx
imul rax, r14, 0x5265c00
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 0xf
sub rcx, rax
mov rax, r8
mul rcx
lea rcx, [0x18005d270]
mov rdi, rdx
lea rdx, str.System_Uptime:
shr rdi, 0x14
call fcn.180018200
mov rcx, rax
mov edx, r14d
call fcn.1800157a0
mov rcx, rax
lea rdx, str._days_
call fcn.180018200
mov rcx, rax
mov edx, edi
call fcn.1800157a0
mov rcx, rax
lea rdx, str._hours_
call fcn.180018200
mov rcx, rax
mov edx, ebx
call fcn.1800157a0
mov rcx, rax
lea rdx, str._minutes_
call fcn.180018200
mov rcx, rax
mov edx, esi
call fcn.1800157a0
mov rcx, rax
lea rdx, str._seconds
call fcn.180018200
mov rcx, rax
call fcn.180018470
xor r15d, r15d
lea rcx, [rbp + 0x1e0]
mov dword [rbp + 0x1e0], 8
mov edi, r15d
call qword [sym.imp.USER32.dll_GetLastInputInfo]
test eax, eax
je 0x1800080d8
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov eax, 0x10624dd3
sub ecx, dword [rbp + 0x1e4]
mul ecx
mov edi, edx
shr edi, 6
lea r14, [0x18005d270]
mov rcx, r14
lea rdx, str.Idle_Time:
call fcn.180018200
mov rcx, rax
mov edx, edi
call fcn.1800157a0
mov rcx, rax
lea rdx, str._seconds
call fcn.180018200
mov rcx, rax
call fcn.180018470
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
lea rdx, [0x180050d08]
mov rcx, r14
call fcn.180018200
movzx edx, word [rbp + 0x1e0]
mov rcx, rax
call fcn.180015950
mov rcx, rax
lea rdx, [0x180050d04]
call fcn.180018200
movzx edx, word [rbp + 0x1e2]
mov rcx, rax
call fcn.180015950
mov rcx, rax
lea rdx, [0x180050d04]
call fcn.180018200
movzx edx, word [rbp + 0x1e6]
mov rcx, rax
call fcn.180015950
mov rcx, rax
lea rdx, [0x180050d00]
call fcn.180018200
movzx edx, word [rbp + 0x1e8]
mov rcx, rax
call fcn.180015950
mov rcx, rax
lea rdx, [0x180050cfc]
call fcn.180018200
movzx edx, word [rbp + 0x1ea]
mov rcx, rax
call fcn.180015950
mov rcx, rax
lea rdx, [0x180050cfc]
call fcn.180018200
movzx edx, word [rbp + 0x1ec]
mov rcx, rax
call fcn.180015950
mov rcx, rax
call fcn.180018470
movsd xmm6, qword [0x1800510e8]
lea rcx, str.Product_of__.2f_and__.2f_is__.2f_n
movsd xmm7, qword [0x1800510e0]
movaps xmm3, xmm6
movsd xmm8, qword [0x1800510d8]
movq r9, xmm6
movaps xmm1, xmm8
movaps xmm2, xmm7
movq rdx, xmm1
movq r8, xmm7
call fcn.1800011b0
mov edx, 0x7e4
lea rcx, str._d_is_a_leap_year._n
call fcn.1800011b0
mov edx, 0xa
lea rcx, str.Difference_between__d_and__d_is__d_n
lea r9d, [rdx - 7]
lea r8d, [rdx - 3]
call fcn.1800011b0
mov edx, 0xa
lea rcx, str.Difference_between__d_and__d_is__d_n
lea r9d, [rdx - 7]
lea r8d, [rdx - 3]
call fcn.1800011b0
mov edx, 0x2c
lea rcx, str._c_is_a_punctuation_mark._n
call fcn.1800011b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x44], xmm0
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x94
movups xmmword [rsp + 0x54], xmm0
movups xmmword [rsp + 0x64], xmm0
movups xmmword [rsp + 0x74], xmm0
movups xmmword [rbp - 0x7c], xmm0
movups xmmword [rbp - 0x6c], xmm0
movups xmmword [rbp - 0x5c], xmm0
movups xmmword [rbp - 0x4c], xmm0
movups xmmword [rbp - 0x3c], xmm0
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x180008306
lea rdx, str.Operating_System_Version:
mov rcx, r14
call fcn.180018200
mov edx, dword [rsp + 0x44]
mov rcx, rax
call fcn.1800157a0
mov rcx, rax
lea rdx, [0x180050e94]
call fcn.180018200
mov edx, dword [rsp + 0x48]
mov rcx, rax
call fcn.1800157a0
mov rcx, rax
lea rdx, str.__Build
call fcn.180018200
mov edx, dword [rsp + 0x4c]
mov rcx, rax
call fcn.1800157a0
lea rdx, [0x180050e84]
jmp 0x180008310
mov rax, r14
lea rdx, str.Failed_to_get_operating_system_version_
mov rcx, rax
call fcn.180018200
mov rcx, rax
call fcn.180018470
mov edx, 0x48
lea rcx, str._c_is_an_uppercase_letter._n
call fcn.1800011b0
mov esi, dword [rbp + 0x20]
mov ecx, esi
mov ebx, esi
call fcn.180026954
xor r9d, r9d
mov qword [r13], rax
lea r8, [rbp + 0x30]
mov dword [rbp + 0x30], 0x1a8
xor edx, edx
xor ecx, ecx
mov edi, r15d
call qword [sym.imp.USER32.dll_EnumDisplayDevicesA]
test eax, eax
je 0x180008466
mov ebx, 0x9c
nop dword [rax]
lea rdx, str.Display_Device_Name:
mov rcx, r14
call fcn.180018200
mov rcx, rax
lea rdx, [rbp + 0x34]
call fcn.180018200
mov rcx, rax
call fcn.180018470
lea rdx, str.Display_Device_String:
mov rcx, r14
call fcn.180018200
mov rcx, rax
lea rdx, [rbp + 0x54]
call fcn.180018200
mov rcx, rax
call fcn.180018470
lea r8, [rsp + 0x40]
mov word [rsp + 0x64], bx
mov edx, 0xffffffff
lea rcx, [rbp + 0x34]
call qword [sym.imp.USER32.dll_EnumDisplaySettingsA]
test eax, eax
je 0x180008440
lea rdx, str.Display_Resolution:
mov rcx, r14
call fcn.180018200
mov edx, dword [rbp - 0x54]
mov rcx, rax
call fcn.1800157a0
mov rcx, rax
lea rdx, [0x180050f10]
call fcn.180018200
mov edx, dword [rbp - 0x50]
mov rcx, rax
call fcn.1800157a0
mov rcx, rax
call fcn.180018470
lea rdx, str.Display_Refresh_Rate:
mov rcx, r14
call fcn.180018200
mov edx, dword [rbp - 0x48]
mov rcx, rax
call fcn.1800157a0
mov rcx, rax
lea rdx, [0x180050f30]
call fcn.180018200
mov rcx, rax
call fcn.180018470
mov rcx, r14
call fcn.180018470
inc edi
lea r8, [rbp + 0x30]
mov edx, edi
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.USER32.dll_EnumDisplayDevicesA]
test eax, eax
jne 0x180008370
mov rbx, rsi
xor r9d, r9d
mov dword [rbp + 0x30], 0x1a8
lea r8, [rbp + 0x30]
xor edx, edx
xor ecx, ecx
mov edi, r15d
call qword [sym.imp.USER32.dll_EnumDisplayDevicesA]
test eax, eax
je 0x180008586
mov esi, 0x9c
nop
lea rdx, str.Display_Device_Name:
mov rcx, r14
call fcn.180018200
mov rcx, rax
lea rdx, [rbp + 0x34]
call fcn.180018200
mov rcx, rax
call fcn.180018470
lea rdx, str.Display_Device_String:
mov rcx, r14
call fcn.180018200
mov rcx, rax
lea rdx, [rbp + 0x54]
call fcn.180018200
mov rcx, rax
call fcn.180018470
lea r8, [rsp + 0x40]
mov word [rsp + 0x64], si
mov edx, 0xffffffff
lea rcx, [rbp + 0x34]
call qword [sym.imp.USER32.dll_EnumDisplaySettingsA]
test eax, eax
je 0x180008560
lea rdx, str.Display_Resolution:
mov rcx, r14
call fcn.180018200
mov edx, dword [rbp - 0x54]
mov rcx, rax
call fcn.1800157a0
mov rcx, rax
lea rdx, [0x180050f10]
call fcn.180018200
mov edx, dword [rbp - 0x50]
mov rcx, rax
call fcn.1800157a0
mov rcx, rax
call fcn.180018470
lea rdx, str.Display_Refresh_Rate:
mov rcx, r14
call fcn.180018200
mov edx, dword [rbp - 0x48]
mov rcx, rax
call fcn.1800157a0
mov rcx, rax
lea rdx, [0x180050f30]
call fcn.180018200
mov rcx, rax
call fcn.180018470
mov rcx, r14
call fcn.180018470
inc edi
lea r8, [rbp + 0x30]
mov edx, edi
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.USER32.dll_EnumDisplayDevicesA]
test eax, eax
jne 0x180008490
mov esi, dword [rbp + 0x20]
mov edx, 8
lea rcx, str.Fibonacci_number_at_position__d_is__d_n
lea r8d, [rdx + 0xd]
call fcn.1800011b0
mov rdi, qword [r13]
test rdi, rdi
je 0x180008c42
xor eax, eax
mov rcx, rbx
rep stosb byte [rdi], al
lea edx, [rax + 0x20]
lea rcx, str._c_is_a_whitespace_character._n
call fcn.1800011b0
movaps xmm1, xmm8
lea rcx, str.Product_of__.2f_and__.2f_is__.2f_n
movq rdx, xmm1
movaps xmm3, xmm6
movq r9, xmm6
movaps xmm2, xmm7
movq r8, xmm7
call fcn.1800011b0
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
lea rdx, [0x180050d08]
mov rcx, r14
call fcn.180018200
movzx edx, word [rbp + 0x1e0]
mov rcx, rax
call fcn.180015950
mov rcx, rax
lea rdx, [0x180050d04]
call fcn.180018200
movzx edx, word [rbp + 0x1e2]
mov rcx, rax
call fcn.180015950
mov rcx, rax
lea rdx, [0x180050d04]
call fcn.180018200
movzx edx, word [rbp + 0x1e6]
mov rcx, rax
call fcn.180015950
mov rcx, rax
lea rdx, [0x180050d00]
call fcn.180018200
movzx edx, word [rbp + 0x1e8]
mov rcx, rax
call fcn.180015950
mov rcx, rax
lea rdx, [0x180050cfc]
call fcn.180018200
movzx edx, word [rbp + 0x1ea]
mov rcx, rax
call fcn.180015950
mov rcx, rax
lea rdx, [0x180050cfc]
call fcn.180018200
movzx edx, word [rbp + 0x1ec]
mov rcx, rax
call fcn.180015950
mov rcx, rax
call fcn.180018470
mov rcx, qword [r13]
test rbx, rbx
je 0x1800086e3
test rcx, rcx
je 0x1800086d3
mov r8, rbx
test r12, r12
je 0x1800086cc
mov rdx, r12
call fcn.1800203a0
jmp 0x1800086e3
xor edx, edx
call fcn.180020a50
call fcn.1800262c0
mov dword [rax], 0x16
call fcn.180026114
lea rcx, [rbp - 0x20]
mov dword [rbp - 0x20], 0x40
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
test eax, eax
je 0x180008745
mov rbx, qword [rbp - 0x10]
lea rdx, str.Memory_Usage:
mov rdi, qword [rbp - 0x18]
mov rcx, r14
shr rbx, 0x14
shr rdi, 0x14
call fcn.180018200
mov rcx, rax
mov rdx, rdi
call fcn.1800155f0
mov rcx, rax
lea rdx, str._MB_Total_
call fcn.180018200
mov rcx, rax
mov rdx, rbx
call fcn.1800155f0
lea rdx, str._MB_Available
jmp 0x18000874f
mov rax, r14
lea rdx, str.Failed_to_get_memory_usage_
mov rcx, rax
call fcn.180018200
mov rcx, rax
call fcn.180018470
movsd xmm1, qword [0x1800510f0]
xorps xmm0, xmm0
ucomisd xmm0, xmm1
ja 0x180008776
sqrtpd xmm0, xmm1
jmp 0x18000877e
movaps xmm0, xmm1
call fcn.180040a3c
cvtsd2ss xmm0, xmm0
lea rcx, str.Square_root_of__d_is__.2f_n
mov edx, 9
xorps xmm6, xmm6
cvtss2sd xmm6, xmm0
movaps xmm2, xmm6
movq r8, xmm6
call fcn.1800011b0
mov edx, 6
lea rcx, str.Factorial_of__d_is__d_n
mov r8d, 0x2d0
call fcn.1800011b0
mov ecx, 2
mov edi, 1
mov eax, 0x11
cdq
idiv ecx
test edx, edx
je 0x1800087d8
inc ecx
cmp ecx, 8
jle 0x1800087c3
jmp 0x1800087db
mov edi, r15d
lea rax, str._d_is_not_a_prime_number._n
test edi, edi
lea rcx, str._d_is_a_prime_number._n
mov edx, 0x11
cmove rcx, rax
call fcn.1800011b0
mov edx, 0x2c
lea rcx, str._c_is_a_punctuation_mark._n
call fcn.1800011b0
lea rdx, [rbp + 0x20]
mov dword [rbp + 0x20], 0x10
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
je 0x18000884b
lea rdx, str.Computer_Name:
call fcn.180018520
mov rcx, rax
lea rdx, [rbp + 0x1e0]
call fcn.1800187c0
mov rcx, rax
call fcn.180018af0
jmp 0x180008862
lea rdx, str.Failed_to_get_computer_name_
mov rcx, r14
call fcn.180018200
mov rcx, rax
call fcn.180018470
lea r8, [rbp + 0x20]
mov dword [rbp + 0x20], 0x10
lea rdx, [rbp + 0x1f0]
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_GetComputerNameExA]
test eax, eax
je 0x1800088a8
lea rdx, str.Domain_Name:
call fcn.180018520
mov rcx, rax
lea rdx, [rbp + 0x1f0]
call fcn.1800187c0
mov rcx, rax
call fcn.180018af0
jmp 0x1800088bf
lea rdx, str.Failed_to_get_domain_name_
mov rcx, r14
call fcn.180018200
mov rcx, rax
call fcn.180018470
mov edx, 5
mov dword [rbp + 0x24], esi
lea rcx, str.Sum_of__d_and__d_is__d_n
lea r9d, [rdx + 3]
lea r8d, [rdx - 2]
call fcn.1800011b0
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
lea rdx, [0x180050d08]
mov rcx, r14
call fcn.180018200
movzx edx, word [rbp + 0x1e0]
mov rcx, rax
call fcn.180015950
mov rcx, rax
lea rdx, [0x180050d04]
call fcn.180018200
movzx edx, word [rbp + 0x1e2]
mov rcx, rax
call fcn.180015950
mov rcx, rax
lea rdx, [0x180050d04]
call fcn.180018200
movzx edx, word [rbp + 0x1e6]
mov rcx, rax
call fcn.180015950
mov rcx, rax
lea rdx, [0x180050d00]
call fcn.180018200
movzx edx, word [rbp + 0x1e8]
mov rcx, rax
call fcn.180015950
mov rcx, rax
lea rdx, [0x180050cfc]
call fcn.180018200
movzx edx, word [rbp + 0x1ea]
mov rcx, rax
call fcn.180015950
mov rcx, rax
lea rdx, [0x180050cfc]
call fcn.180018200
movzx edx, word [rbp + 0x1ec]
mov rcx, rax
call fcn.180015950
mov rcx, rax
call fcn.180018470
movaps xmm2, xmm6
lea rcx, str.Square_root_of__d_is__.2f_n
movq r8, xmm6
mov edx, 9
call fcn.1800011b0
mov rcx, qword [rbp + 0x28]
lea rax, [rbp + 0x24]
mov qword [rsp + 0x28], rax
xor r9d, r9d
mov rax, qword [r13]
xor edx, edx
mov qword [rsp + 0x20], rax
lea r8d, [r9 + 1]
call qword [sym.imp.ADVAPI32.dll_CryptDecrypt]
test eax, eax
je 0x180008c42
mov edx, 0x2c
lea rcx, str._c_is_a_punctuation_mark._n
call fcn.1800011b0
mov edx, 0x65
lea rcx, str._c_is_a_lowercase_letter._n
call fcn.1800011b0
xor ecx, ecx
call fcn.1800264b0
lea rcx, [rbp + 0x28]
mov qword [rbp + 0x28], rax
call fcn.18002680c
mov r9, rax
lea r8, str._Y__m__d__H:_M:_S
mov edx, 0x14
lea rcx, [rbp + 0x1f0]
call fcn.180023bf4
lea rdx, [0x180050d08]
mov rcx, r14
call fcn.180018200
mov rcx, rax
lea rdx, [rbp + 0x1f0]
call fcn.180018200
mov rcx, rax
call fcn.180018470
mov rdx, qword [rsp + 0x30]
mov r9d, 0x14
mov ecx, dword [rbp + 0x24]
mov r8d, r9d
mov dword [rdx], ecx
mov edx, 0xf
lea rcx, str.The_maximum_number_between__d_and__d_is__d_n
call fcn.1800011b0
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
movabs r8, 0x179ec9cbd821dc3b
movabs r9, 0x4a90be587de6e565
mov rdi, rax
movabs rax, 0x8daea1d7f4cf721b
mul rdi
mov r14, rdi
mov rcx, rdi
sub r14, rdx
mov rsi, rdi
shr r14, 1
mov rax, r8
add r14, rdx
mov rbx, rdi
mul rdi
movabs rax, 0x624dd2f1a9fbe77
shr r14, 0x1a
sub rcx, rdx
shr rcx, 1
add rcx, rdx
shr rcx, 0xf
imul rcx, rcx, 0xea60
sub rsi, rcx
mul rsi
mov rax, r9
sub rsi, rdx
shr rsi, 1
add rsi, rdx
mul rdi
mov rax, r8
shr rsi, 9
shr rdx, 0x14
imul rcx, rdx, 0x36ee80
sub rbx, rcx
mul rbx
imul rcx, r14, 0x5265c00
sub rbx, rdx
mov rax, r9
shr rbx, 1
add rbx, rdx
shr rbx, 0xf
sub rdi, rcx
lea rcx, [0x18005d270]
mul rdi
mov rdi, rdx
lea rdx, str.System_Uptime:
shr rdi, 0x14
call fcn.180018200
mov rcx, rax
mov edx, r14d
call fcn.1800157a0
mov rcx, rax
lea rdx, str._days_
call fcn.180018200
mov rcx, rax
mov edx, edi
call fcn.1800157a0
mov rcx, rax
lea rdx, str._hours_
call fcn.180018200
mov rcx, rax
mov edx, ebx
call fcn.1800157a0
mov rcx, rax
lea rdx, str._minutes_
call fcn.180018200
mov rcx, rax
mov edx, esi
call fcn.1800157a0
mov rcx, rax
lea rdx, str._seconds
call fcn.180018200
mov rcx, rax
call fcn.180018470
lea rcx, [rbp + 0x1e0]
mov dword [rbp + 0x1e0], 8
call qword [sym.imp.USER32.dll_GetLastInputInfo]
test eax, eax
je 0x180008bf4
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
mov eax, 0x10624dd3
sub edi, dword [rbp + 0x1e4]
mul edi
mov r15d, edx
shr r15d, 6
lea rdx, str.Idle_Time:
lea rcx, [0x18005d270]
call fcn.180018200
mov rcx, rax
mov edx, r15d
call fcn.1800157a0
mov rcx, rax
lea rdx, str._seconds
call fcn.180018200
mov rcx, rax
call fcn.180018470
mov edx, 8
lea rcx, str.Fibonacci_number_at_position__d_is__d_n
lea r8d, [rdx + 0xd]
call fcn.1800011b0
mov al, 1
jmp 0x180008c44
xor al, al
mov rcx, qword [rbp + 0x208]
xor rcx, rsp
call fcn.18001e8f0
lea r11, [rsp + 0x348]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret