Function at 0x10008e7d
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x1cc
mov eax, 0x10053182
call fcn.10037d5a
xor ebx, ebx
push ebx
push ebx
lea eax, [ebp - 0xf8]
call fcn.10022f83
mov dword [ebp - 4], 2
cmp edx, ebx
je 0x10008eb7
mov esi, eax
mov ecx, edx
call fcn.10002f66
test al, al
je 0x10009953
lea eax, [ebp - 0x160]
push eax
call fcn.10015596
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 3
call fcn.1000a095
lea eax, [ebp - 0x160]
mov dword [ebp - 0xd8], eax
lea eax, [ebp - 0xdc]
push eax
push 0x10032f0c
push str.select__from_Win32_DiskDrive
mov dword [ebp - 0xdc], str.SerialNumber
call fcn.10032d7d
mov eax, dword [ebp - 0x150]
sub eax, dword [ebp - 0x154]
push 0x1c
cdq
pop ecx
idiv ecx
test eax, eax
je 0x10008fa6
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0xd8], esp
push 0x10058fbc
call fcn.10001ec7
lea eax, [ebp - 0x130]
push eax
lea ecx, [ebp - 0x160]
call fcn.10007e4b
push eax
lea eax, [ebp - 0x114]
push eax
mov byte [ebp - 4], 4
call fcn.1000121f
add esp, 0x10
mov byte [ebp - 4], 5
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10022096
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_disk_sn
mov byte [ebp - 4], 6
call fcn.10023221
mov edi, eax
mov byte [ebp - 4], 5
call fcn.100222e9
push ebx
push 1
lea ecx, [ebp - 0x114]
call fcn.100020f3
push ebx
push 1
lea esi, [ebp - 0x130]
mov byte [ebp - 4], 3
call fcn.100021ef
lea eax, [ebp - 0x114]
push eax
call fcn.1002fc09
sub esp, 0x14
mov byte [ebp - 4], 7
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10022096
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_os
mov byte [ebp - 4], 8
call fcn.10023221
mov edi, eax
mov byte [ebp - 4], 7
call fcn.100222e9
push ebx
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 3
call fcn.100020f3
mov ebx, str.InstallDate
mov edi, str.select__from_Win32_OperatingSystem
lea ecx, [ebp - 0x114]
call fcn.1000806e
push eax
lea eax, [ebp - 0xd4]
push eax
mov byte [ebp - 4], 9
call fcn.10008ced
pop ecx
pop ecx
xor ebx, ebx
push ebx
push 1
lea esi, [ebp - 0x114]
mov byte [ebp - 4], 0xb
call fcn.100021ef
cmp dword [ebp - 0xc0], ebx
je 0x10009099
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.1000121f
sub esp, 0x10
mov byte [ebp - 4], 0xc
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10022096
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_os_insttime
mov byte [ebp - 4], 0xd
call fcn.10023221
mov edi, eax
mov byte [ebp - 4], 0xc
call fcn.100222e9
push ebx
push 1
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0xb
call fcn.100020f3
lea eax, [ebp - 0x198]
push eax
call fcn.10015596
mov edi, str.SerialNumber
push edi
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0xe
call fcn.10001ec7
mov eax, esi
push eax
lea eax, [ebp - 0x198]
mov byte [ebp - 4], 0xf
call fcn.1000a02e
push ebx
push 1
mov byte [ebp - 4], 0xe
call fcn.100021ef
push str.ReleaseDate
lea esi, [ebp - 0x2c]
call fcn.10001ec7
mov eax, esi
push eax
lea eax, [ebp - 0x198]
mov byte [ebp - 4], 0x10
call fcn.1000a02e
push ebx
push 1
mov byte [ebp - 4], 0xe
call fcn.100021ef
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x1d8]
push str.select_SerialNumber__ReleaseDate_from_Win32_BIOS
push eax
call fcn.100330aa
add esp, 0xc
push edi
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x11
call fcn.10001ec7
mov eax, esi
push eax
lea ebx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x12
call fcn.1000a0d1
push eax
lea esi, [ebp - 0x9c]
call fcn.10001ee6
xor edi, edi
push edi
push 1
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.100021ef
push str.ReleaseDate
lea esi, [ebp - 0x130]
call fcn.10001ec7
mov eax, esi
push eax
mov byte [ebp - 4], 0x15
call fcn.1000a0d1
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.10008ced
pop ecx
pop ecx
push edi
push 1
mov byte [ebp - 4], 0x17
call fcn.100021ef
cmp dword [ebp - 0x88], edi
je 0x100091f2
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.1000121f
sub esp, 0x10
mov byte [ebp - 4], 0x18
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10022096
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_bios_sn
mov byte [ebp - 4], 0x19
call fcn.10023221
mov edi, eax
mov byte [ebp - 4], 0x18
call fcn.100222e9
push 0
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x17
call fcn.100020f3
cmp dword [ebp - 0xa4], 0
je 0x10009257
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.1000121f
sub esp, 0x10
mov byte [ebp - 4], 0x1a
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10022096
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_delivery
mov byte [ebp - 4], 0x1b
call fcn.10023221
mov edi, eax
mov byte [ebp - 4], 0x1a
call fcn.100222e9
push 0
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x17
call fcn.100020f3
mov ebx, str.Vendor
mov edi, str.select__from_Win32_ComputerSystemProduct
lea ecx, [ebp - 0x2c]
call fcn.1000806e
push eax
lea eax, [ebp - 0x114]
push eax
mov byte [ebp - 4], 0x1c
call fcn.1000121f
sub esp, 0x10
mov byte [ebp - 4], 0x1d
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10022096
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_computer_vendor
mov byte [ebp - 4], 0x1e
call fcn.10023221
mov edi, eax
mov byte [ebp - 4], 0x1d
call fcn.100222e9
push 0
push 1
lea ecx, [ebp - 0x114]
call fcn.100020f3
push 0
push 1
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x17
call fcn.100021ef
mov ebx, 0x10059144
mov edi, str.select__from_Win32_ComputerSystemProduct
lea ecx, [ebp - 0x48]
call fcn.1000806e
xor esi, esi
mov byte [ebp - 4], 0x1f
cmp dword [ebp - 0x34], esi
je 0x100092f2
cmp dword [ebp - 0x34], 2
ja 0x10009328
mov ebx, str.Model
mov edi, str.Select_Model_from_WIN32_ComputerSystem
lea ecx, [ebp - 0x114]
call fcn.1000806e
push 0xffffffffffffffff
push esi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x20
call fcn.1000213e
push esi
push 1
lea esi, [ebp - 0x114]
mov byte [ebp - 4], 0x1f
call fcn.100021ef
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.1000121f
sub esp, 0x10
mov byte [ebp - 4], 0x21
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10022096
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_computer_version
mov byte [ebp - 4], 0x22
call fcn.10023221
mov edi, eax
mov byte [ebp - 4], 0x21
call fcn.100222e9
push 0
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x1f
call fcn.100020f3
lea eax, [ebp - 0x148]
push eax
call fcn.10015596
mov edi, str.MaxClockSpeed
push edi
lea esi, [ebp - 0x130]
mov byte [ebp - 4], 0x23
call fcn.10001ec7
mov eax, esi
push eax
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x24
call fcn.1000a02e
push 0
push 1
mov byte [ebp - 4], 0x23
call fcn.100021ef
mov ebx, str.Name
push ebx
lea esi, [ebp - 0x130]
call fcn.10001ec7
mov eax, esi
push eax
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x25
call fcn.1000a02e
push 0
push 1
mov byte [ebp - 4], 0x23
call fcn.100021ef
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x1b8]
push str.select_Name__MaxClockSpeed_from_Win32_Processor
push eax
call fcn.100330aa
add esp, 0xc
push ebx
lea esi, [ebp - 0x130]
mov byte [ebp - 4], 0x26
call fcn.10001ec7
mov eax, esi
push eax
lea ebx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x27
call fcn.1000a0d1
push eax
lea esi, [ebp - 0x80]
call fcn.10001ee6
push 0
push 1
lea esi, [ebp - 0x130]
mov byte [ebp - 4], 0x29
call fcn.100021ef
push edi
lea esi, [ebp - 0x2c]
call fcn.10001ec7
mov eax, esi
push eax
mov byte [ebp - 4], 0x2a
call fcn.1000a0d1
mov ecx, fcn.10007ef4
test ecx, ecx
je 0x10009483
cmp dword [eax + 0x18], 8
jb 0x10009473
mov eax, dword [eax + 4]
jmp 0x10009476
add eax, 4
push eax
call fcn.10007ef4
pop ecx
mov ebx, eax
xor edi, edi
jmp 0x10009487
xor edi, edi
xor ebx, ebx
push edi
push 1
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x29
call fcn.100021ef
cmp dword [ebp - 0x6c], edi
je 0x100094f6
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.1000121f
sub esp, 0x10
mov byte [ebp - 4], 0x2b
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10022096
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_cpu_model
mov byte [ebp - 4], 0x2c
call fcn.10023221
mov edi, eax
mov byte [ebp - 4], 0x2b
call fcn.100222e9
push 0
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x29
call fcn.100020f3
xor edi, edi
cmp ebx, edi
je 0x1000952d
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0xd8], esp
push ebx
call fcn.10021fb7
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_cpu_frequency
mov byte [ebp - 4], 0x2d
call fcn.10023221
mov edi, eax
mov byte [ebp - 4], 0x29
call fcn.100222e9
xor edi, edi
lea eax, [ebp - 0x148]
call fcn.1000a095
mov ebx, str.Manufacturer
push ebx
lea esi, [ebp - 0x2c]
call fcn.10001ec7
mov eax, esi
push eax
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x2e
call fcn.1000a02e
push edi
push 1
mov byte [ebp - 4], 0x29
call fcn.100021ef
push str.Product
lea esi, [ebp - 0x2c]
call fcn.10001ec7
mov eax, esi
push eax
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x2f
call fcn.1000a02e
push edi
push 1
mov byte [ebp - 4], 0x29
call fcn.100021ef
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x180]
push str.select_Manufacturer__Product_from_Win32_BaseBoard
push eax
call fcn.100330aa
add esp, 0xc
push eax
lea esi, [ebp - 0x1b8]
mov byte [ebp - 4], 0x30
call fcn.1000a23d
lea eax, [ebp - 0x180]
push eax
mov byte [ebp - 4], 0x29
call fcn.1000a215
push ebx
lea esi, [ebp - 0x114]
call fcn.10001ec7
mov eax, esi
push eax
lea ebx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x31
call fcn.1000a0d1
push eax
lea esi, [ebp - 0x64]
call fcn.10001ee6
push edi
push 1
lea esi, [ebp - 0x114]
mov byte [ebp - 4], 0x33
call fcn.100021ef
cmp dword [ebp - 0x50], edi
je 0x100096e6
push str.Product
lea esi, [ebp - 0x130]
call fcn.10001ec7
mov eax, esi
push eax
mov byte [ebp - 4], 0x34
call fcn.1000a0d1
push eax
lea esi, [ebp - 0x2c]
call fcn.10001ee6
push edi
push 1
lea esi, [ebp - 0x130]
mov byte [ebp - 4], 0x36
call fcn.100021ef
cmp dword [ebp - 0x18], edi
je 0x10009681
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x17c]
push 0x100592f4
push eax
call fcn.10006a47
add esp, 0xc
push 0xffffffffffffffff
push edi
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x37
call fcn.10005b87
push edi
push 1
lea esi, [ebp - 0x17c]
mov byte [ebp - 4], 0x36
call fcn.100021ef
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x17c]
push eax
call fcn.1000121f
sub esp, 0x10
mov byte [ebp - 4], 0x38
mov edx, eax
mov esi, esp
mov dword [ebp - 0xd8], esp
call fcn.10022096
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_motherboard_model
mov byte [ebp - 4], 0x39
call fcn.10023221
mov edi, eax
mov byte [ebp - 4], 0x38
call fcn.100222e9
push 0
push 1
lea ecx, [ebp - 0x17c]
call fcn.100020f3
push 0
push 1
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x33
call fcn.100021ef
mov ebx, 0x100592f8
mov edi, str.select_TotalPhysicalMemory_from_Win32_ComputerSystem
lea ecx, [ebp - 0x17c]
call fcn.1000806e
mov byte [ebp - 4], 0x3a
cmp dword [eax + 0x18], 8
jb 0x1000970a
mov eax, dword [eax + 4]
jmp 0x1000970d
add eax, 4
push eax
call fcn.10007ef4
pop ecx
push 0
push 1
lea esi, [ebp - 0x17c]
mov ebx, eax
mov edi, edx
mov byte [ebp - 4], 0x33
call fcn.100021ef
mov eax, ebx
or eax, edi
je 0x10009769
shrd ebx, edi, 0x14
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0xd8], esp
push ebx
shr edi, 0x14
call fcn.10021fb7
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_memory_size
mov byte [ebp - 4], 0x3b
call fcn.10023221
mov edi, eax
mov byte [ebp - 4], 0x33
call fcn.100222e9
call fcn.10008dcc
mov ecx, eax
or ecx, edx
je 0x100097ac
shrd eax, edx, 0x14
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0xd8], esp
push eax
shr edx, 0x14
call fcn.10021fb7
lea eax, [ebp - 0xf8]
push eax
mov edx, str.hs_disk_size
mov byte [ebp - 4], 0x3c
call fcn.10023221
mov edi, eax
mov byte [ebp - 4], 0x33
call fcn.100222e9
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0xd8], esp
push str.replace
call fcn.10022015
lea eax, [ebp - 0xf8]
push eax
mov edx, str.i_action
mov byte [ebp - 4], 0x3d
call fcn.10023221
mov edi, eax
mov byte [ebp - 4], 0x33
call fcn.100222e9
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0xd8], esp
push str.client_unique
call fcn.10022015
lea eax, [ebp - 0xf8]
push eax
mov edx, str.i_key_columns
mov byte [ebp - 4], 0x3e
call fcn.10023221
mov edi, eax
mov byte [ebp - 4], 0x33
call fcn.100222e9
lea eax, [ebp - 0xf8]
push eax
mov ecx, str.t_hardware_summary
call fcn.10032a7d
push 0x10058b60
call fcn.10005d87
pop ecx
test eax, eax
je 0x10009843
lea eax, [ebp - 0xf8]
push eax
call fcn.10008796
pop ecx
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x130]
call fcn.100236bf
push eax
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x3f
call fcn.100011df
cmp dword [eax + 0x18], 8
pop ecx
jb 0x10009871
mov eax, dword [eax + 4]
jmp 0x10009874
add eax, 4
push str.lastHardwareSummary
mov esi, eax
mov ebx, str.Softwareprojonepodlp_smpcache_
mov edi, reloc.WS2_32.dll_bind
call fcn.1002d89c
xor ebx, ebx
xor edi, edi
push ebx
inc edi
push edi
lea esi, [ebp - 0x17c]
call fcn.100021ef
push ebx
push edi
lea ecx, [ebp - 0x130]
call fcn.100020f3
push ebx
push edi
lea esi, [ebp - 0x64]
call fcn.100021ef
push ebx
push edi
lea esi, [ebp - 0x80]
call fcn.100021ef
lea eax, [ebp - 0x1b8]
push eax
mov byte [ebp - 4], 0x23
call fcn.1000a215
lea esi, [ebp - 0x148]
call fcn.1000a440
push dword [ebp - 0x148]
call fcn.10036b92
pop ecx
push ebx
push edi
lea esi, [ebp - 0x48]
call fcn.100021ef
push ebx
push edi
lea esi, [ebp - 0xb8]
call fcn.100021ef
push ebx
push edi
lea esi, [ebp - 0x9c]
call fcn.100021ef
lea eax, [ebp - 0x1d8]
push eax
mov byte [ebp - 4], 0xe
call fcn.1000a215
lea esi, [ebp - 0x198]
call fcn.1000a440
push dword [ebp - 0x198]
call fcn.10036b92
pop ecx
push ebx
push edi
lea esi, [ebp - 0xd4]
call fcn.100021ef
lea esi, [ebp - 0x160]
call fcn.1000a440
push dword [ebp - 0x160]
call fcn.10036b92
pop ecx
or dword [ebp - 4], 0xffffffff
lea esi, [ebp - 0xf8]
call fcn.10022266
call fcn.10037ddd
ret