Function at 0x401340
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ecx, dword fs:[0x18]
mov ebp, esp
push edi
push esi
lea esi, [ebp - 0x148]
push ebx
lea ebx, [ebp - 0x1d8]
sub esp, 0x20c
mov dword [ebp - 0x1dc], eax
lea eax, [edx + 4]
mov dword [ebp - 0x1cc], eax
lea eax, [edx + 8]
mov dword [ebp - 0x1c4], eax
lea eax, [edx + 0xc]
mov dword [ebp - 0x1bc], eax
lea eax, [edx + 0x10]
mov dword [ebp - 0x1b4], eax
lea eax, [edx + 0x14]
mov dword [ebp - 0x1ac], eax
lea eax, [edx + 0x18]
mov dword [ebp - 0x1a4], eax
lea eax, [edx + 0x1c]
mov dword [ebp - 0x19c], eax
lea eax, [edx + 0x20]
mov dword [ebp - 0x194], eax
lea eax, [edx + 0x24]
mov dword [ebp - 0x18c], eax
lea eax, [edx + 0x28]
mov dword [ebp - 0x1d8], str.szTimeEnglish
mov dword [ebp - 0x1d4], edx
mov dword [ebp - 0x1d0], str.szTimeLocalized
mov dword [ebp - 0x1c8], str.szMachineNameEnglish
mov dword [ebp - 0x1c0], str.szOSExLongEnglish
mov dword [ebp - 0x1b8], str.szOSExLocalized
mov dword [ebp - 0x1b0], str.szLanguagesEnglish
mov dword [ebp - 0x1a8], str.szLanguagesLocalized
mov dword [ebp - 0x1a0], str.szSystemManufacturerEnglish
mov dword [ebp - 0x198], str.szSystemModelEnglish
mov dword [ebp - 0x190], str.szBIOSEnglish
mov dword [ebp - 0x188], str.szProcessorEnglish
mov dword [ebp - 0x184], eax
lea eax, [edx + 0x2c]
mov edi, dword [ebp - 0x1dc]
mov dword [ebp - 0x17c], eax
lea eax, [edx + 0x30]
mov dword [ebp - 0x174], eax
lea eax, [edx + 0x34]
mov dword [ebp - 0x16c], eax
lea eax, [edx + 0x38]
mov dword [ebp - 0x164], eax
lea eax, [edx + 0x3c]
mov dword [ebp - 0x15c], eax
lea eax, [edx + 0x40]
mov dword [ebp - 0x154], eax
lea eax, [edx + 0x44]
mov dword [ebp - 0x180], str.szPhysicalMemoryEnglish
mov dword [ebp - 0x178], str.szPageFileEnglish
mov dword [ebp - 0x170], str.szPageFileLocalized
mov dword [ebp - 0x168], str.szWindowsDir
mov dword [ebp - 0x160], str.szDirectXVersionLongEnglish
mov dword [ebp - 0x158], str.szSetupParamEnglish
mov dword [ebp - 0x150], str.szDxDiagVersion
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x1e8], ecx
mov dword [ebp - 0x1ec], edx
mov eax, dword [ebx + 4]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebx]
mov dword [ebp - 0x1dc], eax
mov dword [esp], esi
call sub.oleaut32.dll_VariantInit
mov eax, dword [edi]
sub esp, 4
mov dword [esp + 8], esi
mov ecx, dword [ebp - 0x1dc]
mov dword [esp], edi
mov dword [esp + 4], ecx
call dword [eax + 0x20]
sub esp, 0xc
test eax, eax
js 0x40150d
cmp word [ebp - 0x148], 8
je 0x401530
mov dword [esp], esi
call sub.oleaut32.dll_VariantClear
sub esp, 4
test byte [section..data], 2
jne 0x401600
lea esp, [ebp - 0xc]
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [ebp - 0x140]
cmp word [eax], 0
mov dword [ebp - 0x1e4], eax
je 0x4016f0
lea esi, cs:[esi]
nop
add eax, 2
cmp word [eax], 0
jne 0x401550
mov edx, dword [ebp - 0x1e4]
sub eax, edx
add eax, 2
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x1e8]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov ecx, eax
mov eax, dword [ebp - 0x1e0]
sub esp, 0xc
mov dword [eax], ecx
test ecx, ecx
je 0x40150d
mov dword [ebp - 0x1dc], ebx
mov ebx, dword [ebp - 0x1e4]
xor eax, eax
lea esi, cs:[esi]
movzx edx, word [ebx + eax]
mov word [ecx + eax], dx
add eax, 2
test dx, dx
jne 0x4015b0
mov ebx, dword [ebp - 0x1dc]
mov dword [esp], esi
add ebx, 8
call sub.oleaut32.dll_VariantClear
sub esp, 4
cmp ebx, esi
jne 0x4014ca
mov edi, dword [ebp - 0x1ec]
mov eax, 1
mov dword [edi + 0x48], 0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [ebp - 0x1dc]
test eax, eax
je 0x4017fc
shr eax, 0x10
je 0x40177e
mov dword [esp + 4], 0xffffffff
mov edi, dword [ebp - 0x1dc]
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, str._invalid_
sub esp, 8
test eax, eax
jne 0x401722
cmp word [edi], 0
je 0x401811
mov ecx, edi
lea esi, [esi]
mov edx, eax
lea eax, [eax + 1]
cmp word [ecx + edx*2 + 2], 0
jne 0x401650
mov ebx, 0x224c
movzx edi, word [0x40539a]
lea eax, [ebp - 0x146]
mov word [ebp - 0x148], bx
jmp 0x4016b0
cmp cx, 9
je 0x40176d
cmp cx, 0xa
jne 0x4017ab
mov ecx, 0x6e5c
add eax, 2
mov word [eax - 2], cx
sub edx, 1
jb 0x401806
lea ecx, [ebp - 0x26]
cmp ecx, eax
jb 0x4016fa
add dword [ebp - 0x1dc], 2
mov ecx, dword [ebp - 0x1dc]
movzx ecx, word [ecx - 2]
cmp cx, 0xd
je 0x40175a
jbe 0x401680
cmp cx, 0x22
je 0x40174f
cmp cx, 0x5c
jne 0x401798
mov ecx, 0x5c5c
add eax, 2
mov word [eax - 2], cx
jmp 0x4016a0
mov eax, 2
jmp 0x401564
mov byte [eax], 0x22
test edx, edx
je 0x401809
mov byte [eax + 3], 0x2e
mov edx, 0x2e2e
mov word [eax + 1], dx
lea edx, [eax + 4]
mov byte [edx], 0
mov dword [esp], esi
call fcn.00403500
mov edx, eax
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], str.Failed_to_retrieve_property__s_n
mov dword [esp + 8], 0x405364
mov dword [esp + 4], 0x404000
mov dword [esp], 1
call fcn.00401250
jmp 0x401525
mov word [eax], di
add eax, 2
jmp 0x4016a0
movzx ecx, word [str._r_TRUE]
add eax, 2
mov word [eax - 2], cx
jmp 0x4016a0
mov ebx, 0x745c
add eax, 2
mov word [eax - 2], bx
jmp 0x4016a0
mov eax, dword [ebp - 0x1dc]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.004012e0
mov edx, eax
jmp 0x401722
lea ebx, [ecx - 0x20]
cmp bx, 0x5e
ja 0x4017ab
mov byte [eax], cl
add eax, 1
jmp 0x4016a0
mov ebx, ecx
mov byte [eax], 0x5c
add eax, 5
shr bx, 0xc
movzx ebx, bx
movzx ebx, byte [ebx + str.0123456789abcdeffill_system_information]
mov byte [eax - 4], bl
mov ebx, ecx
shr bx, 8
and ebx, 0xf
movzx ebx, byte [ebx + str.0123456789abcdeffill_system_information]
mov byte [eax - 3], bl
mov ebx, ecx
and ecx, 0xf
shr bx, 4
movzx ecx, byte [ecx + str.0123456789abcdeffill_system_information]
and ebx, 0xf
movzx ebx, byte [ebx + str.0123456789abcdeffill_system_information]
mov byte [eax - 1], cl
mov byte [eax - 2], bl
jmp 0x4016a0
mov edx, str._null_
jmp 0x401722
mov byte [eax], 0x22
lea edx, [eax + 1]
jmp 0x401715
mov edi, 0x224c
mov byte [ebp - 0x146], 0x22
lea edx, [ebp - 0x145]
mov word [ebp - 0x148], di
jmp 0x401715