Function at 0x4078df
Capabilities:
Get system information on windows
Resolve dns

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
mov eax, 0x10d0
call fcn.00401589
mov esi, dword [ebp + 0x10]
mov ebx, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
call fcn.00433e4b
xor eax, eax
jl 0x4070c6
jge 0x4070c6
call 0x7943e912
add eax, ebp
dec eax
js 0x4070cc
jns 0x4070cc
call 0x4c6ed53
add byte [ebp - 0xe8afec0], cl
cmp dword [esi + eax*4 + 4], 0
lea eax, [eax + 1]
jne 0x4070c7
jl 0x4070db
jge 0x4070db
call 0xd0f08e68
inc ebx
add byte [ebp + 0xac249c], cl
add byte [eax], al
mov dword [0x43d0b0], ebx
lea ebx, [esp + 0xac]
mov dword [0x43d0b8], esi
mov dword [0x43d0b4], edi
mov dword [0x43d0bc], eax
ja 0x4070fe
jbe 0x4070fe
call 0x4072ea
add byte [eax], al
call 0x1b87482
call 0x407104
add al, ch
jns 0x40710a
js 0x40710a
call 0x1b37480
jb 0x40710f
jae 0x40710f
call 0x1bf7491
jle 0x407114
jg 0x407114
call 0x1b17488
jo 0x407119
jno 0x407119
call 0x1bc749a
jge 0x40711e
jl 0x40711e
call 0x1ba749d
jnp 0x407123
jp 0x407123
call 0x1be74a6
jg 0x407128
jle 0x407128
call 0x1be74ab
jg 0x40712d
jle 0x40712d
call 0x1b374a3
jb 0x407132
jae 0x407132
call 0x1ba74b1
jnp 0x407137
jp 0x407137
call 0x407323
add byte [eax], al
call 0x1be74c1
call 0x40713d
add al, ch
jg 0x407143
jle 0x407143
call 0x1bd74c3
jl 0x407148
jge 0x407148
call 0x1bd74c8
jl 0x40714d
jge 0x40714d
call 0x1b174c1
jo 0x407152
jno 0x407152
call 0x1b374c8
jb 0x407157
jae 0x407157
call 0x1b074cc
jno 0x40715c
jo 0x40715c
call 0x1b674d7
ja 0x407161
jbe 0x407161
call 0x1b274d8
jae 0x407166
jb 0x407166
call 0xcc6525f7
add byte [eax], al
add byte [ebp - 0x38b7dbac], cl
add edi, dword [eax + 0x33]
inc eax
add bh, al
inc ebx
add al, 0
add al, 0
add byte [ebx - 0x76fff79d], al
int1
lea esi, [esp + 0xcc]
lea edx, [esp + 0x48]
mov dword [ebx], 0x403378
mov dword [ebx + 4], 0x400
and dword [ebx + 8], 0
mov ecx, esi
mov dword [edx], ebx
jle 0x40718b
jg 0x40718b
call 0x608777
add byte [esi - 0x7d], ah
add byte ds:[edi], cl
test ebp, eax
add al, byte [eax]
add byte [eax + 3], dh
call 0x4091a5
cmp word [esi], 0
jne 0x40745f
jo 0x40719f
jno 0x40719f
call 0x33b47f2e
inc eax
add byte [ebx + 0x4033703d], cl
add byte [edi], cl
mov dh, 0x84
and al, 0xce
add byte [eax], al
add byte [ebp + 0xa02494], cl
add byte [eax], al
mov ecx, dword [0x403374]
mov edi, dword [0x403370]
movzx eax, byte [esp + 0xce]
lea edx, [esp + 0xa0]
lea esi, [esp + 0x118]
mov dword [edx + 4], ecx
mov dword [edx], edi
jb 0x4071cb
jae 0x4071cb
call 0xe8916358
inc esi
and byte [eax], al
add byte [eax + 0x66], bl
cmp dword [esi + 8], 0
mov ecx, esi
push eax
call fcn.00409219
pop eax
cmp word [esi + 8], 0
jne 0x40745f
jo 0x4071e4
jno 0x4071e4
call 0x1c64f673
add dword [eax], eax
add byte [ebx + 0x1182494], cl
add byte [eax], al
mov eax, dword [esp + 0x11c]
mov edx, dword [esp + 0x118]
jnp 0x4071f7
jp 0x4071f7
call 0x4864be88
lea ecx, [esp + 0x48]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x24], eax
push eax
call fcn.00409299
pop ecx
test ax, ax
jne 0x40745f
lea esi, [esp + 0xd4]
lea edx, [esp + 0x48]
jno 0x407223
jo 0x407223
call 0x7c2963b0
pop ds
add byte [eax], al
mov ecx, esi
call 0x4091a5
cmp word [esi], 0
jne 0x40745f
jl 0x407239
jge 0x407239
call 0x24c5284c
salc
add byte [eax], al
add byte [ebx + 0x4033740d], cl
add byte [ebp + 0x942494], cl
add byte [eax], al
movzx eax, byte [esp + 0xd6]
mov ecx, dword [0x403374]
lea edx, [esp + 0x94]
lea esi, [esp + 0x1a8]
mov dword [edx], edi
mov dword [edx + 4], ecx
jp 0x40725f
jnp 0x40725f
call 0xe89163ec
mov dl, 0x1f
add byte [eax], al
mov ecx, esi
push eax
call fcn.00409219
pop eax
cmp word [esi + 8], 0
jne 0x40745f
jno 0x407278
jo 0x407278
call 0xac64f707
add dword [eax], eax
add byte [ebx + 0x1a82494], cl
add byte [eax], al
mov eax, dword [esp + 0x1ac]
mov edx, dword [esp + 0x1a8]
jns 0x40728b
js 0x40728b
call 0x4864bf1c
lea ecx, [esp + 0x48]
mov dword [esp + 0x18], edx
mov dword [esp + 0xc], eax
push eax
call fcn.00409299
pop ecx
test ax, ax
test eax, eax
jne 0x40745f
lea esi, [esp + 0x54]
lea edx, [esp + 0x48]
jo 0x4072b4
jno 0x4072b4
call 0x61296441
and byte [eax], al
add byte [esi - 0x7d], ah
jle 0x4072c1
mov ecx, esi
call 0x40931b
cmp word [esi + 2], 0
jne 0x40745f
add byte [edi], cl
test dword [ecx + 0x7b000001], ebx
add edi, dword [edx + 1]
jnp 0x4072cb
jp 0x4072cb
call 0x248529de
push esp
movzx eax, word [esp + 0x54]
lea esi, [esp + 0x7c]
lea edx, [esp + 0x48]
mov ecx, esi
mov word [esp + 0x20], ax
jb 0x4072e4
jae 0x4072e4
call 0x5f2fd0
add byte [esi - 0x7d], ah
add byte ds:[edi], cl
test dword [ecx + eax], ebp
add byte [esi + 3], dh
call 0x4091a5
cmp word [esi], 0
jne 0x40745f
jbe 0x4072f8
ja 0x4072f8
call 0x24b5290b
jle 0x40729f
movzx esi, byte [esp + 0x7e]
mov eax, dword [0x403374]
lea edx, [esp + 0x70]
lea ecx, [esp + 0x2a8]
mov dword [edx], edi
mov dword [edx + 4], eax
je 0x407333
inc eax
add byte [ebp - 0x728fdbac], cl
mov word [eax + ebp*4], fs
add al, byte [eax]
add byte [ecx + 0x442893a], cl
jne 0x407317
je 0x407317
call 0x3864e7a4
mov dword [esp + 0x38], esi
push esi
call fcn.00409219
pop eax
lea eax, [esp + 0x2a8]
cmp word [eax + 8], 0
jne 0x40745f
add byte [edi + 3], dh
ja 0x407339
jbe 0x407339
call 0xac64f7c8
add al, byte [eax]
add byte [ebx + 0x2a82494], cl
add byte [eax], al
mov eax, dword [esp + 0x2ac]
mov edx, dword [esp + 0x2a8]
je 0x40734c
jne 0x40734c
call 0x4864bfdd
lea ecx, [esp + 0x48]
mov dword [esp + 0x28], edx
push eax
call fcn.00409299
pop ecx
test ax, ax
jne 0x40745f
lea esi, [esp + 0x84]
lea edx, [esp + 0x48]
ja 0x407374
jbe 0x407374
call 0xa1296501
pop ds
add byte [eax], al
mov ecx, esi
call 0x40931b
cmp word [esi + 2], 0
jne 0x40745f
jbe 0x40738b
ja 0x40738b
call 0x24f52a9e
test byte [eax], al
add byte [eax], al
movzx esi, word [esp + 0x84]
mov eax, dword [0x403374]
lea edx, [esp + 0xdc]
lea ecx, [esp + 0x3b0]
mov dword [edx], edi
mov dword [edx + 4], eax
jae 0x4073b0
jb 0x4073b0
call 0x3464e83d
mov dword [esp + 0x34], esi
push esi
call fcn.00409219
pop eax
lea eax, [esp + 0x3b0]
cmp word [eax + 8], 0
jne 0x40745f
jns 0x4073d2
js 0x4073d2
call 0xb464f861
add eax, dword [eax]
add byte [ebx + 0x3b02494], cl
add byte [eax], al
mov eax, dword [esp + 0x3b4]
mov edx, dword [esp + 0x3b0]
jl 0x4073e5
jge 0x4073e5
call 0x4864c076
lea ecx, [esp + 0x48]
mov dword [esp + 0x50], edx
push eax
call fcn.00409299
pop ecx
test ax, ax
jne 0x40745f
lea esi, [esp + 0x5c]
lea edx, [esp + 0x48]
jns 0x407406
js 0x407406
call 0x81296593
pop ds
add byte [eax], al
mov ecx, esi
call 0x40938d
cmp word [esi + 4], 0
jne 0x40745f
lea esi, [esp + 0x8c]
lea edx, [esp + 0x48]
jbe 0x407424
ja 0x407424
call 0x7b2965b1
sbb eax, 0x83660000
add byte ds:[ebp + 0x2e], dh
mov ecx, esi
call 0x4091a5
cmp word [esi], 0
jne 0x40745f
ja 0x407436
jbe 0x407436
call 0x8e64f8c4
add byte [eax], al
add byte [ebp + 0xe824b4], cl
add byte [eax], al
mov al, byte [esp + 0x8e]
lea esi, [esp + 0xe8]
lea edx, [esp + 0x48]
mov ecx, esi
mov byte [esp + 0x13], al
jb 0x407453
jae 0x407453
call 0x5faa3f
add byte [esi - 0x7d], ah
jle 0x407460
call 0x40938d
cmp word [esi + 4], 0
je 0x4074d0
add byte [ecx + esi*2 + 0x72], dh
jb 0x407464
add esi, dword [ebx + 1]
jae 0x407464
call 0x1bc77e5
jge 0x407469
jl 0x407469
call 0x1b777e3
jbe 0x40746e
ja 0x40746e
call 0x1b877eb
jns 0x407473
js 0x407473
call 0x1ba77f2
jnp 0x407478
jp 0x407478
call 0x1b877f5
jns 0x40747d
js 0x40747d
call 0x1b677f8
ja 0x407482
jbe 0x407482
call 0x1b277f9
jae 0x407487
jb 0x407487
call 0x1b87804
jns 0x40748c
js 0x40748c
call 0x1bd780c
jl 0x407491
jge 0x407491
call 0x1b8780e
jns 0x407496
js 0x407496
call 0x1bd7816
jl 0x40749b
jge 0x40749b
call 0x407687
add byte [eax], al
call 0x1b37818
call 0x4074a1
add al, ch
jb 0x4074a7
jae 0x4074a7
call 0x1bf7829
jle 0x4074ac
jg 0x4074ac
call 0x1be782f
jg 0x4074b1
jle 0x4074b1
call 0x1b27828
jae 0x4074b6
jb 0x4074b6
call 0x1b5782e
je 0x4074bb
jne 0x4074bb
call 0x3be34f0
movzx eax, byte [esp + 0x13]
lea esi, [esp + 0xe8]
mov dword [esp + 0x10c], eax
jno 0x4074e8
jo 0x4074e8
call 0x84c97b77
and al, 8
add dword [eax], eax
add byte [ecx + 0x403374], ah
mov eax, dword [esi]
mov dword [esp + 0x108], eax
mov eax, dword [0x403374]
jp 0x4074fb
jnp 0x4074fb
call 0x1b37871
jb 0x407500
jae 0x407500
call 0x1bf7882
jle 0x407505
jg 0x407505
call 0x1b97881
js 0x40750a
jns 0x40750a
call 0x1bf788c
jle 0x40750f
jg 0x40750f
call 0x1bc7890
jge 0x407514
jl 0x407514
call 0x1b07889
jno 0x407519
jo 0x407519
call 0x1b0788e
jno 0x40751e
jo 0x40751e
call 0x1be78a1
jg 0x407523
jle 0x407523
call 0x1b2789a
jae 0x407528
jb 0x407528
call 0x1bf78aa
jle 0x40752d
jg 0x40752d
call 0x1b878aa
jns 0x407532
js 0x407532
call 0x1bd78b2
jl 0x407537
jge 0x407537
call 0x1be78ba
jg 0x40753c
jle 0x40753c
call 0x1b378b2
jb 0x407541
jae 0x407541
call 0x40772d
add byte [eax], al
call 0x1ba78c7
call 0x407547
add al, ch
jnp 0x40754d
jp 0x40754d
call 0x1b578c5
je 0x407552
jne 0x407552
call 0x1bd78d2
jl 0x407557
jge 0x407557
call 0x1bd78d7
jl 0x40755c
jge 0x40755c
call 0x1bb78da
jp 0x407561
jnp 0x407561
call 0x1b478da
jne 0x407566
je 0x407566
call 0x1b078db
jno 0x40756b
jo 0x40756b
call 0x1b678e6
ja 0x407570
jbe 0x407570
call 0x1b878ed
jns 0x407575
js 0x407575
call 0x1b178e9
jo 0x40757a
jno 0x40757a
call 0x1bd78fa
jl 0x40757f
jge 0x40757f
call 0x5c64f20c
mov dword [esp + 0x5c], edi
mov dword [esp + 0x60], eax
and dword [esp + 0x68], 0
and dword [esp + 0x64], 0
ja 0x407596
jbe 0x407596
call 0x3332b82
add byte [ecx + 0xa82484], cl
add byte [eax], al
call 0x436850
mov dword [esp + 0xa8], eax
jle 0x4075a7
jg 0x4075a7
call 0x10ab6834
mov edx, esi
push 0x10
call fcn.004093fa
pop eax
lea ecx, [esp + 0x2a8]
ja 0x4075bd
jbe 0x4075bd
call 0x5ee2a9
add byte [ecx + 0xac2484], cl
add byte [eax], al
call 0x40942e
mov dword [esp + 0xac], eax
mov esi, eax
mov eax, edx
mov dword [esp + 0xb0], edx
mov dword [esp + 0xb4], 0x403112
mov dword [esp + 0x30], edx
xor eax, eax
inc eax
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], 0x403114
mov dword [esp + 0xc0], 7
mov dword [esp + 0xc4], 0x40311c
mov dword [esp + 0xc8], eax
xor eax, eax
jbe 0x40761c
ja 0x40761c
call 0x407808
add byte [eax], al
call 0x859a5691
leave
call 0x407622
add al, ch
push 0xffffffffffffffe0
pop ecx
test ecx, ecx
jnp 0x40762d
jp 0x40762d
call 0x3b487a5
je 0x407640
je 0x407634
jne 0x407634
call 0xd04cfa3b
add byte [eax], al
add byte [ebx - 0x1914f73f], al
add eax, dword [esp + ecx + 0xd0]
add ecx, 8
jmp 0x407626
lea edx, [esp + 0x1a8]
lea ecx, [esp + 0x5c]
lea edi, [esp + 0x3b0]
jp 0x407657
jnp 0x407657
call 0x430780e4
add al, 0x7c
aaa
inc eax
add byte [ebp + 3], dh
mov dword [edx], ecx
mov dword [edx + 4], 0x40377c
jne 0x407665
je 0x407665
call 0xe8916ff2
lodsb al, byte [esi]
sbb eax, dword [eax]
add byte [eax + 0x66], bl
cmp dword [edi + 8], 0
mov ecx, edi
push eax
call fcn.00409219
pop eax
cmp word [edi + 8], 0
je 0x407684
je 0x40767a
jne 0x40767a
call 0x1b279f1
jae 0x40767f
jb 0x40767f
call 0x49146c
add byte [ebx + 0xa82484], cl
add byte [eax], al
jmp 0x407f21
mov eax, dword [esp + 0xa8]
shr eax, 0x10
mov dword [esp + 0x100], eax
jno 0x40769a
jo 0x40769a
call 0xb064fb29
add eax, dword [eax]
add byte [ecx - 0x7493dbbc], cl
test byte [esp + esi*4], ah
add eax, dword [eax]
add byte [ebx - 0x7693dbac], cl
test byte [esp + eax], ah
add dword [eax], eax
add byte [ecx], dh
sar byte [edx + 3], 0x7b
add eax, ebp
mov eax, dword [esp + 0x3b0]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x3b4]
mov edx, dword [esp + 0x6c]
mov dword [esp + 0x104], eax
xor eax, eax
jp 0x4076be
jnp 0x4076be
call 0x3064bafb
cmp dword [esp + 0x30], eax
je 0x4076d2
jns 0x4076c9
js 0x4076c9
call 0x88468357
or al, 2
mov cl, byte [esi + eax]
mov byte [edx + eax], cl
inc eax
jmp 0x4076b9
mov dword [esp + 0x2c], 0
jle 0x4076df
jg 0x4076df
call 0x2c64f366
add edi, dword [esi + 3]
cmp dword [esp + 0x2c], 3
jle 0x4076e9
jg 0x4076e9
call 0x44cbbd61
and al, 0x2c
je 0x407731
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + 0x30]
xor edi, edi
mov edx, dword [esp + eax*8 + 0xb4]
mov ecx, dword [esp + eax*8 + 0xb8]
mov eax, dword [esp + 0x6c]
add esi, eax
cmp ecx, edi
jp 0x407710
jnp 0x407710
call 0x3b38588
je 0x407720
jae 0x407717
jb 0x407717
call 0x887a7ba5
add al, 0x3e
mov al, byte [edx + edi]
mov byte [esi + edi], al
inc edi
jmp 0x407709
call 0x407726
add al, ch
add dword [esp + 0x30], ecx
inc dword [esp + 0x2c]
jmp 0x4076da
lea esi, [esp + 0x3a8]
mov eax, 0x40377c
jo 0x407742
jno 0x407742
call 0xa86503d3
add al, byte [eax]
add byte [ecx + 0x448d0446], cl
and al, 0x5c
lea ecx, [esp + 0x2a8]
mov dword [esi + 4], eax
lea eax, [esp + 0x5c]
mov dword [esi], eax
jae 0x407757
jb 0x407757
call 0x5df243
add byte [ecx + 0x7f037ed7], cl
add eax, ebp
call 0x4094d6
mov edi, edx
jle 0x407763
jg 0x407763
call 0x946503f4
add byte [eax], al
add byte [ecx - 0x17afa80e], cl
sbb dword [esi], ebx
add byte [eax], al
lea ecx, [esp + 0x94]
mov edx, esi
push edi
push eax
call fcn.0040958c
pop eax
pop ecx
lea eax, [esp + 0x94]
cmp word [eax + 8], 0
jne 0x407f21
jne 0x40778c
je 0x40778c
call 0x9464fc1b
add byte [eax], al
add byte [ebp - 0x72bfdbb4], cl
mov esp, 0x3b024
add byte [ebp + 0x2a82494], cl
add byte [eax], al
mov eax, dword [esp + 0x94]
lea ecx, [esp + 0x40]
lea edi, [esp + 0x3b0]
lea edx, [esp + 0x2a8]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x5c]
mov dword [ecx], eax
mov eax, 0x40377c
mov dword [ecx + 4], eax
je 0x4077c7
jne 0x4077c7
call 0x1b67b42
ja 0x4077cc
jbe 0x4077cc
call 0x591934
add byte [eax], al
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov ecx, edi
mov eax, dword [eax + 0x10]
movzx esi, word [eax + 0x38]
mov eax, dword [eax + 0x3c]
jnp 0x4077e6
jp 0x4077e6
call 0x509766bb
shr esi, 1
push esi
push eax
push 0x100
call fcn.004095f9
add esp, 0xc
jnp 0x4077fc
jp 0x4077fc
call 0x8ccd8f8b
and al, 0xa8
add al, byte [eax]
add byte [ecx + 3], bh
mov edx, dword [edi]
lea ecx, [esp + 0x2a8]
jns 0x40780a
js 0x40780a
call fcn.004079f6
add byte [eax], al
call 0x5f2ffd
add byte [ecx + 0x24748dd7], cl
jo 0x407897
call 0x407810
add al, ch
call fcn.004096cd
mov edi, edx
lea esi, [esp + 0x70]
jp 0x407821
add edi, dword [ebx + 1]
jnp 0x407821
call 0x4064ccb2
lea edx, [esp + 0x40]
mov ecx, esi
push edi
push eax
call fcn.0040958c
pop eax
pop ecx
cmp word [esi + 8], 0
jne 0x407f21
jp 0x407840
jnp 0x407840
call 0x7064bccf
mov eax, dword [esp + 0x70]
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0xfc], eax
ja 0x40785b
jbe 0x40785b
call 0x44112500
add dl, dh
movups xmm0, xmmword [esp + 0xe8]
mov eax, dword [0x43d0ac]
movsd xmm0, qword [esp + 0xe8]
movsd xmm1, qword [esp + 0xf0]
test eax, eax
movsd qword [esp + 0x16c], xmm1
movsd qword [esp + 0x164], xmm0
jne 0x4078b7
lea esi, [esp + 0x3b0]
jge 0x407894
jl 0x407894
call 0x1b97c10
js 0x407899
jns 0x407899
add eax, ebp
call 0x4ab6b26
mov edx, esi
push 4
call fcn.004093fa
pop eax
mov eax, 0x7ffffffe
and eax, dword [esi]
ja 0x4078af
jbe 0x4078af
call 0xdc83a3c
lodsb al, byte [esi]
rol byte [ebx], 1
mov ecx, eax
xchg dword [0x43d0ac], ecx
jnp 0x4078bc
jp 0x4078bc
call 0x1864fd49
add dword [eax], eax
add byte [eax + 3], dh
mov dword [esp + 0x118], eax
jo 0x4078c8
jno 0x4078c8
call 0x32fbab4
add byte [ecx + 0x11c2484], cl
add byte [eax], al
call 0x43680e
mov dword [esp + 0x11c], eax
jo 0x4078d9
jno 0x4078d9
call fcn.00407ac5
add byte [eax], al
call 0xa8651d67
add dword [eax], eax
add byte [eax], al
call 0x4078df
add al, ch
and dword [esp + 0x1a8], 0
and dword [esp + 0x3b0], 0
lea edi, [esp + 0x3b0]
jp 0x4078fc
jnp 0x4078fc
call 0x8d44e357
test byte [eax + esi*4], ah
add dword [eax], eax
add byte [eax + 0x6a], dl
adc al, 0x6a
cld
push edi
push 4
lea eax, [esp + 0x1b0]
push eax
push 0x14
push 0xfffffffffffffffc
call sub.ADVAPI32.dll_GetTokenInformation
xor esi, esi
xorps xmm0, xmm0
cmp dword [esp + 0x1a8], esi
jl 0x407921
jge 0x407921
call 0x1bd7ca1
call 0xc1010e39
loopne 0x40792f
jl 0x407926
jge 0x407926
setne al
shl al, 3
mov byte [esp + 0x3f], al
jae 0x407935