Function at 0x41d2ee
Capabilities:
Check os version
Get number of processors

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x629c5c
mov eax, dword fs:[0]
push eax
sub esp, 0x1f8
mov eax, dword [0x6b9a04]
xor eax, esp
mov dword [esp + 0x1f0], eax
push ebx
push esi
push edi
mov eax, dword [0x6b9a04]
xor eax, esp
push eax
lea eax, [esp + 0x208]
mov dword fs:[0], eax
mov edi, ecx
xor ebx, ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x30], edi
mov dword [edi + 0x5c], 1
cmp dword [edi + 0x150], ebx
je 0x41d354
push edi
call fcn.00415884
jmp 0x41dfac
mov esi, edi
mov dword [edi + 0x144], ebx
call fcn.0041d285
test eax, eax
jne 0x41d371
mov dword [edi + 0x144], 1
jmp 0x41d349
push ebx
call fcn.005400aa
pop ecx
test eax, eax
je 0x41d349
xor esi, esi
inc esi
cmp dword [edi + 0x1dc], ebx
jne 0x41d3b1
mov eax, dword [edi + 8]
mov dword [edi + 0x1dc], esi
push dword [eax + 0x94]
push ecx
call fcn.0040cb83
pop ecx
mov ecx, eax
call fcn.004994d3
push 2
pop ecx
cmp eax, ecx
jne 0x41d3b1
mov dword [edi + 0x1dc], ecx
lea eax, [esp + 0x9c]
push eax
mov dword [esp + 0x38], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x44], ebx
call fcn.00412717
lea eax, [esp + 0x7c]
push eax
mov dword [esp + 0x214], ebx
call fcn.00412bb5
mov byte [esp + 0x210], 1
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x5c]
mov dword [esp + 0x14], eax
cmp eax, ebx
push esi
mov eax, edi
jne 0x41d400
call fcn.0041dfd0
jmp 0x41d40b
call fcn.0041dfd0
mov dword [edi + 0x154], esi
push ebx
lea esi, [esp + 0x160]
mov dword [edi + 0x50], ebx
mov dword [edi + 0x54], ebx
mov dword [edi + 0x58], ebx
call fcn.00414d30
mov byte [esp + 0x210], 2
push 0x4f
mov dword [esp + 0x30], ebx
call fcn.004010a2
mov ecx, eax
call fcn.00431cfc
test eax, eax
je 0x41d50c
lea eax, [esp + 0x44]
push eax
mov eax, dword [edi + 8]
call fcn.0040106a
push eax
mov byte [esp + 0x214], 3
call fcn.0041bf5f
mov ebx, eax
call fcn.004d0da1
push 0
push 1
lea ecx, [esp + 0x4c]
mov esi, eax
mov byte [esp + 0x218], 2
call fcn.004055c2
test esi, esi
je 0x41d4af
push 9
lea esi, [esp + 0xdc]
call fcn.00414d30
mov byte [esp + 0x210], 4
mov eax, esi
mov ebx, edi
mov dword [esp + 0x20], 1
call fcn.00415b07
test eax, eax
jne 0x41d4af
mov bl, 1
jmp 0x41d4b1
xor bl, bl
mov dword [esp + 0x210], 2
test byte [esp + 0x20], 1
je 0x41d4d4
and dword [esp + 0x20], 0xfffffffe
lea esi, [esp + 0xd8]
call fcn.004150e9
test bl, bl
je 0x41d50a
push 9
lea esi, [esp + 0xdc]
call fcn.00414d30
push eax
mov esi, edi
mov byte [esp + 0x214], 5
call fcn.0041523e
lea esi, [esp + 0xd8]
mov byte [esp + 0x210], 2
call fcn.004150e9
xor ebx, ebx
push 0x50
call fcn.004010a2
mov ecx, eax
call fcn.00431dbb
xor esi, esi
inc esi
cmp eax, esi
mov dword [esp + 0x24], eax
jge 0x41d529
mov dword [esp + 0x24], esi
push 0xa
pop eax
cmp dword [esp + 0x24], eax
jle 0x41d536
mov dword [esp + 0x24], eax
cmp dword [esp + 0x24], esi
mov dword [esp + 0x28], esi
jl 0x41d822
jmp 0x41d549
xor esi, esi
inc esi
call fcn.00415754
test eax, eax
jne 0x41d7ee
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xa4]
push eax
lea eax, [esp + 0x40]
push eax
lea eax, [esp + 0x4c]
push eax
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x58]
push eax
lea eax, [esp + 0x54]
push eax
lea edx, [esp + 0x17c]
mov ecx, edi
call fcn.004209e3
mov ecx, dword [edi + 0x140]
mov dword [esp + 0x1c], ebx
cmp ecx, ebx
je 0x41d7ee
mov eax, dword [ecx]
call dword [eax + 0x4c]
test eax, eax
je 0x41d7ee
mov ecx, dword [edi + 0x140]
mov eax, dword [ecx]
call dword [eax + 0x4c]
cmp eax, 0xc
je 0x41d6eb
cmp eax, 0xb
jne 0x41d6cf
mov ecx, dword [edi + 0x140]
mov eax, dword [ecx]
call dword [eax + 0x88]
mov esi, eax
push esi
lea ecx, [esp + 0x128]
call fcn.0040518c
mov byte [esp + 0x210], 6
cmp esi, ebx
je 0x41d5fe
push esi
call dword [0x63447c]
mov esi, str.issuer_certificate
push esi
call fcn.005c3140
pop ecx
push eax
push esi
lea eax, [esp + 0x12c]
push eax
xor eax, eax
call fcn.00406e21
cmp eax, 0xffffffff
jne 0x41d642
mov esi, str.self_signed
push esi
call fcn.005c3140
pop ecx
push eax
push esi
lea eax, [esp + 0x12c]
push eax
xor eax, eax
call fcn.00406e21
cmp eax, 0xffffffff
je 0x41d6a5
mov esi, 0x6420d0
push esi
call fcn.005c3140
pop ecx
push eax
push esi
lea eax, [esp + 0x12c]
push eax
xor eax, eax
call fcn.00406e21
cmp eax, 0xffffffff
jne 0x41d6a5
lea eax, [esp + 0x44]
push eax
mov eax, dword [edi + 8]
call fcn.0040c8f4
push eax
mov byte [esp + 0x214], 7
call fcn.00528e87
pop ecx
push ebx
push 1
lea ecx, [esp + 0x4c]
mov byte [esp + 0x218], 6
call fcn.004055c2
push 0x641040
lea ecx, [esp + 0x128]
call fcn.0040556d
cmp dword [esp + 0x138], ebx
jne 0x41d6b6
mov dword [esp + 0x1c], 1
push ebx
push 1
lea ecx, [esp + 0x12c]
mov byte [esp + 0x218], 2
call fcn.004055c2
jmp 0x41d6e1
cmp eax, 7
je 0x41d6eb
cmp eax, 2
jne 0x41d7ee
mov dword [esp + 0x1c], esi
cmp dword [esp + 0x1c], ebx
je 0x41d7ee
mov eax, dword [esp + 0x28]
cmp eax, dword [esp + 0x24]
jge 0x41d7dc
lea eax, [esp + 0x15c]
push eax
mov esi, edi
call fcn.0041523e
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0xc]
mov ecx, dword [edi + 0x140]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov dword [edi + 0x154], ebx
mov dword [edi + 0x148], ebx
mov dword [edi + 0x50], ebx
mov dword [edi + 0x54], ebx
mov dword [edi + 0x58], ebx
xor esi, esi
call fcn.00415754
test eax, eax
jne 0x41d748
push 0x64
call dword [0x634480]
inc esi
cmp esi, 0x32
jl 0x41d731
call fcn.00414eea
push dword [esp + 0x15c]
mov ecx, 0x400
push dword [esp + 0x2c]
lea edx, [esp + 0x68]
push str.Retry__d__cmd:__d
mov dword [esp + 0x28], eax
call fcn.0054aa9f
add esp, 0xc
mov esi, eax
lea eax, [esp + 0x44]
mov byte [esp + 0x210], 8
push eax
mov eax, dword [edi + 8]
call fcn.0040106a
mov byte [esp + 0x210], 9
cmp dword [esi + 0x18], 0x10
jb 0x41d79c
mov esi, dword [esi + 4]
jmp 0x41d79f
add esi, 4
cmp dword [eax + 0x18], 0x10
jb 0x41d7aa
mov eax, dword [eax + 4]
jmp 0x41d7ad
add eax, 4
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx]
push 0xffffffffffffffff
push esi
push 0x18
push eax
call dword [edx + 4]
push ebx
push 1
lea ecx, [esp + 0x4c]
call fcn.004055c2
push ebx
push 1
lea ecx, [esp + 0x68]
mov byte [esp + 0x218], 2
call fcn.004055c2
inc dword [esp + 0x28]
mov eax, dword [esp + 0x28]
cmp eax, dword [esp + 0x24]
jle 0x41d546
cmp dword [esp + 0x2c], ebx
je 0x41d822
push ebx
sub esp, 0x1c
mov eax, esp
mov dword [esp + 0x34], esp
push eax
mov eax, dword [edi + 8]
call fcn.0040106a
mov byte [esp + 0x230], 0xa
call fcn.004010df
push eax
mov byte [esp + 0x234], 2
call fcn.004df82f
cmp dword [esp + 0x15c], 5
je 0x41d83a
cmp dword [esp + 0x15c], 8
jne 0x41d8e4
cmp dword [esp + 0x178], 0x10
mov eax, dword [esp + 0x164]
jae 0x41d852
lea eax, [esp + 0x164]
push eax
lea ecx, [esp + 0x20]
call fcn.004050f0
lea eax, [esp + 0x44]
mov byte [esp + 0x210], 0xb
push eax
mov eax, dword [edi + 8]
call fcn.0040106a
mov byte [esp + 0x210], 0xc
cmp dword [eax + 0x18], 0x10
jb 0x41d884
mov eax, dword [eax + 4]
jmp 0x41d887
add eax, 4
push eax
lea ecx, [esp + 0x30]
call fcn.004050f0
mov byte [esp + 0x210], 0xd
call fcn.004010df
mov ebx, eax
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x2c]
call fcn.004db794
mov ecx, dword [esp + 0x2c]
add ecx, 0xfffffff0
call fcn.00405172
push 0
push 1
lea ecx, [esp + 0x4c]
call fcn.004055c2
mov byte [esp + 0x210], 2
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.00405172
and dword [esp + 0x15c], 0
xor ebx, ebx
push edi
mov dword [edi + 0x5c], ebx
call fcn.00415884
mov eax, dword [0x6c182c]
cmp eax, ebx
je 0x41d8fe
mov esi, dword [eax + 0x1838]
jmp 0x41d900
xor esi, esi
push 8
call fcn.004010a2
mov ecx, eax
call fcn.00431dbb
xor ecx, ecx
test eax, eax
mov eax, dword [edi + 8]
setg cl
and esi, ecx
movzx ecx, byte [eax + 0xa0]
and esi, ecx
cmp dword [esp + 0x40], ebx
jne 0x41d974
cmp dword [eax + 0xcc], ebx
je 0x41d974
cmp esi, ebx
je 0x41d974
cmp dword [edi + 0x140], ebx
je 0x41d980
cmp dword [edi + 0x154], ebx
je 0x41d980
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x5c]
test eax, eax
jne 0x41d980
mov ecx, dword [edi + 0x140]
mov eax, dword [ecx]
call dword [eax + 0x4c]
cmp eax, 2
je 0x41d980
mov ecx, dword [edi + 0x140]
mov eax, dword [ecx]
call dword [eax + 0x4c]
cmp eax, 0xc
je 0x41d980
push 1
jmp 0x41d975
push ebx
mov ecx, dword [edi + 0x140]
mov eax, dword [ecx]
call dword [eax + 0x68]
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x5c]
test eax, eax
jne 0x41d995
push ebx
mov eax, edi
call fcn.0041dfd0
jmp 0x41d9b2
call fcn.0041bfc0
mov esi, eax
call fcn.00536a96
xor esi, esi
inc esi
push esi
mov eax, edi
call fcn.0041dfd0
mov dword [edi + 0x154], esi
cmp dword [esp + 0x34], ebx
jle 0x41d9c2
push dword [esp + 0x34]
push edi
call fcn.00415ea1
cmp dword [esp + 0x3c], ebx
je 0x41daad
cmp dword [esp + 0x98], ebx
je 0x41daad
mov eax, dword [edi + 8]
cmp dword [eax + 0x94], 0x3e8
jne 0x41da5f
lea eax, [esp + 0x124]
push eax
call fcn.0040b9c5
lea eax, [esp + 0x124]
push eax
mov ecx, edi
mov byte [esp + 0x214], 0xe
call fcn.00420776
sub esp, 0x1c
mov eax, esp
mov dword [esp + 0x30], esp
push eax
mov eax, dword [edi + 8]
lea esi, [esp + 0x144]
call fcn.0040106a
mov byte [esp + 0x22c], 0xf
call fcn.004010df
mov edx, esi
mov ecx, eax
mov byte [esp + 0x22c], 0xe
call fcn.004dcb9f
mov byte [esp + 0x210], 2
call fcn.0040bc29
push dword [esp + 0x124]
call fcn.0059a1ad
pop ecx
jmp 0x41da91
lea ecx, [esp + 0x7c]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push ecx
call fcn.0040106a
mov byte [esp + 0x230], 0x10
call fcn.004010df
mov ebx, eax
mov byte [esp + 0x230], 2
call fcn.004dcc5f
xor ebx, ebx
lea eax, [edi + 0x2c]
push eax
push edi
lea ecx, [esp + 0xa4]
call fcn.0041611f
lea eax, [edi + 0x198]
call fcn.00413787
cmp dword [esp + 0x38], ebx
jne 0x41daf2
lea eax, [esp + 0x44]
push eax
mov eax, dword [edi + 8]
call fcn.0040106a
mov byte [esp + 0x210], 0x11
or dword [esp + 0x20], 2
cmp dword [eax + 0x18], 0x10
jb 0x41dad8
mov eax, dword [eax + 4]
jmp 0x41dadb
add eax, 4
push eax
push ecx
call fcn.0040cb83
add esp, 4
call fcn.00499f78
mov byte [esp + 0x1b], bl
test eax, eax
je 0x41daf7
mov byte [esp + 0x1b], 1
mov dword [esp + 0x210], 2
test byte [esp + 0x20], 2
je 0x41db15
push ebx
push 1
lea ecx, [esp + 0x4c]
call fcn.004055c2
cmp byte [esp + 0x1b], bl
je 0x41df74
push dword [edi + 8]
lea ecx, [esp + 0x1b4]
mov dword [edi + 0x4c], 1
call fcn.00401d69
mov byte [esp + 0x210], 0x12
cmp dword [esp + 0x1c4], ebx
je 0x41db62
lea eax, [esp + 0x1b0]
push eax
push dword [edi + 0x140]
mov edi, dword [edi + 8]
call fcn.004163d8
mov edi, dword [esp + 0x38]
pop ecx
pop ecx
lea eax, [esp + 0x44]
push eax
mov eax, edi
call fcn.004163be
mov esi, eax
or eax, 0xffffffff
mov byte [esp + 0x210], 0x13
mov dword [esp + 0x134], eax
mov dword [esp + 0x130], eax
mov dword [esp + 0x12c], eax
mov dword [esp + 0x128], eax
lea eax, [esp + 0x124]
push eax
mov dword [esp + 0x128], 0xf
call fcn.0040ca84
mov ecx, eax
mov eax, esi
call fcn.00414e2f
push ebx
push 1
lea ecx, [esp + 0x4c]
mov byte [esp + 0x218], 0x12
call fcn.004055c2
lea eax, [esp + 0x60]
push eax
mov eax, dword [edi + 8]
call fcn.0040c8f4
mov dword [esp + 0x14], eax
lea eax, [esp + 0x44]
mov byte [esp + 0x210], 0x14
push eax
mov eax, dword [edi + 8]
call fcn.0040106a
mov byte [esp + 0x210], 0x15
cmp dword [eax + 0x18], 0x10
jb 0x41dc05
mov esi, dword [eax + 4]
jmp 0x41dc08
lea esi, [eax + 4]
push dword [esp + 0x14]
call fcn.00528ed9
pop ecx
push eax
push esi
call fcn.0040cb83
call fcn.0049995a
push ebx
push 1
lea ecx, [esp + 0x4c]
call fcn.004055c2
push ebx
push 1
lea ecx, [esp + 0x68]
mov byte [esp + 0x218], 0x12
call fcn.004055c2
mov dword [edi + 0x4c], ebx
mov esi, str.Plugin_SendMail
lea edi, [esp + 0x1f0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, dword [esp + 0x30]
lea eax, [esp + 0x44]
push eax
mov eax, dword [edi + 8]
call fcn.0040106a
mov esi, eax
mov byte [esp + 0x210], 0x16
call fcn.004010a2
mov eax, dword [eax + 8]
push esi
lea esi, [esp + 0x1d0]
call fcn.00430457
push ebx
push 1
lea ecx, [esp + 0x4c]
mov byte [esp + 0x218], 0x18
call fcn.004055c2
push str.ImapUploadSent
lea ecx, [esp + 0x128]
call fcn.0040518c
lea eax, [esp + 0x1f0]
push eax
lea ecx, [esp + 0x144]
mov byte [esp + 0x214], 0x19
call fcn.0040518c
lea eax, [esp + 0x124]
push ebx
push eax
mov byte [esp + 0x218], 0x1a
call fcn.004010a2
lea ebx, [esp + 0x148]
call fcn.004323c9
xor ebx, ebx
push ebx
push 1
lea ecx, [esp + 0x148]
mov dword [esp + 0x1c], eax
call fcn.004055c2
push ebx
push 1
lea ecx, [esp + 0x12c]
mov byte [esp + 0x218], 0x18
call fcn.004055c2
push 0x641764
lea ecx, [esp + 0x128]
call fcn.0040518c
push str.ImapSentCopy
lea ecx, [esp + 0x144]
mov byte [esp + 0x214], 0x1b
call fcn.0040518c
mov byte [esp + 0x210], 0x1c
lea eax, [esp + 0x124]
push eax
lea eax, [esp + 0x144]
push eax
lea eax, [esp + 0x68]
push eax
mov ecx, esi
call fcn.004309be
cmp dword [eax + 0x18], 0x10
jb 0x41dd69
mov eax, dword [eax + 4]
jmp 0x41dd6c
add eax, 4
push eax
call fcn.005c59d8
pop ecx
push ebx
push 1
lea ecx, [esp + 0x68]
mov esi, eax
call fcn.004055c2
push ebx
push 1
lea ecx, [esp + 0x148]
call fcn.004055c2
push ebx
push 1
lea ecx, [esp + 0x12c]
mov byte [esp + 0x218], 0x18
call fcn.004055c2
cmp esi, 1
je 0x41ddbe
cmp esi, ebx
jne 0x41df4b
cmp dword [esp + 0x14], ebx
je 0x41df4b
sub esp, 0x1c
mov eax, esp
mov dword [esp + 0x30], esp
push eax
mov eax, dword [edi + 8]
call fcn.0040106a
mov byte [esp + 0x22c], 0x1d
call fcn.004010a2
push dword [eax + 8]
lea esi, [esp + 0x160]
mov byte [esp + 0x230], 0x18
call fcn.004a94bb
mov eax, esi
mov byte [esp + 0x230], 0x1e
call fcn.00562090
mov esi, str..emx
push esi
call fcn.005c3140
add esp, 0x24
push eax
push esi
lea esi, [esp + 0x148]
call fcn.00403f16
lea ecx, [esp + 0x124]
call fcn.005a17a3
mov byte [esp + 0x210], 0x1f
cmp dword [esp + 0x158], 0x10
mov eax, dword [esp + 0x144]
jae 0x41de4b
lea eax, [esp + 0x144]
push ebx
push eax
lea ecx, [esp + 0x12c]
call fcn.005a1838
cmp eax, ebx
je 0x41df28
jmp 0x41de67
mov edi, dword [esp + 0x30]
lea ecx, [esp + 0x124]
call fcn.005a1564
mov esi, eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x128]
call fcn.005a19e6
mov byte [esp + 0x210], 0x20
push dword [eax]
lea ecx, [esp + 0x48]
call fcn.0040518c
push str.SENT
lea ecx, [esp + 0x64]
mov byte [esp + 0x214], 0x21
call fcn.0040518c
lea eax, [esp + 0xbc]
mov byte [esp + 0x210], 0x22
push eax
mov eax, dword [edi + 8]
call fcn.0040106a
mov edi, eax
mov byte [esp + 0x210], 0x23
call fcn.0041bf9c
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x64]
push eax
call fcn.00424899
push ebx
push 1
lea ecx, [esp + 0xc4]
call fcn.004055c2
push ebx
push 1
lea ecx, [esp + 0x68]
call fcn.004055c2
push ebx
push 1
lea ecx, [esp + 0x4c]
call fcn.004055c2
mov byte [esp + 0x210], 0x1f
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.00405172
cmp esi, ebx
jne 0x41de63
lea ecx, [esp + 0x124]
mov byte [esp + 0x210], 0x1e
call fcn.005a17c9
push ebx
push 1
lea ecx, [esp + 0x148]
call fcn.004055c2
lea ecx, [esp + 0x1cc]
call fcn.0043048d
push ebx
push 1
lea ecx, [esp + 0x1b8]
mov byte [esp + 0x218], 2
call fcn.004055c2
mov edi, dword [esp + 0x30]
xor ebx, ebx
push edi
call fcn.0041633b
lea esi, [esp + 0x15c]
call fcn.004150e9
lea eax, [esp + 0x7c]
push eax
mov byte [esp + 0x214], bl
call fcn.0041a5e8
or dword [esp + 0x210], 0xffffffff
lea eax, [esp + 0x9c]
push eax
call fcn.00412745
mov ecx, dword [esp + 0x208]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1f0]
xor ecx, esp
call fcn.005c30b2
mov esp, ebp
pop ebp
ret