Function at 0x433e40
Capabilities:
Get system information on windows

Disassembly:
push 0xffffffffffffffff
push 0x4c0bd6
mov eax, dword fs:[0]
push eax
sub esp, 0x560
mov eax, dword [0x4df210]
xor eax, esp
mov dword [esp + 0x55c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4df210]
xor eax, esp
push eax
lea eax, [esp + 0x574]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x584]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.0048dcc0
add esp, 4
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [esp + 0x30]
mov dword [0x56b73c], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
xor ebx, ebx
mov dword [0x56b768], eax
mov eax, 0x56b4e0
mov edx, str.AgentServer
xor edi, edi
mov dword [0x56b4d8], ebx
mov dword [0x56b4dc], ebp
lea esi, [ebx + 0x40]
sub edx, eax
mov cl, byte [edx + eax]
cmp cl, bl
je 0x433ee3
mov byte [eax], cl
add eax, 1
sub esi, 1
jne 0x433ed0
jmp 0x433ee7
cmp esi, ebx
jne 0x433eef
sub eax, 1
mov edi, 0x8007007a
cmp edi, ebx
mov byte [eax], bl
je 0x433f02
call fcn.00462f90
or eax, 0xffffffff
jmp 0x434276
mov edx, dword [esp + 0x588]
mov eax, 0x56b520
xor edi, edi
mov esi, 0x104
sub edx, eax
mov cl, byte [edx + eax]
cmp cl, bl
je 0x433f2a
mov byte [eax], cl
add eax, 1
sub esi, 1
jne 0x433f17
jmp 0x433f2e
cmp esi, ebx
jne 0x433f36
sub eax, 1
mov edi, 0x8007007a
cmp edi, ebx
mov byte [eax], bl
jne 0x433ef5
push str.Global_
lea ecx, [esp + 0x44]
call fcn.00408ee0
mov dword [esp + 0x57c], ebx
mov eax, str.AgentServer
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x433f60
sub eax, edx
push eax
push str.AgentServer
lea eax, [esp + 0x48]
call fcn.0041dd60
cmp dword [esp + 0x58], 0x10
mov eax, dword [esp + 0x44]
jae 0x433f89
lea eax, [esp + 0x44]
lea esi, [esp + 0x14]
call fcn.0044f1e0
mov byte [esp + 0x57c], 1
mov ecx, esi
call fcn.0044f240
test eax, eax
jne 0x433feb
push str.cannot_create_semaphore_:_module_already_executing
call fcn.00461b10
push str.cannot_create_semaphore_:_module_already_executing
mov esi, str.AgentServer
call fcn.00433d60
add esp, 8
mov byte [esp + 0x57c], bl
lea esi, [esp + 0x14]
call fcn.0044f220
or ebp, 0xffffffff
mov dword [esp + 0x57c], ebp
lea ecx, [esp + 0x40]
call fcn.004098b0
mov eax, ebp
jmp 0x434276
push 0x104
lea edx, [esp + 0x268]
push edx
push ebp
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x104
lea eax, [esp + 0x36c]
push eax
push 0x104
lea ecx, [esp + 0x478]
push ecx
push 0x104
lea edx, [esp + 0x70]
push edx
push 0x104
lea eax, [esp + 0x17c]
push eax
lea ecx, [esp + 0x284]
push ecx
call fcn.0048df7a
lea eax, [esp + 0x80]
add esp, 0x24
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434050
sub eax, edx
mov byte [esp + eax + 0x5b], bl
lea edx, [esp + 0x5c]
push edx
lea eax, [esp + 0x164]
push eax
push str._s_s
mov eax, 0x104
mov edi, 0x56b624
call fcn.0042b3a0
add esp, 0xc
test eax, eax
je 0x434091
call fcn.00462f90
jmp 0x433fc1
or ebp, 0xffffffff
push str.ServerFrameworkRes.dll
mov dword [0x56b76c], 0x112
mov dword [0x56b770], 0x201
mov dword [0x56b77c], ebx
mov dword [0x56b784], ebp
mov dword [0x56b788], ebx
mov dword [0x56b78c], ebx
mov dword [0x56b790], ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
cmp eax, ebx
mov dword [0x4e9b28], eax
jne 0x43411d
push str.cannot_load_ServerFrameworkRes.dll
call fcn.00461b10
push str.cannot_load_ServerFrameworkRes.dll
mov esi, str.AgentServer
call fcn.00433d60
add esp, 8
mov byte [esp + 0x57c], bl
lea esi, [esp + 0x14]
call fcn.0044f220
mov dword [esp + 0x57c], ebp
lea ecx, [esp + 0x40]
call fcn.004098b0
mov eax, ebp
jmp 0x434276
call fcn.00434570
test al, al
jne 0x43416e
push str.AgentServer
push str.cant_find_server.cfg_or_failed_to_parse_server_config_block___s_
call fcn.00461b10
push str.paring_config_error
mov esi, str.AgentServer
call fcn.00433d60
add esp, 0xc
mov byte [esp + 0x57c], bl
lea esi, [esp + 0x14]
call fcn.0044f220
mov dword [esp + 0x57c], ebp
lea ecx, [esp + 0x40]
call fcn.004098b0
mov eax, ebp
jmp 0x434276
mov eax, 0x56b740
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x434176
sub eax, edx
jne 0x4341d7
mov esi, str.Certification
mov edi, str.AgentServer
call fcn.0040ba50
test eax, eax
je 0x4341d7
push edi
push str.there_is_no_assigned_ip_for_certifying_server___s_
call fcn.00461b10
push str.certification_ip_is_void
mov esi, edi
call fcn.00433d60
add esp, 0xc
mov byte [esp + 0x57c], bl
lea esi, [esp + 0x14]
call fcn.0044f220
mov dword [esp + 0x57c], ebp
lea ecx, [esp + 0x40]
call fcn.004098b0
mov eax, ebp
jmp 0x434276
push 0x56b728
mov eax, 0x56b72c
call fcn.004342e0
add esp, 4
test al, al
jne 0x43422d
push str.failed_to_identify_public_ip_of_this_machine
call fcn.00461b10
push str.cannot_identity_machine_public_ip
mov esi, str.AgentServer
call fcn.00433d60
add esp, 8
mov byte [esp + 0x57c], bl
lea esi, [esp + 0x14]
call fcn.0044f220
mov dword [esp + 0x57c], ebp
lea ecx, [esp + 0x40]
call fcn.004098b0
mov eax, ebp
jmp 0x434276
call fcn.0044f990
mov ecx, dword [0x56b770]
mov eax, dword [0x56b76c]
call fcn.00462930
call fcn.0044d960
mov ecx, dword [0x4e9b28]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov byte [esp + 0x57c], bl
lea esi, [esp + 0x14]
call fcn.0044f220
mov dword [esp + 0x57c], ebp
lea ecx, [esp + 0x40]
call fcn.004098b0
xor eax, eax
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x55c]
xor ecx, esp
call fcn.0048cf20
add esp, 0x56c
ret