Function at 0x489090
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x278
mov eax, dword [0x4e26d0]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov dword [ebp - 0x1b4], 0
lea eax, [ebp - 0x24c]
push 0
push eax
lea ecx, [ebp - 0x200]
mov dword [ebp - 0x250], 0x4d7598
mov dword [ebp - 0x200], 0x4d434c
mov dword [ebp - 0x204], 0x48
call fcn.004147d1
mov eax, dword [ebp - 0x250]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0x250], 0x4d6db8
mov eax, dword [ebp - 0x250]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x50]
mov dword [ebp + ecx - 0x254], eax
lea ecx, [ebp - 0x24c]
call fcn.00415599
push 0x118
lea eax, [ebp - 0x1ac]
mov dword [ebp - 0x24c], 0x4d7540
push 0
push eax
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x210], 4
call fcn.00498640
add esp, 0xc
mov dword [ebp - 0x1b0], 0x11c
lea eax, [ebp - 0x1b0]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov esi, 4
test eax, eax
je 0x48931e
push dword [ebp - 0x1a4]
lea ecx, [ebp - 0x250]
push 0x2e
push dword [ebp - 0x1a8]
push 0x2e
push dword [ebp - 0x1ac]
call fcn.00413dc9
push eax
call fcn.0043c5f0
add esp, 8
mov ecx, eax
call fcn.00413dc9
push eax
call fcn.0043c5f0
add esp, 8
mov ecx, eax
call fcn.00413dc9
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x24c]
call fcn.004149c0
cmp dword [0x4e226c], 0x10
jb 0x4891d4
push dword [0x4e2258]
call fcn.00492cb0
add esp, 4
lea eax, [ebp - 0x94]
mov dword [0x4e226c], 0xf
push eax
mov ecx, 0x4e2258
mov dword [0x4e2268], 0
mov byte [0x4e2258], 0
call fcn.00405473
cmp dword [ebp - 0x80], 0x10
jb 0x489214
push dword [ebp - 0x94]
call fcn.00492cb0
add esp, 4
cmp word [ebp - 0x9c], 0
jbe 0x48931e
mov eax, dword [ebp - 0x250]
lea ecx, [ebp - 0x250]
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
cmove eax, esi
and eax, 0x17
mov dword [ecx + 0xc], eax
mov ecx, dword [ecx + 0x10]
and ecx, eax
jne 0x4893e7
push 0x4d4125
lea ecx, [ebp - 0x1c]
call fcn.004049a0
lea ecx, [ebp - 0x24c]
call fcn.00414a84
push dword [ebp - 0x210]
cmp dword [ebp - 8], 0x10
lea eax, [ebp - 0x1c]
push dword [ebp - 0xc]
cmovae eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x24c]
push eax
call fcn.00415707
cmp dword [ebp - 8], 0x10
jb 0x489295
push dword [ebp - 0x1c]
call fcn.00492cb0
add esp, 4
push dword [ebp - 0x9a]
lea ecx, [ebp - 0x250]
push 0x2e
push dword [ebp - 0x9c]
call fcn.004536c0
push eax
call fcn.0043c5f0
add esp, 8
mov ecx, eax
call fcn.004536c0
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x24c]
call fcn.004149c0
cmp dword [0x4e2284], 0x10
jb 0x4892e4
push dword [0x4e2270]
call fcn.00492cb0
add esp, 4
lea eax, [ebp - 0x7c]
mov dword [0x4e2284], 0xf
push eax
mov ecx, 0x4e2270
mov dword [0x4e2280], 0
mov byte [0x4e2270], 0
call fcn.00405473
cmp dword [ebp - 0x68], 0x10
jb 0x48931e
push dword [ebp - 0x7c]
call fcn.00492cb0
add esp, 4
xorps xmm0, xmm0
mov dword [ebp - 0x278], 0
lea eax, [ebp - 0x278]
push eax
movdqu xmmword [ebp - 0x274], xmm0
movdqu xmmword [ebp - 0x264], xmm0
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov eax, dword [ebp - 0x250]
lea ecx, [ebp - 0x250]
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
cmove eax, esi
and eax, 0x17
mov dword [ecx + 0xc], eax
mov ecx, dword [ecx + 0x10]
and ecx, eax
jne 0x4896e2
push ecx
mov dword [ebp - 0xc], ecx
mov byte [ebp - 0x1c], cl
lea ecx, [ebp - 0x1c]
push 0x4d4125
mov dword [ebp - 8], 0xf
call fcn.00404abc
lea ecx, [ebp - 0x24c]
call fcn.00414a84
push dword [ebp - 0x210]
cmp dword [ebp - 8], 0x10
lea eax, [ebp - 0x1c]
push dword [ebp - 0xc]
cmovae eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x24c]
push eax
call fcn.00415707
cmp dword [ebp - 8], 0x10
jb 0x4893c9
push dword [ebp - 0x1c]
call fcn.00492cb0
add esp, 4
lea eax, [ebp - 0x250]
push 0x4c741c
push eax
call fcn.00405c42
mov edx, eax
add esp, 8
test edx, edx
jne 0x48941c
xor ecx, ecx
jmp 0x489423
test cl, 4
jne 0x489718
lea eax, [ebp - 0x1b8]
mov dword [ebp - 0x1b8], 1
test cl, 2
mov dword [ebp - 0x1b4], 0x4e3a54
push eax
lea ecx, [ebp - 0x14]
jne 0x489747
jmp 0x489758
mov eax, dword [edx]
mov ecx, dword [eax + 4]
add ecx, edx
mov eax, dword [ecx + 0x14]
and eax, 0xfffff9ff
or eax, 0x800
mov dword [ecx + 0x14], eax
mov ecx, edx
push dword [ebp - 0x278]
call fcn.004536c0
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x24c]
call fcn.004149c0
cmp dword [0x4e229c], 0x10
jb 0x489466
push dword [0x4e2288]
call fcn.00492cb0
add esp, 4
lea eax, [ebp - 0x34]
mov dword [0x4e229c], 0xf
push eax
mov ecx, 0x4e2288
mov dword [0x4e2298], 0
mov byte [0x4e2288], 0
call fcn.00405473
cmp dword [ebp - 0x20], 0x10
jb 0x4894a0
push dword [ebp - 0x34]
call fcn.00492cb0
add esp, 4
mov eax, dword [ebp - 0x250]
lea ecx, [ebp - 0x250]
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
cmove eax, esi
and eax, 0x17
mov dword [ecx + 0xc], eax
mov ecx, dword [ecx + 0x10]
and ecx, eax
jne 0x4896e2
push ecx
mov dword [ebp - 0xc], ecx
mov byte [ebp - 0x1c], cl
lea ecx, [ebp - 0x1c]
push 0x4d4125
mov dword [ebp - 8], 0xf
call fcn.00404abc
lea ecx, [ebp - 0x24c]
call fcn.00414a84
push dword [ebp - 0x210]
cmp dword [ebp - 8], 0x10
lea eax, [ebp - 0x1c]
push dword [ebp - 0xc]
cmovae eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x24c]
push eax
call fcn.00415707
cmp dword [ebp - 8], 0x10
jb 0x489521
push dword [ebp - 0x1c]
call fcn.00492cb0
add esp, 4
lea eax, [ebp - 0x250]
push 0x4c741c
push eax
call fcn.00405c42
mov edx, eax
add esp, 8
test edx, edx
jne 0x48953f
xor ecx, ecx
jmp 0x489546
mov eax, dword [edx]
mov ecx, dword [eax + 4]
add ecx, edx
mov eax, dword [ecx + 0x14]
and eax, 0xfffff9ff
or eax, 0x800
mov dword [ecx + 0x14], eax
mov ecx, edx
push dword [ebp - 0x258]
call fcn.004536c0
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x24c]
call fcn.004149c0
cmp dword [0x4e22b4], 0x10
jb 0x489589
push dword [0x4e22a0]
call fcn.00492cb0
add esp, 4
lea eax, [ebp - 0x4c]
mov dword [0x4e22b4], 0xf
push eax
mov ecx, 0x4e22a0
mov dword [0x4e22b0], 0
mov byte [0x4e22a0], 0
call fcn.00405473
cmp dword [ebp - 0x38], 0x10
jb 0x4895c3
push dword [ebp - 0x4c]
call fcn.00492cb0
add esp, 4
mov eax, dword [ebp - 0x250]
lea ecx, [ebp - 0x250]
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
cmove eax, esi
and eax, 0x17
mov dword [ecx + 0xc], eax
mov ecx, dword [ecx + 0x10]
and ecx, eax
jne 0x4896e2
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x24c]
call fcn.004149c0
cmp dword [ebp - 8], 0x10
jb 0x48960d
push dword [ebp - 0x1c]
call fcn.00492cb0
add esp, 4
lea eax, [ebp - 0x250]
push 0x4c741c
push eax
call fcn.00405c42
mov edx, eax
add esp, 8
test edx, edx
jne 0x48962b
xor ecx, ecx
jmp 0x489632
mov eax, dword [edx]
mov ecx, dword [eax + 4]
add ecx, edx
mov eax, dword [ecx + 0x14]
and eax, 0xfffff9ff
or eax, 0x800
mov dword [ecx + 0x14], eax
mov ecx, edx
push dword [ebp - 0x256]
call fcn.004536c0
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x24c]
call fcn.004149c0
cmp dword [0x4e22cc], 0x10
pop esi
jb 0x489676
push dword [0x4e22b8]
call fcn.00492cb0
add esp, 4
lea eax, [ebp - 0x64]
mov dword [0x4e22cc], 0xf
push eax
mov ecx, 0x4e22b8
mov dword [0x4e22c8], 0
mov byte [0x4e22b8], 0
call fcn.00405473
cmp dword [ebp - 0x50], 0x10
jb 0x4896b0
push dword [ebp - 0x64]
call fcn.00492cb0
add esp, 4
lea ecx, [ebp - 0x200]
call fcn.00413f0c
lea eax, [ebp - 0x200]
mov dword [ebp - 0x200], 0x4d4390
push eax
call fcn.004b642b
mov ecx, dword [ebp - 4]
add esp, 4
xor ecx, ebp
call fcn.0049653f
mov esp, ebp
pop ebp
ret
test cl, 4
jne 0x489718
lea eax, [ebp - 0x1b8]
mov dword [ebp - 0x1b8], 1
test cl, 2
mov dword [ebp - 0x1b4], 0x4e3a54
push eax
lea ecx, [ebp - 0x14]
je 0x489711
push str.ios_base::failbit_set
jmp 0x48973b
push str.ios_base::eofbit_set
jmp 0x48973b
lea eax, [ebp - 0x1b8]
mov dword [ebp - 0x1b8], 1
push eax
mov dword [ebp - 0x1b4], 0x4e3a54
lea ecx, [ebp - 0x14]
push str.ios_base::badbit_set
call fcn.00404f40
mov ecx, eax
call fcn.00404d78
push str.ios_base::failbit_set
call fcn.00404f40
mov ecx, eax
call fcn.00404d78
push str.ios_base::eofbit_set
call fcn.00404f40
mov ecx, eax
call fcn.00404d78
int3