Function at 0x4e6670
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xcc
xor eax, eax
mov dword [ebp - 0x34], 7
push ebx
push esi
mov word [ebp - 0x48], ax
mov dword [ebp - 0x50], eax
mov word [ebp - 0x60], ax
mov dword [ebp - 0x68], eax
mov word [ebp - 0x78], ax
lea eax, [ebp - 0x60]
push edi
push eax
lea eax, [ebp - 0x78]
mov dword [ebp - 0x38], 0
push eax
mov edi, ecx
mov dword [ebp - 0x4c], 7
mov dword [ebp - 0x64], 7
call fcn.004e7be0
sub esp, 0x10
push esp
call fcn.004e8810
add esp, 4
lea eax, [ebp - 0x30]
push eax
call fcn.004fb460
add esp, 0x1c
mov ecx, eax
push 3
push 0x56d2c0
push 0
call fcn.004b2f10
mov esi, eax
mov dword [ebp - 4], 7
xor eax, eax
mov dword [ebp - 8], 0
mov word [ebp - 0x18], ax
cmp dword [esi + 0x14], 8
jae 0x4e6717
mov eax, dword [esi + 0x10]
inc eax
je 0x4e6722
add eax, eax
push eax
lea eax, [ebp - 0x18]
push esi
push eax
call fcn.00525b00
add esp, 0xc
jmp 0x4e6722
mov eax, dword [esi]
mov dword [ebp - 0x18], eax
mov dword [esi], 0
mov eax, dword [esi + 0x10]
lea ecx, [ebp - 0x48]
mov dword [ebp - 8], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 4], eax
xor eax, eax
push 0xffffffffffffffff
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
push eax
mov word [esi], ax
lea eax, [ebp - 0x18]
push eax
call fcn.00409227
cmp dword [ebp - 4], 8
jb 0x4e6761
push dword [ebp - 0x18]
call fcn.00412887
add esp, 4
xor eax, eax
mov dword [ebp - 4], 7
cmp dword [ebp - 0x1c], 8
mov dword [ebp - 8], 0
mov word [ebp - 0x18], ax
jb 0x4e6786
push dword [ebp - 0x30]
call fcn.00412887
add esp, 4
sub esp, 0x18
push esp
call fcn.004fb7b0
add esp, 4
lea eax, [ebp - 0x30]
push eax
call fcn.004fb460
add esp, 0x1c
mov ecx, eax
push 3
push 0x56d2c8
push 0
call fcn.004b2f10
mov esi, eax
mov dword [ebp - 4], 7
xor eax, eax
mov dword [ebp - 8], 0
mov word [ebp - 0x18], ax
cmp dword [esi + 0x14], 8
jae 0x4e67e2
mov eax, dword [esi + 0x10]
inc eax
je 0x4e67ed
add eax, eax
push eax
lea eax, [ebp - 0x18]
push esi
push eax
call fcn.00525b00
add esp, 0xc
jmp 0x4e67ed
mov eax, dword [esi]
mov dword [ebp - 0x18], eax
mov dword [esi], 0
mov eax, dword [esi + 0x10]
lea ecx, [ebp - 0x48]
mov dword [ebp - 8], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 4], eax
xor eax, eax
push 0xffffffffffffffff
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
push eax
mov word [esi], ax
lea eax, [ebp - 0x18]
push eax
call fcn.00409227
cmp dword [ebp - 4], 8
jb 0x4e682c
push dword [ebp - 0x18]
call fcn.00412887
add esp, 4
xor eax, eax
mov dword [ebp - 4], 7
cmp dword [ebp - 0x1c], 8
mov dword [ebp - 8], 0
mov word [ebp - 0x18], ax
jb 0x4e6851
push dword [ebp - 0x30]
call fcn.00412887
add esp, 4
sub esp, 0x18
push esp
call fcn.004ade80
add esp, 4
lea eax, [ebp - 0x30]
push eax
call fcn.004fb460
add esp, 0x1c
mov ecx, eax
push 3
push 0x56d2d0
push 0
call fcn.004b2f10
mov esi, eax
mov dword [ebp - 4], 7
xor eax, eax
mov dword [ebp - 8], 0
mov word [ebp - 0x18], ax
cmp dword [esi + 0x14], 8
jae 0x4e68ad
mov eax, dword [esi + 0x10]
inc eax
je 0x4e68b8
add eax, eax
push eax
lea eax, [ebp - 0x18]
push esi
push eax
call fcn.00525b00
add esp, 0xc
jmp 0x4e68b8
mov eax, dword [esi]
mov dword [ebp - 0x18], eax
mov dword [esi], 0
mov eax, dword [esi + 0x10]
lea ecx, [ebp - 0x48]
mov dword [ebp - 8], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 4], eax
xor eax, eax
push 0xffffffffffffffff
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
push eax
mov word [esi], ax
lea eax, [ebp - 0x18]
push eax
call fcn.00409227
cmp dword [ebp - 4], 8
jb 0x4e68f7
push dword [ebp - 0x18]
call fcn.00412887
add esp, 4
xor eax, eax
mov dword [ebp - 4], 7
cmp dword [ebp - 0x1c], 8
mov dword [ebp - 8], 0
mov word [ebp - 0x18], ax
jb 0x4e691c
push dword [ebp - 0x30]
call fcn.00412887
add esp, 4
mov ecx, dword [edi + 0x80]
cmp ecx, 0xffffffff
jne 0x4e6931
xor ecx, ecx
cmp dword [edi + 0x24], 0xffffffff
cmovne ecx, dword [edi + 0x24]
sub esp, 0x18
mov eax, esp
push ecx
push eax
call fcn.004ec280
add esp, 8
lea eax, [ebp - 0x30]
push eax
call fcn.004fb460
add esp, 0x1c
mov ecx, eax
push 3
push 0x56d2d8
push 0
call fcn.004b2f10
mov esi, eax
mov dword [ebp - 4], 7
xor eax, eax
mov dword [ebp - 8], 0
mov word [ebp - 0x18], ax
cmp dword [esi + 0x14], 8
jae 0x4e6990
mov eax, dword [esi + 0x10]
inc eax
je 0x4e699b
add eax, eax
push eax
lea eax, [ebp - 0x18]
push esi
push eax
call fcn.00525b00
add esp, 0xc
jmp 0x4e699b
mov eax, dword [esi]
mov dword [ebp - 0x18], eax
mov dword [esi], 0
mov eax, dword [esi + 0x10]
lea ecx, [ebp - 0x48]
mov dword [ebp - 8], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 4], eax
xor eax, eax
push 0xffffffffffffffff
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
push eax
mov word [esi], ax
lea eax, [ebp - 0x18]
push eax
call fcn.00409227
cmp dword [ebp - 4], 8
jb 0x4e69da
push dword [ebp - 0x18]
call fcn.00412887
add esp, 4
xor eax, eax
mov dword [ebp - 4], 7
cmp dword [ebp - 0x1c], 8
mov dword [ebp - 8], 0
mov word [ebp - 0x18], ax
jb 0x4e69ff
push dword [ebp - 0x30]
call fcn.00412887
add esp, 4
lea eax, [ebp - 0x30]
push eax
call fcn.004e6540
add esp, 4
mov ecx, eax
push 3
push 0x56d2e0
push 0
call fcn.004b2f10
mov esi, eax
mov dword [ebp - 4], 7
xor eax, eax
mov dword [ebp - 8], 0
mov word [ebp - 0x18], ax
cmp dword [esi + 0x14], 8
jae 0x4e6a4f
mov eax, dword [esi + 0x10]
inc eax
je 0x4e6a5a
add eax, eax
push eax
lea eax, [ebp - 0x18]
push esi
push eax
call fcn.00525b00
add esp, 0xc
jmp 0x4e6a5a
mov eax, dword [esi]
mov dword [ebp - 0x18], eax
mov dword [esi], 0
mov eax, dword [esi + 0x10]
lea ecx, [ebp - 0x48]
mov dword [ebp - 8], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 4], eax
xor eax, eax
push 0xffffffffffffffff
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
push eax
mov word [esi], ax
lea eax, [ebp - 0x18]
push eax
call fcn.00409227
cmp dword [ebp - 4], 8
jb 0x4e6a99
push dword [ebp - 0x18]
call fcn.00412887
add esp, 4
xor eax, eax
mov dword [ebp - 4], 7
cmp dword [ebp - 0x1c], 8
mov dword [ebp - 8], 0
mov word [ebp - 0x18], ax
jb 0x4e6abe
push dword [ebp - 0x30]
call fcn.00412887
add esp, 4
lea eax, [ebp - 0x30]
push eax
call fcn.004e64d0
add esp, 4
mov ecx, eax
push 3
push 0x56d2e8
push 0
call fcn.004b2f10
mov esi, eax
mov dword [ebp - 4], 7
xor eax, eax
mov dword [ebp - 8], 0
mov word [ebp - 0x18], ax
cmp dword [esi + 0x14], 8
jae 0x4e6b0e
mov eax, dword [esi + 0x10]
inc eax
je 0x4e6b19
add eax, eax
push eax
lea eax, [ebp - 0x18]
push esi
push eax
call fcn.00525b00
add esp, 0xc
jmp 0x4e6b19
mov eax, dword [esi]
mov dword [ebp - 0x18], eax
mov dword [esi], 0
mov eax, dword [esi + 0x10]
lea ecx, [ebp - 0x48]
mov dword [ebp - 8], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 4], eax
xor eax, eax
push 0xffffffffffffffff
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
push eax
mov word [esi], ax
lea eax, [ebp - 0x18]
push eax
call fcn.00409227
cmp dword [ebp - 4], 8
jb 0x4e6b58
push dword [ebp - 0x18]
call fcn.00412887
add esp, 4
xor eax, eax
mov dword [ebp - 4], 7
cmp dword [ebp - 0x1c], 8
mov dword [ebp - 8], 0
mov word [ebp - 0x18], ax
jb 0x4e6b7d
push dword [ebp - 0x30]
call fcn.00412887
add esp, 4
xorps xmm0, xmm0
mov dword [ebp - 0xcc], 0
lea eax, [ebp - 0xcc]
push eax
movdqu xmmword [ebp - 0xc8], xmm0
movdqu xmmword [ebp - 0xb8], xmm0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push dword [ebp - 0xb8]
lea eax, [ebp - 0x30]
push eax
call fcn.004b3890
add esp, 8
lea ecx, [ebp - 0x30]
push 3
push 0x56d2f0
push 0
call fcn.004b2f10
xor ecx, ecx
mov dword [ebp - 4], 7
mov word [ebp - 0x18], cx
lea ecx, [ebp - 0x18]
push eax
mov dword [ebp - 8], 0
call fcn.004408e4
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x48]
call fcn.00409227
cmp dword [ebp - 4], 8
jb 0x4e6c08
push dword [ebp - 0x18]
call fcn.00412887
add esp, 4
xor eax, eax
mov dword [ebp - 4], 7
cmp dword [ebp - 0x1c], 8
mov dword [ebp - 8], 0
mov word [ebp - 0x18], ax
jb 0x4e6c2d
push dword [ebp - 0x30]
call fcn.00412887
add esp, 4
lea eax, [ebp - 0x30]
push eax
call fcn.004e79a0
add esp, 4
mov ecx, eax
push 3
push 0x56d2f8
push 0
call fcn.004b2f10
push eax
lea ecx, [ebp - 0x18]
call fcn.004408af
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x48]
call fcn.00409227
cmp dword [ebp - 4], 8
jb 0x4e6c73
push dword [ebp - 0x18]
call fcn.00412887
add esp, 4
xor eax, eax
mov dword [ebp - 4], 7
cmp dword [ebp - 0x1c], 8
mov dword [ebp - 8], 0
mov word [ebp - 0x18], ax
jb 0x4e6c98
push dword [ebp - 0x30]
call fcn.00412887
add esp, 4
lea eax, [ebp - 0x30]
push eax
call fcn.004e71a0
add esp, 4
mov ecx, eax
push 3
push 0x56d300
push 0
call fcn.004b2f10
push eax
lea ecx, [ebp - 0x18]
call fcn.004408af
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x48]
call fcn.00409227
cmp dword [ebp - 4], 8
jb 0x4e6cde
push dword [ebp - 0x18]
call fcn.00412887
add esp, 4
xor eax, eax
mov dword [ebp - 4], 7
cmp dword [ebp - 0x1c], 8
mov dword [ebp - 8], 0
mov word [ebp - 0x18], ax
jb 0x4e6d03
push dword [ebp - 0x30]
call fcn.00412887
add esp, 4
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x30]
push 0x56d308
push eax
call fcn.0044f2d1
add esp, 0xc
lea ecx, [ebp - 0x48]
push 0xffffffffffffffff
push 0
push eax
call fcn.00409227
cmp dword [ebp - 0x1c], 8
jb 0x4e6d36
push dword [ebp - 0x30]
call fcn.00412887
add esp, 4
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 0xffffffffffffffff
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push eax
mov word [ecx], ax
lea eax, [ebp - 0x78]
push eax
call fcn.0040757d
lea eax, [ebp - 0x30]
push eax
call fcn.004fb460
add esp, 0x1c
mov ecx, eax
push 3
push 0x56d310
push 0
call fcn.004b2f10
push eax
lea ecx, [ebp - 0x18]
call fcn.004408af
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x48]
call fcn.00409227
cmp dword [ebp - 4], 8
jb 0x4e6da0
push dword [ebp - 0x18]
call fcn.00412887
add esp, 4
xor eax, eax
mov dword [ebp - 4], 7
cmp dword [ebp - 0x1c], 8
mov dword [ebp - 8], 0
mov word [ebp - 0x18], ax
jb 0x4e6dc5
push dword [ebp - 0x30]
call fcn.00412887
add esp, 4
lea eax, [ebp - 0x30]
push eax
call fcn.004ad450
add esp, 4
mov ecx, eax
push 0x56d318
push 0
call fcn.004b2d90
push eax
lea ecx, [ebp - 0x18]
call fcn.004408af
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x48]
call fcn.00409227
cmp dword [ebp - 4], 8
jb 0x4e6e09
push dword [ebp - 0x18]
call fcn.00412887
add esp, 4
xor eax, eax
mov dword [ebp - 4], 7
cmp dword [ebp - 0x1c], 8
mov dword [ebp - 8], 0
mov word [ebp - 0x18], ax
jb 0x4e6e2e
push dword [ebp - 0x30]
call fcn.00412887
add esp, 4
sub esp, 0x18
push esp
call fcn.004ae080
add esp, 4
lea eax, [ebp - 0x30]
push eax
call fcn.004fb460
add esp, 0x1c
mov ecx, eax
push 0x56d320
push 0
call fcn.004b2d90
push eax
lea ecx, [ebp - 0x18]
call fcn.004408af
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x48]
call fcn.00409227
cmp dword [ebp - 4], 8
jb 0x4e6e7e
push dword [ebp - 0x18]
call fcn.00412887
add esp, 4
xor eax, eax
mov dword [ebp - 4], 7
cmp dword [ebp - 0x1c], 8
mov dword [ebp - 8], 0
mov word [ebp - 0x18], ax
jb 0x4e6ea3
push dword [ebp - 0x30]
call fcn.00412887
add esp, 4
call fcn.004ad340
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.004ec280
add esp, 8
mov ecx, eax
push 0x56d328
push 0
call fcn.004b2d90
push eax
lea ecx, [ebp - 0x18]
call fcn.004408af
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x48]
call fcn.00409227
cmp dword [ebp - 4], 8
jb 0x4e6eed
push dword [ebp - 0x18]
call fcn.00412887
add esp, 4
xor eax, eax
mov dword [ebp - 4], 7
cmp dword [ebp - 0x1c], 8
mov dword [ebp - 8], 0
mov word [ebp - 0x18], ax
jb 0x4e6f12
push dword [ebp - 0x30]
call fcn.00412887
add esp, 4
call fcn.004fb990
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.004ec280
add esp, 8
mov ecx, eax
push 0x56d330
push 0
call fcn.004b2d90
push eax
lea ecx, [ebp - 0x18]
call fcn.004408af
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x48]
call fcn.00409227
cmp dword [ebp - 4], 8
jb 0x4e6f5c
push dword [ebp - 0x18]
call fcn.00412887
add esp, 4
xor eax, eax
mov dword [ebp - 4], 7
cmp dword [ebp - 0x1c], 8
mov dword [ebp - 8], 0
mov word [ebp - 0x18], ax
jb 0x4e6f81
push dword [ebp - 0x30]
call fcn.00412887
add esp, 4
push 3
push 0x56d338
lea ecx, [ebp - 0x48]
call fcn.004090e2
cmp byte [edi + 0x2c0], 0
mov esi, 0x58e140
mov ecx, 0x58b9d0
mov eax, esi
cmove eax, ecx
lea ecx, [ebp - 0x48]
push eax
call fcn.00408fd9
push 3
push 0x56d340
lea ecx, [ebp - 0x48]
call fcn.004090e2
lea eax, [ebp - 0xc]
xor bl, bl
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemPowerStatus]
test eax, eax
je 0x4e6fdd
cmp byte [ebp - 0xa], 0x64
mov eax, 1
movzx ebx, bl
cmovbe ebx, eax
test bl, bl
lea ecx, [ebp - 0x48]
mov eax, 0x58b9d0
cmove esi, eax
push esi
call fcn.00408fd9
call fcn.004e88e0
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.004ec280
add esp, 8
mov ecx, eax
push 0x56d348
push 0
call fcn.004b2d90
push eax
lea ecx, [ebp - 0x18]
call fcn.004408af
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x48]
call fcn.00409227
cmp dword [ebp - 4], 8
jb 0x4e703a
push dword [ebp - 0x18]
call fcn.00412887
add esp, 4
xor eax, eax
mov dword [ebp - 4], 7
cmp dword [ebp - 0x1c], 8
mov dword [ebp - 8], 0
mov word [ebp - 0x18], ax
jb 0x4e705f
push dword [ebp - 0x30]
call fcn.00412887
add esp, 4
mov edi, dword [ebp + 8]
mov ecx, edi
push str.http:__go.browser.qq.com_
call fcn.00408718
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x48]
mov ecx, edi
push eax
call fcn.00409227
lea eax, [ebp - 0x90]
push eax
call fcn.004ad450
sub esp, 0x14
xor eax, eax
mov esi, esp
sub esp, 0x18
mov ecx, esp
push 0xffffffffffffffff
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push eax
mov word [ecx], ax
lea eax, [ebp - 0x90]
push eax
call fcn.0040757d
push esi
call fcn.004fb460
add esp, 0x1c
lea eax, [ebp - 0xa8]
push eax
call fcn.004fb260
add esp, 0x1c
cmp dword [ebp - 0x94], 8
jb 0x4e70e4
push dword [ebp - 0xa8]
call fcn.00412887
add esp, 4
xor eax, eax
mov dword [ebp - 0x94], 7
cmp dword [ebp - 0x7c], 8
mov dword [ebp - 0x98], 0
mov word [ebp - 0xa8], ax
jb 0x4e7115
push dword [ebp - 0x90]
call fcn.00412887
add esp, 4
xor eax, eax
mov dword [ebp - 0x7c], 7
cmp dword [ebp - 0x64], 8
mov dword [ebp - 0x80], 0
mov word [ebp - 0x90], ax
jb 0x4e713d
push dword [ebp - 0x78]
call fcn.00412887
add esp, 4
xor eax, eax
mov dword [ebp - 0x64], 7
cmp dword [ebp - 0x4c], 8
mov dword [ebp - 0x68], 0
mov word [ebp - 0x78], ax
jb 0x4e7162
push dword [ebp - 0x60]
call fcn.00412887
add esp, 4
xor eax, eax
mov dword [ebp - 0x4c], 7
cmp dword [ebp - 0x34], 8
mov dword [ebp - 0x50], 0
mov word [ebp - 0x60], ax
jb 0x4e7187
push dword [ebp - 0x48]
call fcn.00412887
add esp, 4
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4