Function at 0x4bf120
Capabilities:
Get hostname
Get memory capacity

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x54
push 0
push 0
dec ecx
jne 0x4bf128
push ecx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4bfd9e
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x4c720c], 0
je 0x4bf1f3
lea edx, [ebp - 0x1f0]
xor eax, eax
call fcn.00402c70
mov eax, dword [ebp - 0x1f0]
lea edx, [ebp - 0x30]
call fcn.00472e24
lea edx, [ebp - 0x1f4]
xor eax, eax
call fcn.00402c70
mov edx, dword [ebp - 0x1f4]
mov eax, dword [0x4c7200]
mov eax, dword [eax + 0x344]
call fcn.0044e69c
cmp dword [ebp - 0x30], 0
je 0x4bf1c1
push 0x4bfdb4
push dword [ebp - 0x30]
push 0x4bfdd4
mov eax, dword [ebp - 4]
mov edx, 3
call fcn.00404e14
mov eax, dword [0x4c7200]
mov eax, dword [eax + 0x34c]
mov edx, dword [ebp - 0x30]
call fcn.0044e69c
jmp 0x4bf1e3
mov eax, dword [ebp - 4]
mov edx, 0x4bfde0
call fcn.00404af0
mov eax, dword [0x4c7200]
mov eax, dword [eax + 0x34c]
mov edx, 0x4bfe10
call fcn.0044e69c
mov eax, dword [ebp - 4]
mov edx, 0x4bfdd4
call fcn.00404d5c
mov eax, dword [ebp - 4]
mov al, byte [0x4c720e]
or al, byte [0x4c720d]
je 0x4bf4c1
mov eax, dword [ebp - 4]
mov edx, 0x4bfe28
call fcn.00404d5c
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov edx, 0x4bfe40
call fcn.00404d5c
mov eax, dword [ebp - 4]
cmp byte [0x4c720e], 0
je 0x4bf42d
mov dword [ebp - 0xe4], 0x94
lea eax, [ebp - 0xe4]
push eax
call sub.KERNEL32.DLL_GetVersionExA
mov eax, dword [ebp - 0xd4]
sub eax, 1
jb 0x4bf259
je 0x4bf280
dec eax
je 0x4bf2a7
jmp 0x4bf2ce
mov eax, dword [0x4c7200]
mov eax, dword [eax + 0x354]
mov edx, 0x4bfe54
call fcn.0044e69c
mov eax, dword [ebp - 4]
mov edx, 0x4bfe70
call fcn.00404d5c
mov eax, dword [ebp - 4]
jmp 0x4bf2f3
mov eax, dword [0x4c7200]
mov eax, dword [eax + 0x354]
mov edx, 0x4bfea0
call fcn.0044e69c
mov eax, dword [ebp - 4]
mov edx, 0x4bfec0
call fcn.00404d5c
mov eax, dword [ebp - 4]
jmp 0x4bf2f3
mov eax, dword [0x4c7200]
mov eax, dword [eax + 0x354]
mov edx, 0x4bfef0
call fcn.0044e69c
mov eax, dword [ebp - 4]
mov edx, 0x4bff04
call fcn.00404d5c
mov eax, dword [ebp - 4]
jmp 0x4bf2f3
mov eax, dword [0x4c7200]
mov eax, dword [eax + 0x354]
mov edx, 0x4bff2c
call fcn.0044e69c
mov eax, dword [ebp - 4]
mov edx, 0x4bff3c
call fcn.00404d5c
mov eax, dword [ebp - 4]
lea eax, [ebp - 0x1f8]
push eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x210], eax
mov byte [ebp - 0x20c], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x208], eax
mov byte [ebp - 0x204], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x200], eax
mov byte [ebp - 0x1fc], 0
lea edx, [ebp - 0x210]
mov ecx, 2
mov eax, 0x4bff60
call fcn.0040a8ec
mov edx, dword [ebp - 0x1f8]
mov eax, dword [ebp - 4]
call fcn.00404d5c
mov eax, dword [ebp - 4]
lea eax, [ebp - 0x214]
push eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x210], eax
mov byte [ebp - 0x20c], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x208], eax
mov byte [ebp - 0x204], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x200], eax
mov byte [ebp - 0x1fc], 0
lea edx, [ebp - 0x210]
mov ecx, 2
mov eax, 0x4bff94
call fcn.0040a8ec
mov edx, dword [ebp - 0x214]
mov eax, dword [0x4c7200]
mov eax, dword [eax + 0x35c]
call fcn.0044e69c
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x220], eax
mov byte [ebp - 0x21c], 6
lea edx, [ebp - 0x220]
xor ecx, ecx
mov eax, 0x4bffb0
call fcn.0040a8ec
mov edx, dword [ebp - 0x218]
mov eax, dword [ebp - 4]
call fcn.00404d5c
mov eax, dword [ebp - 4]
lea eax, [ebp - 0x224]
lea edx, [ebp - 0xd0]
mov ecx, 0x80
call fcn.00404d04
mov edx, dword [ebp - 0x224]
mov eax, dword [0x4c7200]
mov eax, dword [eax + 0x364]
call fcn.0044e69c
cmp byte [0x4c720d], 0
je 0x4bf4b1
mov dword [ebp - 0x2c], 0x104
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x1e9]
push eax
call sub.KERNEL32.DLL_GetComputerNameA
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x1e9]
mov dword [ebp - 0x220], eax
mov byte [ebp - 0x21c], 6
lea edx, [ebp - 0x220]
xor ecx, ecx
mov eax, 0x4bffd0
call fcn.0040a8ec
mov edx, dword [ebp - 0x228]
mov eax, dword [ebp - 4]
call fcn.00404d5c
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x22c]
lea eax, [ebp - 0x1e9]
call fcn.0040a370
mov edx, dword [ebp - 0x22c]
mov eax, dword [0x4c7200]
mov eax, dword [eax + 0x36c]
call fcn.0044e69c
mov eax, dword [ebp - 4]
mov edx, 0x4bfdd4
call fcn.00404d5c
mov eax, dword [ebp - 4]
cmp byte [0x4c720f], 0
je 0x4bfd3d
mov dword [ebp - 0x50], 0x20
lea eax, [ebp - 0x50]
push eax
call sub.KERNEL32.DLL_GlobalMemoryStatus
mov eax, dword [ebp - 4]
mov edx, 0x4bfff0
call fcn.00404d5c
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov edx, 0x4c0008
call fcn.00404d5c
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x220], eax
xor eax, eax
mov dword [ebp - 0x21c], eax
fild qword [ebp - 0x220]
fstp qword [ebp - 0x20]
wait
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x220], eax
xor eax, eax
mov dword [ebp - 0x21c], eax
fild qword [ebp - 0x220]
fstp qword [ebp - 0x28]
wait
fld qword [ebp - 0x28]
fmul dword [0x4c0018]
fdiv qword [ebp - 0x20]
fstp qword [ebp - 0x10]
wait
fld dword [0x4c0018]
fsub qword [ebp - 0x10]
fstp qword [ebp - 0x18]
wait
lea eax, [ebp - 0x230]
push eax
fld qword [ebp - 0x20]
fstp xword [ebp - 0x23c]
wait
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x220], eax
mov byte [ebp - 0x21c], 3
lea edx, [ebp - 0x220]
xor ecx, ecx
mov eax, 0x4c0024
call fcn.0040a8ec
mov edx, dword [ebp - 0x230]
mov eax, dword [ebp - 4]
call fcn.00404d5c
mov eax, dword [ebp - 4]
lea eax, [ebp - 0x240]
push eax
fld qword [ebp - 0x20]
fsub qword [ebp - 0x28]
fstp xword [ebp - 0x23c]
wait
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x250], eax
mov byte [ebp - 0x24c], 3
fld qword [ebp - 0x18]
fstp xword [ebp - 0x25c]
wait
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x248], eax
mov byte [ebp - 0x244], 3
lea edx, [ebp - 0x250]
mov ecx, 1
mov eax, 0x4c004c
call fcn.0040a8ec
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 4]
call fcn.00404d5c
mov eax, dword [ebp - 4]
lea eax, [ebp - 0x260]
push eax
fld qword [ebp - 0x28]
fstp xword [ebp - 0x23c]
wait
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x250], eax
mov byte [ebp - 0x24c], 3
fld qword [ebp - 0x10]
fstp xword [ebp - 0x25c]
wait
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x248], eax
mov byte [ebp - 0x244], 3
lea edx, [ebp - 0x250]
mov ecx, 1
mov eax, 0x4c0080
call fcn.0040a8ec
mov edx, dword [ebp - 0x260]
mov eax, dword [ebp - 4]
call fcn.00404d5c
mov eax, dword [ebp - 4]
lea eax, [ebp - 0x264]
push eax
fld qword [ebp - 0x20]
fstp xword [ebp - 0x23c]
wait
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x220], eax
mov byte [ebp - 0x21c], 3
lea edx, [ebp - 0x220]
xor ecx, ecx
mov eax, 0x4c00b4
call fcn.0040a8ec
mov edx, dword [ebp - 0x264]
mov eax, dword [0x4c7200]
mov eax, dword [eax + 0x378]
call fcn.0044e69c
lea eax, [ebp - 0x268]
push eax
fld qword [ebp - 0x20]
fsub qword [ebp - 0x28]
fstp xword [ebp - 0x23c]
wait
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x250], eax
mov byte [ebp - 0x24c], 3
fld qword [ebp - 0x18]
fstp xword [ebp - 0x25c]
wait
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x248], eax
mov byte [ebp - 0x244], 3
lea edx, [ebp - 0x250]
mov ecx, 1
mov eax, 0x4c00c4
call fcn.0040a8ec
mov edx, dword [ebp - 0x268]
mov eax, dword [0x4c7200]
mov eax, dword [eax + 0x380]
call fcn.0044e69c
lea eax, [ebp - 0x26c]
push eax
fld qword [ebp - 0x28]
fstp xword [ebp - 0x23c]
wait
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x250], eax
mov byte [ebp - 0x24c], 3
fld qword [ebp - 0x10]
fstp xword [ebp - 0x25c]
wait
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x248], eax
mov byte [ebp - 0x244], 3
lea edx, [ebp - 0x250]
mov ecx, 1
mov eax, 0x4c00c4
call fcn.0040a8ec
mov edx, dword [ebp - 0x26c]
mov eax, dword [0x4c7200]
mov eax, dword [eax + 0x388]
call fcn.0044e69c
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x220], eax
xor eax, eax
mov dword [ebp - 0x21c], eax
fild qword [ebp - 0x220]
fstp qword [ebp - 0x20]
wait
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x220], eax
xor eax, eax
mov dword [ebp - 0x21c], eax
fild qword [ebp - 0x220]
fstp qword [ebp - 0x28]
wait
fld qword [ebp - 0x28]
fmul dword [0x4c0018]
fdiv qword [ebp - 0x20]
fstp qword [ebp - 0x10]
wait
fld dword [0x4c0018]
fsub qword [ebp - 0x10]
fstp qword [ebp - 0x18]
wait
lea eax, [ebp - 0x270]
push eax
fld qword [ebp - 0x20]
fstp xword [ebp - 0x23c]
wait
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x220], eax
mov byte [ebp - 0x21c], 3
lea edx, [ebp - 0x220]
xor ecx, ecx
mov eax, 0x4c00dc
call fcn.0040a8ec
mov edx, dword [ebp - 0x270]
mov eax, dword [ebp - 4]
call fcn.00404d5c
mov eax, dword [ebp - 4]
lea eax, [ebp - 0x274]
push eax
fld qword [ebp - 0x20]
fsub qword [ebp - 0x28]
fstp xword [ebp - 0x23c]
wait
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x250], eax
mov byte [ebp - 0x24c], 3
fld qword [ebp - 0x18]
fstp xword [ebp - 0x25c]
wait
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x248], eax
mov byte [ebp - 0x244], 3
lea edx, [ebp - 0x250]
mov ecx, 1
mov eax, 0x4c004c
call fcn.0040a8ec
mov edx, dword [ebp - 0x274]
mov eax, dword [ebp - 4]
call fcn.00404d5c
mov eax, dword [ebp - 4]
lea eax, [ebp - 0x278]
push eax
fld qword [ebp - 0x28]
fstp xword [ebp - 0x23c]
wait
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x250], eax
mov byte [ebp - 0x24c], 3
fld qword [ebp - 0x10]
fstp xword [ebp - 0x25c]
wait
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x248], eax
mov byte [ebp - 0x244], 3
lea edx, [ebp - 0x250]
mov ecx, 1
mov eax, 0x4c0080
call fcn.0040a8ec
mov edx, dword [ebp - 0x278]
mov eax, dword [ebp - 4]
call fcn.00404d5c
mov eax, dword [ebp - 4]
lea eax, [ebp - 0x27c]
push eax
fld qword [ebp - 0x20]
fstp xword [ebp - 0x23c]
wait
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x220], eax
mov byte [ebp - 0x21c], 3
lea edx, [ebp - 0x220]
xor ecx, ecx
mov eax, 0x4c00b4
call fcn.0040a8ec
mov edx, dword [ebp - 0x27c]
mov eax, dword [0x4c7200]
mov eax, dword [eax + 0x3b0]
call fcn.0044e69c
lea eax, [ebp - 0x280]
push eax
fld qword [ebp - 0x20]
fsub qword [ebp - 0x28]
fstp xword [ebp - 0x23c]
wait
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x250], eax
mov byte [ebp - 0x24c], 3
fld qword [ebp - 0x18]
fstp xword [ebp - 0x25c]
wait
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x248], eax
mov byte [ebp - 0x244], 3
lea edx, [ebp - 0x250]
mov ecx, 1
mov eax, 0x4c00c4
call fcn.0040a8ec
mov edx, dword [ebp - 0x280]
mov eax, dword [0x4c7200]
mov eax, dword [eax + 0x3b8]
call fcn.0044e69c
lea eax, [ebp - 0x284]
push eax
fld qword [ebp - 0x28]
fstp xword [ebp - 0x23c]
wait
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x250], eax
mov byte [ebp - 0x24c], 3
fld qword [ebp - 0x10]
fstp xword [ebp - 0x25c]
wait
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x248], eax
mov byte [ebp - 0x244], 3
lea edx, [ebp - 0x250]
mov ecx, 1
mov eax, 0x4c00c4
call fcn.0040a8ec
mov edx, dword [ebp - 0x284]
mov eax, dword [0x4c7200]
mov eax, dword [eax + 0x3c0]
call fcn.0044e69c
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x220], eax
xor eax, eax
mov dword [ebp - 0x21c], eax
fild qword [ebp - 0x220]
fstp qword [ebp - 0x20]
wait
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x220], eax
xor eax, eax
mov dword [ebp - 0x21c], eax
fild qword [ebp - 0x220]
fstp qword [ebp - 0x28]
wait
fld qword [ebp - 0x28]
fmul dword [0x4c0018]
fdiv qword [ebp - 0x20]
fstp qword [ebp - 0x10]
wait
fld dword [0x4c0018]
fsub qword [ebp - 0x10]
fstp qword [ebp - 0x18]
wait
lea eax, [ebp - 0x288]
push eax
fld qword [ebp - 0x20]
fstp xword [ebp - 0x23c]
wait
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x220], eax
mov byte [ebp - 0x21c], 3
lea edx, [ebp - 0x220]
xor ecx, ecx
mov eax, 0x4c0104
call fcn.0040a8ec
mov edx, dword [ebp - 0x288]
mov eax, dword [ebp - 4]
call fcn.00404d5c
mov eax, dword [ebp - 4]
lea eax, [ebp - 0x28c]
push eax
fld qword [ebp - 0x20]
fsub qword [ebp - 0x28]
fstp xword [ebp - 0x23c]
wait
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x250], eax
mov byte [ebp - 0x24c], 3
fld qword [ebp - 0x18]
fstp xword [ebp - 0x25c]
wait
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x248], eax
mov byte [ebp - 0x244], 3
lea edx, [ebp - 0x250]
mov ecx, 1
mov eax, 0x4c004c
call fcn.0040a8ec
mov edx, dword [ebp - 0x28c]
mov eax, dword [ebp - 4]
call fcn.00404d5c
mov eax, dword [ebp - 4]
lea eax, [ebp - 0x290]
push eax
fld qword [ebp - 0x28]
fstp xword [ebp - 0x23c]
wait
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x250], eax
mov byte [ebp - 0x24c], 3
fld qword [ebp - 0x10]
fstp xword [ebp - 0x25c]
wait
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x248], eax
mov byte [ebp - 0x244], 3
lea edx, [ebp - 0x250]
mov ecx, 1
mov eax, 0x4c0080
call fcn.0040a8ec
mov edx, dword [ebp - 0x290]
mov eax, dword [ebp - 4]
call fcn.00404d5c
mov eax, dword [ebp - 4]
lea eax, [ebp - 0x294]
push eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x220], eax
mov byte [ebp - 0x21c], 0
lea edx, [ebp - 0x220]
xor ecx, ecx
mov eax, 0x4c012c
call fcn.0040a8ec
mov edx, dword [ebp - 0x294]
mov eax, dword [ebp - 4]
call fcn.00404d5c
mov eax, dword [ebp - 4]
lea eax, [ebp - 0x298]
push eax
fld qword [ebp - 0x20]
fstp xword [ebp - 0x23c]
wait
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x220], eax
mov byte [ebp - 0x21c], 3
lea edx, [ebp - 0x220]
xor ecx, ecx
mov eax, 0x4c00b4
call fcn.0040a8ec
mov edx, dword [ebp - 0x298]
mov eax, dword [0x4c7200]
mov eax, dword [eax + 0x394]
call fcn.0044e69c
lea eax, [ebp - 0x29c]
push eax
fld qword [ebp - 0x20]
fsub qword [ebp - 0x28]
fstp xword [ebp - 0x23c]
wait
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x250], eax
mov byte [ebp - 0x24c], 3
fld qword [ebp - 0x18]
fstp xword [ebp - 0x25c]
wait
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x248], eax
mov byte [ebp - 0x244], 3
lea edx, [ebp - 0x250]
mov ecx, 1
mov eax, 0x4c00c4
call fcn.0040a8ec
mov edx, dword [ebp - 0x29c]
mov eax, dword [0x4c7200]
mov eax, dword [eax + 0x39c]
call fcn.0044e69c
lea eax, [ebp - 0x2a0]
push eax
fld qword [ebp - 0x28]
fstp xword [ebp - 0x23c]
wait
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x250], eax
mov byte [ebp - 0x24c], 3
fld qword [ebp - 0x10]
fstp xword [ebp - 0x25c]
wait
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x248], eax
mov byte [ebp - 0x244], 3
lea edx, [ebp - 0x250]
mov ecx, 1
mov eax, 0x4c00c4
call fcn.0040a8ec
mov edx, dword [ebp - 0x2a0]
mov eax, dword [0x4c7200]
mov eax, dword [eax + 0x3a4]
call fcn.0044e69c
jmp 0x85d9fce8
pop esp
std
invalid
call dword [eax - 0x75]
inc ebp
mov ah, 0x89
test eax, esp
std
invalid
inc esi
test esp, esp
std
invalid
inc dword [eax]
lea edx, [ebp - 0x220]
xor ecx, ecx
mov eax, 0x4c0150
call fcn.0040a8ec
mov edx, dword [ebp - 0x2a4]
mov eax, dword [0x4c7200]
mov eax, dword [eax + 0x3c8]
call fcn.0044e69c
mov eax, dword [ebp - 4]
mov edx, 0x4bfdd4
call fcn.00404d5c
mov eax, dword [ebp - 4]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4bfda5
lea eax, [ebp - 0x2a4]
mov edx, 0x12
call fcn.00404ac0
lea eax, [ebp - 0x240]
call fcn.00404a9c
lea eax, [ebp - 0x230]
mov edx, 4
call fcn.00404ac0
lea eax, [ebp - 0x218]
mov edx, 2
call fcn.00404ac0
lea eax, [ebp - 0x1f8]
mov edx, 3
call fcn.00404ac0
lea eax, [ebp - 0x30]
call fcn.00404a9c
ret