Function at 0x404c50
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x40cae6
mov eax, dword fs:[0]
push eax
sub esp, 0x34
push ebx
push esi
push edi
mov eax, dword [0x41614c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x10], ebx
lea ecx, [ebx + 4]
mov dword [ebp - 0x14], 0
call dword [0x40e18c]
lea ecx, [ebx + 8]
mov dword [ebp - 4], 0
call dword [0x40e18c]
lea ecx, [ebx + 0xc]
call dword [0x40e18c]
lea ecx, [ebx + 0x10]
call dword [0x40e18c]
lea ecx, [ebx + 0x14]
call dword [0x40e18c]
lea ecx, [ebx + 0x18]
call dword [0x40e18c]
lea ecx, [ebx + 0x1c]
call dword [0x40e18c]
lea ecx, [ebx + 0x20]
call dword [0x40e18c]
lea ecx, [ebx + 0x24]
call dword [0x40e18c]
lea ecx, [ebx + 0x28]
call dword [0x40e18c]
lea ecx, [ebx + 0x2c]
call dword [0x40e18c]
lea ecx, [ebx + 0x30]
call dword [0x40e18c]
lea ecx, [ebx + 0x34]
call dword [0x40e18c]
push 0x40e924
lea ecx, [ebx + 4]
mov byte [ebp - 4], 0xc
mov dword [ebx], 0
call dword [0x40e1ec]
lea eax, [ebp - 0x28]
push eax
call dword [0x40e15c]
add esp, 4
lea ecx, [ebx + 8]
push eax
call dword [0x40e19c]
lea ecx, [ebp - 0x28]
call dword [0x40e114]
mov edi, dword [0x40e208]
push ecx
mov esi, esp
push 0x26
push str.wmic_cpu_get_NumberOfLogicalProcessors
call edi
add esp, 8
mov dword [esi], eax
lea eax, [ebp - 0x40]
mov ecx, ebx
push eax
call fcn.00406d40
mov ebx, eax
push ecx
mov esi, esp
mov byte [ebp - 4], 0xd
push 0x1a
push str.wmic_cpu_get_NumberOfCores
call edi
mov ecx, dword [ebp - 0x10]
add esp, 8
mov dword [esi], eax
lea eax, [ebp - 0x3c]
push eax
call fcn.00406d40
mov edi, eax
mov eax, dword [0x40e208]
push ecx
mov esi, esp
mov byte [ebp - 4], 0xe
push 0x11
push str.wmic_cpu_get_name
call eax
mov ecx, dword [ebp - 0x10]
add esp, 8
mov dword [esi], eax
lea eax, [ebp - 0x38]
push eax
call fcn.00406d40
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x10
call dword [0x40e190]
push 0xffffffffffffffff
lea eax, [ebp - 0x34]
mov dword [ebp - 0x14], 1
push 0x40e978
push eax
call dword [0x40e1cc]
add esp, 0xc
mov esi, dword [0x40e1a4]
lea ecx, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x11
call esi
lea ecx, [ebp - 0x34]
call dword [0x40e114]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x24]
call dword [0x40e190]
push edi
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x14], 3
call esi
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x20]
call dword [0x40e190]
push 0xffffffffffffffff
lea eax, [ebp - 0x34]
mov dword [ebp - 0x14], 7
push 0x40e958
push eax
call dword [0x40e1cc]
add esp, 0xc
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x14
call esi
lea ecx, [ebp - 0x34]
call dword [0x40e114]
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x1c]
call dword [0x40e190]
push ebx
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x14], 0xf
call esi
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x18]
call dword [0x40e190]
push 0xffffffffffffffff
lea eax, [ebp - 0x34]
mov dword [ebp - 0x14], 0x1f
push 0x40e928
push eax
call dword [0x40e1cc]
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x17
call esi
lea ecx, [ebp - 0x34]
call dword [0x40e114]
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x18]
mov edi, dword [0x40e194]
push eax
lea ecx, [ecx + 0x10]
call edi
lea ecx, [ebp - 0x18]
call dword [0x40e114]
lea ecx, [ebp - 0x1c]
call dword [0x40e114]
lea ecx, [ebp - 0x20]
call dword [0x40e114]
lea ecx, [ebp - 0x24]
call dword [0x40e114]
lea ecx, [ebp - 0x28]
call dword [0x40e114]
lea ecx, [ebp - 0x38]
call dword [0x40e114]
lea ecx, [ebp - 0x3c]
call dword [0x40e114]
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xc
call dword [0x40e114]
mov ebx, dword [0x40e208]
push ecx
mov esi, esp
push 0x18
push str.wmic_cpu_get_processorid
call ebx
add esp, 8
mov dword [esi], eax
mov esi, dword [ebp - 0x10]
lea eax, [ebp - 0x40]
mov ecx, esi
push eax
call fcn.00406d40
push eax
lea ecx, [esi + 0x14]
call dword [0x40e19c]
lea ecx, [ebp - 0x40]
call dword [0x40e114]
push ecx
mov esi, esp
push 0x2b
push str.wmic_ComputerSystem_get_TotalPhysicalMemory
call ebx
add esp, 8
mov dword [esi], eax
mov esi, dword [ebp - 0x10]
lea eax, [ebp - 0x40]
mov ecx, esi
push eax
call fcn.00406d40
push eax
lea ecx, [esi + 0x18]
call dword [0x40e19c]
lea ecx, [ebp - 0x40]
call dword [0x40e114]
lea eax, [ebp - 0x40]
mov ecx, esi
push eax
call fcn.00408380
lea ebx, [esi + 0x1c]
push eax
mov ecx, ebx
call dword [0x40e19c]
lea ecx, [ebp - 0x40]
call dword [0x40e114]
push str.1.0.12
lea ecx, [esi + 0x20]
call dword [0x40e1ec]
lea eax, [ebp - 0x40]
mov ecx, esi
push eax
call fcn.004081a0
add esi, 0x24
push eax
mov ecx, esi
call dword [0x40e19c]
lea ecx, [ebp - 0x40]
call dword [0x40e114]
push ebx
lea eax, [ebp - 0x30]
push esi
push eax
call fcn.00405700
add esp, 0xc
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0x30]
call dword [0x40e1c0]
push 1
push eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x19
push eax
call dword [0x40e110]
add esp, 0xc
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x1a
push ecx
mov ecx, eax
call dword [0x40e108]
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1b
call dword [0x40e1e8]
lea ecx, [ebp - 0x40]
call dword [0x40e104]
lea ecx, [ebp - 0x3c]
call dword [0x40e104]
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x1f
call dword [0x40e104]
mov ebx, dword [ebp - 0x10]
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebx + 0xc]
call edi
mov eax, dword [0x40e208]
push ecx
mov esi, esp
push 0x2d
push str.wmic_diskdrive_where_index0_get_serialnumber
call eax
add esp, 8
mov dword [esi], eax
lea eax, [ebp - 0x34]
mov ecx, ebx
push eax
call fcn.00406d40
push eax
lea ecx, [ebx + 0x28]
call dword [0x40e19c]
lea ecx, [ebp - 0x34]
call dword [0x40e114]
push 0x40ea10
lea ecx, [ebx + 0x2c]
call dword [0x40e1ec]
push 0x40e85c
lea ecx, [ebx + 0x30]
call dword [0x40e1ec]
push 0x40e85c
lea ecx, [ebx + 0x34]
call dword [0x40e1ec]
lea ecx, [ebp - 0x2c]
call dword [0x40e114]
lea ecx, [ebp - 0x30]
call dword [0x40e114]
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret