Function at 0x404074
Capabilities:
Get system information on windows

Disassembly:
push ebp
lea ebp, [esp - 0x70]
sub esp, 0xcc
mov eax, dword [0x4a9c04]
xor eax, ebp
mov dword [ebp + 0x6c], eax
mov ecx, dword [ebp + 0x78]
mov eax, dword [ebp + 0x7c]
push ebx
push esi
push edi
xor ebx, ebx
mov byte [ecx], bl
push 0x2c
mov dword [ebp - 0x38], eax
mov byte [eax], bl
mov esi, 0xff
lea eax, [ebp - 0x34]
push esi
push eax
mov dword [ebp + 0x10], ecx
call fcn.0044f370
add esp, 0xc
push 8
pop ecx
xor eax, eax
mov dword [ebp - 0x5c], ebx
lea edi, [ebp - 0x58]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
or dword [ebp + 0xc], 0xffffffff
or dword [ebp - 4], 0xffffffff
mov byte [ebp + 0x5c], bl
xor eax, eax
lea edi, [ebp + 0x5d]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea ecx, [ebp + 0x18]
stosd dword es:[edi], eax
mov dword [ebp + 4], ebx
mov dword [ebp], ebx
call fcn.00403987
mov eax, dword [ebp - 0x44]
sub eax, 0x182
je 0x404110
sub eax, 0x64
je 0x404107
sub eax, 0x64
jne 0x404117
mov dword [ebp + 0xc], 5
jmp 0x404117
mov dword [ebp + 0xc], 4
jmp 0x404117
mov dword [ebp + 0xc], 3
movzx eax, word [ebp - 0x3c]
push 2
pop edi
cmp dword [ebp + 0xc], eax
je 0x40412b
cmp dword [0x4ad6a0], edi
jne 0x404138
mov dword [ebp + 0xc], eax
movzx eax, word [ebp - 0x3a]
shr eax, 8
mov dword [ebp - 4], eax
xor eax, eax
xor ebx, ebx
xor ecx, ecx
xor edx, edx
cpuid
mov dword [ebp + 8], eax
mov dword [ebp + 0x5c], ebx
mov dword [ebp + 0x60], edx
mov dword [ebp + 0x64], ecx
mov eax, 1
cpuid
mov dword [ebp + 4], eax
mov dword [ebp], ebx
mov eax, 2
xor ebx, ebx
xor ecx, ecx
xor edx, edx
cpuid
and eax, 0xffffff00
mov dword [ebp + 0x4c], eax
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x54], ecx
mov dword [ebp + 0x58], edx
push 0xc
lea eax, [ebp + 0x5c]
push str.GenuineIntel
push eax
mov byte [ebp + 0x68], 0
call fcn.00454112
add esp, 0xc
test eax, eax
jne 0x4041e8
and dword [ebp + 0x14], eax
cmp dword [ebp + 8], 1
jl 0x4042f8
mov ecx, dword [ebp + 4]
mov eax, ecx
shr eax, 8
push 0xf
pop edi
and eax, edi
mov dword [ebp + 0xc], eax
mov ebx, ecx
mov eax, ecx
shr ebx, 4
shr eax, 0x10
and ebx, edi
and eax, edi
mov dword [ebp - 4], ebx
mov edx, SysReAllocString
cmp dword [ebp + 0xc], edi
jne 0x4041d6
shr ecx, 0x14
and ecx, esi
or ecx, edx
mov dword [ebp + 0xc], ecx
cmp ebx, edi
jne 0x4042fc
or eax, edx
mov dword [ebp - 4], eax
jmp 0x4042fc
push 0xc
pop ebx
push ebx
lea eax, [ebp + 0x5c]
push str.AuthenticAMD
push eax
call fcn.00454112
add esp, 0xc
test eax, eax
jne 0x40420a
mov dword [ebp + 0x14], 1
jmp 0x404197
push ebx
lea eax, [ebp + 0x5c]
push str.CyrixInstead
push eax
call fcn.00454112
add esp, 0xc
test eax, eax
jne 0x404228
mov dword [ebp + 0x14], edi
jmp 0x404197
push ebx
lea eax, [ebp + 0x5c]
push str.CentaurHauls
push eax
call fcn.00454112
add esp, 0xc
test eax, eax
jne 0x40424a
mov dword [ebp + 0x14], 3
jmp 0x404197
push ebx
lea eax, [ebp + 0x5c]
push str.ConnectixCPU
push eax
call fcn.00454112
add esp, 0xc
test eax, eax
jne 0x40426c
mov dword [ebp + 0x14], 4
jmp 0x404197
push ebx
lea eax, [ebp + 0x5c]
push str.UMC_UMC_UMC
push eax
call fcn.00454112
add esp, 0xc
test eax, eax
jne 0x40428e
mov dword [ebp + 0x14], 5
jmp 0x404197
push ebx
lea eax, [ebp + 0x5c]
push str.NexGenDriven
push eax
call fcn.00454112
add esp, 0xc
test eax, eax
jne 0x4042b0
mov dword [ebp + 0x14], 6
jmp 0x404197
push ebx
lea eax, [ebp + 0x5c]
push str.RiseRiseRise
push eax
call fcn.00454112
add esp, 0xc
test eax, eax
jne 0x4042d2
mov dword [ebp + 0x14], 7
jmp 0x404197
push ebx
lea eax, [ebp + 0x5c]
push str.GenuineTMx86
push eax
call fcn.00454112
add esp, 0xc
test eax, eax
jne 0x4042f4
mov dword [ebp + 0x14], 8
jmp 0x404197
or dword [ebp + 0x14], 0xffffffff
and dword [ebp], 0
cmp dword [ebp + 0x14], 0
jne 0x40449b
push 2
pop edi
cmp dword [ebp + 8], edi
jl 0x404497
push 0x10
pop ebx
push 8
lea edx, [ebp + 0x4c]
mov dword [ebp + 8], 4
pop ecx
test byte [edx + 3], 0x80
jne 0x40448b
xor esi, esi
movzx eax, byte [esi + edx]
cmp eax, 0x67
jg 0x4043f2
je 0x4043ed
cmp eax, 0x41
jg 0x4043a2
je 0x404399
sub eax, 6
je 0x40438a
sub eax, edi
je 0x404385
sub eax, edi
je 0x404376
sub eax, edi
je 0x404371
sub eax, 0x34
jne 0x404481
and dword [ebp - 0x28], eax
mov dword [ebp - 0x14], 0x20
jmp 0x404481
mov dword [ebp - 0x2c], ebx
jmp 0x404379
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x18], 0x20
jmp 0x404481
mov dword [ebp - 0x30], ebx
jmp 0x40438d
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x1c], 0x20
jmp 0x404481
mov dword [ebp - 0x28], 0x80
jmp 0x404365
sub eax, 0x42
je 0x4043e1
dec eax
je 0x4043d5
dec eax
je 0x4043cc
dec eax
je 0x40445e
sub eax, 0x21
jne 0x404481
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x18], 0x40
jmp 0x404481
mov dword [ebp - 0x28], 0x400
jmp 0x404365
mov dword [ebp - 0x14], 0x20
jmp 0x40447a
mov dword [ebp - 0x28], 0x100
jmp 0x404365
mov dword [ebp - 0x2c], ebx
jmp 0x4043c0
cmp eax, 0x7a
jg 0x404446
je 0x40443d
sub eax, 0x68
je 0x404434
sub eax, ecx
je 0x40442b
dec eax
je 0x404426
dec eax
je 0x40441d
sub eax, 7
jne 0x404481
mov dword [ebp - 0x28], 0x80
mov dword [ebp - 0x14], 0x40
jmp 0x404481
mov dword [ebp - 0xc], 0x20
jmp 0x404481
mov dword [ebp - 0xc], ebx
jmp 0x404481
mov dword [ebp - 0xc], 0xc
jmp 0x404481
mov dword [ebp - 0x2c], 0x20
jmp 0x4043c0
mov dword [ebp - 0x28], 0x100
jmp 0x404414
sub eax, 0x7b
je 0x404473
dec eax
je 0x40446a
sub eax, 6
je 0x4043e1
sub eax, edi
je 0x4043cc
dec eax
jne 0x404481
mov dword [ebp - 0x28], 0x800
jmp 0x404365
mov dword [ebp - 0x28], 0x400
jmp 0x404414
mov dword [ebp - 0x14], 0x40
mov dword [ebp - 0x28], 0x200
inc esi
cmp esi, 4
jl 0x40432e
add edx, 4
dec dword [ebp + 8]
jne 0x404322
cmp dword [ebp + 0x14], 0
jge 0x4044ad
lea eax, [ebp + 0x5c]
push str.Unknown
push eax
call fcn.0044fb30
pop ecx
pop ecx
call fcn.00403f0e
cmp eax, dword [ebp - 0x48]
setb byte [ebp - 5]
mov eax, SysReAllocString
cpuid
mov dword [ebp + 8], eax
cmp dword [ebp + 8], 0x80000004
jb 0x404539
push 0x2f
lea eax, [ebp + 0x1d]
push 0
push eax
mov byte [ebp + 0x1c], 0
call fcn.0044f370
add esp, 0xc
mov eax, reloc.OLEAUT32.dll_SysReAllocString
cpuid
mov dword [ebp + 0x1c], eax
mov dword [ebp + 0x20], ebx
mov dword [ebp + 0x24], ecx
mov dword [ebp + 0x28], edx
mov eax, VariantInit
cpuid
mov dword [ebp + 0x2c], eax
mov dword [ebp + 0x30], ebx
mov dword [ebp + 0x34], ecx
mov dword [ebp + 0x38], edx
mov eax, reloc.OLEAUT32.dll_SysReAllocStringLen
cpuid
mov dword [ebp + 0x3c], eax
mov dword [ebp + 0x40], ebx
mov dword [ebp + 0x44], ecx
mov dword [ebp + 0x48], edx
lea eax, [ebp + 0x1c]
push eax
lea ecx, [ebp + 0x18]
mov byte [ebp + 0x4b], 0
call fcn.0040395a
lea ecx, [ebp + 0x18]
call fcn.00403b9d
lea ecx, [ebp + 0x18]
call fcn.00403bca
xor edx, edx
xor ecx, ecx
lea eax, [ecx + 0x486cdc]
mov esi, dword [eax - 4]
cmp esi, dword [ebp + 0x14]
jne 0x404562
mov eax, dword [eax]
cmp eax, dword [ebp + 0xc]
jne 0x404562
mov eax, dword [ecx + 0x486ce0]
cmp eax, 0xffffffff
je 0x404570
cmp eax, dword [ebp - 4]
je 0x404570
add ecx, 0x14
inc edx
cmp ecx, 0x71c
jb 0x40453d
jmp 0x404583
imul edx, edx, 0x14
push dword [edx + 0x486ce4]
push dword [ebp + 0x10]
call fcn.0044fb30
pop ecx
pop ecx
cmp dword [ebp + 0x14], 0
mov esi, str.Intel_Pentium_III_Xeon
mov ebx, str.Intel_Pentium_III
mov edi, str.Intel_Celeron
jne 0x404616
cmp dword [ebp + 0xc], 6
jne 0x404616
cmp dword [ebp - 4], 5
jne 0x4045e8
cmp dword [ebp - 0x28], 0x200
jge 0x4045bf
push edi
push dword [ebp + 0x10]
call fcn.0044fb30
cmp dword [ebp - 0x28], 0x200
pop ecx
pop ecx
jne 0x4045d0
push str.Intel_Pentium_II
push dword [ebp + 0x10]
call fcn.0044fb30
pop ecx
pop ecx
cmp dword [ebp - 0x28], 0x200
jle 0x404616
push str.Intel_Pentium_II_Xeon
push dword [ebp + 0x10]
call fcn.0044fb30
pop ecx
pop ecx
cmp dword [ebp - 4], 7
jne 0x404616
cmp dword [ebp - 0x28], 0x200
jg 0x40460b
push ebx
push dword [ebp + 0x10]
call fcn.0044fb30
cmp dword [ebp - 0x28], 0x200
pop ecx
pop ecx
jle 0x404616
push esi
push dword [ebp + 0x10]
call fcn.0044fb30
pop ecx
pop ecx
mov eax, dword [ebp + 0x10]
cmp byte [eax], 0
jne 0x404654
cmp dword [ebp - 4], 0xffffffff
lea eax, [ebp + 0x5c]
je 0x404640
push dword [ebp - 4]
push dword [ebp + 0xc]
push eax
push str._s_Family__X__Model__X
push dword [ebp + 0x10]
call fcn.0044f3ea
add esp, 0x14
jmp 0x404654
push dword [ebp + 0xc]
push eax
push str._s__d86
push dword [ebp + 0x10]
call fcn.0044f3ea
add esp, 0x10
cmp dword [ebp + 0x14], 0
jne case.0x404668.5
mov eax, dword [ebp]
and eax, 0xff
dec eax
cmp eax, 0xe
ja case.0x404668.5
jmp dword [eax*4 + 0x4048b0]
mov eax, str.Intel_Celeron_II
jmp 0x4046c5
mov eax, ebx
jmp 0x4046c5
cmp dword [ebp + 4], 0x6b1
je case.0x404668.10
mov eax, esi
jmp 0x4046c5
mov eax, str.Intel_Pentium_III_mobile
jmp 0x4046c5
mov eax, str.Intel_Celeron_mobile
jmp 0x4046c5
mov eax, str.Intel_Pentium_4
jmp 0x4046c5
cmp dword [ebp + 4], 0xf13
jae 0x4046ac
mov eax, str.Intel_Pentium_4_Xeon_MP
jmp 0x4046c5
mov eax, str.Intel_Pentium_4_Xeon
jmp 0x4046c5
cmp dword [ebp + 4], 0xf13
jb 0x4046ac
mov eax, str.Intel_Mobile_Pentium_4
jmp 0x4046c5
mov eax, edi
push eax
push dword [ebp + 0x10]
call fcn.0044fb30
pop ecx
pop ecx
mov esi, dword [ebp + 0x18]
push esi
call fcn.0044fc30
pop ecx
test eax, eax
je 0x40486b
push 0x486ba4
lea ecx, [ebp + 0x18]
call fcn.00403a51
mov ebx, eax
test ebx, ebx
jge 0x40470c
push 0x486ba0
lea ecx, [ebp + 0x18]
call fcn.00403a51
mov ebx, eax
test ebx, ebx
jl 0x4047be
mov esi, ebx
test ebx, ebx
jle 0x404736
mov edi, dword [ebp + 0x18]
cmp byte [ebx + edi - 1], 0x20
jne 0x404732
lea esi, [ebx - 1]
jmp 0x404732
movsx eax, byte [edi + esi - 1]
push eax
call fcn.00453daf
pop ecx
test eax, eax
jne 0x404736
dec esi
test esi, esi
jg 0x404721
mov eax, dword [ebp + 0x18]
mov edi, ebx
sub edi, esi
add eax, esi
push edi
push eax
push dword [ebp - 0x38]
call fcn.004500e0
mov eax, dword [ebp - 0x38]
mov byte [eax + edi], 0x20
lea edi, [eax + edi + 1]
mov eax, dword [ebp + 0x18]
movsx eax, byte [ebx + eax]
push eax
call fcn.00453aa9
mov byte [edi], al
push 0x486b9c
inc edi
push edi
call fcn.0044fb30
add esp, 0x18
test esi, esi
jle 0x404784
mov eax, dword [ebp + 0x18]
add eax, esi
cmp byte [eax - 1], 0x40
jne 0x404784
dec esi
jmp 0x40479c
cmp esi, 1
jle 0x40479c
mov eax, dword [ebp + 0x18]
add eax, esi
cmp byte [eax - 1], 0x20
jne 0x40479c
cmp byte [eax - 2], 0x40
jne 0x40479c
dec esi
dec esi
sub ebx, esi
add ebx, 3
push ebx
push esi
lea ecx, [ebp + 0x18]
call fcn.00403b5e
lea ecx, [ebp + 0x18]
call fcn.00403bca
lea ecx, [ebp + 0x18]
call fcn.00403b9d
mov esi, dword [ebp + 0x18]
push 0x486b98
lea ecx, [ebp + 0x18]
call fcn.00403a51
mov ebx, eax
test ebx, ebx
jl 0x40480c
lea edi, [ebx + 3]
jle 0x4047de
cmp byte [ebx + esi - 1], 0x20
jne 0x4047de
dec ebx
push esi
call fcn.0044fc30
cmp edi, eax
pop ecx
jl 0x4047ef
cmp byte [edi + esi], 0x20
jne 0x4047f0
inc edi
sub edi, ebx
push edi
push ebx
lea ecx, [ebp + 0x18]
call fcn.00403b5e
lea ecx, [ebp + 0x18]
call fcn.00403bca
lea ecx, [ebp + 0x18]
call fcn.00403b9d
push 0x486b94
lea ecx, [ebp + 0x18]
call fcn.00403a51
test eax, eax
jl 0x404828
push 3
push eax
lea ecx, [ebp + 0x18]
call fcn.00403b5e
push str._TM_
lea ecx, [ebp + 0x18]
call fcn.00403a51
test eax, eax
jl 0x404844
push 4
push eax
lea ecx, [ebp + 0x18]
call fcn.00403b5e
push str.Processor
lea ecx, [ebp + 0x18]
call fcn.00403a51
test eax, eax
jl 0x404860
push 0xa
push eax
lea ecx, [ebp + 0x18]
call fcn.00403b5e
push esi
push dword [ebp + 0x10]
call fcn.0044fb30
pop ecx
pop ecx
cmp dword [0x4ad6a0], 2
jne 0x404892
cmp dword [ebp - 0x48], 2
jb 0x404892
cmp byte [ebp - 5], 0
je 0x404892
push str.__Hyper_Threaded_
push dword [ebp + 0x10]
call fcn.0044fb40
shr dword [ebp - 0x48], 1
pop ecx
pop ecx
mov edi, dword [ebp - 0x48]
push esi
call fcn.00450445
pop ecx
mov ecx, dword [ebp + 0x6c]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0044f35b
add ebp, 0x70
leave
ret