Function at 0x553804
Capabilities:
Get system information on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff94
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x553818
xor eax, eax
jmp 0x553eb0
xor edx, edx
mov dword [0xced75c], edx
lea ecx, [ebp - 0x20]
push ecx
call fcn.00679560
pop ecx
push dword [ebp + 0x10]
push 0xced554
call fcn.0066c9ec
add esp, 8
push 0xced658
push 0xced554
call fcn.005534c8
add esp, 8
mov dword [0x80c224], 0x40
mov eax, dword [0x80c224]
and eax, 0x80000003
jns 0x553867
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x55388b
mov edx, dword [0x80c224]
and edx, 0x80000003
jns 0x55387e
dec edx
or edx, 0xfffffffc
inc edx
mov ecx, 4
sub ecx, edx
add dword [0x80c224], ecx
mov eax, dword [0x80c210]
mov edx, dword [eax*8 + 0x80c1d4]
mov dword [ebp - 8], edx
mov ecx, dword [0x80c210]
mov eax, dword [ecx*8 + 0x80c1d8]
mov dword [0x80c218], eax
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 8]
add eax, edx
dec eax
xor edx, edx
div dword [ebp - 8]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
lea eax, [eax + eax*2]
mov dword [ebp - 0x10], eax
test byte [ebp - 0x10], 3
je 0x5538dc
mov ecx, dword [ebp - 0x10]
and ecx, 3
mov eax, 4
sub eax, ecx
add dword [ebp - 0x10], eax
mov dword [ebp - 0x14], 0x5dc0
push dword [0x80c224]
push 0
push 0xce74fc
call fcn.0066c86c
add esp, 0xc
push 4
push 0x80c6d2
push 0xce74fc
call fcn.0066c7fc
add esp, 0xc
mov dl, byte [0x80c224]
mov byte [0xce7500], dl
mov byte [0xce7501], 1
mov ecx, dword [ebp - 0x20]
mov dword [0xce7502], ecx
mov dword [0xce752c], 0xffffffff
mov dword [0xce7530], 0
mov dword [0xce7534], 0
mov dword [0xce7538], 0xffffffff
mov word [0xce7506], 0x800
mov eax, dword [ebp + 0xc]
mov dword [0xce7508], eax
mov byte [0xce750c], 0
xor edx, edx
mov dword [0xced760], edx
mov ecx, dword [0x6e7474]
test ecx, ecx
je 0x553a12
push 0xa19d94
call fcn.0066ca1c
pop ecx
mov dword [0xced760], eax
mov eax, dword [0xced760]
test eax, eax
jbe 0x553a12
mov dl, byte [0x80c214]
mov byte [0xce750c], dl
movsx ecx, byte [0xce750c]
dec ecx
je 0x553a12
call fcn.0055cfb0
mov al, byte [0xce750c]
sub al, 3
je 0x5539c8
dec al
jne 0x5539d1
mov dword [ebp - 0x24], 0x20
jmp 0x5539d8
mov dword [ebp - 0x24], 0x18
jmp 0x5539d8
mov dword [ebp - 0x24], 0x10
push dword [ebp - 0x24]
push 0
lea edx, [ebp - 0x48]
push edx
call fcn.0066c86c
add esp, 0xc
push dword [ebp - 0x24]
push 0xa19d94
lea ecx, [ebp - 0x48]
push ecx
call fcn.0066cc30
add esp, 0xc
push dword [ebp - 0x24]
push 0xa19d94
push 0xce758c
call fcn.0055a224
add esp, 0xc
mov dword [0x80c21c], 0
mov dword [0x80c220], 0
mov eax, dword [0x6e746c]
test eax, eax
je 0x553a8f
cmp dword [0x7676f0], 0
jne 0x553a46
cmp dword [0x7676ec], 0x186a0
jbe 0x553a6c
jmp 0x553a48
jle 0x553a6c
mov edx, dword [0x7676ec]
mov dword [0x80c21c], edx
mov edx, dword [0x7676f0]
mov dword [0x80c220], edx
mov dword [0xced75c], 1
jmp 0x553a8f
push 0xced554
call fcn.0046245c
pop ecx
test eax, eax
je 0x553a8f
mov dword [0x80c21c], 0x80000000
mov dword [0x80c220], 0
mov ecx, dword [0x80c21c]
mov dword [0xce750d], ecx
mov ecx, dword [0x80c220]
mov dword [0xce7511], ecx
mov eax, dword [ebp - 0xc]
mov dword [0xce7515], eax
movzx edx, word [0xce7506]
imul edx, dword [ebp - 8]
mov dword [0xce7519], edx
mov byte [0xce751d], 3
mov byte [0xce751e], 0
mov ecx, dword [0x80c210]
test ecx, ecx
jne 0x553afb
xor eax, eax
mov dword [0xce751f], eax
xor edx, edx
mov dword [0xce7523], edx
mov eax, dword [0x80c224]
cdq
mov dword [0xce7774], eax
mov dword [0xce7778], edx
jmp 0x553b5c
mov ecx, dword [0x80c224]
mov dword [0xce751f], ecx
push dword [ebp - 0x10]
call fcn.0066c210
pop ecx
mov dword [0x80c20c], eax
mov eax, dword [0x80c20c]
test eax, eax
jne 0x553b25
xor eax, eax
jmp 0x553eb0
push dword [ebp - 0x10]
push 0
push dword [0x80c20c]
call fcn.0066c86c
add esp, 0xc
mov edx, dword [0x80c20c]
mov dword [0xce7788], edx
mov eax, dword [0x80c224]
mov edx, dword [ebp - 0x10]
add eax, edx
xor edx, edx
mov dword [0xce7774], eax
mov dword [0xce7778], edx
push 0
push 0x800
mov eax, dword [ebp + 0xc]
xor edx, edx
call fcn.006744e4
add eax, dword [0xce7774]
adc edx, dword [0xce7778]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], edx
cmp dword [0x80c220], 0
jne 0x553b9a
cmp dword [0x80c21c], 0x186a0
jbe 0x553c35
jmp 0x553ba0
jle 0x553c35
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
cmp edx, dword [0x80c220]
jne 0x553bb8
cmp eax, dword [0x80c21c]
jbe 0x553c35
jmp 0x553bba
jle 0x553c35
mov dword [0xced75c], 1
push dword [ebp - 0x14]
push 0
push 0xce778c
call fcn.0066c86c
add esp, 0xc
push 0
push 0x18
push dword [0x80c220]
push dword [0x80c21c]
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
call fcn.00674507
add eax, 2
adc edx, 0
call fcn.006744e4
mov dword [ebp - 0x14], eax
mov edx, dword [0x80c210]
test edx, edx
je 0x553c35
mov ecx, dword [0x80c224]
mov dword [0xce7523], ecx
mov eax, dword [0x80c224]
mov edx, dword [ebp - 0x14]
add eax, edx
mov dword [0xce751f], eax
mov eax, dword [ebp - 0x14]
xor edx, edx
add dword [0xce7774], eax
adc dword [0xce7778], edx
mov eax, dword [0xce7774]
mov dword [0xce7527], eax
push 0
lea edx, [ebp - 4]
push edx
push dword [0x80c224]
push 0xce74fc
push dword [ebp + 8]
call sub.KERNEL32.DLL_WriteFile
mov ecx, dword [ebp - 4]
mov eax, dword [0x80c224]
cmp ecx, eax
je 0x553c80
push dword [0x80c20c]
call fcn.0066c220
pop ecx
xor edx, edx
mov dword [0x80c20c], edx
xor eax, eax
jmp 0x553eb0
push 0x40
push 0xce74fc
push 0xce753c
call fcn.0066c7fc
add esp, 0xc
mov edx, dword [0x80c210]
test edx, edx
je 0x553d22
mov ecx, dword [0xce7523]
test ecx, ecx
je 0x553ce6
push 0
lea eax, [ebp - 4]
push eax
push dword [ebp - 0x14]
push 0xce778c
push dword [ebp + 8]
call sub.KERNEL32.DLL_WriteFile
mov edx, dword [ebp - 4]
mov ecx, dword [ebp - 0x14]
cmp edx, ecx
je 0x553ce6
push dword [0x80c20c]
call fcn.0066c220
pop ecx
xor eax, eax
mov dword [0x80c20c], eax
xor eax, eax
jmp 0x553eb0
push 0
lea edx, [ebp - 4]
push edx
push dword [ebp - 0x10]
push dword [0x80c20c]
push dword [ebp + 8]
call sub.KERNEL32.DLL_WriteFile
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
je 0x553d22
push dword [0x80c20c]
call fcn.0066c220
pop ecx
xor edx, edx
mov dword [0x80c20c], edx
xor eax, eax
jmp 0x553eb0
push dword [0xce7519]
call fcn.0066c210
pop ecx
mov dword [0xce757c], eax
mov edx, dword [0xce757c]
test edx, edx
jne 0x553d58
push dword [0x80c20c]
call fcn.0066c220
pop ecx
xor ecx, ecx
mov dword [0x80c20c], ecx
xor eax, eax
jmp 0x553eb0
mov edx, dword [0x80c210]
test edx, edx
je 0x553e1c
mov ecx, dword [0xce7519]
add ecx, ecx
push ecx
call fcn.0066c210
pop ecx
mov dword [0xce7580], eax
mov eax, dword [0xce7580]
test eax, eax
jne 0x553db2
push dword [0x80c20c]
call fcn.0066c220
pop ecx
xor edx, edx
mov dword [0x80c20c], edx
push dword [0xce757c]
call fcn.0066c220
pop ecx
xor ecx, ecx
mov dword [0xce757c], ecx
xor eax, eax
jmp 0x553eb0
mov edx, dword [0x80c210]
cmp edx, 6
jne 0x553e1c
mov ecx, dword [0xce7519]
add ecx, ecx
push ecx
call fcn.0066c210
pop ecx
mov dword [0xce7584], eax
mov eax, dword [0xce7584]
test eax, eax
jne 0x553e1c
push dword [0x80c20c]
call fcn.0066c220
pop ecx
xor edx, edx
mov dword [0x80c20c], edx
push dword [0xce757c]
call fcn.0066c220
pop ecx
xor ecx, ecx
mov dword [0xce757c], ecx
push dword [0xce7580]
call fcn.0066c220
pop ecx
xor eax, eax
mov dword [0xce7580], eax
xor eax, eax
jmp 0x553eb0
mov edx, dword [ebp + 8]
mov dword [0xced54c], edx
mov dword [0xced550], edx
xor eax, eax
mov dword [0xce7770], eax
xor ecx, ecx
mov dword [0xce777c], ecx
xor eax, eax
mov dword [0xce7780], eax
xor edx, edx
mov dword [0xce7784], edx
mov eax, dword [0xce7774]
mov dword [0xce779c], eax
push dword [0xce7519]
call fcn.0066c210
pop ecx
mov dword [0xce7588], eax
lea edx, [ebp - 0x6c]
push edx
call sub.KERNEL32.DLL_GetSystemInfo
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 0x28], ecx
xor eax, eax
mov dword [0xce74e8], eax
shl dword [ebp - 0x28], 1
mov edx, dword [ebp - 0x28]
cmp edx, 8
jle 0x553e8d
mov dword [ebp - 0x28], 8
push dword [ebp - 0x28]
call fcn.005530c4
pop ecx
test eax, eax
jne 0x553ea4
xor ecx, ecx
mov dword [0xce74e8], ecx
jmp 0x553eab
push 0x64
call sub.KERNEL32.DLL_Sleep
mov eax, 1
mov esp, ebp
pop ebp
ret