Function at 0x408bad
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x338
push edi
lea ecx, [ebp - 0x338]
call fcn.0040117c
mov ecx, dword [ebp + 8]
call fcn.004034d4
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x408bf5
lea ecx, [ebp - 0x338]
call fcn.00407ecb
movzx eax, al
test eax, eax
je 0x408bf3
lea eax, [ebp - 0x338]
push eax
mov ecx, dword [ebp + 8]
call fcn.00401262
jmp 0x408c16
lea ecx, [ebp - 0x338]
call fcn.00408947
movzx eax, al
test eax, eax
je 0x408c16
lea eax, [ebp - 0x338]
push eax
mov ecx, dword [ebp + 8]
call fcn.00401262
cmp dword [ebp + 0xc], 0
je 0x408c3d
push 2
pop eax
imul eax, eax, 0
mov ecx, dword [ebp + 0xc]
movzx eax, word [ecx + eax]
test eax, eax
je 0x408c3d
push dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
call fcn.00403806
jmp 0x408d4e
push 0x100
push 0xfe
lea eax, [ebp - 0x128]
push eax
push str.ProductId
mov edx, str.SOFTWAREMicrosoftWindows_NTCurrentVersion
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.00403d81
add esp, 0x10
movzx eax, al
test eax, eax
jne 0x408c7c
push 2
pop eax
imul eax, eax, 0
xor ecx, ecx
mov word [ebp + eax - 0x128], cx
push 2
pop eax
imul eax, eax, 0
movzx eax, word [ebp + eax - 0x128]
test eax, eax
je 0x408c9b
call fcn.004013bb
test eax, eax
je 0x408d3f
push 0x100
push 0xfe
lea eax, [ebp - 0x128]
push eax
push 0x46d090
mov edx, str.SOFTWAREMetaQuotes_Software
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.00403d81
add esp, 0x10
movzx eax, al
test eax, eax
je 0x408cde
lea eax, [ebp - 0x128]
push eax
call fcn.0042a6e5
pop ecx
cmp eax, 0x2710
jge 0x408d2f
push 0x100
push 0xfe
lea eax, [ebp - 0x128]
push eax
push 0x46d090
mov edx, str.SOFTWAREMetaQuotes_Software
mov ecx, closesocket
call fcn.00403d81
add esp, 0x10
movzx eax, al
test eax, eax
je 0x408d21
lea eax, [ebp - 0x128]
push eax
call fcn.0042a6e5
pop ecx
cmp eax, 0x2710
jge 0x408d2f
push 0x7f
pop edx
lea ecx, [ebp - 0x128]
call fcn.004089a4
mov edx, str.4ed6bfa8
lea ecx, [ebp - 0x128]
call fcn.00408ac4
lea eax, [ebp - 0x128]
push eax
mov ecx, dword [ebp + 8]
call fcn.00403806
call fcn.00408ad1
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x408d82
push dword [ebp - 4]
push 0x4679e4
lea eax, [ebp - 0x338]
push eax
call fcn.004011fb
add esp, 0xc
lea eax, [ebp - 0x338]
push eax
mov ecx, dword [ebp + 8]
call fcn.00401262
mov ecx, dword [ebp + 8]
call fcn.00401b89
movzx eax, al
test eax, eax
jne 0x408dac
lea ecx, [ebp - 0x338]
call fcn.00403638
lea ecx, [ebp - 0x338]
call fcn.004011bb
jmp 0x408e54
push 9
pop ecx
xor eax, eax
lea edi, [ebp - 0x28]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx eax, word [ebp - 8]
test eax, eax
je 0x408e15
movzx eax, word [ebp - 6]
test eax, eax
je 0x408e15
movzx eax, word [ebp - 6]
push eax
movzx eax, word [ebp - 8]
push eax
push str._u._u
lea eax, [ebp - 0x338]
push eax
call fcn.004011fb
add esp, 0x10
lea eax, [ebp - 0x338]
push eax
mov ecx, dword [ebp + 8]
call fcn.00401262
lea ecx, [ebp - 0x338]
call fcn.00403638
lea ecx, [ebp - 0x338]
call fcn.004011bb
jmp 0x408e54
call fcn.00408b46
push eax
push 0x46fe40
lea eax, [ebp - 0x338]
push eax
call fcn.004011fb
add esp, 0xc
lea eax, [ebp - 0x338]
push eax
mov ecx, dword [ebp + 8]
call fcn.00401262
lea ecx, [ebp - 0x338]
call fcn.00403638
lea ecx, [ebp - 0x338]
call fcn.004011bb
pop edi
leave
ret