Function at 0x4d2e80
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4f98ec
mov eax, dword fs:[0]
push eax
sub esp, 0xe8
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0xe0], eax
push ebx
push esi
push edi
mov eax, dword [section..data]
xor eax, esp
push eax
lea eax, [esp + 0xf8]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [esp + 0x24], ebx
push 0x1db0
mov ecx, 0x5236a4
call fcn.00411750
mov esi, dword [sym.imp.USER32.dll_SetWindowTextW]
test eax, eax
je 0x4d2ee5
push eax
push dword [ebx + 4]
call esi
mov ecx, dword [ebx + 4]
mov edx, 0x500d10
push 0x10
call fcn.004a1c70
mov ecx, dword [ebx + 4]
mov edx, 0x500dac
push 1
call fcn.004a1d60
push 0x1db6
mov ecx, 0x5236a4
call fcn.00411750
mov edi, eax
test edi, edi
je 0x4d2f2a
push 0x1de8
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
push edi
push eax
call esi
push 0x1db7
mov ecx, 0x5236a4
call fcn.00411750
mov edi, eax
test edi, edi
je 0x4d2f51
push 0x1de9
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
push edi
push eax
call esi
lea eax, [ebx + 0x30]
mov ecx, eax
mov dword [esp + 0x20], eax
call fcn.004d2ad0
cmp byte [ebx + 0x160], 0
je 0x4d2fdb
push 0x64
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0x5c
mov dword [ebx + 0x10], eax
lea eax, [esp + 0x80]
push 0
push eax
call fcn.004e3fe0
add esp, 0xc
mov dword [esp + 0x7c], 0xe
lea eax, [esp + 0x7c]
mov dword [esp + 0x80], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x93], 1
push eax
mov byte [esp + 0x9b], 1
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [ebx + 0x1c], eax
test eax, eax
je 0x4d2fdb
push 1
push eax
push 0x30
push dword [ebx + 0x10]
call dword [sym.imp.USER32.dll_SendMessageW]
xorps xmm0, xmm0
mov dword [esp + 0x30], 0
push 0x506b5c
lea ecx, [esp + 0x2c]
movq qword [esp + 0x2c], xmm0
call fcn.00412700
lea eax, [esp + 0x3c]
mov dword [esp + 0x100], 0
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
lea eax, [esp + 0x3c]
mov dword [esp + 0x3c], 1
push eax
mov dword [esp + 0x44], 1
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
push eax
call edi
test eax, eax
je 0x4d3045
mov ecx, dword [esp + 0x38]
test ecx, ecx
je 0x4d3045
call fcn.0041ec70
mov edi, eax
jmp 0x4d3081
lea eax, [esp + 0xe4]
push eax
lea eax, [esp + 0xe4]
push eax
call esi
push eax
call edi
test eax, eax
je 0x4d3072
mov ecx, dword [esp + 0xe0]
test ecx, ecx
je 0x4d3072
call fcn.0041ec70
mov edi, eax
jmp 0x4d3081
lea eax, [esp + 0x58]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edi, dword [esp + 0x6c]
lea edx, [esp + 0xe0]
mov ecx, edi
call fcn.00410e70
lea eax, [esp + 0xe0]
push eax
lea ecx, [esp + 0x2c]
call fcn.00412c30
lea edx, [esp + 0x38]
lea ecx, [esp + 0xe0]
call fcn.0045c9e0
mov byte [esp + 0x100], 1
lea ecx, [esp + 0x28]
push dword [eax]
call fcn.00412c30
mov byte [esp + 0x100], 0
push dword [esp + 0xe0]
call fcn.004df97b
mov esi, dword [esp + 0x2c]
add esp, 4
push esi
push 0x68
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
push esi
mov dword [esp + 0x104], 0xffffffff
call fcn.004df97b
add esp, 4
mov dword [esp + 0x40], 0
xorps xmm0, xmm0
movq qword [esp + 0x38], xmm0
mov dword [esp + 0x38], 0
push 8
call fcn.004df9b3
add esp, 4
test eax, eax
jne 0x4d3138
mov byte [esp + 0x12], al
lea eax, [esp + 0x12]
push 0x51c2c8
push eax
call fcn.004ea58e
xor ecx, ecx
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 3
mov word [eax], cx
mov dword [esp + 0x100], 2
xorps xmm0, xmm0
movq qword [esp + 0xe0], xmm0
push 4
mov dword [esp + 0xec], ecx
mov dword [esp + 0xe4], ecx
call fcn.004df9b3
add esp, 4
test eax, eax
jne 0x4d3197
mov byte [esp + 0x13], al
lea eax, [esp + 0x13]
push 0x51c2c8
push eax
call fcn.004ea58e
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 3
mov byte [eax], 0
mov byte [esp + 0x100], 3
xorps xmm0, xmm0
movq qword [esp + 0x28], xmm0
push 4
mov dword [esp + 0x34], 0
mov dword [esp + 0x2c], 0
call fcn.004df9b3
add esp, 4
test eax, eax
jne 0x4d31f9
mov byte [esp + 0x11], al
lea eax, [esp + 0x11]
push 0x51c2c8
push eax
call fcn.004ea58e
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 3
mov byte [eax], 0
lea edx, [esp + 0x28]
mov byte [esp + 0x100], 4
lea ecx, [esp + 0xe0]
call fcn.0045ea90
push dword [esp + 0xe0]
lea ecx, [esp + 0x3c]
call fcn.00412a60
push dword [esp + 0x38]
push 0x6b
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + 0x28]
cmp dword [esp + 0xe4], eax
jne 0x4d328e
mov eax, dword [esp + 0xe0]
mov ecx, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4d3281
test dl, dl
je 0x4d327d
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4d3281
add eax, 2
add ecx, 2
test dl, dl
jne 0x4d3261
xor eax, eax
jmp 0x4d3286
sbb eax, eax
or eax, 1
test eax, eax
je 0x4d32ab
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x4d32ab
push esi
lea ecx, [esp + 0x3c]
call fcn.00412a60
push dword [esp + 0x38]
push 0x6c
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
push esi
mov byte [esp + 0x104], 3
call fcn.004df97b
add esp, 4
mov byte [esp + 0x100], 2
push dword [esp + 0xe0]
call fcn.004df97b
add esp, 4
mov dword [esp + 0x30], 0
xorps xmm0, xmm0
movq qword [esp + 0x28], xmm0
mov dword [esp + 0x28], 0
push 4
call fcn.004df9b3
add esp, 4
test eax, eax
jne 0x4d330d
mov byte [esp + 0x11], al
lea eax, [esp + 0x11]
push 0x51c2c8
push eax
call fcn.004ea58e
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 3
mov byte [eax], 0
lea ecx, [esp + 0x28]
mov byte [esp + 0x100], 5
call fcn.0045eb10
mov esi, dword [esp + 0x28]
lea ecx, [esp + 0x38]
push esi
call fcn.00412a60
push dword [esp + 0x38]
push 0x6a
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
push esi
mov byte [esp + 0x104], 2
call fcn.004df97b
add esp, 4
lea ecx, [esp + 0x38]
push str.FileExtr.actor_1.00__x86_
call fcn.00412a60
mov esi, dword [esp + 0x38]
push esi
push 0x69
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
push esi
mov dword [esp + 0x104], 0xffffffff
call fcn.004df97b
add esp, 4
mov eax, 1
cmp edi, eax
mov esi, 0x100
cmovb edi, eax
cmp edi, esi
cmovb esi, edi
cmp dword [ebx + 0x38], 0xffffffff
jne 0x4d33be
mov dword [ebx + 0x38], esi
cmp esi, eax
jbe 0x4d33be
mov eax, esi
and eax, 0xfffffffe
mov dword [ebx + 0x38], eax
push 0x67
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebx + 0xc], eax
lea ecx, [esi + esi]
xor eax, eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], eax
lea edi, [eax + 1]
cmp ecx, edi
jb 0x4d342d
lea edx, [esp + 0x58]
mov ecx, edi
call fcn.00411090
lea eax, [esp + 0x58]
push eax
push 0
push 0x143
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
push edi
mov esi, eax
push esi
push 0x151
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp edi, dword [ebx + 0x38]
mov eax, dword [esp + 0x14]
cmovbe eax, esi
mov dword [esp + 0x14], eax
cmp edi, 1
jbe 0x4d3426
inc edi
inc edi
cmp edi, dword [esp + 0x18]
jbe 0x4d33e0
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push eax
push 0x14e
push dword [ebx + 0xc]
call esi
push 0
push 0
push 0x147
push dword [ebx + 0xc]
call esi
push 0
push eax
push 0x150
push dword [ebx + 0xc]
call esi
push 0x65
push dword [ebx + 4]
mov dword [ebx + 0x38], eax
call dword [sym.imp.USER32.dll_GetDlgItem]
lea ecx, [ebx + 0x20]
mov dword [ebx + 8], eax
mov dword [esp + 0x14], 0
mov dword [ebx + 0x20], SysReAllocStringLen
mov dword [ebx + 0x24], 0
call fcn.0041ed50
cmp dword [ebx + 0x34], 0xffffffff
mov byte [ebx + 0x28], al
jne 0x4d3541
mov edi, 0x19
test al, al
je 0x4d3531
mov eax, dword [ebx + 0x20]
mov dword [esp + 0x38], eax
mov eax, dword [ebx + 0x24]
mov ebx, dword [esp + 0x20]
mov dword [esp + 0xe0], eax
mov ebx, dword [ebx + 8]
lea esp, [esp]
mov edx, 1
mov ecx, edi
shl edx, cl
mov dword [esp + 0x18], edx
cmp ebx, 1
ja 0x4d34da
xor cl, cl
mov dword [esp + 0x1c], ebx
jmp 0x4d34e4
mov eax, ebx
mov cl, 1
shr eax, 1
mov dword [esp + 0x1c], eax
xor esi, esi
call fcn.0045bb60
mov ecx, dword [esp + 0x18]
add ecx, 0x100000
push 0
push dword [esp + 0x20]
adc esi, esi
shld esi, ecx, 1
add ecx, ecx
add eax, ecx
adc edx, esi
push edx
push eax
call fcn.004e6eb0
add eax, 0x800000
adc edx, 0
cmp edx, dword [esp + 0xe0]
jb 0x4d352d
ja 0x4d3527
cmp eax, dword [esp + 0x38]
jbe 0x4d352d
dec edi
cmp edi, 0x12
ja 0x4d34c0
mov ebx, dword [esp + 0x24]
mov esi, 1
mov ecx, edi
mov eax, esi
shl eax, cl
mov dword [ebx + 0x34], eax
jmp 0x4d3546
mov esi, 1
cmp dword [ebx + 0x34], 0x200000
jae 0x4d3556
mov dword [ebx + 0x34], 0x200000
cmp dword [ebx + 0x34], 0x8000000
jbe 0x4d3566
mov dword [ebx + 0x34], 0x8000000
mov edx, 0x15
mov dword [esp + 0x18], edx
nop
xor eax, eax
mov ecx, edx
rol esi, cl
mov dword [esp + 0x20], eax
mov dword [esp + 0x38], esi
mov edi, edi
lea ecx, [edx - 1]
mov edi, eax
shl edi, cl
add edi, esi
cmp edi, 0x8000000
ja 0x4d364c
mov edx, edi
xor ecx, ecx
shr edx, 0x14
mov dword [esp + 0x1c], edx
cmp edx, 0xa
jb 0x4d35d4
mov eax, 0xcccccccd
mul edx
shr edx, 3
mov al, dl
mov bl, dl
shl al, 2
add bl, al
mov eax, dword [esp + 0x1c]
add bl, bl
mov dword [esp + 0x1c], edx
sub al, bl
add al, 0x30
mov byte [esp + ecx + 0x58], al
inc ecx
cmp edx, 0xa
jae 0x4d35a5
mov ebx, dword [esp + 0x24]
lea eax, [edx + 0x30]
mov word [esp + 0x7c], ax
lea edx, [esp + 0x7e]
test ecx, ecx
je 0x4d35f4
movzx eax, byte [esp + ecx + 0x57]
dec ecx
mov word [edx], ax
add edx, 2
test ecx, ecx
jne 0x4d35e4
xor eax, eax
mov word [edx], ax
lea eax, [esp + 0x7c]
push 0x506b3c
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [esp + 0x7c]
push eax
push 0
push 0x143
push dword [ebx + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
push edi
mov esi, eax
push esi
push 0x151
push dword [ebx + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [esp + 0x14]
cmp edi, dword [ebx + 0x34]
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
cmovbe ecx, esi
mov esi, dword [esp + 0x38]
mov dword [esp + 0x14], ecx
jmp 0x4d3650
mov ecx, dword [esp + 0x14]
inc eax
mov dword [esp + 0x20], eax
cmp eax, 2
jb 0x4d3580
inc edx
mov esi, 1
mov dword [esp + 0x18], edx
cmp edx, 0x1e
jbe 0x4d3570
push 0
push ecx
push 0x14e
push dword [ebx + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, ebx
call fcn.004d3be0
push dword [ebx + 0x48]
call dword [sym.imp.KERNEL32.dll_SetEvent]
test eax, eax
jne 0x4d369c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0
push 0x3e8
push 4
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SetTimer]
cmp byte [ebx + 0x160], 0
mov dword [ebx + 0x14], eax
push 0
je 0x4d374c
lea eax, [esp + 0x2c]
push eax
push 0
push 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
mov edi, dword [esp + 0x30]
lea eax, [esp + 0x38]
mov esi, dword [esp + 0x34]
sub edi, dword [esp + 0x28]
sub esi, dword [esp + 0x2c]
push eax
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
sub eax, dword [esp + 0x38]
sub edx, dword [esp + 0x3c]
cmp eax, edi
jg 0x4d3709
cmp edx, esi
jg 0x4d3709
xor cl, cl
jmp 0x4d370b
mov cl, 1
cmp eax, edi
jg 0x4d3713
test cl, cl
je 0x4d3723
mov eax, dword [esp + 0x28]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x40], eax
cmp edx, esi
jg 0x4d372b
test cl, cl
je 0x4d379a
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x44], eax
test cl, cl
je 0x4d379a
push 3
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x4d379a
lea eax, [esp + 0x5c]
push eax
push 0
push 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
lea eax, [esp + 0x48]
push eax
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x54]
cmp eax, dword [esp + 0x64]
jle 0x4d379a
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x5c]
cmp ecx, edx
jle 0x4d379a
push 1
sub eax, ecx
mov ecx, dword [esp + 0x4c]
push eax
mov eax, dword [esp + 0x58]
sub eax, ecx
push eax
push edx
push ecx
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_MoveWindow]
mov al, 1
mov ecx, dword [esp + 0xf8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xe0]
xor ecx, esp
call fcn.004df96c
mov esp, ebp
pop ebp
ret