Function at 0x404a00
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42f9dd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x240
push ebx
mov ebx, dword [0x44525c]
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x24], edi
call fcn.00401e80
mov ecx, eax
test ecx, ecx
je 0x405214
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x18], esi
push 0x1ff
lea eax, [ebp - 0x228]
mov dword [ebp - 4], 0
push eax
push 0x7ef
push edi
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
lea eax, [ebp - 0x228]
push 0x43adf0
push eax
call fcn.0041fb07
add esp, 8
test eax, eax
jne 0x404a8d
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edi, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
jmp 0x404a9e
lea eax, [ebp - 0x228]
push eax
call fcn.0040a280
add esp, 4
mov edi, edx
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x24c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x23c]
jne 0x404acb
test edi, edi
jne 0x404acb
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edi, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebx + 0x10]
jne 0x404ad5
cmp edi, dword [ebx + 0x14]
je 0x404ae2
mov dword [ebx + 0x10], eax
mov dword [ebx + 0x14], edi
mov byte [0x445258], 1
push 0x438
push dword [ebp - 0x24]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x147
push eax
mov dword [ebp - 0x10], eax
call edi
mov dword [ebp - 0x14], eax
cmp eax, 0xffffffff
je 0x404b8e
push 0
push eax
push 0x149
push dword [ebp - 0x10]
call edi
cmp eax, 0x1ff
jg 0x404b8e
xor eax, eax
mov word [ebp - 0x228], ax
lea eax, [ebp - 0x228]
push eax
push dword [ebp - 0x14]
push 0x148
push dword [ebp - 0x10]
call edi
test eax, eax
je 0x404b8e
lea ecx, [ebp - 0x228]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x404b50
sub ecx, edx
sar ecx, 1
je 0x404b8e
lea eax, [ebp - 0x228]
push eax
call fcn.004238dc
mov ecx, eax
mov dword [ebp - 0x14], 0
cdq
add esp, 4
cmp dword [ebx + 0x20], eax
jne 0x404b84
cmp dword [ebp - 0x14], edx
je 0x404b8e
mov dword [ebx + 0x20], ecx
mov byte [0x445258], 1
push 0x437
push dword [ebp - 0x24]
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0
push 0x147
push eax
mov dword [ebp - 0x10], eax
call edi
mov dword [ebp - 0x14], eax
cmp eax, 0xffffffff
je 0x404c33
push 0
push eax
push 0x149
push dword [ebp - 0x10]
call edi
cmp eax, 0x1ff
jg 0x404c33
xor eax, eax
mov word [ebp - 0x228], ax
lea eax, [ebp - 0x228]
push eax
push dword [ebp - 0x14]
push 0x148
push dword [ebp - 0x10]
call edi
test eax, eax
je 0x404c33
lea ecx, [ebp - 0x228]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x404bf5
sub ecx, edx
sar ecx, 1
je 0x404c33
lea eax, [ebp - 0x228]
push eax
call fcn.004238dc
mov ecx, eax
mov dword [ebp - 0x14], 0
cdq
add esp, 4
cmp dword [ebx + 0x1c], eax
jne 0x404c29
cmp dword [ebp - 0x14], edx
je 0x404c33
mov dword [ebx + 0x1c], ecx
mov byte [0x445258], 1
push 0x43b
push dword [ebp - 0x24]
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0
push 0x147
push eax
mov dword [ebp - 0x10], eax
call edi
mov dword [ebp - 0x14], eax
cmp eax, 0xffffffff
je 0x404d09
push 0
push eax
push 0x149
push dword [ebp - 0x10]
call edi
cmp eax, 0x1ff
jg 0x404d09
xor eax, eax
mov word [ebp - 0x228], ax
lea eax, [ebp - 0x228]
push eax
push dword [ebp - 0x14]
push 0x148
push dword [ebp - 0x10]
call edi
test eax, eax
je 0x404d09
lea ecx, [ebp - 0x228]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x404ca0
sub ecx, edx
sar ecx, 1
je 0x404d09
cmp word [ebp - 0x228], ax
jne 0x404cc3
mov eax, 0xffffffff
xor edx, edx
jmp 0x404cd3
lea eax, [ebp - 0x228]
push eax
call fcn.004238dc
add esp, 4
cdq
cmp byte [ebx + 0xd], 0
je 0x404ce1
mov ecx, dword [ebx + 0x2c]
cmp ecx, 0xffffffff
jne 0x404ce4
or ecx, 0xffffffff
mov dword [ebp - 0x14], 0
cmp ecx, eax
jne 0x404cf4
cmp dword [ebp - 0x14], edx
je 0x404d09
cmp eax, 0xffffffff
jne 0x404cff
mov byte [ebx + 0xd], 0
jmp 0x404d02
mov dword [ebx + 0x2c], eax
mov byte [0x445258], 1
push 0
lea eax, [ebp - 0x28]
push eax
push 0x436
push dword [ebp - 0x24]
call dword [sym.imp.USER32.dll_GetDlgItemInt]
cmp dword [ebx + 0x18], eax
je 0x404d2c
mov dword [ebx + 0x18], eax
mov byte [0x445258], 1
push 0x439
push dword [ebp - 0x24]
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0
push 0x147
push eax
mov dword [ebp - 0x10], eax
call edi
mov dword [ebp - 0x14], eax
cmp eax, 0xffffffff
je 0x404ec3
push 0
push eax
push 0x149
push dword [ebp - 0x10]
call edi
cmp eax, 0x1ff
jg 0x404ec3
xor eax, eax
mov word [ebp - 0x228], ax
lea eax, [ebp - 0x228]
push eax
push dword [ebp - 0x14]
push 0x148
push dword [ebp - 0x10]
call edi
test eax, eax
je 0x404ec3
lea ecx, [ebp - 0x228]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x404da0
sub ecx, edx
sar ecx, 1
je 0x404ec3
mov edx, dword [ebx + 0x34]
lea ecx, [esi - 0x10]
mov dword [ebp - 0x10], ecx
lea eax, [edx - 0x10]
mov dword [ebp - 0x14], eax
cmp eax, ecx
je 0x404e16
cmp dword [ecx + 0xc], 0
lea esi, [ecx + 0xc]
jl 0x404e07
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x404e07
push dword [ebp - 0x14]
call fcn.00402560
add esp, 4
mov dword [ebp - 0x14], eax
or ecx, 0xffffffff
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x404dff
mov esi, dword [ebp - 0x10]
push esi
mov ecx, dword [esi]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x14]
lea esi, [eax + 0x10]
mov dword [ebp - 0x18], esi
jmp 0x404e16
push dword [edx - 0xc]
lea ecx, [ebp - 0x18]
push edx
call fcn.00401840
mov esi, dword [ebp - 0x18]
lea eax, [ebp - 0x228]
push eax
push esi
call fcn.0041fb07
add esp, 8
test eax, eax
je 0x404ec3
lea ecx, [ebp - 0x228]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x404e37
sub ecx, edx
lea eax, [ebp - 0x228]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x18]
call fcn.00401840
mov esi, dword [ebp - 0x18]
mov ecx, dword [ebx + 0x34]
sub ecx, 0x10
mov dword [ebp - 0x10], ecx
lea eax, [esi - 0x10]
cmp eax, ecx
je 0x404ebc
cmp dword [ecx + 0xc], 0
lea eax, [ecx + 0xc]
mov dword [ebp - 0x14], eax
jl 0x404eb0
mov eax, dword [esi - 0x10]
cmp eax, dword [ecx]
jne 0x404eb0
lea eax, [esi - 0x10]
push eax
call fcn.00402560
mov edx, dword [ebp - 0x14]
add esp, 4
mov dword [ebp - 0x1c], eax
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x404ea8
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [eax]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x1c]
add eax, 0x10
mov dword [ebx + 0x34], eax
jmp 0x404ebc
push dword [esi - 0xc]
lea ecx, [ebx + 0x34]
push esi
call fcn.00401840
mov byte [0x445258], 1
push 0x43a
push dword [ebp - 0x24]
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0
push 0x147
push eax
mov dword [ebp - 0x10], eax
call edi
mov dword [ebp - 0x1c], eax
cmp eax, 0xffffffff
je 0x40505c
push 0
push eax
push 0x149
push dword [ebp - 0x10]
call edi
cmp eax, 0x1ff
jg 0x40505c
xor eax, eax
mov word [ebp - 0x228], ax
lea eax, [ebp - 0x228]
push eax
push dword [ebp - 0x1c]
push 0x148
push dword [ebp - 0x10]
call edi
test eax, eax
je 0x40505c
lea ecx, [ebp - 0x228]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x404f32
sub ecx, edx
sar ecx, 1
je 0x40505c
mov edx, dword [ebx + 0x38]
lea ecx, [esi - 0x10]
mov dword [ebp - 0x14], ecx
lea eax, [edx - 0x10]
mov dword [ebp - 0x1c], eax
cmp eax, ecx
je 0x404fa8
cmp dword [ecx + 0xc], 0
lea esi, [ecx + 0xc]
jl 0x404f99
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x404f99
push dword [ebp - 0x1c]
call fcn.00402560
add esp, 4
mov dword [ebp - 0x1c], eax
or ecx, 0xffffffff
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x404f91
mov esi, dword [ebp - 0x14]
push esi
mov ecx, dword [esi]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x1c]
lea esi, [eax + 0x10]
mov dword [ebp - 0x18], esi
jmp 0x404fa8
push dword [edx - 0xc]
lea ecx, [ebp - 0x18]
push edx
call fcn.00401840
mov esi, dword [ebp - 0x18]
lea eax, [ebp - 0x228]
push eax
push esi
call fcn.0041fb07
add esp, 8
test eax, eax
je 0x40505c
lea ecx, [ebp - 0x228]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x404fd0
sub ecx, edx
lea eax, [ebp - 0x228]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x18]
call fcn.00401840
mov esi, dword [ebp - 0x18]
mov ecx, dword [ebx + 0x38]
sub ecx, 0x10
mov dword [ebp - 0x14], ecx
lea eax, [esi - 0x10]
cmp eax, ecx
je 0x405055
cmp dword [ecx + 0xc], 0
lea eax, [ecx + 0xc]
mov dword [ebp - 0x1c], eax
jl 0x405049
mov eax, dword [esi - 0x10]
cmp eax, dword [ecx]
jne 0x405049
lea eax, [esi - 0x10]
push eax
call fcn.00402560
mov edx, dword [ebp - 0x1c]
add esp, 4
mov dword [ebp - 0x10], eax
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x405041
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [eax]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x10]
add eax, 0x10
mov dword [ebx + 0x38], eax
jmp 0x405055
push dword [esi - 0xc]
lea ecx, [ebx + 0x38]
push esi
call fcn.00401840
mov byte [0x445258], 1
push 0x3e9
push dword [ebp - 0x24]
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0
push 0x147
push eax
mov dword [ebp - 0x10], eax
call edi
mov dword [ebp - 0x1c], eax
cmp eax, 0xffffffff
je 0x4051e4
push 0
push eax
push 0x149
push dword [ebp - 0x10]
call edi
cmp eax, 0x1ff
jg 0x4051e4
xor eax, eax
mov word [ebp - 0x228], ax
lea eax, [ebp - 0x228]
push eax
push dword [ebp - 0x1c]
push 0x148
push dword [ebp - 0x10]
call edi
test eax, eax
je 0x4051e4
lea ecx, [ebp - 0x228]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4050d0
sub ecx, edx
sar ecx, 1
je 0x4051e4
mov ecx, dword [ebx + 0x30]
lea edi, [esi - 0x10]
lea edx, [ecx - 0x10]
cmp edx, edi
je 0x40513b
cmp dword [edi + 0xc], 0
lea esi, [edi + 0xc]
jl 0x40512c
mov eax, dword [edx]
cmp eax, dword [edi]
jne 0x40512c
push edx
call fcn.00402560
add esp, 4
mov dword [ebp - 0x1c], eax
or ecx, 0xffffffff
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x405124
mov ecx, dword [edi]
push edi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x1c]
lea esi, [eax + 0x10]
mov dword [ebp - 0x18], esi
jmp 0x40513b
push dword [ecx - 0xc]
push ecx
lea ecx, [ebp - 0x18]
call fcn.00401840
mov esi, dword [ebp - 0x18]
lea eax, [ebp - 0x228]
push eax
push esi
call fcn.0041fb07
add esp, 8
test eax, eax
je 0x4051e4
lea ecx, [ebp - 0x228]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x405160
sub ecx, edx
lea eax, [ebp - 0x228]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x18]
call fcn.00401840
mov esi, dword [ebp - 0x18]
lea ecx, [ebx + 0x30]
mov byte [ebx + 0xd], 1
mov edi, dword [ecx]
sub edi, 0x10
mov dword [ebp - 0x14], ecx
lea edx, [esi - 0x10]
cmp edx, edi
je 0x4051dd
cmp dword [edi + 0xc], 0
lea ebx, [edi + 0xc]
jl 0x4051d4
mov eax, dword [edx]
cmp eax, dword [edi]
jne 0x4051d4
push edx
call fcn.00402560
add esp, 4
mov dword [ebp - 0x1c], eax
or ecx, 0xffffffff
lock xadd dword [ebx], ecx
dec ecx
test ecx, ecx
jg 0x4051ca
mov ecx, dword [edi]
push edi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x14]
add eax, 0x10
mov dword [ecx], eax
jmp 0x4051dd
push dword [esi - 0xc]
push esi
call fcn.00401840
mov byte [0x445258], 1
mov dword [ebp - 4], 0xffffffff
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x405203
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00401f80
int3