Function at 0x10009110
Capabilities:
Get system information on windows
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005c708
mov eax, dword fs:[0]
push eax
sub esp, 0x348
mov eax, dword [0x10070660]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x21a]
push ecx
mov word [ebp - 0x21c], ax
call fcn.1003bac0
mov edi, dword [0x100742e4]
lea edx, [ebp - 0x2cc]
add esp, 0xc
push edx
call fcn.10015930
add esp, 4
push str.FunNail.daw
push eax
lea eax, [ebp - 0x2c8]
push eax
mov dword [ebp - 4], 0
call fcn.10001510
mov eax, dword [eax]
add esp, 0xc
push eax
push 0x104
lea ecx, [ebp - 0x21c]
push ecx
push str.2048
push str.build
push str.type
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov eax, dword [ebp - 0x2c8]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x100091d3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x2cc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100091fc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [ebp - 0x2c4]
push ecx
call 0x1001e490
lea esi, [ebp - 0x2e4]
mov dword [ebp - 4], 1
call fcn.100090f0
lea edx, [ebp - 0x354]
push edx
mov byte [ebp - 4], 2
call 0x1001f5f0
lea eax, [ebp - 0x2d0]
push eax
mov ecx, 0x10061c7c
mov byte [ebp - 4], 3
call fcn.10001bb0
lea esi, [ebp - 0x2d4]
mov byte [ebp - 4], 4
call 0x10017650
lea esi, [ebp - 0x2cc]
mov byte [ebp - 4], 5
call 0x10017650
mov byte [ebp - 4], 6
mov eax, dword [eax]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
lea ecx, [ebp - 0x2c8]
push ecx
mov ecx, eax
call fcn.10001bb0
lea esi, [ebp - 0x2c8]
lea edi, [ebp - 0x2d8]
mov byte [ebp - 4], 7
call 0x10020050
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x2c8]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x100092b3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x2cc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100092d9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [ebp - 0x2d4]
push ecx
lea esi, [ebp - 0x2e0]
call 0x1001fdd0
add esp, 4
lea edx, [ebp - 0x240]
push edx
mov byte [ebp - 4], 0xb
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov ax, word [ebp - 0x240]
cmp ax, 9
je 0x10009312
cmp ax, 6
jne 0x10009319
mov ecx, str.FunWorks64
jmp 0x1000931e
mov ecx, str.FunWorks
lea eax, [ebp - 0x2dc]
push eax
call fcn.10001bb0
lea ecx, [ebp - 0x354]
push ecx
lea esi, [ebp - 0x30c]
mov byte [ebp - 4], 0xc
call 0x1001fd30
mov ebx, eax
lea edx, [ebp - 0x354]
push edx
lea esi, [ebp - 0x304]
mov byte [ebp - 4], 0xd
call 0x1001f8a0
mov dword [ebp - 0x2f8], eax
mov byte [ebp - 4], 0xe
mov edi, dword [0x100742e4]
lea ecx, [ebp - 0x2fc]
call 0x10017550
mov esi, eax
push 0x100632b0
lea eax, [ebp - 0x2e0]
push eax
lea ecx, [ebp - 0x2f4]
push ecx
mov byte [ebp - 4], 0xf
call fcn.10001510
add esp, 0xc
push esi
push eax
lea edx, [ebp - 0x2ec]
push edx
mov byte [ebp - 4], 0x10
call fcn.10003c80
add esp, 0xc
mov dword [ebp - 0x314], eax
push 0x100632b0
lea eax, [ebp - 0x2d8]
push eax
lea ecx, [ebp - 0x31c]
push ecx
mov byte [ebp - 4], 0x11
call fcn.10001510
add esp, 0xc
lea edx, [ebp - 0x2dc]
push edx
push eax
lea eax, [ebp - 0x308]
push eax
mov byte [ebp - 4], 0x12
call fcn.10003c80
add esp, 0xc
mov dword [ebp - 0x328], eax
mov byte [ebp - 4], 0x13
test byte [0x100742a8], 1
jne 0x10009410
or dword [0x100742a8], 1
push 0x1005d2a0
call fcn.10036a73
add esp, 4
lea ecx, [ebp - 0x318]
push ecx
call 0x1001e140
mov dword [ebp - 0x324], eax
mov byte [ebp - 4], 0x14
test byte [0x100742a8], 1
mov esi, dword [0x100742e4]
jne 0x10009449
or dword [0x100742a8], 1
push 0x1005d2a0
call fcn.10036a73
add esp, 4
mov edx, esi
lea ecx, [ebp - 0x300]
call 0x1001e200
mov dword [ebp - 0x2f0], eax
mov byte [ebp - 4], 0x15
test byte [0x100742a8], 1
mov edi, dword [0x100742e4]
jne 0x10009483
or dword [0x100742a8], 1
push 0x1005d2a0
call fcn.10036a73
add esp, 4
lea edx, [ebp - 0x320]
push edx
call 0x1001df10
mov esi, eax
lea eax, [ebp - 0x2e8]
push eax
lea ecx, [ebp - 0x354]
push ecx
mov byte [ebp - 4], 0x16
call 0x1001fbf0
mov edi, eax
mov byte [ebp - 4], 0x17
mov edx, dword [0x100742e4]
push edx
lea eax, [ebp - 0x310]
push eax
lea ecx, [ebp - 0x354]
push ecx
call 0x1001f940
mov ecx, dword [ebp - 0x2f8]
mov byte [ebp - 4], 0x18
mov edx, dword [ebx]
push edx
mov edx, dword [ecx]
push edx
mov edx, dword [ebp - 0x314]
lea ecx, [ebp - 0x21c]
push ecx
mov ecx, dword [edx]
mov edx, dword [ebp - 0x328]
push ecx
mov ecx, dword [edx]
mov edx, dword [ebp - 0x324]
push ecx
mov ecx, dword [edx]
mov edx, dword [ebp - 0x2f0]
push ecx
mov ecx, dword [edx]
mov edx, dword [esi]
push ecx
mov ecx, dword [edi]
push edx
mov edx, dword [eax]
push ecx
push edx
push 0
push ecx
call fcn.10008f20
mov ecx, dword [ebp - 0x2e4]
add esp, 4
push eax
mov eax, dword [ebp + 8]
push eax
push ecx
push str._s_bootmethod_d_clientstate_d_synctoolstate_d_mac_s_guid_s_name_s_version_s_os_s_pullname_s_pullversion_s_channelid_s_cid_s_aptid_s
lea edi, [ebp - 0x2d0]
call fcn.100026d0
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x310]
add eax, 0xfffffff0
add esp, 0x3c
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x1000955c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x2e8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10009582
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x320]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100095a8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0x300]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100095ce
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x318]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100095f4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x308]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1000961a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x31c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10009640
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x2ec]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10009666
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x2f4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1000968c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x2fc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100096b2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x304]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100096d8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x30c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100096fe
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x2d0]
xor ecx, ecx
mov word [ebp - 0x238], cx
mov edi, 7
mov ecx, eax
mov dword [ebp - 0x224], edi
mov dword [ebp - 0x228], 0
lea esi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x10009727
sub ecx, esi
sar ecx, 1
push ecx
lea ecx, [ebp - 0x238]
call fcn.10002b50
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x238]
lea eax, [ebp - 0x2c4]
mov byte [ebp - 0x24c], 0
call 0x1001e970
test al, al
je 0x10009777
lea esi, [ebp - 0x2c4]
call 0x1001e5d0
test al, al
jne 0x100097b5
mov byte [ebp - 0x24c], al
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x238]
lea eax, [ebp - 0x2c4]
mov byte [ebp - 0x24c], 0
call 0x1001e970
test al, al
je 0x100097be
lea esi, [ebp - 0x2c4]
call 0x1001e5d0
test al, al
jne 0x100097b5
mov byte [ebp - 0x24c], al
jmp 0x100097be
mov byte [ebp - 0x24c], 1
mov al, 1
cmp dword [ebp - 0x224], 8
movzx ebx, al
jb 0x100097d9
mov edx, dword [ebp - 0x238]
push edx
call fcn.100368b0
add esp, 4
xor eax, eax
mov word [ebp - 0x238], ax
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x2dc]
add eax, 0xfffffff0
mov dword [ebp - 0x224], edi
mov dword [ebp - 0x228], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10009818
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x2e0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1000983e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x2d8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10009864
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x2d4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1000988a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x2d0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100098b0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x32c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100098d6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [ebp - 0x354]
call 0x1001f770
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x2e4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10009907
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea esi, [ebp - 0x2c4]
call 0x1001e540
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100368bb
mov esp, ebp
pop ebp
ret 4