Function at 0x42f160
Capabilities:
Get system information on windows

Disassembly:
sub esp, 0x28
push ebx
push ebp
mov ebp, dword [esp + 0x34]
push esi
push edi
push ebp
call fcn.00422510
xor ebx, ebx
lea esi, [ebp + 0x2a34]
mov dword [ebp + 0x2a2c], 0x6dc5e4
mov dword [ebp + 0x2a30], ebx
call fcn.004bf6f0
push 0x2c
lea edi, [ebp + 0x2a40]
push ebx
mov dword [ebp + 0x2a3c], 0x6dc448
push edi
mov dword [edi], 0x721358
call fcn.006a1300
mov dword [ebp + 0x2a44], 0x6dbd6c
mov dword [ebp + 0x2a48], ebx
mov dword [ebp + 0x2a4c], 0x6dbd6c
mov dword [ebp + 0x2a50], 0x6dbd6c
mov dword [ebp + 0x2a54], ebx
mov byte [ebp + 0x2a58], bl
mov dword [ebp + 0x2a59], 0x6dd098
mov dword [ebp], 0x6dd900
mov dword [ebp + 0x36], 0x6dd948
mov dword [ebp + 0x3e], 0x6dd95c
mov dword [ebp + 0x4a], 0x6dd964
mov dword [ebp + 0x2a2c], 0x6dc5e4
mov dword [esi], 0x6dd968
mov dword [ebp + 0x2a3c], 0x6dd96c
mov dword [edi], 0x6dd97c
mov dword [ebp + 0x2a44], 0x6dd99c
mov dword [ebp + 0x2a4c], 0x6dd9a0
mov dword [ebp + 0x2a50], 0x6dd9a4
mov dword [ebp + 0x2a59], 0x6dd9a8
mov dword [ebp + 0x2a69], ebx
mov dword [ebp + 0x2a65], ebx
mov dword [ebp + 0x2a61], ebx
mov dword [ebp + 0x2a5d], ebx
mov dword [ebp + 0x2a8d], ebx
mov dword [ebp + 0x2a91], ebx
mov dword [ebp + 0x2a95], 0x64
mov dword [ebp + 0x2a99], ebx
add esp, 0xc
lea eax, [ebp + 0x2aad]
push eax
mov dword [0x736604], edi
mov dword [ebp + 0x2aa9], ebx
mov dword [ebp + 0x2aa5], ebx
mov dword [ebp + 0x2aa1], ebx
mov dword [ebp + 0x2a9d], ebx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov word [ebp + 0x2ac5], bx
mov dword [ebp + 0x2ed5], ebx
mov dword [ebp + 0x2ed9], ebx
mov dword [ebp + 0x2edd], ebx
mov dword [ebp + 0x2ee1], ebx
mov dword [ebp + 0x2ee9], ebx
mov dword [ebp + 0x2ee5], ebx
mov dword [ebp + 0x2eed], ebx
lea edi, [ebp + 0x2ef9]
xor al, al
mov dword [ebp + 0x2ef1], ebx
mov dword [ebp + 0x2ef5], ebx
call fcn.005128a0
mov dword [0x736508], edi
mov byte [ebp + 0x362a], bl
mov byte [ebp + 0x362b], bl
mov byte [ebp + 0x362c], 1
mov byte [ebp + 0x362d], bl
mov byte [ebp + 0x362e], bl
mov byte [ebp + 0x362f], bl
mov byte [ebp + 0x3630], bl
mov byte [ebp + 0x3631], bl
mov byte [ebp + 0x3632], bl
mov byte [ebp + 0x3633], bl
mov byte [ebp + 0x3634], bl
push 1
push str.ControlCollapsed
mov eax, str.Settings
mov byte [ebp + 0x3635], 1
mov byte [ebp + 0x3636], bl
mov byte [ebp + 0x3637], bl
mov byte [ebp + 0x3638], bl
mov byte [ebp + 0x3639], bl
mov byte [ebp + 0x363a], bl
mov byte [ebp + 0x363b], bl
mov byte [ebp + 0x363c], bl
mov byte [ebp + 0x363d], bl
mov byte [ebp + 0x363e], bl
mov byte [ebp + 0x363f], bl
mov byte [ebp + 0x3640], bl
call fcn.00480fe0
mov byte [ebp + 0x3641], al
mov dword [ebp + 0x3642], ebx
mov dword [ebp + 0x3646], ebx
mov dword [ebp + 0x364a], ebx
lea ecx, [ebp + 0x365a]
mov dword [ebp + 0x364e], ebx
push ecx
mov dword [ebp + 0x3652], ebx
mov dword [ebp + 0x3656], 1
call fcn.004532e0
lea edi, [ebp + 0x7e8c]
call fcn.0044d950
push 1
push str.CaptureSound
mov eax, str.Settings
mov dword [ebp + 0x8218], ebx
mov dword [ebp + 0x821c], ebx
mov dword [ebp + 0x8220], ebx
mov dword [ebp + 0x8224], ebx
mov dword [ebp + 0x8228], ebx
mov dword [ebp + 0x822c], ebx
call fcn.00480fe0
test al, al
je 0x42f42e
push str.QAjh
call fcn.004bf140
neg al
sbb eax, eax
and eax, 6
add eax, 1
jmp 0x42f430
xor eax, eax
lea esi, [ebp + 0x823a]
mov dword [ebp + 0x8230], eax
mov byte [ebp + 0x8234], bl
mov byte [ebp + 0x8235], bl
mov byte [ebp + 0x8236], bl
mov byte [ebp + 0x8237], bl
mov byte [ebp + 0x8238], bl
mov byte [ebp + 0x8239], bl
call fcn.0051ee10
mov edx, dword [0x734df4]
push ebx
push ebx
push ebx
push 1
push 0x839
push edx
call dword [sym.imp.USER32.dll_LoadImageW]
mov esi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov dword [ebp + 0x8309], eax
lea eax, [ebp + 0x8316]
mov byte [ebp + 0x830d], bl
mov dword [ebp + 0x830e], ebx
push eax
mov dword [ebp + 0x8312], ebx
call esi
lea ecx, [ebp + 0x832e]
push ecx
call esi
push ebx
push ebx
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp + 0x8346], eax
lea esi, [ebp + 0x8968]
mov byte [ebp + 0x8962], bl
mov dword [ebp + 0x8963], ebx
mov byte [ebp + 0x8967], bl
call fcn.0047a310
lea eax, [ebp + 0xb9f0]
push eax
lea edx, [ebp + 0x479a]
push edx
lea eax, [ebp + 0x79b9]
push eax
lea edi, [ebp + 0x8bf7]
call fcn.0047c690
push ebx
push ebx
push 1
push ebx
mov dword [ebp + 0x92e0], 0x6dbc80
call dword [sym.imp.KERNEL32.dll_CreateEventW]
lea ecx, [ebp + 0x92ed]
push ecx
mov dword [ebp + 0x92e9], eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov dword [ebp + 0x92e4], ebx
mov dword [ebp + 0x9305], ebx
lea edi, [ebp + 0x930d]
mov byte [ebp + 0x92e8], bl
mov dword [ebp + 0x92e0], 0x6dcea0
call fcn.004523f0
lea edi, [ebp + 0x96d1]
call fcn.0044bc90
lea edx, [ebp + 0x9a31]
push edx
call fcn.004508a0
lea eax, [ebp + 0xa0f8]
call fcn.004238d0
lea esi, [ebp + 0xa231]
mov word [esi], bx
call fcn.004ac170
lea eax, [ebp + 0xa645]
mov dword [ebp + 0xa439], ebx
call fcn.004078a0
lea eax, [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [esp + 0x28]
mov dword [0x736610], ecx
mov dword [ebp + 0xa69f], ebx
mov dword [ebp + 0xa6a3], 1
or edi, 0xffffffff
lea esi, [ebp + 0xa6ab]
mov dword [ebp + 0xa6a7], edi
call fcn.00454560
lea eax, [ebp + 0xa94e]
push 0x2c
push ebx
push eax
mov dword [eax + 0x28], ebx
mov dword [eax + 0x24], ebx
mov dword [eax + 0x20], ebx
mov dword [eax + 0x1c], ebx
call fcn.006a1300
add esp, 0xc
lea eax, [ebp + 0xa97a]
push 0x2c
push ebx
push eax
mov dword [eax + 0x28], ebx
mov dword [eax + 0x24], ebx
mov dword [eax + 0x20], ebx
mov dword [eax + 0x1c], ebx
call fcn.006a1300
add esp, 0xc
lea esi, [ebp + 0xa9a6]
call fcn.0041b170
lea esi, [ebp + 0xb933]
push 0x14
push esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
call fcn.0057b1d0
fld qword [0x7237b8]
mov dword [esi + 4], 0x14
mov dword [ebp + 0xb943], edi
mov byte [ebp + 0xb947], bl
mov byte [ebp + 0xb948], bl
mov byte [ebp + 0xb949], bl
mov dword [ebp + 0xb956], ebx
mov dword [ebp + 0xb952], ebx
mov dword [ebp + 0xb94e], ebx
mov dword [ebp + 0xb94a], ebx
mov dword [ebp + 0xb966], ebx
mov dword [ebp + 0xb962], ebx
mov dword [ebp + 0xb95e], ebx
mov dword [ebp + 0xb95a], ebx
fstp qword [ebp + 0xb96a]
lea eax, [ebp + 0xb997]
mov byte [ebp + 0xb972], bl
mov dword [ebp + 0xb973], 0x18
mov dword [ebp + 0xb977], 0x20
mov dword [ebp + 0xb97b], 0x1f4
mov dword [ebp + 0xb97f], ebx
mov dword [ebp + 0xb983], ebx
mov dword [ebp + 0xb987], ebx
mov dword [ebp + 0xb98b], ebx
mov dword [ebp + 0xb993], ebx
call fcn.004078a0
mov byte [ebp + 0xb9f0], bl
mov byte [ebp + 0xb9f1], bl
mov byte [ebp + 0xb9f2], bl
mov dword [ebp + 0xb9f3], ebx
mov dword [ebp + 0xb9f7], ebx
mov dword [ebp + 0xb9fb], ebx
mov dword [ebp + 0xb9ff], ebx
mov byte [ebp + 0xba03], bl
mov dword [ebp + 0xba04], ebx
mov byte [ebp + 0xba08], bl
lea esi, [ebp + 0xbc19]
mov dword [ebp + 0xba09], ebx
call fcn.00422ff0
lea esi, [ebp + 0xbe6f]
call fcn.0042dcf0
mov byte [ebp + 0xbf69], bl
mov byte [ebp + 0xbf6a], bl
mov byte [ebp + 0xbf6b], bl
lea edi, [ebp + 0xd3e4]
call fcn.00487f40
lea eax, [ebp + 0xd3ec]
mov byte [ebp + 0xd3e8], bl
call fcn.00419c30
mov esi, dword [sym.imp.USER32.dll_LoadCursorW]
mov byte [ebp + 0xd4fd], bl
mov dword [ebp + 0xd4fe], ebx
push 0x7f00
mov edi, 0x6dc048
push ebx
mov dword [ebp + 0xd916], ebx
mov dword [ebp + 0xd91a], ebx
mov dword [ebp + 0xd912], edi
mov dword [ebp + 0xd91e], ebx
mov dword [ebp + 0xd922], ebx
mov byte [ebp + 0xd926], bl
call esi
mov dword [ebp + 0xd927], eax
mov byte [ebp + 0xd92b], bl
mov dword [ebp + 0xd916], ebx
mov dword [ebp + 0xd91a], ebx
call fcn.0050e990
mov dword [ebp + 0xd912], 0x6de7b0
push 0x7f00
push ebx
mov dword [ebp + 0xd930], ebx
mov dword [ebp + 0xd934], ebx
mov dword [ebp + 0xd92c], edi
mov dword [ebp + 0xd938], ebx
mov dword [ebp + 0xd93c], ebx
mov byte [ebp + 0xd940], bl
call esi
mov dword [ebp + 0xd941], eax
mov byte [ebp + 0xd945], bl
mov dword [ebp + 0xd930], ebx
mov dword [ebp + 0xd934], ebx
call fcn.0050e990
mov dword [ebp + 0xd92c], 0x6de7b0
push 0x7f00
push ebx
mov dword [ebp + 0xd94a], ebx
mov dword [ebp + 0xd94e], ebx
mov dword [ebp + 0xd946], edi
mov dword [ebp + 0xd952], ebx
mov dword [ebp + 0xd956], ebx
mov byte [ebp + 0xd95a], bl
call esi
mov dword [ebp + 0xd95b], eax
mov byte [ebp + 0xd95f], bl
mov dword [ebp + 0xd94a], ebx
mov dword [ebp + 0xd94e], ebx
call fcn.0050e990
mov dword [ebp + 0xd946], 0x6de7b0
push 0x7f00
push ebx
mov dword [ebp + 0xd964], ebx
mov dword [ebp + 0xd968], ebx
mov dword [ebp + 0xd960], edi
mov dword [ebp + 0xd96c], ebx
mov dword [ebp + 0xd970], ebx
mov byte [ebp + 0xd974], bl
call esi
mov dword [ebp + 0xd975], eax
mov byte [ebp + 0xd979], bl
mov dword [ebp + 0xd964], ebx
mov dword [ebp + 0xd968], ebx
call fcn.0050e990
lea esi, [ebp + 0xd97a]
mov dword [ebp + 0xd960], 0x6de828
call fcn.004ed4c0
push 1
push str.ControlCollapsed
mov eax, str.Settings
mov dword [esi], 0x6de8a0
mov dword [esi + 0xd6], 0x6de8a8
mov byte [esi + 0xf0], bl
mov byte [esi + 0xf1], bl
call fcn.00480fe0
push ecx
mov byte [esi + 0xf2], al
mov eax, esp
lea esi, [ebp + 0xda6d]
mov dword [eax], 0x404040
call fcn.00450a10
mov dword [ebp + 0xdb86], ebx
mov byte [ebp + 0xdb8a], bl
mov dword [ebp + 0xdb8b], ebx
mov dword [ebp + 0xdb8f], ebx
mov dword [ebp + 0xdb93], ebx
lea edi, [ebp + 0xdda4]
mov byte [ebp + 0xdb97], bl
mov dword [ebp + 0xdb98], 0xffffffff
mov word [ebp + 0xdb9c], bx
call fcn.0042fec0
lea edi, [ebp + 0xded2]
mov eax, ebp
call fcn.00479160
lea edi, [ebp + 0xefb3]
call fcn.004798c0
lea esi, [ebp + 0xf28a]
call fcn.00472da0
lea esi, [ebp + 0x10177]
push esi
call fcn.0042c5c0
mov byte [esi + 0x7d2], bl
mov dword [esi + 0x7d3], ebx
mov dword [esi + 0x7d7], ebx
mov dword [esi + 0x7db], ebx
mov dword [esi + 0x7df], ebx
mov dword [ebp + 0x1095a], ebx
mov dword [ebp + 0x1095e], ebx
mov dword [ebp + 0x10962], ebx
mov dword [ebp + 0x10966], ebx
mov byte [ebp + 0x1096a], bl
mov dword [ebp + 0x1096f], ebx
mov al, 0xe2
mov cl, 0x81
mov byte [ebp + 0x10973], bl
mov dword [ebp + 0x10974], ebx
mov dword [ebp + 0x1096b], 0x6dd498
mov byte [ebp + 0x10978], al
mov byte [ebp + 0x10979], cl
mov byte [esp + 0x13], al
lea eax, [ebp + 0x10986]
mov byte [esp + 0x3c], cl
mov dword [ebp + 0x1097a], 0xc8
mov dword [ebp + 0x1097e], ebx
mov dword [ebp + 0x10982], ebx
call fcn.0041aa90
push str.Aklk
call fcn.004bf140
push str.QAjh
mov byte [ebp + 0x10a5b], al
call fcn.004bf140
mov byte [ebp + 0x10a5c], al
mov dword [ebp + 0x10a5d], ebx
mov dword [ebp + 0x10a61], ebx
push ebp
mov byte [ebp + 0x10a69], bl
call fcn.0043e4c0
mov word [ebp + 0x2a6d], bx
mov word [ebp + 0x2ccd], bx
mov word [ebp + 0x834a], bx
mov word [ebp + 0x8552], bx
mov word [ebp + 0x875a], bx
mov word [ebp + 0xa43d], bx
lea eax, [ebp + 0x2a3c]
push ebx
mov dword [ebp + 0x8970], eax
lea esi, [ebp + 0x2a34]
push 0x6bc2c0
mov eax, str.MainWindow
mov dword [ebp + 0x896c], esi
call fcn.004811b0
push ebx
mov dword [ebp + 0x3642], eax
push 0x6bc2c4
mov eax, str.MainWindow
call fcn.004811b0
push ebx
mov dword [ebp + 0x3646], eax
push str.Width
mov eax, str.MainWindow
call fcn.004811b0
mov edx, dword [ebp + 0x3642]
add edx, eax
push ebx
push str.Height
mov eax, str.MainWindow
mov dword [ebp + 0x364a], edx
call fcn.004811b0
mov ecx, dword [ebp + 0x3646]
add ecx, eax
mov dword [ebp + 0x364e], ecx
call fcn.00609b20
mov word [ebp + 0xba0d], bx
mov dword [ebp + 0xbc15], ebx
mov edx, dword [esi + 4]
mov dword [ebp + 0xbc42], edx
mov word [ebp + 0xd502], bx
mov word [ebp + 0xd70a], bx
mov eax, dword [esi + 4]
mov dword [ebp + 0xbe98], eax
mov dword [ebp + 0x92db], ebp
mov eax, dword [ebp + 0x10962]
cmp eax, ebx
je 0x42fb2f
call fcn.0048a1e0
pop edi
pop esi
mov dword [ebp + 0x10962], ebx
mov eax, ebp
pop ebp
pop ebx
add esp, 0x28
ret 4