Function at 0x417ed0
Capabilities:
Get system information on windows

Disassembly:
sub esp, 0x144
push esi
call fcn.00416ea0
call fcn.0040fc90
xor eax, eax
push 0x11c
push eax
mov dword [0x44dab8], eax
mov dword [0x44dabc], eax
mov dword [0x44dac0], eax
mov dword [0x44dac4], eax
lea eax, [esp + 0x34]
push eax
call fcn.004053b0
mov esi, dword [sym.imp.KERNEL32.dll_GetVersionExW]
add esp, 0xc
lea ecx, [esp + 0x2c]
push ecx
mov dword [esp + 0x30], 0x11c
call esi
test eax, eax
jne 0x417f36
lea edx, [esp + 0x2c]
push edx
mov dword [esp + 0x30], 0x114
call esi
test eax, eax
je 0x417f52
cmp dword [esp + 0x3c], 2
jne 0x417f52
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov dword [0x44dab8], eax
mov dword [0x44dabc], ecx
jmp 0x417f66
mov dword [0x44dab8], 5
mov dword [0x44dabc], 1
xor eax, eax
lea edx, [esp + 8]
push edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, 0x103
mov dword [0x44da94], eax
mov dword [0x44da9c], eax
mov ecx, 0x7fff
mov eax, 0xf
mov dword [0x44da98], ecx
mov dword [0x44daa0], eax
mov dword [0x44daac], eax
mov eax, dword [esp + 0xc]
mov dword [0x44dab0], ecx
mov ecx, dword [esp + 0x1c]
push str.LIBCTX
mov dword [0x44da80], 0xffffffff
mov dword [0x44da84], 0xffffffff
mov dword [0x44da88], 0xffffffff
mov dword [0x44da8c], 0
mov dword [0x44da90], 0x40
mov dword [0x44daa4], 0x3f
mov dword [0x44daa8], 0xff
mov dword [0x44dab4], 8
mov dword [0x43c8d8], eax
mov dword [0x43c8dc], ecx
mov dword [0x43c8e0], 0x10000
mov dword [0x44f214], 0x100000
call fcn.00416f60
mov esi, eax
mov eax, dword [0x44f20c]
add esp, 4
test eax, eax
jne 0x418090
push str.PVTHEAP
call fcn.00416f60
add esp, 4
mov dword [0x44f20c], eax
test eax, eax
jne 0x418090
push eax
push 0x80000
push eax
call dword [sym.imp.KERNEL32.dll_HeapCreate]
push eax
push str.PVTHEAP
mov dword [0x44f20c], eax
call fcn.00416ee0
mov eax, dword [0x44f20c]
add esp, 8
push 0x84
push 0
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
test eax, eax
je 0x4180ac
push esi
mov ecx, eax
call fcn.00417df0
jmp 0x4180ae
xor eax, eax
push 8
mov dword [0x44f1e8], eax
call fcn.0041aa20
add esp, 4
test esi, esi
je 0x418124
test eax, eax
je 0x4180d4
mov edx, dword [esi + 0x1c]
push 0
push edx
mov ecx, eax
call fcn.0041a9d0
jmp 0x4180d6
xor eax, eax
push 0x18
mov dword [0x44f1f4], eax
call fcn.0041a910
add esp, 4
test eax, eax
je 0x4180fc
mov ecx, dword [esi + 0x20]
push 0
push 0
push 0
push ecx
mov ecx, eax
call fcn.0041a7d0
jmp 0x4180fe
xor eax, eax
push 0x18
mov dword [0x44f1f0], eax
call fcn.0041a910
add esp, 4
test eax, eax
je 0x418171
mov edx, dword [esi + 0x14]
push 0
push 0
push 0
push edx
mov ecx, eax
call fcn.0041a7d0
jmp 0x418173
test eax, eax
je 0x418131
mov ecx, eax
call fcn.0041a9b0
jmp 0x418133
xor eax, eax
push 0x18
mov dword [0x44f1f4], eax
call fcn.0041a910
add esp, 4
test eax, eax
je 0x418151
push 0
mov ecx, eax
call fcn.0041a790
jmp 0x418153
xor eax, eax
push 0x18
mov dword [0x44f1f0], eax
call fcn.0041a910
add esp, 4
test eax, eax
je 0x418171
push 0
mov ecx, eax
call fcn.0041a790
jmp 0x418173
xor eax, eax
mov dword [0x44f1ec], eax
mov eax, dword [0x44f1e8]
or dword [eax + 0xc], 0x40000000
mov eax, dword [fcn.004175d0]
mov ecx, dword [fcn.00417610]
mov edx, dword [fcn.004175f0]
mov dword [0x43c8cc], eax
mov dword [0x43c8d0], ecx
mov dword [0x43c8d4], edx
call fcn.00419760
push str.BTK_UNICODE_DISABLED
call fcn.00408a52
add esp, 4
test eax, eax
setne al
mov byte [0x43c41c], al
call fcn.0041a5f0
pop esi
test eax, eax
jne 0x4181e0
push eax
call fcn.0041aab0
add esp, 4
test eax, eax
je 0x4181e0
mov ecx, eax
call fcn.0041a680
mov ecx, dword [0x44f1f4]
mov edx, dword [ecx + 4]
mov eax, dword [0x44f1e8]
mov dword [eax + 0x1c], edx
mov ecx, dword [0x44f1f0]
mov edx, dword [ecx]
mov eax, dword [0x44f1e8]
mov dword [eax + 0x20], edx
mov ecx, dword [0x44f1ec]
mov edx, dword [ecx]
mov eax, dword [0x44f1e8]
mov dword [eax + 0x14], edx
call fcn.00417d90
mov ecx, dword [0x44da58]
mov edx, dword [0x44da5c]
xor eax, eax
mov dword [0x44ea20], eax
mov dword [0x44ea24], eax
mov dword [0x44ea28], eax
mov dword [0x44ea2c], eax
mov dword [0x44ea30], eax
mov dword [0x44ea34], eax
mov dword [0x44ea38], eax
mov dword [0x44ea18], eax
mov dword [0x44ea1c], eax
mov eax, dword [0x44da60]
mov dword [0x44ea24], eax
mov eax, dword [0x44f1e8]
mov dword [0x44ea2c], ecx
mov ecx, dword [0x44da64]
mov dword [0x44ea30], 0x43bfa0
mov dword [0x44ea20], edx
mov dword [0x44ea28], ecx
mov dword [0x44ea34], 0x40acd0
mov dword [0x44ea38], 0x40ef80
test eax, eax
je 0x4182ca
lea edx, [esp]
push edx
push 0
push 0
push 0x44ea18
push str.rtlcore
push eax
push 0x3ff
call fcn.004178b0
mov dword [0x43c420], eax
mov eax, dword [esp + 0x1c]
add esp, 0x1c
add esp, 0x144
ret
or ecx, 0xffffffff
mov eax, 0x23
mov dword [0x43c420], ecx
add esp, 0x144
ret