Function at 0x40aa48
Capabilities:
Get system information on windows

Disassembly:
push esi
push edi
xor edi, edi
inc edi
push edi
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0x422c30
mov dword [0x422c30], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
push 0x422c08
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [0x422c40]
test eax, eax
je 0x40aa81
cmp eax, edi
jne 0x40aa93
push str.Java_Quick_Starter_does_not_support_your_version_of_Windows_n
call fcn.00411378
push edi
call fcn.0040aff2
pop ecx
pop ecx
push str.kernel32.dll
call fcn.0040a478
test eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
pop ecx
mov dword [0x422d40], eax
jne 0x40aac3
call esi
push eax
push str.Unable_to_load_kernel32.dll__error__d__n
call fcn.00411378
push edi
call fcn.0040aff2
add esp, 0xc
push str.advapi32.dll
call fcn.0040a478
test eax, eax
pop ecx
mov dword [0x422d44], eax
jne 0x40aaed
call esi
push eax
push str.Unable_to_load_advapi32.dll__error__d__n
call fcn.00411378
push edi
call fcn.0040aff2
add esp, 0xc
push str.user32.dll
call fcn.0040a478
test eax, eax
pop ecx
mov dword [0x422d48], eax
jne 0x40ab17
call esi
push eax
push str.Unable_to_load_user32.dll__error__d__n
call fcn.00411378
push edi
call fcn.0040aff2
add esp, 0xc
push str.psapi.dll
call fcn.0040a478
test eax, eax
pop ecx
mov dword [0x422d4c], eax
jne 0x40ab3a
call esi
push eax
push str.Unable_to_load_psapi.dll__error__d__n
call fcn.004110c4
pop ecx
pop ecx
push str.pdh.dll
call fcn.0040a478
test eax, eax
pop ecx
mov dword [0x422d50], eax
jne 0x40ab5d
call esi
push eax
push str.Unable_to_load_pdh.dll__error__d__n
call fcn.004110c4
pop ecx
pop ecx
push str.SetDllDirectoryA
push dword [0x422d40]
push 0x422cc4
call fcn.0040a61e
push str.GlobalMemoryStatusEx
push dword [0x422d40]
push 0x422cc8
call fcn.0040a647
push str.QueryMemoryResourceNotification
push dword [0x422d40]
push 0x422ccc
call fcn.0040a670
push str.CreateMemoryResourceNotification
push dword [0x422d40]
push 0x422cd0
call fcn.0040a699
push str.GetNativeSystemInfo
push dword [0x422d40]
push 0x422cd4
call fcn.0040a6c2
push str.IsWow64Process
push dword [0x422d40]
push 0x422cd8
call fcn.0040a670
add esp, 0x48
push str.SetProcessWorkingSetSize
push dword [0x422d40]
push 0x422cdc
call fcn.0040a6eb
push str.GetProcessWorkingSetSize
push dword [0x422d40]
push 0x422ce0
call fcn.0040a714
push str.GetLargePageMinimum
push dword [0x422d40]
push 0x422ce4
call fcn.0040a73d
push str.GetSystemPowerStatus
push dword [0x422d40]
push 0x422d18
call fcn.0040a766
push str.SetFilePointerEx
push dword [0x422d40]
push 0x422cf8
call fcn.0040a78f
push str.GetDevicePowerState
push dword [0x422d40]
push 0x422cfc
call fcn.0040a670
add esp, 0x48
push str.AdjustTokenPrivileges
push dword [0x422d44]
push 0x422ce8
call fcn.0040a7b8
push 0x418bbc
push dword [0x422d44]
push 0x422cec
call fcn.0040a7e1
push str.LookupPrivilegeValueA
push dword [0x422d44]
push 0x422cf0
call fcn.0040a80a
push str.ChangeServiceConfig2A
push dword [0x422d44]
push 0x422cf4
call fcn.0040a833
push str.RegisterServiceCtrlHandlerExA
push dword [0x422d44]
push 0x422d0c
call fcn.0040a85c
push str.RegisterDeviceNotificationA
push dword [0x422d48]
push 0x422d10
call fcn.0040a885
add esp, 0x48
push str.UnregisterDeviceNotification
push dword [0x422d48]
push 0x422d14
call fcn.0040a8ae
mov eax, dword [0x422d4c]
add esp, 0xc
test eax, eax
pop edi
pop esi
je 0x40ad55
push str.GetModuleInformation
push eax
push 0x422d00
call fcn.0040a8d7
push str.GetMappedFileNameA
push dword [0x422d4c]
push 0x422d04
call fcn.0040a900
push str.QueryWorkingSet
push dword [0x422d4c]
push 0x422d08
call fcn.0040a929
push str.EnumProcessModules
push dword [0x422d4c]
push 0x422d1c
call fcn.0040a952
add esp, 0x30
mov eax, dword [0x422d50]
test eax, eax
je 0x40adf6
push str.PdhOpenQueryA
push eax
push 0x422d20
call fcn.0040a97b
push str.PdhAddCounterA
push dword [0x422d50]
push 0x422d24
call fcn.0040a9a4
push str.PdhRemoveCounter
push dword [0x422d50]
push 0x422d28
call fcn.0040a9cd
push str.PdhCollectQueryData
push dword [0x422d50]
push 0x422d2c
call fcn.0040a9cd
push str.PdhCloseQuery
push dword [0x422d50]
push 0x422d30
call fcn.0040a9cd
push str.PdhGetFormattedCounterValue
push dword [0x422d50]
push 0x422d34
call fcn.0040a9f6
add esp, 0x48
push str.PdhMakeCounterPathA
push dword [0x422d50]
push 0x422d38
call fcn.0040aa1f
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [0x422d3c], eax
ret