Function at 0x415010
Capabilities:
Get system information on windows

Disassembly:
push 0x128
mov eax, 0x44502a
call fcn.00440fe8
mov ebx, ecx
push str.BjAstuvwxa
call fcn.0040b3a8
push ecx
push eax
lea ecx, [ebp - 0x114]
call fcn.0040b423
and dword [ebp - 4], 0
cmp dword [eax + 0x14], 0xf
jbe 0x415044
mov eax, dword [eax]
push eax
call fcn.0041db47
or edi, 0xffffffff
mov esi, eax
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x114]
call fcn.0040acb5
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.789593363246702628
call fcn.0040a8b4
mov dword [ebp - 4], 1
push esi
mov dword [ebp - 4], edi
call fcn.0041d980
push 0x452820
mov ecx, ebx
mov esi, eax
call fcn.0040b3a8
push ecx
push eax
lea ecx, [ebp - 0x114]
call fcn.0040b423
mov dword [ebp - 4], 2
cmp dword [eax + 0x14], 0xf
jbe 0x4150ac
mov eax, dword [eax]
push eax
mov ecx, esi
call dword [0x448184]
call esi
mov esi, eax
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x114]
call fcn.0040acb5
push 0x452824
mov ecx, ebx
call fcn.0040b3a8
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf0], esp
push ecx
mov ecx, eax
call fcn.0040b3dd
mov dword [ebp - 4], 3
push esi
mov dword [ebp - 4], edi
call fcn.0041d980
mov esi, eax
lea ecx, [ebp - 0x8c]
push 0x452828
mov dword [ebp - 0xf0], esi
call fcn.0040a8b4
mov dword [ebp - 4], 4
lea edi, [ebp - 0x44]
push 9
pop eax
mov ecx, eax
xor eax, eax
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
push 6
pop ecx
push 9
pop eax
cmp word [ebp - 0x44], ax
je 0x41513d
cmp word [ebp - 0x44], cx
jne 0x41514f
push 3
push 0x45282c
lea ecx, [ebp - 0x8c]
call fcn.00410154
push 1
mov ecx, esi
call dword [0x448184]
call esi
mov edx, eax
lea ecx, [ebp - 0x38]
call fcn.00405cc0
mov esi, eax
mov byte [ebp - 4], 5
mov edi, dword [ebp - 0xf0]
mov ecx, edi
push 0
call dword [0x448184]
call edi
mov edx, eax
lea ecx, [ebp - 0x134]
call fcn.00405cc0
mov byte [ebp - 4], 6
mov edx, eax
push 0x451494
lea ecx, [ebp - 0x114]
call fcn.0040b4de
mov byte [ebp - 4], 7
mov edx, eax
push esi
lea ecx, [ebp - 0xa4]
call fcn.0040b60e
pop ecx
pop ecx
push 9
pop eax
mov byte [ebp - 4], al
lea ecx, [ebp - 0x114]
call fcn.0040acb5
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x134]
call fcn.0040acb5
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x38]
call fcn.0040acb5
push 0
lea ecx, [ebp - 0x18]
mov byte [ebp - 0x20], 0
call fcn.0040b04b
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x38]
push eax
mov ecx, ebx
call fcn.00414d97
mov byte [ebp - 4], 0xf
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0xf0], esp
push eax
call fcn.004168f0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x20]
push 0x451720
call fcn.0040b3a8
mov byte [ebp - 4], 0xf
mov ecx, eax
call fcn.0040a4fa
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x38]
call fcn.0040acb5
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
call fcn.004147ba
mov byte [ebp - 4], 0x11
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0xf4], esp
push eax
call fcn.004168f0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x20]
push 0x451704
call fcn.0040b3a8
mov byte [ebp - 4], 0x11
mov ecx, eax
call fcn.0040a4fa
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x38]
call fcn.0040acb5
sub esp, 0x10
lea eax, [ebp - 0x8c]
mov ecx, esp
mov dword [ebp - 0x118], esp
push eax
call fcn.004113b5
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x20]
push 0x451498
call fcn.0040b3a8
mov byte [ebp - 4], 0xe
mov ecx, eax
call fcn.0040a4fa
sub esp, 0x10
lea eax, [ebp - 0xa4]
mov ecx, esp
mov dword [ebp - 0xf8], esp
push eax
call fcn.004113b5
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x20]
push 0x451480
call fcn.0040b3a8
mov byte [ebp - 4], 0xe
mov ecx, eax
call fcn.0040a4fa
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
call fcn.00414cc6
mov byte [ebp - 4], 0x15
cmp dword [eax + 0x14], 0xf
jbe 0x4152ff
mov eax, dword [eax]
push eax
call fcn.0042bcf9
sub esp, 0xc
mov dword [ebp - 0xf0], eax
lea eax, [ebp - 0xf0]
mov dword [ebp - 0xf8], esp
mov ecx, esp
push eax
call fcn.0040b6a3
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x20]
push 0x452830
call fcn.0040b3a8
mov byte [ebp - 4], 0x15
mov ecx, eax
call fcn.0040a4fa
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x38]
call fcn.0040acb5
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
call fcn.00414beb
mov byte [ebp - 4], 0x17
cmp dword [eax + 0x14], 0xf
jbe 0x415361
mov eax, dword [eax]
push eax
call fcn.0042bcf9
sub esp, 0xc
mov dword [ebp - 0xf0], eax
lea eax, [ebp - 0xf0]
mov dword [ebp - 0xf8], esp
mov ecx, esp
push eax
call fcn.0040b6a3
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x20]
push 0x451728
call fcn.0040b3a8
mov byte [ebp - 4], 0x17
mov ecx, eax
call fcn.0040a4fa
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x38]
call fcn.0040acb5
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
call fcn.004148b6
mov edx, eax
mov byte [ebp - 4], 0x19
sub esp, 0x10
mov dword [ebp - 0x118], esp
mov ecx, esp
push 0
push 1
sub esp, 0x28
mov eax, esp
mov dword [ebp - 0xf4], esp
mov dword [ebp - 0x11c], eax
and dword [eax + 0x24], 0
mov byte [ebp - 4], 0x1b
mov byte [ebp - 4], 0x19
call fcn.0040b518
add esp, 0x30
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x20]
push 0x4527c0
call fcn.0040b3a8
mov byte [ebp - 4], 0x19
mov ecx, eax
call fcn.0040a4fa
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x38]
call fcn.0040acb5
cmp dword [0x45d1c8], 0xf
mov eax, str.1715814849
cmova eax, dword [str.1715814849]
push eax
call fcn.0042bcf9
sub esp, 0xc
mov dword [ebp - 0xf0], eax
lea eax, [ebp - 0xf0]
mov dword [ebp - 0xfc], esp
mov ecx, esp
push eax
call fcn.0040b6a3
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x20]
push 0x451718
call fcn.0040b3a8
mov byte [ebp - 4], 0xe
mov ecx, eax
call fcn.0040a4fa
sub esp, 0x10
lea eax, [ebp - 0x5c]
lea ecx, [ebp - 0x20]
push eax
call fcn.00415772
mov byte [ebp - 4], 0x1e
push ecx
push ecx
call fcn.004057ca
pop ecx
pop ecx
push str..txt
lea ecx, [ebp - 0x38]
mov esi, eax
call fcn.0040a8b4
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x74]
push eax
call fcn.0041689d
pop ecx
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x38]
call fcn.0040acb5
cmp dword [ebp - 0x60], 0xf
lea edx, [ebp - 0x74]
push ecx
cmova edx, dword [ebp - 0x74]
mov ecx, esi
call fcn.004050a9
cmp dword [ebp - 0x48], 0xf
lea edx, [ebp - 0x5c]
push dword [ebp - 0x4c]
cmova edx, dword [ebp - 0x5c]
mov ecx, esi
call fcn.0040571a
pop ecx
pop ecx
mov ecx, esi
call fcn.00405462
mov edi, 0x45d1cc
mov edx, 0x450692
mov ecx, edi
call fcn.0040b372
test al, al
jne 0x415515
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xfc], esp
push edi
call fcn.0040a8ed
mov byte [ebp - 4], 0x22
push esi
mov byte [ebp - 4], 0x21
call fcn.00414f9b
push 0x48
lea eax, [ebp - 0xec]
push 0
push eax
call fcn.00420760
add esp, 0xc
lea ecx, [ebp - 0x114]
push str.MyApp_1.0
call fcn.0040a8b4
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0xec]
call fcn.004061c0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x114]
call fcn.0040acb5
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0xfc], esp
push ebx
call fcn.0040a568
mov byte [ebp - 4], 0x26
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0xec]
call fcn.00406308
and dword [ebp - 0xf4], 0
lea eax, [ebp - 0xf0]
and dword [ebp - 0xf0], 0
lea edx, [ebp - 0xf4]
push eax
mov ecx, esi
call fcn.00405804
pop ecx
mov ecx, esi
call fcn.00405848
mov esi, 0x452848
lea ecx, [ebp - 0x114]
push esi
call fcn.0040a8b4
jmp 0x4155d5
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
lea ecx, [ebp - 0x114]
call fcn.0040a8b4
mov byte [ebp - 4], 0x27
lea eax, [ebp - 0x114]
push eax
push dword [ebp - 0xf0]
push dword [ebp - 0xf4]
push ecx
lea ecx, [ebp - 0xec]
call fcn.00406671
mov bl, al
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x114]
call fcn.0040acb5
test bl, bl
je 0x4155be
push dword [ebp - 0xf4]
call fcn.00425247
pop ecx
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0xec]
call fcn.004062b0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x74]
call fcn.0040acb5
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x5c]
call fcn.0040acb5
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x18]
push dword [ebp - 0x20]
call fcn.0040ae1a
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa4]
call fcn.0040acb5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8c]
call fcn.0040acb5
call fcn.00440f94
ret