Function at 0x42da70
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x523348
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
mov eax, dword [0x56a260]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
lea ecx, [esp + 0x10]
call fcn.0040e2a0
mov dword [esp + 0x14], eax
mov byte [eax + 0x15], 1
mov eax, dword [esp + 0x14]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x14]
mov dword [eax], eax
mov eax, dword [esp + 0x14]
xor ebx, ebx
mov dword [eax + 8], eax
mov dword [esp + 0x18], ebx
push str.Caption
lea ecx, [esp + 0x10]
mov dword [esp + 0x2c], ebx
call fcn.00401f50
push 0x5500bc
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x30], 1
call fcn.0040c400
mov ecx, eax
call fcn.00402060
mov byte [esp + 0x28], bl
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x42db0e
add eax, 0xfffffff8
push eax
call fcn.004d37ab
add esp, 4
push str.Manufacturer
lea ecx, [esp + 0x10]
call fcn.00401f50
push 0x550350
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x30], 2
call fcn.0040c400
mov ecx, eax
call fcn.00402060
mov byte [esp + 0x28], bl
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x42db53
add eax, 0xfffffff8
push eax
call fcn.004d37ab
add esp, 4
push str.BuildNumber
lea ecx, [esp + 0x10]
call fcn.00401f50
push 0x5505c0
lea edx, [esp + 0x10]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x30], 3
call fcn.0040c400
mov ecx, eax
call fcn.00402060
mov byte [esp + 0x28], bl
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x42db98
add eax, 0xfffffff8
push eax
call fcn.004d37ab
add esp, 4
push str.SerialNumber
lea ecx, [esp + 0x10]
call fcn.00401f50
push 0x5505e8
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x30], 4
call fcn.0040c400
mov ecx, eax
call fcn.00402060
mov byte [esp + 0x28], bl
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x42dbdd
add eax, 0xfffffff8
push eax
call fcn.004d37ab
add esp, 4
push str.Version
lea ecx, [esp + 0x10]
call fcn.00401f50
push 0x5504ec
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x30], 5
call fcn.0040c400
mov ecx, eax
call fcn.00402060
mov byte [esp + 0x28], bl
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x42dc22
add eax, 0xfffffff8
push eax
call fcn.004d37ab
add esp, 4
push str.OSArchitecture
lea ecx, [esp + 0x10]
call fcn.00401f50
push 0x550614
lea edx, [esp + 0x10]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x30], 6
call fcn.0040c400
mov ecx, eax
call fcn.00402060
mov byte [esp + 0x28], bl
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x42dc67
add eax, 0xfffffff8
push eax
call fcn.004d37ab
add esp, 4
push str.RegisteredUser
lea ecx, [esp + 0x10]
call fcn.00401f50
push str.User
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x30], 7
call fcn.0040c400
mov ecx, eax
call fcn.00402060
mov byte [esp + 0x28], bl
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x42dcac
add eax, 0xfffffff8
push eax
call fcn.004d37ab
add esp, 4
push str.InstallDate
lea ecx, [esp + 0x10]
call fcn.00401f50
push 0x550648
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x30], 8
call fcn.0040c400
mov ecx, eax
call fcn.00402060
mov byte [esp + 0x28], bl
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x42dcf1
add eax, 0xfffffff8
push eax
call fcn.004d37ab
add esp, 4
push str.SystemDrive
lea ecx, [esp + 0x10]
call fcn.00401f50
push str.SystemDrive
lea edx, [esp + 0x10]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x30], 9
call fcn.0040c400
mov ecx, eax
call fcn.00402060
mov byte [esp + 0x28], bl
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x42dd36
add eax, 0xfffffff8
push eax
call fcn.004d37ab
add esp, 4
push str.SystemDirectory
lea ecx, [esp + 0x10]
call fcn.00401f50
push str.SystemDirectory
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x30], 0xa
call fcn.0040c400
mov ecx, eax
call fcn.00402060
mov byte [esp + 0x28], bl
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x42dd7b
add eax, 0xfffffff8
push eax
call fcn.004d37ab
add esp, 4
push str.WindowsDirectory
lea ecx, [esp + 0x10]
call fcn.00401f50
push str.WindowsDirectory
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x30], 0xb
call fcn.0040c400
mov ecx, eax
call fcn.00402060
mov byte [esp + 0x28], bl
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x42ddc0
add eax, 0xfffffff8
push eax
call fcn.004d37ab
add esp, 4
push str.Win32_OperatingSystem
lea ecx, [esp + 0x10]
call fcn.00401f50
mov edx, dword [ebp + 0xc]
push 0x42d930
push edx
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [ebp + 8]
mov byte [esp + 0x38], 0xc
call fcn.0042e230
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x42de02
add eax, 0xfffffff8
push eax
call fcn.004d37ab
add esp, 4
lea ecx, [esp + 0x10]
mov dword [esp + 0x28], 0xffffffff
call fcn.0040cda0
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop ebx
mov esp, ebp
pop ebp
ret 8