Function at 0x402810
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4419d8
mov eax, dword fs:[0]
push eax
sub esp, 0x78
mov eax, dword [0x4572b4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
push 0x44d414
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
call fcn.004053b0
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0
mov dword [ebp - 0x50], 0
test eax, eax
je 0x40289d
push str.GetNativeSystemInfo
push str.kernel32
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x402893
lea ecx, [ebp - 0x4c]
push ecx
call eax
jmp 0x40289d
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ax, word [ebp - 0x4c]
cmp ax, 9
je 0x402962
cmp ax, 6
je 0x402962
lea eax, [ebp - 0x50]
push eax
push 0x44d634
call fcn.00433071
push 0x2a
mov edx, str.73_61_66_65_6D_6F_6E_6E_33_32_2E_64_6C_6C
lea ecx, [ebp - 0x80]
mov esi, eax
call fcn.004095e0
add esp, 0xc
push eax
mov edx, 0x459ad4
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 1
call fcn.00407d60
mov edi, eax
lea eax, [ebp - 0x28]
add esp, 4
cmp eax, edi
je 0x402921
cmp dword [ebp - 0x14], 0x10
jb 0x402906
push dword [ebp - 0x28]
call fcn.0041ff30
add esp, 4
push edi
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
call fcn.004065f0
cmp dword [ebp - 0x54], 0x10
jb 0x402932
push dword [ebp - 0x68]
call fcn.0041ff30
add esp, 4
mov byte [ebp - 4], 0
cmp dword [ebp - 0x6c], 0x10
mov dword [ebp - 0x54], 0xf
mov dword [ebp - 0x58], 0
mov byte [ebp - 0x68], 0
jb 0x402a09
push dword [ebp - 0x80]
call fcn.0041ff30
add esp, 4
jmp 0x402a09
push 0x2a
mov edx, str.73_61_66_65_6D_6F_6E_6E_36_34_2E_64_6C_6C
lea ecx, [ebp - 0x80]
call fcn.004095e0
add esp, 4
push eax
mov edx, 0x459ad4
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 2
call fcn.00407d60
mov esi, eax
lea eax, [ebp - 0x28]
add esp, 4
cmp eax, esi
je 0x4029be
cmp dword [ebp - 0x14], 0x10
jb 0x4029a3
push dword [ebp - 0x28]
call fcn.0041ff30
add esp, 4
push esi
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
call fcn.004065f0
cmp dword [ebp - 0x54], 0x10
jb 0x4029cf
push dword [ebp - 0x68]
call fcn.0041ff30
add esp, 4
mov byte [ebp - 4], 0
cmp dword [ebp - 0x6c], 0x10
mov dword [ebp - 0x54], 0xf
mov dword [ebp - 0x58], 0
mov byte [ebp - 0x68], 0
jb 0x4029f6
push dword [ebp - 0x80]
call fcn.0041ff30
add esp, 4
lea eax, [ebp - 0x50]
push eax
push 0x44d644
call fcn.00433071
add esp, 8
mov esi, eax
mov edi, dword [ebp - 0x50]
test edi, edi
je 0x402a5c
test esi, esi
jle 0x402a5c
sub esp, 0x18
mov ecx, esp
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x28]
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.00406830
mov edx, esi
mov ecx, edi
call fcn.00401ce0
mov esi, dword [ebp - 0x50]
push esi
call fcn.0041ff30
mov eax, dword [ebp - 0x50]
add esp, 0x1c
mov ecx, 0x8123
test esi, esi
cmovne eax, ecx
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x14], 0x10
jb 0x402a6d
push dword [ebp - 0x28]
call fcn.0041ff30
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041e77a
mov esp, ebp
pop ebp
ret