Function at 0x10002490
Capabilities:
Get system information on windows

Disassembly:
push ebp
push edi
push esi
push ebx
mov ebx, 0x6b
sub esp, 0x1bc
lea esi, [esp + 0xab]
mov word [esp + 0x3a], bx
mov dword [esp + 0x36], 0x6f6f682e
mov dword [esp + 8], 0x105
mov dword [esp + 4], esi
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
sub esp, 0xc
mov ebx, eax
lea eax, [esp + 0xcb]
mov dword [esp + 0x84], esi
mov dword [esp + 0x88], eax
lea eax, [esp + 0xeb]
mov dword [esp + 0x8c], eax
lea eax, [esp + 0x10b]
mov dword [esp + 0x90], eax
lea eax, [esp + 0x12b]
mov dword [esp + 0x94], eax
lea eax, [esp + 0x14b]
mov dword [esp + 0x98], eax
lea eax, [esp + 0x16b]
mov dword [esp + 0x9c], eax
lea eax, [esp + 0x18b]
mov dword [esp + 0xa0], eax
lea eax, [esp + 0x5c]
mov dword [esp + 0xa4], 0
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edi, dword [0x10085040]
sub esp, 4
test edi, edi
je 0x10002673
sub ebx, 1
cmp ebx, 0xfc
jbe 0x10002738
mov ecx, dword [esp + 0x1d0]
test ecx, ecx
jne 0x10002890
mov dword [esp + 0x14], 0
xor edi, edi
lea esi, [esp + 0x3c]
xor ebx, ebx
lea esi, [esi]
mov ebp, dword [esp + ebx*4 + 0x84]
mov dword [esp], ebp
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
sub esp, 4
test eax, eax
je 0x10002650
mov ebp, dword [esp + 0x60]
xor edx, edx
test eax, eax
jne 0x100025d0
jmp 0x100025e4
cmp dword [eax], 0x4550
je 0x100025d4
add edx, 4
add eax, 4
je 0x10002648
cmp edx, ebp
jb 0x100025c0
cmp dword [eax], 0x4550
je 0x10002668
xor edx, edx
xor eax, eax
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x30]
add ebx, 1
mov dword [esp + 4], eax
lea eax, [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 8], esi
mov dword [esp + 0x30], edx
mov dword [esp + 0x3c], ebp
call sym._HookParseRange
mov edx, dword [esp + 0x30]
lea eax, [ebp - 1]
mov dword [esp], edi
mov ecx, dword [esp + 0x3c]
and eax, edx
sub ecx, eax
mov eax, dword [esp + 0x2c]
call sym._HookPatchTimer
mov eax, dword [esp + 0x14]
cmp ebx, eax
jle 0x10002598
call sym._dolog_compat_patched
add esp, 0x1bc
pop ebx
pop esi
pop edi
pop ebp
ret
xor edx, edx
jmp 0x100025e4
mov dword [esp], ebp
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
sub esp, 4
jmp 0x100025b3
mov edx, ebp
neg edx
and edx, eax
jmp 0x100025e4
mov dword [esp], 0x10085040
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
sub esp, 4
mov dword [esp], 0
call sym._fxCompatPlatformId
cmp eax, 1
jne 0x10002563
mov eax, 0x1234ef
cmp eax, dword [0x10085040]
mov eax, 0
sbb eax, dword [0x10085044]
jl 0x10002563
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, 0x369e99
mov dword [esp + 8], 0x3e8
mul edx
mov dword [esp + 0xc], 0
mov dword [esp], eax
mov dword [esp + 4], edx
call dbg.__divdi3
mov dword [esp + 0x18], eax
mov eax, 0x608
mov dword [esp + 0x1c], edx
fild qword [esp + 0x18]
fistp qword [0x10085048]
mov edx, eax
in eax, dx
mov dword [esp + 0x3c], eax
mov eax, dword [0x10085048]
and eax, 0xffffff
cmp dword [esp + 0x3c], eax
jae 0x10002563
mov ecx, 0x608
pause
mov edx, ecx
in eax, dx
mov dword [esp + 0x3c], eax
mov eax, dword [0x10085048]
and eax, 0xffffff
cmp dword [esp + 0x3c], eax
jb 0x10002714
jmp 0x10002563
lea eax, [esp + 0x36]
mov dword [esp + 8], 0x104
mov dword [esp + 4], eax
mov dword [esp], esi
call sym._strncat
mov dword [esp + 4], 0x1005207a
mov dword [esp], esi
call sym._fopen
mov ebx, eax
test eax, eax
je 0x10002958
mov dword [esp + 0x14], 0
lea esi, [esp + 0x3c]
xor edi, edi
lea esi, [esi]
nop
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x20
mov dword [esp], esi
call sym._fgets
test eax, eax
je 0x100028fc
mov dword [esp + 8], 0x10
mov dword [esp + 4], 0
mov dword [esp], esi
call sym._strtoul
mov dword [esp + 0x2c], eax
cmp eax, 0x1000
ja 0x10002843
mov dword [esp + 8], 0xf
mov dword [esp + 4], str.0xFF_KernelTick
mov dword [esp], esi
call sym._memcmp
mov edx, eax
mov eax, edi
or eax, 1
test edx, edx
cmove edi, eax
cmp dword [esi], 0x46467830
je 0x10002866
cmp dword [esp + 0x3c], 0x2c307830
jne 0x10002780
mov eax, dword [esp + 0x14]
mov ebp, dword [esp + eax*4 + 0x84]
test ebp, ebp
je 0x10002780
mov dword [esp + 4], 0x1005209b
mov dword [esp], esi
call sym._strcspn
lea ecx, [esp + 0x40]
mov byte [esp + eax + 0x3c], 0
mov dword [esp + 8], 0x20
mov dword [esp + 4], ecx
mov dword [esp], ebp
call sym._strncpy
add dword [esp + 0x14], 1
jmp 0x10002780
mov ecx, dword [esp + 0x60]
mov dword [esp], edi
xor edi, edi
mov edx, ecx
neg edx
and eax, edx
mov edx, eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
call sym._HookPatchTimer
jmp 0x10002780
cmp dword [esi + 4], 0x6d69542c
jne 0x100027ef
cmp dword [esi + 8], 0x65764565
jne 0x100027ef
cmp word [esi + 0xc], 0x746e
jne 0x100027ef
or edi, 2
jmp 0x100027ef
mov eax, dword [esp + 0x1d0]
mov dword [esp + 4], 6
xor edi, edi
lea ebx, [eax - 6]
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
sub esp, 8
mov dword [esp + 0x14], eax
test eax, eax
jne 0x10002581
cmp word [ebx], 0x15ff
je 0x10002968
mov eax, dword [esp + 0x1d0]
mov dword [esp + 0x2c], 0
cmp byte [eax - 5], 0xe8
je 0x100029a9
mov eax, dword [esp + 0x14]
test eax, eax
jns 0x1000258b
call sym._dolog_compat_patched
add esp, 0x1bc
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp], ebx
call sym._fclose
mov eax, dword [esp + 0x14]
or eax, edi
je 0x10002632
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x1d0]
mov dword [esp + eax*4 + 0x84], 0
test edx, edx
je 0x100028e0
mov eax, dword [esp + 0x1d0]
mov dword [esp + 4], 6
lea ebx, [eax - 6]
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
sub esp, 8
test eax, eax
jne 0x100028e0
jmp 0x100028bc
mov dword [esp + 0x84], 0
jmp 0x10002572
mov eax, dword [esp + 0x1d0]
mov edx, dword [eax - 4]
cmp byte [eax - 5], 0xe8
mov dword [esp + 0x2c], edx
je 0x100029c4
cmp edx, 0x1000
jbe 0x100028e0
mov ecx, dword [esp + 0x60]
mov dword [esp], edi
mov eax, ecx
neg eax
and eax, edx
mov edx, eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
call sym._HookPatchTimer
jmp 0x100028e0
mov ecx, eax
mov eax, dword [eax - 4]
add eax, ecx
cmp word [eax], 0x25ff
jne 0x100028e0
mov edx, dword [eax + 2]
mov dword [esp + 0x2c], edx
jmp 0x1000297c
mov eax, dword [esp + 0x1d0]
add eax, edx
cmp word [eax], 0x25ff
jne 0x1000297c
jmp 0x100029bb