Function at 0x419fb0
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5948b8
mov eax, dword fs:[0]
push eax
sub esp, 0x178
mov eax, dword [0x601ffc]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
push 0x118
lea eax, [ebp - 0x17c]
mov dword [ebp - 4], 0
push 0
push eax
call fcn.0056e4a0
mov eax, dword fs:[0x2c]
add esp, 0xc
mov dword [ebp - 0x180], 0x11c
mov ecx, dword [eax]
mov eax, dword [0x60dbac]
cmp eax, dword [ecx + 4]
jle 0x41a05a
push 0x60dbac
call fcn.0056a4b1
add esp, 4
cmp dword [0x60dbac], 0xffffffff
jne 0x41a05a
push str.RtlGetVersion
push str.ntdll.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x60dbac
mov dword [0x60dafc], eax
call fcn.0056a472
add esp, 4
mov eax, dword [0x60dafc]
test eax, eax
je 0x41a322
lea ecx, [ebp - 0x180]
push ecx
call eax
test eax, eax
jne 0x41a322
call fcn.00424750
test al, al
je 0x41a1ca
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 0xffffffffffffffff
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push eax
mov word [ecx], ax
lea eax, [ebp + 8]
push eax
call fcn.004031e0
call fcn.00419b80
add esp, 0x18
test al, al
je 0x41a1ca
cmp dword [esi + 0x10], 0
jne 0x41a322
call fcn.00424d90
test al, al
je 0x41a0d8
push str.WNT_RS5
mov ecx, esi
call fcn.00402720
cmp dword [esi + 0x10], 0
jne 0x41a322
call fcn.00424ce0
test al, al
je 0x41a0f7
push str.WNT_RS4
mov ecx, esi
call fcn.00402720
cmp dword [esi + 0x10], 0
jne 0x41a322
call fcn.00424c30
test al, al
je 0x41a116
push str.WNT_RS3
mov ecx, esi
call fcn.00402720
cmp dword [esi + 0x10], 0
jne 0x41a322
call fcn.00424b80
test al, al
je 0x41a135
push str.WNT_RS2
mov ecx, esi
call fcn.00402720
cmp dword [esi + 0x10], 0
jne 0x41a322
call fcn.00424ad0
test al, al
je 0x41a154
push str.WNT_RS1
mov ecx, esi
call fcn.00402720
cmp dword [esi + 0x10], 0
jne 0x41a322
call fcn.00424a20
test al, al
je 0x41a173
push str.WNT_TH2
mov ecx, esi
call fcn.00402720
cmp dword [esi + 0x10], 0
jne 0x41a322
call fcn.00424970
test al, al
je 0x41a192
push str.WNT_TH1
mov ecx, esi
call fcn.00402720
cmp dword [esi + 0x10], 0
jne 0x41a322
sub esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.0040a070
lea ecx, [ebp - 0x28]
call fcn.00419c50
add esp, 0x18
mov ecx, esi
push eax
call fcn.004065d0
lea ecx, [ebp - 0x28]
call fcn.00401d40
jmp 0x41a322
call fcn.00419890
mov ecx, dword [ebp - 0x170]
mov edi, eax
cmp ecx, 2
jne 0x41a2df
push dword [ebp - 0x178]
lea eax, [ebp - 0x20]
push dword [ebp - 0x17c]
push str.WNT__d._d
push eax
call fcn.0041bf00
add esp, 0x10
lea eax, [ebp - 0x20]
mov ecx, esi
push eax
call fcn.00402720
mov al, byte [ebp - 0x66]
cmp al, 2
je 0x41a22c
cmp al, 3
je 0x41a22c
test dword [ebp - 0x68], 0x200
mov ecx, esi
je 0x41a225
push 0x5dfa9c
jmp 0x41a28a
push 0x5dfa98
jmp 0x41a28a
test edi, edi
je 0x41a28f
lea eax, [ebp - 0x50]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ax, word [ebp - 0x50]
cmp ax, 6
je 0x41a250
test ax, ax
je 0x41a250
push 0x5dfa80
jmp 0x41a255
push 0x5dfa84
mov ecx, esi
call fcn.00401d00
cmp dword [ebp - 0x17c], 0xa
jne 0x41a28f
call fcn.00424d90
test al, al
je 0x41a27a
push str._2019
mov ecx, esi
call fcn.00401d00
call fcn.00424ad0
test al, al
je 0x41a28f
push str._2016
mov ecx, esi
call fcn.00401d00
cmp dword [ebp - 0x17c], 6
jb 0x41a2c5
lea ecx, [ebp - 0x44]
mov edx, esi
test edi, edi
je 0x41a2a8
push 0x5dfaa4
jmp 0x41a2ad
push 0x5dfaa0
call fcn.00407b60
add esp, 4
mov ecx, esi
push eax
call fcn.004065d0
lea ecx, [ebp - 0x44]
call fcn.00401d40
push 0x57
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x41a322
push str._MCE
mov ecx, esi
call fcn.00401d00
jmp 0x41a322
cmp ecx, 1
jne 0x41a30e
push dword [ebp - 0x178]
lea eax, [ebp - 0x5c]
push dword [ebp - 0x17c]
push str.WIN__d._d
push eax
call fcn.0041bf20
add esp, 0x10
lea eax, [ebp - 0x5c]
mov ecx, esi
push eax
call fcn.00402720
jmp 0x41a322
push 0
push str.GetOSVersion_fail
push str.Unknown_system_platform...
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, dword [ebp + 0x1c]
cmp eax, 8
jb 0x41a337
inc eax
lea ecx, [ebp + 8]
push eax
push dword [ebp + 8]
call fcn.004030d0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0056a31e
mov esp, ebp
pop ebp
ret