Function at 0x426d60
Capabilities:
Get system information on windows

Disassembly:
sub esp, 0x638
mov eax, dword [0x4a97e0]
xor eax, esp
mov dword [esp + 0x630], eax
push ebx
push ebp
push edi
push 0x1fe
lea eax, [esp + 0x43e]
push 0
push eax
mov word [esp + 0x444], 0
call fcn.00461780
add esp, 0xc
push str.FindInstallSection__
call fcn.00421450
mov edi, eax
call fcn.00421970
lea eax, [esi + 0x14]
add esp, 4
mov dword [esp + 0xc], eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x426db6
sub eax, edx
sar eax, 1
jne 0x4271fb
mov ecx, dword [esi]
mov ebp, dword [sym.imp.SETUPAPI.dll_SetupFindFirstLineW]
lea ebx, [esi + 4]
push ebx
push 0
push str.Manufacturer
push ecx
call ebp
test eax, eax
je 0x427246
xor edi, edi
push edi
push 0x100
lea edx, [esp + 0x440]
push edx
push 1
push ebx
call dword [sym.imp.SETUPAPI.dll_SetupGetStringFieldW]
test eax, eax
je 0x427246
push 0x1fe
lea eax, [esp + 0x23e]
push edi
push eax
mov word [esp + 0x244], di
call fcn.00461780
add esp, 0xc
call fcn.00422a80
test eax, eax
je 0x426f0a
lea ecx, [esp + 0x14]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ax, word [esp + 0x14]
cmp ax, 9
jne 0x426ea6
lea edx, [esp + 0x438]
push edx
lea eax, [esp + 0x23c]
push 0x100
push eax
mov word [esp + 0x244], di
call fcn.0045ea06
add esp, 0xc
push str..NTamd64
lea ecx, [esp + 0x23c]
push 0x100
push ecx
call fcn.0045f406
mov eax, dword [esi]
add esp, 0xc
push ebx
push edi
lea edx, [esp + 0x240]
push edx
push eax
call ebp
test eax, eax
je 0x426fb7
jmp 0x426fdc
cmp ax, 6
jne 0x426fb7
lea ecx, [esp + 0x438]
push ecx
lea edx, [esp + 0x23c]
push 0x100
push edx
mov word [esp + 0x244], di
call fcn.0045ea06
add esp, 0xc
push 0x100
mov eax, str..NTia64
lea ecx, [esp + 0x23c]
call fcn.00421ff0
mov ecx, dword [esi]
add esp, 4
push ebx
push edi
lea eax, [esp + 0x240]
push eax
push ecx
call ebp
test eax, eax
je 0x426fb7
jmp 0x426fdc
call fcn.00422ba0
test eax, eax
jle 0x426f65
lea edx, [esp + 0x438]
push edx
lea eax, [esp + 0x23c]
push 0x100
push eax
mov word [esp + 0x244], di
call fcn.0045ea06
add esp, 0xc
push str..NTx86
lea ecx, [esp + 0x23c]
push 0x100
push ecx
call fcn.0045f406
mov eax, dword [esi]
add esp, 0xc
push ebx
push edi
lea edx, [esp + 0x240]
push edx
push eax
call ebp
test eax, eax
jne 0x426fdc
lea ecx, [esp + 0x438]
push ecx
lea edx, [esp + 0x23c]
push 0x100
push edx
mov word [esp + 0x244], di
call fcn.0045ea06
add esp, 0xc
push 0x495bb0
lea eax, [esp + 0x23c]
push 0x100
push eax
call fcn.0045f406
mov edx, dword [esi]
add esp, 0xc
push ebx
push edi
lea ecx, [esp + 0x240]
push ecx
push edx
call ebp
test eax, eax
jne 0x426fdc
lea eax, [esp + 0x438]
push eax
lea ecx, [esp + 0x23c]
push 0x100
push ecx
mov word [esp + 0x244], di
call fcn.0045ea06
add esp, 0xc
lea edx, [esp + 0x238]
push edx
push str.__Found_Model__s
call fcn.00421450
mov edi, eax
call fcn.00421970
lea edx, [esi + 0x214]
mov eax, edx
add esp, 8
lea edi, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x427003
sub eax, edi
sar eax, 1
push ebx
je 0x42703f
mov ecx, dword [esi]
push edx
lea eax, [esp + 0x240]
push eax
push ecx
call ebp
test eax, eax
jne 0x427056
push ebx
push eax
mov eax, dword [esi]
lea edx, [esp + 0x240]
push edx
push eax
call ebp
test eax, eax
jne 0x427056
jmp 0x427246
mov edx, dword [esi]
push 0
lea ecx, [esp + 0x240]
push ecx
push edx
call ebp
test eax, eax
je 0x427246
push 0
push 0x100
lea eax, [esp + 0x440]
push eax
push 1
push ebx
call dword [sym.imp.SETUPAPI.dll_SetupGetStringFieldW]
test eax, eax
je 0x427246
mov edi, dword [esi + 0x41c]
push 0x1fe
lea ecx, [esp + 0x3e]
push 0
push ecx
mov word [esp + 0x44], 0
call fcn.00461780
add esp, 0xc
call fcn.00422a80
test eax, eax
je 0x427132
lea edx, [esp + 0x14]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ax, word [esp + 0x14]
cmp ax, 9
jne 0x4270e2
lea eax, [esp + 0x438]
push eax
lea ecx, [esp + 0x3c]
push 0x100
push ecx
mov word [esp + 0x44], 0
call fcn.0045ea06
mov eax, str..NTamd64
jmp 0x4271a5
cmp ax, 6
jne 0x427215
lea ecx, [esp + 0x438]
push ecx
lea edx, [esp + 0x3c]
push 0x100
push edx
mov word [esp + 0x44], 0
call fcn.0045ea06
add esp, 0xc
push 0x100
mov eax, str..NTia64
lea ecx, [esp + 0x3c]
call fcn.00421ff0
mov ecx, dword [esi]
add esp, 4
push ebx
push edi
lea eax, [esp + 0x40]
push eax
push ecx
jmp 0x4271c3
call fcn.00422ba0
test eax, eax
jle 0x427182
lea edx, [esp + 0x438]
push edx
lea eax, [esp + 0x3c]
push 0x100
push eax
mov word [esp + 0x44], 0
call fcn.0045ea06
add esp, 0xc
push 0x100
mov eax, str..NTx86
lea ecx, [esp + 0x3c]
call fcn.00421ff0
mov edx, dword [esi]
add esp, 4
push ebx
push edi
lea ecx, [esp + 0x40]
push ecx
push edx
call ebp
test eax, eax
jne 0x4271c9
lea eax, [esp + 0x438]
push eax
lea ecx, [esp + 0x3c]
push 0x100
push ecx
mov word [esp + 0x44], 0
call fcn.0045ea06
mov eax, 0x495bb0
add esp, 0xc
push 0x100
lea ecx, [esp + 0x3c]
call fcn.00421ff0
mov eax, dword [esi]
add esp, 4
push ebx
push edi
lea edx, [esp + 0x40]
push edx
push eax
call ebp
test eax, eax
je 0x427215
lea ecx, [esp + 0x38]
push ecx
push str.__Found_install_section__s
call fcn.00421450
mov edi, eax
call fcn.00421970
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x40]
push edx
push 0x100
push eax
mov word [eax], 0
call fcn.0045ea06
add esp, 0x14
xor eax, eax
pop edi
pop ebp
pop ebx
mov ecx, dword [esp + 0x630]
xor ecx, esp
call fcn.0045e88c
add esp, 0x638
ret
lea eax, [esp + 0x438]
push eax
lea ecx, [esp + 0x3c]
push 0x100
push ecx
mov word [esp + 0x44], 0
call fcn.0045ea06
mov eax, dword [esi]
add esp, 0xc
push ebx
push edi
lea edx, [esp + 0x40]
push edx
push eax
call ebp
test eax, eax
jne 0x4271c9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [esp + 0x63c]
pop edi
pop ebp
pop ebx
xor ecx, esp
call fcn.0045e88c
add esp, 0x638
ret