Function at 0x41fdb0
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b9b2e
mov eax, dword fs:[0]
push eax
sub esp, 0xe0
mov eax, dword [0x62dc50]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
fld qword [0x5f92b8]
mov eax, dword [ebp + 8]
mov esi, ecx
fstp qword [ebp - 0xe4]
mov dword [ebp - 4], 0
cmp dword [0x62f758], 0xffffffff
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xb4], esi
jne 0x41fe27
lea ecx, [ebp - 0xa8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [ebp - 0x94]
mov dword [0x62f758], edx
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
push esi
push 0
push 0x400
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
test edi, edi
je 0x41fe76
lea ecx, [ebp - 0xc8]
push ecx
lea edx, [ebp - 0xd0]
push edx
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xec]
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
test eax, eax
jne 0x41fe7e
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or eax, 0xffffffff
jmp 0x420116
lea ecx, [ebp - 0xd0]
call fcn.0041fd60
lea ecx, [ebp - 0xc8]
mov ebx, eax
mov dword [ebp - 0xbc], edx
call fcn.0041fd60
mov ecx, eax
mov eax, dword [0x62f758]
mov esi, edx
cdq
add ecx, ebx
adc esi, dword [ebp - 0xbc]
push edx
push eax
push esi
push ecx
call fcn.0058eb70
lea ecx, [ebp - 0xb0]
mov esi, eax
mov ebx, edx
call fcn.0041fd60
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x67ed38], esi
mov dword [0x67ed3c], ebx
mov dword [0x67ed30], eax
mov dword [0x67ed34], edx
call edi
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [ebp - 0xb4]
push edx
push 0
push 0x400
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x41fe76
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0xd0]
push ecx
lea edx, [ebp - 0xdc]
push edx
lea eax, [ebp - 0xec]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
test eax, eax
jne 0x41ff3e
push esi
call edi
or eax, 0xffffffff
jmp 0x420116
lea ecx, [ebp - 0xb0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea ecx, [ebp - 0xd0]
call fcn.0041fd60
lea ecx, [ebp - 0xc8]
mov ebx, eax
mov dword [ebp - 0xbc], edx
call fcn.0041fd60
mov ecx, eax
mov eax, dword [0x62f758]
mov edi, edx
cdq
add ecx, ebx
adc edi, dword [ebp - 0xbc]
push edx
push eax
push edi
push ecx
call fcn.0058eb70
lea ecx, [ebp - 0xb0]
mov edi, eax
mov ebx, edx
call fcn.0041fd60
push esi
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub edi, dword [0x67ed38]
mov eax, dword [ebp - 0xb8]
sbb ebx, dword [0x67ed3c]
sub eax, dword [0x67ed30]
mov ecx, dword [ebp - 0xb4]
sbb ecx, dword [0x67ed34]
mov dword [ebp - 0xb0], edi
mov dword [ebp - 0xac], ebx
fild qword [ebp - 0xb0]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], ecx
fild qword [ebp - 0xb0]
fdivp st(1)
fmul qword [0x5f92b0]
jmp 0x420111
call fcn.0058ea80
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00587964
mov esp, ebp
pop ebp
ret 4