Function at 0x4300a0
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4459c8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x70
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0x20]
push esi
push edi
mov edi, ecx
mov ecx, dword [ebp + 0xc]
mov dword [edi], 0
mov dword [edi + 4], 0
mov dword [edi + 8], 0
mov dword [edi + 0xc], ecx
mov dword [edi + 0x10], 0xffffffff
mov edx, dword [eax]
xor eax, eax
cmp ebx, 0xffffffff
mov dword [ebp - 0x10], edx
cmove ebx, eax
cmp ecx, 0xc0000001
jg 0x430126
je 0x43011c
cmp ecx, 0x80000000
je 0x430132
cmp ecx, 0xc0000000
jne 0x4302d8
mov eax, 4
lea ecx, [eax - 2]
jmp 0x43013c
mov eax, 8
lea ecx, [eax - 7]
jmp 0x43013c
cmp ecx, 0xc0000002
jne 0x4302d8
mov eax, 2
mov ecx, 4
push 0
push 0
push 0
push eax
push 0
push edx
or ebx, ecx
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp + 0xc], eax
test eax, eax
jne 0x430168
call sub.KERNEL32.dll_GetLastError
push eax
lea ecx, [ebp + 0x10]
call fcn.00434310
jmp 0x4302e2
mov dword [ebp - 0x14], eax
mov esi, dword [0x45a008]
mov dword [ebp - 4], 0
test esi, esi
jne 0x430189
lea eax, [ebp - 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov esi, dword [ebp - 0x2c]
push 0
push esi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
call fcn.0040cb60
mov edx, dword [ebp + 0x10]
mov ecx, edx
imul eax, esi
sub ecx, eax
mov eax, dword [ebp + 0x1c]
mov esi, eax
mov dword [ebp + 8], ecx
sub esi, ecx
test eax, eax
cmove esi, eax
mov dword [ebp + 0x20], esi
mov esi, dword [ebp + 0x18]
test esi, esi
jne 0x43021e
push 4
call fcn.004380a0
add esp, 4
lea ecx, [ebp - 0x24]
push esi
push 0x10
push ecx
push esi
push dword [ebp + 0xc]
call eax
test eax, eax
je 0x4301e8
call sub.KERNEL32.dll_GetLastError
push eax
lea ecx, [ebp + 0x10]
call fcn.00434310
jmp 0x4302e2
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + 0x14]
cmp eax, ecx
jl 0x430251
mov edx, dword [ebp - 0x1c]
jg 0x4301fc
cmp edx, dword [ebp + 0x10]
jb 0x430251
sub edx, dword [ebp + 0x10]
sbb eax, ecx
mov ecx, dword [ebp + 8]
add edx, ecx
adc eax, 0
test eax, eax
ja 0x430251
jb 0x430214
cmp edx, 0xffffffff
ja 0x430251
mov edx, dword [ebp + 0x10]
mov esi, ecx
sub esi, edx
add esi, dword [ebp - 0x1c]
push dword [ebp + 0x20]
lea eax, [ecx + esi]
sub edx, ecx
mov ecx, dword [ebp + 0x14]
push eax
push edx
sbb ecx, 0
push ecx
push ebx
mov ebx, dword [ebp + 0xc]
push ebx
call dword [sym.imp.KERNEL32.dll_MapViewOfFileEx]
test eax, eax
jne 0x430258
call sub.KERNEL32.dll_GetLastError
push eax
lea ecx, [ebp + 0x10]
call fcn.00434310
jmp 0x4302e2
push 0x12
jmp 0x4302da
mov ecx, dword [ebp + 8]
add eax, ecx
push ebx
mov dword [edi], eax
mov dword [edi + 8], ecx
mov dword [edi + 4], esi
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea eax, [edi + 0x10]
push 2
push 0
push 0
push eax
call esi
push eax
push dword [ebp - 0x10]
call esi
push eax
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
jne 0x4302c3
call sub.KERNEL32.dll_GetLastError
push eax
lea ecx, [ebp + 0x10]
call fcn.00434310
mov ecx, edi
call fcn.004351c0
push 0
lea eax, [ebp + 0x10]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00434370
push 0x452a9c
lea eax, [ebp - 0x7c]
jmp 0x4302f8
mov ecx, dword [ebp - 0xc]
mov eax, edi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x1c
push 0x11
lea ecx, [ebp + 0x10]
call fcn.00434350
push 0
lea eax, [ebp + 0x10]
push eax
lea ecx, [ebp - 0x50]
call fcn.00434370
push 0x452a9c
lea eax, [ebp - 0x50]
push eax
call fcn.0040e96c
int3