Function at 0x40e880
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x15c
push ebx
push esi
lea esi, [edi + 0xc]
mov ecx, esi
call fcn.0040c080
lea eax, [ebp - 0x15c]
push eax
mov byte [edi + 0x30], 0
mov dword [ebp - 0x15c], 0x11c
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x158]
mov edx, dword [ebp - 0x154]
mov dword [edi + 8], eax
lea ebx, [ebp - 0x148]
mov eax, esi
mov dword [edi], ecx
mov dword [edi + 4], edx
call fcn.004022c0
call fcn.0040e9e0
mov eax, 0x495f18
call fcn.0040ea00
mov eax, dword [edi]
xor ebx, ebx
sub eax, 5
mov byte [edi + 0x2c], bl
mov dword [edi + 0x1c], ebx
mov dword [edi + 0x20], ebx
mov dword [edi + 0x24], ebx
mov dword [edi + 0x28], ebx
je 0x42b8b0
dec eax
jne 0x40e93a
mov eax, dword [edi + 4]
mov byte [edi + 0x1d], 1
mov byte [edi + 0x1f], 1
mov byte [edi + 0x21], 1
cmp eax, ebx
je 0x42b861
cmp eax, 1
jne 0x42b890
mov byte [edi + 0x23], al
mov byte [edi + 0x25], al
cmp byte [ebp - 0x42], al
jne 0x42b881
mov word [edi + 0x26], 0x101
lea esi, [ebp - 0x10]
mov dword [ebp - 0x10], ebx
mov dword [ebp - 8], ebx
call fcn.00410b60
cmp dword [ebp - 8], ebx
je 0x40e96c
lea ecx, [ebp - 4]
push ecx
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call fcn.00410bb0
call eax
cmp dword [ebp - 4], 1
jne 0x40e96c
mov byte [edi + 0x2c], 1
xor eax, eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
cmp byte [edi + 0x2c], bl
je 0x42b911
lea esi, [ebp - 0x1c]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x14], ebx
call fcn.00410bd0
cmp dword [ebp - 0x14], ebx
je 0x42b902
lea edx, [ebp - 0x40]
push edx
call fcn.00410c20
call eax
mov eax, dword [ebp - 0x1c]
mov esi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp eax, ebx
je 0x40e9c4
push eax
call esi
mov eax, dword [ebp - 0x10]
mov dx, word [ebp - 0x40]
mov word [edi + 0x2e], dx
cmp eax, ebx
je 0x40e9d6
push eax
call esi
pop esi
mov eax, edi
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [ebp - 0x42], 1
jne 0x42b872
mov word [edi + 0x22], 0x101
jmp 0x40e93a
mov byte [edi + 0x23], 1
mov word [edi + 0x24], 0x101
jmp 0x40e93a
mov byte [edi + 0x27], 1
mov word [edi + 0x28], 0x101
jmp 0x40e93a
cmp eax, 2
jne 0x40e93a
mov word [edi + 0x2a], 0x101
mov byte [edi + 0x29], 1
mov byte [edi + 0x27], 1
mov byte [edi + 0x23], 1
jmp 0x40e93a
mov eax, dword [edi + 4]
cmp eax, ebx
jne 0x42b8bf
mov word [edi + 0x1c], 0x101
jmp 0x42b8f0
cmp eax, 1
jne 0x42b8cf
mov byte [edi + 0x1d], al
mov word [edi + 0x1e], 0x101
jmp 0x42b8f0
cmp eax, 2
jne 0x42b8f0
cmp byte [ebp - 0x42], 1
mov byte [edi + 0x1d], 1
mov byte [edi + 0x1f], 1
mov byte [edi + 0x21], 1
jne 0x42b8ec
mov byte [edi + 0x1e], 1
jmp 0x42b8f0
mov byte [edi + 0x20], 1
movzx eax, byte [ebp - 0x44]
shr eax, 6
and eax, 1
mov byte [edi + 0x30], al
jmp 0x40e93a
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
jmp 0x40e9b4
lea ecx, [ebp - 0x40]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov esi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x40e9c4