Function at 0x413e70
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4a1688
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x40
push ebx
push esi
lea eax, [esp + 0x10]
push edi
push eax
call fcn.004190a0
add esp, 4
push eax
lea ecx, [esp + 0x14]
push str.CPU_Vendor_
push ecx
mov dword [esp + 0x60], 0
call fcn.00401920
add esp, 0xc
mov ecx, dword [ebp + 8]
push eax
mov byte [esp + 0x58], 1
call fcn.00401fa0
mov byte [esp + 0x54], 0
mov eax, dword [esp + 0x10]
push eax
mov edi, eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x413eea
mov ebx, dword [edi + 8]
mov esi, 0x4da170
call fcn.00432310
mov dword [esp + 0x54], 0xffffffff
mov edi, dword [esp + 0x14]
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x413f0e
mov ebx, dword [edi + 8]
mov esi, 0x4da170
call fcn.00432310
lea edx, [esp + 0x10]
push edx
call fcn.00418fd0
add esp, 4
push eax
lea eax, [esp + 0x18]
push str.CPU_Identifier_
mov ebx, 2
push eax
mov dword [esp + 0x60], ebx
call fcn.00401920
add esp, 0xc
mov ecx, dword [ebp + 8]
push eax
mov byte [esp + 0x58], 3
call fcn.00401fa0
mov byte [esp + 0x54], bl
mov eax, dword [esp + 0x14]
push eax
mov edi, eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x413f67
mov ebx, dword [edi + 8]
mov esi, 0x4da170
call fcn.00432310
mov dword [esp + 0x54], 0xffffffff
mov edi, dword [esp + 0x10]
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x413f8b
mov ebx, dword [edi + 8]
mov esi, 0x4da170
call fcn.00432310
lea ecx, [esp + 0x10]
push ecx
call fcn.00419170
add esp, 4
push eax
lea edx, [esp + 0x18]
push str.CPU_Name_
mov ebx, 4
push edx
mov dword [esp + 0x60], ebx
call fcn.00401920
add esp, 0xc
mov ecx, dword [ebp + 8]
push eax
mov byte [esp + 0x58], 5
call fcn.00401fa0
mov byte [esp + 0x54], bl
mov eax, dword [esp + 0x14]
push eax
mov edi, eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x413fe4
mov ebx, dword [edi + 8]
mov esi, 0x4da170
call fcn.00432310
mov dword [esp + 0x54], 0xffffffff
mov edi, dword [esp + 0x10]
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x414008
mov ebx, dword [edi + 8]
mov esi, 0x4da170
call fcn.00432310
lea eax, [esp + 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [esp + 0x38]
push 0xa
push ecx
lea edx, [esp + 0x18]
push edx
call fcn.0041a3b0
add esp, 0xc
push eax
lea eax, [esp + 0x18]
push str.Number_of_logical_CPU_cores_
mov ebx, 6
push eax
mov dword [esp + 0x60], ebx
call fcn.00401920
add esp, 0xc
mov ecx, dword [ebp + 8]
push eax
mov byte [esp + 0x58], 7
call fcn.00401fa0
mov byte [esp + 0x54], bl
mov eax, dword [esp + 0x14]
push eax
mov edi, eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x414073
mov ebx, dword [edi + 8]
mov esi, 0x4da170
call fcn.00432310
mov dword [esp + 0x54], 0xffffffff
mov edi, dword [esp + 0x10]
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x414097
mov ebx, dword [edi + 8]
mov esi, 0x4da170
call fcn.00432310
call fcn.004153f0
push 0
push 0x100000
push edx
push eax
call fcn.0044e9e0
push edx
push eax
lea ecx, [esp + 0x28]
push ecx
call fcn.0041a250
add esp, 0xc
push eax
lea edx, [esp + 0x20]
push str.RAM_
push edx
mov dword [esp + 0x60], 8
call fcn.00401920
add esp, 0xc
push 0x4bf8a4
push eax
lea eax, [esp + 0x20]
mov bl, 9
push eax
mov byte [esp + 0x60], bl
call fcn.00406fd0
add esp, 0xc
mov ecx, dword [ebp + 8]
push eax
mov byte [esp + 0x58], 0xa
call fcn.00401fa0
mov byte [esp + 0x54], bl
mov eax, dword [esp + 0x18]
push eax
mov edi, eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x41411d
mov ebx, dword [edi + 8]
mov esi, 0x4da170
call fcn.00432310
mov byte [esp + 0x54], 8
mov edi, dword [esp + 0x1c]
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x41413e
mov ebx, dword [edi + 8]
mov esi, 0x4da170
call fcn.00432310
mov dword [esp + 0x54], 0xffffffff
mov eax, dword [esp + 0x20]
push eax
mov edi, eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x414164
mov ebx, dword [edi + 8]
mov esi, 0x4da170
call fcn.00432310
mov ecx, dword [esp + 0x4c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4