Function at 0x40aeaf
Capabilities:
Get system information on windows

Disassembly:
push esi
push edi
xor edi, edi
inc edi
push edi
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0x425180
mov dword [0x425180], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
push 0x425158
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [0x425190]
test eax, eax
je 0x40aee8
cmp eax, edi
jne 0x40aefa
push str.Java_Quick_Starter_does_not_support_your_version_of_Windows_n
call fcn.004115c7
push edi
call fcn.0040b45e
pop ecx
pop ecx
push str.kernel32.dll
call fcn.0040a8ce
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
pop ecx
mov dword [0x425290], eax
test eax, eax
jne 0x40af2a
call esi
push eax
push str.Unable_to_load_kernel32.dll__error__d__n
call fcn.004115c7
push edi
call fcn.0040b45e
add esp, 0xc
push str.advapi32.dll
call fcn.0040a8ce
pop ecx
mov dword [0x425294], eax
test eax, eax
jne 0x40af54
call esi
push eax
push str.Unable_to_load_advapi32.dll__error__d__n
call fcn.004115c7
push edi
call fcn.0040b45e
add esp, 0xc
push str.user32.dll
call fcn.0040a8ce
pop ecx
mov dword [0x425298], eax
test eax, eax
jne 0x40af7e
call esi
push eax
push str.Unable_to_load_user32.dll__error__d__n
call fcn.004115c7
push edi
call fcn.0040b45e
add esp, 0xc
push str.psapi.dll
call fcn.0040a8ce
pop ecx
mov dword [0x42529c], eax
test eax, eax
jne 0x40afa1
call esi
push eax
push str.Unable_to_load_psapi.dll__error__d__n
call fcn.0041130e
pop ecx
pop ecx
push str.pdh.dll
call fcn.0040a8ce
pop ecx
mov dword [0x4252a0], eax
test eax, eax
jne 0x40afc4
call esi
push eax
push str.Unable_to_load_pdh.dll__error__d__n
call fcn.0041130e
pop ecx
pop ecx
push str.SetDllDirectoryA
push dword [0x425290]
push 0x425214
call fcn.0040aa85
push str.GlobalMemoryStatusEx
push dword [0x425290]
push 0x425218
call fcn.0040aaae
push str.QueryMemoryResourceNotification
push dword [0x425290]
push 0x42521c
call fcn.0040aad7
push str.CreateMemoryResourceNotification
push dword [0x425290]
push 0x425220
call fcn.0040ab00
push str.GetNativeSystemInfo
push dword [0x425290]
push 0x425224
call fcn.0040ab29
push str.IsWow64Process
push dword [0x425290]
push 0x425228
call fcn.0040aad7
add esp, 0x48
push str.SetProcessWorkingSetSize
push dword [0x425290]
push 0x42522c
call fcn.0040ab52
push str.GetProcessWorkingSetSize
push dword [0x425290]
push 0x425230
call fcn.0040ab7b
push str.GetLargePageMinimum
push dword [0x425290]
push 0x425234
call fcn.0040aba4
push str.GetSystemPowerStatus
push dword [0x425290]
push 0x425268
call fcn.0040abcd
push str.SetFilePointerEx
push dword [0x425290]
push 0x425248
call fcn.0040abf6
push str.GetDevicePowerState
push dword [0x425290]
push 0x42524c
call fcn.0040aad7
add esp, 0x48
push str.AdjustTokenPrivileges
push dword [0x425294]
push 0x425238
call fcn.0040ac1f
push 0x419c80
push dword [0x425294]
push 0x42523c
call fcn.0040ac48
push str.LookupPrivilegeValueA
push dword [0x425294]
push 0x425240
call fcn.0040ac71
push str.ChangeServiceConfig2A
push dword [0x425294]
push 0x425244
call fcn.0040ac9a
push str.RegisterServiceCtrlHandlerExA
push dword [0x425294]
push 0x42525c
call fcn.0040acc3
push str.RegisterDeviceNotificationA
push dword [0x425298]
push 0x425260
call fcn.0040acec
add esp, 0x48
push str.UnregisterDeviceNotification
push dword [0x425298]
push 0x425264
call fcn.0040ad15
mov eax, dword [0x42529c]
add esp, 0xc
pop edi
pop esi
test eax, eax
je 0x40b1bc
push str.GetModuleInformation
push eax
push 0x425250
call fcn.0040ad3e
push str.GetMappedFileNameA
push dword [0x42529c]
push 0x425254
call fcn.0040ad67
push str.QueryWorkingSet
push dword [0x42529c]
push 0x425258
call fcn.0040ad90
push str.EnumProcessModules
push dword [0x42529c]
push 0x42526c
call fcn.0040adb9
add esp, 0x30
mov eax, dword [0x4252a0]
test eax, eax
je 0x40b25d
push str.PdhOpenQueryA
push eax
push 0x425270
call fcn.0040ade2
push str.PdhAddCounterA
push dword [0x4252a0]
push 0x425274
call fcn.0040ae0b
push str.PdhRemoveCounter
push dword [0x4252a0]
push 0x425278
call fcn.0040ae34
push str.PdhCollectQueryData
push dword [0x4252a0]
push 0x42527c
call fcn.0040ae34
push str.PdhCloseQuery
push dword [0x4252a0]
push 0x425280
call fcn.0040ae34
push str.PdhGetFormattedCounterValue
push dword [0x4252a0]
push 0x425284
call fcn.0040ae5d
add esp, 0x48
push str.PdhMakeCounterPathA
push dword [0x4252a0]
push 0x425288
call fcn.0040ae86
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [0x42528c], eax
ret