Function at 0x42ad80
Capabilities:
Get system information on windows

Disassembly:
mov eax, dword [0x5788a8]
sub esp, 0x28
test eax, eax
push ebx
push ebp
push esi
push edi
jne 0x42adfd
lea eax, [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [esp + 0x30]
lea ecx, [eax - 1]
test eax, ecx
mov dword [0x5788a4], eax
jne 0x42ae64
mov ecx, dword [esp + 0x18]
lea edx, [ecx - 1]
test ecx, edx
jne 0x42ae64
mov dword [0x5788b0], eax
mov dword [0x5788ac], ecx
mov dword [0x5788b4], 0x40000
mov dword [0x5788b8], 0x200000
mov dword [0x5788bc], 5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor eax, 0x55555550
and eax, 0xfffffff8
or eax, 8
mov dword [0x5788a8], eax
mov esi, dword [esp + 0x3c]
test byte [esi + 0x1bc], 1
je 0x42af8d
mov eax, dword [esp + 0x40]
cmp eax, dword [0x5788b4]
jae 0x42ae25
test byte [esp + 0x44], 4
je 0x42af8d
mov eax, dword [esi + 0xc]
test eax, eax
je 0x42af8d
mov eax, dword [0x5788a4]
mov edi, dword [esp + 0x40]
mov ecx, dword [esi + 0x1b8]
lea ebx, [eax + edi + 0x22]
dec eax
not eax
and ebx, eax
test ecx, ecx
je 0x42ae6a
mov eax, dword [esi + 0x1b0]
lea edx, [ebx + eax]
cmp edx, eax
jbe 0x42ae5d
cmp edx, ecx
jbe 0x42ae6a
xor ecx, ecx
jmp 0x42af7c
jmp dword [sym.imp.MSVCRT.dll_abort]
cmp ebx, edi
jbe 0x42ae5d
mov eax, dword [esp + 0x44]
mov ecx, eax
shr ecx, 8
and ecx, 0x7f
mov dword [esp + 0x3c], 0
jne 0x42ae9a
push 4
push 0x103000
push ebx
push 0
call fcn.0040e940
add esp, 0x10
mov edi, eax
jmp 0x42aefc
test ah, ah
jns 0x42aea5
imul ecx, ebx
mov ebp, ecx
jmp 0x42aeac
mov ebp, 1
shl ebp, cl
cmp ebp, 0x40000000
jbe 0x42aeb9
mov ebp, 0x40000000
push 4
push 0x102000
push ebp
push 0
call fcn.0040e940
mov edi, eax
add esp, 0x10
test edi, edi
je 0x42ae5d
push 4
push 0x1000
push ebx
push edi
call fcn.0040e940
add esp, 0x10
test eax, eax
je 0x42aeec
mov dword [esp + 0x3c], ebp
jmp 0x42aefc
push 0x8000
push 0
push edi
call fcn.0040e980
add esp, 0xc
test edi, edi
je 0x42ae5d
cmp edi, 0xffffffff
je 0x42ae5d
mov eax, edi
and eax, 7
jne 0x42af18
xor edx, edx
jmp 0x42af1f
neg eax
and eax, 7
mov edx, eax
mov ebp, dword [esp + 0x3c]
add edx, 8
mov eax, ebx
sub eax, edx
sub eax, 0x10
lea ecx, [edi + edx]
mov dword [edi], ebp
mov dword [ecx], edx
mov dword [ecx + 4], eax
mov dword [ecx + eax + 4], 7
mov dword [ecx + eax + 8], 0
mov eax, dword [esi + 0x10]
test eax, eax
je 0x42af52
cmp edi, eax
jae 0x42af55
mov dword [esi + 0x10], edi
mov edi, dword [esi + 0x1b0]
mov edx, dword [esi + 0x1b4]
add edi, ebx
mov eax, edi
cmp eax, edx
mov dword [esi + 0x1b0], edi
jbe 0x42af75
mov dword [esi + 0x1b4], eax
add ecx, 8
test ecx, ecx
jne 0x42af83
test byte [esp + 0x44], 4
je 0x42af8d
pop edi
pop esi
pop ebp
mov eax, ecx
pop ebx
add esp, 0x28
ret
mov eax, dword [0x5788b0]
mov ebp, dword [esp + 0x40]
lea edi, [eax + ebp + 0x2f]
dec eax
not eax
and edi, eax
cmp edi, ebp
jbe 0x42b5ba
mov edx, dword [esi + 0x1b8]
test edx, edx
je 0x42afca
mov eax, dword [esi + 0x1b0]
lea ecx, [eax + edi]
cmp ecx, eax
jbe 0x42b5ba
cmp ecx, edx
ja 0x42b5ba
push 4
push 0x3000
push edi
push 0
call fcn.0040e940
add esp, 0x10
test eax, eax
je 0x42b5ba
cmp eax, 0xffffffff
je 0x42b5ba
mov ebx, dword [esi + 0x1b0]
mov edx, dword [esi + 0x1b4]
add ebx, edi
mov ecx, ebx
cmp ecx, edx
mov dword [esi + 0x1b0], ebx
jbe 0x42b00d
mov dword [esi + 0x1b4], ecx
mov ecx, dword [esi + 0x18]
test ecx, ecx
jne 0x42b0a8
mov ecx, dword [esi + 0x10]
test ecx, ecx
je 0x42b023
cmp eax, ecx
jae 0x42b026
mov dword [esi + 0x10], eax
mov dword [esi + 0x1c0], eax
mov dword [esi + 0x1c4], edi
mov dword [esi + 0x1cc], 1
mov ecx, dword [0x5788a8]
mov dword [esi + 0x24], ecx
mov dword [esi + 0x20], 0xfff
lea ecx, [esi + 0x28]
mov edx, 0x20
mov dword [ecx + 0xc], ecx
mov dword [ecx + 8], ecx
add ecx, 8
dec edx
jne 0x42b054
mov edx, dword [esi - 4]
and edx, 0xfffffff8
lea edx, [edx + esi - 8]
sub eax, edx
mov ecx, edx
and ecx, 7
lea eax, [eax + edi - 0x28]
jne 0x42b07b
xor ecx, ecx
jmp 0x42b080
neg ecx
and ecx, 7
add edx, ecx
sub eax, ecx
mov ecx, eax
mov dword [esi + 0x18], edx
mov dword [esi + 0xc], eax
or ecx, 1
mov dword [edx + 4], ecx
mov dword [edx + eax + 4], 0x28
mov edx, dword [0x5788b8]
mov dword [esi + 0x1c], edx
jmp 0x42b168
lea edx, [esi + 0x1c0]
test edx, edx
je 0x42b134
mov ecx, dword [edx + 4]
add ecx, dword [edx]
cmp eax, ecx
je 0x42b0c8
mov edx, dword [edx + 8]
test edx, edx
jne 0x42b0b6
jmp 0x42b134
mov ebx, dword [edx + 0xc]
test bl, 8
jne 0x42b134
and ebx, 1
cmp bl, 1
jne 0x42b134
mov ecx, dword [edx]
cmp dword [esi + 0x18], ecx
jb 0x42b134
mov ebx, dword [edx + 4]
mov ebp, dword [esi + 0x18]
add ecx, ebx
cmp ebp, ecx
jae 0x42b130
add ebx, edi
mov dword [edx + 4], ebx
mov ecx, dword [esi + 0x18]
mov eax, dword [esi + 0xc]
mov edx, ecx
add eax, edi
and edx, 7
jne 0x42b103
xor edx, edx
jmp 0x42b108
neg edx
and edx, 7
mov ebp, dword [esp + 0x40]
sub eax, edx
add ecx, edx
mov edx, eax
mov dword [esi + 0x18], ecx
mov dword [esi + 0xc], eax
or edx, 1
mov dword [ecx + 4], edx
mov dword [ecx + eax + 4], 0x28
mov eax, dword [0x5788b8]
mov dword [esi + 0x1c], eax
jmp 0x42b168
mov ebp, dword [esp + 0x40]
cmp eax, dword [esi + 0x10]
jae 0x42b13c
mov dword [esi + 0x10], eax
lea ecx, [esi + 0x1c0]
test ecx, ecx
je 0x42b15b
lea edx, [eax + edi]
lea esp, [esp]
cmp dword [ecx], edx
je 0x42b198
mov ecx, dword [ecx + 8]
test ecx, ecx
jne 0x42b150
push 1
push edi
push eax
push esi
call fcn.0042b5d0
add esp, 0x10
mov eax, dword [esi + 0xc]
cmp ebp, eax
jae 0x42b5ba
mov ecx, dword [esi + 0x18]
sub eax, ebp
mov dword [esi + 0xc], eax
lea edx, [ecx + ebp]
or eax, 1
pop edi
mov dword [esi + 0x18], edx
or ebp, 3
mov dword [edx + 4], eax
pop esi
mov dword [ecx + 4], ebp
pop ebp
lea eax, [ecx + 8]
pop ebx
add esp, 0x28
ret
mov edx, dword [ecx + 0xc]
test dl, 8
jne 0x42b15b
and edx, 1
cmp dl, 1
jne 0x42b15b
mov ebx, dword [ecx + 4]
mov edx, dword [ecx]
add ebx, edi
mov dword [ecx], eax
mov dword [ecx + 4], ebx
mov ecx, eax
and ecx, 7
jne 0x42b1bf
xor ecx, ecx
jmp 0x42b1c4
neg ecx
and ecx, 7
add ecx, eax
mov eax, edx
and eax, 7
mov dword [esp + 0x10], ecx
jne 0x42b1d5
xor eax, eax
jmp 0x42b1da
neg eax
and eax, 7
add eax, edx
mov ebx, eax
sub ebx, ecx
lea edi, [ecx + ebp]
sub ebx, ebp
or ebp, 3
mov dword [ecx + 4], ebp
cmp eax, dword [esi + 0x18]
jne 0x42b212
mov edx, dword [esi + 0xc]
add edx, ebx
mov eax, edx
mov dword [esi + 0xc], edx
mov edx, dword [esp + 0x10]
mov dword [esi + 0x18], edi
or eax, 1
mov dword [edi + 4], eax
pop edi
pop esi
pop ebp
lea eax, [edx + 8]
pop ebx
add esp, 0x28
ret
cmp eax, dword [esi + 0x14]
jne 0x42b23e
mov ebp, dword [esi + 8]
mov edx, dword [esp + 0x10]
add ebp, ebx
mov eax, ebp
mov ecx, eax
mov dword [esi + 8], ebp
mov dword [esi + 0x14], edi
or ecx, 1
mov dword [edi + 4], ecx
mov dword [eax + edi], eax
pop edi
pop esi
pop ebp
lea eax, [edx + 8]
pop ebx
add esp, 0x28
ret
mov ebp, dword [eax + 4]
mov edx, ebp
and edx, 3
cmp dl, 1
jne 0x42b404
and ebp, 0xfffffff8
mov ecx, ebp
mov dword [esp + 0x3c], ecx
shr ecx, 3
cmp ecx, 0x20
jae 0x42b2d3
mov ebp, dword [eax + 0xc]
mov edx, dword [eax + 8]
mov dword [esp + 0x40], ebp
lea ebp, [esi + ecx*8 + 0x28]
cmp edx, ebp
mov dword [esp + 0x44], ebp
je 0x42b286
cmp edx, dword [esi + 0x10]
jb 0x42b280
cmp dword [edx + 0xc], eax
je 0x42b286
jmp dword [sym.imp.MSVCRT.dll_abort]
mov ebp, dword [esp + 0x40]
cmp ebp, edx
jne 0x42b2aa
mov edx, 1
shl edx, cl
mov ecx, dword [esi]
not edx
and ecx, edx
mov dword [esi], ecx
mov ecx, dword [esp + 0x3c]
add eax, ecx
add ebx, ecx
jmp 0x42b404
cmp ebp, dword [esp + 0x44]
je 0x42b2c0
cmp ebp, dword [esi + 0x10]
jb 0x42b2ba
cmp dword [ebp + 8], eax
je 0x42b2c0
jmp dword [sym.imp.MSVCRT.dll_abort]
mov ecx, dword [esp + 0x3c]
mov dword [edx + 0xc], ebp
add eax, ecx
mov dword [ebp + 8], edx
add ebx, ecx
jmp 0x42b404
mov ecx, dword [eax + 0xc]
cmp ecx, eax
mov ebp, dword [eax + 0x18]
mov dword [esp + 0x44], ebp
je 0x42b301
mov edx, dword [eax + 8]
cmp edx, dword [esi + 0x10]
jb 0x42b2fb
cmp dword [edx + 0xc], eax
jne 0x42b2fb
cmp dword [ecx + 8], eax
jne 0x42b2fb
mov dword [edx + 0xc], ecx
mov dword [ecx + 8], edx
jmp 0x42b353
jmp dword [sym.imp.MSVCRT.dll_abort]
lea ecx, [eax + 0x14]
mov dword [esp + 0x40], ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x42b320
lea ecx, [eax + 0x10]
mov dword [esp + 0x40], ecx
mov ecx, dword [ecx]
test ecx, ecx
je 0x42b353
nop
lea esp, [esp]
mov ebp, dword [ecx + 0x14]
test ebp, ebp
lea edx, [ecx + 0x14]
jne 0x42b334
mov ebp, dword [ecx + 0x10]
test ebp, ebp
lea edx, [ecx + 0x10]
je 0x42b33c
mov dword [esp + 0x40], edx
mov ecx, ebp
jmp 0x42b320
mov edx, dword [esp + 0x40]
cmp edx, dword [esi + 0x10]
jb 0x42b3fe
mov ebp, dword [esp + 0x44]
mov dword [edx], 0
test ebp, ebp
je 0x42b29d
mov edx, dword [eax + 0x1c]
cmp eax, dword [esi + edx*4 + 0x130]
lea edx, [esi + edx*4 + 0x130]
jne 0x42b392
test ecx, ecx
mov dword [edx], ecx
jne 0x42b3ac
mov ecx, dword [eax + 0x1c]
mov edx, 1
shl edx, cl
mov ecx, dword [esi + 4]
not edx
and ecx, edx
mov dword [esi + 4], ecx
mov ecx, dword [esp + 0x3c]
add eax, ecx
add ebx, ecx
jmp 0x42b404
cmp ebp, dword [esi + 0x10]
jb 0x42b3f8
cmp dword [ebp + 0x10], eax
jne 0x42b3a1
mov dword [ebp + 0x10], ecx
jmp 0x42b3a4
mov dword [ebp + 0x14], ecx
test ecx, ecx
je 0x42b29d
cmp ecx, dword [esi + 0x10]
jb 0x42b3f2
mov dword [ecx + 0x18], ebp
mov edx, dword [eax + 0x10]
test edx, edx
je 0x42b3c6
cmp edx, dword [esi + 0x10]
jb 0x42b3e6
mov dword [ecx + 0x10], edx
mov dword [edx + 0x18], ecx
mov edx, dword [eax + 0x14]
test edx, edx
je 0x42b29d
cmp edx, dword [esi + 0x10]
jb 0x42b3ec
mov dword [ecx + 0x14], edx
mov dword [edx + 0x18], ecx
mov ecx, dword [esp + 0x3c]
add eax, ecx
add ebx, ecx
jmp 0x42b404
jmp dword [sym.imp.MSVCRT.dll_abort]
jmp dword [sym.imp.MSVCRT.dll_abort]
jmp dword [sym.imp.MSVCRT.dll_abort]
jmp dword [sym.imp.MSVCRT.dll_abort]
jmp dword [sym.imp.MSVCRT.dll_abort]
and dword [eax + 4], 0xfffffffe
mov eax, ebx
mov ecx, ebx
or eax, 1
shr ecx, 3
cmp ecx, 0x20
mov dword [edi + 4], eax
mov dword [ebx + edi], ebx
jae 0x42b478
mov eax, 1
shl eax, cl
lea edx, [esi + ecx*8 + 0x28]
mov ecx, dword [esi]
mov ebx, edx
test ecx, eax
jne 0x42b44f
or eax, ecx
mov dword [esi], eax
mov dword [edx + 8], edi
mov dword [ebx + 0xc], edi
mov dword [edi + 8], ebx
mov dword [edi + 0xc], edx
mov edx, dword [esp + 0x10]
pop edi
pop esi
pop ebp
lea eax, [edx + 8]
pop ebx
add esp, 0x28
ret
mov ebx, dword [edx + 8]
cmp ebx, dword [esi + 0x10]
jb 0x42b472
mov dword [edx + 8], edi
mov dword [ebx + 0xc], edi
mov dword [edi + 8], ebx
mov dword [edi + 0xc], edx
mov edx, dword [esp + 0x10]
pop edi
pop esi
pop ebp
lea eax, [edx + 8]
pop ebx
add esp, 0x28
ret
jmp dword [sym.imp.MSVCRT.dll_abort]
mov eax, ebx
shr eax, 8
test eax, eax
jne 0x42b485
xor ecx, ecx
jmp 0x42b4d8
cmp eax, 0xffff
jbe 0x42b493
mov ecx, 0x1f
jmp 0x42b4d8
lea edx, [eax - 0x100]
shr edx, 0x10
and edx, 8
mov ecx, edx
shl eax, cl
lea ecx, [eax - 0x1000]
shr ecx, 0x10
and ecx, 4
shl eax, cl
add edx, ecx
lea ecx, [eax - 0x4000]
shr ecx, 0x10
and ecx, 2
shl eax, cl
shr eax, 0xf
sub eax, ecx
sub eax, edx
add eax, 0xe
lea ecx, [eax + 7]
mov edx, ebx
shr edx, cl
and edx, 1
lea ecx, [edx + eax*2]
xor eax, eax
mov dword [edi + 0x14], eax
mov dword [edi + 0x10], eax
mov eax, 1
shl eax, cl
mov dword [edi + 0x1c], ecx
mov ebp, dword [esi + 4]
lea edx, [esi + ecx*4 + 0x130]
test ebp, eax
jne 0x42b517
or eax, ebp
mov dword [esi + 4], eax
mov dword [edx], edi
mov dword [edi + 0x18], edx
mov edx, dword [esp + 0x10]
mov dword [edi + 0xc], edi
mov dword [edi + 8], edi
pop edi
pop esi
pop ebp
lea eax, [edx + 8]
pop ebx
add esp, 0x28
ret
cmp ecx, 0x1f
mov eax, dword [edx]
jne 0x42b522
xor ebp, ebp
jmp 0x42b52b
shr ecx, 1
mov ebp, 0x19
sub ebp, ecx
mov ecx, ebp
mov edx, ebx
shl edx, cl
mov ecx, dword [eax + 4]
and ecx, 0xfffffff8
cmp ecx, ebx
je 0x42b55e
nop
lea esp, [esp]
mov ecx, edx
shr ecx, 0x1f
lea ebp, [eax + ecx*4 + 0x10]
mov ecx, dword [ebp]
shl edx, 1
test ecx, ecx
je 0x42b58e
mov eax, ecx
mov ecx, dword [eax + 4]
and ecx, 0xfffffff8
cmp ecx, ebx
jne 0x42b540
mov esi, dword [esi + 0x10]
cmp eax, esi
mov ecx, dword [eax + 8]
jb 0x42b5b4
cmp ecx, esi
jb 0x42b5b4
mov edx, dword [esp + 0x10]
mov dword [ecx + 0xc], edi
mov dword [eax + 8], edi
mov dword [edi + 0xc], eax
mov dword [edi + 8], ecx
mov dword [edi + 0x18], 0
pop edi
pop esi
pop ebp
lea eax, [edx + 8]
pop ebx
add esp, 0x28
ret
cmp ebp, dword [esi + 0x10]
jb 0x42b5ae
mov edx, dword [esp + 0x10]
mov dword [ebp], edi
mov dword [edi + 0x18], eax
mov dword [edi + 0xc], edi
mov dword [edi + 8], edi
pop edi
pop esi
pop ebp
lea eax, [edx + 8]
pop ebx
add esp, 0x28
ret
jmp dword [sym.imp.MSVCRT.dll_abort]
jmp dword [sym.imp.MSVCRT.dll_abort]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x28
ret