Function at 0x410f10
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x649777
mov eax, dword fs:[0]
push eax
sub esp, 0x120
mov eax, dword [0x703eb0]
xor eax, esp
mov dword [esp + 0x118], eax
push ebx
push esi
push edi
mov eax, dword [0x703eb0]
xor eax, esp
push eax
lea eax, [esp + 0x130]
mov dword fs:[0], eax
lea ecx, [esp + 0x54]
call fcn.004197a0
lea ecx, [esp + 0x54]
mov dword [esp + 0x138], 0
call fcn.00595390
mov ecx, 0x13
mov word [esp + 0x14], cx
mov dword [esp + 0x1c], eax
mov byte [esp + 0x138], 1
mov edx, dword [esp + 0x20]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
push str.SystemInfoCpuMhz
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], edx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
test esi, esi
jne 0x410fb2
push 0x8007000e
call fcn.00401090
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
push 1
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov dword [eax + 4], ebx
push esi
mov dword [eax + 8], ecx
push 0x722660
mov dword [eax + 0xc], edx
call fcn.00409130
mov ebx, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push esi
call ebx
lea eax, [esp + 0x14]
mov byte [esp + 0x138], 0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
push eax
call edi
lea ecx, [esp + 0x38]
push ecx
lea ecx, [esp + 0x58]
call fcn.00419110
mov byte [esp + 0x138], 2
cmp dword [eax + 0x14], 8
jb 0x411015
mov esi, dword [eax]
jmp 0x411017
mov esi, eax
lea eax, [esp + 0x24]
xor edx, edx
push eax
mov word [esp + 0x28], dx
call edi
test eax, eax
jns 0x41102f
push eax
call fcn.00401090
mov ecx, 8
push esi
mov word [esp + 0x28], cx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esp + 0x2c], eax
test eax, eax
jne 0x411068
test esi, esi
je 0x411068
mov edx, 0xa
push 0x8007000e
mov word [esp + 0x28], dx
mov dword [esp + 0x30], 0x8007000e
call fcn.00401090
mov byte [esp + 0x138], 3
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x30]
push str.SystemInfoCpuName
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x24], eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
test esi, esi
jne 0x4110a7
push 0x8007000e
call fcn.00401090
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
push 1
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x34]
push esi
mov dword [eax + 8], ecx
push 0x722660
mov dword [eax + 0xc], edx
call fcn.00409130
push esi
call ebx
lea eax, [esp + 0x24]
push eax
call edi
cmp dword [esp + 0x4c], 8
jb 0x4110f2
mov ecx, dword [esp + 0x38]
push ecx
call fcn.00419f98
add esp, 4
mov edx, 0xb
or eax, 0xffffffff
mov word [esp + 0x24], dx
mov word [esp + 0x2c], ax
mov byte [esp + 0x138], 4
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x30]
push str.SystemInfoDone
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ecx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
test esi, esi
jne 0x411147
push 0x8007000e
call fcn.00401090
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
push 1
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x34]
push esi
mov dword [eax + 8], edx
push 0x722660
mov dword [eax + 0xc], ecx
call fcn.00409130
push esi
call ebx
lea edx, [esp + 0x24]
push edx
call edi
lea ecx, [esp + 0x54]
call fcn.004111b0
mov ecx, dword [esp + 0x130]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x118]
xor ecx, esp
call fcn.00521602
mov esp, ebp
pop ebp
ret