Function at 0x421207
Capabilities:
Get system information on windows

Disassembly:
push 0x2bc
mov eax, 0x4c9dbc
call fcn.00498256
push 0x118
xor esi, esi
lea eax, [ebp - 0x12c]
push esi
push eax
call fcn.0048e2b0
mov edi, dword [0x50cb00]
add esp, 0xc
lea eax, [ebp - 0x130]
push eax
mov dword [ebp - 0x130], 0x11c
call edi
test eax, eax
jne 0x42130b
lea eax, [ebp - 0x130]
push eax
mov dword [ebp - 0x130], 0x114
call edi
test eax, eax
jne 0x42130b
lea eax, [ebp - 0x2c8]
push eax
call fcn.00405267
lea eax, [ebp - 0x2c0]
push 0x4e36a8
push eax
mov dword [ebp - 4], esi
call fcn.00405d69
pop ecx
pop ecx
lea eax, [ebp - 0x15c]
push eax
lea ecx, [ebp - 0x2c8]
call fcn.004052f9
mov byte [ebp - 4], 1
cmp dword [eax + 0x18], 8
jb 0x4212ac
mov eax, dword [eax + 4]
jmp 0x4212af
add eax, 4
push eax
lea eax, [ebp - 0x1b8]
push eax
call fcn.00425a3b
push eax
lea eax, [ebp - 0x19c]
push eax
mov byte [ebp - 4], 2
call fcn.004167e3
add esp, 0x10
mov byte [ebp - 4], 3
cmp dword [eax + 0x18], 0x10
jb 0x4212df
mov eax, dword [eax + 4]
jmp 0x4212e2
add eax, 4
mov dword [ebp - 0x134], eax
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x140]
call fcn.0048ec72
push 0x4f7698
lea eax, [ebp - 0x140]
push eax
call fcn.0048febc
push 8
pop ecx
xor eax, eax
mov dword [ebp - 0x180], esi
lea edi, [ebp - 0x17c]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x180]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x120]
dec eax
je 0x4216a0
dec eax
jne 0x4214c3
cmp dword [ebp - 0x12c], 6
mov bl, byte [ebp - 0x16]
push 2
pop esi
jne 0x42135d
cmp dword [ebp - 0x128], esi
ja 0x42135f
cmp dword [ebp - 0x12c], 6
jbe 0x421371
cmp bl, 1
jne 0x421371
mov ebx, 0xff
mov eax, ebx
call fcn.004982d9
ret
cmp dword [ebp - 0x12c], 6
jne 0x421401
cmp dword [ebp - 0x128], esi
jne 0x421397
dec bl
neg bl
sbb ebx, ebx
and ebx, 0xa
add ebx, 0x82
jmp 0x421369
cmp dword [ebp - 0x128], 1
jne 0x4213bd
cmp bl, 1
jne 0x4213b6
cmp word [ebp - 0x1c], 1
push 0x78
pop ebx
jb 0x421369
push 0x79
jmp 0x421701
push 0x70
jmp 0x421701
cmp dword [ebp - 0x128], 0
jne 0x4214c3
cmp bl, 1
je 0x4213df
cmp word [ebp - 0x1c], si
push 0x6e
pop ebx
jb 0x421369
push 0x6f
jmp 0x421701
cmp word [ebp - 0x1c], 1
push 0x64
pop ebx
jne 0x4213f0
push 0x66
jmp 0x421701
cmp word [ebp - 0x1c], si
jb 0x421369
push 0x67
jmp 0x421701
cmp dword [ebp - 0x12c], 5
jne 0x421631
cmp dword [ebp - 0x128], esi
jne 0x4215d2
cmp bl, 1
je 0x4215db
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x59
call edi
test eax, eax
jne 0x421453
cmp word [ebp - 0x1c], 1
push 0x5a
pop ebx
jne 0x421442
push 0x5c
jmp 0x421701
cmp word [ebp - 0x1c], si
jb 0x421369
push 0x5e
jmp 0x421701
cmp dword [ebp - 0x12c], 5
jne 0x421631
cmp dword [ebp - 0x128], esi
jne 0x4215d2
cmp byte [ebp - 0x16], 1
je 0x4215db
push 0x59
call edi
test eax, eax
je 0x4214a0
cmp word [ebp - 0x1c], 1
push 0x5b
pop ebx
jne 0x42148f
push 0x5d
jmp 0x421701
cmp word [ebp - 0x1c], si
jb 0x421369
push 0x5f
jmp 0x421701
cmp dword [ebp - 0x12c], 5
jne 0x421631
cmp dword [ebp - 0x128], esi
jne 0x4215d2
cmp byte [ebp - 0x16], 1
je 0x4215db
lea eax, [ebp - 0x240]
push eax
call fcn.00405267
mov dword [ebp - 4], 5
movzx eax, byte [ebp - 0x16]
push eax
push ecx
push str.__type
push ecx
push dword [ebp - 0x1a]
mov eax, 0x4e2668
push ecx
push eax
push ecx
push dword [ebp - 0x1c]
push ecx
push str.__sp
push ecx
push dword [ebp - 0x128]
push ecx
push eax
push ecx
push dword [ebp - 0x128]
lea eax, [ebp - 0x238]
push ecx
push str.__version
push ecx
push dword [ebp - 0x12c]
push ecx
push str.Unsupported_operating_system__major
push eax
call fcn.00405d69
add esp, 0xc
push eax
call fcn.0041f5d2
pop ecx
push eax
call fcn.00405d69
add esp, 0xc
push eax
call fcn.0041f5d2
pop ecx
push eax
call fcn.00405d69
add esp, 0xc
push eax
call fcn.0041f5d2
pop ecx
push eax
call fcn.00405d69
add esp, 0xc
push eax
call fcn.0041f3d4
pop ecx
push eax
call fcn.00405d69
add esp, 0xc
push eax
call fcn.0041f3d4
pop ecx
push eax
call fcn.00405d69
add esp, 0xc
push eax
call fcn.0040a3b7
lea eax, [ebp - 0x19c]
push eax
lea ecx, [ebp - 0x240]
call fcn.004052f9
push eax
lea eax, [ebp - 0x1b8]
push eax
mov byte [ebp - 4], 6
call fcn.004167e3
pop ecx
pop ecx
mov byte [ebp - 4], 7
jmp 0x4212d4
push 0x50
jmp 0x421701
cmp word [ebp - 0x1c], si
jne 0x4215c0
push 0x52
jmp 0x421701
cmp word [ebp - 0x1c], 3
jb 0x421369
push 0x54
jmp 0x421701
cmp dword [ebp - 0x128], 1
jne 0x4215e7
cmp word [ebp - 0x1c], 1
push 0x4b
pop ebx
je 0x4215ac
jmp 0x4215b3
cmp dword [ebp - 0x128], 0
jne 0x4214c3
mov eax, dword [ebp - 0x1c]
cmp ax, 1
push 0x2d
pop ebx
jne 0x421607
push 0x32
jmp 0x421701
cmp ax, si
jne 0x421613
push 0x37
jmp 0x421701
cmp ax, 3
jne 0x421620
push 0x3c
jmp 0x421701
cmp ax, 4
jb 0x421369
push 0x41
jmp 0x421701
push 4
pop edi
cmp dword [ebp - 0x12c], edi
jne 0x4214c3
push 0x1e
pop ebx
lea eax, [ebp - 0x11c]
push str.Service_Pack_6
push eax
call fcn.0048e0d8
test eax, eax
pop ecx
pop ecx
jne 0x421369
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionHotfixQ246009
lea eax, [ebp - 0x15c]
call fcn.004078c5
mov dword [ebp - 4], edi
push 0
lea edi, [ebp - 0x15c]
mov ecx, SysFreeString
call fcn.00425bed
pop ecx
push 0
push 1
mov esi, edi
mov bl, al
call fcn.004075b1
neg bl
sbb ebx, ebx
and ebx, 5
add ebx, 0x23
jmp 0x421369
cmp dword [ebp - 0x12c], 4
jne 0x4214c3
cmp dword [ebp - 0x128], 0x5a
jne 0x4216ba
push 0x19
jmp 0x421701
cmp dword [ebp - 0x128], 0xa
jne 0x4216d8
cmp word [ebp - 0x11a], 0x41
push 0xf
pop ebx
jne 0x421369
push 0x14
jmp 0x421701
cmp dword [ebp - 0x128], esi
jne 0x4214c3
cmp word [ebp - 0x11a], 0x43
push 5
pop ebx
je 0x4216ff
cmp word [ebp - 0x11a], 0x42
jne 0x421369
push 0xa
pop ebx
jmp 0x421369