Function at 0x4f9f70
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x248
mov eax, dword [0x5f3418]
xor eax, ebp
mov dword [esp + 0x240], eax
mov eax, dword [0x6bfaf8]
mov ecx, dword [0x5f75b4]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x4f9fc5
mov ecx, dword [esp + 0x240]
xor ecx, ebp
call fcn.00512ee3
mov eax, 0x6bfaf4
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push 0x6bfaf8
call fcn.00510c6d
add esp, 4
cmp dword [0x6bfaf8], 0xffffffff
jne 0x4f9faa
lea esi, [esp + 0x128]
xor ebx, ebx
push 0x118
push ebx
push esi
call fcn.005191b0
add esp, 0xc
mov dword [esi - 4], 0x11c
lea edi, [esp + 0x124]
push edi
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
lea esi, [esp + 0x18]
mov dword [esi + 4], ebx
mov dword [esi], ebx
mov dword [esi + 8], ebx
push esi
push 1
call fcn.0041a930
add esp, 8
lea ebx, [esp + 0x24]
mov ecx, esi
push ebx
call fcn.00407e90
movzx eax, byte [ebx + 0xb]
test al, al
jns 0x4fa039
mov ecx, dword [esp + 0x28]
jmp 0x4fa03e
mov ecx, eax
and ecx, 0x7f
cmp ecx, 9
jne 0x4fa1d0
test al, al
mov ecx, dword [esp + 0x24]
mov edx, ebx
cmovs edx, ecx
cmp word [edx], 0x33
jne 0x4fa1d0
test al, al
mov edx, ebx
cmovs edx, ecx
cmp word [edx + 2], 0x36
jne 0x4fa1d0
test al, al
mov edx, ebx
cmovs edx, ecx
cmp word [edx + 4], 0x30
jne 0x4fa1d0
test al, al
mov edx, ebx
cmovs edx, ecx
cmp word [edx + 6], 0x73
jne 0x4fa1d0
test al, al
mov edx, ebx
cmovs edx, ecx
cmp word [edx + 8], 0x65
jne 0x4fa1d0
test al, al
mov edx, ebx
cmovs edx, ecx
cmp word [edx + 0xa], 0x2e
jne 0x4fa1d0
test al, al
mov edx, ebx
cmovs edx, ecx
cmp word [edx + 0xc], 0x65
jne 0x4fa1d0
test al, al
mov edx, ebx
cmovs edx, ecx
cmp word [edx + 0xe], 0x78
jne 0x4fa1d0
test al, al
mov edx, ebx
cmovs edx, ecx
cmp word [edx + 0x10], 0x65
jne 0x4fa1d0
test al, al
js 0x4fa1c2
xor eax, eax
mov dword [esp + 0x24], eax
push ebx
push eax
push eax
push dword [esp + 0x138]
push dword [esp + 0x138]
call dword [sym.imp.KERNEL32.dll_GetProductInfo]
push 0x54
call fcn.00510d64
add esp, 4
mov esi, eax
mov ebx, dword [esp + 0x24]
mov eax, dword [0x6bfd60]
mov ecx, dword [0x5f75b4]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jle 0x4fa187
push 0x6bfd60
call fcn.00510c6d
add esp, 4
cmp dword [0x6bfd60], 0xffffffff
jne 0x4fa187
xorps xmm0, xmm0
movups xmmword [0x6bfd4c], xmm0
movups xmmword [0x6bfd3c], xmm0
mov dword [0x6bfd5c], 0
push 0x6bfd3c
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
push 0x6bfd60
call fcn.00510d9d
add esp, 4
mov ecx, esi
push ebx
push 0x6bfd3c
push edi
call fcn.00408030
cmp byte [esp + 0x23], 0
js 0x4fa1b4
mov dword [0x6bfaf4], esi
push 0x6bfaf8
call fcn.00510d9d
add esp, 4
jmp 0x4f9faa
push dword [esp + 0x18]
call fcn.0050fc7c
add esp, 4
jmp 0x4fa19c
push ecx
call fcn.0050fc7c
add esp, 4
jmp 0x4fa0f4
lea esi, [esp + 0xc]
lea ecx, [esp + 0x18]
push esi
call fcn.00407e90
movzx eax, byte [esi + 0xb]
test al, al
jns 0x4fa1ec
mov ecx, dword [esp + 0x10]
jmp 0x4fa1f1
mov ecx, eax
and ecx, 0x7f
cmp ecx, 0xd
jne 0x4fa3bc
test al, al
mov ecx, dword [esp + 0xc]
mov edx, esi
cmovs edx, ecx
cmp word [edx], 0x33
jne 0x4fa2e3
test al, al
mov edx, esi
cmovs edx, ecx
cmp word [edx + 2], 0x36
jne 0x4fa2e3
test al, al
mov edx, esi
cmovs edx, ecx
cmp word [edx + 4], 0x30
jne 0x4fa2e3
test al, al
mov edx, esi
cmovs edx, ecx
cmp word [edx + 6], 0x73
jne 0x4fa2e3
test al, al
mov edx, esi
cmovs edx, ecx
cmp word [edx + 8], 0x65
jne 0x4fa2e3
test al, al
mov edx, esi
cmovs edx, ecx
cmp word [edx + 0xa], 0x63
jne 0x4fa2e3
test al, al
mov edx, esi
cmovs edx, ecx
cmp word [edx + 0xc], 0x6f
jne 0x4fa2e3
test al, al
mov edx, esi
cmovs edx, ecx
cmp word [edx + 0xe], 0x72
jne 0x4fa2e3
test al, al
mov edx, esi
cmovs edx, ecx
cmp word [edx + 0x10], 0x65
jne 0x4fa2e3
test al, al
mov edx, esi
cmovs edx, ecx
cmp word [edx + 0x12], 0x2e
jne 0x4fa2e3
test al, al
mov edx, esi
cmovs edx, ecx
cmp word [edx + 0x14], 0x65
jne 0x4fa2e3
test al, al
mov edx, esi
cmovs edx, ecx
cmp word [edx + 0x16], 0x78
jne 0x4fa2e3
test al, al
mov edx, esi
cmovs edx, ecx
cmp word [edx + 0x18], 0x65
jne 0x4fa2e3
test al, al
js 0x4fa3ae
cmp byte [esp + 0x2f], 0
jns 0x4fa0f4
push dword [esp + 0x24]
jmp 0x4fa1c3
test al, al
js 0x4fa3a0
cmp byte [esp + 0x2f], 0
js 0x4fa38f
xor eax, eax
dec eax
mov dword [esp + 0xc], eax
lea ecx, [esp + 8]
mov dword [ecx], eax
lea ecx, [esp + 4]
mov dword [ecx], eax
mov ecx, esp
mov dword [ecx], eax
push 0x100
push 0
push ebx
call fcn.005191b0
sub esp, 0x18
movaps xmm0, xmmword [0x5dee40]
movups xmmword [esp + 0x14], xmm0
mov dword [esp + 0x10], ebx
lea eax, [esp + 0x24]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x28]
mov dword [esp + 8], eax
lea eax, [esp + 0x2c]
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.00570450
add esp, 0x24
mov eax, dword [esp + 0xc]
lea ecx, [esp + 0x138]
mov dword [ecx - 0x10], eax
lea eax, [esp + 8]
mov eax, dword [eax]
mov dword [ecx - 0xc], eax
lea eax, [esp + 4]
mov eax, dword [eax]
mov dword [ecx - 8], eax
mov eax, esp
mov eax, dword [eax]
mov dword [ecx - 4], eax
xor eax, eax
dec eax
push eax
push ebx
push 0x80
push ecx
call fcn.005346bf
add esp, 0x10
jmp 0x4fa0f4
push dword [esp + 0x24]
call fcn.0050fc7c
add esp, 4
jmp 0x4fa2f6
push ecx
call fcn.0050fc7c
add esp, 4
jmp 0x4fa2eb
push ecx
call fcn.0050fc7c
add esp, 4
jmp 0x4fa2cf
test al, al
jns 0x4fa2eb
push dword [esp + 0xc]
jmp 0x4fa3a1