Function at 0x43ee80
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a1165
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push ebx
push esi
push edi
mov eax, dword [0x4c448c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
mov esi, edi
call fcn.0040b4f0
push str.GetLogicalProcessorInformation
lea esi, [edi + 0x2f00]
push str.kernel32
mov dword [ebp - 0x10], esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esi], eax
test eax, eax
jne 0x43eedd
mov byte [esi + 4], al
jmp 0x43eee5
call fcn.0043dfc0
mov byte [esi + 4], al
lea ebx, [edi + 0x2f38]
call fcn.00426c10
lea esi, [edi + 0x2f54]
mov dword [ebp - 4], 0
mov ebx, esi
mov dword [ebp - 0x18], esi
call fcn.00426c10
lea edi, [esi + 0x3c]
mov byte [ebp - 4], 1
call fcn.00459f40
xor ebx, ebx
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], ebx
mov dword [esi + 0x24], ebx
mov dword [esi + 0x28], ebx
mov dword [esi + 0x2c], ebx
mov dword [esi + 0x30], ebx
mov dword [esi + 0x34], ebx
mov dword [esi + 0x38], ebx
mov byte [ebp - 4], 2
mov eax, dword [0x4c41fc]
mov edx, dword [eax + 0xc]
mov ecx, 0x4c41fc
call edx
mov esi, dword [ebp + 8]
add eax, 0x10
mov dword [esi + 0x2ff8], eax
mov dword [esi + 0x30c8], ebx
mov dword [esi + 0x30cc], ebx
mov dword [esi + 0x30d0], ebx
mov byte [ebp - 4], 4
mov eax, dword [0x4c41fc]
mov edx, dword [eax + 0xc]
mov ecx, 0x4c41fc
call edx
add eax, 0x10
mov dword [esi + 0x30dc], eax
mov byte [ebp - 4], 5
mov eax, dword [0x4c41fc]
mov edx, dword [eax + 0xc]
mov ecx, 0x4c41fc
call edx
add eax, 0x10
mov dword [esi + 0x30e0], eax
mov byte [ebp - 4], 6
mov eax, dword [0x4c41fc]
mov edx, dword [eax + 0xc]
mov ecx, 0x4c41fc
call edx
add eax, 0x10
mov dword [esi + 0x30e4], eax
mov byte [ebp - 4], 7
mov eax, dword [0x4c41fc]
mov edx, dword [eax + 0xc]
mov ecx, 0x4c41fc
call edx
add eax, 0x10
mov dword [esi + 0x30e8], eax
mov byte [ebp - 4], 8
mov eax, dword [0x4c41fc]
mov edx, dword [eax + 0xc]
mov ecx, 0x4c41fc
call edx
add eax, 0x10
mov dword [esi + 0x30ec], eax
mov byte [ebp - 4], 9
mov eax, dword [0x4c41fc]
mov edx, dword [eax + 0xc]
mov ecx, 0x4c41fc
call edx
add eax, 0x10
mov dword [esi + 0x30f0], eax
mov byte [ebp - 4], 0xa
mov eax, dword [0x4c41fc]
mov edx, dword [eax + 0xc]
mov ecx, 0x4c41fc
call edx
add eax, 0x10
mov dword [esi + 0x30f4], eax
mov byte [ebp - 4], 0xb
mov eax, dword [0x4c41fc]
mov edx, dword [eax + 0xc]
mov ecx, 0x4c41fc
call edx
add eax, 0x10
mov dword [esi + 0x30f8], eax
mov byte [ebp - 4], 0xc
push 0x18
mov dword [esi + 0x32b4], ebx
call fcn.00473e79
add esp, 4
cmp eax, ebx
je 0x43f5a5
mov dword [esi + 0x32b0], eax
mov dword [eax], eax
mov eax, dword [esi + 0x32b0]
mov dword [eax + 4], eax
mov eax, dword [esi + 0x32b0]
mov dword [eax + 8], eax
mov eax, dword [esi + 0x32b0]
mov byte [eax + 0x14], 1
mov ecx, dword [esi + 0x32b0]
mov byte [ecx + 0x15], 1
mov byte [ebp - 4], 0xd
push 0x18
mov dword [esi + 0x32c4], ebx
call fcn.00473e79
add esp, 4
cmp eax, ebx
je 0x43f581
mov dword [esi + 0x32c0], eax
mov dword [eax], eax
mov eax, dword [esi + 0x32c0]
mov dword [eax + 4], eax
mov eax, dword [esi + 0x32c0]
mov dword [eax + 8], eax
mov edx, dword [esi + 0x32c0]
mov byte [edx + 0x14], 1
mov eax, dword [esi + 0x32c0]
mov byte [eax + 0x15], 1
mov dword [esi + 0x32cc], ebx
mov dword [esi + 0x32d0], ebx
mov dword [esi + 0x32d4], ebx
mov dword [esi + 0x32dc], ebx
mov dword [esi + 0x32e0], ebx
mov dword [esi + 0x32e4], ebx
mov dword [esi + 0x32ec], ebx
mov dword [esi + 0x32f0], ebx
mov dword [esi + 0x32f4], ebx
mov dword [esi + 0x32fc], ebx
mov dword [esi + 0x3300], ebx
mov dword [esi + 0x3304], ebx
mov dword [esi + 0x330c], ebx
mov dword [esi + 0x3310], ebx
mov dword [esi + 0x3314], ebx
mov dword [esi + 0x331c], ebx
mov dword [esi + 0x3320], ebx
mov dword [esi + 0x3324], ebx
mov dword [esi + 0x332c], ebx
mov dword [esi + 0x3330], ebx
mov dword [esi + 0x3334], ebx
mov dword [esi + 0x333c], ebx
mov dword [esi + 0x3340], ebx
mov dword [esi + 0x3344], ebx
mov dword [esi + 0x334c], ebx
mov dword [esi + 0x3350], ebx
mov dword [esi + 0x3354], ebx
mov dword [esi + 0x335c], ebx
mov dword [esi + 0x3360], ebx
mov dword [esi + 0x3364], ebx
mov dword [esi + 0x336c], ebx
mov dword [esi + 0x3370], ebx
mov dword [esi + 0x3374], ebx
mov dword [esi + 0x337c], ebx
mov dword [esi + 0x3380], ebx
mov dword [esi + 0x3384], ebx
mov dword [esi + 0x338c], ebx
mov dword [esi + 0x3390], ebx
mov dword [esi + 0x3394], ebx
mov dword [esi + 0x339c], ebx
mov dword [esi + 0x33a0], ebx
mov dword [esi + 0x33a4], ebx
mov dword [esi + 0x33ac], ebx
mov dword [esi + 0x33b0], ebx
mov dword [esi + 0x33b4], ebx
mov dword [esi + 0x33bc], ebx
mov dword [esi + 0x33c0], ebx
mov dword [esi + 0x33c4], ebx
mov dword [esi + 0x33cc], ebx
mov dword [esi + 0x33d0], ebx
mov dword [esi + 0x33d4], ebx
mov dword [esi + 0x33dc], ebx
mov dword [esi + 0x33e0], ebx
mov dword [esi + 0x33e4], ebx
mov dword [esi + 0x33ec], ebx
mov dword [esi + 0x33f0], ebx
mov dword [esi + 0x33f4], ebx
mov dword [esi + 0x33fc], ebx
mov dword [esi + 0x3400], ebx
mov dword [esi + 0x3404], ebx
mov dword [esi + 0x340c], ebx
mov dword [esi + 0x3410], ebx
mov dword [esi + 0x3414], ebx
mov dword [esi + 0x341c], ebx
mov dword [esi + 0x3420], ebx
mov dword [esi + 0x3424], ebx
mov dword [esi + 0x342c], ebx
mov dword [esi + 0x3430], ebx
mov dword [esi + 0x3434], ebx
mov dword [esi + 0x343c], ebx
mov dword [esi + 0x3440], ebx
mov dword [esi + 0x3444], ebx
mov dword [esi + 0x344c], ebx
mov dword [esi + 0x3450], ebx
mov dword [esi + 0x3454], ebx
mov dword [esi + 0x345c], ebx
mov dword [esi + 0x3460], ebx
mov dword [esi + 0x3464], ebx
mov dword [esi + 0x346c], ebx
mov dword [esi + 0x3470], ebx
mov dword [esi + 0x3474], ebx
mov dword [esi + 0x347c], ebx
mov dword [esi + 0x3480], ebx
mov dword [esi + 0x3484], ebx
mov dword [esi + 0x348c], ebx
mov dword [esi + 0x3490], ebx
mov dword [esi + 0x3494], ebx
mov dword [esi + 0x349c], ebx
mov dword [esi + 0x34a0], ebx
mov dword [esi + 0x34a4], ebx
mov dword [esi + 0x34ac], ebx
mov dword [esi + 0x34b0], ebx
mov dword [esi + 0x34b4], ebx
mov dword [esi + 0x34d4], ebx
mov dword [esi + 0x34d8], ebx
mov dword [esi + 0x34dc], ebx
push 0xffffffffffffffff
push str.ProcessLasso
lea ecx, [esi + 0x644]
push 0x104
push ecx
mov byte [ebp - 4], 0x2e
call fcn.004740e7
mov edx, dword [0x4c7dd0]
mov edi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
add esp, 0x10
push 0x80000400
lea eax, [esi + 0x30fc]
push eax
mov dword [esi + 0x84c], 0x4b31f8
mov dword [esi + 0x18], edx
mov dword [esi + 0x14], 4
call edi
push 0x80000400
lea ecx, [esi + 0x34bc]
push ecx
call edi
push 0x80000400
lea edx, [esi + 0x2fbc]
push edx
call edi
push 0x80000400
lea eax, [esi + 0x3114]
push eax
call edi
push 0x80000400
lea ecx, [esi + 0x312c]
push ecx
call edi
push 0x80000400
lea edx, [esi + 0x3144]
push edx
call edi
push 0x80000400
lea eax, [esi + 0x315c]
push eax
call edi
push 0x80000400
lea ecx, [esi + 0x3174]
push ecx
call edi
push 0x80000400
lea edx, [esi + 0x318c]
push edx
call edi
push 0x80000400
lea eax, [esi + 0x31a4]
push eax
call edi
push 0x80000400
lea ecx, [esi + 0x31bc]
push ecx
call edi
push 0x80000400
lea edx, [esi + 0x31d4]
push edx
call edi
push 0x80000400
lea eax, [esi + 0x31ec]
push eax
call edi
push 0x80000400
lea ecx, [esi + 0x3204]
push ecx
call edi
push 0x80000400
lea edx, [esi + 0x321c]
push edx
call edi
push 0x80000400
lea eax, [esi + 0x3264]
push eax
call edi
push 0x80000400
lea ecx, [esi + 0x3234]
push ecx
call edi
push 0x80000400
lea edx, [esi + 0x324c]
push edx
call edi
push 0x80000400
lea eax, [esi + 0x327c]
push eax
call edi
push 0x80000400
lea ecx, [esi + 0x3294]
push ecx
call edi
mov eax, dword [ebp - 0x10]
mov byte [esi + 0x3018], bl
mov dword [esi + 0x2f34], ebx
cmp byte [eax + 4], bl
jne 0x43f481
xor eax, eax
jmp 0x43f484
mov eax, dword [eax + 0x14]
mov dword [esi + 0x2f34], eax
mov eax, esi
mov byte [esi + 0x30ac], bl
mov byte [esi + 0x3062], bl
mov dword [esi + 0x34e4], 0x80000001
mov byte [esi + 0x307e], bl
mov byte [esi + 0x3085], bl
call fcn.0043fc30
mov edi, dword [sym.imp.KERNEL32.dll_CreateEventW]
push str.LocalioloGovernorConfigChange
push ebx
push ebx
push ebx
mov dword [esi + 0x3010], ebx
mov dword [esi + 0x3014], ebx
mov dword [esi + 0x3004], ebx
mov dword [esi + 0x3008], ebx
mov dword [esi + 0x3000], 3
call edi
push str.Lasso888_2
push ebx
push ebx
push ebx
mov dword [esi + 0x3004], eax
call edi
push esi
lea ecx, [esi + 0x30e4]
mov dword [esi + 0x3008], eax
call fcn.0044a200
lea edi, [esi + 0x30dc]
mov ecx, esi
call fcn.00449640
lea edi, [esi + 0x30e0]
mov ecx, esi
call fcn.00449640
push 0xc
push str.iologvr.log
mov ebx, edi
call fcn.00418c50
lea edx, [esi + 0x2fd4]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
cmp byte [0x4c84bc], 0
jne 0x43f566
mov eax, dword [0x4c84e8]
cmp eax, 0x32c8
je 0x43f55f
cmp eax, 0x7d0
je 0x43f55f
cmp eax, 0x2ee0
jne 0x43f566
mov byte [0x4c84bc], 1
call fcn.004524f0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x14], ebx
call fcn.00473505
push 0x4bc6fc
lea ecx, [ebp - 0x24]
push ecx
mov dword [ebp - 0x24], vtable.std::bad_alloc.0
call fcn.00475f21
lea edx, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x18], ebx
call fcn.00473505
push 0x4bc6fc
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x30], vtable.std::bad_alloc.0
call fcn.00475f21
int3