Function at 0x43f4f0
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b07e0
mov eax, dword fs:[0]
push eax
sub esp, 0x1b0
push ebx
push esi
push edi
push ecx
lea edi, [ebp - 0x1bc]
mov ecx, 0x6c
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
pop ecx
mov eax, dword [0x4cf110]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x138], 0
mov dword [ebp - 4], 1
lea ecx, [ebp + 0xc]
call fcn.0043bbb8
movzx eax, al
test eax, eax
je 0x43f585
push 0x4b6e90
mov ecx, dword [ebp + 8]
call fcn.0043b4d8
mov eax, dword [ebp - 0x138]
or eax, 1
mov dword [ebp - 0x138], eax
mov byte [ebp - 4], 0
lea ecx, [ebp + 0xc]
call fcn.0043bb59
mov eax, dword [ebp + 8]
jmp 0x43f7b6
lea ecx, [ebp - 0x6c]
call fcn.0043bca3
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x6c]
call fcn.0043c0d1
mov esi, esp
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
cmp esi, esp
call fcn.0043c45a
movzx eax, word [ebp - 0x44]
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 9
jg 0x43f5e7
cmp dword [ebp - 0x1b8], 9
je 0x43f5fc
cmp dword [ebp - 0x1b8], 0
je 0x43f6de
cmp dword [ebp - 0x1b8], 6
je 0x43f66d
jmp 0x43f767
cmp dword [ebp - 0x1b8], 0xffff
je 0x43f74c
jmp 0x43f767
push str.amd64
mov ecx, dword [ebp - 0x18]
call fcn.0043bfaa
push str..ntamd64
mov ecx, dword [ebp - 0x18]
add ecx, 0xb4
call fcn.0043bfaa
push str..amd64
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x1b0]
push ecx
call fcn.0043b0ff
add esp, 0xc
mov dword [ebp - 0x1b8], eax
mov edx, dword [ebp - 0x1b8]
mov dword [ebp - 0x1bc], edx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x1bc]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0043c1b7
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1b0]
call fcn.0043bb59
jmp 0x43f780
push str.ia64
mov ecx, dword [ebp - 0x18]
call fcn.0043bfaa
push str..ntia64
mov ecx, dword [ebp - 0x18]
add ecx, 0xb4
call fcn.0043bfaa
push str..ia64
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x188]
push ecx
call fcn.0043b0ff
add esp, 0xc
mov dword [ebp - 0x1b8], eax
mov edx, dword [ebp - 0x1b8]
mov dword [ebp - 0x1bc], edx
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x1bc]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0043c1b7
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x188]
call fcn.0043bb59
jmp 0x43f780
push str..ntx86
mov ecx, dword [ebp - 0x18]
add ecx, 0xb4
call fcn.0043bfaa
push 0x4b6f24
mov ecx, dword [ebp - 0x18]
call fcn.0043bfaa
push str..x86
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x160]
push ecx
call fcn.0043b0ff
add esp, 0xc
mov dword [ebp - 0x1b8], eax
mov edx, dword [ebp - 0x1b8]
mov dword [ebp - 0x1bc], edx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x1bc]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0043c1b7
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x160]
call fcn.0043bb59
jmp 0x43f780
push str.unkown
mov ecx, dword [ebp - 0x18]
call fcn.0043bfaa
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0043c1b7
jmp 0x43f780
push str.unkown
mov ecx, dword [ebp - 0x18]
call fcn.0043bfaa
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0043c1b7
lea eax, [ebp - 0x6c]
push eax
mov ecx, dword [ebp + 8]
call fcn.0043c0ef
mov ecx, dword [ebp - 0x138]
or ecx, 1
mov dword [ebp - 0x138], ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6c]
call fcn.0043bb59
mov byte [ebp - 4], 0
lea ecx, [ebp + 0xc]
call fcn.0043bb59
mov eax, dword [ebp + 8]
push edx
mov ecx, ebp
push eax
lea edx, [0x43f7f4]
call fcn.0043b8b6
pop eax
pop edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0043b29e
add esp, 0x1bc
cmp ebp, esp
call fcn.0043c45a
mov esp, ebp
pop ebp
ret 0x24