Function at 0x100f159
Capabilities:
Get system information on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x38
push ebx
xor edx, edx
push esi
push edi
xor eax, eax
mov byte [ebp - 8], dl
lea edi, [ebp - 7]
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0xc], dl
lea edi, [ebp - 0xb]
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ebx, ecx
push 8
xor eax, eax
pop ecx
lea edi, [ebp - 0x34]
mov dword [ebp - 0x38], edx
rep stosd dword es:[edi], eax
mov edi, dword [ebp + 8]
mov dword [edi], edx
mov byte [ebp - 1], 0
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x14], edx
mov esi, 0x10019f4
cmp dword [ebx + 4], edx
jne 0x100f255
mov ecx, 0x80004005
mov ebx, ecx
mov eax, dword [section..data]
cmp eax, section..data
je 0x100f1d0
test byte [eax + 0x1c], 1
je 0x100f1d0
push ecx
push esi
push 0xa
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01003005
push 0
call fcn.0100e819
test eax, eax
jge 0x100f1fe
mov ecx, dword [section..data]
cmp ecx, section..data
je 0x100f1fe
test byte [ecx + 0x1c], 1
je 0x100f1fe
push eax
push esi
push 0xf
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.01003005
push 0x100
push 0x1001b94
push 0x1001580
push 0x80000002
call fcn.010057c9
test eax, eax
jge 0x100f24c
cmp eax, 0x80070002
je 0x100f24c
cmp eax, 0x80070003
je 0x100f24c
mov ecx, dword [section..data]
cmp ecx, section..data
je 0x100f24c
test byte [ecx + 0x1c], 1
je 0x100f24c
push eax
push esi
push 0x10
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.01003005
pop edi
pop esi
mov eax, ebx
pop ebx
leave
ret 4
call fcn.010061f2
test al, al
jne 0x100f265
xor ebx, ebx
jmp 0x100f1d0
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
cmp word [ebp - 0x38], 6
je 0x100f25e
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0100eb68
mov dword [ebp + 8], eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0xc]
push eax
mov ecx, ebx
call fcn.0100f001
test eax, eax
jge 0x100f2fa
cmp dword [ebp + 8], 0
jge 0x100f2c7
mov ecx, dword [section..data]
cmp ecx, section..data
je 0x100f25e
test byte [ecx + 0x1c], 2
je 0x100f25e
push dword [ebp + 8]
push eax
push esi
push 0xb
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.0100e4a1
jmp 0x100f25e
mov ecx, dword [section..data]
cmp ecx, section..data
je 0x100f2ee
test byte [ecx + 0x1c], 2
je 0x100f2ee
push eax
push 0x10019f4
push 0xc
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.01003005
mov eax, dword [ebp - 0x10]
xor ebx, ebx
mov dword [edi], eax
jmp 0x100f24c
cmp dword [ebp + 8], 0
jge 0x100f327
mov eax, dword [section..data]
cmp eax, section..data
je 0x100f33c
test byte [eax + 0x1c], 2
je 0x100f33c
push 0x80004005
push esi
push 0xd
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01003005
jmp 0x100f33c
lea eax, [ebp - 1]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
call fcn.0100e63d
cmp byte [ebp - 1], 0
je 0x100f371
mov ecx, ebx
call fcn.0100e979
mov ebx, eax
test ebx, ebx
jge 0x100f36c
mov eax, dword [section..data]
cmp eax, section..data
je 0x100f1d0
test byte [eax + 0x1c], 1
je 0x100f1d0
push ebx
push esi
push 0xe
jmp 0x100f1c5
mov eax, dword [ebp - 0x14]
jmp 0x100f374
mov eax, dword [ebp - 0x10]
mov dword [edi], eax
xor ebx, ebx
jmp 0x100f24c