Function at 0x100106b7
Capabilities:
Get system information on windows

Disassembly:
push 0x90
mov eax, 0x1003092d
call fcn.1002b85a
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x24], eax
call fcn.10004f6b
xor esi, esi
lea ecx, [ebp - 0x78]
mov dword [ebp - 4], esi
call fcn.10004f6b
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 1
call fcn.10004f6b
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 2
call fcn.10004f6b
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 3
call fcn.10004f6b
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 4
call fcn.10004f6b
push 8
mov byte [ebp - 4], 5
pop ecx
xor eax, eax
mov dword [ebp - 0x9c], esi
lea edi, [ebp - 0x98]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x48]
call fcn.10004f6b
push 1
push esi
push esi
push 0x10010b2c
push 0x1000c458
push 0x80000002
mov byte [ebp - 4], 6
call fcn.1001afaf
mov edi, dword [ebp - 0x24]
push eax
push 0x10010b38
mov ecx, edi
call fcn.1000d23d
mov esi, eax
test esi, esi
js 0x10010acb
lea eax, [ebp - 0x9c]
push eax
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov si, word [ebp - 0x9c]
test si, si
jne 0x100107d1
xor ecx, ecx
mov eax, 0x80000000
cpuid
lea edi, [ebp - 0x20]
mov dword [edi], eax
mov eax, edi
mov edi, dword [ebp - 0x24]
mov dword [eax + 4], ebx
mov dword [eax + 8], ecx
mov ecx, 0x80000001
mov dword [eax + 0xc], edx
cmp dword [ebp - 0x20], ecx
jb 0x100107d1
mov eax, ecx
xor ecx, ecx
cpuid
lea edi, [ebp - 0x20]
mov dword [edi], eax
mov eax, edi
mov edi, dword [ebp - 0x24]
mov dword [eax + 4], ebx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
test dword [ebp - 0x14], 0x20000000
je 0x100107d1
push 9
pop esi
mov word [ebp - 0x9c], si
movzx eax, si
push eax
push 0x1000c500
mov ecx, edi
call fcn.1000d23d
mov esi, eax
test esi, esi
js 0x10010acb
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.1001b590
test eax, eax
js 0x10010860
lea ecx, [ebp - 0x60]
call fcn.1000476f
push eax
lea ebx, [edi + 4]
push 0x10010b44
mov ecx, ebx
call fcn.1001a3dc
mov esi, eax
test esi, esi
js 0x10010acb
lea ecx, [ebp - 0x78]
call fcn.1000476f
push eax
push 0x10010b54
mov ecx, ebx
call fcn.1001a3dc
mov esi, eax
test esi, esi
js 0x10010acb
lea ecx, [ebp - 0x6c]
call fcn.1000476f
push eax
push 0x10010b64
mov ecx, ebx
call fcn.1001a3dc
mov esi, eax
test esi, esi
js 0x10010acb
lea eax, [ebp - 0x54]
push eax
call fcn.1001ad59
test eax, eax
js 0x1001088d
lea ecx, [ebp - 0x54]
call fcn.1000476f
push eax
push 0x10010b6c
lea ecx, [edi + 4]
call fcn.1001a3dc
mov esi, eax
test esi, esi
js 0x10010acb
push 1
xor ebx, ebx
push ebx
push ebx
push 0x10010b74
push 0x1000c458
push 0x80000002
call fcn.1001afaf
test eax, eax
je 0x100108c2
push eax
push 0x1000c50c
mov ecx, edi
call fcn.1000d23d
mov esi, eax
test esi, esi
js 0x10010acd
push 1
push ebx
push ebx
push 0x10010b80
push 0x1000c458
push 0x80000002
call fcn.1001afaf
push eax
push 0x10010b88
mov ecx, edi
call fcn.1000d23d
mov esi, eax
test esi, esi
js 0x10010acd
push 1
push ebx
push ebx
push 0x10010b98
push 0x1000c458
push 0x80000002
call fcn.1001afaf
push eax
push 0x10010ba0
mov ecx, edi
call fcn.1000d23d
mov esi, eax
test esi, esi
js 0x10010acd
push 1
push ebx
push ebx
push 0x10010bb0
push 0x1000c458
push 0x80000002
call fcn.1001afaf
push eax
push 0x10010bbc
mov ecx, edi
call fcn.1000d23d
mov esi, eax
test esi, esi
js 0x10010acd
push 1
push ebx
push ebx
push 0x10010bcc
push 0x1000c458
push 0x80000002
call fcn.1001afaf
push eax
push 0x10010bd8
mov ecx, edi
call fcn.1000d23d
mov esi, eax
test esi, esi
js 0x10010acd
push 1
push 1
lea eax, [ebp - 0x48]
push eax
push 0x10003170
push 0x10010be8
push 0x1000c458
push 0x80000002
call fcn.1001b069
test eax, eax
js 0x100109cf
lea ecx, [ebp - 0x48]
call fcn.1001a029
test eax, eax
je 0x100109cf
lea ecx, [ebp - 0x48]
call fcn.1000476f
push eax
push 0x10010bf4
lea ecx, [edi + 4]
call fcn.1001a3dc
mov esi, eax
test esi, esi
js 0x10010acd
push 1
push ebx
push ebx
push 0x10010c04
push 0x1000c458
push 0x80000002
call fcn.1001afaf
push eax
push 0x10010c10
mov ecx, edi
call fcn.1000d23d
mov esi, eax
test esi, esi
js 0x10010acd
push 1
push ebx
push ebx
push 0x10010c20
push 0x1000c458
push 0x80000002
call fcn.1001afaf
push eax
push 0x10010c2c
mov ecx, edi
call fcn.1000d23d
mov esi, eax
test esi, esi
js 0x10010acd
push 1
push 1
lea eax, [ebp - 0x3c]
push eax
push 0x10003170
push 0x10010c38
push 0x1000c458
push 0x80000002
call fcn.1001b069
test eax, eax
js 0x10010a7a
lea ecx, [ebp - 0x3c]
call fcn.1001a029
test eax, eax
je 0x10010a7a
lea ecx, [ebp - 0x3c]
call fcn.1000476f
push eax
push 0x10010c44
lea ecx, [edi + 4]
call fcn.1001a3dc
mov esi, eax
test esi, esi
js 0x10010acd
push 1
push 1
lea eax, [ebp - 0x30]
push eax
push 0x10003170
push 0x10010c50
push 0x1000c458
push 0x80000002
call fcn.1001b069
test eax, eax
js 0x10010ac7
lea ecx, [ebp - 0x30]
call fcn.1001a029
test eax, eax
je 0x10010ac7
lea ecx, [ebp - 0x30]
call fcn.1000476f
push eax
push 0x10010c5c
lea ecx, [edi + 4]
call fcn.1001a3dc
mov esi, eax
test esi, esi
js 0x10010acd
mov esi, ebx
jmp 0x10010acd
xor ebx, ebx
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 5
call fcn.10004fde
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 4
call fcn.10004fde
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 3
call fcn.10004fde
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 2
call fcn.10004fde
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 1
call fcn.10004fde
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], bl
call fcn.10004fde
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.10004fde
mov eax, esi
call fcn.1002b897
ret 4