Function at 0x100915e0
Capabilities:
Get system information on windows

Disassembly:
sub esp, 0x74
push ebx
push esi
push edi
mov dh, dh
mov ebx, ebx
push edx
pop edx
mov edx, edx
mov ah, ah
push ecx
pop ecx
mov ch, ch
mov bl, bl
push ecx
pop ecx
mov eax, eax
mov edx, edx
mov cl, cl
lea eax, [esp + 0x5c]
push eax
call dword [sym.imp.KERNEL32.DLL_GetSystemInfo]
mov cl, cl
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x10], ecx
mov ebp, ebp
mov ebx, dword [sym.imp.KERNEL32.DLL_GetSystemTimeAsFileTime]
lea edx, [esp + 0x1c]
push edx
call ebx
mov cl, cl
mov edi, dword [esp + 0x84]
push 0
push 0
push edi
push 0
push 0x400
call fcn.10059070
add esp, 0x14
mov esi, eax
mov dh, dh
test esi, esi
jne 0x10091653
pop edi
pop esi
mov eax, 0xfa
pop ebx
add esp, 0x74
ret
push ebp
mov ebp, dword [sym.imp.KERNEL32.DLL_GetProcessTimes]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x40]
push edx
lea eax, [esp + 0x3c]
push eax
push esi
call ebp
test eax, eax
jne 0x1009168d
push esi
call fcn.1003c7f0
add esp, 4
mov dh, dh
pop ebp
pop edi
pop esi
mov eax, 0xfa
pop ebx
add esp, 0x74
ret
mov bh, bh
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x50], ecx
mov ecx, ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x54], edx
mov ah, ah
mov bh, bh
mov eax, dword [esp + 0x18]
mov dword [esp + 0x48], eax
mov ecx, ecx
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x4c], ecx
mov ah, ah
mov bh, bh
mov edx, dword [esp + 0x20]
mov dword [esp + 0x58], edx
mov ecx, ecx
mov eax, dword [esp + 0x24]
mov dword [esp + 0x5c], eax
mov ah, ah
mov edx, edx
push eax
pop eax
push esi
call fcn.1003c7f0
add esp, 4
mov esi, esi
push 0x3e8
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov edi, edi
push 0
push 0
push edi
push 0
push 0x400
call fcn.10059070
mov esi, eax
add esp, 0x14
mov dword [esp + 0x10], esi
push ebx
pop ebx
test esi, esi
je 0x10091731
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x3c]
push ecx
push esi
call ebp
test eax, eax
jne 0x1009173e
push esi
call fcn.1003c7f0
add esp, 4
mov cl, cl
pop ebp
pop edi
pop esi
mov eax, 0xfa
pop ebx
add esp, 0x74
ret
lea edx, [esp + 0x20]
push edx
call ebx
mov edi, edi
mov bh, bh
mov eax, dword [esp + 0x28]
mov dword [esp + 0x40], eax
mov ecx, ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x44], ecx
mov ah, ah
mov bh, bh
mov esi, dword [esp + 0x18]
mov ecx, ecx
mov edi, dword [esp + 0x1c]
mov ah, ah
mov bh, bh
mov ebx, dword [esp + 0x20]
mov ecx, ecx
mov ebp, dword [esp + 0x24]
mov ah, ah
mov edx, dword [esp + 0x10]
push edx
call fcn.1003c7f0
add esp, 4
push ecx
pop ecx
mov dl, dl
mov eax, dword [esp + 0x14]
add esi, dword [esp + 0x40]
cdq
adc edi, dword [esp + 0x44]
push edx
push eax
push edi
push esi
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], edx
call fcn.10110980
mov ecx, dword [esp + 0x4c]
mov esi, eax
mov eax, dword [esp + 0x48]
add eax, dword [esp + 0x50]
mov edi, edx
mov edx, dword [esp + 0x3c]
adc ecx, dword [esp + 0x54]
push edx
mov edx, dword [esp + 0x3c]
push edx
push ecx
push eax
call fcn.10110980
fnstcw word [esp + 0x10]
sub esi, eax
sbb edi, edx
sub ebx, dword [esp + 0x58]
mov dword [esp + 0x50], esi
sbb ebp, dword [esp + 0x5c]
mov dword [esp + 0x54], edi
fild qword [esp + 0x50]
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebp
fild qword [esp + 0x58]
movzx eax, word [esp + 0x10]
or eax, 0xc00
mov dword [esp + 0x14], eax
fdivp st(1)
pop ebp
pop edi
pop esi
pop ebx
fmul qword [0x10179920]
fldcw word [esp + 4]
fistp qword [esp + 0x48]
mov eax, dword [esp + 0x48]
fldcw word [esp]
add esp, 0x74
ret