Function at 0x100143c0
Capabilities:
Get system information on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1004103b
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x10047ca4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
xor ebx, ebx
mov dword [ebp - 4], ebx
cmp dword [0x10049438], ebx
jne 0x10014411
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x3c]
mov dword [0x10049438], eax
cmp dword [edi + 0x188], 0
jne 0x100144aa
mov esi, dword [ebp + 8]
mov dword [edi + 0x15c], 1
test esi, esi
jne 0x1001444d
test byte [0x1004926c], 2
je 0x10014af2
cmp dword [0x1004b47c], esi
jne 0x10014acf
jmp 0x10014af2
push 0x10
push 0
call dword [sym.imp.MSDART.DLL_MpGetHeapHandle]
push eax
call dword [sym.imp.MSDART.DLL_MpHeapAlloc]
mov ebx, eax
add esp, 0xc
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 1
test ebx, ebx
je 0x10014494
mov dword [ebx], esi
mov eax, dword [esi]
push esi
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x1004a1e8]
call esi
mov byte [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 1
jmp 0x10014496
xor ebx, ebx
mov byte [ebp - 4], 0
mov dword [edi + 0x134], ebx
test ebx, ebx
je 0x10014afc
xor ebx, ebx
mov eax, dword [edi + 0x134]
mov ecx, edi
push dword [eax]
call fcn.10030e50
mov ecx, edi
call fcn.10014b60
mov esi, eax
test esi, esi
jns 0x100144e5
test byte [0x1004926c], 2
je 0x10014b20
cmp dword [0x1004b478], 0
jne 0x10014b01
jmp 0x10014b20
push 0x1f8
call dword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov ecx, eax
test ecx, ecx
jne 0x10014514
test byte [0x1004926c], 2
je 0x10014b4a
cmp dword [0x1004b474], eax
jne 0x10014b27
jmp 0x10014b4a
mov eax, dword [0x10009a9c]
mov dword [ecx], eax
mov eax, dword [0x10009aa0]
mov dword [ecx + 4], eax
mov eax, dword [0x10009aa4]
mov dword [ecx + 8], eax
mov eax, dword [0x10009aa8]
mov dword [ecx + 0xc], eax
mov eax, dword [0x10009aac]
mov dword [ecx + 0x10], eax
mov eax, dword [0x10009ab0]
mov dword [ecx + 0x14], eax
mov eax, dword [0x10009a84]
mov dword [ecx + 0x18], eax
mov eax, dword [0x10009a88]
mov dword [ecx + 0x1c], eax
mov eax, dword [0x10009a8c]
mov dword [ecx + 0x20], eax
mov eax, dword [0x10009a90]
mov dword [ecx + 0x24], eax
mov eax, dword [0x10009a94]
mov dword [ecx + 0x28], eax
mov eax, dword [0x10009a98]
mov dword [ecx + 0x2c], eax
mov eax, dword [0x10009ba4]
mov dword [ecx + 0x30], eax
mov eax, dword [0x10009ba8]
mov dword [ecx + 0x34], eax
mov eax, dword [0x10009bac]
mov dword [ecx + 0x38], eax
mov eax, dword [0x10009bb0]
mov dword [ecx + 0x3c], eax
mov eax, dword [0x10009bb4]
mov dword [ecx + 0x40], eax
mov eax, dword [0x10009bb8]
mov dword [ecx + 0x44], eax
mov eax, dword [0x10009b8c]
mov dword [ecx + 0x48], eax
mov eax, dword [0x10009b90]
mov dword [ecx + 0x4c], eax
mov eax, dword [0x10009b94]
mov dword [ecx + 0x50], eax
mov eax, dword [0x10009b98]
mov dword [ecx + 0x54], eax
mov eax, dword [0x10009b9c]
mov dword [ecx + 0x58], eax
mov eax, dword [0x10009ba0]
mov dword [ecx + 0x5c], eax
mov eax, dword [0x10009b5c]
mov dword [ecx + 0x60], eax
mov eax, dword [0x10009b60]
mov dword [ecx + 0x64], eax
mov eax, dword [0x10009b64]
mov dword [ecx + 0x68], eax
mov eax, dword [0x10009b68]
mov dword [ecx + 0x6c], eax
mov eax, dword [0x10009b6c]
mov dword [ecx + 0x70], eax
mov eax, dword [0x10009b70]
mov dword [ecx + 0x74], eax
mov eax, dword [0x10009b14]
mov dword [ecx + 0x78], eax
mov eax, dword [0x10009b18]
mov dword [ecx + 0x7c], eax
mov eax, dword [0x10009b1c]
mov dword [ecx + 0x80], eax
mov eax, dword [0x10009b20]
mov dword [ecx + 0x84], eax
mov eax, dword [0x10009b24]
mov dword [ecx + 0x88], eax
mov eax, dword [0x10009b28]
mov dword [ecx + 0x8c], eax
mov eax, dword [0x10009bd4]
mov dword [ecx + 0x90], eax
mov eax, dword [0x10009bd8]
mov dword [ecx + 0x94], eax
mov eax, dword [0x10009bdc]
mov dword [ecx + 0x98], eax
mov eax, dword [0x10009be0]
mov dword [ecx + 0x9c], eax
mov eax, dword [0x10009be4]
mov dword [ecx + 0xa0], eax
mov eax, dword [0x10009be8]
mov dword [ecx + 0xa4], eax
mov eax, dword [0x10009a6c]
mov dword [ecx + 0xa8], eax
mov eax, dword [0x10009a70]
mov dword [ecx + 0xac], eax
mov eax, dword [0x10009a74]
mov dword [ecx + 0xb0], eax
mov eax, dword [0x10009a78]
mov dword [ecx + 0xb4], eax
mov eax, dword [0x10009a7c]
mov dword [ecx + 0xb8], eax
mov eax, dword [0x10009a80]
mov dword [ecx + 0xbc], eax
mov eax, dword [0x10009afc]
mov dword [ecx + 0xc0], eax
mov eax, dword [0x10009b00]
mov dword [ecx + 0xc4], eax
mov eax, dword [0x10009b04]
mov dword [ecx + 0xc8], eax
mov eax, dword [0x10009b08]
mov dword [ecx + 0xcc], eax
mov eax, dword [0x10009b0c]
mov dword [ecx + 0xd0], eax
mov eax, dword [0x10009b10]
mov dword [ecx + 0xd4], eax
mov eax, dword [0x10009ae4]
mov dword [ecx + 0xd8], eax
mov eax, dword [0x10009ae8]
mov dword [ecx + 0xdc], eax
mov eax, dword [0x10009aec]
mov dword [ecx + 0xe0], eax
mov eax, dword [0x10009af0]
mov dword [ecx + 0xe4], eax
mov eax, dword [0x10009af4]
mov dword [ecx + 0xe8], eax
mov eax, dword [0x10009af8]
mov dword [ecx + 0xec], eax
mov eax, dword [0x10009acc]
mov dword [ecx + 0xf0], eax
mov eax, dword [0x10009ad0]
mov dword [ecx + 0xf4], eax
mov eax, dword [0x10009ad4]
mov dword [ecx + 0xf8], eax
mov eax, dword [0x10009ad8]
mov dword [ecx + 0xfc], eax
mov eax, dword [0x10009adc]
mov dword [ecx + 0x100], eax
mov eax, dword [0x10009ae0]
mov dword [ecx + 0x104], eax
mov eax, dword [0x10009a54]
mov dword [ecx + 0x108], eax
mov eax, dword [0x10009a58]
mov dword [ecx + 0x10c], eax
mov eax, dword [0x10009a5c]
mov dword [ecx + 0x110], eax
mov eax, dword [0x10009a60]
mov dword [ecx + 0x114], eax
mov eax, dword [0x10009a64]
mov dword [ecx + 0x118], eax
mov eax, dword [0x10009a68]
mov dword [ecx + 0x11c], eax
mov eax, dword [0x10009a3c]
mov dword [ecx + 0x120], eax
mov eax, dword [0x10009a40]
mov dword [ecx + 0x124], eax
mov eax, dword [0x10009a44]
mov dword [ecx + 0x128], eax
mov eax, dword [0x10009a48]
mov dword [ecx + 0x12c], eax
mov eax, dword [0x10009a4c]
mov dword [ecx + 0x130], eax
mov eax, dword [0x10009a50]
mov dword [ecx + 0x134], eax
mov eax, dword [0x10009b44]
mov dword [ecx + 0x138], eax
mov eax, dword [0x10009b48]
mov dword [ecx + 0x13c], eax
mov eax, dword [0x10009b4c]
mov dword [ecx + 0x140], eax
mov eax, dword [0x10009b50]
mov dword [ecx + 0x144], eax
mov eax, dword [0x10009b54]
mov dword [ecx + 0x148], eax
mov eax, dword [0x10009b58]
mov dword [ecx + 0x14c], eax
mov eax, dword [0x10009b2c]
mov dword [ecx + 0x150], eax
mov eax, dword [0x10009b30]
mov dword [ecx + 0x154], eax
mov eax, dword [0x10009b34]
mov dword [ecx + 0x158], eax
mov eax, dword [0x10009b38]
mov dword [ecx + 0x15c], eax
mov eax, dword [0x10009b3c]
mov dword [ecx + 0x160], eax
mov eax, dword [0x10009b40]
mov dword [ecx + 0x164], eax
mov eax, dword [0x10009b74]
mov dword [ecx + 0x168], eax
mov eax, dword [0x10009b78]
mov dword [ecx + 0x16c], eax
mov eax, dword [0x10009b7c]
mov dword [ecx + 0x170], eax
mov eax, dword [0x10009b80]
mov dword [ecx + 0x174], eax
mov eax, dword [0x10009b84]
mov dword [ecx + 0x178], eax
mov eax, dword [0x10009b88]
mov dword [ecx + 0x17c], eax
mov eax, dword [0x10009ab4]
mov dword [ecx + 0x180], eax
mov eax, dword [0x10009ab8]
mov dword [ecx + 0x184], eax
mov eax, dword [0x10009abc]
mov dword [ecx + 0x188], eax
mov eax, dword [0x10009ac0]
mov dword [ecx + 0x18c], eax
mov eax, dword [0x10009ac4]
mov dword [ecx + 0x190], eax
mov eax, dword [0x10009ac8]
mov dword [ecx + 0x194], eax
mov eax, dword [0x10009bbc]
mov dword [ecx + 0x198], eax
mov eax, dword [0x10009bc0]
mov dword [ecx + 0x19c], eax
mov eax, dword [0x10009bc4]
mov dword [ecx + 0x1a0], eax
mov eax, dword [0x10009bc8]
mov dword [ecx + 0x1a4], eax
mov eax, dword [0x10009bcc]
mov dword [ecx + 0x1a8], eax
mov eax, dword [0x10009bd0]
mov dword [ecx + 0x1ac], eax
mov eax, dword [0x1000572c]
mov dword [ecx + 0x1b0], eax
mov eax, dword [0x10005730]
mov dword [ecx + 0x1b4], eax
mov eax, dword [0x10005734]
mov dword [ecx + 0x1b8], eax
mov eax, dword [0x10005738]
mov dword [ecx + 0x1bc], eax
mov eax, dword [0x1000573c]
mov dword [ecx + 0x1c0], eax
mov eax, dword [0x10005740]
mov dword [ecx + 0x1c4], eax
mov eax, dword [0x10005714]
mov dword [ecx + 0x1c8], eax
mov eax, dword [0x10005718]
mov dword [ecx + 0x1cc], eax
mov eax, dword [0x1000571c]
mov dword [ecx + 0x1d0], eax
mov eax, dword [0x10005720]
mov dword [ecx + 0x1d4], eax
mov eax, dword [0x10005724]
mov dword [ecx + 0x1d8], eax
mov eax, dword [0x10005728]
mov dword [ecx + 0x1dc], eax
mov eax, dword [0x100056fc]
mov dword [ecx + 0x1e0], eax
mov eax, dword [0x10005700]
mov dword [ecx + 0x1e4], eax
mov eax, dword [0x10005704]
mov dword [ecx + 0x1e8], eax
mov eax, dword [0x10005708]
mov dword [ecx + 0x1ec], eax
mov eax, dword [0x1000570c]
mov dword [ecx + 0x1f0], eax
mov eax, dword [0x10005710]
mov dword [ecx + 0x1f4], eax
mov dword [edi + 0xdc], ecx
lea ecx, [edi + 0x12c]
mov dword [edi + 0xd8], 0x15
call fcn.10030f20
mov esi, eax
test esi, esi
js 0x10014a66
mov ecx, edi
call fcn.10030580
mov esi, eax
test esi, esi
js 0x10014a66
mov eax, dword [edi + 0x80]
mov ecx, edi
imul eax, dword [edi + 0x78]
add eax, dword [edi + 0x7c]
push eax
call fcn.10030780
mov esi, eax
test esi, esi
jns 0x10014aa2
test byte [0x1004926c], 2
je 0x10014b20
cmp dword [0x1004b470], 0
je 0x10014b20
mov eax, dword [0x1004b470]
push 0xb7
push esi
push eax
push 0x2dc00
jmp 0x10014b12
mov eax, ebx
jmp 0x10014ab1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100401a0
mov esp, ebp
pop ebp
ret 4
mov eax, dword [0x1004b47c]
push 0x8f
push 0x80070057
push eax
mov eax, dword [0x1004b0f4]
push 0x23c00
push eax
call fcn.10028190
add esp, 0x14
mov ecx, 0x80070057
call fcn.1003ec80
call fcn.1003eca0
mov eax, dword [0x1004b478]
push 0x96
push esi
push eax
push 0x25800
mov eax, dword [0x1004b0f4]
push eax
call fcn.10028190
add esp, 0x14
mov ecx, esi
call fcn.1003ec80
mov eax, dword [0x1004b474]
push 0x9a
push 0x8007000e
push eax
mov eax, dword [0x1004b0f4]
push 0x26800
push eax
call fcn.10028190
add esp, 0x14
mov ecx, 0x8007000e
call fcn.1003ec80
int3