Function at 0x1000c2e5
Capabilities:
Get system information on windows

Disassembly:
mov eax, 0x1006551f
call fcn.10064c08
sub esp, 0x74
push ebx
push esi
push edi
xor ebx, ebx
mov esi, edx
mov edi, ecx
mov dword [ebp - 0x20], ebx
call fcn.10008321
push ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.1000cef7
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x1c], 0xffffffff
push 4
call fcn.100014bd
mov dword [ebp - 0x1c], ebx
jmp 0x1000c336
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
mov dword [eax + ecx*4], 0x2b57e8b7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1000c326
mov dword [ebp - 0x1c], ebx
jmp 0x1000c3f0
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x18], ebx
jmp 0x1000c3e3
mov dword [ebp - 0x4c], 0x3bf38c08
mov dword [ebp - 0x48], 0x3bf38c08
mov dword [ebp - 0x44], 0x3bf38c08
mov dword [ebp - 0x40], 0x3bf38c08
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
mov dword [eax + ecx*4], 0x6a162c9c
mov dword [ebp - 0x44], 3
cmp dword [ebp - 0x44], ebx
jl 0x1000c3e0
mov dword [ebp - 0x14], 0x50b5f0b1
mov dword [ebp - 0x14], ebx
jmp 0x1000c3c5
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
cmp dword [eax + ecx*4], ebx
jne 0x1000c3a2
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x3c]
mov dword [eax + edx*4], ecx
cmp dword [ebp - 0x44], ebx
jne 0x1000c3cb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jle 0x1000c394
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x1000c3db
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
dec dword [ebp - 0x44]
jns 0x1000c388
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jle 0x1000c353
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xc
je 0x1000c344
lea ecx, [ebp - 0x3c]
call fcn.10001540
mov ecx, dword [ebp - 0x30]
add esi, 0xffffb29a
mov edx, ecx
mov eax, dword [ecx + 4]
cmp byte [eax + 0xd], 0
jne 0x1000c43b
cmp dword [eax + 0x10], esi
jge 0x1000c420
mov eax, dword [eax + 8]
jmp 0x1000c424
mov edx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x1000c416
cmp edx, ecx
je 0x1000c43b
cmp esi, dword [edx + 0x10]
jl 0x1000c43b
mov dword [ebp - 0x24], edx
lea esi, [ebp - 0x24]
jmp 0x1000c441
mov dword [ebp - 0x28], ecx
lea esi, [ebp - 0x28]
mov eax, dword [0x10083320]
mov esi, dword [esi]
test al, 1
jne 0x1000c47a
or eax, 1
mov dword [0x10083318], 7
mov dword [0x10083320], eax
xor eax, eax
push 0x10066c66
mov dword [0x10083314], ebx
mov word [0x10083304], ax
call fcn.1004c2a6
pop ecx
mov ecx, dword [ebp - 0x30]
cmp esi, ecx
je 0x1000c496
push dword [esi + 0x18]
mov edx, dword [esi + 0x14]
lea ecx, [ebp - 0x7c]
call fcn.10003534
pop ecx
xor ebx, ebx
mov byte [ebp - 4], 1
inc ebx
jmp 0x1000c4a9
push 0x10083304
lea ecx, [ebp - 0x64]
call fcn.10001dc3
push 2
pop ebx
mov dword [ebp - 4], ebx
push eax
mov ecx, edi
mov dword [ebp - 0x20], ebx
call fcn.10001dc3
or ebx, 4
test bl, 2
je 0x1000c4cb
push 0
push 1
lea ecx, [ebp - 0x64]
and ebx, 0xfffffffd
call fcn.10001f60
test bl, 1
je 0x1000c4dc
push 0
push 1
lea ecx, [ebp - 0x7c]
call fcn.10001f60
lea ecx, [ebp - 0x30]
call fcn.1000cb0f
mov ecx, dword [ebp - 0xc]
mov eax, edi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret