Function at 0x13ea0
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x28], 0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x24], ecx
mov dword [0x1aa1c], 0
mov dword [0x1aa40], 0
cmp dword [ebp - 0x38], 0
jne 0x14156
cmp dword [ebp - 0x24], 0
jne 0x14156
lea edx, [ebp - 0x14]
push edx
push 0
lea eax, [ebp - 0x14]
push eax
push 0xb
call fcn.00017e8e
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x28], 3
jbe 0x13f2c
xor al, al
jmp 0x14158
mov ecx, dword [ebp - 0x28]
add ecx, 1
mov dword [ebp - 0x28], ecx
push 0x206b6444
mov edx, dword [ebp - 0x14]
push edx
push 0
call dword [0x18050]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x13f1f
push 0
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
push 0xb
call fcn.00017e8e
mov dword [ebp - 0x3c], eax
mov edx, dword [ebp - 0x2c]
add edx, 4
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x38]
add eax, dword [edx + 0xc]
mov dword [ebp - 0x24], eax
jmp 0x13f8c
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x38]
cmp edx, dword [ebp - 0x24]
jae 0x14156
call fcn.000114f0
call dword [section..rdata]
mov byte [ebp - 0x31], al
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x13fcf
xor cl, cl
call dword [0x18004]
call dword [section..rdata]
movzx ecx, al
test ecx, ecx
jle 0x13fcf
call fcn.00011510
xor al, al
jmp 0x14158
mov edx, dword [ebp - 0x38]
push edx
call dword [0x1809c]
movzx eax, al
test eax, eax
jne 0x13fe7
call fcn.00011510
jmp 0x13f83
mov ecx, dword [ebp - 0x38]
movzx edx, byte [ecx]
cmp edx, 0xe8
jne 0x1414c
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
push ecx
call dword [0x1809c]
movzx edx, al
test edx, edx
jne 0x1401d
call fcn.00011510
jmp 0x13f83
mov eax, dword [ebp - 0x38]
add eax, 2
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
push ecx
call dword [0x1809c]
movzx edx, al
test edx, edx
jne 0x14041
call fcn.00011510
jmp 0x13f83
mov eax, dword [ebp - 0x38]
add eax, 3
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
push ecx
call dword [0x1809c]
movzx edx, al
test edx, edx
jne 0x14065
call fcn.00011510
jmp 0x13f83
mov eax, dword [ebp - 0x38]
add eax, 4
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
push ecx
call dword [0x1809c]
movzx edx, al
test edx, edx
jne 0x14089
call fcn.00011510
jmp 0x13f83
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
mov edx, dword [ecx]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 4]
lea edx, [ecx + eax + 5]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
cmp eax, dword [0x1a890]
jne 0x140c8
mov ecx, 0x14180
sub ecx, dword [ebp - 0x38]
sub ecx, 5
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x18]
mov dword [edx], eax
mov ecx, dword [ebp - 0x18]
cmp ecx, dword [0x1aa4c]
jne 0x140e9
mov edx, 0x141c0
sub edx, dword [ebp - 0x38]
sub edx, 5
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x18]
mov dword [eax], ecx
mov edx, dword [ebp - 0x18]
cmp edx, dword [0x1a990]
jne 0x1410a
mov eax, 0x14190
sub eax, dword [ebp - 0x38]
sub eax, 5
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x18]
mov dword [ecx], edx
mov eax, dword [ebp - 0x18]
cmp eax, dword [0x1a89c]
jne 0x1412b
mov ecx, 0x14170
sub ecx, dword [ebp - 0x38]
sub ecx, 5
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x18]
mov dword [edx], eax
mov ecx, dword [ebp - 0x18]
cmp ecx, dword [0x1a9e8]
jne 0x1414c
mov edx, 0x14160
sub edx, dword [ebp - 0x38]
sub edx, 5
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x18]
mov dword [eax], ecx
call fcn.00011510
jmp 0x13f83
mov al, 1
mov esp, ebp
pop ebp
ret 0xc