Function at 0x610c0670
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
lea ecx, [ebp - 0x118]
push esi
mov esi, 0xe
push ebx
sub esp, 0x140
mov edx, dword fs:[4]
mov ebx, dword [ebp + 8]
sub edx, 0x319c
mov eax, dword [edx + 0xc30]
mov dword [ebp - 0x48], eax
mov eax, dword [edx + 0xc34]
mov dword [edx + 0xc30], ecx
mov dword [ebp - 0x44], eax
mov dword [edx + 0xc34], esi
mov dword [esp], ecx
call sym.___sjfault
test eax, eax
jne 0x610c09da
mov eax, dword [0x61102d0c]
mov edx, 0x61135820
mov dword [esp + 4], edx
mov dword [esp], eax
call sym.cygwin1.dll__strstr
mov dword [esp], ebx
mov esi, eax
mov eax, 0x64
mov dword [esp + 8], eax
xor eax, eax
mov dword [esp + 4], eax
call sym.cygwin1.dll__memset
mov dword [esp], ebx
mov eax, 0x611650c0
mov dword [esp + 8], eax
mov eax, str.CYGWIN__s
mov dword [esp + 4], eax
call sym.___small_sprintf
cmp byte [0x611650e8], 0
jne 0x610c0827
lea eax, [ebp - 0x38]
mov dword [esp], eax
call sub.KERNEL32.dll_GetSystemInfo
sub esp, 4
mov eax, 0x13
mov dword [esp + 4], eax
lea eax, [ebx + 0x14]
mov dword [esp], eax
call sym._cygwin_gethostname
movzx eax, word [0x61102d0a]
test esi, esi
mov dword [esp + 0x24], eax
movzx eax, word [0x61102d08]
mov dword [esp + 0x20], eax
movzx eax, word [0x61102d02]
mov dword [esp + 0x1c], eax
movzx eax, word [0x61102d00]
mov dword [esp + 0x18], eax
je 0x610c09d0
movzx ecx, word [0x61102d04]
mov eax, 0x6113582e
mov dword [esp + 0x14], eax
movzx eax, word [0x61102d06]
mov dword [esp + 0x10], eax
mov eax, 0x10624dd3
mul ecx
shr edx, 6
imul eax, edx, 0x3e8
mov dword [esp + 8], edx
sub ecx, eax
movzx eax, cx
mov dword [esp + 0xc], eax
mov ecx, str._d._d._d_s__d._d__d__d_
lea eax, [ebx + 0x28]
mov dword [esp + 4], ecx
mov dword [esp], eax
call sym.___small_sprintf
mov eax, dword [0x61102d0c]
mov dword [esp + 4], eax
lea eax, [ebx + 0x3c]
mov dword [esp], eax
call sym.cygwin1.dll__strcpy
mov edx, dword [0x61102d0c]
mov eax, esi
sub eax, edx
mov byte [ebx + eax + 0x3c], 0
movzx eax, word [ebp - 0x38]
cmp eax, 0xa
jbe switch.0x610c0820
mov dword [ebx + 0x50], 0x6e6b6e75
mov dword [ebx + 0x54], 0x6e776f
mov edx, dword fs:[4]
mov eax, dword [ebp - 0x48]
sub edx, 0x319c
mov dword [edx + 0xc30], eax
mov eax, dword [ebp - 0x44]
mov dword [edx + 0xc34], eax
xor eax, eax
lea esp, [ebp - 8]
pop ebx
pop esi
pop ebp
ret
jmp dword [eax*4 + str.s_t_fac_t_faQ_t_fa]
mov dword [esp], ebx
call sym.cygwin1.dll__strlen
mov dword [esp], ebx
mov edx, 0x13
sub edx, eax
mov dword [esp + 8], edx
mov eax, str._WOW64
mov dword [esp + 4], eax
call sym.cygwin1.dll__strncat
lea eax, [ebp - 0x38]
mov dword [esp], eax
call sub.KERNEL32.dll_GetSystemInfo
sub esp, 4
mov ecx, 0x13
lea eax, [ebx + 0x14]
mov dword [esp + 4], ecx
mov dword [esp], eax
call sym._cygwin_gethostname
movzx eax, word [0x61102d0a]
test esi, esi
mov dword [esp + 0x24], eax
movzx eax, word [0x61102d08]
mov dword [esp + 0x20], eax
movzx eax, word [0x61102d02]
mov dword [esp + 0x1c], eax
movzx eax, word [0x61102d00]
mov dword [esp + 0x18], eax
je 0x610c09d0
mov eax, 0x6113582e
mov dword [esp + 0x14], eax
movzx eax, word [0x61102d06]
movzx ecx, word [0x61102d04]
mov dword [esp + 0x10], eax
mov eax, 0x10624dd3
mul ecx
shr edx, 6
imul eax, edx, 0x3e8
mov dword [esp + 8], edx
mov edx, str._d._d._d_s__d._d__d__d_
mov dword [esp + 4], edx
sub ecx, eax
movzx eax, cx
mov dword [esp + 0xc], eax
lea eax, [ebx + 0x28]
mov dword [esp], eax
call sym.___small_sprintf
mov eax, dword [0x61102d0c]
mov dword [esp + 4], eax
lea eax, [ebx + 0x3c]
mov dword [esp], eax
call sym.cygwin1.dll__strcpy
test esi, esi
jne 0x610c07d0
jmp 0x610c07df
mov dword [ebx + 0x50], 0x32336169
mov dword [ebx + 0x54], 0x6e69772d
mov word [ebx + 0x58], 0x3436
mov byte [ebx + 0x5a], 0
jmp 0x610c07f6
mov dword [ebx + 0x50], 0x5f363878
mov word [ebx + 0x54], 0x3436
mov byte [ebx + 0x56], 0
jmp 0x610c07f6
mov dword [ebx + 0x50], 0x34366169
mov byte [ebx + 0x54], 0
jmp 0x610c07f6
mov dword [ebx + 0x50], 0x68706c61
mov word [ebx + 0x54], 0x61
jmp 0x610c07f6
mov dword [ebx + 0x50], 0x7370696d
mov byte [ebx + 0x54], 0
jmp 0x610c07f6
mov eax, dword [0x611650ec]
movsx eax, byte [eax + 0x13]
shr eax, 0x1f
test al, al
jne 0x610c0a01
mov ecx, dword [ebp - 0x20]
mov esi, 5
cmp ecx, 0x182
sete dl
cmp ecx, 0x1e6
sete al
or dl, al
je 0x610c09ad
mov eax, 0x51eb851f
mul ecx
mov esi, edx
shr esi, 5
mov dword [esp + 8], esi
mov eax, str.i_d86
mov dword [esp + 4], eax
lea eax, [ebx + 0x50]
mov dword [esp], eax
call sym.___small_sprintf
jmp 0x610c07f6
mov eax, 0x61135855
jmp 0x610c08a6
mov eax, dword fs:[4]
mov edx, dword [ebp - 0x48]
sub eax, 0x319c
mov dword [eax + 0xc30], edx
mov edx, dword [ebp - 0x44]
mov dword [eax + 0xc34], edx
mov eax, 0xffffffff
jmp 0x610c0817
mov eax, dword [ebp - 0x18]
cmp ax, 2
ja 0x610c0a11
mov esi, 3
jmp 0x610c09ad
cmp ax, 9
mov esi, 6
ja 0x610c09ad
movzx esi, ax
jmp 0x610c09ad