Function at 0x1800192ec
Capabilities:
Get system information on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xd88
movdqa xmmword [rsp + 0xd70], xmm9
movdqa xmmword [rsp + 0xd60], xmm8
movdqa xmmword [rsp + 0xd50], xmm7
movaps xmmword [rsp + 0xd40], xmm6
mov ecx, 0x10
mov edx, 8
call fcn.18005f61f
mov rsi, rax
mov eax, 1
mov qword [rsi], rax
mov qword [rsi + 8], rax
call fcn.18005fa4e
mov dword [rsp + 0x298], 1
mov qword [rsp + 0x230], 0x400
and qword [rsp + 0x1e8], 0
mov qword [rsp + 0x238], 0x200
mov qword [rsp + 0x220], rsi
lea rcx, [0x180080f68]
mov qword [rsp + 0x228], rcx
and qword [rsp + 0x1f8], 0
and qword [rsp + 0x240], 0
and qword [rsp + 0x250], 0
and qword [rsp + 0x260], 0
and qword [rsp + 0x270], 0
mov dword [rsp + 0x218], 0x3b9aca00
and dword [rsp + 0x208], 0
mov dword [rsp + 0x288], 0x3d
mov qword [rsp + 0x280], 0x100
xor ecx, ecx
mov byte [rsp + 0x29c], cl
and word [rsp + 0x28c], 0
mov dword [rsp + 0x290], eax
mov dword [rsp + 0x294], edx
mov byte [rsp + 0x29d], cl
lea rdx, [0x18007f713]
lea rsi, [rsp + 0x7e0]
mov r8d, 0x14
mov rcx, rsi
call fcn.180048cb0
mov rdi, qword [rsi]
movabs rax, 0x8000000000000000
cmp rdi, rax
jne 0x180019467
mov rbx, qword [rsp + 0x7e8]
mov r8, qword [rsp + 0x7f0]
cmp byte [rsp + 0x7f8], 0
jne 0x180019530
test r8, r8
je 0x180019530
movzx eax, byte [rsp + 0x7ff]
shl eax, 0x10
movzx ecx, word [rsp + 0x7fd]
or ecx, eax
shl rcx, 0x20
mov eax, dword [rsp + 0x7f9]
or rax, rcx
lea rcx, [rbx + r8]
mov r9, rbx
lea rdx, [r9 + 1]
mov r10b, byte [r9]
test r10b, r10b
jns 0x180019528
cmp r10b, 0xe0
jae 0x1800194d7
add r9, 2
cmp rdx, rcx
cmovne rdx, r9
jmp 0x180019528
cmp r10b, 0xed
jne 0x1800194ff
cmp rdx, rcx
je 0x180019530
lea rdx, [r9 + 2]
cmp rdx, rcx
je 0x180019530
cmp byte [r9 + 1], 0x9f
ja 0x18001b36a
add r9, 3
mov rdx, r9
jmp 0x180019528
add r9, 2
cmp rdx, rcx
cmove r9, rdx
xor edx, edx
cmp r9, rcx
setne dl
add rdx, r9
cmp r10b, 0xf0
jb 0x180019528
xor r9d, r9d
cmp rdx, rcx
setne r9b
add rdx, r9
mov r9, rdx
cmp rdx, rcx
jne 0x1800194b8
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], r8
lea r14, [rsp + 0x150]
mov rcx, r14
mov rdx, rbx
call fcn.18002a920
cmp byte [r14], 0
jne 0x18001b6fb
mov rbp, qword [rsp + 0x158]
test rbp, rbp
je 0x18001b794
mov rcx, rdi
mov rdx, rbx
call fcn.18001bead
inc rcx
lea r9, [rsp + 0x60]
lea ecx, [rsp + 0x60]
inc rcx
mov rcx, qword [rdx + 0x20]
mov rax, qword [rdx + 0x28]
inc rcx
inc rcx
lea rax, [rsp + 0x60]
mov rcx, qword [rdx + 0x20]
mov rax, qword [rdx + 0x28]
mov eax, dword [rdx + 0x28]
add rcx, 8
lea r9, [rsp + 0x60]
lea ecx, [rsp + 0x60]
lea rax, [rcx + 4]
inc rcx
lea rax, [rsp + 0x60]
mov qword [rax], rcx
lea rcx, [0x18007ab00]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x28], eax
cmp byte [rax - 0x77], cl
ror byte [rbp + rcx*4 + 0x4c], 1
shr eax, 0xf7
scasd eax, dword [rdi]
invalid
or dword [rcx + 1], 0xe0ff41c8
mov dword [rsp + 0x20], eax
and byte [rax - 0x7b], r9b
mov es, word [rdx - 2]
inc dword [rax + rax*8 + 0x3f2850f]
add eax, dword [rax]
invalid
add byte [rax - 0x73], cl
shr r8b, 1
ror byte [rcx], 0
or dword [rax], eax
adc eax, 0x3dbad
outsd dx, dword [rsi]
int 3
add byte [rcx - 0x48], al
add dword [rax], eax
add byte [rax], al
invalid