Function at 0x18001e5b0
Capabilities:
Get system information on windows

Disassembly:
sub rsp, 0x28
cmp byte [rcx + 2], 1
je 0x18001d854
mov eax, 0xfffffffc
add rsp, 0x28
ret
mov qword [rsp + 0x20], rbx
mov ebx, dword [rcx + 4]
test ebx, ebx
js 0x18001d867
call fcn.18001d7f0
mov ebx, eax
call fcn.1800536b0
lea rax, [0x180053440]
lea r11, [0x180052b70]
mov qword [0x180108e00], rax
lea rax, [method.CArqSessionT_class_CUdpArqClient__class_CUdpArqClient_.virtual_0]
mov qword [0x180108e08], r11
mov qword [0x180108e10], rax
lea rax, [0x1800939c0]
mov qword [0x1801090b8], 0
mov qword [0x18009e6a8], rax
lea rax, [0x180093a20]
mov qword [0x18009e6b0], rax
call fcn.18003f2b0
lea rax, [0x180052950]
mov qword [0x180108e30], rax
lea rax, [0x180052a10]
lea r11, [0x1800528a0]
mov qword [0x180108e28], rax
lea rax, [0x180052ad0]
mov qword [0x180108e18], r11
mov qword [0x180108e20], rax
lea rax, [0x180052550]
mov qword [0x180108e40], rax
lea rax, [0x180052610]
mov qword [0x180108e50], rax
lea rax, [0x1800526d0]
mov qword [0x180108e48], rax
lea rax, [0x1800527b0]
mov qword [0x180108e38], rax
lea rax, [0x180051d50]
mov qword [0x180108e80], rax
lea rax, [0x180051de0]
mov qword [0x180108e88], rax
lea rax, [0x180051e50]
mov qword [0x180108e70], rax
lea rax, [0x180051fb0]
mov qword [0x180108e60], rax
lea rax, [0x1800520b0]
mov qword [0x180108e90], rax
lea rax, [0x180052270]
mov qword [0x180108e58], rax
lea rax, [0x180052400]
mov qword [0x180108e78], rax
lea rax, [0x180052480]
mov qword [0x180108e68], rax
lea rax, [0x1800524f0]
mov qword [0x180108e98], rax
lea rax, [0x1800509c0]
mov qword [0x180108ea0], rax
lea rax, [0x18004cb80]
mov qword [0x180108ef0], rax
lea rax, [0x18004d1e0]
mov qword [0x180108f20], rax
lea rax, [0x18004d810]
mov qword [0x180108ea8], rax
lea rax, [0x18004cd70]
mov qword [0x180108eb8], rax
lea rax, [0x18004d3b0]
mov qword [0x180108ec8], rax
lea rax, [0x18004db00]
mov qword [0x180108ec0], rax
lea rax, [0x18004c9b0]
mov qword [0x180108f08], rax
lea rax, [0x18004cf60]
mov qword [0x180108ee8], rax
lea rax, [0x18004d580]
mov qword [0x180108ef8], rax
lea rax, [0x18004ddf0]
mov qword [0x180108f10], rax
lea rax, [0x18004e430]
mov qword [0x180108ed0], rax
lea rax, [0x18004f030]
mov qword [0x180108eb0], rax
lea rax, [0x18004f980]
mov qword [0x180108f30], rax
lea rax, [0x18004e9e0]
mov qword [0x180108f28], rax
lea rax, [0x18004f670]
mov qword [0x180108f00], rax
lea rax, [0x18004ff70]
mov qword [0x180108f40], rax
lea rax, [0x18004e1b0]
mov qword [0x180108ed8], rax
lea rax, [0x18004ecc0]
mov qword [0x180108f18], rax
lea rax, [fcn.18004c8b0]
mov qword [0x180108ee0], rax
lea rax, [0x18004c9e0]
mov qword [0x180108f38], rax
lea rax, [0x18004c830]
mov qword [0x180108f48], rax
call fcn.18004c7a0
lea rax, [0x180042250]
mov qword [0x180108f60], rax
lea rax, [0x180042580]
lea r11, [0x18004c5a0]
mov qword [0x180108fa0], rax
lea rax, [0x180042e40]
mov qword [0x180109018], r11
mov qword [0x180109048], rax
lea rax, [0x1800428b0]
mov qword [0x180109090], rax
lea rax, [0x180042b70]
mov qword [0x180109000], rax
lea rax, [0x180043100]
mov qword [0x180109058], rax
lea rax, [0x1800433d0]
mov qword [0x180108f98], rax
lea rax, [0x1800436a0]
mov qword [0x180108f58], rax
lea rax, [0x180043970]
mov qword [0x180109080], rax
lea rax, [0x180043b40]
mov qword [0x180109088], rax
lea rax, [0x180043cb0]
mov qword [0x180108f68], rax
lea rax, [0x180044260]
mov qword [0x180108ff8], rax
lea rax, [0x180044810]
mov qword [0x180109030], rax
lea rax, [0x180044cd0]
mov qword [0x180108f70], rax
lea rax, [0x180045190]
mov qword [0x180108ff0], rax
lea rax, [0x180045b30]
mov qword [0x180108fc0], rax
lea rax, [0x180046000]
mov qword [0x180109020], rax
lea rax, [0x1800464d0]
mov qword [0x180108fa8], rax
lea rax, [0x180046730]
mov qword [0x180108fd0], rax
lea rax, [0x180046960]
mov qword [0x180108fc8], rax
lea rax, [0x180046ea0]
mov qword [0x180109010], rax
lea rax, [0x180047e30]
mov qword [0x180109038], rax
lea rax, [0x1800473f0]
mov qword [0x180108f90], rax
lea rax, [0x180047750]
mov qword [0x180108fe0], rax
lea rax, [0x180047ac0]
mov qword [0x180108fb0], rax
lea rax, [0x180048190]
mov qword [0x180108f78], rax
lea rax, [0x180048500]
mov qword [0x180108fe8], rax
lea rax, [0x180048870]
mov qword [0x180109078], rax
lea rax, [0x1800489c0]
mov qword [0x180108f80], rax
lea rax, [0x180048b10]
mov qword [0x180108fb8], rax
lea rax, [0x1800493f0]
mov qword [0x180109060], rax
lea rax, [0x180049ce0]
mov qword [0x180109050], rax
lea rax, [0x18004a2e0]
mov qword [0x180108fd8], rax
lea rax, [0x18004a910]
mov qword [0x180109068], rax
lea rax, [0x18004b540]
mov ecx, ebx
mov qword [0x180108f88], rax
lea rax, [0x18004bb70]
mov qword [0x180109070], rax
lea rax, [0x18004c1a0]
mov qword [0x180109040], rax
lea rax, [0x18004c3a0]
mov qword [0x180108f50], rax
lea rax, [0x1800421e0]
mov qword [0x180109098], rax
lea rax, [0x180041450]
mov qword [0x1801090e8], rax
lea rax, [0x1800418a0]
mov qword [0x1801090e0], rax
lea rax, [0x1800415f0]
mov qword [0x1801090f8], rax
lea rax, [0x180041720]
mov qword [0x1801090a0], rax
lea rax, [0x180041a50]
mov qword [0x1801090f0], rax
lea rax, [0x180041b60]
mov qword [0x1801090b0], rax
lea rax, [0x180041cb0]
mov qword [0x1801090c0], rax
lea rax, [0x180041da0]
mov qword [0x1801090d8], rax
lea rax, [0x180042000]
mov qword [0x1801090c8], rax
lea rax, [0x180041e90]
mov qword [0x1801090d0], rax
lea rax, [0x180042100]
mov qword [0x1801090a8], rax
call fcn.180040e60
mov r11d, ebx
and r11d, 1
jne 0x18001dde8
test bl, 2
jne 0x18001dde8
test bl, 0x10
jne 0x18001dde8
test bl, 0x20
jne 0x18001dde8
test bl, 4
jne 0x18001dde8
test bl, 8
jne 0x18001dde8
bt ebx, 8
jb 0x18001dde8
bt ebx, 9
jae 0x18001ddf6
lea rax, [0x18001e900]
mov qword [0x180108e10], rax
test r11d, r11d
je 0x18001e12b
lea rax, [0x18002a4c0]
mov qword [0x180108e08], rax
lea rax, [0x180029400]
mov qword [0x180108e00], rax
lea rax, [0x180093a80]
mov qword [0x18009e6a8], rax
lea rax, [0x180093ae0]
mov qword [0x18009e6b0], rax
lea rax, [0x1800203c0]
mov qword [0x180108e18], rax
lea rax, [0x180020680]
mov qword [0x180108e30], rax
lea rax, [0x180020940]
mov qword [0x180108e28], rax
lea rax, [0x180020be0]
mov qword [0x180108e20], rax
lea rax, [0x1800330e0]
mov qword [0x180108e40], rax
lea rax, [0x180033460]
mov qword [0x180108e50], rax
lea rax, [0x1800336a0]
mov qword [0x180108e48], rax
lea rax, [0x1800337c0]
mov qword [0x180108e38], rax
lea rax, [0x180027440]
mov qword [0x180108e80], rax
lea rax, [0x180027520]
mov qword [0x180108e88], rax
lea rax, [0x1800275c0]
mov qword [0x180108e70], rax
lea rax, [0x180027780]
mov qword [0x180108e60], rax
lea rax, [0x180027920]
mov qword [0x180108e90], rax
lea rax, [0x180028020]
mov qword [0x180108e78], rax
lea rax, [0x180028120]
mov qword [0x180108e68], rax
lea rax, [0x1800281a0]
mov qword [0x180108e98], rax
lea rax, [0x180032e00]
mov qword [0x180108ea0], rax
lea rax, [0x18002fd20]
mov qword [0x180108ef0], rax
lea rax, [0x18002ff20]
mov qword [0x180108f20], rax
lea rax, [0x180030120]
mov qword [0x180108ea8], rax
lea rax, [0x180030460]
mov qword [0x180108eb8], rax
lea rax, [0x180030580]
mov qword [0x180108ec8], rax
lea rax, [0x1800306a0]
mov qword [0x180108ec0], rax
lea rax, [0x180032220]
mov qword [0x180108f08], rax
lea rax, [0x180032420]
mov qword [0x180108ee8], rax
lea rax, [0x180032720]
mov qword [0x180108ef8], rax
lea rax, [0x180032a40]
mov qword [0x180108f10], rax
lea rax, [0x1800317a0]
mov qword [0x180108ed8], rax
lea rax, [0x180031cc0]
mov qword [0x180108f18], rax
lea rax, [0x180030860]
mov qword [0x180108ee0], rax
lea rax, [0x180030d80]
mov qword [0x180108f38], rax
lea rax, [0x18002fca0]
mov qword [0x180108f48], rax
lea rax, [0x18002f4c0]
mov qword [0x180109018], rax
lea rax, [0x18002e6a0]
mov qword [0x180109090], rax
lea rax, [0x18002eaa0]
mov qword [0x180109048], rax
lea rax, [0x18002e8a0]
mov qword [0x180109000], rax
lea rax, [0x18002eca0]
mov qword [0x180108f98], rax
lea rax, [0x1800266e0]
mov qword [0x180109080], rax
lea rax, [0x180026ae0]
mov qword [0x180109088], rax
lea rax, [0x18002eea0]
mov qword [0x180108f90], rax
lea rax, [0x18002f1e0]
mov qword [0x180108fe0], rax
lea rax, [0x180026ee0]
mov qword [0x180109078], rax
lea rax, [0x180027020]
mov qword [0x180108f80], rax
lea rax, [0x180027160]
mov qword [0x180109040], rax
lea rax, [0x1800272c0]
mov qword [0x180108f50], rax
lea rax, [0x18002e3e0]
mov qword [0x180109098], rax
lea rax, [0x18002bc20]
mov qword [0x1801090e8], rax
lea rax, [0x18002c140]
mov qword [0x1801090e0], rax
lea rax, [0x18002c820]
mov qword [0x1801090f8], rax
lea rax, [0x18002d500]
mov qword [0x1801090a0], rax
lea rax, [0x18002d880]
mov qword [0x1801090f0], rax
lea rax, [0x18002c2a0]
mov qword [0x1801090b0], rax
lea rax, [0x18002e0ec]
mov qword [0x1801090c0], rax
lea rax, [0x18002e226]
mov qword [0x1801090d8], rax
mov eax, ebx
and eax, 0x10
je 0x18001e178
lea rcx, [0x18001e920]
mov qword [0x180108e10], rcx
lea rcx, [0x18002b4a0]
mov qword [0x1801090f8], rcx
lea rcx, [0x18002ba80]
mov qword [0x1801090a0], rcx
lea rcx, [0x180026860]
mov qword [0x180109080], rcx
lea rcx, [0x180026c60]
mov qword [0x180109088], rcx
mov ecx, ebx
and ecx, 2
je 0x18001e2e1
lea rdx, [0x18002ace0]
mov qword [0x180108e08], rdx
lea rdx, [0x180029ca0]
mov qword [0x180108e00], rdx
lea rdx, [0x1800281e0]
mov qword [0x180108ef0], rdx
lea rdx, [0x1800283a0]
mov qword [0x180108f20], rdx
lea rdx, [0x180028540]
mov qword [0x180108ea8], rdx
lea rdx, [0x180028880]
mov qword [0x180108eb8], rdx
lea rdx, [0x180028960]
mov qword [0x180108ec8], rdx
lea rdx, [0x180028a40]
mov qword [0x180108ec0], rdx
lea rdx, [0x180028c00]
mov qword [0x180108f08], rdx
lea rdx, [0x180028ca0]
mov qword [0x180108ee8], rdx
lea rdx, [0x180028ea0]
mov qword [0x180108ef8], rdx
lea rdx, [0x180029080]
mov qword [0x180108f10], rdx
lea rdx, [0x180022d80]
mov qword [0x180108e50], rdx
lea rdx, [0x180020a20]
mov qword [0x180108e28], rdx
lea rdx, [0x180020ca0]
mov qword [0x180108e20], rdx
lea rdx, [0x180027c80]
mov qword [0x180108e90], rdx
lea rdx, [0x180027e60]
mov qword [0x180108e58], rdx
lea rdx, [0x1800269a0]
mov qword [0x180109080], rdx
lea rdx, [0x180026da0]
mov qword [0x180109088], rdx
lea rdx, [0x180025b80]
mov qword [0x1801090e8], rdx
lea rdx, [0x180025d60]
mov qword [0x1801090e0], rdx
lea rdx, [0x180025e00]
mov qword [0x1801090f8], rdx
lea rdx, [0x1800260e0]
mov qword [0x1801090a0], rdx
lea rdx, [0x1800261c0]
mov qword [0x1801090f0], rdx
lea rdx, [0x1800264e0]
mov qword [0x1801090b0], rdx
test eax, eax
je 0x18001e339
lea rax, [0x180025120]
mov qword [0x180108ef0], rax
lea rax, [0x1800252e0]
mov qword [0x180108f20], rax
lea rax, [0x180025480]
mov qword [0x180108ea8], rax
lea rax, [0x1800257e0]
mov qword [0x180108eb8], rax
lea rax, [0x1800258e0]
mov qword [0x180108ec8], rax
lea rax, [0x1800259c0]
mov qword [0x180108ec0], rax
test bl, 0x20
je 0x18001e4b6
lea rax, [0x180024020]
mov qword [0x180108e80], rax
lea rax, [0x180024120]
mov qword [0x180108e88], rax
lea rax, [0x1800241a0]
mov qword [0x180108e70], rax
lea rax, [0x1800243c0]
mov qword [0x180108e60], rax
lea rax, [0x1800247a0]
mov qword [0x180108e78], rax
lea rax, [0x1800248e0]
mov qword [0x180108e68], rax
lea rax, [0x180024960]
mov qword [0x180108e98], rax
test ecx, ecx
je 0x18001e4b6
lea rax, [0x1800249a0]
mov qword [0x180108e00], rax
lea rax, [0x180024580]
mov qword [0x180108e90], rax
lea rax, [0x180023620]
mov qword [0x180108ef0], rax
lea rax, [0x1800237e0]
mov qword [0x180108f20], rax
lea rax, [0x180023960]
mov qword [0x180108ea8], rax
lea rax, [0x180023ca0]
mov qword [0x180108eb8], rax
lea rax, [0x180023d80]
mov qword [0x180108ec8], rax
lea rax, [0x180023e60]
mov qword [0x180108ec0], rax
lea rax, [0x180021a40]
mov qword [0x180108e18], rax
lea rax, [0x180021fc0]
mov qword [0x180108e30], rax
lea rax, [0x1800230a0]
mov qword [0x180108e48], rax
lea rax, [0x1800234e0]
mov qword [0x180108e38], rax
lea rax, [0x180022540]
mov qword [0x180108e28], rax
lea rax, [0x1800229a0]
mov qword [0x180108e20], rax
lea rax, [0x1800210a0]
mov qword [0x1801090e8], rax
lea rax, [0x1800212a0]
mov qword [0x1801090e0], rax
lea rax, [0x180021340]
mov qword [0x1801090f8], rax
lea rax, [0x180021640]
mov qword [0x1801090a0], rax
lea rax, [0x180021720]
mov qword [0x1801090f0], rax
test bl, 8
je 0x18001e575
lea rax, [0x180020e60]
mov qword [0x180109098], rax
lea rax, [0x180020500]
mov qword [0x180108e18], rax
lea rax, [0x1800207a0]
mov qword [0x180108e30], rax
lea rax, [0x180020ae0]
mov qword [0x180108e28], rax
lea rax, [0x180020d60]
mov qword [0x180108e20], rax
lea rax, [0x18001e940]
mov qword [0x1801090e8], rax
lea rax, [0x18001ec80]
mov qword [0x1801090f0], rax
lea rax, [0x18001f1e0]
mov qword [0x1801090c8], rax
lea rax, [0x18001f0c0]
mov qword [0x1801090d0], rax
lea rax, [0x18001f5e0]
mov qword [0x1801090a8], rax
lea rax, [0x18001fe40]
mov qword [0x180108e08], rax
lea rax, [0x18001f800]
mov qword [0x180108e00], rax
lea rax, [0x18001f740]
mov qword [0x180108f48], rax
bt ebx, 8
mov rbx, qword [rsp + 0x20]
jae 0x18001e59c
lea rax, [0x18001eae0]
mov qword [0x1801090e8], rax
lea rax, [0x18001eea0]
mov qword [0x1801090f0], rax
xor eax, eax
add rsp, 0x28
ret
push rbx
sub rsp, 0x50
cmp byte [rcx + 2], 1
mov rbx, rcx
je 0x18001e5ca
mov eax, 0xfffffffc
add rsp, 0x50
pop rbx
ret
lea rax, [0x180081cc0]
mov dword [rcx + 4], 0x10307
mov qword [rcx + 8], rax
call fcn.18001d7f0
lea rcx, [rsp + 0x20]
mov dword [rbx + 0x10], eax
mov dword [rbx + 0x14], 0
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov r11d, dword [rsp + 0x40]
xor eax, eax
mov dword [rbx + 0x14], r11d
add rsp, 0x50
pop rbx
ret
sub rsp, 0x68
cmp byte [rcx + 2], 1
mov r10, rcx
je 0x18001e627
mov eax, 0xfffffffc
add rsp, 0x68
ret
mov r11d, dword [rcx + 0x7c]
mov ecx, dword [rcx + 8]
mov qword [rsp + 0x60], rdi
mov eax, r11d
btr ecx, 0x1f
cdq
sub eax, edx
sar eax, 1
mov edi, eax
cmp ecx, 4
je 0x18001e6a7
cmp ecx, 0x2000
je 0x18001e65d
mov eax, 0xfffffffd
mov rdi, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rax, qword [r10 + 0x10]
mov edx, dword [r10 + 0x78]
lea r9, [r10 + 0x48]
mov qword [rsp + 0x40], rax
mov rax, qword [r10 + 0x18]
lea rcx, [r10 + 0x68]
mov qword [rsp + 0x48], rax
mov rax, qword [r10 + 0x20]
mov qword [rsp + 0x50], rax
mov eax, dword [r10 + 0x80]
mov dword [rsp + 0x38], eax
mov eax, dword [r10 + 0x40]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], r9
mov r9d, dword [r10 + 0x30]
jmp 0x18001e708
mov r9, qword [r10 + 0x10]
mov eax, dword [r10 + 0x30]
mov ecx, eax
cdq
mov qword [rsp + 0x40], r9
sub eax, edx
lea rdx, [r10 + 0x48]
imul ecx, r11d
movsxd r8, ecx
sar eax, 1
lea rcx, [r8 + r9]
mov qword [rsp + 0x50], rcx
imul eax, edi
movsxd rcx, eax
mov eax, dword [r10 + 0x80]
mov dword [rsp + 0x38], eax
mov eax, dword [r10 + 0x40]
add rcx, r8
add rcx, r9
mov r9d, dword [r10 + 0x78]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x48], rcx
lea rcx, [r10 + 0x68]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rdx
mov edx, r9d
lea rcx, [rsp + 0x40]
mov r8d, r11d
call fcn.180055ee0
call qword [0x180108e10]
mov rdi, qword [rsp + 0x60]
xor eax, eax
add rsp, 0x68
ret
test edx, edx
je 0x18001e750
dec edx
je 0x18001e748
dec edx
je 0x18001e740
or eax, 0xffffffff
ret
mov rcx, r8
jmp 0x18001e610
mov rcx, r8
jmp 0x18001e5b0
mov rcx, r8
jmp 0x18001d840