Function at 0x5a7080
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x80
mov eax, dword [ebp + 0xc]
mov ecx, dword [0x7a9040]
xor ecx, ebp
mov dword [ebp - 0x10], ecx
lea esi, [ebp - 0x4c]
mov dword [esi], eax
push esi
call fcn.005b6bd0
add esp, 4
mov esi, dword [esi]
mov eax, dword [0x7c22a8]
test eax, eax
je 0x5a70e4
mov ecx, dword [0x7c22ac]
cmp ecx, esi
setbe cl
mov edi, dword [ebp + 8]
cmp eax, esi
setae al
test cl, al
jne 0x5a7115
mov dword [edi], 0
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00650d60
mov eax, edi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
pcmpeqd xmm0, xmm0
lea edi, [ebp - 0x34]
movdqu xmmword [edi + 0x10], xmm0
movdqu xmmword [edi], xmm0
mov dword [edi + 0x20], 0xffffffff
push edi
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [edi + 8]
mov eax, dword [edi + 0xc]
mov dword [0x7c22a8], eax
mov dword [0x7c22ac], ecx
jmp 0x5a70b9
mov dword [ebp - 0x34], 0
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x5a70ca
lea ecx, [ebp - 0x34]
push ecx
push eax
push 4
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
test eax, eax
jne 0x5a713a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x80], eax
test eax, eax
je 0x5a70ca
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
mov esi, eax
call fcn.005e4650
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov dword [ebp - 0x8c], esp
sub esp, 8
mov ebx, esp
call fcn.005e4650
call edi
mov esi, eax
mov eax, dword [ebp - 0x80]
mov dword [ebx + 4], eax
call fcn.005e4650
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [ebp - 0x74]
mov dword [ebp - 0x88], ebx
mov dword [ebx], eax
xor edi, edi
dec edi
lea ecx, [ebp - 0x70]
mov dword [ecx], edi
mov dword [ecx + 4], edi
mov dword [ecx + 8], edi
call fcn.005e5390
pcmpeqd xmm0, xmm0
movdqu xmmword [ebp - 0x34], xmm0
lea eax, [ebp - 0x38]
mov dword [eax], edi
xor ecx, ecx
lea edx, [ebp - 0x3c]
mov dword [edx], ecx
lea esi, [ebp - 0x40]
mov dword [esi], ecx
lea ecx, [ebp - 0x4c]
mov dword [ecx], fcn.00689f80
mov ebx, dword [ebp - 0x80]
mov dword [ecx + 4], ebx
push esi
mov esi, ecx
push edx
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.005fad40
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
test al, al
je 0x5a737c
pxor xmm0, xmm0
movq qword [ebp - 0x4c], xmm0
mov dword [ebp - 0x44], 0
xor edi, edi
push esi
push dword [ebp - 0x40]
push dword [ebp - 0x3c]
call fcn.005d81b0
add esp, 0xc
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
test al, al
je 0x5a735f
movsx eax, byte [ebp - 0x41]
test eax, eax
cmovs eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x4c]
cmovns edx, esi
test eax, eax
js 0x5a7493
sete cl
test edx, edx
setne ch
or ch, cl
je 0x5a7493
lea ebx, [ebp - 0x64]
mov ecx, ebx
push eax
push edx
call fcn.005e5420
lea esi, [ebp - 0x58]
mov ecx, ebx
push esi
call fcn.005e6390
lea ecx, [ebp - 0x70]
push esi
call fcn.005e5580
mov ecx, esi
call fcn.005e5500
mov ecx, ebx
call fcn.005e5500
xor eax, eax
dec eax
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
lea eax, [ebp - 0x34]
push eax
push esi
call fcn.00526260
add esp, 8
movsx eax, byte [esi + 0xb]
test eax, eax
jns 0x5a72a8
mov eax, dword [ebp - 0x54]
mov esi, dword [ebp - 0x58]
test eax, eax
js 0x5a7493
sete cl
test esi, esi
setne dl
or dl, cl
je 0x5a7493
lea edi, [ebp - 0x58]
push edi
push 3
push 0x794d08
push eax
push esi
call fcn.00528340
add esp, 0x14
push dword [ebp - 0x38]
push ebx
call fcn.00528c60
add esp, 8
movsx eax, byte [ebp - 0x59]
test eax, eax
jns 0x5a72ef
mov eax, dword [ebp - 0x60]
mov ebx, dword [ebp - 0x64]
mov ecx, edi
push eax
push ebx
call fcn.005cdf60
cmp byte [ebp - 0x59], 0
jns 0x5a7309
push dword [ebp - 0x64]
call fcn.006507ee
add esp, 4
movsx eax, byte [ebp - 0x4d]
test eax, eax
cmovs eax, dword [ebp - 0x54]
cmovs edi, dword [ebp - 0x58]
test eax, eax
js 0x5a7493
sete cl
test edi, edi
setne dl
or dl, cl
je 0x5a7493
lea esi, [ebp - 0x64]
push eax
push edi
push esi
call fcn.005d89d0
add esp, 0xc
mov eax, dword [esi]
mov dword [ebp - 0x78], eax
mov edi, dword [esi + 4]
mov eax, dword [esi + 8]
mov dword [ebp - 0x7c], eax
cmp byte [ebp - 0x4d], 0
jns 0x5a735c
push dword [ebp - 0x58]
call fcn.006507ee
add esp, 4
lea esi, [ebp - 0x4c]
mov dword [ebp - 0x84], edi
cmp byte [ebp - 0x41], 0
jns 0x5a7376
push dword [ebp - 0x4c]
call fcn.006507ee
add esp, 4
xor edi, edi
dec edi
mov ebx, dword [ebp - 0x80]
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x44], edi
call fcn.00529400
push 0xc
push esi
push ebx
push eax
call sub.KERNEL32.dll_K32GetModuleInformation
test eax, eax
mov edi, 0
je 0x5a744b
push 0x2c
call fcn.006507be
add esp, 4
mov ebx, eax
movsd xmm0, qword [ebp - 0x4c]
movsd qword [ebp - 0x34], xmm0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2c], eax
xor edi, edi
mov eax, dword [ebp - 0x88]
mov dword [eax + 4], edi
call fcn.005e4650
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov esi, eax
call fcn.005e4650
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov dword [ebx], fcn.005a74c0
mov dword [ebx + 4], edi
call fcn.005e4650
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
cmp dword [ebx + 4], edi
mov edi, ebx
jne 0x5a7495
mov eax, dword [ebp - 0x80]
mov dword [edi + 4], eax
call fcn.005e4650
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [ebp - 0x2c]
mov dword [edi + 0x10], eax
movq xmm0, qword [ebp - 0x34]
movq qword [edi + 8], xmm0
cmp dword [ebp - 0x7c], 0
mov edx, dword [ebp - 0x84]
jns 0x5a74a8
lea ecx, [edi + 0x14]
push edx
push dword [ebp - 0x78]
call fcn.005cceb0
mov ecx, edi
add ecx, 0x20
lea eax, [ebp - 0x70]
push eax
call fcn.005e53b0
mov dword [ebp - 0x74], edi
cmp dword [ebp - 0x7c], 0
mov edi, dword [ebp + 8]
jns 0x5a7462
push dword [ebp - 0x78]
call fcn.006507ee
add esp, 4
lea ecx, [ebp - 0x70]
call fcn.005e5500
mov eax, dword [ebp - 0x88]
mov esi, dword [eax + 4]
test esi, esi
je 0x5a7483
call fcn.005e4650
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov esp, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x74]
mov dword [edi], eax
jmp 0x5a70d0
ud2
call fcn.005e4650
push dword [edi + 4]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x5a7403
mov eax, dword [ebp - 0x78]
mov dword [edi + 0x14], eax
mov dword [edi + 0x18], edx
mov eax, dword [ebp - 0x7c]
mov dword [edi + 0x1c], eax
jmp 0x5a743d