Function at 0x180030540
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1c0]
sub rsp, 0x2c0
mov rax, qword [0x1800a0238]
xor rax, rsp
mov qword [rbp + 0x1b0], rax
lea r12d, [r8 + 0x1404]
mov esi, r8d
mov r15, rdx
mov rdi, rcx
cmp r8d, r12d
ja 0x180030a01
mov r14, qword [rsp + 0x50]
lea r8, [0x180000000]
xor r13d, r13d
lea r10, [0x1800a2830]
lea r9, [0x1800a3830]
mov edx, 0x7025
mov ecx, 0x4c74
cmp esi, 0x2818
ja 0x180030750
je 0x180030a01
cmp esi, 0x295
ja 0x1800306e0
je 0x180030a01
mov eax, esi
sub eax, 0x199
je 0x1800306d4
sub eax, 0x54
je 0x1800306bd
cmp eax, 0x54
jne 0x1800308cc
mov ebx, 0x17b2
cmp ebx, 0x18de
ja 0x18003065b
je 0x180030655
mov eax, ebx
sub eax, 0x17b2
je 0x180030633
sub eax, 0x64
je 0x180030626
cmp eax, 0x64
jne 0x18003069b
mov byte [rbp - 0x69], 0x6f
mov dword [rbp - 0x68], 0x63656e6e
jmp 0x18003069b
mov dword [rbp - 0x6d], 0x63736944
mov byte [rbp - 0x69], r13b
jmp 0x18003069b
mov r8d, 3
lea rdx, [0x180083389]
lea rcx, [rbp - 0x70]
call fcn.1800643c0
mov ecx, 0x4c74
mov edx, 0x7025
jmp 0x18003069b
mov word [rbp - 0x64], cx
jmp 0x18003069b
mov eax, ebx
sub eax, 0x1942
je 0x180030694
sub eax, 0x64
je 0x18003068a
cmp eax, 0x64
jne 0x18003069b
mov r8, r14
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x50]
call fcn.18005d500
mov ecx, 0x4c74
mov edx, 0x7025
jmp 0x18003069b
mov word [rbp - 0x5e], dx
mov byte [rbp - 0x5c], r13b
jmp 0x18003069b
mov dword [rbp - 0x62], 0x20747369
add ebx, 0x64
cmp ebx, 0x1a0a
jbe 0x1800305f8
mov eax, dword [rbp - 0x80]
lea r10, [0x1800a2830]
mov dword [rsp + 0x50], eax
jmp 0x1800308be
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea r10, [0x1800a2830]
jmp 0x1800308be
lea r14, [0x18005d57b]
jmp 0x1800308cc
mov eax, esi
sub eax, 0x204f
je 0x180030907
sub eax, 0x721
je 0x180030710
cmp eax, 0x54
jne 0x1800308cc
test r15, r15
jne 0x1800308dd
mov byte [rsp + 0x50], r13b
jmp 0x1800308cc
mov qword [rsp + 0x40], r13
xor r9d, r9d
mov dword [rsp + 0x38], 0x4836
xor r8d, r8d
mov qword [rsp + 0x30], r13
xor edx, edx
mov qword [rsp + 0x28], r13
mov rcx, rdi
mov qword [rsp + 0x20], r13
call fcn.1800156f0
test al, al
jne 0x1800308fd
lea r10, [0x1800a2830]
jmp 0x1800308be
cmp esi, 0x7b12
ja 0x1800307de
je 0x1800307a7
mov eax, esi
sub eax, 0x450c
je 0x1800309a1
sub eax, 0x183f
je 0x180030780
cmp eax, 0x54
je 0x180030a01
jmp 0x1800308cc
movzx eax, byte [rdi]
add eax, 0xffffffd0
cmp eax, 9
ja case.default.0x180030798
cdqe
mov ecx, dword [r8 + rax*4 + 0x30a30]
add rcx, r8
jmp rcx
mov dword [rsp + 0x50], 0x64
jmp 0x1800308cc
test rdi, rdi
jne 0x1800308cc
lea r9, str.SquirrelMail
mov dword [rsp + 0x58], r13d
lea r8, [0x180082820]
mov edx, 0x5836
lea rcx, [rsp + 0x58]
call fcn.18000e4c0
lea r10, [0x1800a2830]
jmp 0x1800308be
mov eax, esi
sub eax, 0x7b66
je 0x180030887
sub eax, 0x54
je 0x1800307fe
cmp eax, 0x54
je 0x180030a01
jmp 0x1800308cc
mov r8d, r13d
mov rdx, r10
cmp qword [rdx], r13
jne 0x180030871
mov ecx, 0x4b47
nop
mov eax, ecx
sub eax, 0x4b47
je 0x180030828
cmp eax, 0x41
jne 0x180030866
mov dword [rsp + 0x50], r8d
jmp 0x180030a01
movups xmm0, xmmword [rdi]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rdi + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rdi + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rdi + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rdi + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rdi + 0x60]
movups xmmword [rdx + 0x60], xmm0
movups xmm1, xmmword [rdi + 0x70]
movups xmmword [rdx + 0x70], xmm1
add ecx, 0x41
cmp ecx, 0x4b88
jbe 0x180030810
inc r8d
sub rdx, 0xffffffffffffff80
cmp rdx, r9
jl 0x180030804
mov dword [rsp + 0x50], 0xffffffff
jmp 0x1800308c5
mov ebx, r13d
nop word [rax + rax]
movsxd rcx, ebx
mov r8d, 0x80
shl rcx, 7
mov rdx, rdi
add rcx, r10
call fcn.180061140
test eax, eax
je 0x1800309fd
inc ebx
lea r10, [0x1800a2830]
cmp ebx, 0x20
jl 0x180030890
lea r9, [0x1800a3830]
lea r8, [0x180000000]
add esi, 0x54
cmp esi, r12d
ja 0x180030a01
jmp 0x1800305a6
xor r9d, r9d
mov qword [rsp + 0x20], r15
xor r8d, r8d
xor edx, edx
mov ecx, 0x48a4
call fcn.1800322b0
mov byte [rsp + 0x50], al
jmp 0x180030a01
mov byte [rsp + 0x50], 1
jmp 0x180030a01
xor r9d, r9d
mov dword [rsp + 0x58], 6
xor r8d, r8d
mov qword [rsp + 0x20], r13
lea rdx, [rsp + 0x58]
mov ecx, 0x61b6
call fcn.18002bb50
jmp 0x180030a06
mov dword [rsp + 0x50], r13d
jmp 0x180030a01
mov dword [rsp + 0x50], 1
jmp 0x180030a01
mov dword [rsp + 0x50], 2
jmp 0x180030a01
mov dword [rsp + 0x50], 3
jmp 0x180030a01
mov dword [rsp + 0x50], 4
jmp 0x180030a01
mov dword [rsp + 0x50], 5
jmp 0x180030a01
mov dword [rsp + 0x50], 6
jmp 0x180030a01
mov dword [rsp + 0x50], 7
jmp 0x180030a01
mov dword [rsp + 0x50], 8
jmp 0x180030a01
mov dword [rsp + 0x50], 9
jmp 0x180030a01
test rdi, rdi
jne 0x1800309c8
lea r9, str.Mon__Oct_24
mov dword [rsp + 0x58], r13d
lea r8, [0x180082820]
mov edx, 0x5836
lea rcx, [rsp + 0x58]
call fcn.18000e4c0
mov eax, dword [rdi + 4]
lea r9, [rsp + 0x58]
xor r8d, r8d
mov dword [rsp + 0x58], eax
mov edx, 0x7a87
xor ecx, ecx
call fcn.180018ea0
test eax, eax
je 0x1800309f3
mov rax, qword [rdi + 8]
mov ecx, dword [rax]
mov dword [rsp + 0x50], ecx
jmp 0x180030a01
mov dword [rsp + 0x50], 0x7fffffff
jmp 0x180030a01
mov dword [rsp + 0x50], ebx
mov rax, qword [rsp + 0x50]
mov rcx, qword [rbp + 0x1b0]
xor rcx, rsp
call fcn.18005fbe0
mov rbx, qword [rsp + 0x310]
add rsp, 0x2c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret