Function at 0x1800080a0
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x30]
sub rsp, 0x130
mov rax, qword [0x1801b4100]
xor rax, rsp
mov qword [rbp + 0x20], rax
mov rbx, r8
mov r15, rcx
mov qword [rsp + 0x50], rcx
mov dword [rsp + 0x30], 1
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rcx], xmm0
mov qword [rcx], rax
mov qword [rcx + 8], rax
mov qword [rcx + 0x10], rax
mov dword [rsp + 0x30], 1
mov r8d, edx
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r12, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x1800085e5
lea rcx, [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov r14, qword [rbp - 0x68]
mov qword [rsp + 0x38], r14
mov r13, qword [rbp - 0x60]
mov qword [rsp + 0x48], r13
mov rdx, rbx
lea rcx, [rbp - 8]
call fcn.18000ec60
nop
lea rdi, [rbp - 8]
mov r8, qword [rbp - 8]
cmp qword [rbp + 0x10], 7
cmova rdi, r8
lea rcx, [rbp - 8]
cmova rcx, r8
mov rax, qword [rbp + 8]
lea rsi, [rcx + rax*2]
lea rbx, [rbp - 8]
cmova rbx, r8
cmp rbx, rsi
je 0x180008188
sub rdi, rbx
movzx ecx, word [rbx]
call fcn.1800dfb48
mov word [rbx + rdi], ax
add rbx, 2
cmp rbx, rsi
jne 0x180008173
cmp r14, r13
jae 0x18000859e
mov r9d, 0x30
lea r8, [rsp + 0x60]
mov rdx, r14
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
test rax, rax
je 0x18000859e
cmp dword [rbp - 0x80], 0x1000
jne 0x18000858b
mov eax, dword [rbp - 0x7c]
cmp eax, 1
je 0x18000858b
cmp eax, 0x100
je 0x18000858b
mov rsi, qword [rsp + 0x78]
xor eax, eax
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov qword [rbp - 0x30], rax
cmp rsi, 2
jb 0x180008254
mov rdi, rsi
and rdi, 0xfffffffffffffffe
cmp rdi, 0x1000
jb 0x18000822a
lea rcx, [rdi + 0x27]
cmp rcx, rdi
jbe 0x180008624
call fcn.1800d8130
mov rcx, rax
test rax, rax
je 0x180008618
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180008237
test rdi, rdi
je 0x180008237
mov rcx, rdi
call fcn.1800d8130
mov qword [rbp - 0x40], rax
lea rbx, [rdi + rax]
mov qword [rbp - 0x30], rbx
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.18010a0a0
mov qword [rbp - 0x38], rbx
lea rax, [rbp + 0x18]
mov qword [rsp + 0x20], rax
mov r9, rsi
mov r8, qword [rbp - 0x40]
mov rdx, qword [rsp + 0x60]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [rbp - 0x40]
test eax, eax
je 0x18000854b
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xor r14d, r14d
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], r14
mov r8, qword [rbp - 0x38]
cmp r10, r8
jne 0x1800082b1
mov ecx, r14d
mov qword [rbp - 0x18], rcx
mov r13d, 7
mov qword [rbp - 0x10], r13
mov word [rbp - 0x28], r14w
jmp 0x1800082cf
sub r8, r10
sar r8, 1
mov rdx, r10
lea rcx, [rbp - 0x28]
call fcn.180010d30
mov r10, qword [rbp - 0x40]
mov r13, qword [rbp - 0x10]
mov rcx, qword [rbp - 0x18]
lea rdi, [rbp - 0x28]
cmp r13, 7
seta al
mov r12, qword [rbp - 0x28]
cmova rdi, r12
lea rdx, [rbp - 0x28]
test al, al
je 0x1800082f3
mov rbx, r12
lea rsi, [r12 + rcx*2]
jmp 0x1800082fb
lea rsi, [rdx + rcx*2]
lea rbx, [rbp - 0x28]
cmp rbx, rsi
je 0x180008328
sub rdi, rbx
movzx ecx, word [rbx]
call fcn.1800dfb48
mov word [rbx + rdi], ax
add rbx, 2
cmp rbx, rsi
jne 0x180008303
mov r10, qword [rbp - 0x40]
mov r13, qword [rbp - 0x10]
mov rcx, qword [rbp - 0x18]
mov r12, qword [rbp - 0x28]
lea r11, [rbp - 8]
cmp qword [rbp + 0x10], 7
cmova r11, qword [rbp - 8]
lea rsi, [rbp - 0x28]
cmp r13, 7
cmova rsi, r12
mov rdi, qword [rbp + 8]
cmp rdi, rcx
ja 0x1800084fc
sub rcx, rdi
test rdi, rdi
jne 0x18000835f
mov rbx, r14
jmp 0x1800083f0
lea r14, [rcx + 1]
lea r14, [rsi + r14*2]
mov rbx, rsi
movzx r9d, word [r11]
nop
mov rax, r14
sub rax, rbx
sar rax, 1
mov ecx, 0
je 0x18000839c
cmp word [rbx], r9w
je 0x180008399
cmp rax, 1
je 0x18000839c
dec rax
add rbx, 2
cmp word [rbx], r9w
jne 0x180008386
mov rcx, rbx
mov rbx, rcx
test rcx, rcx
je 0x1800084fc
mov rdx, rdi
mov rcx, r11
test rdi, rdi
je 0x1800083d4
mov r8, rbx
sub r8, r11
nop dword [rax]
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x180008412
add rcx, 2
sub rdx, 1
jne 0x1800083c0
sub rbx, rsi
sar rbx, 1
cmp rbx, 0xffffffffffffffff
je 0x1800084fc
xor r14d, r14d
nop word [rax + rax]
mov rax, qword [rsp + 0x60]
lea rcx, [rax + rbx*2]
mov qword [rsp + 0x58], rcx
mov rdx, qword [r15 + 8]
cmp rdx, qword [r15 + 0x10]
je 0x18000841b
mov qword [rdx], rcx
add qword [r15 + 8], 8
jmp 0x180008428
add rbx, 2
jmp 0x180008370
lea r8, [rsp + 0x58]
mov rcx, r15
call fcn.1800124e0
inc rbx
lea r10, [rbp - 8]
cmp qword [rbp + 0x10], 7
cmova r10, qword [rbp - 8]
lea rsi, [rbp - 0x28]
mov r12, qword [rbp - 0x28]
mov r13, qword [rbp - 0x10]
cmp r13, 7
cmova rsi, r12
mov r11, qword [rbp + 8]
mov rax, qword [rbp - 0x18]
cmp r11, rax
ja 0x1800084f8
sub rax, r11
cmp rbx, rax
ja 0x1800084f8
test r11, r11
je 0x1800084ee
lea rdi, [rax + 1]
lea rdi, [rsi + rdi*2]
lea rbx, [rsi + rbx*2]
movzx r9d, word [r10]
nop
mov rax, rdi
sub rax, rbx
sar rax, 1
mov rcx, r14
je 0x1800084aa
cmp word [rbx], r9w
je 0x1800084a7
cmp rax, 1
je 0x1800084aa
dec rax
add rbx, 2
cmp word [rbx], r9w
jne 0x180008494
mov rcx, rbx
mov rbx, rcx
test rcx, rcx
je 0x1800084f8
mov rdx, r11
mov rcx, r10
test r11, r11
je 0x1800084e8
mov r8, rbx
sub r8, r10
nop dword [rax]
nop word [rax + rax]
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x18000860f
add rcx, 2
sub rdx, 1
jne 0x1800084d0
sub rbx, rsi
sar rbx, 1
cmp rbx, 0xffffffffffffffff
jne 0x1800083f0
mov r10, qword [rbp - 0x40]
cmp r13, 7
jbe 0x18000853c
lea rdx, [r13*2 + 2]
mov rax, r12
cmp rdx, 0x1000
jb 0x180008530
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000862a
mov rcx, r12
call fcn.1800d84dc
mov r10, qword [rbp - 0x40]
mov r13, qword [rsp + 0x48]
mov r12, qword [rsp + 0x40]
mov r14, qword [rsp + 0x38]
test r10, r10
je 0x18000858b
mov rax, qword [rbp - 0x30]
sub rax, r10
sar rax, 1
lea rdx, [rax + rax]
mov rax, r10
cmp rdx, 0x1000
jb 0x180008583
add rdx, 0x27
mov r10, qword [r10 - 8]
sub rax, r10
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008618
mov rcx, r10
call fcn.1800d84dc
add r14, qword [rsp + 0x78]
mov qword [rsp + 0x38], r14
cmp r14, r13
jb 0x180008191
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, 7
jbe 0x1800085e5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800085df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000861e
call fcn.1800d84dc
nop
mov rax, r15
mov rcx, qword [rbp + 0x20]
xor rcx, rsp
call fcn.1800d7ff0
mov rbx, qword [rsp + 0x188]
add rsp, 0x130
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
add rbx, 2
jmp 0x180008480
call fcn.1800df45c
nop
call fcn.1800df45c
nop
call fcn.180002c30
nop
call fcn.1800df45c
int3