Function at 0x1a7f1bd5ab2
Capabilities:
Get system information on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x198
cmp qword [rcx + 0x80], 0
jne 0x1a7f1bd614e
mov r15d, edx
mov rdi, rcx
xorps xmm0, xmm0
lea rcx, [rsp + 0x160]
movaps xmmword [rcx + 0x20], xmm0
movaps xmmword [rcx + 0x10], xmm0
movaps xmmword [rcx], xmm0
call sub.kernel32.dll_GetSystemInfo
xor esi, esi
xor ecx, ecx
mov eax, 0x80000000
mov r8, rbx
cpuid
xchg rbx, r8
cmp eax, 0x80000004
mov byte [rsp + 0x27], r15b
mov qword [rsp + 0x68], rdi
jb 0x1a7f1bd5bd4
mov dword [rsp + 0x28], eax
mov ecx, 4
mov edx, 0x50
call fcn.1a7f1bf5bdb
test rax, rax
je 0x1a7f1bd616c
mov r8, rax
lea rax, [rsp + 0x30]
mov qword [rax], r8
mov qword [rax + 8], 5
mov eax, 0x80000000
xor edi, edi
xor r13d, r13d
mov r9d, dword [rsp + 0x28]
mov qword [rsp + 0x40], rdi
test r13b, 1
jne 0x1a7f1bd5bf1
cmp eax, r9d
ja 0x1a7f1bd5bf1
setae r13b
mov r14d, eax
adc r14d, 0
xor ecx, ecx
mov rbx, rbx
cpuid
xchg rbx, rbx
mov r15d, ecx
mov ebp, edx
mov r12d, eax
cmp rdi, qword [rsp + 0x38]
jne 0x1a7f1bd5bb0
lea rcx, [rsp + 0x30]
mov rdx, rdi
call fcn.1a7f1bd4476
mov r9d, dword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x40]
shl rdi, 4
mov dword [r8 + rdi], r12d
mov dword [r8 + rdi + 4], ebx
mov dword [r8 + rdi + 8], r15d
mov dword [r8 + rdi + 0xc], ebp
mov rdi, qword [rsp + 0x40]
inc rdi
mov eax, r14d
jmp 0x1a7f1bd5b58
mov eax, 1
mov qword [rsp + 0x28], rax
xor eax, eax
mov qword [rsp + 0x48], rax
xor eax, eax
mov qword [rsp + 0x50], rax
jmp 0x1a7f1bd5d83
xor r12d, r12d
mov ecx, 0x30
xor edx, edx
call fcn.1a7f1bf5d4d
lea rbx, [rsp + 0xb8]
mov qword [rbx], rax
mov qword [rbx + 8], rdx
and qword [rbx + 0x10], 0
mov r15, qword [rsp + 0x30]
shl rdi, 4
add rdi, r15
mov eax, 2
mov r14d, 5
test r12b, 1
je 0x1a7f1bd5c40
test r14, r14
je 0x1a7f1bd5ca1
cmp r15, rdi
je 0x1a7f1bd5ca1
dec r14
jmp 0x1a7f1bd5c64
cmp r14, rax
jbe 0x1a7f1bd5ca1
mov rcx, rdi
sub rcx, r15
shr rcx, 4
cmp rcx, rax
jbe 0x1a7f1bd5ca1
mov rcx, rax
not rcx
add r14, rcx
shl rax, 4
add r15, rax
lea r13, [r15 + 0x10]
mov edx, dword [r15]
mov rcx, rbx
call fcn.1a7f1bd617d
mov edx, dword [r15 + 4]
mov rcx, rbx
call fcn.1a7f1bd617d
mov edx, dword [r15 + 8]
mov rcx, rbx
call fcn.1a7f1bd617d
mov edx, dword [r15 + 0xc]
mov rcx, rbx
call fcn.1a7f1bd617d
mov r12b, 1
mov r15, r13
xor eax, eax
jmp 0x1a7f1bd5c2b
mov rdi, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0xc8]
xor r8d, r8d
mov r15b, byte [rsp + 0x27]
cmp rdx, r8
je 0x1a7f1bd5cca
cmp byte [rdi + r8], 0
je 0x1a7f1bd5ccd
inc r8
jmp 0x1a7f1bd5cb9
mov r8, rdx
lea r9, str.E:.cargo_registry_srcindex.crates.io_6f17d22bba15001f_sysinfo_0.30.5_srcwindowscpu.rsIntel_x86MIPSRISC_AlphaPPCSHXARMIntel_Itanium_based_x64RISC_Alpha_x64MSIL_Intel_or_AMD__x64Intel_Itanium_based_x86unknownARM_x64
mov rcx, rdi
call fcn.1a7f1bd61c2
mov r8, rdx
lea rbx, [rsp + 0x100]
mov rcx, rbx
mov rdx, rax
call fcn.1a7f1b69b50
cmp qword [rbx], 0
je 0x1a7f1bd5d12
mov eax, 1
mov qword [rsp + 0x28], rax
xor eax, eax
mov qword [rsp + 0x48], rax
xor eax, eax
mov qword [rsp + 0x50], rax
jmp 0x1a7f1bd5d51
mov rdi, qword [rsp + 0x108]
mov rbx, qword [rsp + 0x110]
mov rcx, rbx
xor edx, edx
call fcn.1a7f1bf5d4d
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x28], rax
mov rcx, rax
mov rdx, rdi
mov qword [rsp + 0x50], rbx
mov r8, rbx
call fcn.1a7f1c22170
mov rdi, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0xc0]
mov rcx, rdi
call fcn.1a7f1bce24f
mov r8, qword [rsp + 0x38]
test r8, r8
je 0x1a7f1bd5d7e
shl r8, 4
mov rcx, qword [rsp + 0x30]
mov edx, 4
call fcn.1a7f1b446ce
mov rdi, qword [rsp + 0x68]
lea rax, [rdi + 0x70]
mov qword [rsp + 0x90], rax
xor eax, eax
xor ecx, ecx
mov rdi, rbx
cpuid
xchg rbx, rdi
mov ebx, edx
mov ebp, ecx
mov ecx, 0xc
xor edx, edx
call fcn.1a7f1bf5d4d
lea r14, [rsp + 0xb8]
mov qword [r14], rax
mov qword [r14 + 8], rdx
and qword [r14 + 0x10], 0
mov rcx, r14
mov edx, edi
call fcn.1a7f1bd617d
mov rcx, r14
mov edx, ebx
call fcn.1a7f1bd617d
mov rcx, r14
mov edx, ebp
call fcn.1a7f1bd617d
mov rcx, qword [r14]
mov rdx, qword [r14 + 0x10]
cmp rdx, rsi
je 0x1a7f1bd5df4
cmp byte [rcx + rsi], 0
je 0x1a7f1bd5df7
inc rsi
jmp 0x1a7f1bd5de4
mov rsi, rdx
lea r9, str.E:.cargo_registry_srcindex.crates.io_6f17d22bba15001f_sysinfo_0.30.5_srcwindowscpu.rsIntel_x86MIPSRISC_AlphaPPCSHXARMIntel_Itanium_based_x64RISC_Alpha_x64MSIL_Intel_or_AMD__x64Intel_Itanium_based_x86unknownARM_x64
mov r8, rsi
call fcn.1a7f1bd61c2
mov r8, rdx
lea rsi, [rsp + 0x100]
mov rcx, rsi
mov rdx, rax
call fcn.1a7f1b69b50
cmp qword [rsi], 0
je 0x1a7f1bd5e4d
movsx rax, word [rsp + 0x160]
cmp rax, 0xe
ja 0x1a7f1bd5e5f
lea rcx, [0x1a7f1c9dad0]
mov rbx, qword [rcx + rax*8]
movsx rax, ax
lea rcx, [0x1a7f1c9db48]
mov rsi, qword [rcx + rax*8]
jmp 0x1a7f1bd5e6b
mov rsi, qword [rsp + 0x108]
mov rbx, qword [rsp + 0x110]
jmp 0x1a7f1bd5e6b
lea rsi, [0x1a7f1c64093]
mov ebx, 7
mov rcx, rbx
xor edx, edx
call fcn.1a7f1bf5d4d
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x58], rax
mov rcx, rax
mov rdx, rsi
mov r8, rbx
call fcn.1a7f1c22170
mov rcx, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0xc0]
call fcn.1a7f1bce24f
mov esi, dword [rsp + 0x180]
test r15b, r15b
je 0x1a7f1bd5ecf
lea rdi, [rsp + 0x98]
mov rcx, rdi
mov rdx, rsi
call fcn.1a7f1bd61e3
mov rax, qword [rdi]
mov qword [rsp + 0x70], rax
mov r12, qword [rdi + 0x10]
jmp 0x1a7f1bd5ef9
mov rcx, rsi
mov dl, 1
call fcn.1a7f1bd4210
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x98], rax
mov qword [rsp + 0xa0], rdx
mov qword [rsp + 0xa8], rsi
mov r12, rsi
inc rsi
imul rdi, rsi, 0x70
mov ecx, 8
mov rdx, rdi
call fcn.1a7f1bf5bdb
test rax, rax
je 0x1a7f1bd6162
mov r14, rax
lea rax, [rsp + 0x78]
mov qword [rax], r14
mov qword [rax + 8], rsi
and qword [rax + 0x10], 0
shl r12, 3
xor ebp, ebp
mov r15d, 1
test r12, r12
je 0x1a7f1bd60b1
mov qword [rsp + 0xb0], r15
lea rax, str.CPU
mov qword [rsp + 0xb8], rax
mov eax, 1
mov qword [rsp + 0xc0], rax
and qword [rsp + 0xd8], 0
lea rcx, [rsp + 0xb0]
mov qword [rsp + 0x30], rcx
lea rcx, [fcn.1a7f1b67cb0]
mov qword [rsp + 0x38], rcx
lea rsi, [rsp + 0x30]
mov qword [rsp + 0xc8], rsi
mov qword [rsp + 0xd0], rax
lea rcx, [rsp + 0x148]
lea rdi, [rsp + 0xb8]
mov rdx, rdi
call fcn.1a7f1bce208
mov rcx, rsi
mov rdx, qword [rsp + 0x58]
mov r13, rbx
mov r8, rbx
call fcn.1a7f1b66d10
mov rcx, rdi
mov rdx, qword [rsp + 0x28]
mov r8, qword [rsp + 0x50]
call fcn.1a7f1b66d10
mov rax, qword [rsp + 0x70]
mov rbx, qword [rax + r15*8 - 8]
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0x110], rax
movups xmm0, xmmword [rsp + 0x148]
movaps xmmword [rsp + 0x100], xmm0
mov rax, qword [rsp + 0x40]
lea rcx, [rsp + 0x118]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [rcx], xmm0
mov rax, qword [rsp + 0xc8]
mov qword [rcx + 0x28], rax
movups xmm0, xmmword [rsp + 0xb8]
movups xmmword [rcx + 0x18], xmm0
mov ecx, 9
lea rsi, [rsp + 0x100]
rep movsq qword [rdi], qword [rsi]
cmp rbp, qword [rsp + 0x80]
jne 0x1a7f1bd6066
lea rcx, [rsp + 0x78]
mov rdx, rbp
call fcn.1a7f1bd43c3
mov r14, qword [rsp + 0x78]
mov rbp, qword [rsp + 0x88]
imul rax, rbp, 0x70
lea rdi, [r14 + rax]
mov ecx, 9
lea rsi, [rsp + 0xb8]
rep movsq qword [rdi], qword [rsi]
and qword [r14 + rax + 0x48], 0
mov qword [r14 + rax + 0x60], rbx
and dword [r14 + rax + 0x68], 0
mov rbp, qword [rsp + 0x88]
inc rbp
mov qword [rsp + 0x88], rbp
inc r15
add r12, 0xfffffffffffffff8
mov rbx, r13
jmp 0x1a7f1bd5f36
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x110], rax
movups xmm0, xmmword [rsp + 0x78]
movaps xmmword [rsp + 0x100], xmm0
mov rcx, qword [rsp + 0x98]
mov rdx, qword [rsp + 0xa0]
call fcn.1a7f1b8fceb
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x48]
call fcn.1a7f1bce24f
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x60]
call fcn.1a7f1bce24f
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rdi + 0x70]
mov rdx, qword [rdi + 0x80]
mov rcx, rsi
call fcn.1a7f1bd45d7
mov rdx, qword [rdi + 0x78]
mov rcx, rsi
call fcn.1a7f1bd462d
mov rax, qword [rsp + 0x110]
mov rcx, qword [rsp + 0x90]
mov qword [rcx + 0x10], rax
movaps xmm0, xmmword [rsp + 0x100]
movups xmmword [rcx], xmm0
mov al, byte [rsp + 0x27]
mov byte [rdi + 0x88], al
add rsp, 0x198
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 8
mov rdx, rdi
jmp 0x1a7f1bd6176
mov ecx, 4
mov edx, 0x50
call fcn.1a7f1c2f940
ud2