Function at 0x1000807e0
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbx
push rbp
push rsi
push r12
push r13
push r14
push r15
sub rsp, 0xd0
mov r14, r9
mov rbx, rdx
mov r12, rcx
mov rcx, qword [0x1001653b8]
lea rbp, [0x1001653b8]
lea rsi, [0x100003ba8]
cmp rcx, rbp
je 0x100080844
test byte [rcx + 0x1c], 1
je 0x100080844
cmp byte [rcx + 0x19], 4
jb 0x100080844
mov rcx, qword [rcx + 0x10]
mov edx, 0x2e
mov r8, rsi
call fcn.10001c7b8
mov r8, qword [rsp + 0x120]
xor eax, eax
xor r13d, r13d
and qword [rsp + 0x88], rax
and qword [rsp + 0x80], rax
and qword [rsp + 0x78], rax
and dword [rsp + 0x68], eax
mov qword [rsp + 0x70], r13
mov byte [rsp + 0x110], al
test rbx, rbx
je 0x100080fbe
test r8, r8
je 0x100080fbe
test r14, r14
je 0x100080fbe
cmp qword [rsp + 0x138], rax
je 0x100080fbe
cmp qword [rsp + 0x140], rax
je 0x100080fbe
cmp qword [rsp + 0x158], rax
je 0x100080fbe
lea rcx, [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx r11d, word [r14 + 0xa0]
cmp r11w, word [rsp + 0xa0]
je 0x10008092b
mov ebx, 0x80780095
mov rcx, qword [0x1001653b8]
cmp rcx, rbp
je 0x100081005
test byte [rcx + 0x1c], 1
je 0x100081005
cmp byte [rcx + 0x19], 2
jb 0x100081005
movzx r9d, word [rsp + 0xa0]
mov rcx, qword [rcx + 0x10]
movzx eax, r11w
lea edx, [r13 + 0x2f]
mov r8, rsi
mov dword [rsp + 0x28], 0x80780095
mov dword [rsp + 0x20], eax
call fcn.1000c27bc
jmp 0x100081005
cmp dword [r14 + 0xc0], r13d
jne 0x1000809bb
cmp dword [r14 + 0xc4], r13d
jne 0x1000809bb
mov rcx, qword [0x1001653b8]
cmp rcx, rbp
je 0x10008097d
test byte [rcx + 0x1c], 8
je 0x10008097d
cmp byte [rcx + 0x19], 4
jb 0x10008097d
mov rcx, qword [rcx + 0x10]
and dword [rsp + 0x20], r13d
lea r8, [0x1000039d8]
mov edx, 0x33
xor r9d, r9d
call fcn.10001e8b4
mov rcx, qword [0x1001653b8]
mov ebx, 0x80780095
cmp rcx, rbp
je 0x100081005
test byte [rcx + 0x1c], 8
je 0x100081005
cmp byte [rcx + 0x19], 2
jb 0x100081005
mov edx, 0x30
mov r9d, 0x80780095
mov rcx, qword [rcx + 0x10]
mov r8, rsi
call fcn.10001c7dc
jmp 0x100081005
mov rcx, qword [rsp + 0x148]
lea rdx, [r12 + 0x200]
xor r8d, r8d
call fcn.10009b4ec
test eax, eax
jns 0x100080a03
mov rcx, qword [0x1001653b8]
cmp rcx, rbp
je 0x100080a03
test byte [rcx + 0x1c], 1
je 0x100080a03
cmp byte [rcx + 0x19], 2
jb 0x100080a03
mov rcx, qword [rcx + 0x10]
mov edx, 0x31
mov r9d, eax
mov r8, rsi
call fcn.10001c7dc
mov rcx, qword [rsp + 0x150]
lea rdx, [r12 + 0x208]
xor r8d, r8d
call fcn.10009b4ec
test eax, eax
jns 0x100080a4b
mov rcx, qword [0x1001653b8]
cmp rcx, rbp
je 0x100080a52
test byte [rcx + 0x1c], 1
je 0x100080a52
cmp byte [rcx + 0x19], 2
jb 0x100080a52
mov rcx, qword [rcx + 0x10]
mov edx, 0x32
mov r9d, eax
mov r8, rsi
call fcn.10001c7dc
mov rcx, qword [0x1001653b8]
cmp dword [r14 + 0x18], 1
je 0x100080a8b
mov ebx, 0x80780026
cmp rcx, rbp
je 0x100081005
test byte [rcx + 0x1c], 1
je 0x100081005
cmp byte [rcx + 0x19], 2
jb 0x100081005
mov edx, 0x33
mov r9d, 0x80780026
jmp 0x1000809aa
mov r15d, dword [rsp + 0x168]
mov eax, r15d
shr eax, 2
and al, 1
mov byte [r12 + 0x1d0], al
test r15b, 8
je 0x100080b11
cmp al, 1
jne 0x100080adf
mov rcx, qword [0x1001653b8]
cmp rcx, rbp
je 0x100080ad5
test byte [rcx + 0x1c], al
je 0x100080ad5
cmp byte [rcx + 0x19], 2
jb 0x100080ad5
mov rcx, qword [rcx + 0x10]
mov edx, 0x34
mov r8, rsi
call fcn.10001c7b8
mov ebx, 0x80070057
jmp 0x100081005
mov rcx, qword [0x1001653b8]
cmp rcx, rbp
je 0x100080b08
test byte [rcx + 0x1c], 1
je 0x100080b08
cmp byte [rcx + 0x19], 4
jb 0x100080b08
mov rcx, qword [rcx + 0x10]
mov edx, 0x35
mov r8, rsi
call fcn.10001c7b8
mov byte [r12 + 0x1f8], 1
mov esi, dword [rsp + 0x130]
mov ecx, 0xffffffff
mov rax, rsi
shl rax, 2
cmp rax, rcx
jbe 0x100080b33
mov ebx, 0x80070216
jmp 0x100081005
mov ecx, eax
mov ebx, eax
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov qword [rsp + 0x60], rax
test rax, rax
jne 0x100080b51
mov ebx, 0x8007000e
jmp 0x100080fc3
mov r8, rbx
xor edx, edx
mov rcx, rax
mov rbx, rax
call sub.msvcrt.dll_memset
mov rbp, qword [rsp + 0x160]
xor r11d, r11d
test esi, esi
je 0x100080bed
mov rax, qword [rsp + 0x140]
mov r9, rbx
mov r8, rax
sub r9, rax
test byte [r8], 1
je 0x100080bda
mov eax, r11d
lea rcx, [0x100001fe0]
shl rax, 4
add rax, qword [rsp + 0x158]
mov rdx, qword [rax]
cmp rdx, qword [rcx]
jne 0x100080bb3
mov rdx, qword [rax + 8]
cmp rdx, qword [rcx + 8]
jne 0x100080bb3
xor eax, eax
jmp 0x100080bb8
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100080c4e
mov al, byte [r12 + 0x1d0]
test al, al
jne 0x100080bd1
test rbp, rbp
je 0x100080c4e
cmp al, 1
jne 0x100080bda
test rbp, rbp
jne 0x100080c4e
mov eax, dword [r8]
inc r11d
mov dword [r9 + r8], eax
add r8, 4
cmp r11d, esi
jb 0x100080b81
cmp byte [r12 + 0x1d0], r13b
je 0x100080d0a
mov rcx, qword [rsp + 0x118]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x68]
mov rax, qword [rcx]
call qword [rax + 0x60]
mov ebx, eax
test eax, eax
jns 0x100080c58
mov rcx, qword [0x1001653b8]
lea rbp, [0x1001653b8]
cmp rcx, rbp
je 0x100080f61
test byte [rcx + 0x1c], 8
je 0x100080f61
cmp byte [rcx + 0x19], 2
jb 0x100080f61
mov edx, 0x36
jmp 0x100080da5
mov ebx, 0x80070057
jmp 0x100080fb0
mov r8, qword [rsp + 0x78]
mov edx, dword [rsp + 0x68]
mov rcx, qword [rsp + 0x120]
lea r9, [rsp + 0x110]
call fcn.10009cc64
mov ebx, eax
test eax, eax
jns 0x100080cb1
mov rcx, qword [0x1001653b8]
lea rbp, [0x1001653b8]
cmp rcx, rbp
je 0x100080f61
test byte [rcx + 0x1c], 8
je 0x100080f61
cmp byte [rcx + 0x19], 2
jb 0x100080f61
mov edx, 0x37
jmp 0x100080da5
cmp byte [rsp + 0x110], r13b
je 0x100080d05
mov ebx, 0x80780130
mov rcx, qword [0x1001653b8]
lea rbp, [0x1001653b8]
cmp rcx, rbp
je 0x100080f61
test byte [rcx + 0x1c], 8
je 0x100080f61
cmp byte [rcx + 0x19], 2
jb 0x100080f61
mov r9, qword [rsp + 0x120]
mov edx, 0x38
mov dword [rsp + 0x20], 0x80780130
jmp 0x100080f51
mov rbx, qword [rsp + 0x60]
mov eax, dword [rsp + 0x180]
mov r8, qword [rsp + 0x120]
mov rdx, qword [rsp + 0x118]
mov dword [rsp + 0x58], eax
mov rax, qword [rsp + 0x158]
mov cl, r15b
and cl, 1
mov r9, r14
mov byte [rsp + 0x50], cl
mov qword [rsp + 0x48], rbp
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x140]
mov rcx, r12
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x138]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
call fcn.10005d768
mov ebx, eax
test eax, eax
jns 0x100080dbd
mov rcx, qword [0x1001653b8]
lea rbp, [0x1001653b8]
cmp rcx, rbp
je 0x100080f61
test byte [rcx + 0x1c], 1
je 0x100080f61
cmp byte [rcx + 0x19], 2
jb 0x100080f61
mov edx, 0x39
mov rcx, qword [rcx + 0x10]
lea r8, [0x100003ba8]
mov r9d, eax
call fcn.10001c7dc
jmp 0x100080f61
mov ebx, dword [rsp + 0x170]
mov ecx, 0xffffffff
mov rax, rbx
mov dword [r12 + 0x1d4], ebx
mov rsi, rbx
shl rax, 4
cmp rax, rcx
jbe 0x100080dea
mov ebx, 0x80070216
jmp 0x100080fb0
mov ecx, eax
mov ebp, eax
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov qword [r12 + 0x1d8], rax
test rax, rax
jne 0x100080e0b
mov ebx, 0x8007000e
jmp 0x100080fb0
mov r8, rbp
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
test ebx, ebx
je 0x100080e42
mov rdx, qword [rsp + 0x178]
xor ecx, ecx
movdqu xmm0, xmmword [rcx + rdx]
mov rax, qword [r12 + 0x1d8]
movdqu xmmword [rax + rcx], xmm0
add rcx, 0x10
sub rsi, 1
jne 0x100080e26
mov rbp, qword [rsp + 0x120]
lea rax, [rsp + 0x70]
shr r15d, 1
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x80]
lea r9, [r12 + 0x18]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x88]
and r15b, 1
mov r8, r14
mov dl, 1
mov rcx, rbp
mov qword [rsp + 0x20], rax
mov byte [r12 + 0x1e0], r15b
call fcn.1001218f0
mov ebx, eax
test eax, eax
jns 0x100080eda
mov rcx, qword [0x1001653b8]
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x100080ed0
test byte [rcx + 0x1c], 1
je 0x100080ed0
cmp byte [rcx + 0x19], 2
jb 0x100080ed0
mov rcx, qword [rcx + 0x10]
lea r8, [0x100003ba8]
mov edx, 0x3a
mov r9, rbp
mov dword [rsp + 0x20], ebx
call fcn.10001daa4
mov r13, qword [rsp + 0x70]
jmp 0x100080fb0
lea rcx, [r12 + 0x18]
xor edx, edx
call fcn.10010ad48
mov r13, qword [rsp + 0x70]
mov ebx, eax
test eax, eax
js 0x100080fb0
movdqu xmm0, xmmword [r12 + 0xd0]
lea r8, [r12 + 0x1f0]
lea rdx, [rsp + 0x90]
mov rcx, r13
movdqu xmmword [rsp + 0x90], xmm0
call fcn.1001210f8
mov ebx, eax
test eax, eax
jns 0x100080f68
mov rcx, qword [0x1001653b8]
lea rbp, [0x1001653b8]
cmp rcx, rbp
je 0x100080f61
test byte [rcx + 0x1c], 1
je 0x100080f61
cmp byte [rcx + 0x19], 2
jb 0x100080f61
mov edx, 0x3b
mov dword [rsp + 0x20], eax
mov r9, r13
mov rcx, qword [rcx + 0x10]
lea r8, [0x100003ba8]
call fcn.10001daa4
mov rax, qword [rsp + 0x60]
jmp 0x100080fc3
lea rcx, [r12 + 0x18]
call fcn.10010aed8
lea rcx, [0x100008ee0]
call fcn.1000a4144
test al, al
je 0x100080f8b
mov byte [r12 + 0x1e1], 0
lea rcx, [0x100008f08]
call fcn.1000a4144
test al, al
je 0x100080fa4
mov byte [r12 + 0x1e2], 1
mov dword [r12 + 0x184], 4
mov rax, qword [rsp + 0x60]
lea rbp, [0x1001653b8]
jmp 0x100080fc3
mov ebx, 0x80004003
test rax, rax
je 0x100080fd1
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rsp + 0x88]
test rcx, rcx
je 0x100080fe4
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x100080ff7
call qword [sym.imp.ole32.dll_CoTaskMemFree]
test r13, r13
je 0x100081005
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
cmp qword [rsp + 0x78], 0
je 0x10008101c
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x78]
call fcn.1001450bc
lea rcx, [r12 + 0x18]
call fcn.10010aed8
mov rcx, qword [0x1001653b8]
cmp rcx, rbp
je 0x100081053
test byte [rcx + 0x1c], 1
je 0x100081053
cmp byte [rcx + 0x19], 4
jb 0x100081053
mov rcx, qword [rcx + 0x10]
lea r8, [0x100003ba8]
mov edx, 0x3c
call fcn.10001c7b8
mov eax, ebx
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rsi
pop rbp
pop rbx
ret