Function at 0x180007bd0
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x30]
sub rsp, 0x130
mov rax, qword [0x1801b4100]
xor rax, rsp
mov qword [rbp + 0x28], rax
mov rbx, r8
mov rdi, rcx
mov qword [rsp + 0x58], rcx
mov dword [rsp + 0x30], 1
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rcx], xmm0
mov qword [rcx], rax
mov qword [rcx + 8], rax
mov qword [rcx + 0x10], rax
mov dword [rsp + 0x30], 1
mov r8d, edx
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r12, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x180008054
lea rcx, [rbp - 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov r15, qword [rbp - 0x60]
mov qword [rsp + 0x38], r15
mov r13, qword [rbp - 0x58]
mov qword [rsp + 0x48], r13
mov rdx, rbx
lea rcx, [rbp]
call fcn.18000ed70
nop
lea rsi, [rbp]
mov r8, qword [rbp]
cmp qword [rbp + 0x18], 0xf
cmova rsi, r8
lea rcx, [rbp]
cmova rcx, r8
mov r14, qword [rbp + 0x10]
add r14, rcx
lea rbx, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova rbx, r8
cmp rbx, r14
je 0x180007cba
sub rsi, rbx
movsx ecx, byte [rbx]
call fcn.1800e06b0
mov byte [rbx + rsi], al
inc rbx
cmp rbx, r14
jne 0x180007ca7
cmp r15, r13
jae 0x180008012
movabs r14, 0x7fffffffffffffff
nop dword [rax]
mov r9d, 0x30
lea r8, [rsp + 0x68]
mov rdx, r15
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
test rax, rax
je 0x180008012
cmp dword [rbp - 0x78], 0x1000
jne 0x180008000
mov eax, dword [rbp - 0x74]
cmp eax, 1
je 0x180008000
cmp eax, 0x100
je 0x180008000
mov rsi, qword [rbp - 0x80]
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x38], xmm1
xor ebx, ebx
mov qword [rbp - 0x28], rbx
test rsi, rsi
je 0x180007d90
cmp rsi, r14
ja 0x180008090
cmp rsi, 0x1000
jb 0x180007d69
lea rcx, [rsi + 0x27]
cmp rcx, rsi
jbe 0x18000808a
call fcn.1800d8130
mov rcx, rax
test rax, rax
je 0x18000807e
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180007d71
mov rcx, rsi
call fcn.1800d8130
mov qword [rbp - 0x38], rax
lea rbx, [rax + rsi]
mov qword [rbp - 0x28], rbx
mov r8, rsi
xor edx, edx
mov rcx, rax
call fcn.18010a0a0
mov qword [rbp - 0x30], rbx
xor ebx, ebx
lea rax, [rbp + 0x20]
mov qword [rsp + 0x20], rax
mov r9, rsi
mov r8, qword [rbp - 0x38]
mov rdx, qword [rsp + 0x68]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rsi, qword [rbp - 0x38]
test eax, eax
je 0x180007fc7
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
mov r8, qword [rbp - 0x30]
cmp rsi, r8
jne 0x180007de9
mov rcx, rbx
mov qword [rbp - 0x10], rbx
mov r13d, 0xf
mov qword [rbp - 8], r13
mov byte [rbp - 0x20], 0
jmp 0x180007e04
sub r8, rsi
mov rdx, rsi
lea rcx, [rbp - 0x20]
call fcn.180002f80
mov rsi, qword [rbp - 0x38]
mov r13, qword [rbp - 8]
mov rcx, qword [rbp - 0x10]
lea r15, [rbp - 0x20]
cmp r13, 0xf
seta al
mov r14, qword [rbp - 0x20]
cmova r15, r14
lea rdx, [rbp - 0x20]
test al, al
je 0x180007e28
mov rbx, r14
lea r12, [rcx + r14]
jmp 0x180007e30
lea r12, [rdx + rcx]
lea rbx, [rbp - 0x20]
cmp rbx, r12
je 0x180007e5c
sub r15, rbx
movsx ecx, byte [rbx]
call fcn.1800e06b0
mov byte [rbx + r15], al
inc rbx
cmp rbx, r12
jne 0x180007e38
mov rsi, qword [rbp - 0x38]
mov r13, qword [rbp - 8]
mov rcx, qword [rbp - 0x10]
mov r14, qword [rbp - 0x20]
lea r12, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova r12, qword [rbp]
lea rax, [rbp - 0x20]
cmp r13, 0xf
cmova rax, r14
mov qword [rsp + 0x60], rax
mov r15, qword [rbp + 0x10]
cmp r15, rcx
ja 0x180007f73
sub rcx, r15
test r15, r15
jne 0x180007e94
xor ebx, ebx
jmp 0x180007f00
inc rcx
add rcx, rax
mov qword [rsp + 0x50], rcx
movsx edx, byte [r12]
mov r8, rcx
sub r8, rax
mov rcx, rax
call fcn.18010a440
mov rbx, rax
test rax, rax
je 0x180007f73
nop
mov r8, r15
mov rdx, r12
mov rcx, rbx
call fcn.18010a4e0
test eax, eax
je 0x180007ef4
inc rbx
mov r8, qword [rsp + 0x50]
sub r8, rbx
movsx edx, byte [r12]
mov rcx, rbx
call fcn.18010a440
mov rbx, rax
test rax, rax
jne 0x180007ec0
jmp 0x180007f73
sub rbx, qword [rsp + 0x60]
cmp rbx, 0xffffffffffffffff
je 0x180007f73
nop
mov rcx, qword [rsp + 0x68]
add rcx, rbx
mov qword [rsp + 0x60], rcx
mov rdx, qword [rdi + 8]
cmp rdx, qword [rdi + 0x10]
je 0x180007f21
mov qword [rdx], rcx
add qword [rdi + 8], 8
jmp 0x180007f2e
lea r8, [rsp + 0x60]
mov rcx, rdi
call fcn.1800124e0
lea r9, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova r9, qword [rbp]
lea rcx, [rbp - 0x20]
mov r14, qword [rbp - 0x20]
mov r13, qword [rbp - 8]
cmp r13, 0xf
cmova rcx, r14
lea r8, [rbx + 1]
mov rax, qword [rbp + 0x10]
mov qword [rsp + 0x20], rax
mov rdx, qword [rbp - 0x10]
call fcn.180010ec0
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x180007f00
mov rsi, qword [rbp - 0x38]
cmp r13, 0xf
jbe 0x180007fae
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x180007fa2
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008096
mov rcx, r14
call fcn.1800d84dc
mov rsi, qword [rbp - 0x38]
movabs r14, 0x7fffffffffffffff
mov r13, qword [rsp + 0x48]
mov r12, qword [rsp + 0x40]
mov r15, qword [rsp + 0x38]
test rsi, rsi
je 0x180008000
mov rdx, qword [rbp - 0x28]
sub rdx, rsi
mov rax, rsi
cmp rdx, 0x1000
jb 0x180007ff8
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000807e
mov rcx, rsi
call fcn.1800d84dc
add r15, qword [rbp - 0x80]
mov qword [rsp + 0x38], r15
cmp r15, r13
jb 0x180007cd0
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x180008054
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000804e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008084
call fcn.1800d84dc
nop
mov rax, rdi
mov rcx, qword [rbp + 0x28]
xor rcx, rsp
call fcn.1800d7ff0
mov rbx, qword [rsp + 0x188]
add rsp, 0x130
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1800df45c
nop
call fcn.1800df45c
nop
call fcn.180002c30
int3
call fcn.180012160
nop
call fcn.1800df45c
int3