Function at 0x14012c682
Capabilities:
Get system information on windows

Disassembly:
push rax
pushf
mov eax, 0xa7809b67
pushf
not eax
add eax, 0xb5ba7dfe
xor eax, 0xc1624dc5
rol eax, 0x11
popf
pushf
not eax
add eax, 0x89d65da5
xor eax, 0xc423b387
rol eax, 0x3e
popf
pushf
not eax
add eax, 0x8b7fe173
xor eax, 0xcfbc9e18
rol eax, 0x92
popf
cmp eax, 4
jne 0x14012c6d2
popf
pop rax
jmp 0x14012cb74
cmp eax, 0
jne 0x14012c6e1
popf
pop rax
jmp 0x14012c7e0
cmp eax, 3
jne 0x14012c6f0
popf
pop rax
jmp 0x14012caef
cmp eax, 1
jne 0x14012c6ff
popf
pop rax
jmp 0x14012c88c
cmp eax, 0xd
jne 0x14012c70e
popf
pop rax
jmp 0x14012cfcc
cmp eax, 7
jne 0x14012c71d
popf
pop rax
jmp 0x14012cd4d
cmp eax, 0xe
jne 0x14012c72c
popf
pop rax
jmp 0x14012d0dd
cmp eax, 0xb
jne 0x14012c73b
popf
pop rax
jmp 0x14012cec2
cmp eax, 0xc
jne 0x14012c74a
popf
pop rax
jmp 0x14012cf80
cmp eax, 8
jne 0x14012c759
popf
pop rax
jmp 0x14012cdc7
cmp eax, 0x10
jne 0x14012c768
popf
pop rax
jmp 0x14012d21f
cmp eax, 2
jne 0x14012c777
popf
pop rax
jmp 0x14012ca5f
cmp eax, 9
jne 0x14012c786
popf
pop rax
jmp 0x14012ce59
cmp eax, 0x12
jne 0x14012c795
popf
pop rax
jmp 0x14012d2a4
cmp eax, 6
jne 0x14012c7a4
popf
pop rax
jmp 0x14012ccc9
cmp eax, 0x11
jne 0x14012c7b3
popf
pop rax
jmp 0x14012d26c
cmp eax, 5
jne 0x14012c7c2
popf
pop rax
jmp 0x14012cbcf
cmp eax, 0xf
jne 0x14012c7d1
popf
pop rax
jmp 0x14012d190
cmp eax, 0xa
jne 0x14012c7e0
popf
pop rax
jmp 0x14012ceb8
push rsi
push r14
push r15
sub rsp, 0x40
xor edx, edx
lea r9, [rsp + 0x68]
mov r14, rcx
xor r15d, r15d
xor r8d, r8d
mov dword [rsp + 0x68], r15d
mov esi, r15d
lea ecx, [rdx + 0xb]
jmp 0x14012c806
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
jne 0x14012c859
push rax
pushf
mov eax, 0xf92787db
pushf
not eax
add eax, 0xff1f1537
xor eax, 0xc3b34914
rol eax, 0x4e
popf
pushf
not eax
add eax, 0x950365da
xor eax, 0xd51a7af3
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xb3fb8487
xor eax, 0xd647dc11
rol eax, 0xe
popf
jmp 0x14012c6c3
push rax
pushf
mov eax, 0x65eec58d
pushf
not eax
add eax, 0x93f6adaa
xor eax, 0xe0e23cb6
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xe5d36e0b
xor eax, 0xb72e1792
rol eax, 0x21
popf
jmp 0x14012c6c3
xor edx, edx
mov r8d, 0xbae697d8
pushf
not r8d
add r8d, 0xce624120
xor r8d, 0xdfa19775
rol r8d, 0
popf
pushf
not r8d
add r8d, 0xc4531895
xor r8d, 0xe31fcd03
rol r8d, 0xe4
popf
pushf
not r8d
add r8d, 0xd2c59b93
xor r8d, 0x8c542580
rol r8d, 0xcf
popf
mov rcx, rsi
jmp 0x14012c8e3
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov edx, dword [rsp + 0x68]
xor ecx, ecx
mov r8d, 0x29fde9c3
pushf
not r8d
add r8d, 0xdc60016c
xor r8d, 0xc8513712
rol r8d, 0x30
popf
pushf
not r8d
add r8d, 0xf078a359
xor r8d, 0x9f0e7a7a
rol r8d, 0xc
popf
pushf
not r8d
add r8d, 0xd5e27f21
xor r8d, 0xd3ac8a15
rol r8d, 0xb4
popf
lea r9d, [rcx + 4]
jmp 0x14012c945
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8d, dword [rsp + 0x68]
lea r9, [rsp + 0x68]
mov rdx, rax
mov ecx, 0x8f16441f
pushf
not ecx
add ecx, 0xf0c8942e
xor ecx, 0x82ea85d0
rol ecx, 0xd6
popf
pushf
not ecx
add ecx, 0x867d3039
xor ecx, 0xab74a3b3
rol ecx, 0x9c
popf
pushf
not ecx
add ecx, 0xf9529bab
xor ecx, 0xee478c0f
rol ecx, 0x4c
popf
mov rsi, rax
jmp 0x14012c9a0
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
je 0x14012ca06
push rax
pushf
mov eax, 0xb38493d8
pushf
not eax
add eax, 0xc43508f9
xor eax, 0xdae21d9f
rol eax, 0xa
popf
pushf
not eax
add eax, 0xbb80f4fe
xor eax, 0xf6d85d5f
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xd17eff00
xor eax, 0xafbab0ee
rol eax, 0xb5
popf
pushf
not eax
add eax, 0x9bb450c5
xor eax, 0xc5265a2f
rol eax, 0x68
popf
jmp 0x14012c6c3
push rax
pushf
mov eax, 0x354adc49
pushf
not eax
add eax, 0xd9f6cb9c
xor eax, 0xee8bcce4
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xc8f2c4f3
xor eax, 0xf38a4019
rol eax, 0x27
popf
pushf
not eax
add eax, 0xd71948a8
xor eax, 0x9e282460
rol eax, 0x71
popf
pushf
not eax
add eax, 0x984838d0
xor eax, 0xb97e0ccf
rol eax, 0xff
popf
jmp 0x14012c6c3
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x70], rbp
mov qword [rsp + 0x78], rdi
test eax, eax
js 0x14012caa9
push rax
pushf
mov eax, 0xb454b05a
pushf
not eax
add eax, 0x8ff63f0c
xor eax, 0xbe8bfdb1
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xacc241d2
xor eax, 0xde62352d
rol eax, 0x81
popf
jmp 0x14012c6c3
push rax
pushf
mov eax, 0x1550f769
pushf
not eax
add eax, 0xbfe7662e
xor eax, 0xdfe882f2
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xb6c0faf4
xor eax, 0xa1e88f11
rol eax, 0x6e
popf
pushf
not eax
add eax, 0x8056298f
xor eax, 0x9559008b
rol eax, 0xf2
popf
jmp 0x14012c6c3
mov edi, r15d
cmp dword [rsi], r15d
jbe 0x14012cb2e
push rax
pushf
mov eax, 0xd3b268ce
pushf
not eax
add eax, 0x99b71d4b
xor eax, 0xd91147c2
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xcd8c5f36
xor eax, 0xd9ce4024
rol eax, 0x60
popf
jmp 0x14012c6c3
push rax
pushf
mov eax, 0xd12bf2a9
pushf
not eax
add eax, 0xb6c9410b
xor eax, 0x8a39d261
rol eax, 0
popf
pushf
not eax
add eax, 0x804a320e
xor eax, 0xea34aaee
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xc9caffc5
xor eax, 0xcf61c2e1
rol eax, 0xcd
popf
jmp 0x14012c6c3
nop
push rax
pushf
mov eax, 0xec498ed0
pushf
not eax
add eax, 0x93e450ea
xor eax, 0xfaced93d
rol eax, 0x93
popf
pushf
not eax
add eax, 0xa176bc31
xor eax, 0xe16eda94
rol eax, 0x49
popf
pushf
not eax
add eax, 0x87029aca
xor eax, 0xf56c3a59
rol eax, 0xd
popf
pushf
not eax
add eax, 0xf1616028
xor eax, 0x8c5b80f7
rol eax, 4
popf
jmp 0x14012c6c3
mov eax, edi
xorps xmm0, xmm0
imul rcx, rax, 0x128
movups xmmword [rsp + 0x20], xmm0
movzx ebx, word [rcx + rsi + 0x2e]
lea rbp, [rcx + rsi]
push rcx
not rcx
sub rbx, rcx
pop rcx
sub rbx, 1
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r15
lea rcx, [rbx + 0x30]
push rsi
not rsi
sub rcx, rsi
pop rsi
sub rcx, 1
call fcn.14006921f
lea rdx, [rbx + 0x30]
mov r8, rax
push rsi
not rsi
sub rdx, rsi
pop rsi
sub rdx, 1
lea rcx, [rsp + 0x20]
call fcn.1400ed668
cmp qword [rsp + 0x38], 0xf
lea rcx, [rsp + 0x20]
mov rdx, r14
cmova rcx, qword [rsp + 0x20]
jmp 0x14012cc46
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
je 0x14012cc96
push rax
pushf
mov eax, 0x88535057
pushf
not eax
add eax, 0xf7e9116d
xor eax, 0xa44888c4
rol eax, 0x73
popf
pushf
not eax
add eax, 0x986cbd53
xor eax, 0xec9f17b4
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x9a52cda5
xor eax, 0x952b430f
rol eax, 0x16
popf
jmp 0x14012c6c3
push rax
pushf
mov eax, 0x41cebbb7
pushf
not eax
add eax, 0xab46430b
xor eax, 0xc31f32ad
rol eax, 0x37
popf
pushf
not eax
add eax, 0xe2dfe125
xor eax, 0xe38aaca2
rol eax, 0xbd
popf
jmp 0x14012c6c3
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x14012cd1a
push rax
pushf
mov eax, 0x53f2503e
pushf
not eax
add eax, 0x91e34c1c
xor eax, 0xa59b1957
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xe4bb9f19
xor eax, 0xc4848c8a
rol eax, 0x63
popf
pushf
not eax
add eax, 0xf941886b
xor eax, 0x8f0e004a
rol eax, 0xbb
popf
jmp 0x14012c6c3
push rax
pushf
mov eax, 0xccdc572b
pushf
not eax
add eax, 0xfe02034c
xor eax, 0xb4a7eb97
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xc9c09ff8
xor eax, 0x82cfefaf
rol eax, 0x45
popf
jmp 0x14012c6c3
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14012cd94
push rax
pushf
mov eax, 0x8bad5cf0
pushf
not eax
add eax, 0xe48cc78f
xor eax, 0x8b216749
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xa2b13ac2
xor eax, 0xa4114a53
rol eax, 0x45
popf
jmp 0x14012c6c3
push rax
pushf
mov eax, 0x5886067
pushf
not eax
add eax, 0xb45c22ea
xor eax, 0xcf632ec8
rol eax, 0x51
popf
pushf
not eax
add eax, 0x91c6f9fa
xor eax, 0xb97a3698
rol eax, 0x8d
popf
jmp 0x14012c6c3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14012ce26
push rax
pushf
mov eax, 0xd01acadc
pushf
not eax
add eax, 0x9e89bed6
xor eax, 0x98a284bf
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xe9c85119
xor eax, 0xb6bce759
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xa6c7f8b2
xor eax, 0x94f4c8f8
rol eax, 0xe6
popf
jmp 0x14012c6c3
push rax
pushf
mov eax, 0xa5be472a
pushf
not eax
add eax, 0xeb5ff44d
xor eax, 0xc4577a5f
rol eax, 0x1b
popf
pushf
not eax
add eax, 0x8b4e3b53
xor eax, 0x9f3e8097
rol eax, 0x7a
popf
jmp 0x14012c6c3
call fcn.1400ae1e9
push rax
pushf
mov eax, 0x859988d5
pushf
not eax
add eax, 0xe95fba8e
xor eax, 0xaf039fba
rol eax, 0x92
popf
pushf
not eax
add eax, 0xd19ca9ff
xor eax, 0xd760648c
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xe3776458
xor eax, 0xd42d4b71
rol eax, 0x27
popf
pushf
not eax
add eax, 0xe059c62a
xor eax, 0xd4e40637
rol eax, 0xdd
popf
jmp 0x14012c6c3
inc edi
cmp edi, dword [rsi]
jb 0x14012cbcf
xor edx, edx
mov r8d, 0xcabdafc0
pushf
not r8d
add r8d, 0xb3a5a4a8
xor r8d, 0x819e2db3
rol r8d, 0x38
popf
pushf
not r8d
add r8d, 0xc4083439
xor r8d, 0xd1245c10
rol r8d, 0x31
popf
pushf
not r8d
add r8d, 0xb44713ed
xor r8d, 0x937588bf
rol r8d, 0x33
popf
pushf
not r8d
add r8d, 0x90b1bfff
xor r8d, 0x986e196e
rol r8d, 0x96
popf
mov rcx, rsi
jmp 0x14012cf32
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor eax, eax
push rax
pushf
mov eax, 0x89f6bd94
pushf
not eax
add eax, 0xe5870f81
xor eax, 0xa522764d
rol eax, 0xb8
popf
pushf
not eax
add eax, 0x8a0f44e3
xor eax, 0x8f1e76bd
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x89834e5d
xor eax, 0xc17a803f
rol eax, 0x90
popf
jmp 0x14012c6c3
mov rdi, qword [rsp + 0x78]
mov rbp, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x60]
add rsp, 0x40
pop r15
pop r14
pop rsi
ret
mov rbx, qword [rbp + 0x18]
xor edx, edx
mov r8d, 0x345803a7
pushf
not r8d
add r8d, 0xfe3f55f6
xor r8d, 0xdc2c956c
rol r8d, 0xaa
popf
pushf
not r8d
add r8d, 0x8feb5f13
xor r8d, 0xf3a7dad0
rol r8d, 0x32
popf
pushf
not r8d
add r8d, 0xfedf6690
xor r8d, 0x83b202bd
rol r8d, 0x90
popf
pushf
not r8d
add r8d, 0xafc82a60
xor r8d, 0x9575dbdc
rol r8d, 0xdd
popf
mov rcx, rsi
jmp 0x14012d040
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x14012d084
push rax
pushf
mov eax, 0x1d502e3
pushf
not eax
add eax, 0x963de3bc
xor eax, 0xd15e005a
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xa17d171e
xor eax, 0xf13bf483
rol eax, 0x63
popf
jmp 0x14012c6c3
push rax
pushf
mov eax, 0x357742a7
pushf
not eax
add eax, 0xcb4110cb
xor eax, 0xf5494ec0
rol eax, 0xa
popf
pushf
not eax
add eax, 0xbcc59192
xor eax, 0xaf83db70
rol eax, 0x47
popf
pushf
not eax
add eax, 0x8e8fd240
xor eax, 0xa8fa5527
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xb996b925
xor eax, 0xa42d9bfb
rol eax, 0x5c
popf
jmp 0x14012c6c3
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14012d14a
push rax
pushf
mov eax, 0xfbae645c
pushf
not eax
add eax, 0xef261b7e
xor eax, 0x874ca610
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xd0eb9dfd
xor eax, 0xffdf5d51
rol eax, 0xec
popf
pushf
not eax
add eax, 0xce1a8302
xor eax, 0x8c3bd177
rol eax, 0x69
popf
pushf
not eax
add eax, 0x9b1c2a44
xor eax, 0x988e2d47
rol eax, 0xc7
popf
jmp 0x14012c6c3
push rax
pushf
mov eax, 0x74ea655c
pushf
not eax
add eax, 0xc4c68a7d
xor eax, 0x8149b7b3
rol eax, 0xc
popf
pushf
not eax
add eax, 0xbac39194
xor eax, 0xe1026ab5
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x9a76fb38
xor eax, 0x92b30b60
rol eax, 0x5e
popf
jmp 0x14012c6c3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14012d1eb
push rax
pushf
mov eax, 0xce30577c
pushf
not eax
add eax, 0xa077c42d
xor eax, 0xb844aeae
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xc1aff916
xor eax, 0xd912e871
rol eax, 0x59
popf
pushf
not eax
add eax, 0xe384c0df
xor eax, 0xaaa955b0
rol eax, 0xd2
popf
jmp 0x14012c6c3
push rax
pushf
mov eax, 0x817be6b
pushf
not eax
add eax, 0x9033562e
xor eax, 0xbb66bace
rol eax, 0x96
popf
pushf
not eax
add eax, 0xecfa0884
xor eax, 0xa9ed6d38
rol eax, 0xb6
popf
jmp 0x14012c6c3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ae1e9
push rax
pushf
mov eax, 0x6ed35d2c
pushf
not eax
add eax, 0xc26b9b52
xor eax, 0xb265ecf1
rol eax, 0x26
popf
pushf
not eax
add eax, 0xfe971fc4
xor eax, 0xff226a8f
rol eax, 0x42
popf
jmp 0x14012c6c3
mov rax, rbx
jmp 0x14012cf80