Function at 0x140001360
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xf0
mov rbx, r8
mov r14, rcx
mov r8d, edx
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
mov qword [rbp + 0x77], rax
test rax, rax
jne 0x1400013f6
mov ecx, 0xc
call fcn.140003140
lea rdx, str.____Failed_to_open_process__Error
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140001da0
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x140001f80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, r14
call fcn.140001750
jmp 0x1400016e4
lea rcx, [rbp - 0x19]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea rcx, [rbp - 0x61]
call fcn.140001750
nop
lea rcx, [rbp - 0x79]
call fcn.140001750
nop
xor r15d, r15d
lea rcx, [rsp + 0x30]
call fcn.140001750
nop
mov rcx, rbx
call fcn.140001710
mov rdi, rax
mov rcx, rbx
call fcn.140001720
mov rbx, rax
cmp rax, rdi
je 0x140001464
nop dword [rax]
mov rcx, rbx
call fcn.140001850
cmp rax, 9
jb 0x14000145b
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.140001730
add rbx, 0x20
cmp rbx, rdi
jne 0x140001440
cmp qword [rbp - 9], 0
jbe 0x1400016b0
nop
mov r9d, 0x30
lea r8, [rbp - 0x49]
mov rdx, r15
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
cmp rax, 0x30
jne 0x140001671
mov rcx, qword [rbp - 0x31]
cmp rcx, 0x3dea00
ja 0x140001662
cmp dword [rbp - 0x29], 0x1000
jne 0x140001662
mov eax, dword [rbp - 0x25]
add eax, 0xfffffffe
test eax, 0xfffffffd
jne 0x140001662
mov rdx, rcx
lea rcx, [rbp - 0x61]
call fcn.140001770
lea rcx, [rbp - 0x61]
call fcn.140001720
mov r8, rax
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp - 0x31]
mov rdx, r15
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x1400015ec
mov r13, qword [rbp - 0x31]
cmp qword [rbp + 0x7f], r13
cmovb r13, qword [rbp + 0x7f]
mov edx, 0x23
lea rcx, [rsp + 0x30]
call fcn.140001710
mov r8, rax
lea rcx, [rsp + 0x30]
call fcn.140001720
mov rcx, rax
cmp rax, r8
je 0x14000154b
nop dword [rax]
call fcn.140001850
cmp rdx, rax
ja 0x140001542
call fcn.140001850
mov rdx, rax
add rcx, 0x20
cmp rcx, r8
jne 0x140001530
xor edi, edi
mov r12, r13
sub r12, rdx
lea rcx, [rsp + 0x30]
call fcn.140001720
mov rbx, rax
lea rcx, [rsp + 0x30]
call fcn.140001710
mov r14, rax
cmp rbx, rax
je 0x1400015cd
mov rsi, r13
sub rsi, rdi
mov rcx, rbx
call fcn.140001850
cmp rax, rsi
ja 0x1400015ab
call fcn.140001850
mov r8, rax
call fcn.140001860
mov rdx, rax
lea rcx, [rbp - 0x61]
call fcn.140001720
lea rcx, [rdi + rax]
call fcn.14000964e
test eax, eax
je 0x1400015b6
add rbx, 0x20
cmp rbx, r14
jne 0x140001578
jmp 0x1400015cd
lea rax, [rdi + r15]
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x79]
call fcn.1400017a0
lea rcx, [rbp - 0x79]
call fcn.140001790
test al, al
je 0x1400015e6
inc rdi
cmp rdi, r12
jbe 0x140001553
mov rsi, qword [rbp + 0x77]
jmp 0x14000165e
lea rdx, str.ReadProcessMemory_0x
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140001da0
lea rdx, [0x140001330]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rdx, r15
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x140001300]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rcx, rax
lea rdx, str._Error_
call fcn.140001da0
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x140001f80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp - 0x31]
add r15, rcx
cmp r15, qword [rbp - 9]
jb 0x140001470
jmp 0x1400016ac
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
cmp eax, 5
je 0x1400016ac
lea rdx, str.VirtualQueryEx_failed__Error
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140001da0
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x140001f80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r14, qword [rbp + 0x5f]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp - 0x79]
mov rcx, r14
call fcn.1400017c0
nop
lea rcx, [rsp + 0x30]
call fcn.140001740
nop
lea rcx, [rbp - 0x79]
call fcn.1400017b0
nop
lea rcx, [rbp - 0x61]
call fcn.140001780
mov rax, r14
mov rbx, qword [rsp + 0x138]
add rsp, 0xf0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret