Function at 0x1400c8560
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xb0
mov rax, qword [0x14039bc30]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov rsi, rcx
xor r15d, r15d
mov dword [rbp - 0x49], r15d
mov qword [rbp - 0x19], r15
mov qword [rbp - 9], r15
mov qword [rbp - 1], 7
mov word [rbp - 0x19], r15w
mov dword [rbp - 0x49], 1
lea rcx, [rbp + 7]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx eax, word [rbp + 7]
cmp r15w, ax
jne 0x1400c85e0
lea r8d, [r15 + 2]
lea rdx, [0x1402eeb9c]
lea rcx, [rbp - 0x19]
call fcn.140032810
movzx eax, word [rbp + 7]
mov ecx, 9
cmp cx, ax
jne 0x1400c8602
lea r8d, [rcx - 7]
lea rdx, [0x1402eeba4]
lea rcx, [rbp - 0x19]
call fcn.140032810
movzx eax, word [rbp + 7]
mov ebx, 5
cmp bx, ax
jne 0x1400c8623
mov r8d, ebx
lea rdx, str.ARM32
lea rcx, [rbp - 0x19]
call fcn.140032810
movzx eax, word [rbp + 7]
mov ecx, 0xc
cmp cx, ax
jne 0x1400c8640
mov r8, rbx
lea rdx, str.ARM64
lea rcx, [rbp - 0x19]
call fcn.140032810
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x21], 7
mov word [rbp - 0x39], r15w
mov rdx, qword [str.plat]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400c8670
lea rcx, [rbp - 0x39]
call fcn.140032810
nop
lea rdx, [rbp - 0x39]
lea rcx, [rsi + 0x10]
call fcn.1400c7a90
lea rcx, [rbp - 0x19]
cmp rax, rcx
je 0x1400c86b6
lea rdx, [rbp - 0x19]
cmp qword [rbp - 1], 8
cmovae rdx, qword [rbp - 0x19]
mov r8, qword [rbp - 9]
mov rcx, rax
call fcn.140032810
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 8
jb 0x1400c86f6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c86f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c8f8c
call fcn.14013afa0
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x21], 7
mov word [rbp - 0x39], r15w
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x1400c8747
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c8742
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c8f92
call fcn.14013afa0
lea rcx, [rbp - 0x19]
call fcn.1400c82a0
mov rdi, rax
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x21], 7
mov word [rbp - 0x39], r15w
mov rdx, qword [0x14039b200]
mov r8, rbx
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400c8772
lea rcx, [rbp - 0x39]
call fcn.140032810
nop
lea rdx, [rbp - 0x39]
lea rcx, [rsi + 0x10]
call fcn.1400c7a90
cmp rax, rdi
je 0x1400c87b3
mov r8, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 8
jb 0x1400c87a7
mov rdi, qword [rdi]
mov rdx, rdi
mov rcx, rax
call fcn.140032810
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 8
jb 0x1400c87f3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c87ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c8f98
call fcn.14013afa0
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x21], 7
mov word [rbp - 0x39], r15w
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x1400c8844
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c883f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c8f9e
call fcn.14013afa0
lea rcx, [rbp - 0x19]
call fcn.1400c8050
mov rdi, rax
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x21], 7
mov word [rbp - 0x39], r15w
mov rdx, qword [0x14039b210]
mov r8, rbx
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400c8870
lea rcx, [rbp - 0x39]
call fcn.140032810
nop
lea rdx, [rbp - 0x39]
lea rcx, [rsi + 0x10]
call fcn.1400c7a90
cmp rax, rdi
je 0x1400c88b1
mov r8, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 8
jb 0x1400c88a5
mov rdi, qword [rdi]
mov rdx, rdi
mov rcx, rax
call fcn.140032810
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 8
jb 0x1400c88f1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c88ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c8fa4
call fcn.14013afa0
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x21], 7
mov word [rbp - 0x39], r15w
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x1400c8942
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c893d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c8faa
call fcn.14013afa0
mov qword [rbp - 0x19], r15
mov qword [rbp - 9], r15
mov qword [rbp - 1], 7
mov word [rbp - 0x19], r15w
mov r8d, 1
lea rdx, [0x1403330a0]
lea rcx, [rbp - 0x19]
call fcn.140032810
nop
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x21], 7
mov word [rbp - 0x39], r15w
mov rdx, qword [0x14039b218]
mov r8, rbx
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400c8990
lea rcx, [rbp - 0x39]
call fcn.140032810
nop
lea rdx, [rbp - 0x39]
lea rcx, [rsi + 0x10]
call fcn.1400c7a90
lea rcx, [rbp - 0x19]
cmp rax, rcx
je 0x1400c89d6
lea rdx, [rbp - 0x19]
cmp qword [rbp - 1], 8
cmovae rdx, qword [rbp - 0x19]
mov r8, qword [rbp - 9]
mov rcx, rax
call fcn.140032810
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 8
jb 0x1400c8a16
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c8a11
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c8fb0
call fcn.14013afa0
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x21], 7
mov word [rbp - 0x39], r15w
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x1400c8a67
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c8a62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c8fb6
call fcn.14013afa0
mov qword [rbp - 0x19], r15
mov qword [rbp - 9], r15
mov qword [rbp - 1], 7
mov word [rbp - 0x19], r15w
mov r8d, 3
lea rdx, [0x1402ee8c0]
lea rcx, [rbp - 0x19]
call fcn.140032810
nop
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x21], 7
mov word [rbp - 0x39], r15w
mov rdx, qword [str.UPDATER_VERSION]
nop
inc rbx
cmp word [rdx + rbx*2], 0
jne 0x1400c8ab0
mov r8, rbx
lea rcx, [rbp - 0x39]
call fcn.140032810
nop
lea rdx, [rbp - 0x39]
lea rcx, [rsi + 0x10]
call fcn.1400c7a90
lea rcx, [rbp - 0x19]
cmp rax, rcx
je 0x1400c8af8
lea rdx, [rbp - 0x19]
cmp qword [rbp - 1], 8
cmovae rdx, qword [rbp - 0x19]
mov r8, qword [rbp - 9]
mov rcx, rax
call fcn.140032810
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 8
jb 0x1400c8b38
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c8b33
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c8fbc
call fcn.14013afa0
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x21], 7
mov word [rbp - 0x39], r15w
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x1400c8b89
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c8b84
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c8f86
call fcn.14013afa0
mov rbx, qword [str.FILE_EXISTS]
lea rcx, [rbp - 0x41]
call fcn.1400c7d30
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c9080
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c8bcf
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400c6d28.0]
mov rbx, qword [str.FVER]
lea rcx, [rbp - 0x41]
call fcn.1400c7d80
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c9080
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c8c15
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400c6d28.0]
mov rbx, qword [0x14039b280]
lea rcx, [rbp - 0x41]
call fcn.1400c7ce0
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c9080
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c8c5b
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400c6d28.0]
mov rbx, qword [0x14039b298]
lea rcx, [rbp - 0x41]
call fcn.1400c7fb0
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c9080
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c8ca1
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400c6d28.0]
mov rbx, qword [str.REG32]
lea rcx, [rbp - 0x41]
call fcn.1400c7fb0
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c9080
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c8ce7
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400c6d28.0]
mov rbx, qword [str.0___]
lea rcx, [rbp - 0x41]
call fcn.1400c7f60
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c9080
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c8d2d
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400c6d28.0]
mov rbx, qword [str.REGISTRY]
lea rcx, [rbp - 0x41]
call fcn.1400c8000
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c9080
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c8d73
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400c6d28.0]
mov rbx, qword [str.____]
lea rcx, [rbp - 0x41]
call fcn.1400c7ec0
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c9080
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c8db9
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400c6d28.0]
mov rbx, qword [str.H___]
lea rcx, [rbp - 0x41]
call fcn.1400c7ec0
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c9080
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c8dff
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400c6d28.0]
mov rbx, qword [str.X___]
lea rcx, [rbp - 0x41]
call fcn.1400c7e70
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c9080
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c8e45
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400c6d28.0]
mov rbx, qword [str.h___]
lea rcx, [rbp - 0x41]
call fcn.1400c7f10
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c9080
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c8e8b
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400c6d28.0]
mov rbx, qword [0x14039b2e0]
lea rcx, [rbp - 0x41]
call fcn.1400c7dd0
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c9080
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c8ed1
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400c6d28.0]
mov rbx, qword [0x14039b2e8]
lea rcx, [rbp - 0x41]
call fcn.1400c7e20
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c9080
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c8f17
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400c6d28.0]
mov rbx, qword [str.DATE]
lea rcx, [rbp - 0x41]
call fcn.1400c7c90
nop
mov r8, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], r8
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c9080
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c8f5d
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400c6d28.0]
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.14013af80
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.1401421d8
nop
call fcn.1401421d8
nop
call fcn.1401421d8
nop
call fcn.1401421d8
nop
call fcn.1401421d8
nop
call fcn.1401421d8
nop
call fcn.1401421d8
nop
call fcn.1401421d8
nop
call fcn.1401421d8
nop
call fcn.1401421d8
int3