Function at 0x140093ec0
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x30
mov rbp, rcx
mov qword [rsp + 0x28], rcx
call fcn.14006aa70
lea rcx, [rbp + 0x2f18]
call fcn.14003e680
nop
lea rcx, [rbp + 0x2f28]
call fcn.140077090
nop
lea rcx, [rbp + 0x2f88]
call fcn.1400c7920
nop
lea rcx, [rbp + 0x30c8]
call fcn.1400055e0
nop
lea rcx, [rbp + 0x30e8]
call fcn.1400055e0
nop
lea rcx, [rbp + 0x30f0]
call fcn.1400055e0
nop
lea rcx, [rbp + 0x31a0]
call fcn.1400055e0
nop
lea rcx, [rbp + 0x31d0]
call fcn.1400055e0
nop
lea rcx, [rbp + 0x31d8]
call fcn.1400055e0
nop
lea rcx, [rbp + 0x31e0]
call fcn.1400055e0
nop
xor r14d, r14d
mov qword [rbp + 0x3200], r14
mov qword [rbp + 0x3208], r14
mov qword [rbp + 0x3210], r14
lea rcx, [rbp + 0x3238]
call fcn.1400055e0
nop
lea rcx, [rbp + 0x3240]
call fcn.1400055e0
nop
lea rcx, [rbp + 0x3248]
call fcn.1400055e0
nop
lea rcx, [rbp + 0x3250]
call fcn.1400055e0
nop
lea rcx, [rbp + 0x3258]
call fcn.1400055e0
nop
lea rcx, [rbp + 0x3260]
call fcn.1400055e0
nop
lea rcx, [rbp + 0x3268]
call fcn.1400055e0
nop
lea rcx, [rbp + 0x3270]
call fcn.1400055e0
nop
lea rcx, [rbp + 0x3278]
call fcn.1400055e0
nop
lea rcx, [rbp + 0x3370]
call fcn.14003e680
nop
mov qword [rbp + 0x3380], r14
mov qword [rbp + 0x3388], r14
mov qword [rbp + 0x3390], r14
mov qword [rbp + 0x3398], r14
mov qword [rbp + 0x33a0], r14
mov qword [rbp + 0x33a8], r14
mov qword [rbp + 0x33b0], r14
mov qword [rbp + 0x33b8], r14
mov qword [rbp + 0x33c0], r14
mov qword [rbp + 0x33c8], r14
mov qword [rbp + 0x33d0], r14
mov qword [rbp + 0x33d8], r14
mov qword [rbp + 0x33e0], r14
mov qword [rbp + 0x33e8], r14
mov qword [rbp + 0x33f0], r14
mov qword [rbp + 0x33f8], r14
mov qword [rbp + 0x3400], r14
mov qword [rbp + 0x3408], r14
mov qword [rbp + 0x3410], r14
mov qword [rbp + 0x3418], r14
mov qword [rbp + 0x3420], r14
lea rcx, [rbp + 0x3428]
mov qword [rsp + 0x20], rcx
mov dword [rcx], r14d
mov qword [rcx + 8], r14
mov qword [rcx + 0x10], r14
xorps xmm0, xmm0
movups xmmword [rcx + 0x18], xmm0
movups xmmword [rcx + 0x28], xmm0
movups xmmword [rcx + 0x38], xmm0
mov qword [rcx + 0x48], r14
lea edx, [r14 + 2]
call fcn.1400d8980
nop
mov qword [rbp + 0x3478], r14
mov qword [rbp + 0x3480], r14
mov qword [rbp + 0x3488], r14
mov qword [rbp + 0x3490], r14
mov qword [rbp + 0x3498], r14
mov qword [rbp + 0x34a0], r14
mov qword [rbp + 0x34a8], r14
mov qword [rbp + 0x34b0], r14
mov qword [rbp + 0x34b8], r14
mov qword [rbp + 0x34c0], r14
mov qword [rbp + 0x34c8], r14
mov qword [rbp + 0x34d0], r14
mov qword [rbp + 0x34d8], r14
mov qword [rbp + 0x34e0], r14
mov qword [rbp + 0x34e8], r14
mov qword [rbp + 0x34f0], r14
mov qword [rbp + 0x34f8], r14
mov qword [rbp + 0x3500], r14
mov qword [rbp + 0x3508], r14
mov qword [rbp + 0x3510], r14
mov qword [rbp + 0x3518], r14
mov qword [rbp + 0x3520], r14
mov qword [rbp + 0x3528], r14
mov qword [rbp + 0x3530], r14
mov qword [rbp + 0x3538], r14
mov qword [rbp + 0x3540], r14
mov qword [rbp + 0x3548], r14
mov qword [rbp + 0x3550], r14
mov qword [rbp + 0x3558], r14
mov qword [rbp + 0x3560], r14
mov qword [rbp + 0x3568], r14
mov qword [rbp + 0x3570], r14
mov qword [rbp + 0x3578], r14
mov qword [rbp + 0x3580], r14
mov qword [rbp + 0x3588], r14
mov qword [rbp + 0x3590], r14
mov qword [rbp + 0x3598], r14
mov qword [rbp + 0x35a0], r14
mov qword [rbp + 0x35a8], r14
mov qword [rbp + 0x35b0], r14
mov qword [rbp + 0x35b8], r14
mov qword [rbp + 0x35c0], r14
mov qword [rbp + 0x35c8], r14
mov qword [rbp + 0x35d0], r14
mov qword [rbp + 0x35d8], r14
mov qword [rbp + 0x35e0], r14
mov qword [rbp + 0x35e8], r14
mov qword [rbp + 0x35f0], r14
mov qword [rbp + 0x35f8], r14
mov qword [rbp + 0x3600], r14
mov qword [rbp + 0x3608], r14
mov qword [rbp + 0x3610], r14
mov qword [rbp + 0x3618], r14
mov qword [rbp + 0x3620], r14
mov qword [rbp + 0x3628], r14
mov qword [rbp + 0x3630], r14
mov qword [rbp + 0x3638], r14
mov qword [rbp + 0x3640], r14
mov qword [rbp + 0x3648], r14
mov qword [rbp + 0x3650], r14
mov qword [rbp + 0x3658], r14
mov qword [rbp + 0x3660], r14
mov qword [rbp + 0x3668], r14
mov qword [rbp + 0x3670], r14
mov qword [rbp + 0x3678], r14
mov qword [rbp + 0x3680], r14
lea rcx, [rbp + 0x3688]
call fcn.14003e680
nop
mov qword [rbp + 0x36c8], r14
mov qword [rbp + 0x36d0], r14
mov qword [rbp + 0x36d8], r14
lea rbx, [rbp + 0x36e0]
mov qword [rsp + 0x20], rbx
mov qword [rbx], r14
mov qword [rbx + 8], r14
lea ecx, [r14 + 0x40]
call fcn.1400ff088
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbx], rax
lea rcx, [rbp + 0x36f8]
mov qword [rsp + 0x20], rcx
mov dword [rcx], r14d
mov qword [rcx + 8], r14
mov qword [rcx + 0x10], r14
xorps xmm0, xmm0
movups xmmword [rcx + 0x18], xmm0
movups xmmword [rcx + 0x28], xmm0
movups xmmword [rcx + 0x38], xmm0
mov qword [rcx + 0x48], r14
lea edx, [r14 + 2]
call fcn.1400d8980
nop
lea rcx, [rbp + 0x3748]
mov qword [rsp + 0x20], rcx
mov dword [rcx], r14d
mov qword [rcx + 8], r14
mov qword [rcx + 0x10], r14
xorps xmm0, xmm0
movups xmmword [rcx + 0x18], xmm0
movups xmmword [rcx + 0x28], xmm0
movups xmmword [rcx + 0x38], xmm0
mov qword [rcx + 0x48], r14
lea edx, [r14 + 2]
call fcn.1400d8980
nop
lea rcx, [rbp + 0x3798]
mov qword [rsp + 0x20], rcx
mov dword [rcx], r14d
mov qword [rcx + 8], r14
mov qword [rcx + 0x10], r14
xorps xmm0, xmm0
movups xmmword [rcx + 0x18], xmm0
movups xmmword [rcx + 0x28], xmm0
movups xmmword [rcx + 0x38], xmm0
mov qword [rcx + 0x48], r14
lea edx, [r14 + 2]
call fcn.1400d8980
nop
mov qword [rbp + 0x37e8], r14
mov qword [rbp + 0x37f0], r14
mov qword [rbp + 0x37f8], r14
lea rcx, [rbp + 0x3098]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea rcx, [rbp + 0x30e8]
call fcn.1400056e0
mov qword [rbp + 0x30e0], r14
lea rcx, [rbp + 0x64c]
lea r9, [r14 - 1]
lea r8, [0x1401454c0]
mov edx, 0x104
call fcn.140115f0c
lea rax, str.processlasso.exe
mov qword [rbp + 0x858], rax
mov rax, qword [0x14017ae30]
mov qword [rbp + 0x18], rax
mov dword [rbp + 0x14], r14d
lea rcx, [rbp + 0x32d0]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [rbp + 0x36a0]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [rbp + 0x3070]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [rbp + 0x3280]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [rbp + 0x32a8]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [rbp + 0x32f8]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [rbp + 0x3320]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [rbp + 0x3348]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov byte [rbp + 0x3120], r14b
mov byte [rbp + 0x3156], r14b
mov byte [rbp + 0x3171], r14b
mov byte [rbp + 0x3178], r14b
mov rcx, rbp
call fcn.140094da0
mov qword [rbp + 0x3118], r14
mov qword [rbp + 0x3100], r14
mov qword [rbp + 0x3108], r14
mov qword [rbp + 0x3110], r14
mov dword [rbp + 0x30f8], 3
lea r9, str.Lasso777
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rbp + 0x3100], rax
lea r9, str.Lasso888_2
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rbp + 0x3108], rax
lea r9, str.49da4c63_c475_4b6c_83f3_c78a9fe813c2
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rbp + 0x3110], rax
lea rdx, [rbp + 0x3248]
mov rcx, rbp
call fcn.1400a6180
nop
mov rax, rbp
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
add rsp, 0x30
pop r14
pop rdi
pop rsi
ret