Function at 0x140001e70
Capabilities:
Get system information on windows

Disassembly:
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xc0
mov qword [rbp - 0x69], 0xfffffffffffffffe
mov qword [rsp + 0xf0], rbx
mov rax, qword [0x14003e050]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov rbx, r8
mov rdi, rdx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x51], xmm0
movdqa xmm1, xmmword [0x140035bf0]
movdqu xmmword [rbp - 0x51], xmm1
xor r15d, r15d
mov word [rbp - 0x61], r15w
call fcn.140017140
mov r14, rax
mov rcx, rax
call fcn.1400173d0
test al, al
jne 0x140001ee4
mov rdx, rdi
mov rcx, r14
call fcn.140017450
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x140002117
lea rdx, [0x140034848]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140002117
lea rcx, [rbp - 1]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, word [rbp - 1]
cmp ax, 9
je 0x140001f31
cmp ax, 6
jne 0x140002117
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
movdqa xmm1, xmmword [0x140035bf0]
movdqu xmmword [rbp - 0x11], xmm1
mov word [rbp - 0x21], r15w
mov r8d, 0x14
lea rdx, str.2345ImageThumb64.dll
lea rcx, [rbp - 0x21]
call fcn.1400035d0
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x31], xmm0
movdqa xmm1, xmmword [0x140035bf0]
movdqu xmmword [rbp - 0x31], xmm1
mov word [rbp - 0x41], r15w
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop word [rax + rax]
inc r8
cmp word [rbx + r8*2], 0
jne 0x140001f90
mov rdx, rbx
lea rcx, [rbp - 0x41]
call fcn.1400035d0
nop
lea r8, [rbp - 0x21]
lea rdx, [rbp - 0x41]
lea rcx, [rbp - 1]
call fcn.140005330
mov rsi, rax
lea rax, [rbp - 0x61]
cmp rax, rsi
je 0x140001fed
lea rcx, [rbp - 0x61]
call fcn.140003560
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x61], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rbp - 0x51], xmm1
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], 7
mov word [rsi], r15w
mov rdx, qword [rbp + 0x17]
cmp rdx, 8
jb 0x14000202d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002028
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002722
call fcn.140018800
movdqa xmm0, xmmword [0x140035bf0]
movdqu xmmword [rbp + 0xf], xmm0
mov word [rbp - 1], r15w
mov rdx, qword [rbp - 0x29]
cmp rdx, 8
jb 0x14000207f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000207a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002728
call fcn.140018800
movdqa xmm0, xmmword [0x140035bf0]
movdqu xmmword [rbp - 0x31], xmm0
mov word [rbp - 0x41], r15w
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x1400020d1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400020cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000272e
call fcn.140018800
movdqa xmm0, xmmword [0x140035bf0]
movdqu xmmword [rbp - 0x11], xmm0
mov word [rbp - 0x21], r15w
lea rcx, [rbp - 0x61]
call fcn.140003dd0
test al, al
je 0x1400022ee
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 8
cmovae rdx, qword [rbp - 0x61]
mov rcx, r14
call fcn.1400170f0
test al, al
jne 0x1400022ee
jmp 0x14000268c
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x31], xmm0
movdqa xmm1, xmmword [0x140035bf0]
movdqu xmmword [rbp - 0x31], xmm1
mov word [rbp - 0x41], r15w
mov r8d, 0x12
lea rdx, str.2345ImageThumb.dll
lea rcx, [rbp - 0x41]
call fcn.1400035d0
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
movdqa xmm1, xmmword [0x140035bf0]
movdqu xmmword [rbp - 0x11], xmm1
mov word [rbp - 0x21], r15w
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop dword [rax]
inc r8
cmp word [rbx + r8*2], 0
jne 0x140002170
mov rdx, rbx
lea rcx, [rbp - 0x21]
call fcn.1400035d0
nop
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x21]
lea rcx, [rbp - 1]
call fcn.140005330
mov rsi, rax
lea rax, [rbp - 0x61]
cmp rax, rsi
je 0x1400021cd
lea rcx, [rbp - 0x61]
call fcn.140003560
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x61], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rbp - 0x51], xmm1
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], 7
mov word [rsi], r15w
mov rdx, qword [rbp + 0x17]
cmp rdx, 8
jb 0x14000220d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002208
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002734
call fcn.140018800
movdqa xmm0, xmmword [0x140035bf0]
movdqu xmmword [rbp + 0xf], xmm0
mov word [rbp - 1], r15w
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x14000225f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000225a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000273a
call fcn.140018800
movdqa xmm0, xmmword [0x140035bf0]
movdqu xmmword [rbp - 0x11], xmm0
mov word [rbp - 0x21], r15w
mov rdx, qword [rbp - 0x29]
cmp rdx, 8
jb 0x1400022b1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400022ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002740
call fcn.140018800
movdqa xmm0, xmmword [0x140035bf0]
movdqu xmmword [rbp - 0x31], xmm0
mov word [rbp - 0x41], r15w
lea rcx, [rbp - 0x61]
call fcn.140003dd0
test al, al
je 0x1400022ee
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 8
cmovae rdx, qword [rbp - 0x61]
mov rcx, r14
call fcn.1400170f0
test al, al
je 0x14000268c
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x31], xmm0
movdqa xmm1, xmmword [0x140035bf0]
movdqu xmmword [rbp - 0x31], xmm1
mov word [rbp - 0x41], r15w
mov r8d, 0xd
lea rdx, str.FreeImage.dll
lea rcx, [rbp - 0x41]
call fcn.1400035d0
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
movdqa xmm1, xmmword [0x140035bf0]
movdqu xmmword [rbp - 0x11], xmm1
mov word [rbp - 0x21], r15w
mov r8, rdi
nop dword [rax]
inc r8
cmp word [rbx + r8*2], 0
jne 0x140002340
mov rdx, rbx
lea rcx, [rbp - 0x21]
call fcn.1400035d0
nop
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x21]
lea rcx, [rbp - 1]
call fcn.140005330
mov rsi, rax
lea rax, [rbp - 0x61]
cmp rax, rsi
je 0x14000239d
lea rcx, [rbp - 0x61]
call fcn.140003560
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x61], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rbp - 0x51], xmm1
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], 7
mov word [rsi], r15w
mov rdx, qword [rbp + 0x17]
cmp rdx, 8
jb 0x1400023dd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400023d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002746
call fcn.140018800
movdqa xmm0, xmmword [0x140035bf0]
movdqu xmmword [rbp + 0xf], xmm0
mov word [rbp - 1], r15w
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x14000242f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000242a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000274c
call fcn.140018800
movdqa xmm0, xmmword [0x140035bf0]
movdqu xmmword [rbp - 0x11], xmm0
mov word [rbp - 0x21], r15w
mov rdx, qword [rbp - 0x29]
cmp rdx, 8
jb 0x140002481
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000247c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002752
call fcn.140018800
movdqa xmm0, xmmword [0x140035bf0]
movdqu xmmword [rbp - 0x31], xmm0
mov word [rbp - 0x41], r15w
lea rcx, [rbp - 0x61]
call fcn.140003dd0
test al, al
je 0x1400024be
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 8
cmovae rdx, qword [rbp - 0x61]
mov rcx, r14
call fcn.1400170f0
test al, al
je 0x14000268c
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x31], xmm0
movdqa xmm1, xmmword [0x140035bf0]
movdqu xmmword [rbp - 0x31], xmm1
mov word [rbp - 0x41], r15w
mov r8d, 0x11
lea rdx, str.FreeImagePlus.dll
lea rcx, [rbp - 0x41]
call fcn.1400035d0
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
movdqa xmm1, xmmword [0x140035bf0]
movdqu xmmword [rbp - 0x11], xmm1
mov word [rbp - 0x21], r15w
nop dword [rax]
inc rdi
cmp word [rbx + rdi*2], 0
jne 0x140002510
mov r8, rdi
mov rdx, rbx
lea rcx, [rbp - 0x21]
call fcn.1400035d0
nop
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x21]
lea rcx, [rbp - 1]
call fcn.140005330
mov rbx, rax
lea rax, [rbp - 0x61]
cmp rax, rbx
je 0x14000256f
lea rcx, [rbp - 0x61]
call fcn.140003560
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x61], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x51], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 7
mov word [rbx], r15w
mov rdx, qword [rbp + 0x17]
cmp rdx, 8
jb 0x1400025af
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400025aa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002758
call fcn.140018800
movdqa xmm0, xmmword [0x140035bf0]
movdqu xmmword [rbp + 0xf], xmm0
mov word [rbp - 1], r15w
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x140002601
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400025fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000275e
call fcn.140018800
movdqa xmm0, xmmword [0x140035bf0]
movdqu xmmword [rbp - 0x11], xmm0
mov word [rbp - 0x21], r15w
mov rdx, qword [rbp - 0x29]
cmp rdx, 8
jb 0x140002653
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000264e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002764
call fcn.140018800
movdqa xmm0, xmmword [0x140035bf0]
movdqu xmmword [rbp - 0x31], xmm0
mov word [rbp - 0x41], r15w
lea rcx, [rbp - 0x61]
call fcn.140003dd0
test al, al
je 0x1400026a6
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 8
cmovae rdx, qword [rbp - 0x61]
mov rcx, r14
call fcn.1400170f0
test al, al
jne 0x1400026a6
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 8
cmovae rdx, qword [rbp - 0x61]
mov rcx, r14
call fcn.1400174a0
xor bl, bl
jmp 0x1400026a8
mov bl, 1
mov rdx, qword [rbp - 0x49]
cmp rdx, 8
jb 0x1400026e4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400026df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000271c
call fcn.140018800
movdqa xmm0, xmmword [0x140035bf0]
movdqu xmmword [rbp - 0x51], xmm0
mov word [rbp - 0x61], r15w
movzx eax, bl
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.140018280
mov rbx, qword [rsp + 0xf0]
add rsp, 0xc0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
call fcn.14001c254
nop
call fcn.14001c254
nop
call fcn.14001c254
nop
call fcn.14001c254
nop
call fcn.14001c254
nop
call fcn.14001c254
nop
call fcn.14001c254
nop
call fcn.14001c254
nop
call fcn.14001c254
nop
call fcn.14001c254
nop
call fcn.14001c254
nop
call fcn.14001c254
nop
call fcn.14001c254
int3