Function at 0x14004a7f0
Capabilities:
Get system information on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xc0
movaps xmmword [rax - 0x18], xmm6
call fcn.14004a260
mov rcx, rax
call fcn.14004a2f0
test eax, eax
je 0x14004ab6a
mov dword [0x140140058], eax
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x140140060], rax
test rax, rax
je 0x14004ab6a
call fcn.14004a260
mov rcx, rax
call fcn.14004a2f0
test eax, eax
je 0x14004ab83
mov dword [0x140140058], eax
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x140140060], rax
test rax, rax
je 0x14004ab83
lea rdx, str.An_unexpected_error_occurred
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140057470
mov r8d, Ordinal_27
lea rdx, str.M82B_LOCATION_ACTIVATING
lea rcx, [0x140140038]
call fcn.140056f40
lea rcx, [rbp + 0x17]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov rsi, qword [rbp + 0x1f]
mov rdi, qword [rbp + 0x27]
mov ecx, 0x3e
call fcn.1400bf488
mov rbx, rax
mov dword [rax], Ordinal_33
mov dword [rax + 4], 0x660065
mov dword [rax + 8], 0x650066
mov dword [rax + 0xc], 0x740063
mov dword [rax + 0x10], 0x2f0073
mov dword [rax + 0x14], 0x660076
mov dword [rax + 0x18], 0x5f0078
mov dword [rax + 0x1c], 0x6e0069
mov dword [rax + 0x20], 0x670061
mov dword [rax + 0x24], 0x65006d
mov dword [rax + 0x28], 0x6c005f
mov dword [rax + 0x2c], 0x730061
mov dword [rax + 0x30], 0x720065
mov dword [rax + 0x34], 0x73005f
mov dword [rax + 0x38], 0x6f0068
mov word [rax + 0x3c], reloc.WS2_32.dll_WSASetLastError
mov ecx, gethostname
call fcn.1400bf488
mov dword [rax], Ordinal_27
mov dword [rax + 4], 0x6e0069
mov dword [rax + 8], 0x610067
mov dword [rax + 0xc], 0x65006d
mov dword [rax + 0x10], 0x70002f
mov dword [rax + 0x14], 0x630069
mov dword [rax + 0x18], 0x75006b
mov dword [rax + 0x1c], 0x2f0070
mov dword [rax + 0x20], 0x690070
mov dword [rax + 0x24], 0x6b0063
mov dword [rax + 0x28], 0x700075
mov dword [rax + 0x2c], 0x62005f
mov dword [rax + 0x30], 0x39006d
mov word [rax + gethostname], 0x34
mov qword [rsp + 0x20], rbx
mov r9, rax
mov r8, rdi
mov rdx, rsi
call fcn.14004d930
lea rcx, [0x140140038]
test al, al
je 0x14004aaa0
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.M82B_LOCATION_ACTIVATED
call fcn.140056f40
movups xmm6, xmmword [0x140140158]
lea rax, [rbp - 0x29]
mov qword [rbp + 0x67], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
xor eax, eax
mov qword [rbp - 0x19], rax
mov qword [rbp - 0x11], rax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400bf0fc
mov rdx, rax
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x19], reloc.WS2_32.dll_socket
mov qword [rbp - 0x11], Ordinal_33
movups xmm0, xmmword [str.M82B_LOCATION_ACTIVATED]
movups xmmword [rax], xmm0
mov ecx, dword [0x1400df680]
mov dword [rax + 0x10], ecx
movzx ecx, word [0x1400df684]
mov word [rax + 0x14], cx
movzx eax, byte [0x1400df686]
mov byte [rdx + 0x16], al
mov byte [rdx + 0x17], 0
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
mov qword [rbp + 7], 3
mov qword [rbp + reloc.WS2_32.dll_ntohs], 0xf
mov eax, dword [0x1400df5c0]
mov word [rbp - 9], ax
movzx eax, byte [0x1400df5c2]
mov byte [rbp - 7], al
mov byte [rbp - 6], 0
movdqa xmmword [rbp - 0x39], xmm6
lea r9, [rbp - 0x39]
lea r8, [rbp - 0x29]
lea rdx, [rbp - 9]
call fcn.140045410
mov edx, 0x258
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
jmp 0x14004ab83
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, str.M82B_LOCATION_NOT_ACTIVATED
call fcn.140056f40
movups xmm6, xmmword [0x140140158]
lea rax, [rbp - 9]
mov qword [rbp + 0x67], rax
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xor eax, eax
mov qword [rbp + 7], rax
mov qword [rbp + 0xf], rax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400bf0fc
mov rdx, rax
mov qword [rbp - 9], rax
mov qword [rbp + 7], reloc.WLDAP32.dll_Ordinal_27
mov qword [rbp + 0xf], Ordinal_33
movups xmm0, xmmword [str.M82B_LOCATION_NOT_ACTIVATED]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400df698]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x1400df6a0]
mov word [rax + 0x18], cx
movzx eax, byte [0x1400df6a2]
mov byte [rdx + 0x1a], al
mov byte [rdx + 0x1b], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], 3
mov qword [rbp - 0x11], reloc.WS2_32.dll_ntohs
mov eax, dword [0x1400df5c0]
mov word [rbp - 0x29], ax
movzx eax, byte [0x1400df5c2]
mov byte [rbp - 0x27], al
mov byte [rbp - 0x26], 0
movdqa xmmword [rbp - 0x39], xmm6
lea r9, [rbp - 0x39]
lea r8, [rbp - 9]
lea rdx, [rbp - 0x29]
call fcn.140045410
jmp 0x14004ab83
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.OPEN_32_BIT_EMULATOR___
lea rcx, [0x140140038]
call fcn.140056f40
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop rbp
ret