Function at 0x14000efa8
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0xf70]
mov eax, 0x1070
call fcn.14003e370
sub rsp, rax
mov rax, qword [0x140051580]
xor rax, rsp
mov qword [rbp + 0xf60], rax
xor ebx, ebx
mov rdi, rcx
cmp dword [0x1400515c8], 3
jne 0x14000f2c2
call fcn.14001bab8
test eax, eax
jne 0x14000f09e
lea rdx, str.Install_denied:_user_is_not_an_admin._r_n
lea ecx, [rbx + 2]
call fcn.140018e9c
mov edx, 0x44a
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
test rax, rax
je 0x14000f038
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
nop dword [rax + rax]
test rdi, rdi
je 0x14000f3ce
mov rcx, qword [0x140051e60]
lea r8, [rsp + 0x60]
mov esi, 0x400
mov edx, 0x9d
mov r9d, esi
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
je 0x14000f97d
lea edx, [rsi - 0x18]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
mov edx, 0x125
jmp 0x14000f383
call fcn.140003ec0
test eax, eax
jne 0x14000f14a
lea rdx, str.Uninstall_denied:_User_does_not_have_enough_diskspace._r_n
lea ecx, [rax + 2]
call fcn.140018e9c
mov edx, 0x44a
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
test rax, rax
je 0x14000f0e4
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
nop dword [rax + rax]
test rdi, rdi
je 0x14000f3ce
mov rcx, qword [0x140051e60]
lea r8, [rsp + 0x60]
mov esi, 0x400
mov edx, 0x99
mov r9d, esi
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
je 0x14000f97d
lea edx, [rsi - 0x18]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
mov edx, 0x14b
jmp 0x14000f383
and qword [rsp + 0x20], rbx
lea rcx, [rsp + 0x20]
xor edx, edx
cmp dword [0x140053790], edx
sete dl
xor r8d, r8d
call fcn.140006890
mov r15, qword [rsp + 0x20]
movsxd r12, eax
test eax, eax
jle 0x14000f2ac
lea rdx, str.UnInstall_denied:_Blocking_dependencies_found._r_n
mov ecx, 2
call fcn.140018e9c
test rdi, rdi
je 0x14000f23d
mov rcx, qword [0x140051e60]
lea r8, [rsp + 0x60]
mov esi, 0x400
mov edx, 0x115
mov r9d, esi
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
je 0x14000f242
lea edx, [rsi - 0x18]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
cmp dword [0x140053790], ebx
lea r8, [rsp + 0x60]
mov rcx, qword [0x140051e60]
mov r9d, esi
mov edx, 0x116
jne 0x14000f205
mov edx, 0xbb
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
jle 0x14000f242
mov edx, 0x3eb
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
mov ebx, 1
mov edx, 0x44a
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov r14, rax
test rax, rax
je 0x14000f28a
test r12d, r12d
jle 0x14000f2ac
xor edi, edi
mov r9, qword [r15 + rdi*8]
xor r8d, r8d
mov edx, 0x180
mov rcx, r14
call qword [sym.imp.USER32.dll_SendMessageW]
nop dword [rax + rax]
inc rdi
cmp rdi, r12
jl 0x14000f265
jmp 0x14000f28f
test r12d, r12d
jle 0x14000f2ac
xor edi, edi
mov rcx, qword [r15 + rdi*8]
test rcx, rcx
je 0x14000f2a4
call fcn.1400012c0
and qword [r15 + rdi*8], 0
inc rdi
cmp rdi, r12
jl 0x14000f291
test r15, r15
je 0x14000f97d
mov rcx, r15
call fcn.1400012c0
jmp 0x14000f97d
lea rax, [0x1400510c0]
cmp rax, qword [str.6ij]
jne 0x14000f3d8
cmp qword [0x140053798], rbx
je 0x14000f97d
call fcn.14001670c
test rax, rax
je 0x14000f97d
call fcn.14001670c
mov rcx, rax
call fcn.14002ace8
test eax, eax
jne 0x14000f97d
call fcn.14001bab8
test eax, eax
jne 0x14000f97d
lea rdx, str.Service_Install_denied:_user_is_not_an_admin._r_n
lea ecx, [rax + 2]
call fcn.140018e9c
test rdi, rdi
je 0x14000f3ce
mov rcx, qword [0x140051e60]
lea r8, [rsp + 0x60]
mov esi, 0x400
mov edx, 0x9d
mov r9d, esi
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
je 0x14000f97d
lea edx, [rsi - 0x18]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
mov edx, 0x159
mov rcx, qword [0x140051e60]
lea r8, [rsp + 0x60]
mov r9d, esi
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
je 0x14000f97d
mov edx, 0x3eb
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
mov ebx, 1
jmp 0x14000f97d
lea rcx, [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
nop dword [rax + rax]
mov eax, 6
mov esi, 0x400
lea r14d, [rax - 4]
cmp ax, word [rsp + 0x28]
jne 0x14000f47a
lea rdx, str.Install_denied:_the_OS_Arch_does_not_match._r_n
mov ecx, r14d
call fcn.140018e9c
call fcn.140029380
neg eax
sbb r15d, r15d
neg r15d
test rdi, rdi
je 0x14000f537
mov rcx, qword [0x140051e60]
lea r8, [rsp + 0x60]
mov r9d, esi
mov edx, 0x138
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
je 0x14000f53c
lea edx, [rsi - 0x18]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
lea edx, [r15 + 0x139]
jmp 0x14000f4f0
call fcn.140008584
test eax, eax
je 0x14000f53c
lea rdx, str.Install_denied:_Loc_version_already_installed._r_n
mov ecx, r14d
call fcn.140018e9c
test rdi, rdi
je 0x14000f537
mov rcx, qword [0x140051e60]
lea r8, [rsp + 0x60]
mov r9d, esi
mov edx, 0x14e
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
je 0x14000f53c
mov edx, 0x3e8
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
mov edx, 0x14f
mov rcx, qword [0x140051e60]
lea r8, [rsp + 0x60]
mov r9d, esi
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
je 0x14000f53c
mov edx, 0x3eb
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
mov ebx, 1
call fcn.140008148
test eax, eax
jne 0x14000f5e5
lea rdx, str.Install_denied:_OS_version_is_greater_than_package_version._r_n
mov ecx, r14d
call fcn.140018e9c
test rdi, rdi
je 0x14000f97b
mov rcx, qword [0x140051e60]
lea r8, [rsp + 0x60]
mov r9d, esi
mov edx, 0x9b
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
je 0x14000f97d
lea edx, [rbx + 0x3e8]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
mov edx, esi
lea rcx, [rsp + 0x60]
call fcn.140006078
test eax, eax
je 0x14000f97d
lea edx, [rbx + 0x3eb]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
lea rdx, [rsp + 0x60]
jmp 0x14000f96c
call fcn.1400109c4
test eax, eax
jne 0x14000f6b1
lea rdx, str.Install_denied:_a_newer_version_is_already_on_the_system._r_n
mov ecx, r14d
call fcn.140018e9c
test rdi, rdi
je 0x14000f97b
mov rcx, qword [0x140051e60]
lea r8, [rsp + 0x60]
mov r9d, esi
mov edx, 0x9b
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
je 0x14000f97d
lea edx, [rbx + 0x3e8]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
mov edx, esi
lea rcx, [rsp + 0x60]
call fcn.140006078
test eax, eax
je 0x14000f97d
lea edx, [rbx + 0x3eb]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
lea r8, [rsp + 0x60]
mov ecx, r14d
lea rdx, str._S._r_n
call fcn.140018ed8
jmp 0x14000f97b
call fcn.14001b9c8
test eax, eax
je 0x14000f74c
lea rdx, str.Install_denied:_this_is_a_MUI_system_for_which_a_localized_package_should_not_be_used._r_n
mov ecx, r14d
call fcn.140018e9c
test rdi, rdi
je 0x14000f97b
mov rcx, qword [0x140051e60]
lea r8, [rsp + 0x60]
mov r9d, esi
mov edx, 0x9f
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
je 0x14000f97d
lea edx, [rbx + 0x3e8]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
mov edx, 0xa0
mov rcx, qword [0x140051e60]
lea r8, [rsp + 0x60]
mov r9d, esi
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
jmp 0x14000f5be
call fcn.140007f68
test eax, eax
je 0x14000f7c8
lea rdx, str.Another_Update.exe_package_is_running_on_the_box.__r_n
mov ecx, r14d
call fcn.140018e9c
test rdi, rdi
je 0x14000f97b
mov rcx, qword [0x140051e60]
lea r8, [rsp + 0x60]
mov r9d, esi
mov edx, 0x143
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
je 0x14000f97d
lea edx, [rbx + 0x3e8]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
mov edx, 0x142
jmp 0x14000f72c
call fcn.14001bab8
test eax, eax
jne 0x14000f889
lea rdx, str.Install_denied:_user_is_not_an_admin._r_n
mov ecx, r14d
call fcn.140018e9c
test rdi, rdi
je 0x14000f887
mov rcx, qword [0x140051e60]
lea r8, [rsp + 0x60]
mov r9d, esi
mov edx, 0x9d
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
je 0x14000f889
lea edx, [rbx + 0x3e8]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
mov rcx, qword [0x140051e60]
lea r8, [rsp + 0x60]
mov r9d, esi
mov edx, 0x9e
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
je 0x14000f889
lea edx, [rbx + 0x3eb]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
inc ebx
movsd xmm0, qword [0x140051e20]
comisd xmm0, xmmword [0x14004b3e8]
jbe 0x14000f97d
lea rdx, str.Install_denied:_user_does_not_have_sufficient_disk_space._r_n
mov ecx, r14d
call fcn.140018e9c
test rdi, rdi
je 0x14000f97b
mov rcx, qword [0x140051e60]
lea r8, [rsp + 0x60]
mov r9d, esi
mov edx, 0x99
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
je 0x14000f97d
lea edx, [rbx + 0x3e8]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
mov rcx, qword [0x140051e60]
lea r8, [rsp + 0x60]
mov r9d, esi
mov edx, 0x9a
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
je 0x14000f97d
cvttsd2si r9, qword [0x140051e20]
lea r8, [rsp + 0x60]
mov rdx, rsi
lea rcx, [rbp + 0x760]
inc r9d
call fcn.1400104f4
test eax, eax
js 0x14000f97d
lea edx, [rbx + 0x3eb]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
lea rdx, [rbp + 0x760]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
inc ebx
mov eax, ebx
mov rcx, qword [rbp + 0xf60]
xor rcx, rsp
call fcn.140001660
lea r11, [rsp + 0x1070]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret