Function at 0x140073110
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x60
mov rbx, rcx
xor edi, edi
mov dword [rsp + 0x20], edi
mov qword [rcx], rdi
mov qword [rcx + 0x18], 0xf
mov byte [rcx], dil
mov qword [rcx + 0x10], 7
lea r8d, [rdi + 7]
lea rdx, str.Unknown
call fcn.140182d00
mov byte [rbx + 7], dil
mov dword [rsp + 0x20], 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.GetNativeSystemInfo
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rsp + 0x28]
test rax, rax
je 0x14007319c
call rax
jmp 0x1400731a2
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx ecx, word [rsp + 0x28]
test ecx, ecx
je 0x140073609
sub ecx, 5
je 0x140073506
sub ecx, 1
je 0x140073405
sub ecx, 3
je 0x140073302
cmp ecx, 3
jne 0x14007373c
mov rcx, qword [rbx + 0x18]
cmp rcx, 5
jb 0x14007320f
mov rdi, rbx
cmp rcx, 0x10
jb 0x1400731e9
mov rdi, qword [rbx]
mov qword [rbx + 0x10], 5
mov r8d, 5
lea rdx, str.ARM64
mov rcx, rdi
call fcn.140182d00
mov byte [rdi + 5], 0
jmp 0x14007373c
mov rdx, rcx
shr rdx, 1
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
sub rax, rdx
cmp rcx, rax
jbe 0x140073236
movabs rcx, 0x8000000000000027
jmp 0x14007325f
lea rax, [rcx + rdx]
mov esi, 0xf
cmp rax, rsi
cmova rsi, rax
lea rax, [rsi + 1]
cmp rax, 0x1000
jb 0x1400732a0
lea rcx, [rax + 0x27]
cmp rcx, rax
jbe 0x140073752
call fcn.140181690
test rax, rax
je 0x1400736d4
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov qword [rbx + 0x10], 5
mov qword [rbx + 0x18], rsi
mov eax, dword [str.ARM64]
mov dword [rdi], eax
movzx eax, byte [0x140200fac]
mov byte [rdi + 4], al
mov byte [rdi + 5], 0
jmp 0x140073739
test rax, rax
je 0x1400732d7
mov rcx, rax
call fcn.140181690
mov rdi, rax
mov qword [rbx + 0x10], 5
mov qword [rbx + 0x18], rsi
mov eax, dword [str.ARM64]
mov dword [rdi], eax
movzx eax, byte [0x140200fac]
mov byte [rdi + 4], al
mov byte [rdi + 5], 0
jmp 0x140073739
mov qword [rbx + 0x10], 5
mov qword [rbx + 0x18], rsi
mov eax, dword [str.ARM64]
mov dword [rdi], eax
movzx eax, byte [0x140200fac]
mov byte [rdi + 4], al
mov byte [5], 0
jmp 0x140073739
mov rcx, qword [rbx + 0x18]
cmp rcx, 3
jb 0x14007333e
mov rdi, rbx
cmp rcx, 0x10
jb 0x140073318
mov rdi, qword [rbx]
mov qword [rbx + 0x10], 3
mov r8d, 3
lea rdx, [0x140200f28]
mov rcx, rdi
call fcn.140182d00
mov byte [rdi + 3], 0
jmp 0x14007373c
mov rdx, rcx
shr rdx, 1
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
sub rax, rdx
cmp rcx, rax
jbe 0x140073365
movabs rcx, 0x8000000000000027
jmp 0x14007338e
lea rax, [rdx + rcx]
mov esi, 0xf
cmp rax, rsi
cmova rsi, rax
lea rax, [rsi + 1]
cmp rax, 0x1000
jb 0x1400733d1
lea rcx, [rax + 0x27]
cmp rcx, rax
jbe 0x140073752
call fcn.140181690
test rax, rax
je 0x1400736d4
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov qword [rbx + 0x10], 3
mov qword [rbx + 0x18], rsi
movzx eax, word [0x140200f28]
mov word [rdi], ax
movzx eax, byte [0x140200f2a]
mov byte [rdi + 2], al
mov byte [rdi + 3], 0
jmp 0x140073739
test rax, rax
je 0x1400733e3
mov rcx, rax
call fcn.140181690
mov rdi, rax
jmp 0x1400733a8
mov qword [rbx + 0x10], 3
mov qword [rbx + 0x18], rsi
movzx eax, word [0x140200f28]
mov word [rdi], ax
movzx eax, byte [0x140200f2a]
jmp 0x14007372e
mov rcx, qword [rbx + 0x18]
cmp rcx, 4
jb 0x140073432
mov rax, rbx
cmp rcx, 0x10
jb 0x14007341b
mov rax, qword [rbx]
mov qword [rbx + 0x10], 4
mov dword [rax], 0x34364149
mov byte [rax + 4], 0
jmp 0x14007373c
mov rdx, rcx
shr rdx, 1
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
sub rax, rdx
cmp rcx, rax
jbe 0x140073459
movabs rcx, 0x8000000000000027
jmp 0x140073482
lea rax, [rcx + rdx]
mov esi, 0xf
cmp rax, rsi
cmova rsi, rax
lea rax, [rsi + 1]
cmp rax, 0x1000
jb 0x1400734b7
lea rcx, [rax + 0x27]
cmp rcx, rax
jbe 0x140073752
call fcn.140181690
test rax, rax
je 0x1400736d4
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov qword [rbx + 0x10], 4
mov qword [rbx + 0x18], rsi
mov dword [rdi], 0x34364149
mov byte [rdi + 4], 0
jmp 0x140073739
test rax, rax
je 0x1400734e2
mov rcx, rax
call fcn.140181690
mov rdi, rax
mov qword [rbx + 0x10], 4
mov qword [rbx + 0x18], rsi
mov dword [rax], 0x34364149
mov byte [rax + 4], 0
jmp 0x140073739
mov qword [rbx + 0x10], 4
mov qword [rbx + 0x18], rsi
mov dword [0], 0x34364149
mov byte [4], 0
jmp 0x140073739
mov rcx, qword [rbx + 0x18]
cmp rcx, 3
jb 0x140073542
mov rdi, rbx
cmp rcx, 0x10
jb 0x14007351c
mov rdi, qword [rbx]
mov qword [rbx + 0x10], 3
mov r8d, 3
lea rdx, [0x140200fa4]
mov rcx, rdi
call fcn.140182d00
mov byte [rdi + 3], 0
jmp 0x14007373c
mov rdx, rcx
shr rdx, 1
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
sub rax, rdx
cmp rcx, rax
jbe 0x140073569
movabs rcx, 0x8000000000000027
jmp 0x140073592
lea rax, [rdx + rcx]
mov esi, 0xf
cmp rax, rsi
cmova rsi, rax
lea rax, [rsi + 1]
cmp rax, 0x1000
jb 0x1400735d5
lea rcx, [rax + 0x27]
cmp rcx, rax
jbe 0x140073752
call fcn.140181690
test rax, rax
je 0x1400736d4
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov qword [rbx + 0x10], 3
mov qword [rbx + 0x18], rsi
movzx eax, word [0x140200fa4]
mov word [rdi], ax
movzx eax, byte [0x140200fa6]
mov byte [rdi + 2], al
mov byte [rdi + 3], 0
jmp 0x140073739
test rax, rax
je 0x1400735e7
mov rcx, rax
call fcn.140181690
mov rdi, rax
jmp 0x1400735ac
mov qword [rbx + 0x10], 3
mov qword [rbx + 0x18], rsi
movzx eax, word [0x140200fa4]
mov word [rdi], ax
movzx eax, byte [0x140200fa6]
jmp 0x14007372e
mov rcx, qword [rbx + 0x18]
cmp rcx, 3
jb 0x140073645
mov rdi, rbx
cmp rcx, 0x10
jb 0x14007361f
mov rdi, qword [rbx]
mov qword [rbx + 0x10], 3
mov r8d, 3
lea rdx, [0x140200fa0]
mov rcx, rdi
call fcn.140182d00
mov byte [rdi + 3], 0
jmp 0x14007373c
mov rdx, rcx
shr rdx, 1
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
sub rax, rdx
cmp rcx, rax
jbe 0x1400736a9
movabs rcx, 0x8000000000000027
call fcn.140181690
test rax, rax
je 0x1400736d4
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov qword [rbx + 0x10], 3
mov qword [rbx + 0x18], rsi
movzx eax, word [0x140200fa0]
mov word [rdi], ax
movzx eax, byte [0x140200fa2]
mov byte [rdi + 2], al
mov byte [rdi + 3], 0
jmp 0x140073739
lea rax, [rcx + rdx]
mov esi, 0xf
cmp rax, rsi
cmova rsi, rax
lea rax, [rsi + 1]
cmp rax, 0x1000
jb 0x1400736db
lea rcx, [rax + 0x27]
cmp rcx, rax
jbe 0x140073752
jmp 0x14007366a
call qword [0x1401cdd00]
int3
test rax, rax
je 0x140073711
mov rcx, rax
call fcn.140181690
mov rdi, rax
mov qword [rbx + 0x10], 3
mov qword [rbx + 0x18], rsi
movzx ecx, word [0x140200fa0]
mov word [rax], cx
movzx ecx, byte [0x140200fa2]
mov byte [rax + 2], cl
mov byte [rax + 3], 0
jmp 0x140073739
mov qword [rbx + 0x10], 3
mov qword [rbx + 0x18], rsi
movzx eax, word [0x140200fa0]
mov word [rdi], ax
movzx eax, byte [0x140200fa2]
mov byte [rdi + 2], al
mov byte [3], 0
mov qword [rbx], rdi
mov rax, rbx
mov rbx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x80]
add rsp, 0x60
pop rdi
ret
call fcn.1400201f0
int3