Function at 0x140022240
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
sub rsp, 0x98
lea rbp, [0x1400f3ff0]
mov qword [rsp + 0xc8], rbp
lea rax, vtable.CVolAppInstance.0
mov qword [0x1400f3ff0], rax
lea rax, vtable.CPoolMem.0
mov qword [0x1400f3ff8], rax
mov qword [0x1400f4020], 1
mov qword [0x1400f4018], 0x100
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
xor edx, edx
mov r8d, 0x800000
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rcx, rax
test rax, rax
je 0x140022530
mov qword [0x1400f4010], rax
mov qword [0x1400f4000], rax
add rax, 0x800000
mov qword [0x1400f4008], rax
mov edx, 0x7fff
mov rax, qword [0x1400f4018]
nop dword [rax + rax]
add rax, rcx
mov qword [rcx], rax
mov rax, qword [0x1400f4018]
add rcx, rax
sub rdx, 1
jne 0x1400222e0
xor esi, esi
mov qword [rcx], rsi
lea rax, [0x1400f4028]
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], rax
lea rdi, vtable.CVolObject.0
mov qword [0x1400f4028], rdi
mov qword [0x1400f4030], rsi
mov qword [0x1400f4038], rsi
lea rbx, vtable.CVolMem.0
mov qword [0x1400f4028], rbx
mov qword [0x1400f4040], rsi
mov qword [0x1400f4050], rsi
mov qword [0x1400f4048], rsi
mov qword [0x1400f4058], 0x40
mov qword [0x1400f4058], 0x100
mov qword [0x1400f4060], rsi
lea rcx, [0x1400f4080]
mov qword [rsp + 0x20], rcx
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
mov qword [0x1400f40a8], rsi
lea rcx, [0x1400f40c0]
mov qword [rsp + 0x28], rcx
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
mov qword [0x1400f40e8], 0x3e8
lea rax, [0x1400f4110]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
mov qword [0x1400f4110], rdi
mov qword [0x1400f4118], rsi
mov qword [0x1400f4120], rsi
mov qword [0x1400f4110], rbx
mov qword [0x1400f4128], rsi
mov qword [0x1400f4138], rsi
mov qword [0x1400f4130], rsi
mov qword [0x1400f4140], 0x40
mov qword [0x1400f4140], 0x100
lea rcx, [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsp + 0x78]
lea rax, [rax*2 + 2]
mov qword [0x1400f40f0], rax
mov qword [0x1400f40f8], 0x3e80
mov qword [0x1400f4100], 1
mov qword [0x1400f4108], rsi
lea rcx, [0x1400f4148]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
lea rax, [0x1400f4170]
mov qword [rsp + 0x40], rax
mov qword [0x1400f4170], rdi
mov qword [0x1400f4178], rsi
mov qword [0x1400f4180], rsi
lea rax, vtable.CVolObjectArray.0
mov qword [0x1400f4170], rax
lea rax, [0x1400f4188]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rax
mov qword [0x1400f4188], rdi
mov qword [0x1400f4190], rsi
mov qword [0x1400f4198], rsi
mov qword [0x1400f4188], rbx
mov qword [0x1400f41a0], rsi
mov qword [0x1400f41b0], rsi
mov qword [0x1400f41a8], rsi
mov qword [0x1400f41b8], 0x40
mov qword [0x1400f41b8], 0x100
mov qword [0x1400f41b8], 0x100
mov qword [0x1400f4068], rsi
xorps xmm0, xmm0
movdqa xmmword [0x1400f41c0], xmm0
mov qword [0x1400f41d0], rsi
mov dword [0x1400f41d8], esi
mov qword [0x1400f4070], rsi
movsd xmm0, qword [0x1400dad80]
movsd qword [0x1400f4078], xmm0
xorps xmm1, xmm1
movups xmmword [0x1400f40b0], xmm1
mov rax, rbp
add rsp, 0x98
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov ecx, 0xffffffff
call fcn.140095d64
int3