Function at 0x14005d090
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb0]
sub rsp, 0x1b0
lea rcx, [rbp + 0x80]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov rdi, qword [rbp + 0x88]
mov rbx, qword [rbp + 0x90]
mov dword [rsp + 0x70], 0xbd3952dc
mov dword [rsp + 0x74], 0x3c8bc127
mov dword [rsp + 0x78], 0xb9f8d0c0
lea rsi, [rsp + 0x70]
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x68], xmm0
mov ecx, ntohs
call fcn.1400d1aa0
mov r14, rax
mov qword [rbp + 0x68], rax
lea r15, [rax + 0xc]
mov qword [rbp + 0x78], r15
mov r8d, ntohs
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp + 0x70], r15
mov dword [rbp - 0x80], 0x3e000000
mov dword [rbp - 0x7c], 0x3d23d70a
mov dword [rbp - 0x78], 0xbcf9a5d2
lea r12, [rbp - 0x80]
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x50], xmm0
mov ecx, ntohs
call fcn.1400d1aa0
mov r13, rax
mov qword [rbp + 0x50], rax
lea rsi, [rax + 0xc]
mov qword [rbp + 0x60], rsi
mov r8d, ntohs
mov rdx, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp + 0x58], rsi
mov dword [rsp + 0x70], 0xbdb07163
mov dword [rsp + 0x74], 0xbb749890
mov dword [rsp + 0x78], 0xb3800000
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x38], xmm0
mov qword [rbp + 0x48], 0
mov ecx, ntohs
call fcn.1400d1aa0
mov r12, rax
mov qword [rbp + 0x38], rax
lea rsi, [rax + 0xc]
mov qword [rbp + 0x48], rsi
mov r8d, ntohs
lea rdx, [rsp + 0x70]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp + 0x40], rsi
mov dword [rbp - 0x80], 0x4479dccd
mov dword [rbp - 0x7c], 0xbb749890
mov dword [rbp - 0x78], 0xb3800000
xorps xmm0, xmm0
movdqu xmmword [rbp + 8], xmm0
mov qword [rbp + 0x18], 0
mov ecx, ntohs
call fcn.1400d1aa0
mov qword [rbp + 8], rax
lea rsi, [rax + 0xc]
mov qword [rbp + 0x18], rsi
mov r8d, ntohs
lea rdx, [rbp - 0x80]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp + 0x10], rsi
mov dword [rsp + 0x70], 0xbd870271
mov dword [rsp + 0x74], 0xbad7fd90
mov dword [rsp + 0x78], 0x39981840
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x10], xmm0
mov qword [rbp], 0
mov ecx, ntohs
call fcn.1400d1aa0
mov qword [rbp - 0x10], rax
lea rsi, [rax + 0xc]
mov qword [rbp], rsi
mov r8d, ntohs
lea rdx, [rsp + 0x70]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 8], rsi
mov dword [rbp - 0x80], 0x4479dccd
mov dword [rbp - 0x7c], 0xbad7fd90
mov dword [rbp - 0x78], 0x39981840
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], 0
mov ecx, ntohs
call fcn.1400d1aa0
mov qword [rbp - 0x28], rax
lea rsi, [rax + 0xc]
mov qword [rbp - 0x18], rsi
mov r8d, ntohs
lea rdx, [rbp - 0x80]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 0x20], rsi
mov dword [rsp + 0x70], 0xbd871b54
mov dword [rsp + 0x74], 0xbad7c690
mov dword [rsp + 0x78], 0xb9995480
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], 0
mov ecx, ntohs
call fcn.1400d1aa0
mov qword [rbp - 0x40], rax
lea rsi, [rax + 0xc]
mov qword [rbp - 0x30], rsi
mov r8d, ntohs
lea rdx, [rsp + 0x70]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 0x38], rsi
mov dword [rbp - 0x80], 0x4479dccd
mov dword [rbp - 0x7c], 0xbad7c690
mov dword [rbp - 0x78], 0xb9995480
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], 0
mov ecx, ntohs
call fcn.1400d1aa0
mov qword [rbp - 0x58], rax
lea rsi, [rax + 0xc]
mov qword [rbp - 0x48], rsi
mov r8d, ntohs
lea rdx, [rbp - 0x80]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 0x50], rsi
mov dword [rsp + 0x70], 0xbd6cf97b
mov dword [rsp + 0x74], 0xbb093458
mov dword [rsp + 0x78], 0xbabe60b0
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], 0
mov ecx, ntohs
call fcn.1400d1aa0
mov qword [rbp - 0x70], rax
lea rsi, [rax + 0xc]
mov qword [rbp - 0x60], rsi
mov r8d, ntohs
lea rdx, [rsp + 0x70]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 0x68], rsi
mov dword [rbp - 0x80], 0x4479dccd
mov dword [rbp - 0x7c], 0xbb093458
mov dword [rbp - 0x78], 0xbabe60b0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], 0
mov ecx, ntohs
call fcn.1400d1aa0
mov rsi, rax
mov qword [rbp + 0x20], rax
add rax, 0xc
mov qword [rbp + 0x30], rax
mov r8d, ntohs
lea rdx, [rbp - 0x80]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memmove
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x28], rax
mov qword [rsp + 0x60], rsi
mov rax, qword [rbp - 0x70]
mov qword [rsp + 0x58], rax
mov rax, qword [rbp - 0x58]
mov qword [rsp + 0x50], rax
mov rax, qword [rbp - 0x40]
mov qword [rsp + 0x48], rax
mov rax, qword [rbp - 0x28]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp - 0x10]
mov qword [rsp + 0x38], rax
mov rax, qword [rbp + 8]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r13
mov r9, r14
mov r8, rbx
mov rdx, rdi
call fcn.140059060
movzx ebx, al
test rsi, rsi
je 0x14005d4a5
mov rcx, qword [rbp + 0x30]
sub rcx, rsi
cmp rcx, 0x1000
jb 0x14005d499
add rcx, 0x27
mov rdx, qword [rsi - 8]
sub rsi, rdx
lea rax, [rsi - 8]
cmp rax, 0x1f
ja 0x14005d4dd
mov rsi, rdx
mov rdx, rcx
mov rcx, rsi
call fcn.1400d1e00
nop
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x14005d4ea
mov rdx, qword [rbp - 0x60]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005d4e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005d4e4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400d1e00
nop
mov rcx, qword [rbp - 0x58]
test rcx, rcx
je 0x14005d528
mov rdx, qword [rbp - 0x48]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005d522
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005d522
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d1e00
nop
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x14005d566
mov rdx, qword [rbp - 0x30]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005d560
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005d560
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d1e00
nop
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x14005d5a4
mov rdx, qword [rbp - 0x18]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005d59e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005d59e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d1e00
nop
mov rcx, qword [rbp - 0x10]
test rcx, rcx
je 0x14005d5e2
mov rdx, qword [rbp]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005d5dc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005d5dc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d1e00
nop
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x14005d620
mov rdx, qword [rbp + 0x18]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005d61a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005d61a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d1e00
nop
test r12, r12
je 0x14005d661
mov rcx, qword [rbp + 0x48]
sub rcx, r12
mov rax, r12
cmp rcx, 0x1000
jb 0x14005d655
add rcx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005d655
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, rcx
mov rcx, r12
call fcn.1400d1e00
nop
test r13, r13
je 0x14005d6a1
mov rcx, qword [rbp + 0x60]
sub rcx, r13
mov rax, r13
cmp rcx, 0x1000
jb 0x14005d695
add rcx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005d695
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, rcx
mov rcx, r13
call fcn.1400d1e00
nop
test r14, r14
je 0x14005d6dc
sub r15, r14
mov rax, r14
cmp r15, 0x1000
jb 0x14005d6d1
add r15, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005d6d1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, r15
mov rcx, r14
call fcn.1400d1e00
movzx eax, bl
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret