Function at 0x1400045f2
Capabilities:
Get system information on windows
Inspect section memory permissions

Disassembly:
jmp 0x14000e290
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x1400e6298]
xor rax, rsp
mov qword [rbp - 0x10], rax
xor r14d, r14d
mov rsi, rcx
mov qword [rcx + 8], r14
mov byte [rcx + 0x10], r14b
mov qword [rcx + 0x18], r14
mov qword [rcx + 0x20], r14
mov qword [rcx + 0x28], r14
lea rcx, [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rbp - 0x30]
xor ecx, ecx
mov dword [rsi + 8], eax
xor eax, eax
cpuid
mov dword [rbp - 0x20], eax
mov dword [rsi + 0x3c], r14d
mov dword [rsi + 0x34], edx
lea rdx, str.GenuineIntel
mov dword [rsi + 0x38], ecx
lea rcx, [rsi + 0x30]
mov dword [rsi + 0x30], ebx
call fcn.14000523b
test eax, eax
jne 0x14000e310
mov byte [rsi + 0xc], 1
jmp 0x14000e328
lea rdx, str.AuthenticAMD
lea rcx, [rsi + 0x30]
call fcn.14000523b
test eax, eax
jne 0x14000e328
mov byte [rsi + 0xd], 1
xor eax, eax
xor ecx, ecx
cpuid
mov dword [rbp - 0x1c], ebx
mov r8d, eax
mov dword [rbp - 0x18], ecx
mov dword [rbp - 0x14], edx
cmp eax, 1
jl 0x14000e4dc
xor ecx, ecx
mov eax, 1
cpuid
mov dword [rbp - 0x20], eax
mov dword [rbp - 0x1c], ebx
mov dword [rbp - 0x18], ecx
test cl, 1
je 0x14000e35e
or qword [rsi], 0x40
mov eax, ecx
shr eax, 1
test al, 1
je 0x14000e373
movabs rax, 0x2000000000000
or qword [rsi], rax
mov eax, ecx
shr eax, 3
test al, 1
je 0x14000e383
or qword [rsi], 0x80000
mov eax, ecx
shr eax, 9
test al, 1
je 0x14000e393
or qword [rsi], 0x100000
mov eax, ecx
shr eax, 0xc
test al, 1
je 0x14000e3a3
or qword [rsi], 0x200000
mov eax, ecx
shr eax, 0xd
test al, 1
je 0x14000e3b9
movabs rax, 0x4000000000000
or qword [rsi], rax
mov eax, ecx
shr eax, 0x13
test al, 1
je 0x14000e3c9
or qword [rsi], 0x80
mov eax, ecx
shr eax, 0x14
test al, 1
je 0x14000e3d9
or qword [rsi], 0x100
mov eax, ecx
shr eax, 0x16
test al, 1
je 0x14000e3e9
or qword [rsi], 0x20000000
mov eax, ecx
shr eax, 0x17
test al, 1
je 0x14000e3f9
or qword [rsi], 0x8000
mov eax, ecx
shr eax, 0x19
test al, 1
je 0x14000e409
or qword [rsi], 0x400000
mov eax, ecx
shr eax, 0x1a
test al, 1
je 0x14000e419
or qword [rsi], 0x20000
mov eax, ecx
shr eax, 0x1b
test al, 1
je 0x14000e429
or qword [rsi], 0x40000
mov eax, ecx
shr eax, 0x1c
test al, 1
je 0x14000e436
or qword [rsi], 4
mov eax, ecx
shr eax, 0x1d
test al, 1
je 0x14000e446
or qword [rsi], 0x400
shr ecx, 0x1e
test cl, 1
je 0x14000e455
or qword [rsi], 0x1000000
mov eax, edx
shr eax, 5
test al, 1
je 0x14000e465
or qword [rsi], 0x2000000
mov eax, edx
shr eax, 8
test al, 1
je 0x14000e475
or qword [rsi], 0x4000000
mov eax, edx
shr eax, 0xb
test al, 1
je 0x14000e485
or qword [rsi], 0x8000000
mov eax, edx
shr eax, 0xf
test al, 1
je 0x14000e495
or qword [rsi], 0x10000000
mov eax, edx
shr eax, 0x13
test al, 1
je 0x14000e4a5
or qword [rsi], 0x40000000
mov eax, edx
shr eax, 0x17
test al, 1
je 0x14000e4b2
or qword [rsi], 1
mov eax, edx
shr eax, 0x18
test al, 1
je 0x14000e4c3
mov eax, 0x80000000
or qword [rsi], rax
mov eax, edx
shr eax, 0x19
test al, 1
je 0x14000e4d0
or qword [rsi], 0x10
shr edx, 0x1a
test dl, 1
je 0x14000e4dc
or qword [rsi], 0x20
cmp r8d, 7
jl 0x14000e63e
xor ecx, ecx
mov eax, 7
cpuid
mov dword [rbp - 0x20], eax
mov dword [rbp - 0x1c], ebx
mov dword [rbp - 0x18], ecx
mov dword [rbp - 0x14], edx
test bl, 1
je 0x14000e50d
movabs rax, 0x100000000
or qword [rsi], rax
mov eax, ebx
shr eax, 3
test al, 1
je 0x14000e51d
or qword [rsi], 0x800
mov eax, ebx
shr eax, 5
test al, 1
je 0x14000e52a
or qword [rsi], 8
mov eax, ebx
shr eax, 8
test al, 1
je 0x14000e53a
or qword [rsi], 0x1000
mov eax, ebx
shr eax, 9
test al, 1
je 0x14000e550
movabs rax, 0x800000000
or qword [rsi], rax
mov eax, ebx
shr eax, 0xa
test al, 1
je 0x14000e566
movabs rax, 0x1000000000
or qword [rsi], rax
mov eax, ebx
shr eax, 0x10
test al, 1
je 0x14000e57c
movabs rax, 0x2000000000
or qword [rsi], rax
mov eax, ebx
shr eax, 0x12
test al, 1
je 0x14000e58c
or qword [rsi], 0x800000
mov eax, ebx
shr eax, 0x13
test al, 1
je 0x14000e5a2
movabs rax, 0x20000000000
or qword [rsi], rax
mov eax, ebx
shr eax, 0x1a
test al, 1
je 0x14000e5b8
movabs rax, 0x4000000000
or qword [rsi], rax
mov eax, ebx
shr eax, 0x1b
test al, 1
je 0x14000e5ce
movabs rax, 0x8000000000
or qword [rsi], rax
mov eax, ebx
shr eax, 0x1c
test al, 1
je 0x14000e5e4
movabs rax, 0x10000000000
or qword [rsi], rax
mov eax, ebx
shr eax, 0x1d
test al, 1
je 0x14000e5fa
movabs rax, 0x40000000000
or qword [rsi], rax
cmp byte [rsi + 0xc], r14b
je 0x14000e62b
mov eax, ebx
shr eax, 4
test al, 1
je 0x14000e616
movabs rax, 0x200000000
or qword [rsi], rax
shr ebx, 0xb
test bl, 1
je 0x14000e62b
movabs rax, 0x400000000
or qword [rsi], rax
test byte [rbp - 0x18], 1
je 0x14000e63e
movabs rax, 0x8000000000000
or qword [rsi], rax
cmp r8d, 0x16
jl 0x14000e682
xor ecx, ecx
mov eax, 0x16
cpuid
cdqe
imul r8, rax, 0xf4240
movsxd rax, ebx
mov dword [rbp - 0x14], edx
imul rdx, rax, 0xf4240
movsxd rax, ecx
imul rcx, rax, 0xf4240
test r8, r8
mov qword [rsi + 0x18], r8
mov qword [rsi + 0x28], rcx
setne al
mov qword [rsi + 0x20], rdx
mov byte [rsi + 0xe], al
xor ecx, ecx
mov eax, 0x80000000
cpuid
mov dword [rbp - 0x1c], ebx
mov r9d, eax
mov dword [rbp - 0x18], ecx
mov dword [rbp - 0x14], edx
cmp eax, 0x80000001
jb 0x14000e795
xor ecx, ecx
mov eax, 0x80000001
cpuid
mov dword [rbp - 0x20], eax
mov dword [rbp - 0x1c], ebx
mov dword [rbp - 0x18], ecx
test cl, 1
je 0x14000e6c6
movabs rax, 0x80000000000
or qword [rsi], rax
cmp byte [rsi + 0xc], r14b
je 0x14000e709
shr ecx, 5
test cl, 1
je 0x14000e6db
or qword [rsi], 0x4000
mov eax, edx
shr eax, 0xb
test al, 1
je 0x14000e6f1
movabs rax, 0x1000000000000
or qword [rsi], rax
shr edx, 0x1b
test dl, 1
je 0x14000e795
or qword [rsi], 0x10000
jmp 0x14000e795
cmp byte [rsi + 0xd], r14b
je 0x14000e795
mov eax, ecx
shr eax, 5
test al, 1
je 0x14000e723
or qword [rsi], 0x2000
mov eax, ecx
shr eax, 6
test al, 1
je 0x14000e733
or qword [rsi], 0x200
mov eax, ecx
shr eax, 0xb
test al, 1
je 0x14000e749
movabs rax, 0x100000000000
or qword [rsi], rax
shr ecx, 0x15
test cl, 1
je 0x14000e75e
movabs rax, 0x200000000000
or qword [rsi], rax
mov eax, edx
shr eax, 0x16
test al, 1
je 0x14000e76b
or qword [rsi], 2
mov eax, edx
shr eax, 0x1e
test al, 1
je 0x14000e781
movabs rax, 0x800000000000
or qword [rsi], rax
shr edx, 0x1f
test dl, dl
je 0x14000e795
movabs rax, 0x400000000000
or qword [rsi], rax
vpxor xmm0, xmm0, xmm0
vmovups ymmword [rsi + 0x40], ymm0
vmovups xmmword [rsi + 0x60], xmm0
cmp r9d, 0x80000004
jb 0x14000e809
xor ecx, ecx
mov eax, 0x80000002
cpuid
mov dword [rbp - 0x20], eax
mov eax, 0x80000003
mov dword [rbp - 0x18], ecx
xor ecx, ecx
mov dword [rbp - 0x1c], ebx
mov dword [rbp - 0x14], edx
vmovups xmm0, xmmword [rbp - 0x20]
cpuid
mov dword [rbp - 0x20], eax
mov eax, 0x80000004
mov dword [rbp - 0x18], ecx
xor ecx, ecx
vmovups xmmword [rsi + 0x40], xmm0
mov dword [rbp - 0x1c], ebx
mov dword [rbp - 0x14], edx
vmovups xmm0, xmmword [rbp - 0x20]
cpuid
vmovups xmmword [rsi + 0x50], xmm0
mov dword [rbp - 0x20], eax
mov dword [rbp - 0x1c], ebx
mov dword [rbp - 0x18], ecx
mov dword [rbp - 0x14], edx
vmovups xmm0, xmmword [rbp - 0x20]
vmovups xmmword [rsi + 0x60], xmm0
vpxor xmm0, xmm0, xmm0
vmovups ymmword [rsi + 0x70], ymm0
vmovups xmmword [rsi + 0x90], xmm0
cmp byte [rsi + 0xc], r14b
je 0x14000e869
lea rdx, [0x1400b4b18]
lea rcx, [rsi + 0x40]
vzeroupper
call fcn.1400029be
lea rdx, [0x1400b4b18]
xor ecx, ecx
call fcn.1400029be
lea rdx, [0x1400b4b18]
xor ecx, ecx
call fcn.1400029be
mov r9, rax
lea r8, [0x1400b4b1c]
mov edx, 0x30
lea rcx, [rsi + 0x70]
call fcn.140003508
jmp 0x14000e8d4
cmp byte [rsi + 0xd], r14b
je 0x14000e8d4
lea rdx, [0x1400b4b18]
lea rcx, [rsi + 0x40]
vzeroupper
call fcn.1400029be
lea rdx, [0x1400b4b18]
xor ecx, ecx
call fcn.1400029be
lea rdx, [0x1400b4b18]
xor ecx, ecx
mov rdi, rax
call fcn.1400029be
lea rdx, [0x1400b4b18]
xor ecx, ecx
mov rbx, rax
call fcn.1400029be
mov qword [rsp + 0x28], rax
lea r8, str._s__s__s
mov r9, rdi
mov qword [rsp + 0x20], rbx
mov edx, 0x30
lea rcx, [rsi + 0x70]
call fcn.140003508
mov byte [rsi + 0x9f], r14b
mov rax, rsi
vzeroupper
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.140002d60
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret