Function at 0x140051fe0
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x2090
call fcn.1400bd5e0
sub rsp, rax
lea rbx, str.HD_Player.exe
mov rdx, rbx
call fcn.140052330
test eax, eax
jne 0x140052068
lea rbx, str.MEmuHeadless.exe
mov rdx, rbx
call fcn.140052330
test eax, eax
jne 0x140052068
lea rbx, str.LdVBoxHeadless.exe
mov rdx, rbx
call fcn.140052330
test eax, eax
jne 0x140052068
lea rbx, str.AndroidProcess.exe
mov rdx, rbx
call fcn.140052330
test eax, eax
jne 0x140052068
lea rbx, str.Nox.exe
mov rdx, rbx
call fcn.140052330
test eax, eax
cmove rbx, qword [rsp + 0x20a0]
mov rdx, rbx
call fcn.140052330
test eax, eax
jne 0x14005207a
xor edi, edi
mov ecx, edi
jmp 0x1400520a1
mov dword [0x1401657d0], eax
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x1401657d8], rax
xor edi, edi
mov ecx, edi
test rax, rax
setne cl
test ecx, ecx
jne 0x1400520fe
lea r9, str.Emulator_Not_Running_
mov edx, 3
mov r8d, 0xfa0
lea rcx, [rsp + 0x78]
call fcn.140050950
mov rax, qword [0x140166490]
cmp rax, qword [0x140166498]
je 0x1400520f1
mov r8d, 0x2010
lea rdx, [rsp + 0x78]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140166490], 0x2010
jmp 0x1400520fe
lea r8, [rsp + 0x78]
mov rdx, rax
call fcn.14005b2b0
lea rdx, str.An_unexpected_error_occurred
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14005a280
lea rcx, [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
lea r9, str.Aimbot_Head_Aplicando...
mov edx, 1
mov r8d, 0x2710
lea rcx, [rsp + 0x78]
call fcn.140050950
mov rax, qword [0x140166490]
cmp rax, qword [0x140166498]
je 0x140052175
mov r8d, 0x2010
lea rdx, [rsp + 0x78]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140166490], 0x2010
jmp 0x140052182
lea r8, [rsp + 0x78]
mov rdx, rax
call fcn.14005b2b0
mov qword [rsp + 0x20a0], 0x64
mov rax, qword [0x140165780]
sub rax, qword [0x140165770]
sar rax, 3
cmp rax, 0x64
jae 0x1400521b3
lea rdx, [rsp + 0x20a0]
call fcn.14005a6f0
mov r9, qword [0x140165788]
call fcn.140052530
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov rax, qword [0x140165770]
mov rdx, qword [0x140165778]
cmp rax, rdx
je 0x140052309
sub rdx, rax
sar rdx, 3
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x14005a460]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ebp, edi
mov rax, qword [0x140165778]
mov rdx, qword [0x140165770]
sub rax, rdx
sar rax, 3
test rax, rax
je 0x1400522a2
mov rsi, rdi
nop word [rax + rax]
mov rax, qword [rsi + rdx]
lea rdx, [rax + 0x60]
lea rbx, [rax + 0x5c]
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [rsp + 0x20a0]
mov rcx, qword [0x1401657d8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [rsp + 0x20a0]
mov rdx, rbx
mov rcx, qword [0x1401657d8]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
inc ebp
lea rsi, [rsi + 8]
mov rcx, qword [0x140165778]
mov rdx, qword [0x140165770]
sub rcx, rdx
sar rcx, 3
movsxd rax, ebp
cmp rax, rcx
jb 0x140052230
lea r9, str.Aimbot_Head_Aplicada_
mov edx, 1
mov r8d, 0x2710
lea rcx, [rsp + 0x78]
call fcn.140050950
mov rax, qword [0x140166490]
cmp rax, qword [0x140166498]
je 0x1400522ee
mov r8d, 0x2010
lea rdx, [rsp + 0x78]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140166490], 0x2010
jmp 0x1400522fb
lea r8, [rsp + 0x78]
mov rdx, rax
call fcn.14005b2b0
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
nop
lea r11, [rsp + 0x2090]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret