Function at 0x140001450
Capabilities:
Get system information on windows
Query or enumerate registry value

Disassembly:
push rbp
push rsi
push rbx
sub rsp, 0x1f0
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x3c], 0x100
lea rax, [rbp + 0x140]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
mov r8d, 0
lea rax, str.SYSTEMCurrentControlSetControlSystemInformation
mov rdx, rax
mov rcx, 0xffffffff80000002
mov rax, qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
call rax
test eax, eax
sete al
test al, al
je 0x1400015ec
mov rax, qword [rbp + 0x140]
lea rdx, [rbp + 0x3c]
mov qword [rsp + 0x28], rdx
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x20], rdx
mov r9d, 0
mov r8d, 0
lea rdx, str.SystemManufacturer
mov rcx, rax
mov rax, qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
call rax
test eax, eax
sete al
test al, al
je 0x1400015ec
lea rax, [rbp + 0x14e]
mov qword [rbp + 0x168], rax
nop
nop
lea rcx, [rbp + 0x14e]
lea rdx, [rbp + 0x40]
lea rax, [rbp - 0x50]
mov r8, rcx
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x14e]
mov rcx, rax
call method.std::__new_allocator_char_.__new_allocator__
nop
mov rax, qword [rbp + 0x140]
mov rcx, rax
mov rax, qword [sym.imp.ADVAPI32.dll_RegCloseKey]
call rax
lea rax, [rbp - 0x50]
mov r8d, 0
lea rdx, str.VMware
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.find_char_const__unsigned_long_long__const
cmp rax, 0xffffffffffffffff
jne 0x1400015b6
lea rax, [rbp - 0x50]
mov r8d, 0
lea rdx, str.VirtualBox
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.find_char_const__unsigned_long_long__const
cmp rax, 0xffffffffffffffff
jne 0x1400015b6
lea rax, [rbp - 0x50]
mov r8d, 0
lea rdx, [0x1400b6058]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.find_char_const__unsigned_long_long__const
cmp rax, 0xffffffffffffffff
jne 0x1400015b6
lea rax, [rbp - 0x50]
mov r8d, 0
lea rdx, str.Hyper_V
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.find_char_const__unsigned_long_long__const
cmp rax, 0xffffffffffffffff
je 0x1400015bd
mov eax, 1
jmp 0x1400015c2
mov eax, 0
test al, al
je 0x1400015d2
mov esi, 1
mov ebx, 0
jmp 0x1400015d7
mov ebx, 1
lea rax, [rbp - 0x50]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
cmp ebx, 1
jne 0x1400016fe
mov rax, rbp
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetSystemInfo]
call rax
mov qword [rbp - 0x10], 0
mov qword [rbp - 8], 0
lea rax, [rbp - 0x10]
mov qword [rbp + 0x160], rax
mov dword [rbp + 0x15c], 1
mov rax, qword [rbp + 0x160]
lea rsi, [rax + 4]
mov rax, qword [rbp + 0x160]
lea r11, [rax + 8]
mov rax, qword [rbp + 0x160]
lea r10, [rax + 0xc]
mov eax, dword [rbp + 0x15c]
cpuid
mov r8d, ebx
mov r9d, eax
mov rax, qword [rbp + 0x160]
mov dword [rax], r9d
mov dword [rsi], r8d
mov dword [r11], ecx
mov dword [r10], edx
nop
lea rax, [rbp + 0x14f]
mov qword [rbp + 0x150], rax
nop
nop
lea rcx, [rbp + 0x14f]
lea rax, [rbp - 0x10]
lea rdx, [rax + 4]
lea rax, [rbp - 0x30]
mov r9, rcx
mov r8d, 0xc
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string_char_const__unsigned_long_long__std::allocator_char__const_
lea rax, [rbp + 0x14f]
mov rcx, rax
call method.std::__new_allocator_char_.__new_allocator__
nop
lea rax, [rbp - 0x30]
mov r8d, 0
lea rdx, str.VMware
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.find_char_const__unsigned_long_long__const
cmp rax, 0xffffffffffffffff
jne 0x1400016e5
lea rax, [rbp - 0x30]
mov r8d, 0
lea rdx, str.VBox
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.find_char_const__unsigned_long_long__const
cmp rax, 0xffffffffffffffff
je 0x1400016ec
mov esi, 1
jmp 0x1400016f1
mov esi, 0
nop
lea rax, [rbp - 0x30]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
mov eax, esi
jmp 0x140001758
add rsp, 0x1f0
pop rbx
pop rsi
pop rbp
ret