Function at 0x140006910
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x20], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
sub rsp, 0x50
mov rdi, rcx
call fcn.140001690
mov rcx, rax
xor ebp, ebp
test rax, rax
je 0x140006dff
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001b738]
add rax, 0x18
mov qword [rdi + 8], rax
call fcn.140001690
mov rcx, rax
test rax, rax
je 0x140006e0a
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001b738]
add rax, 0x18
mov qword [rdi + 0x10], rax
call fcn.140001690
mov rcx, rax
test rax, rax
je 0x140006e15
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001b738]
add rax, 0x18
mov qword [rdi + 0x18], rax
call fcn.140001690
mov rcx, rax
test rax, rax
je 0x140006e20
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001b738]
add rax, 0x18
mov qword [rdi + 0x20], rax
call fcn.140001690
mov rcx, rax
test rax, rax
je 0x140006e2b
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001b738]
add rax, 0x18
mov qword [rdi + 0x28], rax
call fcn.140001690
mov rcx, rax
test rax, rax
je 0x140006e36
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001b738]
add rax, 0x18
mov qword [rdi + 0x30], rax
call fcn.140001690
mov rcx, rax
test rax, rax
je 0x140006e41
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001b738]
add rax, 0x18
mov qword [rdi + 0x38], rax
call fcn.140001690
mov rcx, rax
test rax, rax
je 0x140006e4c
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001b738]
add rax, 0x18
mov qword [rdi + 0x40], rax
call fcn.140001690
mov rcx, rax
test rax, rax
je 0x140006e57
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001b738]
add rax, 0x18
mov qword [rdi + 0x50], rax
call fcn.140001690
mov rcx, rax
test rax, rax
je 0x140006e62
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001b738]
add rax, 0x18
mov qword [rdi + 0x60], rax
call fcn.140001690
mov rcx, rax
test rax, rax
je 0x140006e6d
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001b738]
add rax, 0x18
mov qword [rdi + 0x68], rax
call fcn.140001690
mov rcx, rax
test rax, rax
je 0x140006e78
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001b738]
add rax, 0x18
mov qword [rdi + 0x70], rax
call fcn.140001690
mov rcx, rax
test rax, rax
je 0x140006e83
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001b738]
add rax, 0x18
mov qword [rdi + 0x98], rax
call fcn.140001690
mov rcx, rax
test rax, rax
je 0x140006e8e
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001b738]
add rax, 0x18
mov qword [rdi + 0xb0], rax
mov qword [rdi + 0xcc], rbp
mov qword [rdi + 0xd4], rbp
mov qword [rdi + 0xdc], rbp
call fcn.140001690
mov rcx, rax
test rax, rax
je 0x140006e99
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001b738]
add rax, 0x18
mov qword [rdi + 0x130], rax
call fcn.140001690
mov rcx, rax
test rax, rax
je 0x140006ea4
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001b738]
add rax, 0x18
mov qword [rdi + 0x138], rax
call fcn.140001690
mov rcx, rax
test rax, rax
je 0x140006eaf
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001b738]
add rax, 0x18
mov qword [rdi + 0x140], rax
call fcn.140001690
mov rcx, rax
test rax, rax
je 0x140006eba
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001b738]
add rax, 0x18
mov qword [rdi + 0x150], rax
mov qword [rdi + 0x158], rbp
mov qword [rdi + 0x160], rbp
mov qword [rdi + 0x168], rbp
call fcn.140001690
mov rcx, rax
test rax, rax
je 0x140006ec5
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001b738]
add rax, 0x18
mov qword [rdi + 0x170], rax
lea rsi, [rdi + 0x178]
mov qword [rsp + 0x78], rsi
call fcn.140001690
mov rcx, rax
test rax, rax
je 0x140006ed0
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001b738]
add rax, 0x18
mov qword [rsi], rax
lea rbx, [rsi + 0x20]
mov qword [rsp + 0x80], rbx
mov qword [rbx], rbp
mov qword [rbx + 8], rbp
lea ecx, [rbp + 0x30]
call fcn.140018838
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbx], rax
call fcn.140001690
mov rcx, rax
test rax, rax
je 0x140006edb
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001b738]
add rax, 0x18
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x18], rbp
mov qword [rsi + 8], rbp
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsp + 0x48]
mov dword [rsi + 0x10], eax
lea rdx, str.uploadExeName
lea rcx, [rsi + 0x30]
call fcn.140001e2c
nop
call fcn.140001690
mov rcx, rax
test rax, rax
je 0x140006df4
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x14001b738]
add rax, 0x18
mov qword [rdi + 0x1b8], rax
mov dword [rdi + 0xa0], ebp
mov dword [rdi], ebp
lea eax, [rbp + 0x19]
mov dword [rdi + 0x48], eax
mov dword [rdi + 0x58], eax
mov dword [rdi + 0x78], ebp
mov qword [rdi + 0x7c], 1
mov qword [rdi + 0x84], rbp
mov qword [rdi + 0x8c], rbp
mov dword [rdi + 0x94], ebp
mov dword [rdi + 0xa4], 3
mov dword [rdi + 0xa8], 2
mov dword [rdi + 0xac], 1
mov qword [rdi + 0xb8], 1
mov qword [rdi + 0xc0], rbp
mov dword [rdi + 0xc8], ebp
mov qword [rsp + 0x70], rbp
mov eax, ebp
mov qword [rdi + 0xcc], rax
xorps xmm0, xmm0
movdqu xmmword [rdi + 0xd4], xmm0
mov qword [rdi + 0xe4], rbp
mov qword [rdi + 0xec], rbp
mov qword [rdi + 0xf4], rbp
mov dword [rdi + 0xfc], ebp
mov qword [rdi + 0x100], rbp
mov qword [rdi + 0x108], rbp
mov qword [rdi + 0x110], rbp
mov qword [rdi + 0x118], rbp
mov qword [rdi + 0x120], rbp
mov dword [rdi + 0x128], ebp
mov dword [rdi + 0x148], ebp
mov qword [rdi + 0x1b0], rbp
mov rax, rdi
mov rbx, qword [rsp + 0x88]
add rsp, 0x50
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x80004005
call fcn.140001500
nop
mov ecx, 0x80004005
call fcn.140001500
nop
mov ecx, 0x80004005
call fcn.140001500
nop
mov ecx, 0x80004005
call fcn.140001500
nop
mov ecx, 0x80004005
call fcn.140001500
nop
mov ecx, 0x80004005
call fcn.140001500
nop
mov ecx, 0x80004005
call fcn.140001500
nop
mov ecx, 0x80004005
call fcn.140001500
nop
mov ecx, 0x80004005
call fcn.140001500
nop
mov ecx, 0x80004005
call fcn.140001500
nop
mov ecx, 0x80004005
call fcn.140001500
nop
mov ecx, 0x80004005
call fcn.140001500
nop
mov ecx, 0x80004005
call fcn.140001500
nop
mov ecx, 0x80004005
call fcn.140001500
nop
mov ecx, 0x80004005
call fcn.140001500
nop
mov ecx, 0x80004005
call fcn.140001500
nop
mov ecx, 0x80004005
call fcn.140001500
nop
mov ecx, 0x80004005
call fcn.140001500
nop
mov ecx, 0x80004005
call fcn.140001500
nop
mov ecx, 0x80004005
call fcn.140001500
nop
mov ecx, 0x80004005
call fcn.140001500
nop
mov ecx, 0x80004005
call fcn.140001500
int3