Function at 0x140003a10
Capabilities:
Get system information on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xc8
lea rcx, [0x1400132f0]
mov edx, 0x7568c82
call fcn.140003390
mov qword [0x140070c78], rax
lea rcx, str.7KJR5LKQT2N72IL1
lea rdx, str.DUTJLYELNRDTYFKZ
call fcn.140001e3e
mov ecx, 0x13fa30
call fcn.1400097f0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x80], rax
mov ecx, 0x4009df94
xor edi, edi
lea r12, str.dQN
lea r14, [rsp + 0x68]
lea rsi, [rsp + 0x98]
lea r15, str.startThread
cmp ecx, 0x7e45c64
jg 0x140003aef
cmp ecx, 0xd169b750
jle 0x140003b5c
cmp ecx, 0xecdace46
jg 0x140003c16
cmp ecx, 0xd5808361
jg 0x140003d0c
cmp ecx, 0xd169b751
je 0x140003f0a
cmp ecx, 0xd471e3bf
je 0x140003f24
cmp ecx, 0xd56eadcd
jne 0x140003a8c
mov eax, dword [rsp + 0x28]
mov eax, dword [rsp + 0x28]
mov eax, dword [rsp + 0x28]
mov eax, dword [rsp + 0x28]
mov ecx, 0xbd90c179
jmp 0x140003a8c
cmp ecx, 0x38a23912
jle 0x140003bb9
cmp ecx, 0x5bef1517
jg 0x140003c58
cmp ecx, 0x46f0b68d
jg 0x140003d4e
cmp ecx, 0x38a23913
je 0x140003f77
cmp ecx, 0x4009df94
je 0x140003faf
cmp ecx, 0x43cf6d61
jne 0x140003a8c
mov rax, qword [rsp + 0x50]
mov al, byte [rax]
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
xor al, byte [rcx + rdx]
mov rcx, qword [rsp + 0x50]
mov byte [rcx], al
mov ecx, 0xd5808362
jmp 0x140003a8c
cmp ecx, 0xae8d1916
jg 0x140003c8d
cmp ecx, 0x901bec1d
jg 0x140003dba
cmp ecx, 0x8040ebaa
je 0x140003fcb
cmp ecx, 0x88daa9ea
je 0x140003fdf
cmp ecx, 0x8d26c111
jne 0x140003a8c
mov ecx, dword [0x140071e2c]
mov eax, dword [0x140071e28]
lea ebx, [rcx - 1]
imul ebx, ecx
mov edx, 0x38a23913
mov ecx, 0x38a23913
jmp 0x140003f9c
cmp ecx, 0x2251030e
jle 0x140003cc7
cmp ecx, 0x252913f8
jg 0x140003dff
cmp ecx, 0x2251030f
je 0x140003ffa
cmp ecx, 0x23f85c66
je 0x140004008
cmp ecx, 0x244a13c4
jne 0x140003a8c
mov ecx, dword [0x140071e2c]
mov eax, dword [0x140071e28]
lea ebx, [rcx - 1]
imul ebx, ecx
mov edx, 0xae8d1917
mov ecx, 0xae8d1917
jmp 0x1400040f0
cmp ecx, 0x43c089d
jg 0x140003e3a
cmp ecx, 0xecdace47
je 0x140004015
cmp ecx, 0xee5957e6
je 0x140004035
cmp ecx, 0x25c9515
jne 0x140003a8c
mov r13d, dword [rsp + 0x3c]
inc r13d
mov ecx, 0x43c089e
jmp 0x140003a8c
cmp ecx, 0x788f6112
jg 0x140003e68
cmp ecx, 0x5bef1518
je 0x140004075
cmp ecx, 0x5e12aa23
je 0x140004083
cmp ecx, 0x69a23210
je 0x140003f00
jmp 0x140003a8c
cmp ecx, 0xb48467f9
jg 0x140003eb1
cmp ecx, 0xae8d1917
je 0x1400040be
cmp ecx, 0xb23d6abe
je 0x140004103
cmp ecx, 0xb2f4fdfc
jne 0x140003a8c
mov ecx, 0x7d28b66e
jmp 0x140003a8c
cmp ecx, 0x12765480
jle 0x140003ed3
cmp ecx, 0x12765481
je 0x140004124
cmp ecx, 0x19c0cfc4
je 0x140004137
cmp ecx, 0x1a86a9ba
jne 0x140003a8c
cmp byte [rsp + 0x2e], 0
mov ecx, 0x8d26c111
jne 0x140003a8c
jmp 0x140003e5e
cmp ecx, 0xd5808362
je 0x140004155
cmp ecx, 0xd7424182
je 0x14000419f
cmp ecx, 0xe90de821
jne 0x140003a8c
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x90]
mov dl, byte [rsp + 0x2f]
mov byte [rax + rcx], dl
mov ecx, 0xb23d6abe
jmp 0x140003a8c
cmp ecx, 0x46f0b68e
je 0x140003f00
cmp ecx, 0x516839b0
je 0x1400041b2
cmp ecx, 0x5712d1d8
jne 0x140003a8c
mov rax, qword [rsp + 0x30]
mov byte [rax], dil
mov rax, qword [rsp + 0x30]
mov byte [rax + 1], dil
xor ecx, ecx
call fcn.1400097f8
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x60]
call fcn.140009894
mov ecx, dword [0x140071e2c]
mov eax, dword [0x140071e28]
lea ebx, [rcx - 1]
imul ebx, ecx
mov edx, 0x788f6113
mov ecx, 0x788f6113
jmp 0x140004308
cmp ecx, 0x901bec1e
je 0x1400041bc
cmp ecx, 0x98e6fd8f
je 0x1400041cb
cmp ecx, 0xad32bff3
jne 0x140003a8c
mov ecx, dword [0x140071e2c]
mov eax, dword [0x140071e28]
lea ebx, [rcx - 1]
imul ebx, ecx
mov edx, 0x25b39e29
mov ecx, 0x25b39e29
jmp 0x140004240
cmp ecx, 0x252913f9
je 0x1400041fc
cmp ecx, 0x25b39e29
je 0x14000420b
cmp ecx, 0x35326c0e
jne 0x140003a8c
mov rax, qword [rsp + 0x48]
add rax, r12
mov qword [rsp + 0x50], rax
mov ecx, 0x19c0cfc4
jmp 0x140003a8c
cmp ecx, 0x43c089e
je 0x140004253
cmp ecx, 0x4a6f210
je 0x140004282
cmp ecx, 0x6ecb961
jne 0x140003a8c
mov ecx, 0x46f0b68e
jmp 0x140003a8c
cmp ecx, 0x788f6113
je 0x14000428c
cmp ecx, 0x7d28b66e
je 0x14000429b
cmp ecx, 0x7f339214
jne 0x140003a8c
mov dword [rsp + 0x28], ebp
mov ecx, dword [0x140071e2c]
mov eax, dword [0x140071e28]
lea ebx, [rcx - 1]
imul ebx, ecx
mov edx, 0x5e12aa23
mov ecx, 0x5e12aa23
jmp 0x1400040ab
cmp ecx, 0xbd90c179
je 0x1400042ba
cmp ecx, 0xd0244837
jne 0x14000431d
mov ecx, 0x6ecb961
jmp 0x140003a8c
cmp ecx, 0x7e45c65
je 0x1400042ec
cmp ecx, 0xccf11b1
jne 0x140003a8c
cmp qword [rsp + 0x58], 0
setne byte [rsp + 0x2e]
mov ecx, 0x1a86a9ba
jmp 0x140003a8c
mov ecx, 0x252913f9
jmp 0x140003a8c
cmp byte [rsp + 0x2d], 0
mov ecx, 0x244a13c4
jne 0x140003a8c
mov ecx, 0xccf11b1
jmp 0x140003a8c
mov eax, dword [rsp + 0x38]
mov dword [0x140020240], eax
mov ecx, dword [rsp + 0x38]
call fcn.1400097f0
mov qword [rsp + 0x30], rax
mov rcx, qword [rsp + 0x30]
lea rdx, [0x140020240]
mov r8, r12
mov r9d, 0x4fe8c
call fcn.140004340
mov qword [rsp + 0x70], r14
mov rax, qword [rsp + 0x70]
mov dword [rsp + 0x68], 0
mov qword [rsp + 0x78], rsi
mov ecx, 0xee5957e6
jmp 0x140003a8c
mov rax, qword [rsp + 0x58]
xor ecx, ecx
call rax
mov ecx, dword [0x140071e2c]
mov eax, dword [0x140071e28]
lea ebx, [rcx - 1]
imul ebx, ecx
mov edx, 0xd0244837
mov ecx, 0xd0244837
test bl, 1
je 0x140004312
mov ecx, 0x12765481
jmp 0x140004312
mov rcx, qword [rsp + 0x80]
mov edx, 0x4fe8c
call fcn.14000215e
mov ecx, 0x23f85c66
jmp 0x140003a8c
mov rcx, qword [rsp + 0x30]
call fcn.1400098ac
mov ecx, 0x69a23210
jmp 0x140003a8c
mov rax, qword [rsp + 0x30]
call rax
mov rcx, qword [rsp + 0x30]
call fcn.1400098ac
mov ecx, 0x25b39e29
jmp 0x140003a8c
mov ecx, 0x7f339214
mov ebp, dword [rsp + 0x6c]
jmp 0x140003a8c
mov ecx, 0x43c089e
xor r13d, r13d
jmp 0x140003a8c
mov rcx, qword [rsp + 0x40]
call fcn.1400098ac
mov eax, dword [0x140020240]
add eax, eax
mov dword [rsp + 0x38], eax
mov ecx, 0xd471e3bf
jmp 0x140003a8c
mov rax, qword [rsp + 0x78]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov edx, dword [rsp + 0x9c]
mov rcx, qword [rsp + 0x30]
mov r8d, 0x40
mov r9, r14
call qword [0x140070c78]
mov ecx, 0x8040ebaa
test eax, eax
je 0x140003a8c
mov ecx, 0xad32bff3
jmp 0x140003a8c
mov eax, dword [rsp + 0x28]
mov ecx, 0x5e12aa23
jmp 0x140003a8c
mov eax, dword [rsp + 0x28]
cmp eax, 0x74
setl byte [rsp + 0x2d]
mov ecx, dword [0x140071e2c]
mov eax, dword [0x140071e28]
lea ebx, [rcx - 1]
imul ebx, ecx
mov edx, 0xd169b751
mov ecx, 0xd169b751
test bl, 1
je 0x140004312
mov ecx, 0x5bef1518
jmp 0x140004312
call fcn.140009868
mov byte [rsp + 0x2f], al
movsxd rax, dword [rsp + 0x28]
mov qword [rsp + 0x90], rax
mov ecx, dword [0x140071e2c]
mov eax, dword [0x140071e28]
lea ebx, [rcx - 1]
imul ebx, ecx
mov edx, 0x4a6f210
mov ecx, 0x4a6f210
test bl, 1
je 0x140004312
mov ecx, 0xd7424182
jmp 0x140004312
mov ecx, dword [0x140071e2c]
mov eax, dword [0x140071e28]
lea ebx, [rcx - 1]
imul ebx, ecx
mov edx, 0xbd90c179
mov ecx, 0xbd90c179
jmp 0x1400042e0
mov rax, qword [rsp + 0x58]
xor ecx, ecx
call rax
mov ecx, 0x38a23913
jmp 0x140003a8c
mov ecx, dword [0x140071e2c]
mov eax, dword [0x140071e28]
lea ebx, [rcx - 1]
imul ebx, ecx
mov edx, 0xd5808362
mov ecx, 0xd5808362
jmp 0x14000418c
mov rax, qword [rsp + 0x50]
mov al, byte [rax]
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
xor al, byte [rcx + rdx]
mov rcx, qword [rsp + 0x50]
mov byte [rcx], al
mov ecx, dword [0x140071e2c]
mov eax, dword [0x140071e28]
lea ebx, [rcx - 1]
imul ebx, ecx
mov edx, 0x516839b0
mov ecx, 0x516839b0
test bl, 1
je 0x140004312
mov ecx, 0x43cf6d61
jmp 0x140004312
call fcn.140009868
mov eax, dword [rsp + 0x28]
mov ecx, 0xae8d1917
jmp 0x140003a8c
mov ecx, 0x25c9515
jmp 0x140003a8c
mov rax, qword [rsp + 0x70]
mov ecx, 0xb48467fa
jmp 0x140003a8c
mov rax, qword [rsp + 0x30]
mov byte [rax], dil
mov rax, qword [rsp + 0x30]
mov byte [rax + 1], dil
xor ecx, ecx
call fcn.1400097f8
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x60]
call fcn.140009894
mov ecx, 0x5712d1d8
jmp 0x140003a8c
mov rax, qword [rsp + 0x78]
mov ecx, 0x901bec1e
jmp 0x140003a8c
mov rax, qword [rsp + 0x30]
call rax
mov qword [rsp + 0x88], rax
mov rcx, qword [rsp + 0x30]
call fcn.1400098ac
mov ecx, dword [0x140071e2c]
mov eax, dword [0x140071e28]
lea ebx, [rcx - 1]
imul ebx, ecx
mov edx, 0xb2f4fdfc
mov ecx, 0xb2f4fdfc
test bl, 1
je 0x140004312
mov ecx, 0x88daa9ea
jmp 0x140004312
mov dword [rsp + 0x3c], r13d
movsxd rax, dword [rsp + 0x3c]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov ecx, 0x35326c0e
cmp rax, 0x4fe8c
jb 0x140003a8c
mov ecx, 0xecdace47
jmp 0x140003a8c
mov ecx, 0xe90de821
jmp 0x140003a8c
mov ecx, 0x7f339214
mov ebp, 0x4e
jmp 0x140003a8c
mov rcx, qword [rsp + 0x88]
mov rdx, r15
call fcn.14000241c
mov qword [rsp + 0x58], rax
mov ecx, 0x7e45c65
jmp 0x140003a8c
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x6c], eax
mov ecx, dword [0x140071e2c]
mov eax, dword [0x140071e28]
lea ebx, [rcx - 1]
imul ebx, ecx
mov edx, 0x2251030f
mov ecx, 0x2251030f
test bl, 1
je 0x140004312
mov ecx, 0xd56eadcd
jmp 0x140004312
mov ecx, dword [0x140071e2c]
mov eax, dword [0x140071e28]
lea ebx, [rcx - 1]
imul ebx, ecx
mov edx, 0x5712d1d8
mov ecx, 0x5712d1d8
test bl, 1
je 0x140004312
mov ecx, 0x98e6fd8f
cmp eax, 0xa
cmovl ecx, edx
jmp 0x140003a8c
cmp ecx, 0xb48467fa
jne 0x140003a8c
xor eax, eax
add rsp, 0xc8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret