Function at 0x14001d070
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x60
mov rbx, rcx
xor edi, edi
mov dword [rsp + 0x20], edi
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], 7
mov ebp, 0xf
mov qword [rcx + 0x18], rbp
mov rax, qword [str.unknown]
mov dword [rcx], eax
movzx eax, word [0x1400a4ad4]
mov word [rcx + 4], ax
movzx eax, byte [0x1400a4ad6]
mov byte [rcx + 6], al
mov byte [rcx + 7], dil
mov dword [rsp + 0x20], 1
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
lea rcx, [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx eax, word [rsp + 0x28]
test eax, eax
je 0x14001d44b
cmp eax, 5
je 0x14001d338
cmp eax, 9
je 0x14001d225
cmp eax, 0xc
jne 0x14001d57a
mov rcx, qword [rbx + 0x18]
cmp rcx, 5
jb 0x14001d150
mov rdi, rbx
cmp rcx, rbp
jbe 0x14001d12a
mov rdi, qword [rbx]
mov qword [rbx + 0x10], 5
mov r8d, 5
lea rdx, str.arm64
mov rcx, rdi
call fcn.1400874e0
mov byte [rdi + 5], 0
jmp 0x14001d57a
mov rdx, rcx
shr rdx, 1
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
sub rax, rdx
cmp rcx, rax
jbe 0x14001d17b
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14001d1d3
lea rax, [rcx + rdx]
cmp rax, 0xf
cmova rbp, rax
mov rsi, rbp
lea rcx, [rbp + 1]
test rcx, rcx
jne 0x14001d1bd
mov qword [rbx + 0x10], 5
mov qword [rbx + 0x18], rbp
mov eax, dword [str.arm64]
mov dword [rdi], eax
movzx eax, byte [0x14008d9c0]
mov byte [rdi + 4], al
mov byte [5], cl
jmp 0x14001d577
cmp rcx, 0x1000
jb 0x14001d1f6
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001d599
mov rcx, rax
call fcn.14005e4a0
test rax, rax
je 0x14001d593
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov qword [rbx + 0x18], rsi
jmp 0x14001d202
call fcn.14005e4a0
mov rdi, rax
mov qword [rbx + 0x18], rbp
mov qword [rbx + 0x10], 5
mov eax, dword [str.arm64]
mov dword [rdi], eax
movzx eax, byte [0x14008d9c0]
mov byte [rdi + 4], al
mov byte [rdi + 5], 0
jmp 0x14001d577
mov rcx, qword [rbx + 0x18]
cmp rcx, 3
jb 0x14001d261
mov rdi, rbx
cmp rcx, 0xf
jbe 0x14001d23b
mov rdi, qword [rbx]
mov qword [rbx + 0x10], 3
mov r8d, 3
lea rdx, [0x1400a5010]
mov rcx, rdi
call fcn.1400874e0
mov byte [rdi + 3], 0
jmp 0x14001d57a
mov rdx, rcx
shr rdx, 1
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
sub rax, rdx
cmp rcx, rax
jbe 0x14001d28c
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14001d2e5
lea rax, [rdx + rcx]
cmp rax, 0xf
cmova rbp, rax
mov rsi, rbp
lea rcx, [rbp + 1]
test rcx, rcx
jne 0x14001d2cf
mov qword [rbx + 0x10], 3
mov qword [rbx + 0x18], rbp
mov eax, dword [0x1400a5010]
mov word [rdi], ax
movzx eax, byte [0x1400a5012]
mov byte [rdi + 2], al
mov byte [3], cl
jmp 0x14001d577
cmp rcx, 0x1000
jb 0x14001d308
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001d599
mov rcx, rax
call fcn.14005e4a0
test rax, rax
je 0x14001d593
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov qword [rbx + 0x18], rsi
jmp 0x14001d314
call fcn.14005e4a0
mov rdi, rax
mov qword [rbx + 0x18], rbp
mov qword [rbx + 0x10], 3
mov eax, dword [0x1400a5010]
mov word [rdi], ax
movzx eax, byte [0x1400a5012]
mov byte [rdi + 2], al
mov byte [rdi + 3], 0
jmp 0x14001d577
mov rcx, qword [rbx + 0x18]
cmp rcx, 3
jb 0x14001d374
mov rdi, rbx
cmp rcx, 0xf
jbe 0x14001d34e
mov rdi, qword [rbx]
mov qword [rbx + 0x10], 3
mov r8d, 3
lea rdx, [0x14008d9c4]
mov rcx, rdi
call fcn.1400874e0
mov byte [rdi + 3], 0
jmp 0x14001d57a
mov rdx, rcx
shr rdx, 1
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
sub rax, rdx
cmp rcx, rax
jbe 0x14001d39f
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14001d3f8
lea rax, [rcx + rdx]
cmp rax, 0xf
cmova rbp, rax
mov rsi, rbp
lea rcx, [rbp + 1]
test rcx, rcx
jne 0x14001d3e2
mov qword [rbx + 0x10], 3
mov qword [rbx + 0x18], rbp
mov eax, dword [0x14008d9c4]
mov word [rdi], ax
movzx eax, byte [0x14008d9c6]
mov byte [rdi + 2], al
mov byte [3], cl
jmp 0x14001d577
cmp rcx, 0x1000
jb 0x14001d41b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001d599
mov rcx, rax
call fcn.14005e4a0
test rax, rax
je 0x14001d593
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov qword [rbx + 0x18], rsi
jmp 0x14001d427
call fcn.14005e4a0
mov rdi, rax
mov qword [rbx + 0x18], rbp
mov qword [rbx + 0x10], 3
mov eax, dword [0x14008d9c4]
mov word [rdi], ax
movzx eax, byte [0x14008d9c6]
mov byte [rdi + 2], al
mov byte [rdi + 3], 0
jmp 0x14001d577
mov rcx, qword [rbx + 0x18]
cmp rcx, 3
jb 0x14001d487
mov rdi, rbx
cmp rcx, 0xf
jbe 0x14001d461
mov rdi, qword [rbx]
mov qword [rbx + 0x10], 3
mov r8d, 3
lea rdx, [0x1400a500c]
mov rcx, rdi
call fcn.1400874e0
mov byte [rdi + 3], 0
jmp 0x14001d57a
mov rdx, rcx
shr rdx, 1
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
sub rax, rdx
cmp rcx, rax
jbe 0x14001d4f5
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14005e4a0
test rax, rax
je 0x14001d593
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov qword [rbx + 0x10], 3
mov qword [rbx + 0x18], rsi
mov eax, dword [0x1400a500c]
mov word [rdi], ax
movzx eax, byte [0x1400a500e]
mov byte [rdi + 2], al
mov byte [rdi + 3], 0
jmp 0x14001d577
lea rax, [rcx + rdx]
cmp rax, 0xf
cmova rbp, rax
mov rsi, rbp
lea rcx, [rbp + 1]
test rcx, rcx
jne 0x14001d535
mov qword [rbx + 0x10], 3
mov qword [rbx + 0x18], rbp
mov eax, dword [0x1400a500c]
mov word [rdi], ax
movzx eax, byte [0x1400a500e]
mov byte [rdi + 2], al
mov byte [3], cl
jmp 0x14001d577
cmp rcx, 0x1000
jb 0x14001d54c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001d599
jmp 0x14001d4b0
call fcn.14005e4a0
mov rdi, rax
mov qword [rbx + 0x10], 3
mov qword [rbx + 0x18], rbp
mov ecx, dword [0x1400a500c]
mov word [rax], cx
movzx ecx, byte [0x1400a500e]
mov byte [rax + 2], cl
mov byte [rax + 3], 0
mov qword [rbx], rdi
mov rax, rbx
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret
call fcn.1400645e4
int3
call fcn.140001240
int3