Function at 0x14000a1c0
Capabilities:
Get system information on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x18
lea rbp, [rsp + 0x10]
mov eax, dword [0x1400314e0]
mov ecx, dword [0x1400314e4]
lea edx, [rax - 1]
imul edx, eax
mov eax, edx
not eax
and eax, 0xc652abdd
and edx, 0x39ad5422
or edx, eax
mov ebx, edx
xor ebx, 0x39ad5422
xor edx, 0xc4520bd5
and edx, 0xe5da0ff5
mov eax, ebx
and eax, 0x1a25f00a
or eax, edx
xor eax, 0x1a25f00b
and ebx, 0xfffffffe
or ebx, eax
cmp ebx, 0xffffffff
sete byte [rbp + 7]
cmp ecx, 0xa
setl byte [rbp + 6]
mov eax, 0x819cb101
mov r13d, 0xc560e961
mov r14d, 0x2f6843a4
mov r15d, 0xb5033a67
mov r12d, 0x8cb454e3
jmp 0x14000a2a0
mov eax, dword [0x1400314e0]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
not ecx
or ecx, eax
cmp ecx, 0xffffffff
setne al
cmp dword [0x1400314e4], 9
setg cl
mov edx, ecx
or dl, al
xor cl, al
mov eax, edx
xor al, cl
mov ebx, 0x4f394e07
cmovne ebx, r15d
test cl, cl
mov eax, ebx
mov ecx, 0x4f394e07
cmovne eax, ecx
test dl, dl
cmovne eax, ebx
nop
cmp eax, 0xeb1c74b0
jg 0x14000a360
cmp eax, 0xae4685b8
jle 0x14000a430
cmp eax, 0xc560e960
jg 0x14000a516
cmp eax, 0xae4685b9
je 0x14000a6cf
cmp eax, 0xb5033a67
je 0x14000a751
cmp eax, 0xb73f8aa6
jne 0x14000a2a0
mov eax, dword [0x1400314e0]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0x54e018f1
and ecx, 0xab1fe70e
or ecx, edx
xor ecx, 0xab1fe70f
xor eax, ecx
test eax, ecx
sete al
setne cl
cmp dword [0x1400314e4], 0xa
setl dl
xor cl, dl
mov ebx, edx
xor bl, al
xor cl, 1
or dl, al
xor dl, 1
or dl, cl
mov ecx, edx
xor cl, bl
test dl, dl
mov eax, 0x6a393bdd
mov edx, 0x8cb454e3
cmovne eax, edx
test bl, bl
mov r12d, 0x8cb454e3
cmove eax, edx
test cl, cl
mov ecx, 0x6a393bdd
cmove eax, ecx
jmp 0x14000a2a0
cmp eax, 0x43264494
jle 0x14000a4e0
cmp eax, 0x4f394e06
jg 0x14000a5c8
cmp eax, 0x43264495
je 0x14000a75b
cmp eax, 0x49ed6c9d
je 0x14000a76a
cmp eax, 0x4cb4b2d1
jne 0x14000a2a0
mov eax, dword [0x1400314e0]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
not eax
and eax, 0x6c828a8e
and ecx, 0x937d7571
or ecx, eax
mov eax, ecx
xor eax, 0x937d7571
xor ecx, 0x4c020a82
and ecx, 0xcc3e3bd3
mov edx, eax
and edx, 0x33c1c42c
or edx, ecx
xor edx, 0x33c1c42d
and eax, 0xfffffffe
or eax, edx
mov ecx, eax
not ecx
and ecx, 0xc6e5f7d1
and eax, 0x391a082e
or eax, ecx
xor eax, 0x391a082e
sete al
cmp dword [0x1400314e4], 0xa
setl cl
mov edx, ecx
xor dl, al
or cl, al
xor cl, 1
or cl, dl
mov eax, ecx
xor al, dl
mov ebx, 0x806b6fcf
cmovne ebx, r14d
test cl, cl
mov eax, 0x806b6fcf
jmp 0x14000a7ea
cmp eax, 0x8b5633d5
jle 0x14000a639
cmp eax, 0x8b5633d6
je 0x14000a776
cmp eax, 0x8cb454e3
je 0x14000a7f2
cmp eax, 0xa03f074b
jne 0x14000a2a0
mov eax, dword [0x1400314e0]
mov ecx, dword [0x1400314e4]
lea edx, [rax - 1]
imul edx, eax
mov eax, edx
not eax
mov ebx, eax
and ebx, 0x800ba879
and edx, 0x7ff45786
or edx, ebx
xor edx, 0x800ba878
or edx, eax
cmp edx, 0xffffffff
sete dl
setne al
cmp ecx, 9
setg bl
cmp ecx, 0xa
setl cl
and cl, al
and dl, bl
or dl, cl
mov ecx, ebx
and cl, al
xor bl, al
or bl, cl
mov ecx, ebx
xor cl, dl
test bl, bl
mov eax, 0x4cb4b2d1
mov ebx, 0x2f6843a4
cmovne eax, ebx
test dl, dl
mov r14d, 0x2f6843a4
cmove eax, ebx
test cl, cl
mov ecx, 0x4cb4b2d1
cmove eax, ecx
jmp 0x14000a2a0
cmp eax, 0xfd3d3bee
jle 0x14000a691
cmp eax, 0xfd3d3bef
je 0x14000a24c
cmp eax, 0x2a728c65
je 0x14000a7fc
cmp eax, 0x2f6843a4
jne 0x14000a2a0
mov eax, 0x4cb4b2d1
jmp 0x14000a2a0
cmp eax, 0xc560e961
je 0x14000a892
cmp eax, 0xd72c6f54
je 0x14000a89c
cmp eax, 0xdf6c1623
jne 0x14000a2a0
mov ecx, dword [0x1400314e0]
mov eax, dword [0x1400314e4]
lea edx, [rcx - 1]
imul edx, ecx
mov ecx, edx
not ecx
and ecx, 0x5fc3911e
and edx, 0xa03c6ee1
or edx, ecx
mov ecx, edx
xor ecx, 0xa03c6ee0
and ecx, 0xfffffffe
xor edx, 0x5fc3911f
or edx, ecx
mov ecx, edx
not ecx
and ecx, 0x9ff6a6db
and edx, 0x60095924
or edx, ecx
xor edx, 0x60095924
sete r8b
setne dl
cmp eax, 9
setg bl
cmp eax, 0xa
setl al
mov ecx, eax
xor cl, dl
and cl, al
and bl, r8b
and al, dl
or al, bl
mov edx, ecx
xor dl, al
test al, al
mov eax, 0xebcfa7a9
mov ebx, 0x2a728c65
cmovne eax, ebx
test cl, cl
mov ecx, 0xebcfa7a9
cmove eax, ecx
jmp 0x14000a299
cmp eax, 0x4f394e07
je 0x14000a913
cmp eax, 0x6a393bdd
jne 0x14000a9bb
mov eax, dword [0x1400314e0]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xdb911146
and ecx, 0x246eeeb9
or ecx, edx
xor ecx, 0x246eeeb8
xor eax, ecx
test eax, ecx
sete al
cmp dword [0x1400314e4], 0xa
setl cl
mov edx, ecx
xor dl, al
or cl, al
xor cl, 1
or cl, dl
mov eax, ecx
xor al, dl
mov ebx, 0xa03f074b
cmovne ebx, r12d
test cl, cl
mov eax, 0xa03f074b
jmp 0x14000a7ea
cmp eax, 0x806b6fcf
je 0x14000a929
cmp eax, 0x819cb101
jne 0x14000a2a0
movzx eax, byte [rbp + 7]
movzx ecx, byte [rbp + 6]
mov edx, eax
xor dl, 1
and dl, cl
xor cl, 1
mov ebx, eax
xor bl, cl
and bl, al
and cl, al
or cl, dl
mov eax, ebx
xor al, cl
test al, 1
mov edx, 0xeb1c74b1
mov edi, 0xdf6c1623
cmovne edx, edi
test cl, 1
mov eax, edx
cmovne eax, edi
test bl, 1
cmove eax, edx
jmp 0x14000a2a0
cmp eax, 0xeb1c74b1
je 0x14000a993
cmp eax, 0xebcfa7a9
jne 0x14000a2a0
mov eax, 0x30
call sym.___chkstk_ms
sub rsp, rax
mov rcx, rsp
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
add rsp, 0x20
mov eax, 0x2a728c65
jmp 0x14000a2a0
mov eax, dword [0x1400314e0]
mov ecx, dword [0x1400314e4]
lea edx, [rax - 1]
imul edx, eax
mov eax, edx
not eax
and eax, 0xfffffffe
xor edx, 1
or edx, eax
mov eax, edx
not eax
and eax, 0xc21e0a7e
and edx, 0x3de1f581
or edx, eax
xor edx, 0x3de1f581
sete dl
setne al
cmp ecx, 9
setg bl
cmp ecx, 0xa
setl cl
and cl, al
and dl, bl
or dl, cl
mov ecx, ebx
and cl, al
xor bl, al
or bl, cl
mov ecx, ebx
xor cl, dl
test bl, bl
mov eax, 0xfd3d3bef
mov ebx, 0xb5033a67
cmovne eax, ebx
test dl, dl
mov r15d, 0xb5033a67
cmove eax, ebx
test cl, cl
mov ecx, 0xfd3d3bef
cmove eax, ecx
jmp 0x14000a2a0
mov eax, 0xfd3d3bef
jmp 0x14000a2a0
mov eax, 0x73110583
mov esi, 1
jmp 0x14000a2a0
mov eax, 0x73110583
xor esi, esi
jmp 0x14000a2a0
mov eax, dword [0x1400314e0]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
not eax
and eax, 0xd92b0980
and ecx, 0x26d4f67f
or ecx, eax
mov eax, ecx
xor eax, 0x26d4f67f
xor ecx, 0x11230000
and ecx, 0x35a3646b
mov edx, eax
and edx, 0xca5c9b94
or edx, ecx
xor edx, 0xca5c9b95
and eax, 0xfffffffe
or eax, edx
cmp eax, 0xffffffff
sete al
cmp dword [0x1400314e4], 0xa
setl cl
mov edx, ecx
xor dl, al
or cl, al
xor cl, 1
or cl, dl
mov eax, ecx
xor al, dl
mov ebx, 0xb73f8aa6
cmovne ebx, r13d
test cl, cl
mov eax, 0xb73f8aa6
cmovne eax, ebx
jmp 0x14000a888
mov eax, 0x6a393bdd
jmp 0x14000a2a0
mov eax, 0x30
call sym.___chkstk_ms
sub rsp, rax
mov rdi, rsp
mov qword [rbp - 8], rdi
mov rax, qword [rbp - 8]
sub rsp, 0x20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
add rsp, 0x20
cmp dword [rdi + 0x20], 2
seta byte [rbp + 5]
mov eax, dword [0x1400314e0]
mov ecx, dword [0x1400314e4]
lea edx, [rax - 1]
imul edx, eax
mov eax, edx
not eax
mov ebx, eax
and ebx, 0xfffffffe
and edx, 1
or edx, ebx
xor eax, edx
test eax, edx
sete al
setne dl
cmp ecx, 0xa
setl bl
cmp ecx, 9
setg cl
and al, cl
or cl, dl
and bl, dl
or bl, al
mov edx, ebx
xor dl, cl
test bl, bl
mov eax, 0xebcfa7a9
mov ebx, 0xd72c6f54
cmovne eax, ebx
test cl, cl
mov ecx, 0xebcfa7a9
cmovne eax, ecx
test dl, dl
cmove eax, ebx
jmp 0x14000a2a0
mov eax, 0xb73f8aa6
jmp 0x14000a2a0
mov eax, dword [0x1400314e0]
mov ecx, dword [0x1400314e4]
lea edx, [rax - 1]
imul edx, eax
mov eax, edx
not eax
mov ebx, eax
and ebx, 0x9a6818cc
and edx, 0x6597e733
or edx, ebx
xor edx, 0x6597e732
xor eax, edx
test eax, edx
sete dl
setne al
cmp ecx, 9
setg bl
cmp ecx, 0xa
setl cl
and cl, al
and dl, bl
or dl, cl
mov ecx, ebx
and cl, al
xor bl, al
or bl, cl
mov ecx, ebx
xor cl, dl
test bl, bl
mov eax, 0xae4685b9
mov ebx, 0xeb1c74b1
cmovne eax, ebx
test dl, dl
cmove eax, ebx
test cl, cl
mov ecx, 0xae4685b9
cmove eax, ecx
jmp 0x14000a2a0
cmp byte [rbp + 5], 0
mov eax, 0x49ed6c9d
mov ecx, 0x8b5633d6
cmovne eax, ecx
jmp 0x14000a2a0
mov eax, dword [0x1400314e0]
mov ecx, dword [0x1400314e4]
lea edx, [rax - 1]
imul edx, eax
mov eax, edx
not eax
mov ebx, eax
and ebx, 0xfffffffe
and edx, 1
or edx, ebx
xor eax, edx
test eax, edx
setne al
cmp ecx, 9
setg dl
cmp ecx, 0xa
setl cl
xor cl, al
mov ebx, edx
and bl, al
xor dl, al
or dl, bl
mov ebx, ecx
xor bl, dl
test dl, dl
mov eax, 0x43264495
mov edx, 0xc560e961
cmovne eax, edx
test cl, cl
mov r13d, 0xc560e961
cmovne eax, edx
test bl, bl
mov ecx, 0x43264495
cmovne eax, ecx
jmp 0x14000a2a0
mov eax, 0x30
call sym.___chkstk_ms
sub rsp, rax
mov rcx, rsp
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
add rsp, 0x20
mov eax, 0xdf6c1623
jmp 0x14000a2a0
cmp eax, 0x73110583
jne 0x14000a2a0
mov rax, qword [rbp - 8]
mov eax, esi
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret