Function at 0x140052d20
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xb0
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str._Activating_WallHack_V7
lea rcx, [0x1402060b8]
call fcn.140044a20
lea rcx, [rbp + 0x17]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea rdx, str.HD_Player.exe
call fcn.14004efb0
test eax, eax
jne 0x140052d77
xor ecx, ecx
jmp 0x140052d9c
mov dword [0x1402286b8], eax
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x1402286c0], rax
xor ecx, ecx
test rax, rax
setne cl
test ecx, ecx
je 0x140052f6f
mov dword [rbp - 0x39], 0x8637bdea
mov dword [rbp - 0x35], 0x238a8535
mov dword [rbp - 0x31], 0x229a87ee
mov byte [rbp - 0x2d], 0xee
lea rdi, [rbp - 0x39]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], 0
mov ecx, reloc.WS2_32.dll_listen
call fcn.1401277d0
mov rbx, rax
mov qword [rbp - 0x19], rax
lea rsi, [rax + 0xd]
mov qword [rbp - 9], rsi
mov r8d, reloc.WS2_32.dll_listen
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 0x11], rsi
mov dword [rbp - 0x29], 0x600000ea
mov dword [rbp - 0x25], 0x408a85bf
mov dword [rbp - 0x21], 0x409a87ee
mov byte [rbp - 0x1d], 0xee
lea r15, [rbp - 0x29]
xorps xmm0, xmm0
movdqu xmmword [rbp - 1], xmm0
mov qword [rbp + 0xf], 0
mov ecx, reloc.WS2_32.dll_listen
call fcn.1401277d0
mov rdi, rax
mov qword [rbp - 1], rax
lea r14, [rax + 0xd]
mov qword [rbp + 0xf], r14
mov r8d, reloc.WS2_32.dll_listen
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp + 7], r14
lea rax, [0x140228db8]
mov qword [rsp + 0x28], rax
cmp byte [0x1402074a4], 0
je 0x140052eb6
mov qword [rsp + 0x20], rdi
mov r9, rbx
call fcn.14004f080
movzx eax, al
mov r8d, eax
xor r8, 1
add r8, 0x10
lea r9, str._Failed_to_Inject
lea rdx, str.WallHack_Enabled
test al, al
cmove rdx, r9
lea rcx, [0x1402060b8]
call fcn.140044a20
mov edx, 0x190
mov ecx, reloc.WLDAP32.dll_Ordinal_200
jmp 0x140052ef1
mov qword [rsp + 0x20], rbx
mov r9, rdi
call fcn.14004f080
movzx eax, al
lea r8, [rax + 0x12]
lea rcx, str._Failed_to_disable
lea rdx, str.WallHack_:_Disabled
test al, al
cmove rdx, rcx
lea rcx, [0x1402060b8]
call fcn.140044a20
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
nop
test rdi, rdi
je 0x140052f34
sub r14, rdi
mov rax, rdi
cmp r14, 0x1000
jb 0x140052f28
add r14, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140052f28
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, r14
mov rcx, rdi
call fcn.140127b1c
nop
test rbx, rbx
je 0x140052f6f
sub rsi, rbx
mov rax, rbx
cmp rsi, 0x1000
jb 0x140052f64
add rsi, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140052f64
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, rsi
mov rcx, rbx
call fcn.140127b1c
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret