Function at 0x140025310
Capabilities:
Get system information on windows

Disassembly:
in al, dx
push rax
pop rsi
pop rbp
ret
mov r8d, 8
call fcn.140004d20
sbb byte [rdx - 0x74b70002], dl
jne case.0x14001be2b.359
sbb byte [rdx - 0x74b70002], dl
jne case.0x14001be2b.359
lea rcx, [rsi + 0x28]
call fcn.140023600
add byte [rax - 0x75], cl
sub byte [rax - 0x7b], r9b
invalid
add byte [rax - 0x75], cl
sub byte [rax - 0x7b], r9b
sal byte [rbx + rbx + 0x48], 0x8b
je 0x14001bb39
invalid
invalid
invalid
je 0x14001bb39
mov rcx, qword [rbp - 0x10]
mov rcx, qword [rcx + 0x30]
xor byte [r8 - 0x3f], cl
loopne 0x14001bb2d
xor byte [r8 - 0x3f], cl
loopne 0x14001bb2d
lea rdx, [rax + rax*2]
adc al, 0x40
mov r8d, 8
mov r8d, 8
call fcn.140004d20
nop
add rsp, 0x20
pop rdi
pop rsi
pop rbp
ret
add ecx, dword [rax - 0x73]
adc al, 0x40
mov r8d, 8
add byte [rax], al
add al, ch
xchg rcx, rax
invalid
call qword [rax + 0x20c48348]
pop rdi
pop rsi
pop rbp
ret
add byte [rax], al
add al, ch
xchg rcx, rax
invalid
int3
nop
add rsp, 0x60
pop rbx
pop rdi
pop rsi
pop r14
pop rbp
jmp 0x140025310
int3
mov rcx, qword [rcx]
test rcx, rcx
je 0x14001be37
mov eax, ecx
and eax, 3
lea rdx, [0x140048460]
movsxd rax, dword [rdx + rax*4]
add rax, rdx
jmp rax
movzx eax, byte [rcx + 0x10]
cmp al, 0x24
sete al
ret
xor eax, eax
ret
movzx eax, byte [rcx + 0xf]
cmp al, 0x24
sete al
ret
shr rcx, 0x20
mov al, 1
cmp ecx, 0x3e2
jle 0x14001be9e
cmp ecx, 0x271c
jle 0x14001bec5
lea edx, [rcx - 0x271d]
cmp edx, 0x34
ja case.default.0x14001be77
lea rcx, [0x14004893c]
movsxd rdx, dword [rcx + rdx*4]
add rdx, rcx
jmp rdx
shr rcx, 0x20
cmp ecx, 0x28
ja case.default.0x14001be94
add r8b, byte [rax]
invalid
add r8b, byte [rax]
add byte [rax - 0x73], cl
lea rax, [0x140048470]
lea rax, [0x140048470]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
mov al, 1
cmp al, 0x24
sete al
ret
lea edx, [rcx - 2]
cmp edx, 0x109
ja case.default.0x14001bebb
lea rcx, [0x140048514]
movsxd rdx, dword [rcx + rdx*4]
add byte [rax + 0x63], cl
adc al, 0x91
add rdx, rcx
jmp rdx
xor eax, eax
cmp al, 0x24
sete al
invalid
ret
rol bl, 0x81
stc
invalid
cmp ecx, 0x50e
jle 0x14001befe
cmp ecx, 0x1b7f
jg 0x14001bf3e
cmp ecx, 0x1715
jg 0x14001c082
cmp ecx, 0x50f
je case.0x14001be94.26
cmp ecx, 0x5b4
je case.0x14001bebb.121
jmp case.0x14001bebb.4
cmp ecx, 0x46a
jle 0x14001bfaf
cmp ecx, 0x4ce
jg case.0x14001be2b.8
cmp ecx, 0x46b
je case.0x14001be94.30
add dword ds:[rax], eax
invalid
add dword ds:[rax], eax
add byte [rcx + 0x476f9], al
add byte [rax], al
jne case.0x14001bebb.4
mov al, 0x20
cmp al, 0x24
cmp ecx, 0x476
add byte [rax], al
jne case.0x14001bebb.4
mov al, 0x20
cmp al, 0x24
sete al
ret
mov al, 0x21
cmp al, 0x24
sete al
ret
cmp ecx, 0x2021
jg case.0x14001be2b.26
cmp ecx, 0x1b80
je case.0x14001bebb.121
cmp ecx, 0x1f4e
je case.0x14001bebb.121
add dword [rax], eax
invalid
stc
invalid
add dword [rax], eax
add cl, ch
add dword gs:[rax], eax
add dword [rax], eax
jmp case.0x14001bebb.4
add dword [rax], eax
add byte [rax + 0xf243c26], dh
mov al, 0x26
cmp al, 0x24
sete al
xchg esp, eax
invalid
ret
xchg esp, eax
rol bl, 0xb0
mov al, 0x18
cmp al, 0x24
mov al, 0x18
cmp al, 0x24
sete al
ret
xchg esp, eax
rol bl, 0xb0
mov al, 0xc
cmp al, 0x24
invalid
mov al, 0xc
cmp al, 0x24
sete al
xchg esp, eax
invalid
ret
xchg esp, eax
rol bl, 0xb0
mov al, 0x14
cmp al, 0x24
invalid
mov al, 0x14
cmp al, 0x24
sete al
xchg esp, eax
invalid
ret
xchg esp, eax
rol bl, 0xb0
mov al, 0xb
cmp al, 0x24
mov al, 0xb
cmp al, 0x24
sete al
ret
xchg esp, eax
rol bl, 0x8d
lea eax, [rcx - 0x3c2a]
cmp eax, 2
invalid
invalid
lea eax, [rcx - 0x3c2a]
cmp eax, 2
jb case.0x14001bebb.121
add byte [rax], al
inc dword [rbx - 0x7df0fd08]
add dword es:[rax], eax
add byte [rax], al
cmp ecx, 0x35ed
je case.0x14001bebb.121
jmp case.0x14001bebb.4
invalid
stc
jrcxz 0x14001bfb6
add byte [rax], al
cmp ecx, 0x35ed
je case.0x14001bebb.121
jmp case.0x14001bebb.4
cmp ecx, 0x3e3
add byte [rax], al
je case.0x14001bebb.121
test byte [rcx], cl
add dword [rax], eax
add byte [rcx + 0x41df9], al
add byte [rdi], cl
test ch, bh
add byte [rax], al
add byte [rcx + 0x461f9], al
stc
invalid
add al, 0
add byte [rdi], cl
test cl, dh
cmp ecx, 0x41d
je case.0x14001bebb.121
cmp ecx, 0x461
je case.0x14001bebb.121
add byte [rax], al
invalid
stc
invalid
add byte [rax], al
add cl, ch
hlt
jmp case.0x14001bebb.4
mov al, 2
cmp al, 0x24
sete al
ret
mov al, 3
cmp al, 0x24
sete al
ret
mov al, 6
cmp al, 0x24
sete al
ret
mov al, 7
cmp al, 0x24
sete al
ret
mov al, 8
cmp al, 0x24
sete al
ret
mov al, 9
cmp al, 0x24
sete al
ret
mov al, 0xa
cmp al, 0x24
sete al
ret
mov al, 0xd
cmp al, 0x24
sete al
ret
mov al, 0x1f
cmp al, 0x24
sete al
ret
mov al, 0x11
cmp al, 0x24
sete al
ret
mov al, 0x24
cmp al, 0x24
sete al
ret
mov al, 0x19
cmp al, 0x24
sete al
ret
mov al, 0x10
cmp al, 0x24
sete al
ret
mov al, 0x1c
cmp al, 0x24
sete al
ret
mov al, 0x1b
cmp al, 0x24
sete al
ret
mov al, 0xe
cmp al, 0x24
sete al
ret
mov al, 0x1a
cmp al, 0x24
sete al
ret
mov al, 0x1e
cmp al, 0x24
sete al
ret
cmp ecx, 0x150
je case.0x14001be94.15
push rax
add dword [rax], eax
add byte [rdx + rcx - 0x7f], dh
stc
push rdx
add al, byte [rax]
add byte [rsp + rcx*2 - 0x15], dh
push rdx
cmp ecx, 0x252
je case.0x14001bebb.121
jmp case.0x14001bebb.4
mov al, 0xf
cmp al, 0x24
sete al
ret
cmp ecx, 0x1716
je case.0x14001bebb.121
cmp ecx, 0x1b64
je case.0x14001bebb.121
jmp case.0x14001bebb.4
cmp ecx, 0x4cf
je case.0x14001be77.10051
cmp ecx, 0x4d0
jne case.0x14001bebb.4
mov al, 4
cmp al, 0x24
sete al
ret
mov al, 5
cmp al, 0x24
sete al
ret
cmp ecx, 0x2022
je case.0x14001bebb.121
cmp ecx, 0x25e9
jne case.0x14001bebb.4
mov al, 0x16
cmp al, 0x24
sete al
ret
mov al, 0x28
cmp al, 0x24
sete al
ret
mov al, 0x29
cmp al, 0x24
sete al
ret
mov al, 0x12
cmp al, 0x24
sete al
ret
mov al, 0x13
cmp al, 0x24
sete al
ret
mov al, 0x15
cmp al, 0x24
sete al
ret
mov al, 0x17
cmp al, 0x24
sete al
ret
mov al, 0x1d
cmp al, 0x24
sete al
ret
mov al, 0x22
cmp al, 0x24
sete al
ret
mov al, 0x23
cmp al, 0x24
sete al
ret
mov al, 0x25
cmp al, 0x24
sete al
ret
mov al, 0x27
cmp al, 0x24
sete al
ret
sub rsp, 0x58
xorps xmm0, xmm0
movaps xmmword [rsp + 0x40], xmm0
movaps xmmword [rsp + 0x30], xmm0
movaps xmmword [rsp + 0x20], xmm0
lea rcx, [rsp + 0x20]
call sub.KERNEL32.dll_GetSystemInfo
mov eax, dword [rsp + 0x40]
add rsp, 0x58
ret