Function at 0x14014ab10
Capabilities:
Get system information on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x58
lea rbp, [rsp + 0x50]
movaps xmmword [rbp - 0x10], xmm6
mov eax, dword [0x1415c2340]
xor eax, dword [0x1415c2344]
add eax, 0x68af2219
mov dword [rbp - 0x28], eax
mov dword [rbp - 0x24], 0xcd976d4b
lea rax, [rbp - 0x24]
mov qword [rbp - 0x20], rax
xorps xmm6, xmm6
mov rsi, qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edi, 0x7025756b
mov r14d, 0x8b9f6875
lea r15, [0x14159ef80]
mov r12d, 0x43e58eac
mov r13d, 0xa2820d77
jmp 0x14014ab96
cmp dword [rbp - 0x28], 0x8b3a3d7b
mov eax, 0xad5540d1
cmovae eax, edi
nop word cs:[rax + rax]
mov rcx, qword [rbp - 0x20]
mov dword [rcx], eax
mov eax, dword [rbp - 0x24]
cmp eax, 0x21d4b4ba
jg 0x14014ac50
cmp eax, 0xcd976d4a
jg 0x14014ac90
cmp eax, 0xa09c69f3
je 0x14014ad60
cmp eax, 0xa2820d77
je 0x14014ad6f
cmp eax, 0xad5540d1
jne 0x14014ab96
mov eax, dword [0x1415c2348]
xor eax, dword [0x1415c234c]
imul rcx, rax, 0x3a18e351
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
mov ecx, eax
add ecx, ecx
neg ecx
lea ebx, [rax + rcx]
add ebx, 0x8a4fb587
or ebx, 0x6be5d9a0
mov eax, 0x30
call fcn.14021cf50
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x30], rax
movups xmmword [rax + 0x20], xmm6
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax], xmm6
mov rcx, qword [rbp - 0x30]
sub rsp, 0x20
call rsi
add rsp, 0x20
mov rax, qword [rbp - 0x30]
add rax, 0x20
cmp ebx, 0xaa81bc72
mov qword [rbp - 0x50], rax
mov eax, 0x425b75e0
cmove eax, edi
jmp 0x14014ab90
cmp eax, 0x43e58eab
jg 0x14014ad16
cmp eax, 0x21d4b4bb
je 0x14014ad8f
cmp eax, 0x33f86414
je 0x14014ad9e
cmp eax, 0x425b75e0
jne 0x14014ab96
mov rax, qword [rbp - 0x20]
mov dword [rax], 0x33f86414
jmp 0x14014ab96
cmp eax, 0xcd976d4b
je 0x14014ab76
cmp eax, 0xd0910c3d
je 0x14014add2
cmp eax, 0xf8e6825c
jne 0x14014ab96
movzx eax, byte [rbp - 0x11]
mov rcx, r15
test rax, rax
jne 0x14014acc1
mov rcx, qword [rbp - 0x48]
mov edx, dword [0x1415c2360]
mov r8d, dword [0x1415c2364]
mov r9d, edx
not r9d
and r9d, r8d
not r8d
and r8d, edx
sub r8d, r9d
imul r8, r14
shr r8, 0x3e
imul edx, r8d, 0x4d233f0c
imul rdx, rdx, 0x35a6ff09
shr rdx, 0x3c
cmp edx, 0x16bcc219
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rcx
mov eax, 0xf8e6825c
cmovb eax, r12d
jmp 0x14014ab90
cmp eax, 0x48286144
je 0x14014ae4e
cmp eax, 0x7025756b
jne 0x14014ae5d
mov eax, 0x30
call fcn.14021cf50
sub rsp, rax
mov rcx, rsp
movups xmmword [rcx + 0x20], xmm6
movups xmmword [rcx + 0x10], xmm6
movups xmmword [rcx], xmm6
sub rsp, 0x20
call rsi
add rsp, 0x20
mov rax, qword [rbp - 0x20]
mov dword [rax], 0xad5540d1
jmp 0x14014ab96
mov rax, qword [rbp - 0x20]
mov dword [rax], 0xa2820d77
jmp 0x14014ab96
mov rax, qword [rbp - 0x50]
mov eax, dword [rax]
test rax, rax
sete byte [rbp - 0x11]
mov qword [rbp - 0x48], rax
mov rax, qword [rbp - 0x20]
mov dword [rax], 0x48286144
jmp 0x14014ab96
mov rax, qword [rbp - 0x20]
mov dword [rax], 0xf8e6825c
jmp 0x14014ab96
mov eax, dword [0x1415c2350]
mov ecx, eax
not ecx
or ecx, dword [0x1415c2354]
add eax, ecx
add eax, 0x245283d7
and eax, 0xbc9b4e9f
xor eax, 0x80134880
cmp eax, 0x496c662c
mov eax, 0xa09c69f3
cmovne eax, r13d
jmp 0x14014ab90
mov eax, dword [0x1415c2358]
mov ecx, dword [0x1415c235c]
not eax
not ecx
and ecx, eax
mov eax, ecx
not eax
and ecx, 0x5adbbeb9
mov edx, eax
and edx, 0xa5244146
imul edx, ecx
mov ecx, eax
and ecx, 0x5adbbeb9
or eax, 0x5adbbeb9
imul eax, ecx
add eax, edx
add eax, 0x6f7fbef8
mov ecx, eax
not ecx
and ecx, 0x3ff65499
mov edx, eax
and edx, 0xc009ab66
imul edx, ecx
mov ecx, eax
and ecx, 0x3ff65499
or eax, 0x3ff65499
imul eax, ecx
add eax, edx
cmp eax, 0x9c5ce9d3
mov eax, 0x21d4b4bb
mov ecx, 0xf8e6825c
cmovae eax, ecx
jmp 0x14014ab90
mov rax, qword [rbp - 0x20]
mov dword [rax], 0xd0910c3d
jmp 0x14014ab96
cmp eax, 0x43e58eac
jne 0x14014ab96
mov rax, qword [rbp - 0x40]
mov rdx, qword [rbp - 0x38]
movaps xmm6, xmmword [rbp - 0x10]
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret