Function at 0x140002670
Capabilities:
Get system information on windows

Disassembly:
push rsi
sub rsp, 0xa0
mov rax, qword [0x140086080]
xor rax, rsp
mov qword [rsp + 0x98], rax
mov r8d, ecx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
jne 0x1400026cb
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Pls_open_process_IS_Launcher.
call fcn.140004990
mov rcx, rax
lea rdx, [0x140004b60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1400028b2
mov qword [rsp + 0xb8], rbx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0xc0], rbp
mov qword [rsp + 0xc8], rdi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov rdi, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
cmp rdi, rbp
jae 0x14000286e
mov r9d, Ordinal_50
lea r8, [rsp + 0x30]
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
test rax, rax
je 0x14000284b
cmp dword [rsp + 0x50], 0x1000
jne 0x1400027aa
cmp dword [rsp + 0x54], 4
jne 0x1400027aa
mov rcx, qword [rsp + 0x48]
call fcn.140067dd4
mov r9, qword [rsp + 0x48]
mov rbx, rax
mov rdx, qword [rsp + 0x30]
lea rax, [rsp + 0x90]
mov r8, rbx
mov qword [rsp + 0x20], rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x14000283b
mov rdx, qword [rsp + 0x90]
xor ecx, ecx
test rdx, rdx
je 0x1400027a2
xor eax, eax
nop dword [rax + rax]
cmp dword [rax + rbx], 0x7275702d
jne 0x140002799
cmp word [rax + rbx + 4], 0x5f65
jne 0x140002799
cmp byte [rax + rbx + 6], 0x32
je 0x1400027bd
inc ecx
mov eax, ecx
cmp rax, rdx
jb 0x140002780
mov rcx, rbx
call fcn.140067b40
add rdi, qword [rsp + 0x48]
cmp rdi, rbp
jb 0x140002701
jmp 0x14000286e
mov edx, ecx
lea r8, str._pure_0
add rdx, qword [rsp + 0x30]
mov r9d, 7
mov rcx, rsi
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
test eax, eax
je 0x140002832
lea rdx, str.e_1_32m
call fcn.140004990
mov rcx, rax
lea rdx, str.Launcher_modified.
call fcn.140004990
mov rcx, rax
lea rdx, str.e_0m
call fcn.140004990
mov rcx, rax
lea rdx, [0x140004b60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rbx
call fcn.140067b40
jmp 0x140002891
lea rdx, str.Failed_to_write_memory.
jmp 0x140002813
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Failed_to_read_memory.
jmp 0x140002813
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Failed_to_query_memory.
call fcn.140004990
mov rcx, rax
lea rdx, [0x140004b60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x14007a498]
call fcn.140004990
mov rcx, rax
lea rdx, [0x140004b60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbp, qword [rsp + 0xc0]
mov rbx, qword [rsp + 0xb8]
mov rdi, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0x98]
xor rcx, rsp
call fcn.140067b20
add rsp, 0xa0
pop rsi
ret