Function at 0x140008eb0
Capabilities:
Get system information on windows

Disassembly:
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xc0
mov qword [rbp - 0x69], 0xfffffffffffffffe
mov qword [rsp + 0xf0], rbx
mov rax, qword [0x14003e050]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov rbx, r8
mov rdi, rdx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x51], xmm0
movdqa xmm1, xmmword [0x140035d00]
movdqu xmmword [rbp - 0x51], xmm1
xor r15d, r15d
mov word [rbp - 0x61], r15w
call fcn.140017270
mov r14, rax
mov rcx, rax
call fcn.140017500
test al, al
jne 0x140008f24
mov rdx, rdi
mov rcx, r14
call fcn.140017580
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x140009157
lea rdx, [0x140034f68]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140009157
lea rcx, [rbp - 1]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, word [rbp - 1]
cmp ax, 9
je 0x140008f71
cmp ax, 6
jne 0x140009157
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
movdqa xmm1, xmmword [0x140035d00]
movdqu xmmword [rbp - 0x11], xmm1
mov word [rbp - 0x21], r15w
mov r8d, 0x14
lea rdx, str.2345ImageThumb64.dll
lea rcx, [rbp - 0x21]
call fcn.140002c20
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x31], xmm0
movdqa xmm1, xmmword [0x140035d00]
movdqu xmmword [rbp - 0x31], xmm1
mov word [rbp - 0x41], r15w
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop word [rax + rax]
inc r8
cmp word [rbx + r8*2], 0
jne 0x140008fd0
mov rdx, rbx
lea rcx, [rbp - 0x41]
call fcn.140002c20
nop
lea r8, [rbp - 0x21]
lea rdx, [rbp - 0x41]
lea rcx, [rbp - 1]
call fcn.140008020
mov rsi, rax
lea rax, [rbp - 0x61]
cmp rax, rsi
je 0x14000902d
lea rcx, [rbp - 0x61]
call fcn.140002bb0
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x61], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rbp - 0x51], xmm1
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], 7
mov word [rsi], r15w
mov rdx, qword [rbp + 0x17]
cmp rdx, 8
jb 0x14000906d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009068
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009762
call fcn.14001867c
movdqa xmm0, xmmword [0x140035d00]
movdqu xmmword [rbp + 0xf], xmm0
mov word [rbp - 1], r15w
mov rdx, qword [rbp - 0x29]
cmp rdx, 8
jb 0x1400090bf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400090ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009768
call fcn.14001867c
movdqa xmm0, xmmword [0x140035d00]
movdqu xmmword [rbp - 0x31], xmm0
mov word [rbp - 0x41], r15w
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x140009111
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000910c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000976e
call fcn.14001867c
movdqa xmm0, xmmword [0x140035d00]
movdqu xmmword [rbp - 0x11], xmm0
mov word [rbp - 0x21], r15w
lea rcx, [rbp - 0x61]
call fcn.140006ba0
test al, al
je 0x14000932e
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 8
cmovae rdx, qword [rbp - 0x61]
mov rcx, r14
call fcn.140017220
test al, al
jne 0x14000932e
jmp 0x1400096cc
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x31], xmm0
movdqa xmm1, xmmword [0x140035d00]
movdqu xmmword [rbp - 0x31], xmm1
mov word [rbp - 0x41], r15w
mov r8d, 0x12
lea rdx, str.2345ImageThumb.dll
lea rcx, [rbp - 0x41]
call fcn.140002c20
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
movdqa xmm1, xmmword [0x140035d00]
movdqu xmmword [rbp - 0x11], xmm1
mov word [rbp - 0x21], r15w
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop dword [rax]
inc r8
cmp word [rbx + r8*2], 0
jne 0x1400091b0
mov rdx, rbx
lea rcx, [rbp - 0x21]
call fcn.140002c20
nop
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x21]
lea rcx, [rbp - 1]
call fcn.140008020
mov rsi, rax
lea rax, [rbp - 0x61]
cmp rax, rsi
je 0x14000920d
lea rcx, [rbp - 0x61]
call fcn.140002bb0
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x61], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rbp - 0x51], xmm1
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], 7
mov word [rsi], r15w
mov rdx, qword [rbp + 0x17]
cmp rdx, 8
jb 0x14000924d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009248
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009774
call fcn.14001867c
movdqa xmm0, xmmword [0x140035d00]
movdqu xmmword [rbp + 0xf], xmm0
mov word [rbp - 1], r15w
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x14000929f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000929a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000977a
call fcn.14001867c
movdqa xmm0, xmmword [0x140035d00]
movdqu xmmword [rbp - 0x11], xmm0
mov word [rbp - 0x21], r15w
mov rdx, qword [rbp - 0x29]
cmp rdx, 8
jb 0x1400092f1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400092ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009780
call fcn.14001867c
movdqa xmm0, xmmword [0x140035d00]
movdqu xmmword [rbp - 0x31], xmm0
mov word [rbp - 0x41], r15w
lea rcx, [rbp - 0x61]
call fcn.140006ba0
test al, al
je 0x14000932e
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 8
cmovae rdx, qword [rbp - 0x61]
mov rcx, r14
call fcn.140017220
test al, al
je 0x1400096cc
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x31], xmm0
movdqa xmm1, xmmword [0x140035d00]
movdqu xmmword [rbp - 0x31], xmm1
mov word [rbp - 0x41], r15w
mov r8d, 0xd
lea rdx, str.FreeImage.dll
lea rcx, [rbp - 0x41]
call fcn.140002c20
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
movdqa xmm1, xmmword [0x140035d00]
movdqu xmmword [rbp - 0x11], xmm1
mov word [rbp - 0x21], r15w
mov r8, rdi
nop dword [rax]
inc r8
cmp word [rbx + r8*2], 0
jne 0x140009380
mov rdx, rbx
lea rcx, [rbp - 0x21]
call fcn.140002c20
nop
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x21]
lea rcx, [rbp - 1]
call fcn.140008020
mov rsi, rax
lea rax, [rbp - 0x61]
cmp rax, rsi
je 0x1400093dd
lea rcx, [rbp - 0x61]
call fcn.140002bb0
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x61], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rbp - 0x51], xmm1
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], 7
mov word [rsi], r15w
mov rdx, qword [rbp + 0x17]
cmp rdx, 8
jb 0x14000941d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009418
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009786
call fcn.14001867c
movdqa xmm0, xmmword [0x140035d00]
movdqu xmmword [rbp + 0xf], xmm0
mov word [rbp - 1], r15w
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x14000946f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000946a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000978c
call fcn.14001867c
movdqa xmm0, xmmword [0x140035d00]
movdqu xmmword [rbp - 0x11], xmm0
mov word [rbp - 0x21], r15w
mov rdx, qword [rbp - 0x29]
cmp rdx, 8
jb 0x1400094c1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400094bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009792
call fcn.14001867c
movdqa xmm0, xmmword [0x140035d00]
movdqu xmmword [rbp - 0x31], xmm0
mov word [rbp - 0x41], r15w
lea rcx, [rbp - 0x61]
call fcn.140006ba0
test al, al
je 0x1400094fe
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 8
cmovae rdx, qword [rbp - 0x61]
mov rcx, r14
call fcn.140017220
test al, al
je 0x1400096cc
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x31], xmm0
movdqa xmm1, xmmword [0x140035d00]
movdqu xmmword [rbp - 0x31], xmm1
mov word [rbp - 0x41], r15w
mov r8d, 0x11
lea rdx, str.FreeImagePlus.dll
lea rcx, [rbp - 0x41]
call fcn.140002c20
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
movdqa xmm1, xmmword [0x140035d00]
movdqu xmmword [rbp - 0x11], xmm1
mov word [rbp - 0x21], r15w
nop dword [rax]
inc rdi
cmp word [rbx + rdi*2], 0
jne 0x140009550
mov r8, rdi
mov rdx, rbx
lea rcx, [rbp - 0x21]
call fcn.140002c20
nop
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x21]
lea rcx, [rbp - 1]
call fcn.140008020
mov rbx, rax
lea rax, [rbp - 0x61]
cmp rax, rbx
je 0x1400095af
lea rcx, [rbp - 0x61]
call fcn.140002bb0
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x61], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x51], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 7
mov word [rbx], r15w
mov rdx, qword [rbp + 0x17]
cmp rdx, 8
jb 0x1400095ef
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400095ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009798
call fcn.14001867c
movdqa xmm0, xmmword [0x140035d00]
movdqu xmmword [rbp + 0xf], xmm0
mov word [rbp - 1], r15w
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x140009641
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000963c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000979e
call fcn.14001867c
movdqa xmm0, xmmword [0x140035d00]
movdqu xmmword [rbp - 0x11], xmm0
mov word [rbp - 0x21], r15w
mov rdx, qword [rbp - 0x29]
cmp rdx, 8
jb 0x140009693
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000968e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400097a4
call fcn.14001867c
movdqa xmm0, xmmword [0x140035d00]
movdqu xmmword [rbp - 0x31], xmm0
mov word [rbp - 0x41], r15w
lea rcx, [rbp - 0x61]
call fcn.140006ba0
test al, al
je 0x1400096e6
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 8
cmovae rdx, qword [rbp - 0x61]
mov rcx, r14
call fcn.140017220
test al, al
jne 0x1400096e6
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 8
cmovae rdx, qword [rbp - 0x61]
mov rcx, r14
call fcn.1400175d0
xor bl, bl
jmp 0x1400096e8
mov bl, 1
mov rdx, qword [rbp - 0x49]
cmp rdx, 8
jb 0x140009724
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000971f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000975c
call fcn.14001867c
movdqa xmm0, xmmword [0x140035d00]
movdqu xmmword [rbp - 0x51], xmm0
mov word [rbp - 0x61], r15w
movzx eax, bl
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1400183b0
mov rbx, qword [rsp + 0xf0]
add rsp, 0xc0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
call fcn.14001c634
nop
call fcn.14001c634
nop
call fcn.14001c634
nop
call fcn.14001c634
nop
call fcn.14001c634
nop
call fcn.14001c634
nop
call fcn.14001c634
nop
call fcn.14001c634
nop
call fcn.14001c634
nop
call fcn.14001c634
nop
call fcn.14001c634
nop
call fcn.14001c634
nop
call fcn.14001c634
int3