Function at 0x18007be96
Capabilities:
Get system information on windows

Disassembly:
jmp 0x18015d4b0
movss dword [rsp + 8], xmm0
push rbp
push rdi
sub rsp, 0x3e8
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x8e
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x1801cc9c0]
xor rax, rbp
mov qword [rbp + 0x3a0], rax
lea rcx, [0x1801e276b]
call fcn.18007c341
nop
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rbp + 8], rax
lea rcx, [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
nop
mov qword [rbp + 0xc8], 0x100000
mov edx, 0x20
lea rcx, [rbp + 0xe8]
call fcn.18007bdbf
lea rcx, [rbp + 0x344]
call fcn.18007a7e4
mov r8, rax
mov edx, 0x100000
lea rcx, [rbp + 0xe8]
call fcn.18007b8c4
nop
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x128], rax
jmp 0x18015d56d
mov rax, qword [rbp + 0x90]
mov rcx, qword [rbp + 0x128]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x128], rax
mov rax, qword [rbp + 0x38]
cmp qword [rbp + 0x128], rax
jae 0x18015d76a
mov r9d, 0x30
lea r8, [rbp + 0x78]
mov rdx, qword [rbp + 0x128]
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
test rax, rax
jne 0x18015d5a0
jmp 0x18015d552
cmp dword [rbp + 0x98], 0x1000
jne 0x18015d765
cmp dword [rbp + 0x9c], 4
je 0x18015d5cf
cmp dword [rbp + 0x9c], 0x40
je 0x18015d5cf
cmp dword [rbp + 0x9c], 2
jne 0x18015d765
lea rcx, [rbp + 0xe8]
call fcn.18007a9e7
lea rcx, [rbp + 0x148]
mov qword [rsp + 0x20], rcx
mov r9d, 0x100000
mov r8, rax
mov rdx, qword [rbp + 0x128]
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x18015d721
xor edx, edx
mov rax, qword [rbp + 0x148]
mov ecx, 4
div rcx
mov qword [rbp + 0x168], rax
lea rcx, [rbp + 0xe8]
call fcn.18007a9e7
mov qword [rbp + 0x188], rax
mov qword [rbp + 0x1a8], 0
jmp 0x18015d652
mov rax, qword [rbp + 0x1a8]
inc rax
mov qword [rbp + 0x1a8], rax
mov rax, qword [rbp + 0x168]
cmp qword [rbp + 0x1a8], rax
jae 0x18015d71f
mov rax, qword [rbp + 0x188]
mov rcx, qword [rbp + 0x1a8]
movss xmm0, dword [rax + rcx*4]
ucomiss xmm0, dword [rbp + 0x3d0]
jp 0x18015d71a
jne 0x18015d71a
mov rax, qword [rbp + 0x128]
mov rcx, qword [rbp + 0x1a8]
lea rax, [rax + rcx*4]
mov qword [rbp + 0x398], rax
lea rdx, str.Found_value_at_address:_0x
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.18007a3cf
lea rdx, [0x18007c03a]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rcx, qword [rbp + 0x398]
mov rdx, rcx
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x18007a181]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rax, qword [rbp + 0x128]
mov rcx, qword [rbp + 0x1a8]
lea rax, [rax + rcx*4]
mov qword [rbp + 0x368], rax
lea rcx, [rbp + 0xe8]
call fcn.18007c017
mov rax, qword [rbp + 0x368]
jmp 0x18015d788
jmp 0x18015d641
jmp 0x18015d765
lea rdx, str.Failed_to_read_memory_at_address:_0x
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.18007a3cf
lea rdx, [0x18007c03a]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rdx, qword [rbp + 0x128]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x18007a181]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
jmp 0x18015d552
mov qword [rbp + 0x388], 0
lea rcx, [rbp + 0xe8]
call fcn.18007c017
mov rax, qword [rbp + 0x388]
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, reloc.XINPUT1_3.dll_Ordinal_4
call fcn.18007bd6a
mov rax, rdi
mov rcx, qword [rbp + 0x3a0]
xor rcx, rbp
call fcn.18007b0a4
lea rsp, [rbp + 0x3b8]
pop rdi
pop rbp
ret