Function at 0x140001690
Capabilities:
Get disk size
Get memory capacity
Get system information on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x30]
sub rsp, 0x130
mov rax, qword [0x140008008]
xor rax, rsp
mov qword [rbp + 0x20], rax
mov rdi, rcx
mov qword [rsp + 0x48], rcx
xor r13d, r13d
mov dword [rsp + 0x30], r13d
mov qword [rcx], r13
mov qword [rcx + 0x10], r13
mov qword [rcx + 0x18], send
mov byte [rcx], r13b
mov dword [rsp + 0x30], 1
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov r12d, send
mov r8d, r12d
lea rdx, str.CPU_Architecture:
mov rcx, rdi
call fcn.140002b80
movzx eax, word [rsp + 0x50]
mov rcx, rdi
test eax, eax
je 0x14000174a
cmp eax, 6
je 0x14000173b
cmp eax, 9
je 0x140001732
lea r8d, [r13 + 7]
lea rdx, str.Unknown
jmp 0x140001757
lea rdx, [0x1400056c0]
jmp 0x140001751
mov r8d, 7
lea rdx, str.Itanium
jmp 0x140001757
lea rdx, [0x1400056bc]
mov r8d, 3
call fcn.140002b80
mov r8d, 1
lea rdx, [0x1400056d8]
mov rcx, rdi
call fcn.140002b80
mov dword [rbp - 0x80], 0x40
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov r8, qword [rbp - 0x78]
shr r8, 0x14
lea r9, [rbp + 0x15]
movabs rbx, 0xcccccccccccccccd
nop dword [rax + rax]
dec r9
mov rax, rbx
mul r8
shr rdx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8, rdx
test rdx, rdx
jne 0x1400017a0
mov qword [rbp - 0x40], r13
mov r8, r13
mov qword [rbp - 0x30], r13
mov ecx, send
mov qword [rbp - 0x28], rcx
mov byte [rbp - 0x40], r8b
lea rax, [rbp + 0x15]
cmp r9, rax
je 0x140001806
lea r8, [rbp + 0x15]
sub r8, r9
mov rdx, r9
lea rcx, [rbp - 0x40]
call fcn.140002a20
mov rcx, qword [rbp - 0x28]
mov r8, qword [rbp - 0x30]
mov dword [rsp + 0x30], 7
mov rax, rcx
sub rax, r8
mov r15d, inet_ntoa
lea r14, str.Total_RAM:
cmp rax, r15
jb 0x1400018ac
lea rax, [r8 + 0xb]
mov qword [rbp - 0x30], rax
lea rbx, [rbp - 0x40]
cmp rcx, 0x10
cmovae rbx, qword [rbp - 0x40]
lea rax, [0x1400056f3]
cmp rax, rbx
jbe 0x140001866
lea rax, [rbx + r8]
cmp r14, rax
ja 0x140001866
cmp rbx, r14
ja 0x14000185e
mov rsi, r13
jmp 0x140001869
mov rsi, rbx
sub rsi, r14
jmp 0x140001869
mov rsi, r15
lea rcx, [rbx + 0xb]
inc r8
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rsi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + rsi]
sub r15, rsi
lea rdx, [r14 + 0xb]
add rdx, rsi
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x40]
movabs rbx, 0xcccccccccccccccd
jmp 0x1400018c2
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r14
mov rdx, r15
lea rcx, [rbp - 0x40]
call fcn.140003180
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], send
mov byte [rax], 0
mov dword [rsp + 0x30], send
mov r8d, 4
lea rdx, str._MB_n
lea rcx, [rbp - 0x20]
call fcn.140002b80
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], send
mov byte [rax], 0
mov dword [rsp + 0x30], 0x1f
lea rdx, [rbp]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
mov rcx, rdi
call fcn.140002b80
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x14000199c
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001996
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001996
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003320
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1400019da
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400019d5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400019d5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003320
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], send
mov byte [rbp - 0x20], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x140001a28
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001a23
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001a23
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003320
mov r8, qword [rbp - 0x70]
shr r8, 0x14
lea r9, [rbp + 0x15]
nop dword [rax]
nop dword [rax + rax]
dec r9
mov rax, rbx
mul r8
shr rdx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8, rdx
test rdx, rdx
jne 0x140001a40
mov qword [rbp - 0x40], r13
mov r8, r13
mov qword [rbp - 0x30], r13
mov ecx, send
mov qword [rbp - 0x28], rcx
mov byte [rbp - 0x40], r8b
lea rax, [rbp + 0x15]
cmp r9, rax
je 0x140001aa6
lea r8, [rbp + 0x15]
sub r8, r9
mov rdx, r9
lea rcx, [rbp - 0x40]
call fcn.140002a20
mov rcx, qword [rbp - 0x28]
mov r8, qword [rbp - 0x30]
mov dword [rsp + 0x30], 0x7f
mov rax, rcx
sub rax, r8
mov r15d, 0xa
lea r14, str.Free_RAM:
cmp rax, r15
jb 0x140001b4c
lea rax, [r8 + 0xa]
mov qword [rbp - 0x30], rax
lea rbx, [rbp - 0x40]
cmp rcx, 0x10
cmovae rbx, qword [rbp - 0x40]
lea rax, [0x140005702]
cmp rax, rbx
jbe 0x140001b06
lea rax, [rbx + r8]
cmp r14, rax
ja 0x140001b06
cmp rbx, r14
ja 0x140001afe
mov rsi, r13
jmp 0x140001b09
mov rsi, rbx
sub rsi, r14
jmp 0x140001b09
mov rsi, r15
lea rcx, [rbx + 0xa]
inc r8
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rsi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + rsi]
sub r15, rsi
lea rdx, [r14 + 0xa]
add rdx, rsi
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x40]
movabs rbx, 0xcccccccccccccccd
jmp 0x140001b62
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r14
mov rdx, r15
lea rcx, [rbp - 0x40]
call fcn.140003180
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], send
mov byte [rax], 0
mov dword [rsp + 0x30], 0xff
mov r8d, 4
lea rdx, str._MB_n
lea rcx, [rbp - 0x20]
call fcn.140002b80
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], send
mov byte [rax], 0
mov dword [rsp + 0x30], 0x1ff
lea rdx, [rbp]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
mov rcx, rdi
call fcn.140002b80
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x140001c3c
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001c36
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001c36
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003320
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x140001c7a
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001c75
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001c75
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003320
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], send
mov byte [rbp - 0x20], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x140001cc8
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001cc3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001cc3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003320
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r13
xor r9d, r9d
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x40]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExA]
mov r8, qword [rsp + 0x38]
shr r8, 0x14
lea r9, [rbp + 0x15]
nop dword [rax]
nop dword [rax + rax]
dec r9
mov rax, rbx
mul r8
shr rdx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8, rdx
test rdx, rdx
jne 0x140001d00
mov qword [rbp - 0x40], r13
mov r8, r13
mov qword [rbp - 0x30], r13
mov ecx, send
mov qword [rbp - 0x28], rcx
mov byte [rbp - 0x40], r8b
lea rax, [rbp + 0x15]
cmp r9, rax
je 0x140001d66
lea r8, [rbp + 0x15]
sub r8, r9
mov rdx, r9
lea rcx, [rbp - 0x40]
call fcn.140002a20
mov rcx, qword [rbp - 0x28]
mov r8, qword [rbp - 0x30]
mov dword [rsp + 0x30], 0x7ff
mov rax, rcx
sub rax, r8
lea r14, str.Total_Disk_Space:
cmp rax, 0x12
jb 0x140001e07
lea rax, [r8 + 0x12]
mov qword [rbp - 0x30], rax
lea rbx, [rbp - 0x40]
cmp rcx, 0x10
cmovae rbx, qword [rbp - 0x40]
lea rax, [0x14000571a]
cmp rax, rbx
jbe 0x140001dc1
lea rax, [rbx + r8]
cmp r14, rax
ja 0x140001dc1
cmp rbx, r14
ja 0x140001db9
mov rsi, r13
jmp 0x140001dc4
mov rsi, rbx
sub rsi, r14
jmp 0x140001dc4
mov rsi, r12
lea rcx, [rbx + 0x12]
inc r8
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rsi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + rsi]
sub r12, rsi
lea rdx, [r14 + 0x12]
add rdx, rsi
mov r8, r12
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x40]
movabs rbx, 0xcccccccccccccccd
jmp 0x140001e1d
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r14
mov rdx, r12
lea rcx, [rbp - 0x40]
call fcn.140003180
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], send
mov byte [rax], 0
mov dword [rsp + 0x30], 0xfff
mov r8d, 4
lea rdx, str._MB_n
lea rcx, [rbp - 0x20]
call fcn.140002b80
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], send
mov byte [rax], 0
mov dword [rsp + 0x30], 0x1fff
lea rdx, [rbp]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
mov rcx, rdi
call fcn.140002b80
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x140001ef7
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001ef1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001ef1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003320
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x140001f35
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001f30
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001f30
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003320
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], send
mov byte [rbp - 0x20], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x140001f83
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001f7e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001f7e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003320
mov r8, qword [rsp + 0x40]
shr r8, 0x14
lea r9, [rbp + 0x15]
dec r9
mov rax, rbx
mul r8
shr rdx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8, rdx
test rdx, rdx
jne 0x140001f90
mov qword [rbp - 0x40], r13
mov r8, r13
mov qword [rbp - 0x30], r13
mov ecx, send
mov qword [rbp - 0x28], rcx
mov byte [rbp - 0x40], r8b
lea rax, [rbp + 0x15]
cmp r9, rax
je 0x140001ff6
lea r8, [rbp + 0x15]
sub r8, r9
mov rdx, r9
lea rcx, [rbp - 0x40]
call fcn.140002a20
mov rcx, qword [rbp - 0x28]
mov r8, qword [rbp - 0x30]
mov dword [rsp + 0x30], 0x7fff
mov rax, rcx
sub rax, r8
mov r15d, send
lea r14, str.Free_Disk_Space:
cmp rax, r15
jb 0x14000208e
lea rax, [r8 + 0x11]
mov qword [rbp - 0x30], rax
lea rbx, [rbp - 0x40]
cmp rcx, 0x10
cmovae rbx, qword [rbp - 0x40]
lea rax, [0x140005731]
cmp rax, rbx
jbe 0x140002052
lea rax, [rbx + r8]
cmp r14, rax
ja 0x140002052
cmp rbx, r14
ja 0x14000204a
mov rsi, r13
jmp 0x140002055
mov rsi, rbx
sub rsi, r14
jmp 0x140002055
mov rsi, r15
lea rcx, [rbx + 0x11]
inc r8
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rsi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + rsi]
sub r15, rsi
lea rdx, [r14 + 0x11]
add rdx, rsi
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x40]
jmp 0x1400020a4
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r14
mov rdx, r15
lea rcx, [rbp - 0x40]
call fcn.140003180
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], send
mov byte [rax], 0
mov dword [rsp + 0x30], 0xffff
mov r8d, 4
lea rdx, str._MB_n
lea rcx, [rbp - 0x20]
call fcn.140002b80
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], send
mov byte [rax], 0
mov dword [rsp + 0x30], 0x1ffff
lea rdx, [rbp]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
mov rcx, rdi
call fcn.140002b80
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x14000217e
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002178
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002178
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003320
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1400021bc
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400021b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400021b7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003320
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], send
mov byte [rbp - 0x20], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x14000220a
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002205
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002205
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003320
mov rax, rdi
mov rcx, qword [rbp + 0x20]
xor rcx, rsp
call fcn.140003300
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret