Function at 0x14012c8de
Capabilities:
Get system information on windows

Disassembly:
push rax
pushf
mov eax, 0x1cb11deb
pushf
not eax
add eax, 0x8b90727d
xor eax, 0xed9e1510
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xccb81b35
xor eax, 0xa977d964
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xf9d785a3
xor eax, 0xa2d2f12e
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x9fd13ce1
xor eax, 0xbf70f43a
rol eax, 4
popf
cmp eax, 4
jne 0x14012c941
popf
pop rax
jmp 0x14012cd6f
cmp eax, 0
jne 0x14012c950
popf
pop rax
jmp 0x14012ca4f
cmp eax, 3
jne 0x14012c95f
popf
pop rax
jmp 0x14012ccea
cmp eax, 1
jne 0x14012c96e
popf
pop rax
jmp 0x14012cae8
cmp eax, 0xd
jne 0x14012c97d
popf
pop rax
jmp 0x14012d1c0
cmp eax, 7
jne 0x14012c98c
popf
pop rax
jmp 0x14012cf34
cmp eax, 0xe
jne 0x14012c99b
popf
pop rax
jmp 0x14012d2de
cmp eax, 0xb
jne 0x14012c9aa
popf
pop rax
jmp 0x14012d0e2
cmp eax, 0xc
jne 0x14012c9b9
popf
pop rax
jmp 0x14012d174
cmp eax, 8
jne 0x14012c9c8
popf
pop rax
jmp 0x14012cfe7
cmp eax, 0x10
jne 0x14012c9d7
popf
pop rax
jmp 0x14012d446
cmp eax, 2
jne 0x14012c9e6
popf
pop rax
jmp 0x14012cc5a
cmp eax, 9
jne 0x14012c9f5
popf
pop rax
jmp 0x14012d09f
cmp eax, 0x12
jne 0x14012ca04
popf
pop rax
jmp 0x14012d4de
cmp eax, 6
jne 0x14012ca13
popf
pop rax
jmp 0x14012cec4
cmp eax, 0x11
jne 0x14012ca22
popf
pop rax
jmp 0x14012d493
cmp eax, 5
jne 0x14012ca31
popf
pop rax
jmp 0x14012cdca
cmp eax, 0xf
jne 0x14012ca40
popf
pop rax
jmp 0x14012d3a4
cmp eax, 0xa
jne 0x14012ca4f
popf
pop rax
jmp 0x14012d0d8
push rsi
push r14
push r15
sub rsp, 0x40
xor edx, edx
lea r9, [rsp + 0x68]
mov r14, rcx
xor r15d, r15d
xor r8d, r8d
mov dword [rsp + 0x68], r15d
mov esi, r15d
lea ecx, [rdx + 0xb]
jmp 0x14012ca75
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
jne 0x14012cab5
push rax
pushf
mov eax, 0xf536a88c
pushf
not eax
add eax, 0xcfebdfb0
xor eax, 0xdbf6643d
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xf90062af
xor eax, 0xbcfddc48
rol eax, 0xfa
popf
jmp 0x14012c932
push rax
pushf
mov eax, 0xcc30a46a
pushf
not eax
add eax, 0xf991ded8
xor eax, 0x991a9252
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xf31d54a6
xor eax, 0xf44f6605
rol eax, 0x4f
popf
jmp 0x14012c932
xor edx, edx
mov r8d, 0x6c4a2646
pushf
not r8d
add r8d, 0xf3f6ad03
xor r8d, 0xed38bbc1
rol r8d, 0xd8
popf
pushf
not r8d
add r8d, 0xcd6b671d
xor r8d, 0xc898147f
rol r8d, 0xf5
popf
pushf
not r8d
add r8d, 0xa5e5890c
xor r8d, 0xd1d274f3
rol r8d, 0x47
popf
mov rcx, rsi
jmp 0x14012cb3f
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov edx, dword [rsp + 0x68]
xor ecx, ecx
mov r8d, 0xdf312397
pushf
not r8d
add r8d, 0xfd94a804
xor r8d, 0xc0be1a16
rol r8d, 0x73
popf
pushf
not r8d
add r8d, 0xf034a932
xor r8d, 0x80bd6c67
rol r8d, 0x68
popf
pushf
not r8d
add r8d, 0x89473150
xor r8d, 0xa4690ed3
rol r8d, 0x52
popf
lea r9d, [rcx + 4]
jmp 0x14012cba1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8d, dword [rsp + 0x68]
lea r9, [rsp + 0x68]
mov rdx, rax
mov ecx, 0x9937b1c
pushf
not ecx
add ecx, 0xd945039b
xor ecx, 0xaf4f7ded
rol ecx, 0xdf
popf
pushf
not ecx
add ecx, 0x8bf60154
xor ecx, 0xdb5a868a
rol ecx, 0xee
popf
mov rsi, rax
jmp 0x14012cbe7
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
je 0x14012cc27
push rax
pushf
mov eax, 0x914b6681
pushf
not eax
add eax, 0xa7dad6ba
xor eax, 0xf338c6a4
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x8d6c0c91
xor eax, 0x96d86fda
rol eax, 0x4b
popf
jmp 0x14012c932
push rax
pushf
mov eax, 0x87e1e4e4
pushf
not eax
add eax, 0xf12cf781
xor eax, 0xa42a8196
rol eax, 0x42
popf
pushf
not eax
add eax, 0xfea91f91
xor eax, 0xc922d765
rol eax, 0x16
popf
jmp 0x14012c932
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x70], rbp
mov qword [rsp + 0x78], rdi
test eax, eax
js 0x14012ccb7
push rax
pushf
mov eax, 0x27426913
pushf
not eax
add eax, 0x894cd55c
xor eax, 0xd1aa2318
rol eax, 0x65
popf
pushf
not eax
add eax, 0xc2d0e3ab
xor eax, 0xe18eef84
rol eax, 0x73
popf
pushf
not eax
add eax, 0x8a5733db
xor eax, 0xd9d1a19a
rol eax, 0xd5
popf
jmp 0x14012c932
push rax
pushf
mov eax, 0x7b9ae998
pushf
not eax
add eax, 0xd12f5d1c
xor eax, 0xbb8be7f0
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xc716cde4
xor eax, 0x9ceef1a4
rol eax, 0x8a
popf
jmp 0x14012c932
mov edi, r15d
cmp dword [rsi], r15d
jbe 0x14012cd29
push rax
pushf
mov eax, 0x9df66d47
pushf
not eax
add eax, 0xceaca285
xor eax, 0xef1672cd
rol eax, 0x57
popf
pushf
not eax
add eax, 0xe835d442
xor eax, 0xefe6041e
rol eax, 0xcd
popf
jmp 0x14012c932
push rax
pushf
mov eax, 0xb63979d0
pushf
not eax
add eax, 0x9b67edeb
xor eax, 0xc55eeeee
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xbb922377
xor eax, 0xa3945949
rol eax, 0x32
popf
pushf
not eax
add eax, 0x8c89e0bc
xor eax, 0xdbdde657
rol eax, 0x81
popf
jmp 0x14012c932
nop
push rax
pushf
mov eax, 0x75309dd7
pushf
not eax
add eax, 0xd4c28f58
xor eax, 0xff1802b5
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x936a2c7e
xor eax, 0x92985415
rol eax, 0xc
popf
pushf
not eax
add eax, 0xe1e69a9d
xor eax, 0xae2a314f
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xb334984c
xor eax, 0x8727fb67
rol eax, 0x9b
popf
jmp 0x14012c932
mov eax, edi
xorps xmm0, xmm0
imul rcx, rax, 0x128
movups xmmword [rsp + 0x20], xmm0
movzx ebx, word [rcx + rsi + 0x2e]
lea rbp, [rcx + rsi]
push rcx
not rcx
sub rbx, rcx
pop rcx
sub rbx, 1
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r15
lea rcx, [rbx + 0x30]
push rsi
not rsi
sub rcx, rsi
pop rsi
sub rcx, 1
call fcn.1400690ef
lea rdx, [rbx + 0x30]
mov r8, rax
push rsi
not rsi
sub rdx, rsi
pop rsi
sub rdx, 1
lea rcx, [rsp + 0x20]
call fcn.1400edcc3
cmp qword [rsp + 0x38], 0xf
lea rcx, [rsp + 0x20]
mov rdx, r14
cmova rcx, qword [rsp + 0x20]
jmp 0x14012ce41
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
je 0x14012ce91
push rax
pushf
mov eax, 0x3eb1348
pushf
not eax
add eax, 0xd397a06e
xor eax, 0xcc925390
rol eax, 0x10
popf
pushf
not eax
add eax, 0x9c56c0bb
xor eax, 0xfaf8b058
rol eax, 0x78
popf
pushf
not eax
add eax, 0xc6ea3944
xor eax, 0xa2a2e056
rol eax, 0xdc
popf
jmp 0x14012c932
push rax
pushf
mov eax, 0xf038e045
pushf
not eax
add eax, 0xbf8dc1e2
xor eax, 0xc88ed4f4
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xadf44f14
xor eax, 0xacf908b6
rol eax, 0x9c
popf
jmp 0x14012c932
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x14012cf02
push rax
pushf
mov eax, 0xa5816e76
pushf
not eax
add eax, 0xd3592890
xor eax, 0xb9240f1f
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xa76c820f
xor eax, 0xd74e0b6e
rol eax, 0x49
popf
jmp 0x14012c932
push rax
pushf
mov eax, 0xf94113db
pushf
not eax
add eax, 0xf18ca9ba
xor eax, 0xd97e752d
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xf58d0790
xor eax, 0xb8c4ba12
rol eax, 1
popf
jmp 0x14012c932
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14012cf8e
push rax
pushf
mov eax, 0xbabc8539
pushf
not eax
add eax, 0xd1b8b70b
xor eax, 0xa340a52f
rol eax, 0x73
popf
pushf
not eax
add eax, 0xb8f331e2
xor eax, 0xdc1ff844
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xc5b6259a
xor eax, 0xdf54e7bd
rol eax, 0x2f
popf
jmp 0x14012c932
push rax
pushf
mov eax, 0x4d971403
pushf
not eax
add eax, 0x98c6adbe
xor eax, 0xe2c6024e
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x97244145
xor eax, 0xfb7e97e9
rol eax, 0x12
popf
pushf
not eax
add eax, 0xa3a57c1e
xor eax, 0x8d801afe
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xcc337892
xor eax, 0xdf120f5b
rol eax, 0x2c
popf
jmp 0x14012c932
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14012d046
push rax
pushf
mov eax, 0x2a7f1d79
pushf
not eax
add eax, 0x9be3772a
xor eax, 0xa0b1a5f0
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xe7dadd3d
xor eax, 0xb3854fce
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xd27e537a
xor eax, 0xc50dbe4d
rol eax, 0x50
popf
jmp 0x14012c932
push rax
pushf
mov eax, 0x2b6b82f8
pushf
not eax
add eax, 0xd3ff2146
xor eax, 0xf92d6277
rol eax, 0x83
popf
pushf
not eax
add eax, 0xf153640a
xor eax, 0xc02c3f3b
rol eax, 0x32
popf
pushf
not eax
add eax, 0xea253770
xor eax, 0xa81a604f
rol eax, 0x83
popf
pushf
not eax
add eax, 0xb44ee8e4
xor eax, 0xd50899f1
rol eax, 8
popf
jmp 0x14012c932
call fcn.1400ae516
push rax
pushf
mov eax, 0x8a7bb227
pushf
not eax
add eax, 0xa29e4240
xor eax, 0xa1ed2bb5
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xdd4e4db5
xor eax, 0xff6370cd
rol eax, 0xf
popf
jmp 0x14012c932
inc edi
cmp edi, dword [rsi]
jb 0x14012cdca
xor edx, edx
mov r8d, 0x8eeae50b
pushf
not r8d
add r8d, 0xf59999f4
xor r8d, 0xa3a856cb
rol r8d, 0x7f
popf
pushf
not r8d
add r8d, 0xd95d3b5a
xor r8d, 0x9826c55d
rol r8d, 6
popf
pushf
not r8d
add r8d, 0x892b6edb
xor r8d, 0xc96fa97f
rol r8d, 0xbc
popf
mov rcx, rsi
jmp 0x14012d139
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor eax, eax
push rax
pushf
mov eax, 0xc6b63d9d
pushf
not eax
add eax, 0xfca2536e
xor eax, 0xa7e4803e
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xbfc399a9
xor eax, 0xd6af104a
rol eax, 0xd0
popf
jmp 0x14012c932
mov rdi, qword [rsp + 0x78]
mov rbp, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x60]
add rsp, 0x40
pop r15
pop r14
pop rsi
ret
mov rbx, qword [rbp + 0x18]
xor edx, edx
mov r8d, 0x674c6714
pushf
not r8d
add r8d, 0xebf96ae9
xor r8d, 0xbf735231
rol r8d, 0xc2
popf
pushf
not r8d
add r8d, 0xb4a2da2e
xor r8d, 0xfa7c2d0d
rol r8d, 0x52
popf
pushf
not r8d
add r8d, 0xd507653a
xor r8d, 0xd6b667e7
rol r8d, 0xed
popf
mov rcx, rsi
jmp 0x14012d21b
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x14012d285
push rax
pushf
mov eax, 0x4f7616b0
pushf
not eax
add eax, 0xf049acb7
xor eax, 0xd8265883
rol eax, 0x22
popf
pushf
not eax
add eax, 0xdc1f88e7
xor eax, 0x9a47dd4c
rol eax, 0xf5
popf
pushf
not eax
add eax, 0x97a16278
xor eax, 0xbf877211
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xb19b2a22
xor eax, 0xe850d7b7
rol eax, 0x21
popf
jmp 0x14012c932
push rax
pushf
mov eax, 0x567a0360
pushf
not eax
add eax, 0xfc6d77bb
xor eax, 0x9d2f356c
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xaa96ef73
xor eax, 0xb0c76b79
rol eax, 0x89
popf
pushf
not eax
add eax, 0xe92587ec
xor eax, 0xb950e137
rol eax, 5
popf
pushf
not eax
add eax, 0x903f3f79
xor eax, 0xe69b0605
rol eax, 0x8a
popf
jmp 0x14012c932
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14012d34b
push rax
pushf
mov eax, 0xcec1f229
pushf
not eax
add eax, 0x9fa4f786
xor eax, 0x8f5fbeec
rol eax, 0x95
popf
pushf
not eax
add eax, 0x97809656
xor eax, 0x9d4b7569
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xa54618c6
xor eax, 0xff70632b
rol eax, 0x90
popf
pushf
not eax
add eax, 0x9f71753d
xor eax, 0x95fa9b1e
rol eax, 0xcc
popf
jmp 0x14012c932
push rax
pushf
mov eax, 0x39a8218b
pushf
not eax
add eax, 0x8e02576e
xor eax, 0xf2a54c1e
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xd5f87c65
xor eax, 0xa80e905e
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xefddd2ea
xor eax, 0xf36a037f
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xb7c3194a
xor eax, 0xeafbcd8d
rol eax, 0xcb
popf
jmp 0x14012c932
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14012d3ff
push rax
pushf
mov eax, 0xbf00deb5
pushf
not eax
add eax, 0xc954c330
xor eax, 0x92787eab
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xdf5df7ac
xor eax, 0xb87c26aa
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x8f6b00db
xor eax, 0xf4cb0499
rol eax, 0x10
popf
jmp 0x14012c932
push rax
pushf
mov eax, 0x1c9b655a
pushf
not eax
add eax, 0x887de2c3
xor eax, 0xa1ce25c9
rol eax, 0x15
popf
pushf
not eax
add eax, 0xdbab234a
xor eax, 0xd7d09bba
rol eax, 0x12
popf
pushf
not eax
add eax, 0xec486167
xor eax, 0xf6381ee1
rol eax, 0x47
popf
jmp 0x14012c932
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ae516
push rax
pushf
mov eax, 0xb9f43da3
pushf
not eax
add eax, 0xd9a488ed
xor eax, 0xde4d3757
rol eax, 7
popf
pushf
not eax
add eax, 0xb8e3864b
xor eax, 0xe878c22d
rol eax, 0x15
popf
pushf
not eax
add eax, 0x88c3ac37
xor eax, 0xefd96980
rol eax, 0x19
popf
jmp 0x14012c932
mov rax, rbx
jmp 0x14012d174