Function at 0x1400349c0
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x60
mov rbx, rcx
xor edi, edi
mov dword [rsp + 0x20], edi
mov qword [rcx], rdi
mov qword [rcx + 0x18], 0xf
mov byte [rcx], dil
mov qword [rcx + 0x10], 7
lea r8d, [rdi + 7]
lea rdx, str.Unknown
call fcn.14013075c
mov byte [rbx + 7], dil
mov dword [rsp + 0x20], 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.GetNativeSystemInfo
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rsp + 0x28]
test rax, rax
je 0x140034a4c
call rax
jmp 0x140034a52
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx ecx, word [rsp + 0x28]
test ecx, ecx
je 0x140034eb9
sub ecx, 5
je 0x140034db6
sub ecx, 1
je 0x140034cb5
sub ecx, 3
je 0x140034bb2
cmp ecx, 3
jne 0x140034fec
mov rcx, qword [rbx + 0x18]
cmp rcx, 5
jb 0x140034abf
mov rdi, rbx
cmp rcx, 0x10
jb 0x140034a99
mov rdi, qword [rbx]
mov qword [rbx + 0x10], 5
mov r8d, 5
lea rdx, str.ARM64
mov rcx, rdi
call fcn.14013075c
mov byte [rdi + 5], 0
jmp 0x140034fec
mov rdx, rcx
shr rdx, 1
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
sub rax, rdx
cmp rcx, rax
jbe 0x140034ae6
movabs rcx, 0x8000000000000027
jmp 0x140034b0f
lea rax, [rcx + rdx]
mov esi, 0xf
cmp rax, rsi
cmova rsi, rax
lea rax, [rsi + 1]
cmp rax, 0x1000
jb 0x140034b50
lea rcx, [rax + 0x27]
cmp rcx, rax
jbe 0x140035002
call fcn.14012f210
test rax, rax
je 0x140034f84
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov qword [rbx + 0x10], 5
mov qword [rbx + 0x18], rsi
mov eax, dword [str.ARM64]
mov dword [rdi], eax
movzx eax, byte [0x140161538]
mov byte [rdi + 4], al
mov byte [rdi + 5], 0
jmp 0x140034fe9
test rax, rax
je 0x140034b87
mov rcx, rax
call fcn.14012f210
mov rdi, rax
mov qword [rbx + 0x10], 5
mov qword [rbx + 0x18], rsi
mov eax, dword [str.ARM64]
mov dword [rdi], eax
movzx eax, byte [0x140161538]
mov byte [rdi + 4], al
mov byte [rdi + 5], 0
jmp 0x140034fe9
mov qword [rbx + 0x10], 5
mov qword [rbx + 0x18], rsi
mov eax, dword [str.ARM64]
mov dword [rdi], eax
movzx eax, byte [0x140161538]
mov byte [rdi + 4], al
mov byte [5], 0
jmp 0x140034fe9
mov rcx, qword [rbx + 0x18]
cmp rcx, 3
jb 0x140034bee
mov rdi, rbx
cmp rcx, 0x10
jb 0x140034bc8
mov rdi, qword [rbx]
mov qword [rbx + 0x10], 3
mov r8d, 3
lea rdx, [0x140161530]
mov rcx, rdi
call fcn.14013075c
mov byte [rdi + 3], 0
jmp 0x140034fec
mov rdx, rcx
shr rdx, 1
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
sub rax, rdx
cmp rcx, rax
jbe 0x140034c15
movabs rcx, 0x8000000000000027
jmp 0x140034c3e
lea rax, [rdx + rcx]
mov esi, 0xf
cmp rax, rsi
cmova rsi, rax
lea rax, [rsi + 1]
cmp rax, 0x1000
jb 0x140034c81
lea rcx, [rax + 0x27]
cmp rcx, rax
jbe 0x140035002
call fcn.14012f210
test rax, rax
je 0x140034f84
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov qword [rbx + 0x10], 3
mov qword [rbx + 0x18], rsi
movzx eax, word [0x140161530]
mov word [rdi], ax
movzx eax, byte [0x140161532]
mov byte [rdi + 2], al
mov byte [rdi + 3], 0
jmp 0x140034fe9
test rax, rax
je 0x140034c93
mov rcx, rax
call fcn.14012f210
mov rdi, rax
jmp 0x140034c58
mov qword [rbx + 0x10], 3
mov qword [rbx + 0x18], rsi
movzx eax, word [0x140161530]
mov word [rdi], ax
movzx eax, byte [0x140161532]
jmp 0x140034fde
mov rcx, qword [rbx + 0x18]
cmp rcx, 4
jb 0x140034ce2
mov rax, rbx
cmp rcx, 0x10
jb 0x140034ccb
mov rax, qword [rbx]
mov qword [rbx + 0x10], 4
mov dword [rax], 0x34364149
mov byte [rax + 4], 0
jmp 0x140034fec
mov rdx, rcx
shr rdx, 1
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
sub rax, rdx
cmp rcx, rax
jbe 0x140034d09
movabs rcx, 0x8000000000000027
jmp 0x140034d32
lea rax, [rcx + rdx]
mov esi, 0xf
cmp rax, rsi
cmova rsi, rax
lea rax, [rsi + 1]
cmp rax, 0x1000
jb 0x140034d67
lea rcx, [rax + 0x27]
cmp rcx, rax
jbe 0x140035002
call fcn.14012f210
test rax, rax
je 0x140034f84
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov qword [rbx + 0x10], 4
mov qword [rbx + 0x18], rsi
mov dword [rdi], 0x34364149
mov byte [rdi + 4], 0
jmp 0x140034fe9
test rax, rax
je 0x140034d92
mov rcx, rax
call fcn.14012f210
mov rdi, rax
mov qword [rbx + 0x10], 4
mov qword [rbx + 0x18], rsi
mov dword [rax], 0x34364149
mov byte [rax + 4], 0
jmp 0x140034fe9
mov qword [rbx + 0x10], 4
mov qword [rbx + 0x18], rsi
mov dword [0], 0x34364149
mov byte [4], 0
jmp 0x140034fe9
mov rcx, qword [rbx + 0x18]
cmp rcx, 3
jb 0x140034df2
mov rdi, rbx
cmp rcx, 0x10
jb 0x140034dcc
mov rdi, qword [rbx]
mov qword [rbx + 0x10], 3
mov r8d, 3
lea rdx, [0x14016153c]
mov rcx, rdi
call fcn.14013075c
mov byte [rdi + 3], 0
jmp 0x140034fec
mov rdx, rcx
shr rdx, 1
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
sub rax, rdx
cmp rcx, rax
jbe 0x140034e19
movabs rcx, 0x8000000000000027
jmp 0x140034e42
lea rax, [rdx + rcx]
mov esi, 0xf
cmp rax, rsi
cmova rsi, rax
lea rax, [rsi + 1]
cmp rax, 0x1000
jb 0x140034e85
lea rcx, [rax + 0x27]
cmp rcx, rax
jbe 0x140035002
call fcn.14012f210
test rax, rax
je 0x140034f84
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov qword [rbx + 0x10], 3
mov qword [rbx + 0x18], rsi
movzx eax, word [0x14016153c]
mov word [rdi], ax
movzx eax, byte [0x14016153e]
mov byte [rdi + 2], al
mov byte [rdi + 3], 0
jmp 0x140034fe9
test rax, rax
je 0x140034e97
mov rcx, rax
call fcn.14012f210
mov rdi, rax
jmp 0x140034e5c
mov qword [rbx + 0x10], 3
mov qword [rbx + 0x18], rsi
movzx eax, word [0x14016153c]
mov word [rdi], ax
movzx eax, byte [0x14016153e]
jmp 0x140034fde
mov rcx, qword [rbx + 0x18]
cmp rcx, 3
jb 0x140034ef5
mov rdi, rbx
cmp rcx, 0x10
jb 0x140034ecf
mov rdi, qword [rbx]
mov qword [rbx + 0x10], 3
mov r8d, 3
lea rdx, [0x14016152c]
mov rcx, rdi
call fcn.14013075c
mov byte [rdi + 3], 0
jmp 0x140034fec
mov rdx, rcx
shr rdx, 1
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
sub rax, rdx
cmp rcx, rax
jbe 0x140034f59
movabs rcx, 0x8000000000000027
call fcn.14012f210
test rax, rax
je 0x140034f84
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov qword [rbx + 0x10], 3
mov qword [rbx + 0x18], rsi
movzx eax, word [0x14016152c]
mov word [rdi], ax
movzx eax, byte [0x14016152e]
mov byte [rdi + 2], al
mov byte [rdi + 3], 0
jmp 0x140034fe9
lea rax, [rcx + rdx]
mov esi, 0xf
cmp rax, rsi
cmova rsi, rax
lea rax, [rsi + 1]
cmp rax, 0x1000
jb 0x140034f8b
lea rcx, [rax + 0x27]
cmp rcx, rax
jbe 0x140035002
jmp 0x140034f1a
call qword [0x140138140]
int3
test rax, rax
je 0x140034fc1
mov rcx, rax
call fcn.14012f210
mov rdi, rax
mov qword [rbx + 0x10], 3
mov qword [rbx + 0x18], rsi
movzx ecx, word [0x14016152c]
mov word [rax], cx
movzx ecx, byte [0x14016152e]
mov byte [rax + 2], cl
mov byte [rax + 3], 0
jmp 0x140034fe9
mov qword [rbx + 0x10], 3
mov qword [rbx + 0x18], rsi
movzx eax, word [0x14016152c]
mov word [rdi], ax
movzx eax, byte [0x14016152e]
mov byte [rdi + 2], al
mov byte [3], 0
mov qword [rbx], rdi
mov rax, rbx
mov rbx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x80]
add rsp, 0x60
pop rdi
ret
call fcn.140002260
int3