Function at 0x14001b930
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
sub rsp, 0x58
lea rbp, [0x140290e30]
mov qword [rsp + 0x80], rbp
lea rax, vtable.CVolAppInstance.0
mov qword [0x140290e30], rax
lea rax, vtable.CPoolMem.0
mov qword [0x140290e38], rax
mov qword [0x140290e60], 1
mov qword [0x140290e58], 0x100
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
xor edx, edx
mov r8d, 0x400000
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rcx, rax
test rax, rax
je 0x14001bc52
mov qword [0x140290e50], rax
mov qword [0x140290e40], rax
add rax, 0x400000
mov qword [0x140290e48], rax
mov edx, 0x1555
mov rax, qword [0x140290e58]
nop dword [rax + rax]
add rax, rcx
mov qword [rcx], rax
mov rax, qword [0x140290e58]
add rcx, rax
add rax, rcx
mov qword [rcx], rax
mov rax, qword [0x140290e58]
add rcx, rax
add rax, rcx
mov qword [rcx], rax
mov rax, qword [0x140290e58]
add rcx, rax
sub rdx, 1
jne 0x14001b9d0
xor esi, esi
mov qword [rcx], rsi
lea rax, [0x140290e68]
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], rax
lea rdi, vtable.CVolObject.0
mov qword [0x140290e68], rdi
mov qword [0x140290e70], rsi
mov qword [0x140290e78], rsi
lea rbx, vtable.CVolMem.0
mov qword [0x140290e68], rbx
mov qword [0x140290e80], rsi
mov qword [0x140290e90], rsi
mov qword [0x140290e88], rsi
mov qword [0x140290e98], 0x40
mov qword [0x140290e98], 0x100
mov qword [0x140290ea0], rsi
lea rcx, [0x140290ec0]
mov qword [rsp + 0x88], rcx
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
mov qword [0x140290ee8], rsi
lea rcx, [0x140290f00]
mov qword [rsp + 0x88], rcx
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
mov qword [0x140290f28], 0x3e8
lea rax, [0x140290f50]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], rax
mov qword [0x140290f50], rdi
mov qword [0x140290f58], rsi
mov qword [0x140290f60], rsi
mov qword [0x140290f50], rbx
mov qword [0x140290f68], rsi
mov qword [0x140290f78], rsi
mov qword [0x140290f70], rsi
mov qword [0x140290f80], 0x40
mov qword [0x140290f80], 0x100
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsp + 0x40]
lea rax, [rax*2 + 2]
mov qword [0x140290f30], rax
mov qword [0x140290f38], 0x3e80
mov qword [0x140290f40], 1
mov qword [0x140290f48], rsi
lea rcx, [0x140290f88]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
lea rax, [0x140290fb0]
mov qword [rsp + 0x88], rax
mov qword [0x140290fb0], rdi
mov qword [0x140290fb8], rsi
mov qword [0x140290fc0], rsi
lea rax, vtable.CVolObjectArray.0
mov qword [0x140290fb0], rax
lea rax, [0x140290fc8]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], rax
mov qword [0x140290fc8], rdi
mov qword [0x140290fd0], rsi
mov qword [0x140290fd8], rsi
mov qword [0x140290fc8], rbx
mov qword [0x140290fe0], rsi
mov qword [0x140290ff0], rsi
mov qword [0x140290fe8], rsi
mov qword [0x140290ff8], 0x40
mov qword [0x140290ff8], 0x100
mov qword [0x140290ff8], 0x100
mov qword [0x140290ea8], rsi
xorps xmm0, xmm0
movdqa xmmword [0x140291000], xmm0
mov qword [0x140291010], rsi
mov dword [0x140291018], esi
mov qword [0x140290eb0], rsi
movsd xmm0, qword [0x14024a6f8]
movsd qword [0x140290eb8], xmm0
xorps xmm1, xmm1
movups xmmword [0x140290ef0], xmm1
mov rax, rbp
add rsp, 0x58
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov ecx, 0xffffffff
call fcn.1401c8eec
int3