Function at 0x1400c23a2
Capabilities:
Get system information on windows

Disassembly:
push rax
pushf
mov eax, 0x45618da8
pushf
not eax
add eax, 0x4ef8ef9a
xor eax, 0x4497f96b
rol eax, 0x2c
popf
pushf
not eax
add eax, 0x2d3828f2
xor eax, 0x23ae8421
rol eax, 0x4b
popf
cmp eax, 0xc
jne 0x1400c23df
popf
pop rax
jmp 0x1400c2dd0
cmp eax, 4
jne 0x1400c23ee
popf
pop rax
jmp 0x1400c2959
cmp eax, 3
jne 0x1400c23fd
popf
pop rax
jmp 0x1400c28c2
cmp eax, 0
jne 0x1400c240c
popf
pop rax
jmp 0x1400c250b
cmp eax, 0x14
jne 0x1400c241b
popf
pop rax
jmp 0x1400c3242
cmp eax, 6
jne 0x1400c242a
popf
pop rax
jmp 0x1400c2a55
cmp eax, 0xd
jne 0x1400c2439
popf
pop rax
jmp 0x1400c2e66
cmp eax, 8
jne 0x1400c2448
popf
pop rax
jmp 0x1400c2b66
cmp eax, 0xb
jne 0x1400c2457
popf
pop rax
jmp 0x1400c2d84
cmp eax, 9
jne 0x1400c2466
popf
pop rax
jmp 0x1400c2bfd
cmp eax, 0xa
jne 0x1400c2475
popf
pop rax
jmp 0x1400c2cc3
cmp eax, 0x13
jne 0x1400c2484
popf
pop rax
jmp 0x1400c31f7
cmp eax, 2
jne 0x1400c2493
popf
pop rax
jmp 0x1400c2834
cmp eax, 0xe
jne 0x1400c24a2
popf
pop rax
jmp 0x1400c2f11
cmp eax, 1
jne 0x1400c24b1
popf
pop rax
jmp 0x1400c2619
cmp eax, 5
jne 0x1400c24c0
popf
pop rax
jmp 0x1400c29b5
cmp eax, 0x10
jne 0x1400c24cf
popf
pop rax
jmp 0x1400c304c
cmp eax, 0xf
jne 0x1400c24de
popf
pop rax
jmp 0x1400c2f7a
cmp eax, 0x11
jne 0x1400c24ed
popf
pop rax
jmp 0x1400c30ec
cmp eax, 7
jne 0x1400c24fc
popf
pop rax
jmp 0x1400c2ac4
cmp eax, 0x12
jne 0x1400c250b
popf
pop rax
jmp 0x1400c31aa
push rbp
push rdi
push r14
sub rsp, 0x50
mov rax, qword [0x14003d040]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov rbp, rcx
lea r9, [rsp + 0x20]
xor r14d, r14d
mov ecx, 0x97e4c0d7
pushf
not ecx
add ecx, 0x7e9b3dd3
xor ecx, 0x5c068a25
rol ecx, 0x8d
popf
pushf
not ecx
add ecx, 0x7c78ab31
xor ecx, 0x2b432a3c
rol ecx, 0x61
popf
pushf
not ecx
add ecx, 0x16ea754c
xor ecx, 0x2bea817f
rol ecx, 0xaa
popf
xor r8d, r8d
mov dword [rsp + 0x20], r14d
xor edx, edx
mov edi, r14d
jmp 0x1400c2580
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
jne 0x1400c25c0
push rax
pushf
mov eax, 0x2e4760fe
pushf
not eax
add eax, 0x392aef76
xor eax, 0x30ab7110
rol eax, 0x90
popf
pushf
not eax
add eax, 0x2d0f9770
xor eax, 0x6da85d27
rol eax, 0x62
popf
jmp 0x1400c23d0
push rax
pushf
mov eax, 0x3def09a5
pushf
not eax
add eax, 0x45e818a9
xor eax, 0x2c63bf58
rol eax, 0x92
popf
pushf
not eax
add eax, 0x313941d8
xor eax, 0x71b1b1e7
rol eax, 0x37
popf
pushf
not eax
add eax, 0x1e2dc3b7
xor eax, 0xbddff91
rol eax, 0x33
popf
pushf
not eax
add eax, 0x46fdfaa6
xor eax, 0x7153648a
rol eax, 0x8f
popf
jmp 0x1400c23d0
xor edx, edx
mov r8d, 0xadd7fbf4
pushf
not r8d
add r8d, 0x70a0be3e
xor r8d, 0x75f3f78d
rol r8d, 0xac
popf
pushf
not r8d
add r8d, 0x13dec59b
xor r8d, 0x20827a27
rol r8d, 0x91
popf
mov rcx, rdi
jmp 0x1400c2657
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov edx, dword [rsp + 0x20]
xor ecx, ecx
mov r9d, 0x2b8a58b7
pushf
not r9d
add r9d, 0x456d2b02
xor r9d, 0x452803ae
rol r9d, 0xa
popf
pushf
not r9d
add r9d, 0x11dc96e5
xor r9d, 0x5177a267
rol r9d, 0xad
popf
pushf
not r9d
add r9d, 0x75c27b1b
xor r9d, 0x24dfa41e
rol r9d, 0xc8
popf
mov r8d, 0xca5432e6
pushf
not r8d
add r8d, 0x33b2fba9
xor r8d, 0x3f6c5589
rol r8d, 0x50
popf
pushf
not r8d
add r8d, 0x4a527017
xor r8d, 0x61d5fe5c
rol r8d, 0xc7
popf
pushf
not r8d
add r8d, 0x77bef2b1
xor r8d, 0xe4b1649
rol r8d, 0x8c
popf
jmp 0x1400c2706
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8d, dword [rsp + 0x20]
lea r9, [rsp + 0x20]
mov rdx, rax
mov ecx, 0x44b04dea
pushf
not ecx
add ecx, 0x7564d219
xor ecx, 0x2cb0c35a
rol ecx, 0xf4
popf
pushf
not ecx
add ecx, 0x606976e2
xor ecx, 0x46a8e546
rol ecx, 0x8f
popf
pushf
not ecx
add ecx, 0x7ab9b123
xor ecx, 0x7f2e87fe
rol ecx, 0xd8
popf
pushf
not ecx
add ecx, 0x39185034
xor ecx, 0x53686ad7
rol ecx, 0xc2
popf
mov rdi, rax
jmp 0x1400c2776
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
je 0x1400c27dc
push rax
pushf
mov eax, 0xccc72e37
pushf
not eax
add eax, 0x7a6c720a
xor eax, 0x3108676
rol eax, 0x34
popf
pushf
not eax
add eax, 0x3d0d009b
xor eax, 0x35d0b8c8
rol eax, 0x53
popf
pushf
not eax
add eax, 0x31ad75a
xor eax, 0x274326c2
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xce86fb7
xor eax, 0x366288b6
rol eax, 0x11
popf
jmp 0x1400c23d0
push rax
pushf
mov eax, 0xf574c70a
pushf
not eax
add eax, 0x6f557244
xor eax, 0x65392c80
rol eax, 0x37
popf
pushf
not eax
add eax, 0x328550d2
xor eax, 0x2fcb11f
rol eax, 1
popf
pushf
not eax
add eax, 0x3a636c2c
xor eax, 0x5fa7e89
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x2aff5ec5
xor eax, 0x780d5c9e
rol eax, 0x63
popf
jmp 0x1400c23d0
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x80], rsi
test eax, eax
js 0x1400c288f
push rax
pushf
mov eax, 0xa0132287
pushf
not eax
add eax, 0xb954e85
xor eax, 0x4c3b33ca
rol eax, 0x92
popf
pushf
not eax
add eax, 0x5b673b14
xor eax, 0x779bce0
rol eax, 3
popf
pushf
not eax
add eax, 0x34108727
xor eax, 0x44778127
rol eax, 0x19
popf
jmp 0x1400c23d0
push rax
pushf
mov eax, 0x27a8bd25
pushf
not eax
add eax, 0x1f7c2f25
xor eax, 0x147f36c8
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x44b2157f
xor eax, 0x68e798d
rol eax, 0x85
popf
jmp 0x1400c23d0
mov ebx, r14d
cmp dword [rdi], ebx
jbe 0x1400c2926
push rax
pushf
mov eax, 0x3bec128a
pushf
not eax
add eax, 0x1a33108d
xor eax, 0x75f8fd2e
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x4343e3de
xor eax, 0x29cd1be4
rol eax, 0x79
popf
pushf
not eax
add eax, 0x17601137
xor eax, 0x2d3a073e
rol eax, 0xc9
popf
pushf
not eax
add eax, 0x44280c41
xor eax, 0x249d9200
rol eax, 0x57
popf
jmp 0x1400c23d0
push rax
pushf
mov eax, 0x51479c94
pushf
not eax
add eax, 0x25da2e0c
xor eax, 0x64acec30
rol eax, 0x6c
popf
pushf
not eax
add eax, 0x3fe73802
xor eax, 0x5812bd5e
rol eax, 0x5b
popf
jmp 0x1400c23d0
nop dword [rax]
push rax
pushf
mov eax, 0x70a8ee4d
pushf
not eax
add eax, 0x7fe514
xor eax, 0x7798db5c
rol eax, 0xea
popf
pushf
not eax
add eax, 0x7208e0dd
xor eax, 0x45e1f473
rol eax, 0x1b
popf
pushf
not eax
add eax, 0x3e44f4a4
xor eax, 0x187687de
rol eax, 0x75
popf
pushf
not eax
add eax, 0x85e49da
xor eax, 0x22a2049e
rol eax, 0x29
popf
jmp 0x1400c23d0
mov eax, ebx
xorps xmm0, xmm0
imul rcx, rax, 0x128
movups xmmword [rsp + 0x28], xmm0
movzx edx, word [rcx + rdi + 0x2e]
lea rsi, [rcx + rdi]
add rdx, 0x30
mov qword [rsp + 0x38], r14
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
mov qword [rsp + 0x40], r14
push rdi
not rdi
sub rdx, rdi
pop rdi
sub rdx, 1
mov r8, 0xffffffffffffffff
push rax
pushf
mov eax, 0xad454722
pushf
not eax
add eax, 0x32524912
xor eax, 0x50859ac2
rol eax, 0x44
popf
pushf
not eax
add eax, 0x349c11a2
xor eax, 0x4a498a6f
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xec4cac7
xor eax, 0x2558770
rol eax, 0xa5
popf
pushf
not eax
add eax, 0x70f388bc
xor eax, 0x2f18082f
rol eax, 0xa8
popf
jmp 0x1400c23d0
inc r8
cmp byte [rdx + r8], r14b
jne 0x1400c2a91
push rax
pushf
mov eax, 0x15c708e7
pushf
not eax
add eax, 0x401941c4
xor eax, 0x63c9fc6a
rol eax, 0x68
popf
pushf
not eax
add eax, 0x377f31c
xor eax, 0x7bb33cd2
rol eax, 0xe6
popf
jmp 0x1400c23d0
push rax
pushf
mov eax, 0x6f52941d
pushf
not eax
add eax, 0x7a843eff
xor eax, 0x6e2e463
rol eax, 0x3b
popf
pushf
not eax
add eax, 0x1a7bbd1
xor eax, 0x3139215c
rol eax, 0xc3
popf
jmp 0x1400c23d0
lea rcx, [rsp + 0x28]
call fcn.140080330
cmp qword [rsp + 0x40], 0xf
lea rcx, [rsp + 0x28]
mov rdx, rbp
cmova rcx, qword [rsp + 0x28]
jmp 0x1400c2ae3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
je 0x1400c2b33
push rax
pushf
mov eax, 0x17df0077
pushf
not eax
add eax, 0x567bf2f5
xor eax, 0x4a6f0af6
rol eax, 0xbc
popf
pushf
not eax
add eax, 0x62e0f202
xor eax, 0x181c1eaf
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x1076d5bd
xor eax, 0x5ce9a8e6
rol eax, 0x34
popf
jmp 0x1400c23d0
push rax
pushf
mov eax, 0x1e052425
pushf
not eax
add eax, 0x332fc0f3
xor eax, 0x145f913a
rol eax, 0x78
popf
pushf
not eax
add eax, 0x6a19b251
xor eax, 0x73183d4c
rol eax, 0x80
popf
jmp 0x1400c23d0
mov rdx, qword [rsp + 0x40]
cmp rdx, 0xf
jbe 0x1400c2bb7
push rax
pushf
mov eax, 0xc6357945
pushf
not eax
add eax, 0x7e8ee6f0
xor eax, 0x12b5f248
rol eax, 0xbc
popf
pushf
not eax
add eax, 0x6f33ff40
xor eax, 0x76bea43b
rol eax, 0x85
popf
pushf
not eax
add eax, 0x6c4da10d
xor eax, 0x24db7156
rol eax, 0x1c
popf
jmp 0x1400c23d0
push rax
pushf
mov eax, 0xfe29d321
pushf
not eax
add eax, 0x6328778
xor eax, 0x4657b4f4
rol eax, 0x8b
popf
pushf
not eax
add eax, 0x709a7f8f
xor eax, 0x33887ca8
rol eax, 0x24
popf
pushf
not eax
add eax, 0x283742ef
xor eax, 0x765627aa
rol eax, 0xce
popf
jmp 0x1400c23d0
mov rcx, qword [rsp + 0x28]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c2c6a
push rax
pushf
mov eax, 0xb977facc
pushf
not eax
add eax, 0x1a6296dc
xor eax, 0x1d3493e2
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x111803f
xor eax, 0x2e2c3607
rol eax, 0xbe
popf
pushf
not eax
add eax, 0x4f05e7c7
xor eax, 0x6a78283
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x7e36b7c5
xor eax, 0x4743f1f7
rol eax, 0x50
popf
jmp 0x1400c23d0
push rax
pushf
mov eax, 0xbd6c3787
pushf
not eax
add eax, 0x5fd8c3b0
xor eax, 0x9f7d6a0
rol eax, 0xe9
popf
pushf
not eax
add eax, 0x44ddc808
xor eax, 0x64b055f9
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x41ba8b6
xor eax, 0x1bc79f7f
rol eax, 0x67
popf
pushf
not eax
add eax, 0x24436f0
xor eax, 0x7ae29d09
rol eax, 0xcd
popf
jmp 0x1400c23d0
mov rcx, qword [rcx - 8]
add rdx, 0x27
push rcx
not rcx
add rax, rcx
pop rcx
add rax, 1
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c2d2b
push rax
pushf
mov eax, 0xa901dabb
pushf
not eax
add eax, 0x1caab0e1
xor eax, 0x29750970
rol eax, 0x23
popf
pushf
not eax
add eax, 0x61ab6e12
xor eax, 0xa0dd33a
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x4be8493b
xor eax, 0x73dd2f85
rol eax, 0xdc
popf
jmp 0x1400c23d0
push rax
pushf
mov eax, 0xc196a439
pushf
not eax
add eax, 0x348ce9b4
xor eax, 0x19d29664
rol eax, 0x4b
popf
pushf
not eax
add eax, 0x7071ea14
xor eax, 0x3b71b324
rol eax, 0x82
popf
pushf
not eax
add eax, 0x43ae2814
xor eax, 0x7c57344d
rol eax, 0x56
popf
pushf
not eax
add eax, 0x5a7312c
xor eax, 0x1fe5d9a2
rol eax, 0x85
popf
jmp 0x1400c23d0
call fcn.140100bbf
push rax
pushf
mov eax, 0xdc775fdc
pushf
not eax
add eax, 0x45fdd541
xor eax, 0x54a79664
rol eax, 0xef
popf
pushf
not eax
add eax, 0x7287aee0
xor eax, 0x5e814141
rol eax, 0x1c
popf
pushf
not eax
add eax, 0x56435659
xor eax, 0x684ae94e
rol eax, 0xa1
popf
jmp 0x1400c23d0
inc ebx
cmp ebx, dword [rdi]
jb 0x1400c2e33
push rax
pushf
mov eax, 0x7eea8ff3
pushf
not eax
add eax, 0x2a8eb9f3
xor eax, 0x1e0f6829
rol eax, 0x70
popf
pushf
not eax
add eax, 0x2b1365d5
xor eax, 0x78e3df73
rol eax, 0x9e
popf
pushf
not eax
add eax, 0x1261d8b0
xor eax, 0x71c92f54
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x7d448251
xor eax, 0x140b7bb4
rol eax, 0x8d
popf
jmp 0x1400c23d0
push rax
pushf
mov eax, 0x5aada209
pushf
not eax
add eax, 0x6f7c8cbe
xor eax, 0x1d352bd3
rol eax, 0x77
popf
pushf
not eax
add eax, 0x21c83457
xor eax, 0x6f033676
rol eax, 0xa
popf
jmp 0x1400c23d0
xor edx, edx
mov r8d, 0x43a4da00
pushf
not r8d
add r8d, 0x70d324b8
xor r8d, 0x5e94b5b4
rol r8d, 0x66
popf
pushf
not r8d
add r8d, 0x6a36cd55
xor r8d, 0x7bf96827
rol r8d, 0xf
popf
pushf
not r8d
add r8d, 0x15924c9a
xor r8d, 0x307da004
rol r8d, 0x54
popf
pushf
not r8d
add r8d, 0x2722518
xor r8d, 0x3d14f321
rol r8d, 0x1b
popf
mov rcx, rdi
jmp 0x1400c2ed6
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor eax, eax
push rax
pushf
mov eax, 0xa1ad2ea4
pushf
not eax
add eax, 0x28ecee15
xor eax, 0x4152c252
rol eax, 0x56
popf
pushf
not eax
add eax, 0x637165f7
xor eax, 0x193fca97
rol eax, 0xea
popf
jmp 0x1400c23d0
mov rsi, qword [rsp + 0x80]
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.1400ff118
add rsp, 0x50
pop r14
pop rdi
pop rbp
ret
mov rbx, qword [rsi + 0x18]
xor edx, edx
mov r8d, 0x64031ec3
pushf
not r8d
add r8d, 0x529c029f
xor r8d, 0x5a147bd1
rol r8d, 0xe0
popf
pushf
not r8d
add r8d, 0x5c41dfb1
xor r8d, 0x7653b0c4
rol r8d, 0xbc
popf
pushf
not r8d
add r8d, 0x501bacab
xor r8d, 0x22fc3d34
rol r8d, 0x7f
popf
mov rcx, rdi
jmp 0x1400c2fd5
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rdx, qword [rsp + 0x40]
cmp rdx, 0xf
jbe 0x1400c3019
push rax
pushf
mov eax, 0xd9e852f6
pushf
not eax
add eax, 0x24ae2f3a
xor eax, 0x2ed2fe8c
rol eax, 0x88
popf
pushf
not eax
add eax, 0x25bcaccc
xor eax, 0xe19dd67
rol eax, 0xed
popf
jmp 0x1400c23d0
push rax
pushf
mov eax, 0x20352d1a
pushf
not eax
add eax, 0x2a88ecf8
xor eax, 0x3e55ce89
rol eax, 0x5e
popf
pushf
not eax
add eax, 0x6e0cf150
xor eax, 0x610b55ba
rol eax, 0x3c
popf
jmp 0x1400c23d0
mov rcx, qword [rsp + 0x28]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c30b9
push rax
pushf
mov eax, 0x14003f07
pushf
not eax
add eax, 0x6138be8f
xor eax, 0x24a53d73
rol eax, 0x19
popf
pushf
not eax
add eax, 0x592aeb2d
xor eax, 0x2ede6c83
rol eax, 0xca
popf
pushf
not eax
add eax, 0xe1eaad2
xor eax, 0x50c3c716
rol eax, 0x8f
popf
pushf
not eax
add eax, 0x4fd75403
xor eax, 0x24b678cc
rol eax, 0xe6
popf
jmp 0x1400c23d0
push rax
pushf
mov eax, 0x6600205f
pushf
not eax
add eax, 0x34c0a4dd
xor eax, 0x73a6d0b1
rol eax, 0
popf
pushf
not eax
add eax, 0x1ef78b24
xor eax, 0x61912557
rol eax, 0xb8
popf
jmp 0x1400c23d0
mov rcx, qword [rcx - 8]
add rdx, 0x27
push rcx
not rcx
add rax, rcx
pop rcx
add rax, 1
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400c3163
push rax
pushf
mov eax, 0xe9cb91b3
pushf
not eax
add eax, 0x6f31eed6
xor eax, 0x2478e6f0
rol eax, 0x3a
popf
pushf
not eax
add eax, 0x36e4cfb7
xor eax, 0x45f9f5bc
rol eax, 0x63
popf
pushf
not eax
add eax, 0x792cf905
xor eax, 0x21dee8ee
rol eax, 0xb7
popf
pushf
not eax
add eax, 0x5eaae220
xor eax, 0x7a24289d
rol eax, 0x99
popf
jmp 0x1400c23d0
push rax
pushf
mov eax, 0x2ca0850b
pushf
not eax
add eax, 0x695bbad0
xor eax, 0x404005fa
rol eax, 0x25
popf
pushf
not eax
add eax, 0x2c74961a
xor eax, 0x742e6790
rol eax, 0xee
popf
pushf
not eax
add eax, 0x3e0af2a3
xor eax, 0x394363a
rol eax, 0xfb
popf
jmp 0x1400c23d0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140100bbf
push rax
pushf
mov eax, 0x80b3ad16
pushf
not eax
add eax, 0x349c6acd
xor eax, 0x2692d303
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x1472c92c
xor eax, 0x34750ccb
rol eax, 0x5f
popf
pushf
not eax
add eax, 0x2f8b18a2
xor eax, 0x4106f51c
rol eax, 0x76
popf
jmp 0x1400c23d0
mov rax, rbx
jmp 0x1400c2f11