Function at 0x1400024a0
Capabilities:
Get system information on windows

Disassembly:
mov rax, rsp
push rbp
push rdi
push r14
lea rbp, [rax - 0x5f]
sub rsp, 0xc0
mov qword [rbp - 0x59], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov rax, qword [0x14003e010]
xor rax, rsp
mov qword [rbp + 0x3f], rax
mov rdi, r8
mov rbx, rdx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x41], xmm0
movdqa xmm1, xmmword [0x140035a30]
movdqu xmmword [rbp - 0x41], xmm1
xor r14d, r14d
mov word [rbp - 0x51], r14w
call fcn.140002050
cmp qword [rax], r14
jne 0x140002508
mov rdx, rbx
mov rcx, rax
call fcn.1400020f0
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x140002742
lea rdx, [0x140034618]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140002742
lea rcx, [rbp + 0xf]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movzx eax, word [rbp + 0xf]
cmp ax, 9
je 0x140002555
cmp ax, 6
jne 0x140002742
xorps xmm0, xmm0
movdqu xmmword [rbp - 1], xmm0
movdqa xmm1, xmmword [0x140035a30]
movdqu xmmword [rbp - 1], xmm1
mov word [rbp - 0x11], r14w
mov r8d, 0x14
lea rdx, str.2345ImageThumb64.dll
lea rcx, [rbp - 0x11]
call fcn.140004e30
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x21], xmm0
movdqa xmm1, xmmword [0x140035a30]
movdqu xmmword [rbp - 0x21], xmm1
mov word [rbp - 0x31], r14w
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop word [rax + rax]
inc r8
cmp word [rdi + r8*2], 0
jne 0x1400025b0
mov rdx, rdi
lea rcx, [rbp - 0x31]
call fcn.140004e30
nop
lea r8, [rbp - 0x11]
lea rdx, [rbp - 0x31]
lea rcx, [rbp + 0xf]
call fcn.14000b580
mov rbx, rax
lea rax, [rbp - 0x51]
cmp rax, rbx
je 0x14000260d
lea rcx, [rbp - 0x51]
call fcn.140004dc0
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x41], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rbp + 0x27]
cmp rdx, 8
jb 0x14000264d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002648
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002d6f
call fcn.14001881c
movdqa xmm0, xmmword [0x140035a30]
movdqu xmmword [rbp + 0x1f], xmm0
mov word [rbp + 0xf], r14w
mov rdx, qword [rbp - 0x19]
cmp rdx, 8
jb 0x14000269f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000269a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002d75
call fcn.14001881c
movdqa xmm0, xmmword [0x140035a30]
movdqu xmmword [rbp - 0x21], xmm0
mov word [rbp - 0x31], r14w
mov rdx, qword [rbp + 7]
cmp rdx, 8
jb 0x1400026f1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400026ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002d7b
call fcn.14001881c
movdqa xmm0, xmmword [0x140035a30]
movdqu xmmword [rbp - 1], xmm0
mov word [rbp - 0x11], r14w
lea rcx, [rbp - 0x51]
call fcn.14000a250
test al, al
je 0x140002929
lea rbx, [rbp - 0x51]
cmp qword [rbp - 0x39], 8
cmovae rbx, qword [rbp - 0x51]
call fcn.140005e40
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140005f30
test al, al
jne 0x140002929
jmp 0x140002cdb
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x21], xmm0
movdqa xmm1, xmmword [0x140035a30]
movdqu xmmword [rbp - 0x21], xmm1
mov word [rbp - 0x31], r14w
mov r8d, 0x12
lea rdx, str.2345ImageThumb.dll
lea rcx, [rbp - 0x31]
call fcn.140004e30
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 1], xmm0
movdqa xmm1, xmmword [0x140035a30]
movdqu xmmword [rbp - 1], xmm1
mov word [rbp - 0x11], r14w
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop word [rax + rax]
inc r8
cmp word [rdi + r8*2], 0
jne 0x1400027a0
mov rdx, rdi
lea rcx, [rbp - 0x11]
call fcn.140004e30
nop
lea r8, [rbp - 0x31]
lea rdx, [rbp - 0x11]
lea rcx, [rbp + 0xf]
call fcn.14000b580
mov rbx, rax
lea rax, [rbp - 0x51]
cmp rax, rbx
je 0x1400027fd
lea rcx, [rbp - 0x51]
call fcn.140004dc0
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x41], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rbp + 0x27]
cmp rdx, 8
jb 0x14000283d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002838
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002d81
call fcn.14001881c
movdqa xmm0, xmmword [0x140035a30]
movdqu xmmword [rbp + 0x1f], xmm0
mov word [rbp + 0xf], r14w
mov rdx, qword [rbp + 7]
cmp rdx, 8
jb 0x14000288f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000288a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002d87
call fcn.14001881c
movdqa xmm0, xmmword [0x140035a30]
movdqu xmmword [rbp - 1], xmm0
mov word [rbp - 0x11], r14w
mov rdx, qword [rbp - 0x19]
cmp rdx, 8
jb 0x1400028e1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400028dc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002d8d
call fcn.14001881c
movdqa xmm0, xmmword [0x140035a30]
movdqu xmmword [rbp - 0x21], xmm0
mov word [rbp - 0x31], r14w
lea rcx, [rbp - 0x51]
call fcn.14000a250
test al, al
je 0x140002929
lea rbx, [rbp - 0x51]
cmp qword [rbp - 0x39], 8
cmovae rbx, qword [rbp - 0x51]
call fcn.140005e40
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140005f30
test al, al
je 0x140002cdb
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x21], xmm0
movdqa xmm1, xmmword [0x140035a30]
movdqu xmmword [rbp - 0x21], xmm1
mov word [rbp - 0x31], r14w
mov r8d, 0xd
lea rdx, str.FreeImage.dll
lea rcx, [rbp - 0x31]
call fcn.140004e30
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 1], xmm0
movdqa xmm1, xmmword [0x140035a30]
movdqu xmmword [rbp - 1], xmm1
mov word [rbp - 0x11], r14w
mov r8, rsi
nop word [rax + rax]
inc r8
cmp word [rdi + r8*2], 0
jne 0x140002980
mov rdx, rdi
lea rcx, [rbp - 0x11]
call fcn.140004e30
nop
lea r8, [rbp - 0x31]
lea rdx, [rbp - 0x11]
lea rcx, [rbp + 0xf]
call fcn.14000b580
mov rbx, rax
lea rax, [rbp - 0x51]
cmp rax, rbx
je 0x1400029dd
lea rcx, [rbp - 0x51]
call fcn.140004dc0
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x41], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rbp + 0x27]
cmp rdx, 8
jb 0x140002a1d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002a18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002d93
call fcn.14001881c
movdqa xmm0, xmmword [0x140035a30]
movdqu xmmword [rbp + 0x1f], xmm0
mov word [rbp + 0xf], r14w
mov rdx, qword [rbp + 7]
cmp rdx, 8
jb 0x140002a6f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002a6a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002d99
call fcn.14001881c
movdqa xmm0, xmmword [0x140035a30]
movdqu xmmword [rbp - 1], xmm0
mov word [rbp - 0x11], r14w
mov rdx, qword [rbp - 0x19]
cmp rdx, 8
jb 0x140002ac1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002abc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002d9f
call fcn.14001881c
movdqa xmm0, xmmword [0x140035a30]
movdqu xmmword [rbp - 0x21], xmm0
mov word [rbp - 0x31], r14w
lea rcx, [rbp - 0x51]
call fcn.14000a250
test al, al
je 0x140002b09
lea rbx, [rbp - 0x51]
cmp qword [rbp - 0x39], 8
cmovae rbx, qword [rbp - 0x51]
call fcn.140005e40
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140005f30
test al, al
je 0x140002cdb
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x21], xmm0
movdqa xmm1, xmmword [0x140035a30]
movdqu xmmword [rbp - 0x21], xmm1
mov word [rbp - 0x31], r14w
mov r8d, 0x11
lea rdx, str.FreeImagePlus.dll
lea rcx, [rbp - 0x31]
call fcn.140004e30
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 1], xmm0
movdqa xmm1, xmmword [0x140035a30]
movdqu xmmword [rbp - 1], xmm1
mov word [rbp - 0x11], r14w
inc rsi
cmp word [rdi + rsi*2], 0
jne 0x140002b54
mov r8, rsi
mov rdx, rdi
lea rcx, [rbp - 0x11]
call fcn.140004e30
nop
lea r8, [rbp - 0x31]
lea rdx, [rbp - 0x11]
lea rcx, [rbp + 0xf]
call fcn.14000b580
mov rbx, rax
lea rax, [rbp - 0x51]
cmp rax, rbx
je 0x140002bb3
lea rcx, [rbp - 0x51]
call fcn.140004dc0
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x51], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x41], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rbp + 0x27]
cmp rdx, 8
jb 0x140002bf3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002bee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002da5
call fcn.14001881c
movdqa xmm0, xmmword [0x140035a30]
movdqu xmmword [rbp + 0x1f], xmm0
mov word [rbp + 0xf], r14w
mov rdx, qword [rbp + 7]
cmp rdx, 8
jb 0x140002c45
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c40
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002dab
call fcn.14001881c
movdqa xmm0, xmmword [0x140035a30]
movdqu xmmword [rbp - 1], xmm0
mov word [rbp - 0x11], r14w
mov rdx, qword [rbp - 0x19]
cmp rdx, 8
jb 0x140002c97
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002db1
call fcn.14001881c
movdqa xmm0, xmmword [0x140035a30]
movdqu xmmword [rbp - 0x21], xmm0
mov word [rbp - 0x31], r14w
lea rcx, [rbp - 0x51]
call fcn.14000a250
test al, al
je 0x140002cf2
lea rbx, [rbp - 0x51]
cmp qword [rbp - 0x39], 8
cmovae rbx, qword [rbp - 0x51]
call fcn.140005e40
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140005f30
test al, al
jne 0x140002cf2
lea rdx, [rbp - 0x51]
cmp qword [rbp - 0x39], 8
cmovae rdx, qword [rbp - 0x51]
call fcn.1400021b0
xor bl, bl
jmp 0x140002cf4
mov bl, 1
mov rdx, qword [rbp - 0x39]
cmp rdx, 8
jb 0x140002d30
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002d2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002d69
call fcn.14001881c
movdqa xmm0, xmmword [0x140035a30]
movdqu xmmword [rbp - 0x41], xmm0
mov word [rbp - 0x51], r14w
movzx eax, bl
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.140018000
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
call fcn.14001bf2c
nop
call fcn.14001bf2c
nop
call fcn.14001bf2c
nop
call fcn.14001bf2c
nop
call fcn.14001bf2c
nop
call fcn.14001bf2c
nop
call fcn.14001bf2c
nop
call fcn.14001bf2c
nop
call fcn.14001bf2c
nop
call fcn.14001bf2c
nop
call fcn.14001bf2c
nop
call fcn.14001bf2c
nop
call fcn.14001bf2c
int3