Function at 0x1400256d0
Capabilities:
Get system information on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x168
movaps xmmword [rsp + 0x150], xmm6
mov r14, rcx
mov rax, qword [0x1402db040]
xor rax, rsp
mov qword [rsp + 0x148], rax
lea rdi, [rsp + 0xf0]
mov qword [rdi], rdx
mov rcx, rdi
call fcn.140113bd0
mov rsi, qword [rdi]
mov rax, qword [0x140334ff8]
test rax, rax
je 0x140025a01
mov rcx, qword [0x140335000]
cmp rcx, rsi
ja 0x140025d10
cmp rax, rsi
jb 0x140025d10
lea r8, [rsp + 0x60]
mov qword [r8], 0
mov rdx, qword [rsp + 0xf0]
mov ecx, 4
call qword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
test eax, eax
je 0x140025d05
mov rdi, qword [rsp + 0x60]
test rdi, rdi
je 0x140025785
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
call fcn.140113f90
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_SetLastError]
test rdi, rdi
je 0x140025cfc
xor ebx, ebx
mov qword [rsp + 0x58], rbx
call fcn.140113f90
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
call fcn.140113f90
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov dword [rsp + 0x12b], ebx
mov dword [rsp + 0x128], ebx
movaps xmm6, xmmword [0x140299a90]
lea rdx, [rsp + 0x130]
movaps xmmword [rdx], xmm6
lea r8, [rsp + 0x124]
mov dword [r8], 0xaaaaaaaa
lea r9, [rsp + 0x118]
mov qword [r9], rbx
lea rax, [rsp + 0x110]
mov qword [rax], rbx
lea r10, [0x14029b9e0]
lea rcx, [rsp + 0x60]
mov qword [rcx], r10
mov qword [rcx + 8], rdi
mov qword [rsp + 0x20], rax
call fcn.140025f20
test al, al
mov qword [rsp + 0x50], r14
je 0x140025d99
xorps xmm0, xmm0
lea rbx, [rsp + 0x60]
movaps xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov rdx, qword [rsp + 0x110]
mov rcx, qword [rsp + 0x118]
mov r8, rbx
call fcn.140158cd0
test al, al
je 0x140025db2
movsx rax, byte [rsp + 0x77]
test rax, rax
cmovs rax, qword [rsp + 0x68]
cmovs rbx, qword [rsp + 0x60]
lea rdx, [rsp + 0xc8]
mov qword [rdx], rbx
mov qword [rdx + 8], rax
lea r15, [rsp + 0xd8]
mov rcx, r15
call fcn.14015f7d0
lea r12, [rsp + 0xf0]
mov rcx, r15
mov rdx, r12
call fcn.140167f30
mov rsi, qword [r12]
mov rbx, qword [r12 + 8]
mov eax, dword [r12 + 0x10]
mov dword [rsp + 0x128], eax
mov eax, dword [r12 + 0x13]
mov dword [rsp + 0x12b], eax
mov bpl, byte [r12 + 0x17]
mov byte [r12 + 0x17], 0
mov word [r12], 0
cmp byte [r15 + 0x17], 0
jns 0x1400258df
mov rcx, qword [rsp + 0xd8]
call fcn.1401a9dc4
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x100], rax
movaps xmmword [rsp + 0xf0], xmm6
lea rdx, [rsp + 0x130]
mov rcx, r12
call fcn.140026050
lea rax, [0x1402c37b4]
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc0], 3
movsx rax, byte [rsp + 0x107]
mov rdx, r12
test rax, rax
jns 0x140025945
mov rax, qword [rsp + 0xf8]
mov rdx, qword [rsp + 0xf0]
lea rcx, [rsp + 0xa8]
mov qword [rcx], rdx
mov qword [rcx + 8], rax
lea rdx, [rsp + 0xb8]
mov r8, r12
call fcn.14018c080
mov edx, dword [rsp + 0x124]
mov rcx, r15
call fcn.140025dd0
movsx r14, byte [rsp + 0xef]
test r14, r14
jns 0x140025991
mov r14, qword [rsp + 0xe0]
mov r15, qword [rsp + 0xd8]
test r14, r14
sete al
test r15, r15
setne cl
or cl, al
je 0x140025cfa
movsx rax, byte [rsp + 0x107]
mov edx, 0xa
mov r12, rax
test rax, rax
jns 0x1400259d8
movabs rdx, 0x7fffffffffffffff
and rdx, qword [rsp + 0x100]
dec rdx
mov r12, qword [rsp + 0xf8]
mov rcx, rdx
sub rcx, r12
cmp rcx, r14
jb 0x140025a3c
test r14, r14
je 0x140025ad2
test al, al
js 0x140025a7b
lea r13, [rsp + 0xf0]
jmp 0x140025a83
movaps xmm0, xmmword [0x140299a90]
lea rdi, [rsp + 0x60]
movaps xmmword [rdi + 0x20], xmm0
movaps xmmword [rdi + 0x10], xmm0
movaps xmmword [rdi], xmm0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov rcx, qword [rdi + 8]
mov rax, qword [rdi + 0x10]
mov qword [0x140334ff8], rax
mov qword [0x140335000], rcx
jmp 0x14002572d
lea r8, [r12 + r14]
sub r8, rdx
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x20], r12
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0xf0]
mov r9, r12
call fcn.14014d400
jmp 0x140025ad2
mov eax, r12d
and al, 0x7f
mov byte [rsp + 0x107], al
jmp 0x140025aca
mov r13, qword [rsp + 0xf0]
test r14, r14
js 0x140025cfa
lea rcx, [r12*2]
add rcx, r13
cmp r15, rcx
jb 0x140025aa9
lea rax, [rcx + r14*2]
cmp r15, rax
jb 0x140025cfa
lea r8, [r14 + r14]
mov rdx, r15
call fcn.1401e56b0
add r12, r14
cmp byte [rsp + 0x107], 0
jns 0x140025a6d
mov qword [rsp + 0xf8], r12
mov word [r13 + r12*2], 0
mov qword [rsp + 0x48], rbp
cmp byte [rsp + 0xef], 0
js 0x140025d2c
lea rbp, [rsp + 0xf0]
movsx rax, byte [rbp + 0x17]
test rax, rax
cmovs rax, qword [rbp + 8]
mov rcx, qword [rbp]
cmovns rcx, rbp
lea rdx, [rsp + 0x98]
mov qword [rdx], rcx
mov qword [rdx + 8], rax
lea r13, [rsp + 0xd8]
mov rcx, r13
call fcn.14015b7d0
mov r15, qword [r13]
mov r12, qword [r13 + 8]
mov r14, qword [r13 + 0x10]
cmp byte [rbp + 0x17], 0
jns 0x140025b40
mov rcx, qword [rsp + 0xf0]
call fcn.1401a9dc4
cmp byte [rsp + 0x77], 0
jns 0x140025b51
mov rcx, qword [rsp + 0x60]
call fcn.1401a9dc4
lea r13, [rsp + 0xf0]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [r13 + 0x10], rax
movaps xmmword [r13], xmm6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov rdx, rdi
mov r8, r13
mov r9d, Ordinal_26
call sub.KERNEL32.dll_K32GetModuleInformation
test eax, eax
je 0x140025d3e
mov ecx, 0x58
call fcn.1401a9d88
mov r13, rax
movaps xmm0, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x60], xmm0
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x70], rax
call fcn.140113f90
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
call fcn.140113f90
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rax, fcn.14006c510
mov qword [r13], rax
mov qword [r13 + 8], 0
call fcn.140113f90
cmp qword [r13 + 8], rdi
je 0x140025c11
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
cmp qword [r13 + 8], 0
jne 0x140025d4e
mov qword [r13 + 8], rdi
call fcn.140113f90
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rsp + 0x70]
mov qword [r13 + 0x20], rax
movaps xmm0, xmmword [rsp + 0x60]
movups xmmword [r13 + 0x10], xmm0
test r14, r14
jns 0x140025d62
lea rcx, [r13 + 0x28]
mov rdx, r15
mov r8, r12
call fcn.140118510
mov r12, rsi
mov rsi, qword [rsp + 0x48]
test sil, sil
jns 0x140025cd3
mov rcx, r13
add rcx, 0x40
mov rdx, r12
mov r8, rbx
call fcn.14015b370
xor edi, edi
test r14, r14
jns 0x140025c6e
mov rcx, r15
call fcn.1401a9dc4
test sil, sil
mov r14, qword [rsp + 0x50]
jns 0x140025c80
mov rcx, r12
call fcn.1401a9dc4
test rdi, rdi
jne 0x140025d73
mov rdi, qword [rsp + 0x58]
mov qword [r14], r13
test rdi, rdi
jne 0x140025d86
mov rcx, qword [rsp + 0x148]
xor rcx, rsp
cmp rcx, qword [0x1402db040]
je 0x140025cb4
call fcn.1401ac870
int3
mov rax, r14
movaps xmm6, xmmword [rsp + 0x150]
add rsp, 0x168
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov qword [r13 + 0x40], r12
mov qword [r13 + 0x48], rbx
mov eax, dword [rsp + 0x128]
mov ecx, dword [rsp + 0x12b]
mov dword [r13 + 0x50], eax
mov dword [r13 + 0x53], ecx
mov byte [r13 + 0x57], sil
jmp 0x140025c5f
ud2
mov qword [r14], 0
jmp 0x140025c9a
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x140025766
lea rdi, [rsp + 0x58]
mov qword [rdi], 0
mov rcx, rdi
call fcn.140252ba0
mov rdi, qword [rdi]
jmp 0x140025785
mov rcx, qword [rsp + 0xd8]
call fcn.1401a9dc4
jmp 0x140025ae5
xor r13d, r13d
mov r12, rsi
mov rsi, qword [rsp + 0x48]
jmp 0x140025c61
call fcn.140113f90
mov rcx, qword [r13 + 8]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x140025c00
mov qword [r13 + 0x28], r15
mov qword [r13 + 0x30], r12
mov qword [r13 + 0x38], r14
jmp 0x140025c3c
call fcn.140113f90
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x140025c89
call fcn.140113f90
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x140025c9a
xor esi, esi
mov qword [rsp + 0x48], 0
xor r12d, r12d
xor r14d, r14d
xor r15d, r15d
jmp 0x140025b51
xor esi, esi
xor ebx, ebx
mov qword [rsp + 0x48], 0
xor r12d, r12d
xor r14d, r14d
xor r15d, r15d
jmp 0x140025b40