Function at 0x14007e150
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xb0
mov rax, qword [0x1401b4a98]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov rsi, rcx
xor r15d, r15d
mov dword [rbp - 9], r15d
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], r15w
mov dword [rbp - 9], 1
lea rcx, [rbp + 7]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx eax, word [rbp + 7]
cmp r15w, ax
jne 0x14007e1d0
lea r8d, [r15 + 2]
lea rdx, [0x14014f43c]
lea rcx, [rbp - 0x29]
call fcn.140002fb0
movzx eax, word [rbp + 7]
mov ecx, 9
cmp cx, ax
jne 0x14007e1f2
lea r8d, [rcx - 7]
lea rdx, [0x14014f444]
lea rcx, [rbp - 0x29]
call fcn.140002fb0
movzx eax, word [rbp + 7]
mov ebx, 5
cmp bx, ax
jne 0x14007e214
lea r8d, [rbx - 2]
lea rdx, [0x14014f450]
lea rcx, [rbp - 0x29]
call fcn.140002fb0
movzx eax, word [rbp + 7]
mov ecx, 0xc
cmp cx, ax
jne 0x14007e231
mov r8, rbx
lea rdx, str.ARM64
lea rcx, [rbp - 0x29]
call fcn.140002fb0
mov qword [rbp - 0x49], r15
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x31], 7
mov word [rbp - 0x49], r15w
mov rdx, qword [str.plat]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14007e260
lea rcx, [rbp - 0x49]
call fcn.140002fb0
nop
lea rdx, [rbp - 0x49]
lea rcx, [rsi + 0x10]
call fcn.14001fb70
lea rcx, [rbp - 0x29]
cmp rax, rcx
je 0x14007e2a6
lea rdx, [rbp - 0x29]
cmp qword [rbp - 0x11], 8
cmovae rdx, qword [rbp - 0x29]
mov r8, qword [rbp - 0x19]
mov rcx, rax
call fcn.140002fb0
nop
mov rdx, qword [rbp - 0x31]
cmp rdx, 8
jb 0x14007e2e6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007e2e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007e950
call fcn.140074f80
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x31], 7
mov word [rbp - 0x49], r15w
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x14007e337
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007e332
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007e956
call fcn.140074f80
lea rcx, [rbp - 0x29]
call fcn.14007dea0
mov rdi, rax
mov qword [rbp - 0x49], r15
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x31], 7
mov word [rbp - 0x49], r15w
mov rdx, qword [0x1401b04d0]
mov r8, rbx
inc r8
cmp word [rdx + r8*2], 0
jne 0x14007e362
lea rcx, [rbp - 0x49]
call fcn.140002fb0
nop
lea rdx, [rbp - 0x49]
lea rcx, [rsi + 0x10]
call fcn.14001fb70
cmp rax, rdi
je 0x14007e3a3
mov r8, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 8
jb 0x14007e397
mov rdi, qword [rdi]
mov rdx, rdi
mov rcx, rax
call fcn.140002fb0
nop
mov rdx, qword [rbp - 0x31]
cmp rdx, 8
jb 0x14007e3e3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007e3de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007e95c
call fcn.140074f80
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x31], 7
mov word [rbp - 0x49], r15w
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x14007e434
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007e42f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007e962
call fcn.140074f80
lea rcx, [rbp - 0x29]
call fcn.14007dc50
mov rdi, rax
mov qword [rbp - 0x49], r15
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x31], 7
mov word [rbp - 0x49], r15w
mov rdx, qword [0x1401b04e0]
mov r8, rbx
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x14007e460
lea rcx, [rbp - 0x49]
call fcn.140002fb0
nop
lea rdx, [rbp - 0x49]
lea rcx, [rsi + 0x10]
call fcn.14001fb70
cmp rax, rdi
je 0x14007e4a1
mov r8, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 8
jb 0x14007e495
mov rdi, qword [rdi]
mov rdx, rdi
mov rcx, rax
call fcn.140002fb0
nop
mov rdx, qword [rbp - 0x31]
cmp rdx, 8
jb 0x14007e4e1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007e4dc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007e968
call fcn.140074f80
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x31], 7
mov word [rbp - 0x49], r15w
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x14007e532
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007e52d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007e96e
call fcn.140074f80
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], r15w
mov r8d, 1
lea rdx, [0x14016c908]
lea rcx, [rbp - 0x29]
call fcn.140002fb0
nop
mov qword [rbp - 0x49], r15
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x31], 7
mov word [rbp - 0x49], r15w
mov rdx, qword [0x1401b04e8]
mov r8, rbx
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14007e580
lea rcx, [rbp - 0x49]
call fcn.140002fb0
nop
lea rdx, [rbp - 0x49]
lea rcx, [rsi + 0x10]
call fcn.14001fb70
lea rcx, [rbp - 0x29]
cmp rax, rcx
je 0x14007e5c6
lea rdx, [rbp - 0x29]
cmp qword [rbp - 0x11], 8
cmovae rdx, qword [rbp - 0x29]
mov r8, qword [rbp - 0x19]
mov rcx, rax
call fcn.140002fb0
nop
mov rdx, qword [rbp - 0x31]
cmp rdx, 8
jb 0x14007e606
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007e601
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007e974
call fcn.140074f80
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x31], 7
mov word [rbp - 0x49], r15w
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x14007e657
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007e652
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007e97a
call fcn.140074f80
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], r15w
mov r8d, 3
lea rdx, [0x14014f178]
lea rcx, [rbp - 0x29]
call fcn.140002fb0
nop
mov qword [rbp - 0x49], r15
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x31], 7
mov word [rbp - 0x49], r15w
mov rdx, qword [str.UPDATER_VERSION]
nop
inc rbx
cmp word [rdx + rbx*2], 0
jne 0x14007e6a0
mov r8, rbx
lea rcx, [rbp - 0x49]
call fcn.140002fb0
nop
lea rdx, [rbp - 0x49]
lea rcx, [rsi + 0x10]
call fcn.14001fb70
lea rcx, [rbp - 0x29]
cmp rax, rcx
je 0x14007e6e8
lea rdx, [rbp - 0x29]
cmp qword [rbp - 0x11], 8
cmovae rdx, qword [rbp - 0x29]
mov r8, qword [rbp - 0x19]
mov rcx, rax
call fcn.140002fb0
nop
mov rdx, qword [rbp - 0x31]
cmp rdx, 8
jb 0x14007e728
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007e723
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007e980
call fcn.140074f80
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x31], 7
mov word [rbp - 0x49], r15w
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x14007e779
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007e774
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007e94a
call fcn.140074f80
mov rbx, qword [str.FILE_EXISTS]
lea rcx, [rbp - 1]
call fcn.14007d930
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 9], rcx
lea r8, [rbp - 9]
mov rdx, rbx
mov rcx, rsi
call fcn.14007ea40
nop
mov rcx, qword [rbp - 1]
test rcx, rcx
je 0x14007e7bf
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x14000cca5.0]
mov rbx, qword [str.FVER]
lea rcx, [rbp - 1]
call fcn.14007d980
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 9], rcx
lea r8, [rbp - 9]
mov rdx, rbx
mov rcx, rsi
call fcn.14007ea40
nop
mov rcx, qword [rbp - 1]
test rcx, rcx
je 0x14007e805
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x14000cca5.0]
mov rbx, qword [0x1401b0558]
lea rcx, [rbp - 1]
call fcn.14007d8e0
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 9], rcx
lea r8, [rbp - 9]
mov rdx, rbx
mov rcx, rsi
call fcn.14007ea40
nop
mov rcx, qword [rbp - 1]
test rcx, rcx
je 0x14007e84b
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x14000cca5.0]
mov rdx, qword [0x1401b0578]
mov rcx, rsi
call fcn.14007d580
mov rdx, qword [str.REG32]
mov rcx, rsi
call fcn.14007d580
lea r8, [0x14007db60]
mov rdx, qword [str.REG64]
mov rcx, rsi
call fcn.14007e990
lea r8, [0x14007dc00]
mov rdx, qword [str.REGISTRY]
mov rcx, rsi
call fcn.14007e990
mov rdx, qword [0x1401b0598]
mov rcx, rsi
call fcn.14007d510
mov rdx, qword [str.RGO32]
mov rcx, rsi
call fcn.14007d510
lea r8, [0x14007da70]
mov rdx, qword [str.RGO64]
mov rcx, rsi
call fcn.14007e990
lea r8, [0x14007db10]
mov rdx, qword [str.OREGISTRY]
mov rcx, rsi
call fcn.14007e990
lea r8, [0x14007d9d0]
mov rdx, qword [0x1401b05c0]
mov rcx, rsi
call fcn.14007e990
lea r8, [0x14007da20]
mov rdx, qword [0x1401b05c8]
mov rcx, rsi
call fcn.14007e990
lea r8, [0x14007d890]
mov rdx, qword [str.DATE]
mov rcx, rsi
call fcn.14007e990
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.1400fb890
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.140103230
nop
call fcn.140103230
nop
call fcn.140103230
nop
call fcn.140103230
nop
call fcn.140103230
nop
call fcn.140103230
nop
call fcn.140103230
nop
call fcn.140103230
nop
call fcn.140103230
nop
call fcn.140103230
int3