Function at 0x1400c0ab0
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xb0
mov rax, qword [0x14035dc30]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov rsi, rcx
xor r15d, r15d
mov dword [rbp - 0x49], r15d
mov qword [rbp - 0x19], r15
mov qword [rbp - 9], r15
mov qword [rbp - 1], 7
mov word [rbp - 0x19], r15w
mov dword [rbp - 0x49], 1
lea rcx, [rbp + 7]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx eax, word [rbp + 7]
cmp r15w, ax
jne 0x1400c0b30
lea r8d, [r15 + 2]
lea rdx, [0x1402c1d5c]
lea rcx, [rbp - 0x19]
call fcn.140025e70
movzx eax, word [rbp + 7]
mov ecx, 9
cmp cx, ax
jne 0x1400c0b52
lea r8d, [rcx - 7]
lea rdx, [0x1402c1d64]
lea rcx, [rbp - 0x19]
call fcn.140025e70
movzx eax, word [rbp + 7]
mov ebx, 5
cmp bx, ax
jne 0x1400c0b73
mov r8d, ebx
lea rdx, str.ARM32
lea rcx, [rbp - 0x19]
call fcn.140025e70
movzx eax, word [rbp + 7]
mov ecx, recv
cmp cx, ax
jne 0x1400c0b90
mov r8, rbx
lea rdx, str.ARM64
lea rcx, [rbp - 0x19]
call fcn.140025e70
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x21], 7
mov word [rbp - 0x39], r15w
mov rdx, qword [str.plat]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400c0bc0
lea rcx, [rbp - 0x39]
call fcn.140025e70
nop
lea rdx, [rbp - 0x39]
lea rcx, [rsi + 0x10]
call fcn.1400c0010
lea rcx, [rbp - 0x19]
cmp rax, rcx
je 0x1400c0c06
lea rdx, [rbp - 0x19]
cmp qword [rbp - 1], 8
cmovae rdx, qword [rbp - 0x19]
mov r8, qword [rbp - 9]
mov rcx, rax
call fcn.140025e70
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 8
jb 0x1400c0c46
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0c41
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c14dc
call fcn.140269844
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x21], 7
mov word [rbp - 0x39], r15w
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x1400c0c97
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0c92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c14e2
call fcn.140269844
lea rcx, [rbp - 0x19]
call fcn.1400c07f0
mov rdi, rax
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x21], 7
mov word [rbp - 0x39], r15w
mov rdx, qword [0x14035a710]
mov r8, rbx
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400c0cc2
lea rcx, [rbp - 0x39]
call fcn.140025e70
nop
lea rdx, [rbp - 0x39]
lea rcx, [rsi + 0x10]
call fcn.1400c0010
cmp rax, rdi
je 0x1400c0d03
mov r8, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 8
jb 0x1400c0cf7
mov rdi, qword [rdi]
mov rdx, rdi
mov rcx, rax
call fcn.140025e70
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 8
jb 0x1400c0d43
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0d3e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c14e8
call fcn.140269844
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x21], 7
mov word [rbp - 0x39], r15w
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x1400c0d94
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0d8f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c14ee
call fcn.140269844
lea rcx, [rbp - 0x19]
call fcn.1400c05a0
mov rdi, rax
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x21], 7
mov word [rbp - 0x39], r15w
mov rdx, qword [0x14035a720]
mov r8, rbx
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400c0dc0
lea rcx, [rbp - 0x39]
call fcn.140025e70
nop
lea rdx, [rbp - 0x39]
lea rcx, [rsi + 0x10]
call fcn.1400c0010
cmp rax, rdi
je 0x1400c0e01
mov r8, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 8
jb 0x1400c0df5
mov rdi, qword [rdi]
mov rdx, rdi
mov rcx, rax
call fcn.140025e70
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 8
jb 0x1400c0e41
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0e3c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c14f4
call fcn.140269844
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x21], 7
mov word [rbp - 0x39], r15w
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x1400c0e92
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0e8d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c14fa
call fcn.140269844
mov qword [rbp - 0x19], r15
mov qword [rbp - 9], r15
mov qword [rbp - 1], 7
mov word [rbp - 0x19], r15w
mov r8d, 1
lea rdx, [0x1402f98b0]
lea rcx, [rbp - 0x19]
call fcn.140025e70
nop
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x21], 7
mov word [rbp - 0x39], r15w
mov rdx, qword [0x14035a728]
mov r8, rbx
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400c0ee0
lea rcx, [rbp - 0x39]
call fcn.140025e70
nop
lea rdx, [rbp - 0x39]
lea rcx, [rsi + 0x10]
call fcn.1400c0010
lea rcx, [rbp - 0x19]
cmp rax, rcx
je 0x1400c0f26
lea rdx, [rbp - 0x19]
cmp qword [rbp - 1], 8
cmovae rdx, qword [rbp - 0x19]
mov r8, qword [rbp - 9]
mov rcx, rax
call fcn.140025e70
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 8
jb 0x1400c0f66
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0f61
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c1500
call fcn.140269844
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x21], 7
mov word [rbp - 0x39], r15w
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x1400c0fb7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0fb2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c1506
call fcn.140269844
mov qword [rbp - 0x19], r15
mov qword [rbp - 9], r15
mov qword [rbp - 1], 7
mov word [rbp - 0x19], r15w
mov r8d, 3
lea rdx, [0x1402c1a78]
lea rcx, [rbp - 0x19]
call fcn.140025e70
nop
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x21], 7
mov word [rbp - 0x39], r15w
mov rdx, qword [str.UPDATER_VERSION]
nop
inc rbx
cmp word [rdx + rbx*2], 0
jne 0x1400c1000
mov r8, rbx
lea rcx, [rbp - 0x39]
call fcn.140025e70
nop
lea rdx, [rbp - 0x39]
lea rcx, [rsi + 0x10]
call fcn.1400c0010
lea rcx, [rbp - 0x19]
cmp rax, rcx
je 0x1400c1048
lea rdx, [rbp - 0x19]
cmp qword [rbp - 1], 8
cmovae rdx, qword [rbp - 0x19]
mov r8, qword [rbp - 9]
mov rcx, rax
call fcn.140025e70
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 8
jb 0x1400c1088
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c1083
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c150c
call fcn.140269844
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x21], 7
mov word [rbp - 0x39], r15w
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x1400c10d9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c10d4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c14d6
call fcn.140269844
mov rbx, qword [str.FILE_EXISTS]
lea rcx, [rbp - 0x41]
call fcn.1400c0280
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c15d0
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c111f
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400ac8a1.0]
mov rbx, qword [str.pf__]
lea rcx, [rbp - 0x41]
call fcn.1400c02d0
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c15d0
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c1165
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400ac8a1.0]
mov rbx, qword [str.8i__]
lea rcx, [rbp - 0x41]
call fcn.1400c0230
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c15d0
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c11ab
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400ac8a1.0]
mov rbx, qword [0x14035a7c0]
lea rcx, [rbp - 0x41]
call fcn.1400c0500
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c15d0
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c11f1
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400ac8a1.0]
mov rbx, qword [str.REG32]
lea rcx, [rbp - 0x41]
call fcn.1400c0500
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c15d0
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c1237
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400ac8a1.0]
mov rbx, qword [str.REG64]
lea rcx, [rbp - 0x41]
call fcn.1400c04b0
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c15d0
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c127d
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400ac8a1.0]
mov rbx, qword [str.REGISTRY]
lea rcx, [rbp - 0x41]
call fcn.1400c0550
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c15d0
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c12c3
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400ac8a1.0]
mov rbx, qword [0x14035a7e0]
lea rcx, [rbp - 0x41]
call fcn.1400c0410
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c15d0
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c1309
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400ac8a1.0]
mov rbx, qword [str.RGO32]
lea rcx, [rbp - 0x41]
call fcn.1400c0410
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c15d0
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c134f
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400ac8a1.0]
mov rbx, qword [str._bo__]
lea rcx, [rbp - 0x41]
call fcn.1400c03c0
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c15d0
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c1395
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400ac8a1.0]
mov rbx, qword [str.OREGISTRY]
lea rcx, [rbp - 0x41]
call fcn.1400c0460
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c15d0
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c13db
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400ac8a1.0]
mov rbx, qword [str.hq__]
lea rcx, [rbp - 0x41]
call fcn.1400c0320
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c15d0
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c1421
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400ac8a1.0]
mov rbx, qword [str.pq__]
lea rcx, [rbp - 0x41]
call fcn.1400c0370
nop
mov rcx, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], rcx
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c15d0
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c1467
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400ac8a1.0]
mov rbx, qword [str.DATE]
lea rcx, [rbp - 0x41]
call fcn.1400c01e0
nop
mov r8, qword [rax]
mov qword [rax], r15
mov qword [rbp - 0x49], r8
lea r8, [rbp - 0x49]
mov rdx, rbx
mov rcx, rsi
call fcn.1400c15d0
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400c14ad
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x1400ac8a1.0]
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.140269300
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.140277ff8
nop
call fcn.140277ff8
nop
call fcn.140277ff8
nop
call fcn.140277ff8
nop
call fcn.140277ff8
nop
call fcn.140277ff8
nop
call fcn.140277ff8
nop
call fcn.140277ff8
nop
call fcn.140277ff8
nop
call fcn.140277ff8
int3