Function at 0x14018ca00
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
sub rsp, 0x98
lea rbp, [0x140489950]
mov qword [rsp + 0xc8], rbp
lea rax, vtable.CVolAppInstance.0
mov qword [0x140489950], rax
lea rax, vtable.CPoolMem.0
mov qword [0x140489958], rax
mov qword [0x140489980], 1
mov qword [0x140489978], 0x100
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
xor edx, edx
mov r8d, 0x400000
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rcx, rax
test rax, rax
je 0x14018cd10
mov qword [0x140489970], rax
mov qword [0x140489960], rax
add rax, 0x400000
mov qword [0x140489968], rax
mov edx, 0x1555
mov rax, qword [0x140489978]
nop dword [rax + rax]
add rax, rcx
mov qword [rcx], rax
mov rax, qword [0x140489978]
add rcx, rax
add rax, rcx
mov qword [rcx], rax
mov rax, qword [0x140489978]
add rcx, rax
add rax, rcx
mov qword [rcx], rax
mov rax, qword [0x140489978]
add rcx, rax
sub rdx, 1
jne 0x14018caa0
xor esi, esi
mov qword [rcx], rsi
lea rax, [0x140489988]
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], rax
lea rdi, vtable.CVolObject.0
mov qword [0x140489988], rdi
mov qword [0x140489990], rsi
mov qword [0x140489998], rsi
lea rbx, vtable.CVolMem.0
mov qword [0x140489988], rbx
mov qword [0x1404899a0], rsi
mov qword [0x1404899b0], rsi
mov qword [0x1404899a8], rsi
mov qword [0x1404899b8], 0x40
mov qword [0x1404899b8], 0x100
mov qword [0x1404899c0], rsi
lea rcx, [0x1404899e0]
mov qword [rsp + 0x20], rcx
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
mov qword [0x140489a08], rsi
lea rcx, [0x140489a20]
mov qword [rsp + 0x28], rcx
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
mov qword [0x140489a48], 0x3e8
lea rax, [0x140489a70]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
mov qword [0x140489a70], rdi
mov qword [0x140489a78], rsi
mov qword [0x140489a80], rsi
mov qword [0x140489a70], rbx
mov qword [0x140489a88], rsi
mov qword [0x140489a98], rsi
mov qword [0x140489a90], rsi
mov qword [0x140489aa0], 0x40
mov qword [0x140489aa0], 0x100
lea rcx, [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsp + 0x78]
lea rax, [rax*2 + 2]
mov qword [0x140489a50], rax
mov qword [0x140489a58], 0x3e80
mov qword [0x140489a60], 1
mov qword [0x140489a68], rsi
lea rcx, [0x140489aa8]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
lea rax, [0x140489ad0]
mov qword [rsp + 0x40], rax
mov qword [0x140489ad0], rdi
mov qword [0x140489ad8], rsi
mov qword [0x140489ae0], rsi
lea rax, vtable.CVolObjectArray.0
mov qword [0x140489ad0], rax
lea rax, [0x140489ae8]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rax
mov qword [0x140489ae8], rdi
mov qword [0x140489af0], rsi
mov qword [0x140489af8], rsi
mov qword [0x140489ae8], rbx
mov qword [0x140489b00], rsi
mov qword [0x140489b10], rsi
mov qword [0x140489b08], rsi
mov qword [0x140489b18], 0x40
mov qword [0x140489b18], 0x100
mov qword [0x140489b18], 0x100
mov qword [0x1404899c8], rsi
xorps xmm0, xmm0
movdqa xmmword [0x140489b20], xmm0
mov qword [0x140489b30], rsi
mov dword [0x140489b38], esi
mov qword [0x1404899d0], rsi
movsd xmm0, qword [0x1402c7a10]
movsd qword [0x1404899d8], xmm0
xorps xmm1, xmm1
movups xmmword [0x140489a10], xmm1
mov rax, rbp
add rsp, 0x98
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov ecx, 0xffffffff
call fcn.140251f2c
int3