Function at 0x1400b3fe0
Capabilities:
Get system information on windows

Disassembly:
mov r11, rsp
push rsi
push rdi
sub rsp, 0x58
mov rax, qword [0x1402ba040]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov qword [r11 + 0x10], rbx
xor edi, edi
cmp byte [0x1402c4fd8], dil
mov qword [r11 + 0x18], rbp
mov qword [r11 + 0x20], r12
mov r12, rcx
mov qword [r11 - 0x18], r13
mov r13d, 0xffff
mov qword [r11 - 0x20], r14
mov qword [r11 - 0x28], r15
lea r15d, [rdi + 2]
je 0x1400b4074
movzx r8d, word [0x1402c4fda]
lea ecx, [rdi + 0x53]
mov rdx, qword [0x1402c4bf8]
xor r9d, r9d
shl r8d, 3
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
mov rsi, qword [0x1402c4bf8]
test eax, eax
jns 0x1400b4068
movzx r8d, word [0x1402c4fda]
xor edx, edx
shl r8, 3
mov rcx, rsi
call fcn.140207110
movzx edx, word [0x1402c4fdc]
jmp 0x1400b415f
movzx edx, word [0x1402c4fdc]
movzx ebp, di
mov rsi, qword [0x1402c4bf8]
mov word [rsp + 0x30], di
cmp di, dx
jae 0x1400b415f
movzx eax, di
movzx r8d, di
movzx r9d, di
nop
mov rcx, qword [0x1402c4fe0]
test rcx, rcx
je 0x1400b40df
movzx ebx, di
cmp ax, r13w
jne 0x1400b40cf
cmp di, dx
jae 0x1400b40e6
movzx eax, dx
nop dword [rax]
add bx, word [rcx]
lea rcx, [rcx + 2]
sub rax, 1
jne 0x1400b40c0
jmp 0x1400b40e6
cmp r8w, dx
jae 0x1400b40e6
movzx eax, r9w
movzx ebx, word [rcx + rax*2]
jmp 0x1400b40e6
movzx ebx, word [0x1402c4fda]
movzx eax, bp
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x28], rdi
mov r8d, r15d
mov ecx, 0x53
lea r14, [rax*8]
movzx eax, bx
shl eax, 3
lea r9, [r14 + rsi]
mov dword [rsp + 0x20], eax
call qword [sym.imp.ntdll.dll_NtQuerySystemInformationEx]
mov rsi, qword [0x1402c4bf8]
nop
test eax, eax
jns 0x1400b4137
movzx r8d, bx
lea rcx, [r14 + rsi]
shl r8, 3
xor edx, edx
call fcn.140207110
movzx eax, word [rsp + 0x30]
add bp, bx
movzx edx, word [0x1402c4fdc]
inc ax
mov word [rsp + 0x30], ax
movzx r8d, ax
movzx r9d, ax
cmp ax, dx
jb 0x1400b40a0
movzx ebp, word [0x1402c4fda]
mov rbx, rdi
mov r10d, edi
cmp ebp, 4
jb 0x1400b41dd
mov r9d, ebp
xorps xmm2, xmm2
and r9d, 0xfffffffc
xorps xmm1, xmm1
mov r8d, r15d
nop dword [rax]
nop word [rax + rax]
mov eax, r10d
add r10d, 4
movq xmm0, qword [rsi + rax*8]
lea eax, [r8 - 1]
movhpd xmm0, qword [rsi + rax*8]
mov eax, r8d
paddq xmm2, xmm0
movq xmm0, qword [rsi + rax*8]
lea eax, [r8 + 1]
movhpd xmm0, qword [rsi + rax*8]
add r8d, 4
paddq xmm1, xmm0
cmp r10d, r9d
jb 0x1400b4190
paddq xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
paddq xmm1, xmm0
movq rbx, xmm1
mov r8, rdi
mov r9, rdi
cmp r10d, ebp
jae 0x1400b4235
mov eax, ebp
mov ecx, r10d
sub eax, r10d
cmp eax, r15d
jb 0x1400b422a
mov eax, ebp
sub eax, r10d
sub eax, r15d
shr eax, 1
inc eax
mov r11d, eax
lea eax, [r10 + rax*2]
nop dword [rax + rax]
add r8, qword ds:[rsi + rcx*8]
add r9, qword [rsi + rcx*8 + 8]
add rcx, r15
sub r11, 1
jne 0x1400b4210
cmp eax, ebp
jae 0x1400b422e
add rbx, qword [rsi + rcx*8]
lea rax, [r9 + r8]
add rbx, rax
mov rax, rbx
sub rax, qword [0x1402c9ef0]
cmp byte [0x1402c4fd8], dil
mov qword [r12], rax
mov r12, qword [rsp + 0x88]
mov qword [0x1402c9ef8], rax
mov qword [0x1402c9ef0], rbx
je 0x1400b42aa
mov rdx, qword [0x1402c4c08]
lea r8d, [rbp*8]
xor r9d, r9d
lea ecx, [r9 + 0x6c]
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
mov rsi, qword [0x1402c4c08]
test eax, eax
jns 0x1400b439f
movzx r8d, word [0x1402c4fda]
xor edx, edx
shl r8, 3
mov rcx, rsi
call fcn.140207110
jmp 0x1400b439f
mov rsi, qword [0x1402c4c08]
movzx ebp, di
mov word [rsp + 0x34], di
cmp di, dx
jae 0x1400b439f
movzx ecx, di
movzx r8d, di
movzx r9d, di
mov rax, qword [0x1402c4fe0]
nop dword [rax + rax]
test rax, rax
je 0x1400b431f
movzx ebx, di
cmp cx, r13w
jne 0x1400b430f
cmp di, dx
jae 0x1400b4326
movzx ecx, dx
nop word [rax + rax]
add bx, word [rax]
lea rax, [rax + 2]
sub rcx, 1
jne 0x1400b4300
jmp 0x1400b4326
cmp r8w, dx
jae 0x1400b4326
movzx ecx, r9w
movzx ebx, word [rax + rcx*2]
jmp 0x1400b4326
movzx ebx, word [0x1402c4fda]
movzx eax, bp
lea rdx, [rsp + 0x34]
mov qword [rsp + 0x28], rdi
mov r8d, r15d
mov ecx, 0x6c
lea r14, [rax*8]
movzx eax, bx
shl eax, 3
lea r9, [r14 + rsi]
mov dword [rsp + 0x20], eax
call qword [sym.imp.ntdll.dll_NtQuerySystemInformationEx]
mov rsi, qword [0x1402c4c08]
nop
test eax, eax
jns 0x1400b4377
movzx r8d, bx
lea rcx, [r14 + rsi]
shl r8, 3
xor edx, edx
call fcn.140207110
movzx ecx, word [rsp + 0x34]
add bp, bx
movzx edx, word [0x1402c4fdc]
inc cx
mov word [rsp + 0x34], cx
movzx r8d, cx
movzx r9d, cx
cmp cx, dx
jb 0x1400b42d4
movzx r11d, word [0x1402c4fda]
mov r10, rdi
mov r14, qword [rsp + 0x48]
mov edx, edi
mov r13, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x80]
mov rbx, qword [rsp + 0x78]
cmp r11d, 4
jb 0x1400b442b
mov r8d, r11d
xorps xmm2, xmm2
and r8d, 0xfffffffc
xorps xmm1, xmm1
nop word [rax + rax]
mov eax, edx
add edx, 4
movq xmm0, qword [rsi + rax*8]
lea eax, [r15 - 1]
movhpd xmm0, qword [rsi + rax*8]
mov eax, r15d
paddq xmm2, xmm0
movq xmm0, qword [rsi + rax*8]
lea eax, [r15 + 1]
movhpd xmm0, qword [rsi + rax*8]
add r15d, 4
paddq xmm1, xmm0
cmp edx, r8d
jb 0x1400b43e0
paddq xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
paddq xmm1, xmm0
movq r10, xmm1
mov r15, qword [rsp + 0x40]
mov r8, rdi
cmp edx, r11d
jae 0x1400b4483
mov eax, r11d
mov ecx, edx
sub eax, edx
cmp eax, 2
jb 0x1400b4478
mov eax, r11d
sub eax, edx
sub eax, 2
shr eax, 1
inc eax
mov r9d, eax
lea eax, [rdx + rax*2]
nop word [rax + rax]
add rdi, qword [rsi + rcx*8]
add r8, qword [rsi + rcx*8 + 8]
add rcx, 2
sub r9, 1
jne 0x1400b4460
cmp eax, r11d
jae 0x1400b447c
add r10, qword [rsi + rcx*8]
lea rax, [r8 + rdi]
add r10, rax
mov rax, r10
sub rax, qword [0x1402c9f00]
mov qword [0x1402c9f08], rax
mov qword [0x1402c9f00], r10
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.1401e0100
add rsp, 0x58
pop rdi
pop rsi
ret