Function at 0x1400b19c0
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xd0
movups xmm0, xmmword [0x14015b828]
mov rbx, qword [0x140195f60]
lea rcx, str._.2f__
xor eax, eax
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], rax
movss xmm0, dword [0x140197534]
addss xmm0, dword [0x140197530]
mov qword [rbp - 1], rax
mov qword [rbp + 7], rax
mov qword [rbp + 0xf], rax
mov qword [rbp + 0x17], rax
mulss xmm0, dword [0x14016e700]
mov dword [rbp + 0x1f], eax
mov word [rbp + 0x23], ax
cvtps2pd xmm1, xmm0
movq rdx, xmm1
call fcn.1400013e0
mov edx, 0x515
mov rcx, rbx
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp qword [0x140195f88], 0
je 0x1400b1a79
cmp qword [0x140195eb0], 0
je 0x1400b1a79
lea rcx, [rbp + 0x67]
call fcn.1400b1f00
test al, al
je 0x1400b1a79
mov rcx, qword [0x140195f68]
xorps xmm1, xmm1
mov eax, dword [rcx + 4]
cvtsi2sd xmm1, rax
mulsd xmm1, qword [rbp + 0x67]
jmp 0x1400b1a8b
mov rcx, qword [0x140195f68]
xorps xmm1, xmm1
mov eax, dword [rcx + 8]
cvtsi2sd xmm1, rax
mov eax, dword [rcx + 4]
xorps xmm2, xmm2
movsd xmm0, qword [0x14016e6d0]
lea rcx, str._.2f____.2f_GHz
divsd xmm1, xmm0
cvtsi2sd xmm2, rax
movq rdx, xmm1
divsd xmm2, xmm0
movq r8, xmm2
call fcn.1400013e0
mov edx, 0x516
mov rcx, rbx
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, dword [0x1401975c0]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov edx, 0x517
mov rcx, rbx
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, dword [0x140197540]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov edx, 0x518
mov rcx, rbx
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, dword [0x140197598]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov edx, 0x4ab
mov rcx, rbx
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
xor r9d, r9d
lea rdx, [rbp + 0x27]
lea r8d, [r9 + 0x30]
lea ecx, [r9 + 3]
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
test eax, eax
js 0x1400b1c62
mov r9, qword [rbp + 0x2f]
movabs r8, 0x8888888888888889
sub r9, qword [rbp + 0x27]
movabs rax, 0xd6bf94d5e57a42bd
mul r9
mov rax, r8
mov r11, rdx
shr r11, 0x17
mul r11
movabs rax, 0xe5109ec205d7bea7
shr rdx, 5
imul rcx, rdx, 0x3c
mul r9
sub r11, rcx
mov rax, r8
movabs rcx, 0x861c46800
mov qword [rsp + 0x30], r11
mov r10, rdx
shr r10, 0x1d
mul r10
shr rdx, 5
imul rax, rdx, 0x3c
xor edx, edx
sub r10, rax
mov rax, r9
div rcx
mov qword [rsp + 0x28], r10
mov r8, rax
movabs rax, 0xaaaaaaaaaaaaaaab
mul r8
mov rax, r9
shr rdx, 4
lea rcx, [rdx + rdx*2]
xor edx, edx
shl rcx, 3
sub r8, rcx
movabs rcx, 0xc92a69c000
div rcx
mov qword [rsp + 0x20], r8
lea rcx, [rbp - 0x19]
mov r9, rax
lea r8, str._I64u:_02I64u:_02I64u:_02I64u
mov edx, 0x1e
call fcn.1400c8f90
lea r8, [rbp - 0x19]
mov edx, 0x53d
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x140195f48], 1
jbe 0x1400b1cac
mov eax, dword [0x140195f5c]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x1400b1cb3
lea r8, [0x140167c68]
mov edx, 0x51b
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x140195f48], 1
jbe 0x1400b1cf9
mov eax, dword [0x140195eac]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x1400b1d00
lea r8, [0x140167c68]
mov edx, 0x51c
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x140195f48], 1
jbe 0x1400b1d47
mov rax, qword [0x140195f98]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x1400b1d4e
lea r8, [0x140167c68]
mov edx, 0x51d
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x140195f48], 1
jbe 0x1400b1d94
mov eax, dword [0x140195f84]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x1400b1d9b
lea r8, [0x140167c68]
mov edx, 0x51e
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rbx, qword [rsp + 0xe8]
add rsp, 0xd0
pop rbp
ret