Function at 0x180088a60
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x30
mov rax, qword [0x180146030]
xor rax, rsp
mov qword [rsp + 0x28], rax
mov r14, qword [0x180146028]
mov rsi, rcx
mov rbp, qword [0x180146020]
add rcx, 0x10
mov rdi, rdx
mov dword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [0x180152710]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, 4
mov qword [rsi + 0x40], rdi
mov r9d, edx
xor ecx, ecx
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsi + 8], rax
test rax, rax
jne 0x180088b13
mov rcx, qword [0x180146040]
lea rdi, [0x180146040]
cmp rcx, rdi
je 0x180088b09
test byte [rcx + 0x1c], 0x80
je 0x180088b09
cmp byte [rcx + 0x19], 1
jb 0x180088b09
lea edx, [rax + 0xb]
mov rcx, qword [rcx + 0x10]
lea r8, [0x1801365f0]
call fcn.180011520
mov ebx, 0xc000009a
jmp 0x180088c9a
mov rcx, rsi
mov dword [rax], 1
call fcn.180088ce0
lea rdi, [0x180146040]
mov ebx, eax
test eax, eax
jns 0x180088bc5
mov rax, qword [0x180146040]
nop dword [rax]
cmp rax, rdi
je 0x180088b73
test byte [rax + 0x1c], 0x80
je 0x180088b73
cmp byte [rax + 0x19], 2
jb 0x180088b73
lfence
mov rcx, qword [0x180146040]
lea r8, [0x1801365f0]
mov edx, 0xc
mov r9d, ebx
mov rcx, qword [rcx + 0x10]
call fcn.180012460
mov r9d, 4
mov r8d, 0x3000
mov rdx, rbp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsi], rax
test rax, rax
jne 0x180088bc5
mov rcx, qword [0x180146040]
nop dword [rax]
cmp rcx, rdi
je 0x180088b09
test byte [rcx + 0x1c], 0x80
je 0x180088b09
cmp byte [rcx + 0x19], 1
jb 0x180088b09
lea edx, [rax + 0xd]
jmp 0x180088af9
mov rcx, qword [rsi]
lea rdx, [0x18008e490]
mov r8, rbp
call sub.ntdll.dll_memcpy
mov rcx, qword [rsi]
lea r9, [rsp + 0x20]
mov rax, qword [rsi + 8]
mov r8d, 0x20
mov rdx, rbp
mov qword [rcx + r14 + 2], rax
mov rcx, qword [rsi]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x180088c3a
mov rcx, qword [0x180146040]
cmp rcx, rdi
je 0x180088c29
test byte [rcx + 0x1c], 0x80
je 0x180088c29
cmp byte [rcx + 0x19], 1
jb 0x180088c29
mov rcx, qword [rcx + 0x10]
lea edx, [rax + 0xe]
lea r8, [0x1801365f0]
call fcn.180011520
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ebx, ax
or ebx, 0xe80f0000
jmp 0x180088c96
nop word [rax + rax]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rdx, qword [rsi]
mov r8, rbp
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
test eax, eax
jne 0x180088c96
mov rax, qword [0x180146040]
cmp rax, rdi
je 0x180088c96
test byte [rax + 0x1c], 0x80
je 0x180088c96
cmp byte [rax + 0x19], 3
jb 0x180088c96
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x180146040]
lea r8, [0x1801365f0]
mov r9d, eax
mov edx, 0xf
mov rcx, qword [rcx + 0x10]
call fcn.180012460
test ebx, ebx
jns 0x180088cb7
cmp qword ds:[rsi + 8], 0
je 0x180088cb7
lfence
mov rcx, qword [rsi + 8]
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov eax, ebx
mov rcx, qword [rsp + 0x28]
xor rcx, rsp
call fcn.18008e6f0
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
add rsp, 0x30
pop r14
pop rdi
pop rsi
ret