Function at 0x140002000
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xe0
mov rax, qword [0x14000c040]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov r12, rdx
mov r13, rcx
lea rcx, [rbp - 0x59]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
xor r14d, r14d
mov r15d, r14d
cmp qword [rbp - 0x49], r14
jbe 0x140002312
movabs rsi, 0x7fffffffffffffff
nop dword [rax]
nop dword [rax + rax]
mov r9d, 0x30
lea r8, [rsp + 0x30]
mov rdx, r15
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
test rax, rax
je 0x140002312
cmp dword [rbp - 0x69], 0x1000
jne 0x140002304
cmp dword [rbp - 0x65], 1
je 0x140002304
xorps xmm0, xmm0
mov rbx, qword [rbp - 0x71]
movdqu xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], r14
test rbx, rbx
je 0x140002111
cmp rbx, rsi
ja 0x1400023df
cmp rbx, 0x1000
jb 0x1400020ea
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x1400023d9
call fcn.140005d50
mov rcx, rax
test rax, rax
je 0x1400023cc
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400020f2
mov rcx, rbx
call fcn.140005d50
mov qword [rbp - 0x29], rax
lea rdi, [rbx + rax]
mov qword [rbp - 0x19], rdi
mov r8, rbx
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rbp - 0x21], rdi
jmp 0x140002115
mov rdi, qword [rbp - 0x21]
mov r8, qword [rbp - 0x29]
sub rdi, r8
lea rax, [rbp + 0xf]
mov qword [rsp + 0x20], rax
mov r9, rdi
mov rdx, r15
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp - 0x29]
test eax, eax
je 0x1400022cb
mov rdi, qword [rbp + 0xf]
add rdi, rbx
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
mov qword [rbp - 1], r14
mov qword [rbp + 7], r14
cmp rbx, rdi
jne 0x14000216d
mov edi, 0xf
mov qword [rbp + 7], rdi
mov byte [rbp - 0x11], 0
jmp 0x14000224a
sub rdi, rbx
cmp rdi, rsi
ja 0x1400023d3
cmp rdi, 0xf
ja 0x1400021a4
mov qword [rbp - 1], rdi
mov qword [rbp + 7], 0xf
mov r8, rdi
mov rdx, rbx
lea rcx, [rbp - 0x11]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rdi - 0x11], 0
jmp 0x140002246
mov rsi, rdi
or rsi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
jbe 0x1400021cd
mov rsi, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x1400021f9
cmp rsi, 0x16
mov eax, 0x16
cmovb rsi, rax
lea rcx, [rsi + 1]
test rcx, rcx
je 0x140002220
cmp rcx, 0x1000
jb 0x140002218
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400023e5
mov rcx, rax
call fcn.140005d50
test rax, rax
je 0x140002366
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x140002220
call fcn.140005d50
mov r14, rax
mov qword [rbp - 0x11], r14
mov qword [rbp - 1], rdi
mov qword [rbp + 7], rsi
mov r8, rdi
mov rdx, rbx
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rdi], 0
mov rbx, qword [rbp - 0x29]
xor r14d, r14d
mov rdi, qword [rbp + 7]
mov rax, qword [r12 + 0x10]
mov r9, r12
cmp qword [r12 + 0x18], 0xf
jbe 0x14000225e
mov r9, qword [r12]
lea rcx, [rbp - 0x11]
mov rsi, qword [rbp - 0x11]
cmp rdi, 0xf
cmova rcx, rsi
mov qword [rsp + 0x20], rax
mov rdx, qword [rbp - 1]
call fcn.140004160
cmp rax, 0xffffffffffffffff
jne 0x14000233b
cmp rdi, 0xf
jbe 0x1400022c1
lea rdx, [rdi + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400022b5
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002366
mov rcx, rsi
call fcn.1400060a4
mov rbx, qword [rbp - 0x29]
movabs rsi, 0x7fffffffffffffff
test rbx, rbx
je 0x140002304
mov rdx, qword [rbp - 0x19]
sub rdx, rbx
mov rax, rbx
cmp rdx, 0x1000
jb 0x1400022fc
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400023cc
mov rcx, rbx
call fcn.1400060a4
add r15, qword [rbp - 0x71]
cmp r15, qword [rbp - 0x49]
jb 0x140002060
xor al, al
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.140005d30
mov rbx, qword [rsp + 0x130]
add rsp, 0xe0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp rdi, 0xf
jbe 0x140002379
lea rdx, [rdi + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14000236d
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000236d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.1400060a4
mov rbx, qword [rbp - 0x29]
mov qword [rbp - 1], r14
mov qword [rbp + 7], 0xf
mov byte [rbp - 0x11], 0
test rbx, rbx
je 0x1400023c5
mov rdx, qword [rbp - 0x19]
sub rdx, rbx
mov rax, rbx
cmp rdx, 0x1000
jb 0x1400023bd
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400023bd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400060a4
mov al, 1
jmp 0x140002314
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140001480
nop
call fcn.1400013e0
int3
call fcn.140004ca0
nop
call fcn.1400013e0
int3