Function at 0x140011610
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
sub rsp, 0x68
mov qword [rsp + 0x20], 0xfffffffffffffffe
lea rbp, [0x1402cce60]
mov qword [rsp + 0x90], rbp
lea rax, vtable.CVolAppInstance.0
mov qword [0x1402cce60], rax
lea rax, vtable.CPoolMem.0
mov qword [0x1402cce68], rax
mov qword [0x1402cce90], 1
mov qword [0x1402cce88], 0x100
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
xor edx, edx
mov r8d, 0x400000
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rcx, rax
test rax, rax
je 0x140011948
mov qword [0x1402cce80], rax
mov qword [0x1402cce70], rax
add rax, 0x400000
mov qword [0x1402cce78], rax
mov edx, 0x1555
mov rax, qword [0x1402cce88]
nop dword [rax]
nop word [rax + rax]
add rax, rcx
mov qword [rcx], rax
mov rax, qword [0x1402cce88]
add rcx, rax
add rax, rcx
mov qword [rcx], rax
mov rax, qword [0x1402cce88]
add rcx, rax
add rax, rcx
mov qword [rcx], rax
mov rax, qword [0x1402cce88]
add rcx, rax
sub rdx, 1
jne 0x1400116c0
xor esi, esi
mov qword [rcx], rsi
lea rax, [0x1402cce98]
mov qword [rsp + 0x98], rax
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], rax
lea rdi, vtable.CVolObject.0
mov qword [0x1402cce98], rdi
mov qword [0x1402ccea0], rsi
mov qword [0x1402ccea8], rsi
lea rbx, vtable.CVolMem.0
mov qword [0x1402cce98], rbx
mov qword [0x1402cceb0], rsi
mov qword [0x1402ccec0], rsi
mov qword [0x1402cceb8], rsi
mov qword [0x1402ccec8], 0x40
mov qword [0x1402ccec8], 0x100
mov qword [0x1402cced0], rsi
lea rcx, [0x1402ccef0]
mov qword [rsp + 0x98], rcx
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
mov qword [0x1402ccf18], rsi
lea rcx, [0x1402ccf30]
mov qword [rsp + 0x98], rcx
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
mov qword [0x1402ccf58], 0x3e8
lea rax, [0x1402ccf80]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], rax
mov qword [0x1402ccf80], rdi
mov qword [0x1402ccf88], rsi
mov qword [0x1402ccf90], rsi
mov qword [0x1402ccf80], rbx
mov qword [0x1402ccf98], rsi
mov qword [0x1402ccfa8], rsi
mov qword [0x1402ccfa0], rsi
mov qword [0x1402ccfb0], 0x40
mov qword [0x1402ccfb0], 0x100
lea rcx, [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsp + 0x48]
lea rax, [rax*2 + 2]
mov qword [0x1402ccf60], rax
mov qword [0x1402ccf68], 0x3e80
mov qword [0x1402ccf70], 1
mov qword [0x1402ccf78], rsi
lea rcx, [0x1402ccfb8]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
lea rax, [0x1402ccfe0]
mov qword [rsp + 0x98], rax
mov qword [0x1402ccfe0], rdi
mov qword [0x1402ccfe8], rsi
mov qword [0x1402ccff0], rsi
lea rax, vtable.CVolObjectArray.0
mov qword [0x1402ccfe0], rax
lea rax, [0x1402ccff8]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], rax
mov qword [0x1402ccff8], rdi
mov qword [0x1402cd000], rsi
mov qword [0x1402cd008], rsi
mov qword [0x1402ccff8], rbx
mov qword [0x1402cd010], rsi
mov qword [0x1402cd020], rsi
mov qword [0x1402cd018], rsi
mov qword [0x1402cd028], 0x40
mov qword [0x1402cd028], 0x100
mov qword [0x1402cd028], 0x100
mov qword [0x1402cced8], rsi
xorps xmm0, xmm0
movdqa xmmword [0x1402cd030], xmm0
mov qword [0x1402cd040], rsi
mov dword [0x1402cd048], esi
mov qword [0x1402ccee0], rsi
movsd xmm0, qword [0x140273e68]
movsd qword [0x1402ccee8], xmm0
xor ecx, ecx
mov qword [0x1402ccf20], rcx
mov qword [0x1402ccf28], rcx
mov rax, rbp
add rsp, 0x68
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov ecx, 0xffffffff
call fcn.1401da4d4
int3