Function at 0x14005bef0
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2010]
mov eax, 0x2110
call fcn.140126d90
sub rsp, rax
lea rcx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov r15, qword [rbp - 0x28]
mov r12, qword [rbp - 0x20]
lea rdx, [0x1401638f0]
call fcn.1400511a0
test eax, eax
jne 0x14005bf43
xor ecx, ecx
jmp 0x14005bf68
mov dword [0x14023ca80], eax
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x14023ca88], rax
xor ecx, ecx
test rax, rax
setne cl
mov r8d, 0x2710
test ecx, ecx
lea rcx, [rbp]
je 0x14005c221
lea r9, str.Speed_x10_Injecting_
mov edx, 4
call fcn.14004e270
mov rax, qword [0x14023bb08]
cmp rax, qword [0x14023bb10]
je 0x14005bfba
mov r8d, 0x2010
lea rdx, [rbp]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x14023bb08], 0x2010
jmp 0x14005bfc6
lea r8, [rbp]
mov rdx, rax
call fcn.14005cf10
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x34], 0x3f800000
mov qword [rsp + 0x38], 0x3f800000
mov qword [rsp + 0x40], 1
mov dword [rsp + 0x48], 0
mov dword [rsp + 0x4c], 0x3f800000
mov dword [rsp + 0x50], 0x3f800000
mov dword [rsp + 0x54], 0x3f800000
mov dword [rsp + 0x58], 0x3f800000
mov dword [rsp + 0x5c], 0x3f800000
mov dword [rsp + 0x60], 0x3f800000
mov dword [rsp + 0x64], 0x3f800000
lea rdi, [rsp + 0x30]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], 0
mov ecx, Ordinal_60
call fcn.1401263c4
mov rbx, rax
mov qword [rbp - 0x60], rax
lea rsi, [rax + 0x38]
mov qword [rbp - 0x50], rsi
mov r8d, Ordinal_60
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 0x58], rsi
mov dword [rsp + 0x68], 1
mov dword [rsp + 0x6c], 0x3fdc0000
mov qword [rsp + 0x70], 0x3fdc0000
mov qword [rsp + 0x78], 1
mov dword [rbp - 0x80], 0
mov dword [rbp - 0x7c], 0x3f800000
mov dword [rbp - 0x78], 0x3f800000
mov dword [rbp - 0x74], 0x3f800000
mov dword [rbp - 0x70], 0x3f800000
mov dword [rbp - 0x6c], 0x3f800000
mov dword [rbp - 0x68], 0x3f800000
mov dword [rbp - 0x64], 0x3f800000
lea r13, [rsp + 0x68]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], 0
mov ecx, Ordinal_60
call fcn.1401263c4
mov rdi, rax
mov qword [rbp - 0x48], rax
lea r14, [rax + 0x38]
mov qword [rbp - 0x38], r14
mov r8d, Ordinal_60
mov rdx, r13
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 0x40], r14
mov qword [rsp + 0x20], rdi
mov r9, rbx
mov r8, r12
mov rdx, r15
lea rcx, [0x14023ca50]
call fcn.140051370
mov qword [rsp + 0x20], rdi
mov r9, rbx
mov r8, r12
mov rdx, r15
lea rcx, [0x14023ca50]
call fcn.140051370
test al, al
je 0x14005c1a4
lea r9, str.Speed_x10_Injected_
mov edx, 1
mov r8d, 0x2710
lea rcx, [rbp]
call fcn.14004e270
mov rax, qword [0x14023bb08]
cmp rax, qword [0x14023bb10]
je 0x14005c18a
mov r8d, 0x2010
lea rdx, [rbp]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x14023bb08], 0x2010
jmp 0x14005c196
lea r8, [rbp]
mov rdx, rax
call fcn.14005cf10
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
nop
test rdi, rdi
je 0x14005c1e0
sub r14, rdi
mov rax, rdi
cmp r14, 0x1000
jb 0x14005c1d4
add r14, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c1d4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, r14
mov rcx, rdi
call fcn.140126718
nop
test rbx, rbx
je 0x14005c26d
sub rsi, rbx
mov rax, rbx
cmp rsi, 0x1000
jb 0x14005c214
add rsi, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c214
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, rsi
mov rcx, rbx
call fcn.140126718
jmp 0x14005c26d
lea r9, str.Emulator_Not_Found_
mov edx, 3
call fcn.14004e270
mov rax, qword [0x14023bb08]
cmp rax, qword [0x14023bb10]
je 0x14005c261
mov r8d, 0x2010
lea rdx, [rbp]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x14023bb08], 0x2010
jmp 0x14005c26d
lea r8, [rbp]
mov rdx, rax
call fcn.14005cf10
lea r11, [rsp + 0x2110]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret