Function at 0x1400951c0
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xd0
movups xmm0, xmmword [0x140128ad8]
mov rbx, qword [0x14015eac0]
lea rcx, str._.2f__
xor eax, eax
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], rax
movss xmm0, dword [0x140160254]
addss xmm0, dword [0x140160250]
mov qword [rbp - 1], rax
mov qword [rbp + 7], rax
mov qword [rbp + 0xf], rax
mov qword [rbp + 0x17], rax
mulss xmm0, dword [0x1401391c0]
mov dword [rbp + 0x1f], eax
mov word [rbp + 0x23], ax
cvtps2pd xmm1, xmm0
movq rdx, xmm1
call fcn.1400015b0
mov edx, 0x515
mov rcx, rbx
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [sym.ProcessHacker.exe_WindowsVersion], 0x3d
jb 0x140095282
cmp qword [0x14015eb30], 0
je 0x140095282
cmp qword [0x14015e740], 0
je 0x140095282
lea rcx, [rbp + 0x67]
call fcn.140095710
test al, al
je 0x140095282
mov rcx, qword [0x14015eac8]
xorps xmm1, xmm1
mov eax, dword [rcx + 4]
cvtsi2sd xmm1, rax
mulsd xmm1, qword [rbp + 0x67]
jmp 0x140095294
mov rcx, qword [0x14015eac8]
xorps xmm1, xmm1
mov eax, dword [rcx + 8]
cvtsi2sd xmm1, rax
mov eax, dword [rcx + 4]
xorps xmm2, xmm2
movsd xmm0, qword [0x140139190]
lea rcx, str._.2f____.2f_GHz
divsd xmm1, xmm0
cvtsi2sd xmm2, rax
movq rdx, xmm1
divsd xmm2, xmm0
movq r8, xmm2
call fcn.1400015b0
mov edx, 0x516
mov rcx, rbx
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, dword [0x1401602e0]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov edx, 0x517
mov rcx, rbx
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, dword [0x140160260]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov edx, 0x518
mov rcx, rbx
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, dword [0x1401602b8]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov edx, 0x4ab
mov rcx, rbx
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
xor r9d, r9d
lea rdx, [rbp + 0x27]
lea r8d, [r9 + 0x30]
lea ecx, [r9 + 3]
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
test eax, eax
js 0x14009546b
mov r9, qword [rbp + 0x2f]
movabs r8, 0x8888888888888889
sub r9, qword [rbp + 0x27]
movabs rax, 0xd6bf94d5e57a42bd
mul r9
mov rax, r8
mov r11, rdx
shr r11, 0x17
mul r11
movabs rax, 0xe5109ec205d7bea7
shr rdx, 5
imul rcx, rdx, 0x3c
mul r9
sub r11, rcx
mov rax, r8
movabs rcx, 0x861c46800
mov qword [rsp + 0x30], r11
mov r10, rdx
shr r10, 0x1d
mul r10
shr rdx, 5
imul rax, rdx, 0x3c
xor edx, edx
sub r10, rax
mov rax, r9
div rcx
mov qword [rsp + 0x28], r10
mov r8, rax
movabs rax, 0xaaaaaaaaaaaaaaab
mul r8
mov rax, r9
shr rdx, 4
lea rcx, [rdx + rdx*2]
xor edx, edx
shl rcx, 3
sub r8, rcx
movabs rcx, 0xc92a69c000
div rcx
mov qword [rsp + 0x20], r8
lea rcx, [rbp - 0x19]
mov r9, rax
lea r8, str._I64u:_02I64u:_02I64u:_02I64u
mov edx, 0x1e
call fcn.1400aea60
lea r8, [rbp - 0x19]
mov edx, 0x53d
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015e998], 1
jbe 0x1400954b5
mov eax, dword [0x14015eaa4]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x1400954bc
lea r8, [0x140131f38]
mov edx, 0x51b
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015e998], 1
jbe 0x140095502
mov eax, dword [0x14015e73c]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x140095509
lea r8, [0x140131f38]
mov edx, 0x51c
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015e998], 1
jbe 0x140095550
mov rax, qword [0x14015eb58]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x140095557
lea r8, [0x140131f38]
mov edx, 0x51d
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015e998], 1
jbe 0x14009559d
mov eax, dword [0x14015eaf4]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x1400955a4
lea r8, [0x140131f38]
mov edx, 0x51e
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rbx, qword [rsp + 0xe8]
add rsp, 0xd0
pop rbp
ret