Function at 0x1400278c4
Capabilities:
Get memory capacity
Get system information on windows
Identify system language via api

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x688]
sub rsp, 0x760
xor r15d, r15d
lea rdx, str.GetDesktopWindow
mov dword [rbp + 0x698], r15d
mov rdi, rcx
xorps xmm0, xmm0
mov qword [rsp + 0x50], r15
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x58], r15
lea r8d, [r15 + 0x10]
movups xmmword [rsp + 0x40], xmm0
call fcn.14000a604
lea rcx, [rsp + 0x40]
call fcn.140027ffc
call rax
mov rdx, qword [rsp + 0x58]
mov r14, rax
mov r13d, 0x1000
cmp rdx, 0xf
jbe 0x14002796c
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, r13
jb 0x140027967
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140027fdb
call fcn.140054430
lea rcx, [rbp + 0xd0]
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], r15b
mov dword [rbp + 0x90], 0x40
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rcx, [rbp + 0x90]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
xorps xmm0, xmm0
mov qword [rsp + 0x30], r15
mov r8d, 0xe
mov qword [rsp + 0x38], r15
lea rdx, str.DisplayVersion
lea rcx, [rsp + 0x20]
movups xmmword [rsp + 0x20], xmm0
call fcn.140007b80
xorps xmm0, xmm0
mov qword [rbp - 0x20], r15
mov esi, 0x2c
mov qword [rbp - 0x18], r15
mov r8d, esi
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersion
lea rcx, [rbp - 0x30]
movups xmmword [rbp - 0x30], xmm0
call fcn.140007b80
lea r8, [rsp + 0x20]
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x60]
call fcn.14002c7e8
xorps xmm0, xmm0
mov qword [rbp], r15
lea r8d, [rsi - 0x21]
mov qword [rbp + 8], r15
lea rdx, [0x14008cc00]
mov rbx, rax
lea rcx, [rbp - 0x10]
movups xmmword [rbp - 0x10], xmm0
call fcn.140007b80
xorps xmm0, xmm0
mov qword [rbp - 0x70], r15
mov r8d, esi
mov qword [rbp - 0x68], r15
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersion
lea rcx, [rbp - 0x80]
movups xmmword [rbp - 0x80], xmm0
call fcn.140007b80
lea r8, [rbp - 0x10]
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x70]
call fcn.14002c7e8
mov rdx, rax
lea r8, [0x14008cbfc]
lea rcx, [rbp + 0x50]
call fcn.14002053c
mov r8, rbx
lea rcx, [rbp + 0x30]
mov rdx, rax
call fcn.1400205b4
lea rcx, [rbp + 0x50]
call fcn.140007a6c
lea rcx, [rbp + 0x70]
call fcn.140007a6c
lea rcx, [rbp - 0x60]
call fcn.140007a6c
call qword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
cmp word [rbp + 0xd0], 9
lea r9, [0x14008cc20]
movzx eax, ax
mov dword [rdi + 0xcc], eax
lea rax, [0x14008cc18]
cmove r9, rax
or rdx, 0xffffffffffffffff
inc rdx
cmp word [r9 + rdx*2], r15w
jne 0x140027ac8
mov r12d, 7
cmp rdx, qword [rdi + 0x18]
ja 0x140027b07
mov rsi, rdi
cmp qword [rdi + 0x18], r12
jbe 0x140027aea
mov rsi, qword [rdi]
lea rbx, [rdx + rdx]
mov qword [rdi + 0x10], rdx
mov r8, rbx
mov rdx, r9
mov rcx, rsi
call fcn.14007c060
mov word [rbx + rsi], r15w
jmp 0x140027b0f
mov rcx, rdi
call fcn.140009934
mov rax, qword [rbp + 0x98]
lea rcx, [rbp - 0x60]
shr rax, 0x14
mov dword [rdi + 0xc8], eax
call fcn.14002774c
lea rsi, [rdi + 0x60]
mov rbx, rax
cmp rsi, rax
je 0x140027b5a
mov rcx, rsi
call fcn.140007a6c
mov r8d, 0x20
mov rdx, rbx
mov rcx, rsi
call fcn.14007c060
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], r12
mov word [rbx], r15w
lea rcx, [rbp - 0x60]
call fcn.140007a6c
lea rcx, [rdi + 0x80]
lea rdx, [rbp + 0x30]
call fcn.140009624
mov r8d, 0xd
lea rdx, str.GetWindowRect
xorps xmm0, xmm0
mov qword [rsp + 0x30], r8
lea rcx, [rsp + 0x20]
movups xmmword [rsp + 0x20], xmm0
lea ebx, [r8 + 2]
mov qword [rsp + 0x38], rbx
call fcn.14007c060
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x2d], r15b
call fcn.140027ffc
lea rdx, [rbp - 0x40]
mov rcx, r14
call rax
mov rdx, qword [rsp + 0x38]
cmp rdx, rbx
jbe 0x140027bf0
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, r13
jb 0x140027beb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140027fe1
call fcn.140054430
mov eax, dword [rbp - 0x34]
lea rdx, str.GetUserNameW
mov dword [rdi + 0xa4], eax
lea rcx, [rsp + 0x20]
mov eax, dword [rbp - 0x38]
xorps xmm0, xmm0
mov r8d, 0xc
mov dword [rdi + 0xa0], eax
mov dword [rbp + 0x698], 0x208
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], rbx
call fcn.14007c060
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x2c], r15b
call fcn.140027ffc
lea rdx, [rbp + 0x698]
lea rcx, [rbp + 0x100]
call rax
mov rdx, qword [rsp + 0x38]
cmp rdx, rbx
jbe 0x140027c8c
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, r13
jb 0x140027c87
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140027fe7
call fcn.140054430
mov ecx, 8
call fcn.1400541b4
mov rcx, rax
mov qword [rax], r15
call fcn.14005b648
mov r14, rax
lea rcx, [rdi + 0x20]
lea rax, [rbp + 0x100]
or rdx, 0xffffffffffffffff
inc rdx
cmp word [rax + rdx*2], r15w
jne 0x140027cb3
cmp rdx, qword [rcx + 0x18]
ja 0x140027cf0
mov rsi, rcx
cmp qword [rcx + 0x18], r12
jbe 0x140027ccf
mov rsi, qword [rcx]
lea rbx, [rdx + rdx]
mov qword [rcx + 0x10], rdx
mov r8, rbx
lea rdx, [rbp + 0x100]
mov rcx, rsi
call fcn.14007c060
mov word [rbx + rsi], r15w
jmp 0x140027cfc
lea r9, [rbp + 0x100]
call fcn.140009934
mov edx, dword [r14 + 8]
test edx, edx
jle 0x140027d5f
lea rcx, [rbp - 0x80]
mov esi, 3
call fcn.1400204c8
lea r9d, [rsi - 2]
lea r8, [0x14008cc48]
lea rcx, [rbp - 0x80]
call fcn.14000d6ec
xorps xmm0, xmm0
mov qword [rsp + 0x70], r15
lea r8d, [rsi + 0x1d]
mov qword [rsp + 0x78], r15
mov rdx, rax
lea rcx, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm0
mov rbx, rax
call fcn.14007c060
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], r12
mov word [rbx], r15w
lea rbx, [rsp + 0x60]
jmp 0x140027d71
lea rcx, [rbp + 0x10]
mov esi, 4
call fcn.1400204c8
lea rbx, [rbp + 0x10]
lea r14, [rdi + 0x40]
cmp r14, rbx
je 0x140027d9f
mov rcx, r14
call fcn.140007a6c
mov r8d, 0x20
mov rdx, rbx
mov rcx, r14
call fcn.14007c060
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], r12
mov word [rbx], r15w
test sil, 4
je 0x140027db1
and esi, 0xfffffffb
lea rcx, [rbp + 0x10]
call fcn.140007a6c
test sil, 2
je 0x140027e04
mov rdx, qword [rsp + 0x78]
cmp rdx, r12
jbe 0x140027df4
mov rcx, qword [rsp + 0x60]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, r13
jb 0x140027def
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140027fed
call fcn.140054430
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], r12
mov word [rsp + 0x60], r15w
test sil, 1
je 0x140027e13
lea rcx, [rbp - 0x80]
call fcn.140007a6c
lea rcx, [rbp - 0x60]
call fcn.14002c9b4
lea rsi, [rdi + 0xd0]
mov rbx, rax
cmp rsi, rax
je 0x140027e50
mov rcx, rsi
call fcn.140007a6c
mov r8d, 0x20
mov rdx, rbx
mov rcx, rsi
call fcn.14007c060
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], r12
mov word [rbx], r15w
lea rcx, [rbp - 0x60]
call fcn.140007a6c
mov dword [rbp + 0x310], 0x348
mov ebx, r15d
xorps xmm0, xmm0
mov qword [rsp + 0x30], r15
mov r8d, 0x13
mov qword [rsp + 0x38], r15
lea rdx, str.EnumDisplayDevicesW
lea rcx, [rsp + 0x20]
movups xmmword [rsp + 0x20], xmm0
call fcn.14000a604
lea rcx, [rsp + 0x20]
call fcn.140027ffc
xor r9d, r9d
lea r8, [rbp + 0x310]
mov edx, ebx
xor ecx, ecx
call rax
mov rdx, qword [rsp + 0x38]
mov esi, eax
cmp rdx, 0xf
jbe 0x140027ee4
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, r13
jb 0x140027edf
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140027ff3
call fcn.140054430
test esi, esi
je 0x140027fab
test byte [rbp + 0x454], 1
je 0x140027fa4
xorps xmm0, xmm0
mov qword [rsp + 0x30], r15
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x38], r15
lea rax, [rbp + 0x354]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], r15w
jne 0x140027f16
lea rdx, [rbp + 0x354]
lea rcx, [rsp + 0x20]
call fcn.140007b80
lea r8, [0x14008cc64]
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x60]
call fcn.14002053c
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], r12
jbe 0x140027f53
mov rax, qword [rax]
lea rcx, [rdi + 0xa8]
mov rdx, rax
call fcn.14000b170
lea rcx, [rbp - 0x60]
call fcn.140007a6c
mov rdx, qword [rsp + 0x38]
cmp rdx, r12
jbe 0x140027fa4
mov rcx, qword [rsp + 0x20]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, r13
jb 0x140027f9f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140027fd5
call fcn.140054430
inc ebx
jmp 0x140027e66
lea rcx, [rbp + 0x30]
call fcn.140007a6c
lea r11, [rsp + 0x760]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14005af0c
int3
call fcn.14005af0c
int3
call fcn.14005af0c
int3
call fcn.14005af0c
int3
call fcn.14005af0c
int3
call fcn.14005af0c
int3