Function at 0x140007500
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x168
lea rbp, [rsp + 0x70]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1400ad280]
xor rax, rsp
mov qword [rbp + 0xe0], rax
mov r15, r9
mov r12, r8
mov r13, rdx
xor ebx, ebx
mov r8d, ecx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
mov qword [rbp], rax
test rax, rax
jne 0x140007643
movabs rax, 0x7749ca906e62d343
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0x449611b1e31c977d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0xf92b00cc74a48e45
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rcx, 0xf9954b4e45141d3c
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0x369aef5020bb205
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0x34b67fd49373b712
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0xf30573bf11c7e137
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x60]
vmovdqa ymmword [rbp + 0x60], ymm1
lea rdx, [rbp + 0x60]
lea rcx, [0x1400b24b0]
vzeroupper
call fcn.14001d090
jmp 0x140007860
lea rcx, [rbp + 8]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x38], xmm1
mov qword [rbp + 0x48], rbx
cmp qword [rbp + 0x18], 0
jbe 0x1400077b2
lea r14, [0x140007420]
nop dword [rax + rax]
mov r9d, 0x30
lea r8, [rbp + 0x80]
mov rdx, rbx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
cmp rax, 0x30
jne 0x1400077a8
cmp dword [rbp + 0xa0], 0x1000
jne 0x1400077a1
mov eax, dword [rbp + 0xa4]
cmp eax, 0x40
je 0x1400076b7
cmp eax, 4
jne 0x1400077a1
mov rdi, qword [rbp + 0x40]
cmp rdi, qword [rbp + 0x48]
je 0x140007751
mov ecx, 0x60
call fcn.14004e46c
mov rcx, qword [rsp + 0x1d0]
mov qword [rax], rcx
movups xmm0, xmmword [rbp + 0x80]
movups xmmword [rax + 8], xmm0
movups xmm1, xmmword [rbp + 0x90]
movups xmmword [rax + 0x18], xmm1
movups xmm0, xmmword [rbp + 0xa0]
movups xmmword [rax + 0x28], xmm0
mov qword [rax + 0x38], r15
mov qword [rax + 0x40], r12
mov qword [rax + 0x48], r13
mov qword [rax + 0x50], rsi
mov qword [rax + 0x58], r14
mov qword [rbp + 0x60], rax
lea r14, [rdi + 8]
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 0
mov r9, rax
lea r8, [0x14002dc60]
xor edx, edx
xor ecx, ecx
call fcn.1400612bc
mov qword [rdi], rax
test rax, rax
je 0x14000788f
add qword [rbp + 0x40], 0x10
lea r14, [0x140007420]
jmp 0x1400077a1
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x80]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x1c8]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x1c0]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x1b8]
mov qword [rsp + 0x20], rax
lea r9, [rbp]
mov rdx, rdi
lea rcx, [rbp + 0x38]
call fcn.140025850
add rbx, qword [rbp + 0x98]
cmp rbx, qword [rbp + 0x18]
jb 0x140007670
mov rbx, qword [rbp + 0x38]
mov rdi, qword [rbp + 0x40]
cmp rbx, rdi
je 0x1400077fd
nop
cmp dword [rbx + 8], 0
je 0x1400077f4
call sub.KERNEL32.dll_GetCurrentThreadId
cmp dword [rbx + 8], eax
je 0x1400078ac
movups xmm0, xmmword [rbx]
movaps xmmword [rbp + 0x60], xmm0
xor edx, edx
lea rcx, [rbp + 0x60]
call fcn.14004dc50
test eax, eax
jne 0x1400078a1
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
add rbx, 0x10
cmp rbx, rdi
jne 0x1400077c0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rcx, qword [rbp + 0x38]
test rcx, rcx
je 0x140007860
mov rax, rcx
mov rdx, qword [rbp + 0x40]
cmp rcx, rdx
je 0x14000782f
nop dword [rax]
cmp dword [rax + 8], 0
jne 0x140007883
add rax, 0x10
cmp rax, rdx
jne 0x140007820
mov rdx, qword [rbp + 0x48]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000785b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007889
call fcn.14004e370
mov rcx, qword [rbp + 0xe0]
xor rcx, rsp
call fcn.14004e350
add rsp, 0x168
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140065520
int3
call fcn.140065360
nop
mov dword [r14], 0
mov ecx, 6
call fcn.14004b558
nop
mov ecx, 2
call fcn.14004b558
int3
mov ecx, 5
call fcn.14004b558
int3