Function at 0x140078b20
Capabilities:
Get system information on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov rbx, r9
mov r14, r8
mov rsi, rcx
mov rax, qword [0x1400f74a8]
mov rax, qword [rax]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov qword [rcx], rdx
mov qword [rcx + 0x10], 0
mov qword [rcx + 0x18], 2
lea rax, [rcx + 0x20]
mov qword [rcx + 8], rax
movzx eax, byte [0x140135360]
test al, al
je 0x140078d24
mov edi, dword [0x140137868]
lea rax, [r14 + rbx]
dec rax
mov rcx, rax
shr rcx, 0x20
je 0x140078b95
xor edx, edx
div rdi
mov rbx, rax
jmp 0x140078b9b
xor edx, edx
div edi
mov ebx, eax
mov rax, r14
shr rax, 0x20
je 0x140078bb1
mov rax, r14
xor edx, edx
div rdi
mov r14, rax
jmp 0x140078bbb
mov eax, r14d
xor edx, edx
div edi
mov r14d, eax
inc rbx
sub rbx, r14
je 0x140078cb0
lea r15, [rsi + 8]
imul r14, rdi
cmp rbx, 2
mov eax, 1
cmovb rbx, rax
lea r12, [rsp + 0x2c]
mov rbp, qword [sym.imp.KERNEL32.dll_VirtualProtect]
jmp 0x140078c11
mov rcx, qword [rsi + 8]
shl rax, 4
mov qword [rcx + rax], r14
mov dword [rcx + rax + 8], r13d
inc qword [rsi + 0x10]
add r14, rdi
dec rbx
je 0x140078cb0
mov rcx, r14
mov rdx, rdi
mov r8d, dword [rsp + 0xd0]
mov r9, r12
call rbp
test eax, eax
je 0x140078c52
mov r13d, dword [rsp + 0x2c]
mov rax, qword [rsi + 0x10]
cmp rax, qword [rsi + 0x18]
jne 0x140078bf0
mov edx, 1
mov rcx, r15
call fcn.1400153c0
test al, al
je 0x140078cdc
mov rax, qword [rsi + 0x10]
jmp 0x140078bf0
mov dword [rsp + 0x2c], 0
movzx eax, byte [0x140135360]
test al, al
je 0x140078d63
mov r14, qword [rsi + 0x10]
test r14, r14
je 0x140078ca8
mov r15, qword [rsi + 8]
shl r14, 4
add r14, r15
mov edi, dword [0x140137868]
lea rbx, [rsp + 0x30]
nop dword [rax + rax]
mov rcx, qword [r15]
mov r8d, dword [r15 + 8]
mov rdx, rdi
mov r9, rbx
call rbp
add r15, 0x10
cmp r15, r14
jne 0x140078c90
mov qword [rsi + 0x10], 0
mov rax, qword [rsp + 0x60]
xor rax, rsp
mov rcx, qword [0x1400f74a8]
mov rcx, qword [rcx]
cmp rcx, rax
jne 0x140078d5e
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movzx eax, byte [0x140135360]
test al, al
je 0x140078d9d
mov r14, qword [rsi + 0x10]
test r14, r14
je 0x140078ca8
mov r15, qword [rsi + 8]
shl r14, 4
add r14, r15
mov edi, dword [0x140137868]
lea rbx, [rsp + 0x30]
mov rcx, qword [r15]
mov r8d, dword [r15 + 8]
mov rdx, rdi
mov r9, rbx
call rbp
add r15, 0x10
cmp r15, r14
jne 0x140078d0a
jmp 0x140078ca8
lea rcx, [0x140135360]
call fcn.1400c6e84
test eax, eax
je 0x140078b75
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsp + 0x34]
mov dword [0x140137868], eax
lea rcx, [0x140135360]
call fcn.1400c6f5f
jmp 0x140078b75
call fcn.1400c8850
lea rcx, [0x140135360]
call fcn.1400c6e84
test eax, eax
je 0x140078c69
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsp + 0x34]
mov dword [0x140137868], eax
lea rcx, [0x140135360]
call fcn.1400c6f5f
jmp 0x140078c69
lea rcx, [0x140135360]
call fcn.1400c6e84
test eax, eax
je 0x140078ceb
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsp + 0x34]
mov dword [0x140137868], eax
lea rcx, [0x140135360]
call fcn.1400c6f5f
jmp 0x140078ceb