Function at 0x14009db2c
Capabilities:
Get memory capacity
Get system information on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x278]
sub rsp, 0x360
mov rax, qword [0x140412700]
xor rax, rsp
mov qword [rbp + 0x250], rax
mov rsi, rcx
mov qword [rsp + 0x58], rcx
xor r14d, r14d
mov edi, r14d
mov dword [rsp + 0x30], r14d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rax
lea rcx, [rbp - 0x60]
call fcn.1401999f8
nop
xorps xmm1, xmm1
movups xmmword [rbp - 0x80], xmm1
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], r14
xor r8d, r8d
lea rdx, [0x14036ac58]
lea rcx, [rbp - 0x80]
call fcn.140013184
nop
lea rdx, str.HardwareDescriptionSystemCentralProcessor0
lea rcx, [rbp - 0x60]
call fcn.140199b4c
lea r15d, [r14 + 0x20]
test al, al
je 0x14009dc22
lea r9, [0x14036ac58]
lea r8, str.Identifier
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x60]
call fcn.140199c64
mov rbx, rax
lea rax, [rbp - 0x80]
cmp rax, rbx
je 0x14009dc18
lea rcx, [rbp - 0x80]
call fcn.14000dd24
mov r8d, r15d
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.1402bec40
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
lea rcx, [rsp + 0x38]
call fcn.14000dd24
or rbx, 0xffffffffffffffff
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x14009dcf5
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 7
cmova rdx, qword [rbp - 0x80]
test rcx, rcx
je 0x14009dc75
mov r8, rdx
mov rax, r14
cmp word [rdx], r15w
je 0x14009dc65
cmp rcx, 1
je 0x14009dc68
dec rcx
add r8, 2
cmp word [r8], r15w
jne 0x14009dc52
mov rax, r8
test rax, rax
je 0x14009dc75
sub rax, rdx
sar rax, 1
jmp 0x14009dc78
mov rax, rbx
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x48], xmm1
movsxd r8, eax
cmp qword [rbp - 0x70], r8
cmovb r8, qword [rbp - 0x70]
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 7
cmova rdx, qword [rbp - 0x80]
lea rcx, [rsp + 0x38]
call fcn.140013184
mov edi, 4
mov dword [rsp + 0x30], edi
lea rcx, [rbp - 0x80]
call fcn.14000dd24
mov r8, r15
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x80]
call fcn.1402bec40
movdqa xmm0, xmmword [0x1403a9d70]
movdqu xmmword [rsp + 0x48], xmm0
mov word [rsp + 0x38], r14w
and edi, 0xfffffffb
mov dword [rsp + 0x30], edi
lea rcx, [rsp + 0x38]
call fcn.14000dd24
lea rcx, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dword [rbp - 0x30], 0x40
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x2c], xmm0
movups xmmword [rbp - 0x1c], xmm0
movups xmmword [rbp - 0xc], xmm0
mov qword [rbp + 4], rax
mov dword [rbp + 0xc], eax
lea rcx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov rax, qword [rbp - 0x28]
shr rax, 0x14
mov dword [rsp + 0x20], eax
mov r9d, dword [rbp + 0x30]
lea r8, str._u_Logical_Processors___u_MB_Memory
mov edx, 0x104
lea rcx, [rbp + 0x40]
call fcn.14009e234
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x48], xmm1
lea rax, [rbp + 0x40]
inc rbx
cmp word [rax + rbx*2], r14w
jne 0x14009dd62
mov r8, rbx
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x38]
call fcn.140013184
nop
lea r8, [0x14039de60]
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x60]
call fcn.14008b7cc
nop
lea r8, [rsp + 0x38]
mov rdx, rax
mov rcx, rsi
call fcn.14009df64
or edi, 1
mov dword [rsp + 0x30], edi
lea rcx, [rsp + 0x60]
call fcn.14000dd24
nop
lea rcx, [rsp + 0x38]
call fcn.14000dd24
nop
lea rcx, [rbp - 0x80]
call fcn.14000dd24
nop
lea rcx, [rbp - 0x60]
call fcn.140199a20
mov rax, rsi
mov rcx, qword [rbp + 0x250]
xor rcx, rsp
call fcn.1402194b0
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret