Function at 0x1400cecb0
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xd0
movups xmm0, xmmword [0x140122a18]
mov rbx, qword [0x14015dc20]
lea rcx, str._.2f__
xor eax, eax
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], rax
movss xmm0, dword [0x14015e074]
addss xmm0, dword [0x14015e070]
mov qword [rbp - 1], rax
mov qword [rbp + 7], rax
mov qword [rbp + 0xf], rax
mov qword [rbp + 0x17], rax
mulss xmm0, dword [0x140137820]
mov dword [rbp + 0x1f], eax
mov word [rbp + 0x23], ax
cvtps2pd xmm1, xmm0
movq rdx, xmm1
call sym.ProcessHacker.exe_PhaFormatString
mov edx, 0x515
mov rcx, rbx
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [sym.ProcessHacker.exe_WindowsVersion], 0x3d
jb 0x1400ced72
cmp qword [0x14015dc90], 0
je 0x1400ced72
cmp qword [0x14015d898], 0
je 0x1400ced72
lea rcx, [rbp + 0x67]
call fcn.1400cf200
test al, al
je 0x1400ced72
mov rcx, qword [0x14015dc28]
xorps xmm1, xmm1
mov eax, dword [rcx + 4]
cvtsi2sd xmm1, rax
mulsd xmm1, qword [rbp + 0x67]
jmp 0x1400ced84
mov rcx, qword [0x14015dc28]
xorps xmm1, xmm1
mov eax, dword [rcx + 8]
cvtsi2sd xmm1, rax
mov eax, dword [rcx + 4]
xorps xmm2, xmm2
movsd xmm0, qword [0x1401377f0]
lea rcx, str._.2f____.2f_GHz
divsd xmm1, xmm0
cvtsi2sd xmm2, rax
movq rdx, xmm1
divsd xmm2, xmm0
movq r8, xmm2
call sym.ProcessHacker.exe_PhaFormatString
mov edx, 0x516
mov rcx, rbx
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, dword [0x14015e4c0]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov edx, 0x517
mov rcx, rbx
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, dword [0x14015e440]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov edx, 0x518
mov rcx, rbx
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, dword [0x14015e498]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov edx, 0x4ab
mov rcx, rbx
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
xor r9d, r9d
lea rdx, [rbp + 0x27]
lea r8d, [r9 + 0x30]
lea ecx, [r9 + 3]
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
test eax, eax
js 0x1400cef5b
mov r9, qword [rbp + 0x2f]
movabs r8, 0x8888888888888889
sub r9, qword [rbp + 0x27]
movabs rax, 0xd6bf94d5e57a42bd
mul r9
mov rax, r8
mov r11, rdx
shr r11, 0x17
mul r11
movabs rax, 0xe5109ec205d7bea7
shr rdx, 5
imul rcx, rdx, 0x3c
mul r9
sub r11, rcx
mov rax, r8
movabs rcx, 0x861c46800
mov qword [rsp + 0x30], r11
mov r10, rdx
shr r10, 0x1d
mul r10
shr rdx, 5
imul rax, rdx, 0x3c
xor edx, edx
sub r10, rax
mov rax, r9
div rcx
mov qword [rsp + 0x28], r10
mov r8, rax
movabs rax, 0xaaaaaaaaaaaaaaab
mul r8
mov rax, r9
shr rdx, 4
lea rcx, [rdx + rdx*2]
xor edx, edx
shl rcx, 3
sub r8, rcx
movabs rcx, 0xc92a69c000
div rcx
mov qword [rsp + 0x20], r8
lea rcx, [rbp - 0x19]
mov r9, rax
lea r8, str._I64u:_02I64u:_02I64u:_02I64u
mov edx, 0x1e
call fcn.140001260
lea r8, [rbp - 0x19]
mov edx, 0x53d
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015d9dc], 1
jbe 0x1400cefa5
mov eax, dword [0x14015dc04]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x1400cefac
lea r8, [0x1401351c8]
mov edx, 0x51b
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015d9dc], 1
jbe 0x1400ceff2
mov eax, dword [0x14015d894]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x1400ceff9
lea r8, [0x1401351c8]
mov edx, 0x51c
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015d9dc], 1
jbe 0x1400cf040
mov rax, qword [0x14015dcb0]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x1400cf047
lea r8, [0x1401351c8]
mov edx, 0x51d
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015d9dc], 1
jbe 0x1400cf08d
mov eax, dword [0x14015dc54]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x1400cf094
lea r8, [0x1401351c8]
mov edx, 0x51e
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rbx, qword [rsp + 0xe8]
add rsp, 0xd0
pop rbp
ret