Function at 0x140096db0
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xd0
movups xmm0, xmmword [0x140128998]
mov rbx, qword [0x14015d810]
lea rcx, str._.2f__
xor eax, eax
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], rax
movss xmm0, dword [0x14015f0d4]
addss xmm0, dword [0x14015f0d0]
mov qword [rbp - 1], rax
mov qword [rbp + 7], rax
mov qword [rbp + 0xf], rax
mov qword [rbp + 0x17], rax
mulss xmm0, dword [0x140138588]
mov dword [rbp + 0x1f], eax
mov word [rbp + 0x23], ax
cvtps2pd xmm1, xmm0
movq rdx, xmm1
call fcn.1400015b0
mov edx, 0x515
mov rcx, rbx
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [sym.ProcessJacker.exe_WindowsVersion], 0x3d
jb 0x140096e72
cmp qword [0x14015d838], 0
je 0x140096e72
cmp qword [0x14015d758], 0
je 0x140096e72
lea rcx, [rbp + 0x67]
call fcn.140097300
test al, al
je 0x140096e72
mov rcx, qword [0x14015d818]
xorps xmm1, xmm1
mov eax, dword [rcx + 4]
cvtsi2sd xmm1, rax
mulsd xmm1, qword [rbp + 0x67]
jmp 0x140096e84
mov rcx, qword [0x14015d818]
xorps xmm1, xmm1
mov eax, dword [rcx + 8]
cvtsi2sd xmm1, rax
mov eax, dword [rcx + 4]
xorps xmm2, xmm2
movsd xmm0, qword [0x140138558]
lea rcx, str._.2f____.2f_GHz
divsd xmm1, xmm0
cvtsi2sd xmm2, rax
movq rdx, xmm1
divsd xmm2, xmm0
movq r8, xmm2
call fcn.1400015b0
mov edx, 0x516
mov rcx, rbx
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, dword [0x14015f160]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov edx, 0x517
mov rcx, rbx
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, dword [0x14015f0e0]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov edx, 0x518
mov rcx, rbx
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, dword [0x14015f138]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov edx, 0x4ab
mov rcx, rbx
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
xor r9d, r9d
lea rdx, [rbp + 0x27]
lea r8d, [r9 + 0x30]
lea ecx, [r9 + 3]
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
test eax, eax
js 0x14009705b
mov r9, qword [rbp + 0x2f]
movabs r8, 0x8888888888888889
sub r9, qword [rbp + 0x27]
movabs rax, 0xd6bf94d5e57a42bd
mul r9
mov rax, r8
mov r11, rdx
shr r11, 0x17
mul r11
movabs rax, 0xe5109ec205d7bea7
shr rdx, 5
imul rcx, rdx, 0x3c
mul r9
sub r11, rcx
mov rax, r8
movabs rcx, 0x861c46800
mov qword [rsp + 0x30], r11
mov r10, rdx
shr r10, 0x1d
mul r10
shr rdx, 5
imul rax, rdx, 0x3c
xor edx, edx
sub r10, rax
mov rax, r9
div rcx
mov qword [rsp + 0x28], r10
mov r8, rax
movabs rax, 0xaaaaaaaaaaaaaaab
mul r8
mov rax, r9
shr rdx, 4
lea rcx, [rdx + rdx*2]
xor edx, edx
shl rcx, 3
sub r8, rcx
movabs rcx, 0xc92a69c000
div rcx
mov qword [rsp + 0x20], r8
lea rcx, [rbp - 0x19]
mov r9, rax
lea r8, str._I64u:_02I64u:_02I64u:_02I64u
mov edx, 0x1e
call fcn.1400aede0
lea r8, [rbp - 0x19]
mov edx, 0x53d
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015d7f8], 1
jbe 0x1400970a5
mov eax, dword [0x14015d80c]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x1400970ac
lea r8, [0x140131f08]
mov edx, 0x51b
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015d7f8], 1
jbe 0x1400970f2
mov eax, dword [0x14015d754]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x1400970f9
lea r8, [0x140131f08]
mov edx, 0x51c
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015d7f8], 1
jbe 0x140097140
mov rax, qword [0x14015d848]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x140097147
lea r8, [0x140131f08]
mov edx, 0x51d
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015d7f8], 1
jbe 0x14009718d
mov eax, dword [0x14015d834]
lea rcx, [rbp - 0x39]
xor r8d, r8d
mov dword [rbp - 0x39], 0x10009
mov qword [rbp - 0x29], rax
lea edx, [r8 + 1]
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x140097194
lea r8, [0x140131f08]
mov edx, 0x51e
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rbx, qword [rsp + 0xe8]
add rsp, 0xd0
pop rbp
ret