Function at 0x1400da5e0
Capabilities:
Get system information on windows

Disassembly:
push rsi
push rdi
sub rsp, 0xb8
mov rax, qword [0x14013f0f8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x40]
lea rcx, [0x140113bc8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x50]
mov rdi, rax
xor eax, eax
mov ecx, 0x2e
rep stosb byte [rdi], al
movss xmm0, dword [0x1401409f8]
addss xmm0, dword [0x1401409b8]
mulss xmm0, dword [0x140125140]
cvtss2sd xmm0, xmm0
movaps xmm1, xmm0
movq rdx, xmm1
lea rcx, str._.2f__
call sym.ProcessHacker.exe_PhaFormatString
mov r8, qword [rax + 8]
mov edx, 0x515
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
xorps xmm0, xmm0
movsd qword [rsp + 0x30], xmm0
mov byte [rsp + 0x20], 0
cmp dword [sym.ProcessHacker.exe_WindowsVersion], 0x3d
jb 0x1400da6d2
cmp qword [0x14013ec40], 0
je 0x1400da6d2
cmp qword [0x14013edd8], 0
je 0x1400da6d2
lea rcx, [rsp + 0x38]
call fcn.1400daba0
movzx eax, al
test eax, eax
je 0x1400da6d2
mov eax, 0x18
imul rax, rax, 0
mov rcx, qword [0x14013ed38]
mov eax, dword [rcx + rax + 4]
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x38]
divsd xmm0, qword [0x140125100]
movsd qword [rsp + 0x30], xmm0
mov byte [rsp + 0x20], 1
movzx eax, byte [rsp + 0x20]
test eax, eax
jne 0x1400da702
mov eax, 0x18
imul rax, rax, 0
mov rcx, qword [0x14013ed38]
mov eax, dword [rcx + rax + 8]
cvtsi2sd xmm0, rax
divsd xmm0, qword [0x140125100]
movsd qword [rsp + 0x30], xmm0
mov eax, 0x18
imul rax, rax, 0
mov rcx, qword [0x14013ed38]
mov eax, dword [rcx + rax + 4]
cvtsi2sd xmm0, rax
divsd xmm0, qword [0x140125100]
movaps xmm2, xmm0
movq r8, xmm2
movsd xmm1, qword [rsp + 0x30]
movq rdx, xmm1
lea rcx, str._.2f____.2f_GHz
call sym.ProcessHacker.exe_PhaFormatString
mov r8, qword [rax + 8]
mov edx, 0x516
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, dword [0x1401407b4]
mov dl, 1
mov ecx, eax
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x517
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, dword [0x1401407b0]
mov dl, 1
mov ecx, eax
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x518
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, dword [0x1401407a0]
mov dl, 1
mov ecx, eax
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x4ab
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
xor r9d, r9d
mov r8d, 0x30
lea rdx, [rsp + 0x80]
mov ecx, 3
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
test eax, eax
jl 0x1400da820
mov rax, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x88]
sub rcx, rax
mov rax, rcx
mov r8d, 2
mov rdx, rax
lea rcx, [rsp + 0x40]
call sym.ProcessHacker.exe_PhPrintTimeSpan
lea r8, [rsp + 0x40]
mov edx, 0x53d
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14013ecfc], 1
jbe 0x1400da86b
mov eax, dword [0x14013f0c4]
mov dl, 1
mov ecx, eax
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x51b
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
jmp 0x1400da882
lea r8, [0x1401229c8]
mov edx, 0x51b
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14013ecfc], 1
jbe 0x1400da8b8
mov eax, dword [0x14013ed34]
mov dl, 1
mov ecx, eax
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x51c
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
jmp 0x1400da8cf
lea r8, [0x1401229c8]
mov edx, 0x51c
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14013ecfc], 1
jbe 0x1400da904
mov dl, 1
mov rcx, qword [0x14013ed20]
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x51d
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
jmp 0x1400da91b
lea r8, [0x1401229c8]
mov edx, 0x51d
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14013ecfc], 1
jbe 0x1400da951
mov eax, dword [0x14013ec54]
mov dl, 1
mov ecx, eax
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x51e
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
jmp 0x1400da968
lea r8, [0x1401229c8]
mov edx, 0x51e
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
add rsp, 0xb8
pop rdi
pop rsi
ret