Function at 0x1400b3440
Capabilities:
Get system information on windows

Disassembly:
mov r11, rsp
push rsi
push rdi
sub rsp, 0x58
mov rax, qword [0x1402b5020]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov qword [r11 + 0x10], rbx
xor edi, edi
cmp byte [0x1402bfd18], dil
mov qword [r11 + 0x18], rbp
mov qword [r11 + 0x20], r12
mov r12, rcx
mov qword [r11 - 0x18], r13
mov r13d, 0xffff
mov qword [r11 - 0x20], r14
mov qword [r11 - 0x28], r15
lea r15d, [rdi + 2]
je 0x1400b34d4
movzx r8d, word [0x1402bfd1a]
lea ecx, [rdi + 0x53]
mov rdx, qword [0x1402bf930]
xor r9d, r9d
shl r8d, 3
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
mov rsi, qword [0x1402bf930]
test eax, eax
jns 0x1400b34c8
movzx r8d, word [0x1402bfd1a]
xor edx, edx
shl r8, 3
mov rcx, rsi
call fcn.1401dff50
movzx edx, word [0x1402bfd1c]
jmp 0x1400b35bf
movzx edx, word [0x1402bfd1c]
movzx ebp, di
mov rsi, qword [0x1402bf930]
mov word [rsp + 0x30], di
cmp di, dx
jae 0x1400b35bf
movzx eax, di
movzx r8d, di
movzx r9d, di
nop
mov rcx, qword [0x1402bfd20]
test rcx, rcx
je 0x1400b353f
movzx ebx, di
cmp ax, r13w
jne 0x1400b352f
cmp di, dx
jae 0x1400b3546
movzx eax, dx
nop dword [rax]
add bx, word [rcx]
lea rcx, [rcx + 2]
sub rax, 1
jne 0x1400b3520
jmp 0x1400b3546
cmp r8w, dx
jae 0x1400b3546
movzx eax, r9w
movzx ebx, word [rcx + rax*2]
jmp 0x1400b3546
movzx ebx, word [0x1402bfd1a]
movzx eax, bp
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x28], rdi
mov r8d, r15d
mov ecx, 0x53
lea r14, [rax*8]
movzx eax, bx
shl eax, 3
lea r9, [r14 + rsi]
mov dword [rsp + 0x20], eax
call qword [sym.imp.ntdll.dll_NtQuerySystemInformationEx]
mov rsi, qword [0x1402bf930]
nop
test eax, eax
jns 0x1400b3597
movzx r8d, bx
lea rcx, [r14 + rsi]
shl r8, 3
xor edx, edx
call fcn.1401dff50
movzx eax, word [rsp + 0x30]
add bp, bx
movzx edx, word [0x1402bfd1c]
inc ax
mov word [rsp + 0x30], ax
movzx r8d, ax
movzx r9d, ax
cmp ax, dx
jb 0x1400b3500
movzx ebp, word [0x1402bfd1a]
mov rbx, rdi
mov r10d, edi
cmp ebp, 4
jb 0x1400b363d
mov r9d, ebp
xorps xmm2, xmm2
and r9d, 0xfffffffc
xorps xmm1, xmm1
mov r8d, r15d
nop dword [rax]
nop word [rax + rax]
mov eax, r10d
add r10d, 4
movq xmm0, qword [rsi + rax*8]
lea eax, [r8 - 1]
movhpd xmm0, qword [rsi + rax*8]
mov eax, r8d
paddq xmm2, xmm0
movq xmm0, qword [rsi + rax*8]
lea eax, [r8 + 1]
movhpd xmm0, qword [rsi + rax*8]
add r8d, 4
paddq xmm1, xmm0
cmp r10d, r9d
jb 0x1400b35f0
paddq xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
paddq xmm1, xmm0
movq rbx, xmm1
mov r8, rdi
mov r9, rdi
cmp r10d, ebp
jae 0x1400b3695
mov eax, ebp
mov ecx, r10d
sub eax, r10d
cmp eax, r15d
jb 0x1400b368a
mov eax, ebp
sub eax, r10d
sub eax, r15d
shr eax, 1
inc eax
mov r11d, eax
lea eax, [r10 + rax*2]
nop dword [rax + rax]
add r8, qword ds:[rsi + rcx*8]
add r9, qword [rsi + rcx*8 + 8]
add rcx, r15
sub r11, 1
jne 0x1400b3670
cmp eax, ebp
jae 0x1400b368e
add rbx, qword [rsi + rcx*8]
lea rax, [r9 + r8]
add rbx, rax
mov rax, rbx
sub rax, qword [0x1402c4c30]
cmp byte [0x1402bfd18], dil
mov qword [r12], rax
mov r12, qword [rsp + 0x88]
mov qword [0x1402c4c38], rax
mov qword [0x1402c4c30], rbx
je 0x1400b370a
mov rdx, qword [0x1402bf948]
lea r8d, [rbp*8]
xor r9d, r9d
lea ecx, [r9 + 0x6c]
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
mov rsi, qword [0x1402bf948]
test eax, eax
jns 0x1400b37ff
movzx r8d, word [0x1402bfd1a]
xor edx, edx
shl r8, 3
mov rcx, rsi
call fcn.1401dff50
jmp 0x1400b37ff
mov rsi, qword [0x1402bf948]
movzx ebp, di
mov word [rsp + 0x34], di
cmp di, dx
jae 0x1400b37ff
movzx ecx, di
movzx r8d, di
movzx r9d, di
mov rax, qword [0x1402bfd20]
nop dword [rax + rax]
test rax, rax
je 0x1400b377f
movzx ebx, di
cmp cx, r13w
jne 0x1400b376f
cmp di, dx
jae 0x1400b3786
movzx ecx, dx
nop word [rax + rax]
add bx, word [rax]
lea rax, [rax + 2]
sub rcx, 1
jne 0x1400b3760
jmp 0x1400b3786
cmp r8w, dx
jae 0x1400b3786
movzx ecx, r9w
movzx ebx, word [rax + rcx*2]
jmp 0x1400b3786
movzx ebx, word [0x1402bfd1a]
movzx eax, bp
lea rdx, [rsp + 0x34]
mov qword [rsp + 0x28], rdi
mov r8d, r15d
mov ecx, 0x6c
lea r14, [rax*8]
movzx eax, bx
shl eax, 3
lea r9, [r14 + rsi]
mov dword [rsp + 0x20], eax
call qword [sym.imp.ntdll.dll_NtQuerySystemInformationEx]
mov rsi, qword [0x1402bf948]
nop
test eax, eax
jns 0x1400b37d7
movzx r8d, bx
lea rcx, [r14 + rsi]
shl r8, 3
xor edx, edx
call fcn.1401dff50
movzx ecx, word [rsp + 0x34]
add bp, bx
movzx edx, word [0x1402bfd1c]
inc cx
mov word [rsp + 0x34], cx
movzx r8d, cx
movzx r9d, cx
cmp cx, dx
jb 0x1400b3734
movzx r11d, word [0x1402bfd1a]
mov r10, rdi
mov r14, qword [rsp + 0x48]
mov edx, edi
mov r13, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x80]
mov rbx, qword [rsp + 0x78]
cmp r11d, 4
jb 0x1400b388b
mov r8d, r11d
xorps xmm2, xmm2
and r8d, 0xfffffffc
xorps xmm1, xmm1
nop word [rax + rax]
mov eax, edx
add edx, 4
movq xmm0, qword [rsi + rax*8]
lea eax, [r15 - 1]
movhpd xmm0, qword [rsi + rax*8]
mov eax, r15d
paddq xmm2, xmm0
movq xmm0, qword [rsi + rax*8]
lea eax, [r15 + 1]
movhpd xmm0, qword [rsi + rax*8]
add r15d, 4
paddq xmm1, xmm0
cmp edx, r8d
jb 0x1400b3840
paddq xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
paddq xmm1, xmm0
movq r10, xmm1
mov r15, qword [rsp + 0x40]
mov r8, rdi
cmp edx, r11d
jae 0x1400b38e3
mov eax, r11d
mov ecx, edx
sub eax, edx
cmp eax, 2
jb 0x1400b38d8
mov eax, r11d
sub eax, edx
sub eax, 2
shr eax, 1
inc eax
mov r9d, eax
lea eax, [rdx + rax*2]
nop word [rax + rax]
add rdi, qword [rsi + rcx*8]
add r8, qword [rsi + rcx*8 + 8]
add rcx, 2
sub r9, 1
jne 0x1400b38c0
cmp eax, r11d
jae 0x1400b38dc
add r10, qword [rsi + rcx*8]
lea rax, [r8 + rdi]
add r10, rax
mov rax, r10
sub rax, qword [0x1402c4c40]
mov qword [0x1402c4c48], rax
mov qword [0x1402c4c40], r10
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.1401dd6a0
add rsp, 0x58
pop rdi
pop rsi
ret