Function at 0x1400609c8
Capabilities:
Get system information on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xf0
xor r14d, r14d
xorps xmm1, xmm1
and dword [rsp + 0x40], r14d
xorps xmm0, xmm0
and qword [rbp - 0x61], r14
mov r13, rcx
and qword [rbp - 0x79], r14
lea rcx, [rbp - 0x59]
and qword [rbp - 0x69], r14
xor eax, eax
and qword [rsp + 0x48], r14
mov r12, r9
movdqu xmmword [rbp - 0x31], xmm0
mov rbx, r8
mov rdi, rdx
movups xmmword [rbp - 0x39], xmm1
mov qword [rbp - 0x59], rax
movups xmmword [rbp - 0x29], xmm1
movups xmmword [rbp - 0x19], xmm1
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
jne 0x140060a64
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x140060a51
mov esi, 0x80004005
jmp 0x140060cd3
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
jmp 0x140060cd3
test rdi, rdi
jne 0x140060a75
mov ecx, 0x80070057
mov esi, ecx
jmp 0x140060cd5
test rbx, rbx
je 0x140060a69
test r12, r12
je 0x140060a69
mov rbx, qword [0x140451770]
mov esi, 1
test rbx, rbx
jne 0x140060a96
lea r14d, [rsi + 7]
jmp 0x140060aa4
and dword [rsp + 0x40], 0
lea r14, [rbx + 8]
test r14, r14
je 0x140060ab2
mov edx, esi
mov rcx, r14
call fcn.14007afcc
mov dword [rsp + 0x40], esi
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
xor edx, edx
mov rcx, rax
lea r8d, [rdx + 0x10]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov r15, rax
test rax, rax
je 0x140060cce
xorps xmm0, xmm0
mov qword [rbp - 0x69], rax
mov rcx, rax
movups xmmword [rax], xmm0
call qword [sym.imp.RPCRT4.dll_UuidCreate]
test eax, eax
je 0x140060b27
mov ecx, eax
call qword [sym.imp.RPCRT4.dll_I_RpcMapWin32Status]
lea rdx, [0x140450ba4]
mov ebx, eax
lea rcx, [0x14042b528]
call fcn.1400f8590
mov esi, 0x80004005
movzx eax, bx
or eax, 0x80070000
test ebx, ebx
cmovle eax, ebx
test eax, eax
cmovns eax, esi
mov esi, eax
mov ecx, eax
jmp 0x140060cd5
lea rdx, [0x140449d8c]
mov dword [rbp - 0x6d], 0x10000
lea rcx, [0x1404327d8]
mov qword [rbp - 0x19], r13
call fcn.1400f7eec
lea rax, [0x140012a9c]
mov qword [rbp - 0x11], rbx
mov qword [rbp - 1], rax
lea rdx, [rbp - 9]
lea rax, [rbp - 0x71]
mov qword [rbp - 9], 3
mov qword [rbp + 7], rax
xor r9d, r9d
lea rax, [rbp - 0x39]
mov ecx, 0xb9
mov qword [rbp + 0xf], rax
lea rax, [rbp - 0x61]
mov qword [rbp + 0x17], rax
lea r8d, [r9 + 0x28]
call sub.ntdll.dll_NtQuerySystemInformation
mov esi, dword [rbp - 0x71]
test esi, esi
jns 0x140060ba8
lea rdx, [0x140449828]
lea rcx, [0x14042a890]
call fcn.1400f823c
jmp 0x140060cd3
mov rbx, qword [rbp - 0x61]
mov rax, qword [rbx]
mov rdi, qword [rax + 0xa8]
mov rax, qword [0x1403cf6d0]
mov rcx, rdi
call rax
mov rax, rdi
lea r8, [rsp + 0x48]
mov rdi, qword [rbp + 0x6f]
mov rcx, rbx
mov rdx, rdi
call rax
mov esi, eax
test eax, eax
js 0x140060b20
mov edx, 1
lea r9, [rbp - 0x6d]
lea rcx, [rbp - 0x79]
lea r8d, [rdx + 3]
call fcn.140058e80
mov esi, eax
test eax, eax
js 0x140060b20
mov edx, 2
lea rcx, [rbp - 0x79]
mov r9, r15
lea r8d, [rdx + 0xe]
call fcn.140058e80
mov esi, eax
test eax, eax
js 0x140060b20
mov rcx, qword [rsp + 0x48]
lea rdx, [rsp + 0x44]
mov r8d, 0x7fffffff
call fcn.14007fa5c
mov esi, eax
test eax, eax
js 0x140060b20
mov r9, qword [rsp + 0x48]
lea rcx, [rbp - 0x79]
mov r8d, dword [rsp + 0x44]
mov edx, 3
call fcn.140058e80
mov esi, eax
test eax, eax
js 0x140060b20
mov r8, qword [rbp + 0x77]
lea rcx, [rbp - 0x79]
mov rdx, r12
call fcn.140058ddc
mov esi, eax
test eax, eax
js 0x140060b20
mov rbx, qword [r13 + 0x30]
test rbx, rbx
je 0x140060c97
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
and qword [rbp - 0x69], 0
mov rbx, qword [r13 + 0x38]
mov qword [r13 + 0x30], r15
test rbx, rbx
je 0x140060cbd
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x48]
and qword [rsp + 0x48], 0
mov qword [r13 + 0x38], rax
jmp 0x140060cda
mov esi, 0x8007000e
mov ecx, esi
call fcn.140082a8c
cmp dword [0x140448890], 5
jbe 0x140060d6e
lea rdx, [0x14044b608]
lea rcx, [0x14042c128]
call fcn.1400f6768
movabs rdx, 0x400000000000
test qword [0x1404488a0], rdx
je 0x140060d6e
mov rax, qword [0x1404488a8]
and rax, rdx
cmp rax, qword [0x1404488a8]
jne 0x140060d6e
mov rcx, qword [rbp - 0x59]
call fcn.140081938
mov qword [rbp - 0x51], rax
lea rdx, [0x14043c76a]
lea rax, [rbp - 0x51]
mov dword [rsp + 0x44], esi
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x44]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x49]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x41]
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x49], rdi
mov qword [rbp - 0x41], 0x1000000
call fcn.14000133c
mov ecx, esi
call fcn.140082b34
lea rcx, [rsp + 0x48]
call fcn.140060eb8
lea rcx, [rbp - 0x69]
call fcn.140060e0c
mov rbx, qword [rbp - 0x79]
test rbx, rbx
je 0x140060dbf
mov rax, qword [rbx]
mov rdi, qword [rax + 0x10]
mov rax, qword [0x1403cf6d0]
mov rcx, rdi
call rax
lea rdx, [0x14044cbc4]
lea rcx, [0x140435274]
call fcn.1400f7b8c
mov rax, rdi
mov rcx, rbx
call rax
lea rcx, [rbp - 0x39]
call fcn.14005d33c
lea rcx, [rbp - 0x61]
call fcn.14005d290
test r14, r14
je 0x140060de5
cmp dword [rsp + 0x40], 0
je 0x140060de5
mov rcx, r14
call fcn.14007ae68
mov rbx, qword [rsp + 0x130]
mov eax, esi
add rsp, 0xf0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret