Function at 0x140031f20
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
sub rsp, 0xb0
mov qword [rsp + 0x70], 0xfffffffffffffffe
mov qword [rsp + 0xe8], rbx
mov rsi, rcx
xor ebp, ebp
mov qword [rcx + 8], rbp
mov qword [rcx + 0x28], rbp
mov qword [rcx + 0x30], rbp
mov dword [rcx + 0x38], ebp
mov rax, qword [sym.imp.USER32.dll_DefWindowProcW]
mov qword [rcx + 0x40], rax
lea rax, [0x1400d2678]
mov qword [rcx], rax
mov rax, qword [0x140104018]
mov qword [rcx + 0x48], rax
add rcx, 0x60
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
lea rdi, [rsi + 0x88]
mov qword [rsp + 0xd8], rdi
lea rcx, [rdi + 0x20]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
lea rbx, [rdi + 0x48]
mov qword [rsp + 0xe0], rbx
mov qword [rbx], rbp
mov qword [rbx + 8], rbp
mov rcx, rbx
call fcn.14000d810
mov qword [rbx], rax
mov qword [rdi], 0xffffffffffffffff
mov qword [rdi + 0x18], rbp
mov qword [rdi + 8], rbp
lea rcx, [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsp + 0xa0]
mov dword [rdi + 0x10], eax
mov rax, qword [0x140104018]
mov qword [rsi + 0x110], rax
mov qword [rsi + 0x128], rbp
mov qword [rsi + 0x130], rbp
mov qword [rsi + 0x138], rbp
lea rcx, [rsi + 0x150]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov qword [rsi + 0x178], rbp
mov qword [rsi + 0x180], rbp
mov dword [rsi + 0x188], ebp
lea rax, [0x1400d2668]
mov qword [rsi + 0x190], rax
lea rcx, [rsi + 0x198]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov rax, qword [0x140104018]
mov qword [rsi + 0x1c0], rax
mov qword [rsi + 0x1c8], rbp
mov qword [rsi + 0x1d0], rbp
mov qword [rsi + 0x1d8], rbp
mov qword [rsi + 0x1e0], rbp
mov qword [rsi + 0x1e8], rbp
mov qword [rsi + 0x1f0], rbp
mov qword [rsi + 0x218], rbp
mov qword [rsi + 0x440], rbp
mov qword [rsi + 0x448], rbp
mov qword [rsi + 0x450], rbp
mov qword [rsi + 0x4a0], rbp
mov dword [rsi + 0x4a8], ebp
lea rcx, [rsi + 0x1f8]
call fcn.1400a1fa0
lea rcx, [rsi + 0x240]
xor edx, edx
call fcn.1400a1580
xor eax, eax
mov qword [rsi + 0x3b8], rax
mov qword [rsi + 0x3c0], rax
mov qword [rsi + 0x3c8], rax
mov qword [rsi + 0x3d0], rax
mov qword [rsi + 0x3d8], rax
lea rcx, [rsi + 0x3e0]
call fcn.1400a2260
lea rcx, [rsi + 0x420]
call fcn.1400a2210
nop
mov dword [rsi + 0xe8], 0xa
mov qword [rsi + 0xec], 0xa
mov qword [rsi + 0x118], rbp
mov qword [rsi + 0xf4], rbp
mov qword [rsi + 0x100], rbp
mov qword [rsi + 0x120], rbp
mov dword [rsi + reloc.WS2_32.dll_recv8], 0x10
mov dword [rsi + 0x10c], 4
lea rcx, [0x1400d26a8]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r8, [0x1400d26a8]
mov edx, eax
lea rcx, [rsi + 0x110]
call fcn.140001a10
lea rax, [0x1400d26d0]
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x60], 1
mov dword [rsp + 0x58], 4
mov dword [rsp + 0x50], ebp
mov dword [rsp + 0x48], ebp
mov dword [rsp + 0x40], ebp
mov dword [rsp + 0x38], ebp
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], ebp
xor r9d, r9d
xor r8d, r8d
lea edx, [rbp + 7]
lea ecx, [rbp + 0xe]
call qword [sym.imp.GDI32.dll_CreateFontW]
mov qword [rsi + 0xe0], rax
mov qword [rsi + 0x140], rbp
mov dword [rsi + 0x148], ebp
mov qword [rsi + 0x50], rbp
mov dword [rsi + 0x58], ebp
mov rax, rsi
mov rbx, qword [rsp + 0xe8]
add rsp, 0xb0
pop rdi
pop rsi
pop rbp
ret