Function at 0x140262c20
Capabilities:
Get memory capacity
Get system information on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
lea rbp, [rsp - 0x20]
sub rsp, 0x120
mov rax, qword [0x14039e2e8]
xor rax, rsp
mov qword [rbp + 0x18], rax
inc dword [0x1403ce424]
mov rbx, rcx
call fcn.140262e70
call qword [sym.imp.KERNEL32.dll_GetTickCount]
lea rcx, [rsp + 0x28]
mov dword [rbx + 8], eax
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x28]
lea rcx, [rbp - 0x30]
mov qword [rbx + 0xc], rax
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
movups xmm0, xmmword [rbp - 0x30]
lea rcx, [rsp + 0x20]
movups xmmword [rbx + 0x14], xmm0
call qword [sym.imp.USER32.dll_GetCursorPos]
mov rax, qword [rsp + 0x20]
mov qword [rbx + 0x24], rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov word [rbx + 0x2c], ax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov word [rbx + 0x2e], ax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
lea rcx, [rsp + 0x20]
mov word [rbx + 0x30], ax
call qword [sym.imp.USER32.dll_GetCaretPos]
mov rax, qword [rsp + 0x20]
lea rcx, [rbp - 0x20]
mov qword [rbx + 0x32], rax
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
movups xmm0, xmmword [rbp - 0x20]
movups xmm1, xmmword [rbp - 0x10]
movups xmmword [rbx + 0x3a], xmm0
movups xmm0, xmmword [rbp]
movups xmmword [rbx + 0x4a], xmm1
movsd xmm1, qword [rbp + 0x10]
movups xmmword [rbx + 0x5a], xmm0
movsd qword [rbx + 0x6a], xmm1
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov dword [rbx + 0x72], eax
call qword [sym.imp.USER32.dll_GetCapture]
mov dword [rbx + 0x76], eax
call qword [sym.imp.USER32.dll_GetClipboardOwner]
mov dword [rbx + 0x7a], eax
call qword [sym.imp.USER32.dll_GetClipboardViewer]
mov dword [rbx + 0x7e], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rbx + 0x82], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [rbx + 0x86], eax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov dword [rbx + 0x8a], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rbx + 0x8e], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov dword [rbx + 0x92], eax
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [rbx + 0x96], eax
call qword [sym.imp.USER32.dll_GetFocus]
mov dword [rbx + 0x9a], eax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov dword [rbx + 0x9e], eax
call qword [sym.imp.USER32.dll_GetInputState]
mov dword [rbx + 0xa2], eax
call qword [sym.imp.USER32.dll_GetMessagePos]
mov dword [rbx + 0xa6], eax
call qword [sym.imp.USER32.dll_GetMessageTime]
mov dword [rbx + 0xaa], eax
call qword [sym.imp.USER32.dll_GetOpenClipboardWindow]
mov dword [rbx + 0xae], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
lea rcx, [rsp + 0x30]
mov dword [rbx + 0xb2], eax
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
movups xmm0, xmmword [rsp + 0x30]
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [rbx + 0xb6], xmm0
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rbx + 0xc6], xmm1
movups xmmword [rbx + 0xd6], xmm0
call fcn.140262fe0
mov dword [rbx + 0xe6], eax
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetStartupInfoW]
movaps xmm0, xmmword [rsp + 0x60]
movaps xmm1, xmmword [rsp + 0x70]
movups xmmword [rbx + 0xea], xmm0
movaps xmm0, xmmword [rbp - 0x80]
movups xmmword [rbx + 0xfa], xmm1
movaps xmm1, xmmword [rbp - 0x70]
movups xmmword [rbx + 0x10a], xmm0
movaps xmm0, xmmword [rbp - 0x60]
movups xmmword [rbx + 0x11a], xmm1
movaps xmm1, xmmword [rbp - 0x50]
movups xmmword [rbx + 0x12a], xmm0
movsd xmm0, qword [rbp - 0x40]
movups xmmword [rbx + 0x13a], xmm1
movsd qword [rbx + 0x14a], xmm0
mov eax, dword [0x1403ce424]
mov dword [rbx + 0x152], eax
mov rcx, qword [rbp + 0x18]
xor rcx, rsp
call fcn.1402654f0
mov rbx, qword [rsp + 0x138]
add rsp, 0x120
pop rbp
ret