Function at 0x1400193f0
Capabilities:
Get system information on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x98
mov r14d, ecx
mov rax, qword [0x14006f060]
xor rax, rsp
mov qword [rsp + 0x90], rax
mov r15, qword [rsp + 0xd8]
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov rdi, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
xorps xmm0, xmm0
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x40], xmm0
movaps xmmword [rsp + 0x30], xmm0
cmp rdi, rbp
jae 0x1400194e5
lea rbx, [rsp + 0x30]
mov rsi, qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
movabs r12, 0x1000000010000001
jmp 0x14001947a
add rdi, qword [rsp + 0x48]
cmp rdi, rbp
jae 0x1400194e5
mov rcx, qword [0x140077630]
mov r9d, 0x30
mov rdx, rdi
mov r8, rbx
call rsi
cmp dword [rsp + 0x58], 0x20000
jne 0x140019470
mov eax, dword [rsp + 0x54]
add eax, 0xfffffffc
cmp eax, 0x3c
ja 0x140019470
bt r12, rax
jae 0x140019470
mov rax, qword [rsp + 0x30]
cmp rax, r15
ja 0x140019470
add rax, qword [rsp + 0x48]
cmp rax, r15
jb 0x140019470
movaps xmm0, xmmword [rsp + 0x30]
movaps xmm1, xmmword [rsp + 0x40]
movaps xmm2, xmmword [rsp + 0x50]
movups xmmword [0x140075680], xmm2
movups xmmword [0x140075670], xmm1
movups xmmword [0x140075660], xmm0
jmp 0x140019470
cmp byte [0x14007565c], 0
jne 0x1400195d8
mov rax, qword [0x140075660]
cmp rax, qword [0x1400756b8]
je 0x1400195d8
mov rdx, qword [0x140075678]
mov rcx, qword [0x140077630]
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x30], rax
lea r15, [0x140077640]
mov qword [rsp + 0x20], r15
lea rdx, [rsp + 0x30]
lea r8, [rsp + 0x60]
mov r9d, 4
call fcn.1400289f0
mov edi, 0x6f7a0
add edi, dword [0x14007569c]
mov r12, qword [0x140075678]
mov rbp, qword [0x140075660]
mov ecx, edi
call fcn.140038a80
test r12d, r12d
jle 0x140019598
mov esi, r12d
xor ebx, ebx
nop dword [rax]
movzx r13d, byte [rbp + rbx]
xor r13b, dil
mov byte [rbp + rbx], r13b
call fcn.140038a98
cdq
idiv r12d
inc dl
xor dl, r13b
mov byte [rbp + rbx], dl
inc rbx
cmp rsi, rbx
jne 0x140019570
mov rax, qword [0x140075678]
mov rdx, qword [0x140075660]
mov rcx, qword [0x140077630]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x20], r15
lea rdx, [rsp + 0x30]
lea r8, [rsp + 0x60]
mov r9d, 1
call fcn.1400289f0
mov byte [0x14007565c], 1
mov rdx, qword [0x140075648]
mov rcx, qword [0x140077630]
lea rbx, [0x140077638]
mov qword [rsp + 0x20], rbx
lea rdi, [0x140075650]
mov rsi, qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r9d, 0xc
mov r8, rdi
call rsi
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x30], 0
mov rdx, qword [0x140075648]
mov rcx, qword [0x140077630]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 0xc
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [rsp + 0x68], 0xc3500000
mov qword [rsp + 0x60], 0xb848
lea rax, [method.std::_Facet_base.virtual_0]
mov qword [rsp + 0x62], rax
mov rdx, qword [0x140075648]
mov rcx, qword [0x140077630]
mov qword [rsp + 0x20], rbx
lea r8, [rsp + 0x60]
mov r9d, 0xc
call rsi
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.14002b3b0
nop
add rsp, 0x98
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret