Function at 0x140072470
Capabilities:
Get system information on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov edi, r9d
mov r14, r8
mov rbx, rdx
mov rsi, rcx
mov r15, qword [rsp + 0xd0]
mov rax, qword [0x1402f4538]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov eax, dword [0x1402f5d00]
mov ecx, dword [0x1402f6910]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400726a0
mov dword [r15], 0
lea rax, str._4__
mov qword [r15 + 8], rax
test rbx, rbx
je 0x140072672
mov eax, dword [0x1402f7080]
mov ecx, dword [0x1402f6910]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400726d6
mov eax, dword [0x1402f7090]
mov ecx, dword [0x1402f6910]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14007271f
mov r10, qword [0x1402f7088]
test r10, r10
setne bpl
and bpl, dil
jne 0x140072547
mov r10, qword [0x1402f7078]
movzx r13d, bpl
mov r8d, r13d
shl r8d, 0x1d
lea r15, [rbx + r10]
dec r15
test r14, r14
je 0x140072582
mov rcx, qword [r14 + 8]
add rcx, qword [r14]
je 0x140072582
mov rax, rcx
or rax, r10
shr rax, 0x20
je 0x140072586
mov rax, rcx
xor edx, edx
div r10
test rdx, rdx
jne 0x140072592
jmp 0x140072598
xor ecx, ecx
jmp 0x140072598
mov eax, ecx
xor edx, edx
div r10d
test rdx, rdx
je 0x140072598
add rcx, r10
sub rcx, rdx
or r8d, 0x3000
mov eax, edi
and eax, 0x7000000
add eax, 0xff000000
shr eax, 0x18
movsx rax, al
lea rdx, [0x140244c70]
mov r9d, dword [rdx + rax*4]
mov rax, r10
or rax, r15
shr rax, 0x20
je 0x1400725d3
mov rax, r15
xor edx, edx
div r10
jmp 0x1400725db
mov eax, r15d
xor edx, edx
div r10d
sub r15, rdx
mov rdx, r15
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x140072620
mov r12, rax
mov qword [rsi], rax
mov qword [rsi + 8], r15
mov eax, edi
and eax, 0xfffffffe
or eax, r13d
mov dword [rsi + 0x10], eax
test edi, 0x4000000
je 0x14007267f
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov rdx, r12
mov r8, r15
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
jmp 0x14007267f
test r14, r14
setne al
or al, bpl
cmp al, 1
jne 0x140072650
and edi, 0xfffffffe
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x20], rax
mov rcx, rsi
mov rdx, rbx
xor r8d, r8d
mov r9d, edi
call fcn.140072470
jmp 0x14007267f
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x30]
mov edx, eax
call fcn.1400715f0
movups xmm0, xmmword [rsp + 0x30]
mov rax, qword [rsp + 0xd0]
movups xmmword [rax], xmm0
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov dword [rsi + 0x10], 0
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.140241350
mov rax, rsi
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [0x1402f5d00]
call fcn.14024119c
cmp dword [0x1402f5d00], 0xffffffff
jne 0x1400724c8
lea rcx, [fcn.1400039b0]
call fcn.140241370
lea rcx, [0x1402f5d00]
call fcn.140241204
jmp 0x1400724c8
lea rcx, [0x1402f7080]
call fcn.14024119c
cmp dword [0x1402f7080], 0xffffffff
jne 0x140072508
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsp + 0x34]
mov ecx, dword [rsp + 0x58]
cmp eax, ecx
cmova ecx, eax
mov qword [0x1402f7078], rcx
lea rcx, [0x1402f7080]
call fcn.140241204
jmp 0x140072508
lea rcx, [0x1402f7090]
call fcn.14024119c
cmp dword [0x1402f7090], 0xffffffff
jne 0x14007252d
call fcn.140072760
mov qword [0x1402f7088], rax
lea rcx, [0x1402f7090]
call fcn.140241204
jmp 0x14007252d