Function at 0x140079320
Capabilities:
Get system information on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov rbx, r9
mov r14, r8
mov rsi, rcx
mov rax, qword [0x1401054a8]
mov rax, qword [rax]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov qword [rcx], rdx
mov qword [rcx + 0x10], 0
mov qword [rcx + 0x18], 2
lea rax, [rcx + 0x20]
mov qword [rcx + 8], rax
movzx eax, byte [0x140146360]
test al, al
je 0x140079524
mov edi, dword [0x140148868]
lea rax, [r14 + rbx]
dec rax
mov rcx, rax
shr rcx, 0x20
je 0x140079395
xor edx, edx
div rdi
mov rbx, rax
jmp 0x14007939b
xor edx, edx
div edi
mov ebx, eax
mov rax, r14
shr rax, 0x20
je 0x1400793b1
mov rax, r14
xor edx, edx
div rdi
mov r14, rax
jmp 0x1400793bb
mov eax, r14d
xor edx, edx
div edi
mov r14d, eax
inc rbx
sub rbx, r14
je 0x1400794b0
lea r15, [rsi + 8]
imul r14, rdi
cmp rbx, 2
mov eax, 1
cmovb rbx, rax
lea r12, [rsp + 0x2c]
mov rbp, qword [sym.imp.KERNEL32.dll_VirtualProtect]
jmp 0x140079411
mov rcx, qword [rsi + 8]
shl rax, 4
mov qword [rcx + rax], r14
mov dword [rcx + rax + 8], r13d
inc qword [rsi + 0x10]
add r14, rdi
dec rbx
je 0x1400794b0
mov rcx, r14
mov rdx, rdi
mov r8d, dword [rsp + 0xd0]
mov r9, r12
call rbp
test eax, eax
je 0x140079452
mov r13d, dword [rsp + 0x2c]
mov rax, qword [rsi + 0x10]
cmp rax, qword [rsi + 0x18]
jne 0x1400793f0
mov edx, 1
mov rcx, r15
call fcn.140015530
test al, al
je 0x1400794dc
mov rax, qword [rsi + 0x10]
jmp 0x1400793f0
mov dword [rsp + 0x2c], 0
movzx eax, byte [0x140146360]
test al, al
je 0x140079563
mov r14, qword [rsi + 0x10]
test r14, r14
je 0x1400794a8
mov r15, qword [rsi + 8]
shl r14, 4
add r14, r15
mov edi, dword [0x140148868]
lea rbx, [rsp + 0x30]
nop dword [rax + rax]
mov rcx, qword [r15]
mov r8d, dword [r15 + 8]
mov rdx, rdi
mov r9, rbx
call rbp
add r15, 0x10
cmp r15, r14
jne 0x140079490
mov qword [rsi + 0x10], 0
mov rax, qword [rsp + 0x60]
xor rax, rsp
mov rcx, qword [0x1401054a8]
mov rcx, qword [rcx]
cmp rcx, rax
jne 0x14007955e
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movzx eax, byte [0x140146360]
test al, al
je 0x14007959d
mov r14, qword [rsi + 0x10]
test r14, r14
je 0x1400794a8
mov r15, qword [rsi + 8]
shl r14, 4
add r14, r15
mov edi, dword [0x140148868]
lea rbx, [rsp + 0x30]
mov rcx, qword [r15]
mov r8d, dword [r15 + 8]
mov rdx, rdi
mov r9, rbx
call rbp
add r15, 0x10
cmp r15, r14
jne 0x14007950a
jmp 0x1400794a8
lea rcx, [0x140146360]
call fcn.1400d3f14
test eax, eax
je 0x140079375
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsp + 0x34]
mov dword [0x140148868], eax
lea rcx, [0x140146360]
call fcn.1400d3fef
jmp 0x140079375
call fcn.1400d58e0
lea rcx, [0x140146360]
call fcn.1400d3f14
test eax, eax
je 0x140079469
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsp + 0x34]
mov dword [0x140148868], eax
lea rcx, [0x140146360]
call fcn.1400d3fef
jmp 0x140079469
lea rcx, [0x140146360]
call fcn.1400d3f14
test eax, eax
je 0x1400794eb
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsp + 0x34]
mov dword [0x140148868], eax
lea rcx, [0x140146360]
call fcn.1400d3fef
jmp 0x1400794eb