Function at 0x140074a80
Capabilities:
Get system information on windows

Disassembly:
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x1400e0038]
xor rax, rsp
mov qword [rbp + 0x70], rax
mov rax, qword gs:[0x58]
mov r14, rdx
mov qword [rcx + 8], rdx
mov rdi, rcx
mov edx, 4
xor r15d, r15d
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1400e4f34], eax
jg 0x140074d99
mov rax, qword [0x1400e4f38]
lea r12, str..._.._util_win_process_info.cc
mov qword [rsp + 0x1c0], rbx
mov qword [rsp + 0x1c8], rsi
test rax, rax
jne 0x140074b8f
lea rbx, [rdi + 0x88]
mov byte [rdi + 0x89], r15b
mov rsi, rbx
lea rcx, [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
cmp word [rbp + 0x40], 9
sete al
mov byte [rbx], al
lea r9, [rdi + 0x30]
movzx edx, byte [rdi + 0x89]
lea rax, [rdi + 0x38]
mov r8, rdi
mov qword [rsp + 0x20], rax
mov rcx, r14
call fcn.140075650
test al, al
jne 0x140074ca2
lea rcx, [rsp + 0x38]
call fcn.140006da0
lea rcx, [rsp + 0x38]
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r15
mov dword [rbp + 0x30], 0x21e
mov dword [rbp + 0x34], 2
call fcn.140013280
lea rdx, str.GetProcessBasicInformation_failed
lea rcx, [rsp + 0x38]
call fcn.140006680
lea rcx, [rsp + 0x38]
call fcn.140012fd0
xor al, al
jmp 0x140074d67
lea rdx, [rsp + 0x30]
mov rcx, r14
call rax
test eax, eax
jne 0x140074c7b
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x38]
mov ebx, eax
call fcn.140006da0
lea rcx, [rsp + 0x38]
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r15
mov dword [rbp + 0x30], 0x4b
mov dword [rbp + 0x34], 2
call fcn.140013280
lea rdx, [0x1400c9678]
mov dword [rbp + 0x38], ebx
lea rcx, [rsp + 0x38]
call fcn.140006680
lea rdx, [0x1400c2070]
lea rcx, [rsp + 0x38]
call fcn.140006680
mov edx, dword [rbp + 0x38]
lea rcx, [rbp + 0x40]
mov rbx, rax
call fcn.140012e60
cmp qword [rax + 0x18], 0x10
mov r8, qword [rax + 0x10]
jb 0x140074c15
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.140009230
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140074c5b
mov rcx, qword [rbp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140074c56
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140074d93
call fcn.1400809f0
movdqa xmm0, xmmword [0x1400cd310]
lea rcx, [rsp + 0x38]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], r15b
call fcn.140012fd0
jmp 0x140074af7
cmp dword [rsp + 0x30], r15d
lea rbx, [rdi + 0x88]
mov rsi, rbx
setne al
mov byte [rdi + 0x89], al
test al, al
je 0x140074b08
xor al, al
jmp 0x140074b1a
mov r8, rdi
mov rdx, qword [rdi + 0x30]
mov rcx, r14
cmp byte [rsi], r15b
je 0x140074cb8
call fcn.140075940
jmp 0x140074cbd
call fcn.140076130
test al, al
jne 0x140074d0a
lea rcx, [rsp + 0x38]
call fcn.140006da0
lea rcx, [rsp + 0x38]
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r15
mov dword [rbp + 0x30], 0x227
mov dword [rbp + 0x34], 2
call fcn.140013280
lea rdx, str.ReadProcessData_failed
lea rcx, [rsp + 0x38]
call fcn.140006680
lea rcx, [rsp + 0x38]
call fcn.140012fd0
xor al, al
jmp 0x140074d67
movzx edx, byte [rsi]
mov r8, rdi
mov rcx, r14
call fcn.140074200
test al, al
jne 0x140074d65
lea rcx, [rsp + 0x38]
call fcn.140006da0
lea rcx, [rsp + 0x38]
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r15
mov dword [rbp + 0x30], 0x22c
mov dword [rbp + 0x34], 2
call fcn.140013280
lea rdx, str.ReadMemoryInfo_failed
lea rcx, [rsp + 0x38]
call fcn.140006680
lea rcx, [rsp + 0x38]
call fcn.140012fd0
xor al, al
jmp 0x140074d67
mov al, 1
mov rsi, qword [rsp + 0x1c8]
mov rbx, qword [rsp + 0x1c0]
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.1400809d0
add rsp, 0x180
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.140087b78
int3
lea rcx, [0x1400e4f34]
call fcn.140080e34
cmp dword [0x1400e4f34], 0xffffffff
jne 0x140074ad0
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
jne 0x140074dc9
mov rax, r15
jmp 0x140074dd9
lea rdx, [0x1400cc3aa]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x1400e4f34]
mov qword [0x1400e4f38], rax
call fcn.140080dd4
jmp 0x140074ad0