Function at 0x140169200
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xc0
mov rsi, rcx
xorps xmm0, xmm0
xor eax, eax
lea rcx, [rbp - 0x21]
movups xmmword [rbp - 0x21], xmm0
mov qword [rbp - 0x11], rax
mov r14, rdx
call qword [sym.imp.OLEAUT32.dll_VariantClear]
movsd xmm1, qword [rbp - 0x11]
xor r15d, r15d
cmp dword [0x140452a78], 1
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x31], xmm0
mov edi, r15d
mov qword [rbp - 0x41], r15
lea eax, [r15 + 8]
mov qword [rbp - 0x39], r15
mov word [rbp - 0x21], ax
mov eax, r15d
cmove rax, qword [0x140452178]
cmp dword [0x140452a98], 1
mov qword [rbp - 0x19], rax
mov rax, qword [rsi]
movups xmm0, xmmword [rbp - 0x21]
cmove rdi, qword [0x140452190]
mov qword [rbp - 0x79], r15
mov rbx, qword [rax + 0x280]
mov rax, qword [0x1403cf6d0]
mov rcx, rbx
mov qword [rbp - 0x49], r15
mov qword [rbp + 0x7f], r15
movaps xmmword [rbp + 7], xmm0
movsd qword [rbp + 0x17], xmm1
call rax
mov rax, rbx
lea r8, [rbp + 7]
mov rdx, rdi
mov rcx, rsi
call rax
lea r12d, [r15 + 3]
mov edi, eax
lea r13d, [r15 + 0x28]
test eax, eax
jns 0x1401692d9
mov ecx, eax
call fcn.140082a8c
jmp 0x1401694fd
mov rax, qword [rsi]
mov rdi, r15
cmp dword [0x140452a78], 1
cmove rdi, qword [0x140452170]
mov rbx, qword [rax + 0x120]
mov rax, qword [0x1403cf6d0]
mov rcx, rbx
call rax
mov rax, rbx
lea r8, [rbp - 0x49]
mov rdx, rdi
mov rcx, rsi
call rax
mov edi, eax
test eax, eax
js 0x1401692cd
mov rbx, qword [rbp - 0x49]
test rbx, rbx
je 0x1401694f1
mov rax, qword [rbx]
mov rdi, qword [rax + 0x40]
mov rax, qword [0x1403cf6d0]
mov rcx, rdi
call rax
mov rax, rdi
lea rdx, [rbp + 0x77]
mov rcx, rbx
call rax
mov edi, eax
test eax, eax
js 0x1401692cd
mov esi, r15d
cmp dword [rbp + 0x77], r15d
jle 0x1401694f1
mov rbx, qword [rbp - 0x79]
test rbx, rbx
je 0x14016937d
mov rax, qword [rbx]
mov rdi, qword [rax + 0x10]
mov rax, qword [0x1403cf6d0]
mov rcx, rdi
call rax
mov rax, rdi
mov rcx, rbx
call rax
mov qword [rbp - 0x79], r15
mov rbx, qword [rbp - 0x49]
mov rax, qword [rbx]
mov rdi, qword [rax + 0x38]
mov rax, qword [0x1403cf6d0]
mov rcx, rdi
call rax
mov rax, rdi
lea r8, [rbp - 0x79]
mov edx, esi
mov rcx, rbx
call rax
mov edi, eax
test eax, eax
js 0x1401692cd
mov rcx, qword [rbp + 0x7f]
test rcx, rcx
je 0x1401693bf
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbp + 0x7f], r15
mov rbx, qword [rbp - 0x79]
mov rax, qword [rbx]
mov rdi, qword [rax + 0x38]
mov rax, qword [0x1403cf6d0]
mov rcx, rdi
call rax
mov rax, rdi
lea rdx, [rbp + 0x7f]
mov rcx, rbx
call rax
mov edi, eax
test eax, eax
js 0x1401692cd
mov rcx, qword [rbp + 0x7f]
lea rdx, [rbp - 0x31]
call fcn.140082960
mov edi, eax
test eax, eax
js 0x1401692cd
mov rcx, qword [rbp + 0x7f]
test rcx, rcx
je 0x140169416
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbp + 0x7f], r15
mov rbx, qword [rbp - 0x79]
mov rax, qword [rbx]
mov rdi, qword [rax + 0xd0]
mov rax, qword [0x1403cf6d0]
mov rcx, rdi
call rax
mov rax, rdi
lea rdx, [rbp + 0x7f]
mov rcx, rbx
call rax
mov edi, eax
test eax, eax
js 0x1401692cd
mov rcx, qword [rbp + 0x7f]
lea rdx, [rbp - 0x29]
call fcn.140082960
mov edi, eax
test eax, eax
js 0x1401692cd
mov rdx, qword [rbp - 0x31]
lea r8, [rbp + 0x67]
lea rcx, [rbp - 0x41]
call fcn.1400c8318
test al, al
je 0x1401694ba
movsxd rax, dword [rbp + 0x67]
lea rcx, [0x14003599c]
shl rax, 4
lea rdx, [rbp - 0x71]
add rax, qword [rbp - 0x39]
xor r9d, r9d
mov qword [rbp - 0x69], rcx
mov r8, r13
lea rcx, [rbp - 9]
mov qword [rbp - 0x59], rax
lea rax, [rbp - 0x31]
mov qword [rbp - 0x61], rcx
mov ecx, 0xb9
mov qword [rbp - 0x51], rax
mov qword [rbp - 0x71], r12
call sub.ntdll.dll_NtQuerySystemInformation
mov edi, r15d
jmp 0x1401694d7
mov edx, dword [rbp + 0x67]
lea r8, [rbp - 0x31]
lea rcx, [rbp - 0x41]
call fcn.14016e584
mov edi, eax
test eax, eax
jns 0x1401694d7
mov ecx, eax
call fcn.140082a8c
mov ecx, edi
call fcn.140082b34
test edi, edi
js 0x1401695f1
inc esi
cmp esi, dword [rbp + 0x77]
jl 0x140169355
lea rdx, [rbp - 0x41]
mov rcx, r14
call fcn.14016cd30
mov ecx, edi
call fcn.140082b34
mov rcx, qword [rbp + 0x7f]
test rcx, rcx
je 0x140169517
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbp + 0x7f], r15
lea rax, [0x140031bdc]
mov qword [rbp - 0x71], r12
mov qword [rbp - 0x69], rax
lea rdx, [rbp - 0x71]
lea rax, [rbp - 0x49]
mov qword [rbp - 0x61], r15
xor r9d, r9d
mov qword [rbp - 0x59], rax
mov r8, r13
mov ecx, 0xb9
call sub.ntdll.dll_NtQuerySystemInformation
lea rax, [0x14003189c]
mov qword [rbp - 0x71], r12
mov qword [rbp - 0x69], rax
lea rdx, [rbp - 0x71]
lea rax, [rbp - 0x79]
mov qword [rbp - 0x61], r15
xor r9d, r9d
mov qword [rbp - 0x59], rax
mov r8, r13
mov ecx, 0xb9
call sub.ntdll.dll_NtQuerySystemInformation
lea rax, [0x14003155c]
mov qword [rbp - 0x71], r12
mov qword [rbp - 0x69], rax
lea rdx, [rbp - 0x71]
lea rax, [rbp - 0x31]
mov qword [rbp - 0x61], r15
xor r9d, r9d
mov qword [rbp - 0x59], rax
mov r8, r13
mov ecx, 0xb9
call sub.ntdll.dll_NtQuerySystemInformation
lea rax, [0x14002ee5c]
mov qword [rbp - 0x71], r12
mov qword [rbp - 0x69], rax
lea rdx, [rbp - 0x71]
lea rax, [rbp - 0x41]
mov qword [rbp - 0x61], r15
xor r9d, r9d
mov qword [rbp - 0x59], rax
mov r8, r13
mov ecx, 0xb9
call sub.ntdll.dll_NtQuerySystemInformation
mov rbx, qword [rsp + 0x108]
mov eax, edi
add rsp, 0xc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, edi
jmp 0x1401692cf