Function at 0x14000b9a0
Capabilities:
Get system information on windows

Disassembly:
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
movdqa xmmword [rsp + 0x70], xmm6
mov rsi, rdx
mov rax, qword [0x140062040]
xor rax, rsp
mov qword [rsp + 0x68], rax
movdqu xmm1, xmmword [rcx]
movdqu xmm0, xmmword [rcx + 0x10]
pxor xmm6, xmm6
movdqa xmm2, xmm0
pcmpeqd xmm2, xmm6
pshufd xmm3, xmm2, 0xb1
pand xmm3, xmm2
pcmpeqd xmm1, xmm6
pshufd xmm2, xmm1, 0xb1
pand xmm2, xmm1
packssdw xmm2, xmm3
movmskps eax, xmm2
test eax, eax
jne 0x14000bc8a
mov rdi, rcx
mov ebp, dword [rcx + 0x28]
shl ebp, 7
mov ecx, ebp
or ecx, 0x7f
mov eax, dword [rdi + 0x24]
cmp ecx, eax
jae 0x14000ba26
movq rcx, xmm0
pshufd xmm0, xmm0, 0xee
movq rax, xmm0
jmp 0x14000bb05
cmp eax, dword [rdi + 0x20]
jae 0x14000bc8a
mov eax, dword [0x140064ae4]
mov ecx, dword [0x1400624d0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bbc7
mov edx, dword [0x140064ae0]
mov ecx, dword [rdi + 0x24]
add rcx, qword [rdi + 0x10]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x14000bc8a
mov eax, dword [0x140064ae4]
mov ecx, dword [0x1400624d0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bc08
mov r8d, dword [0x140064ae0]
mov edx, dword [rdi + 0x24]
add rdx, qword [rdi + 0x18]
mov rcx, qword [rdi]
mov dword [rsp + 0x20], 0x20
mov r9d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
test rax, rax
je 0x14000bc8a
mov eax, dword [0x140064ae4]
mov ecx, dword [0x1400624d0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bc49
mov eax, dword [0x140064ae0]
add dword [rdi + 0x24], eax
mov rcx, qword [rdi + 0x10]
mov rax, qword [rdi + 0x18]
mov edx, ebp
add rax, rdx
add rcx, rdx
lea r9, [rsp + 0x38]
mov qword [r9 - 8], rdi
mov dword [r9], 0
mov qword [r9 + 8], rcx
mov qword [r9 + 0x10], rax
pxor xmm0, xmm0
movdqu xmmword [r9 + 0x18], xmm0
mov dword [r9 + 0x28], 0x80
mov byte [r9 + 0x2c], 1
mov edx, 0x80
mov r8d, 4
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x14000bb55
mov eax, dword [rsp + 0x38]
mov r8, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
mov r9, qword [rsp + 0x48]
mov cl, byte [rsp + 0x64]
test r8, r8
je 0x14000bb7f
test rdx, rdx
je 0x14000bb82
test r9, r9
je 0x14000bb82
test eax, eax
je 0x14000bb82
test cl, cl
je 0x14000bb82
inc dword [rdi + 0x28]
mov qword [rsi], r8
mov dword [rsi + 8], eax
mov qword [rsi + 0x10], rdx
mov qword [rsi + 0x18], r9
movdqu xmm0, xmmword [rsp + 0x50]
movdqu xmmword [rsi + 0x20], xmm0
mov eax, dword [rsp + 0x60]
mov dword [rsi + 0x30], eax
mov byte [rsi + 0x34], cl
mov byte [rsi + 0x38], 1
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.14002ba50
movaps xmm6, xmmword [rsp + 0x70]
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
ret
lea rcx, [0x140064ae4]
call fcn.14002b1c8
cmp dword [0x140064ae4], 0xffffffff
jne 0x14000ba54
lea rbx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rbx + 4]
mov dword [0x140064ae0], eax
lea rcx, [0x140064ae4]
call fcn.14002b240
jmp 0x14000ba54
lea rcx, [0x140064ae4]
call fcn.14002b1c8
cmp dword [0x140064ae4], 0xffffffff
jne 0x14000baa1
lea rbx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rbx + 4]
mov dword [0x140064ae0], eax
lea rcx, [0x140064ae4]
call fcn.14002b240
jmp 0x14000baa1
lea rcx, [0x140064ae4]
call fcn.14002b1c8
cmp dword [0x140064ae4], 0xffffffff
jne 0x14000baf4
lea rbx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rbx + 4]
mov dword [0x140064ae0], eax
lea rcx, [0x140064ae4]
call fcn.14002b240
jmp 0x14000baf4
movdqu xmmword [rsi + 0x30], xmm6
movdqu xmmword [rsi + 0x20], xmm6
movdqu xmmword [rsi + 0x10], xmm6
movdqu xmmword [rsi], xmm6
jmp 0x14000bba9