Function at 0x1400fca50
Capabilities:
Get system information on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x78
mov rsi, rdx
mov r15, rcx
mov al, 1
xchg byte [rcx + 0xc], al
test al, al
jne 0x1400fcc8d
mov al, byte [r15 + 0xd]
test al, al
je 0x1400fcc6f
cmp al, 2
je 0x1400fcc74
mov r13, qword [r15]
test r13, r13
je 0x1400fccbe
mov rdi, qword [r13]
cmp rdi, 0x800001
jae 0x1400fcce2
cmp rdi, 0xf
jbe 0x1400fcd06
mov rdx, qword [0x140d48558]
test rdx, rdx
jne 0x1400fcad0
lea rcx, [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [rsp + 0x4c]
mov qword [0x140d48558], rdx
mov rcx, rdi
call fcn.14011bba0
mov rdi, rax
lock add qword [rsi + 8], 0x800000
mov edx, 0x800000
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x1400fcd51
mov r14, rax
mov al, byte [r13 + 8]
cmp al, 2
je 0x1400fcbaf
cmp al, 1
jne 0x1400fcd77
mov rax, qword [r13]
lea r12, [r14 + 0x800000]
cmp rax, 9
je 0x1400fcd9b
mov r11, rdi
mov r10, rsi
lea rdx, [r13 + 9]
add rax, r13
xor r8d, r8d
mov r9, r14
xor edi, edi
nop word [rax + rax]
xor ebp, ebp
xor ecx, ecx
nop word cs:[rax + rax]
nop
cmp rdx, rax
je 0x1400fcbaa
movzx ebx, byte [rdx]
mov esi, ebx
and esi, 0x7f
shl rsi, cl
add rdx, 1
or rbp, rsi
add ecx, 7
test bl, bl
js 0x1400fcb60
mov rsi, 0xffffffffffffffff
shl rsi, cl
test bl, 0x40
cmove rsi, r8
cmp ecx, 0x40
cmovae rsi, r8
or rbp, rsi
add rdi, rbp
mov qword [r9], rdi
add r9, 8
cmp rdx, rax
jne 0x1400fcb50
jmp 0x1400fcc1e
mov rdx, rax
jmp 0x1400fcb99
lea rax, [r13 + 9]
mov rcx, qword [r13]
add rcx, r13
lea r12, [r14 + 0x800000]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x40], 0
lea rcx, [rsp + 0x48]
lea rdx, [rsp + 0x30]
mov r8, r14
call fcn.14011ab70
cmp rax, r12
je 0x1400fcc2d
mov qword [rsp + 0x20], r12
lea rcx, str.gotsan.cpp
lea r8, str.__to______to_end__
mov edx, 0x27e6
mov r9, rax
call fcn.1400c44b0
cmp r9, r12
mov rsi, r10
mov rdi, r11
jne 0x1400fcd9e
sub r12, r14
cmp r12, 0x800000
jne 0x1400fcd2a
lea r9, [rsp + 0x48]
mov edx, 0x800000
mov rcx, r14
mov r8d, 2
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov qword [r15], r14
mov rax, rdi
neg rax
lock add qword [rsi + 8], rax
mov rcx, r13
mov rdx, rdi
call fcn.1400d9ee0
mov byte [r15 + 0xd], 2
mov rax, qword [r15]
mov byte [r15 + 0xc], 0
add rsp, 0x78
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor edi, edi
mov rbx, qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
jmp 0x1400fcc9b
add edi, 1
cmp edi, 0x63
ja 0x1400fcca4
pause
jmp 0x1400fcca8
xor ecx, ecx
call rbx
cmp byte [r15 + 0xc], 0
jne 0x1400fcc98
mov al, 1
xchg byte [r15 + 0xc], al
test al, al
jne 0x1400fcc98
jmp 0x1400fca73
mov qword [rsp + 0x20], 0
lea rcx, str.gotsan.cpp
lea r8, str.__nullptr_______ptr__
mov edx, 0x2807
xor r9d, r9d
call fcn.1400c44b0
mov qword [rsp + 0x20], 0x800000
lea rcx, str.gotsan.cpp
lea r8, str.__header__size_______kBlockSizeBytes__
mov edx, 0x2809
mov r9, rdi
call fcn.1400c44b0
mov qword [rsp + 0x20], 0x10
lea rcx, str.gotsan.cpp
lea r8, str.__header__size_______sizeof_PackedHeader___
mov edx, 0x280a
mov r9, rdi
call fcn.1400c44b0
sar r12, 3
mov qword [rsp + 0x20], r12
lea rcx, str.gotsan.cpp
lea r8, str.__kBlockSizeFrames______unpacked_end___unpacked__
mov r9d, 0x100000
mov edx, 0x2820
call fcn.1400c44b0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov byte [rsp + 0x20], 0
lea rdx, str.StackStoreUnpack
lea r8, str.allocate
mov ecx, 0x800000
mov r9d, eax
call fcn.1400f0d60
mov qword [rsp + 0x20], 0
lea rcx, str.gotsan.cpp
lea r8, str.__0___Unexpected_type_______0_
mov edx, 0x281c
xor r9d, r9d
call fcn.1400c44b0
mov r9, r14
mov qword [rsp + 0x20], r12
lea rcx, str.gotsan.cpp
lea r8, str.__to______to_end__
mov edx, 0x27d6
call fcn.1400c44b0
int3