Function at 0x14026599a
Capabilities:
Get system information on windows

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x378
movaps xmmword [rsp + 0x360], xmm6
mov rsi, rcx
mov rax, qword [0x14030d038]
xor rax, rsp
mov qword [rsp + 0x358], rax
mov qword [rcx + 0x38], rdx
lea rdi, [rsp + 0x23c]
mov r8d, 0x118
mov rcx, rdi
xor edx, edx
call fcn.140117f60
mov dword [rdi - 4], 0x11c
lea rcx, [rsp + 0x238]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x140265b8b
cmp byte [rsp + 0x352], 1
setne byte [rsi + 0x4c]
movaps xmm6, xmmword [0x1402ae190]
lea rbx, [rsp + 0xe0]
movaps xmmword [rbx + 0x20], xmm6
movaps xmmword [rbx + 0x10], xmm6
movaps xmmword [rbx], xmm6
mov dword [rbx + 0x30], 0xaaaaaaaa
lea rax, str.kernel32.dll
lea rdx, [rsp + 0xd0]
mov qword [rdx], rax
mov qword [rdx + 8], 0xc
lea rdi, [rsp + 0x220]
mov rcx, rdi
call fcn.1400e4ea0
mov rcx, rdi
mov rdx, rbx
call fcn.1401f461b
mov ebx, eax
mov rcx, rdi
call fcn.1400e1350
test bl, bl
je 0x140265f0e
movabs r14, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0xc0], r14
movaps xmmword [rsp + 0xb0], xmm6
mov ebx, dword [rsp + 0xfc]
xorps xmm0, xmm0
movaps xmmword [rsp + 0x220], xmm0
mov qword [rsp + 0x230], 0
test bl, 1
je 0x140265ac1
lea rdx, str.Debug_
lea rcx, [rsp + 0x220]
call fcn.1400f919e
test bl, 4
je 0x140265ada
lea rdx, str.Patched_
lea rcx, [rsp + 0x220]
call fcn.1400f919e
test bl, 2
je 0x140265af3
lea rdx, str.Prerelease_
lea rcx, [rsp + 0x220]
call fcn.1400f919e
test bl, 8
je 0x140265b0c
lea rdx, str.Private_
lea rcx, [rsp + 0x220]
call fcn.1400f919e
test bl, 0x20
je 0x140265b25
lea rdx, str.Special_
lea rcx, [rsp + 0x220]
call fcn.1400f919e
movzx r9d, byte [rsp + 0x237]
test r9b, r9b
jns 0x140265b3b
mov r9, qword [rsp + 0x228]
test r9, r9
je 0x140265bf0
dec r9
lea rax, [rsp + 0x238]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0xb0]
lea rbx, [rsp + 0x220]
mov rdx, rbx
xor r8d, r8d
call fcn.1400d9420
cmp byte [rbx + 0x17], 0
jns 0x140265c10
mov rcx, qword [rsp + 0x220]
call fcn.140112038
jmp 0x140265c10
mov ecx, 1
call fcn.1400f34e0
test al, al
je 0x140265a08
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_snapshot_win_system_snapshot_win.cc
lea rdi, [rsp + 0xe0]
mov rcx, rdi
mov r8d, 0x65
mov r9d, 1
call fcn.14019f9e0
lea rcx, [rsp + 0xf0]
lea rdx, str.GetVersionEx
mov r8d, 0xc
call fcn.1400ff874
mov rcx, rdi
call fcn.140183e60
jmp 0x140265a08
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0xc0], rax
movaps xmm0, xmmword [rsp + 0x220]
movaps xmmword [rsp + 0xb0], xmm0
mov qword [rsp + 0x230], r14
movaps xmmword [rsp + 0x220], xmm6
mov eax, dword [rsp + 0x100]
not eax
test eax, 0x40004
jne 0x140265c60
mov byte [rsp + 0x237], 0xa
mov rax, qword [str.Windows_NT]
mov qword [rsp + 0x220], rax
movzx eax, word [0x1402bd6f1]
mov word [rsp + 0x228], ax
mov byte [rsp + 0x22a], 0
jmp 0x140265c8a
mov byte [rsp + 0x237], 7
mov eax, dword [0x1402b3526]
mov dword [rsp + 0x220], eax
mov eax, dword [0x1402b3529]
mov dword [rsp + 0x223], eax
mov byte [rsp + 0x227], 0
mov eax, dword [rsp + 0xe8]
mov ecx, eax
shr ecx, 0x10
mov dword [rsi + 0x40], ecx
mov ecx, 0xffff
and eax, ecx
mov dword [rsi + 0x44], eax
mov r8d, dword [rsp + 0xec]
mov eax, r8d
shr eax, 0x10
mov dword [rsi + 0x48], eax
and r8d, ecx
lea rdx, [0x1402d10e1]
lea rcx, [rsp + 0x98]
call fcn.1400baf00
lea rbx, [rsi + 0x20]
cmp byte [rsi + 0x37], 0
jns 0x140265cdd
mov rcx, qword [rbx]
call fcn.140112038
mov rax, qword [rsp + 0xa8]
mov qword [rbx + 0x10], rax
movups xmm0, xmmword [rsp + 0x98]
movups xmmword [rbx], xmm0
movzx eax, byte [rsp + 0xc7]
mov r8, rax
test al, al
jns 0x140265d0b
mov r8, qword [rsp + 0xb8]
test r8, r8
je 0x140265d33
mov byte [rsp + 0x5f], 2
mov word [rsp + 0x48], 0x2820
mov byte [rsp + 0x4a], 0
test al, al
jns 0x140265da9
mov rdx, qword [rsp + 0xb0]
jmp 0x140265db1
cmp byte [rbx + 0x17], 0
jns 0x140265d3c
mov rbx, qword [rbx]
mov eax, dword [rsi + 0x48]
mov r9d, dword [rsi + 0x40]
mov ecx, dword [rsi + 0x44]
lea rdx, [0x1402b03b4]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
lea rdx, str._s__u._u._u._s_s
lea rcx, [rsp + 0x98]
lea r8, [rsp + 0x220]
call fcn.1400baf00
lea rdi, [rsi + 8]
cmp byte [rsi + 0x1f], 0
jns 0x140265d8d
mov rcx, qword [rdi]
call fcn.140112038
mov rax, qword [rsp + 0xa8]
mov qword [rdi + 0x10], rax
movups xmm0, xmmword [rsp + 0x98]
movups xmmword [rdi], xmm0
jmp 0x140265ee0
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x48]
call fcn.1400bef6e
movups xmm0, xmmword [rax]
lea rcx, [rsp + 0x60]
movaps xmmword [rcx], xmm0
mov rdx, qword [rax + 0x10]
mov qword [rcx + 0x10], rdx
xor r14d, r14d
mov qword [rax + 0x10], r14
xorps xmm6, xmm6
movups xmmword [rax], xmm6
lea rdx, [0x1402b0404]
call fcn.1400f919e
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x90], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x80], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], r14
cmp byte [rsp + 0x97], 0
jns 0x140265e19
mov rax, qword [rsp + 0x80]
jmp 0x140265e21
lea rax, [rsp + 0x80]
cmp byte [rbx + 0x17], 0
jns 0x140265e2a
mov rbx, qword [rbx]
mov ecx, dword [rsi + 0x48]
mov r9d, dword [rsi + 0x40]
mov edx, dword [rsi + 0x44]
cmp byte [rsp + 0x237], 0
jns 0x140265e46
mov rdi, qword [rsp + 0x220]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], edx
lea rdx, str._s__u._u._u._s_s
lea rcx, [rsp + 0x98]
mov r8, rdi
call fcn.1400baf00
lea rdi, [rsi + 8]
cmp byte [rsi + 0x1f], 0
jns 0x140265e81
mov rcx, qword [rdi]
call fcn.140112038
mov rax, qword [rsp + 0xa8]
mov qword [rdi + 0x10], rax
movups xmm0, xmmword [rsp + 0x98]
movups xmmword [rdi], xmm0
xor eax, eax
mov byte [rsp + 0xaf], al
mov byte [rsp + 0x98], al
cmp byte [rsp + 0x97], al
jns 0x140265ebe
mov rcx, qword [rsp + 0x80]
call fcn.140112038
cmp byte [rsp + 0x77], 0
jns 0x140265ecf
mov rcx, qword [rsp + 0x60]
call fcn.140112038
cmp byte [rsp + 0x5f], 0
jns 0x140265ee0
mov rcx, qword [rsp + 0x48]
call fcn.140112038
cmp byte [rsp + 0x237], 0
jns 0x140265ef7
mov rcx, qword [rsp + 0x220]
call fcn.140112038
cmp byte [rsp + 0xc7], 0
jns 0x140265f0e
mov rcx, qword [rsp + 0xb0]
call fcn.140112038
lea rcx, [rsi + 0x50]
mov dword [rsi + 0x50], 0x68
mov edx, 0x68
call sub.KERNEL32.dll_K32GetPerformanceInfo
add rsi, 0xb8
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov rcx, qword [rsp + 0x358]
xor rcx, rsp
call fcn.140115e50
movaps xmm6, xmmword [rsp + 0x360]
add rsp, 0x378
pop rbx
pop rdi
pop rsi
pop r14
ret