Function at 0x1401f6d56
Capabilities:
Get system information on windows

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x378
movaps xmmword [rsp + 0x360], xmm6
mov rsi, rcx
mov rax, qword [0x14028f028]
xor rax, rsp
mov qword [rsp + 0x358], rax
mov qword [rcx + 0x38], rdx
lea rdi, [rsp + 0x23c]
mov r8d, 0x118
mov rcx, rdi
xor edx, edx
call fcn.1400cf750
mov dword [rdi - 4], 0x11c
lea rcx, [rsp + 0x238]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x1401f6f47
cmp byte [rsp + 0x352], 1
setne byte [rsi + 0x4c]
movaps xmm6, xmmword [0x140257270]
lea rbx, [rsp + 0xe0]
movaps xmmword [rbx + 0x20], xmm6
movaps xmmword [rbx + 0x10], xmm6
movaps xmmword [rbx], xmm6
mov dword [rbx + 0x30], 0xaaaaaaaa
lea rax, [0x140279f00]
lea rdx, [rsp + 0xd0]
mov qword [rdx], rax
mov qword [rdx + 8], 0xc
lea rdi, [rsp + 0x220]
mov rcx, rdi
call fcn.14009f4c0
mov rcx, rdi
mov rdx, rbx
call fcn.140188c5b
mov ebx, eax
mov rcx, rdi
call fcn.14007cab0
test bl, bl
je 0x1401f72ca
movabs r14, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0xc0], r14
movaps xmmword [rsp + 0xb0], xmm6
mov ebx, dword [rsp + 0xfc]
xorps xmm0, xmm0
movaps xmmword [rsp + 0x220], xmm0
mov qword [rsp + 0x230], 0
test bl, 1
je 0x1401f6e7d
lea rdx, str.Debug_
lea rcx, [rsp + 0x220]
call fcn.1400afa0c
test bl, 4
je 0x1401f6e96
lea rdx, str.Patched_
lea rcx, [rsp + 0x220]
call fcn.1400afa0c
test bl, 2
je 0x1401f6eaf
lea rdx, str.Prerelease_
lea rcx, [rsp + 0x220]
call fcn.1400afa0c
test bl, 8
je 0x1401f6ec8
lea rdx, str.Private_
lea rcx, [rsp + 0x220]
call fcn.1400afa0c
test bl, 0x20
je 0x1401f6ee1
lea rdx, str.Special_
lea rcx, [rsp + 0x220]
call fcn.1400afa0c
movzx r9d, byte [rsp + 0x237]
test r9b, r9b
jns 0x1401f6ef7
mov r9, qword [rsp + 0x228]
test r9, r9
je 0x1401f6fac
dec r9
lea rax, [rsp + 0x238]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0xb0]
lea rbx, [rsp + 0x220]
mov rdx, rbx
xor r8d, r8d
call fcn.14009cc10
cmp byte [rbx + 0x17], 0
jns 0x1401f6fcc
mov rcx, qword [rsp + 0x220]
call fcn.1400c9cac
jmp 0x1401f6fcc
mov ecx, 1
call fcn.1400ac390
test al, al
je 0x1401f6dc4
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_snapshot_win_system_snapshot_win.cc
lea rdi, [rsp + 0xe0]
mov rcx, rdi
mov r8d, 0x65
mov r9d, 1
call fcn.14014efd0
lea rcx, [rsp + 0xf0]
lea rdx, str.GetVersionEx
mov r8d, 0xc
call fcn.1400a7acb
mov rcx, rdi
call fcn.1401412f0
jmp 0x1401f6dc4
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0xc0], rax
movaps xmm0, xmmword [rsp + 0x220]
movaps xmmword [rsp + 0xb0], xmm0
mov qword [rsp + 0x230], r14
movaps xmmword [rsp + 0x220], xmm6
mov eax, dword [rsp + 0x100]
not eax
test eax, 0x40004
jne 0x1401f701c
mov byte [rsp + 0x237], 0xa
mov rax, qword [str.Windows_NT]
mov qword [rsp + 0x220], rax
movzx eax, word [0x14025d3c7]
mov word [rsp + 0x228], ax
mov byte [rsp + 0x22a], 0
jmp 0x1401f7046
mov byte [rsp + 0x237], 7
mov eax, dword [0x140259636]
mov dword [rsp + 0x220], eax
mov eax, dword [0x140259639]
mov dword [rsp + 0x223], eax
mov byte [rsp + 0x227], 0
mov eax, dword [rsp + 0xe8]
mov ecx, eax
shr ecx, 0x10
mov dword [rsi + 0x40], ecx
mov ecx, 0xffff
and eax, ecx
mov dword [rsi + 0x44], eax
mov r8d, dword [rsp + 0xec]
mov eax, r8d
shr eax, 0x10
mov dword [rsi + 0x48], eax
and r8d, ecx
lea rdx, [0x14025ce31]
lea rcx, [rsp + 0x98]
call fcn.140070f80
lea rbx, [rsi + 0x20]
cmp byte [rsi + 0x37], 0
jns 0x1401f7099
mov rcx, qword [rbx]
call fcn.1400c9cac
mov rax, qword [rsp + 0xa8]
mov qword [rbx + 0x10], rax
movups xmm0, xmmword [rsp + 0x98]
movups xmmword [rbx], xmm0
movzx eax, byte [rsp + 0xc7]
mov r8, rax
test al, al
jns 0x1401f70c7
mov r8, qword [rsp + 0xb8]
test r8, r8
je 0x1401f70ef
mov byte [rsp + 0x5f], 2
mov word [rsp + 0x48], 0x2820
mov byte [rsp + 0x4a], 0
test al, al
jns 0x1401f7165
mov rdx, qword [rsp + 0xb0]
jmp 0x1401f716d
cmp byte [rbx + 0x17], 0
jns 0x1401f70f8
mov rbx, qword [rbx]
mov eax, dword [rsi + 0x48]
mov r9d, dword [rsi + 0x40]
mov ecx, dword [rsi + 0x44]
lea rdx, [0x140257ad2]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
lea rdx, str._s__u._u._u._s_s
lea rcx, [rsp + 0x98]
lea r8, [rsp + 0x220]
call fcn.140070f80
lea rdi, [rsi + 8]
cmp byte [rsi + 0x1f], 0
jns 0x1401f7149
mov rcx, qword [rdi]
call fcn.1400c9cac
mov rax, qword [rsp + 0xa8]
mov qword [rdi + 0x10], rax
movups xmm0, xmmword [rsp + 0x98]
movups xmmword [rdi], xmm0
jmp 0x1401f729c
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x48]
call fcn.140075026
movups xmm0, xmmword [rax]
lea rcx, [rsp + 0x60]
movaps xmmword [rcx], xmm0
mov rdx, qword [rax + 0x10]
mov qword [rcx + 0x10], rdx
xor r14d, r14d
mov qword [rax + 0x10], r14
xorps xmm6, xmm6
movups xmmword [rax], xmm6
lea rdx, [0x1402579fb]
call fcn.1400afa0c
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x90], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x80], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], r14
cmp byte [rsp + 0x97], 0
jns 0x1401f71d5
mov rax, qword [rsp + 0x80]
jmp 0x1401f71dd
lea rax, [rsp + 0x80]
cmp byte [rbx + 0x17], 0
jns 0x1401f71e6
mov rbx, qword [rbx]
mov ecx, dword [rsi + 0x48]
mov r9d, dword [rsi + 0x40]
mov edx, dword [rsi + 0x44]
cmp byte [rsp + 0x237], 0
jns 0x1401f7202
mov rdi, qword [rsp + 0x220]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], edx
lea rdx, str._s__u._u._u._s_s
lea rcx, [rsp + 0x98]
mov r8, rdi
call fcn.140070f80
lea rdi, [rsi + 8]
cmp byte [rsi + 0x1f], 0
jns 0x1401f723d
mov rcx, qword [rdi]
call fcn.1400c9cac
mov rax, qword [rsp + 0xa8]
mov qword [rdi + 0x10], rax
movups xmm0, xmmword [rsp + 0x98]
movups xmmword [rdi], xmm0
xor eax, eax
mov byte [rsp + 0xaf], al
mov byte [rsp + 0x98], al
cmp byte [rsp + 0x97], al
jns 0x1401f727a
mov rcx, qword [rsp + 0x80]
call fcn.1400c9cac
cmp byte [rsp + 0x77], 0
jns 0x1401f728b
mov rcx, qword [rsp + 0x60]
call fcn.1400c9cac
cmp byte [rsp + 0x5f], 0
jns 0x1401f729c
mov rcx, qword [rsp + 0x48]
call fcn.1400c9cac
cmp byte [rsp + 0x237], 0
jns 0x1401f72b3
mov rcx, qword [rsp + 0x220]
call fcn.1400c9cac
cmp byte [rsp + 0xc7], 0
jns 0x1401f72ca
mov rcx, qword [rsp + 0xb0]
call fcn.1400c9cac
lea rcx, [rsi + 0x50]
mov dword [rsi + 0x50], 0x68
mov edx, 0x68
call sub.KERNEL32.dll_K32GetPerformanceInfo
add rsi, 0xb8
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov rcx, qword [rsp + 0x358]
xor rcx, rsp
call fcn.1400ccfe0
movaps xmm6, xmmword [rsp + 0x360]
add rsp, 0x378
pop rbx
pop rdi
pop rsi
pop r14
ret