Function at 0x14005e4d0
Capabilities:
Get system information on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov rbx, r9
mov r14, r8
mov rsi, rcx
mov rax, qword [0x1400db108]
mov rax, qword [rax]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov qword [rcx], rdx
mov qword [rcx + 0x10], 0
mov qword [rcx + 0x18], 2
lea rax, [rcx + 0x20]
mov qword [rcx + 8], rax
movzx eax, byte [0x140109030]
test al, al
je 0x14005e6d4
mov edi, dword [0x14010b220]
lea rax, [r14 + rbx]
dec rax
mov rcx, rax
shr rcx, 0x20
je 0x14005e545
xor edx, edx
div rdi
mov rbx, rax
jmp 0x14005e54b
xor edx, edx
div edi
mov ebx, eax
mov rax, r14
shr rax, 0x20
je 0x14005e561
mov rax, r14
xor edx, edx
div rdi
mov r14, rax
jmp 0x14005e56b
mov eax, r14d
xor edx, edx
div edi
mov r14d, eax
inc rbx
sub rbx, r14
je 0x14005e660
lea r15, [rsi + 8]
imul r14, rdi
cmp rbx, 2
mov eax, 1
cmovb rbx, rax
lea r12, [rsp + 0x2c]
mov rbp, qword [sym.imp.KERNEL32.dll_VirtualProtect]
jmp 0x14005e5c1
mov rcx, qword [rsi + 8]
shl rax, 4
mov qword [rcx + rax], r14
mov dword [rcx + rax + 8], r13d
inc qword [rsi + 0x10]
add r14, rdi
dec rbx
je 0x14005e660
mov rcx, r14
mov rdx, rdi
mov r8d, dword [rsp + 0xd0]
mov r9, r12
call rbp
test eax, eax
je 0x14005e602
mov r13d, dword [rsp + 0x2c]
mov rax, qword [rsi + 0x10]
cmp rax, qword [rsi + 0x18]
jne 0x14005e5a0
mov edx, 1
mov rcx, r15
call fcn.14005e790
test al, al
je 0x14005e68c
mov rax, qword [rsi + 0x10]
jmp 0x14005e5a0
mov dword [rsp + 0x2c], 0
movzx eax, byte [0x140109030]
test al, al
je 0x14005e713
mov r14, qword [rsi + 0x10]
test r14, r14
je 0x14005e658
mov r15, qword [rsi + 8]
shl r14, 4
add r14, r15
mov edi, dword [0x14010b220]
lea rbx, [rsp + 0x30]
nop dword [rax + rax]
mov rcx, qword [r15]
mov r8d, dword [r15 + 8]
mov rdx, rdi
mov r9, rbx
call rbp
add r15, 0x10
cmp r15, r14
jne 0x14005e640
mov qword [rsi + 0x10], 0
mov rax, qword [rsp + 0x60]
xor rax, rsp
mov rcx, qword [0x1400db108]
mov rcx, qword [rcx]
cmp rcx, rax
jne 0x14005e70e
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movzx eax, byte [0x140109030]
test al, al
je 0x14005e74d
mov r14, qword [rsi + 0x10]
test r14, r14
je 0x14005e658
mov r15, qword [rsi + 8]
shl r14, 4
add r14, r15
mov edi, dword [0x14010b220]
lea rbx, [rsp + 0x30]
mov rcx, qword [r15]
mov r8d, dword [r15 + 8]
mov rdx, rdi
mov r9, rbx
call rbp
add r15, 0x10
cmp r15, r14
jne 0x14005e6ba
jmp 0x14005e658
lea rcx, [0x140109030]
call fcn.1400ac804
test eax, eax
je 0x14005e525
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsp + 0x34]
mov dword [0x14010b220], eax
lea rcx, [0x140109030]
call fcn.1400ac8df
jmp 0x14005e525
call fcn.1400addd0
lea rcx, [0x140109030]
call fcn.1400ac804
test eax, eax
je 0x14005e619
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsp + 0x34]
mov dword [0x14010b220], eax
lea rcx, [0x140109030]
call fcn.1400ac8df
jmp 0x14005e619
lea rcx, [0x140109030]
call fcn.1400ac804
test eax, eax
je 0x14005e69b
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsp + 0x34]
mov dword [0x14010b220], eax
lea rcx, [0x140109030]
call fcn.1400ac8df
jmp 0x14005e69b