Function at 0x1400122b0
Capabilities:
Get system information on windows

Disassembly:
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
movdqa xmmword [rsp + 0x70], xmm6
mov rsi, rdx
mov rax, qword [0x140061030]
xor rax, rsp
mov qword [rsp + 0x68], rax
movdqu xmm1, xmmword [rcx]
movdqu xmm0, xmmword [rcx + 0x10]
pxor xmm6, xmm6
movdqa xmm2, xmm0
pcmpeqd xmm2, xmm6
pshufd xmm3, xmm2, 0xb1
pand xmm3, xmm2
pcmpeqd xmm1, xmm6
pshufd xmm2, xmm1, 0xb1
pand xmm2, xmm1
packssdw xmm2, xmm3
movmskps eax, xmm2
test eax, eax
jne 0x14001259a
mov rdi, rcx
mov ebp, dword [rcx + 0x28]
shl ebp, 7
mov ecx, ebp
or ecx, 0x7f
mov eax, dword [rdi + 0x24]
cmp ecx, eax
jae 0x140012336
movq rcx, xmm0
pshufd xmm0, xmm0, 0xee
movq rax, xmm0
jmp 0x140012415
cmp eax, dword [rdi + 0x20]
jae 0x14001259a
mov eax, dword [0x140063af4]
mov ecx, dword [0x1400614b8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400124d7
mov edx, dword [0x140063af0]
mov ecx, dword [rdi + 0x24]
add rcx, qword [rdi + 0x10]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x14001259a
mov eax, dword [0x140063af4]
mov ecx, dword [0x1400614b8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140012518
mov r8d, dword [0x140063af0]
mov edx, dword [rdi + 0x24]
add rdx, qword [rdi + 0x18]
mov rcx, qword [rdi]
mov dword [rsp + 0x20], 0x20
mov r9d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
test rax, rax
je 0x14001259a
mov eax, dword [0x140063af4]
mov ecx, dword [0x1400614b8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140012559
mov eax, dword [0x140063af0]
add dword [rdi + 0x24], eax
mov rcx, qword [rdi + 0x10]
mov rax, qword [rdi + 0x18]
mov edx, ebp
add rax, rdx
add rcx, rdx
lea r9, [rsp + 0x38]
mov qword [r9 - 8], rdi
mov dword [r9], 0
mov qword [r9 + 8], rcx
mov qword [r9 + 0x10], rax
pxor xmm0, xmm0
movdqu xmmword [r9 + 0x18], xmm0
mov dword [r9 + 0x28], 0x80
mov byte [r9 + 0x2c], 1
mov edx, 0x80
mov r8d, 4
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x140012465
mov eax, dword [rsp + 0x38]
mov r8, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
mov r9, qword [rsp + 0x48]
mov cl, byte [rsp + 0x64]
test r8, r8
je 0x14001248f
test rdx, rdx
je 0x140012492
test r9, r9
je 0x140012492
test eax, eax
je 0x140012492
test cl, cl
je 0x140012492
inc dword [rdi + 0x28]
mov qword [rsi], r8
mov dword [rsi + 8], eax
mov qword [rsi + 0x10], rdx
mov qword [rsi + 0x18], r9
movdqu xmm0, xmmword [rsp + 0x50]
movdqu xmmword [rsi + 0x20], xmm0
mov eax, dword [rsp + 0x60]
mov dword [rsi + 0x30], eax
mov byte [rsi + 0x34], cl
mov byte [rsi + 0x38], 1
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.14002b660
movaps xmm6, xmmword [rsp + 0x70]
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
ret
lea rcx, [0x140063af4]
call fcn.14002a4ec
cmp dword [0x140063af4], 0xffffffff
jne 0x140012364
lea rbx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rbx + 4]
mov dword [0x140063af0], eax
lea rcx, [0x140063af4]
call fcn.14002a48c
jmp 0x140012364
lea rcx, [0x140063af4]
call fcn.14002a4ec
cmp dword [0x140063af4], 0xffffffff
jne 0x1400123b1
lea rbx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rbx + 4]
mov dword [0x140063af0], eax
lea rcx, [0x140063af4]
call fcn.14002a48c
jmp 0x1400123b1
lea rcx, [0x140063af4]
call fcn.14002a4ec
cmp dword [0x140063af4], 0xffffffff
jne 0x140012404
lea rbx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rbx + 4]
mov dword [0x140063af0], eax
lea rcx, [0x140063af4]
call fcn.14002a48c
jmp 0x140012404
movdqu xmmword [rsi + 0x30], xmm6
movdqu xmmword [rsi + 0x20], xmm6
movdqu xmmword [rsi + 0x10], xmm6
movdqu xmmword [rsi], xmm6
jmp 0x1400124b9