Function at 0x18003b230
Capabilities:
Get system information on windows

Disassembly:
push rbp
sub rsp, 0x50
lea rbp, [rsp + 0x50]
mov qword [rbp - 0x48], rcx
mov rax, qword [0x1800950a8]
xor rax, rbp
mov qword [rbp - 8], rax
mov dword [rbp - 0x40], 0x896dff89
mov eax, dword [rbp - 0x40]
mov dword [rbp - 0x4c], eax
sub eax, 0x896dff89
je 0x18003b378
jmp 0x18003b269
mov eax, dword [rbp - 0x4c]
sub eax, 0xb8003650
je 0x18003b49a
jmp 0x18003b27c
mov eax, dword [rbp - 0x4c]
sub eax, 0xd94a27b8
je 0x18003b4c2
jmp 0x18003b28f
mov eax, dword [rbp - 0x4c]
sub eax, 0xee774f52
je 0x18003b451
jmp 0x18003b2a2
mov eax, dword [rbp - 0x4c]
sub eax, 0x8c26535
je 0x18003b48a
jmp 0x18003b2b5
mov eax, dword [rbp - 0x4c]
sub eax, 0x9de2387
je 0x18003b3db
jmp 0x18003b2c8
mov eax, dword [rbp - 0x4c]
sub eax, 0x2702dd05
je 0x18003b46f
jmp 0x18003b2db
mov eax, dword [rbp - 0x4c]
sub eax, 0x31495ae8
je 0x18003b43a
jmp 0x18003b2ee
mov eax, dword [rbp - 0x4c]
sub eax, 0x40d1c7f5
je 0x18003b4a6
jmp 0x18003b301
mov eax, dword [rbp - 0x4c]
sub eax, 0x50dbffc4
je 0x18003b4d6
jmp 0x18003b314
mov eax, dword [rbp - 0x4c]
sub eax, 0x52a5429f
je 0x18003b4b6
jmp 0x18003b327
mov eax, dword [rbp - 0x4c]
sub eax, 0x5bb76542
je 0x18003b400
jmp 0x18003b33a
mov eax, dword [rbp - 0x4c]
sub eax, 0x6adb7b63
je 0x18003b426
jmp 0x18003b34d
mov eax, dword [rbp - 0x4c]
sub eax, 0x6b77db05
je 0x18003b3c7
jmp 0x18003b360
mov eax, dword [rbp - 0x4c]
sub eax, 0x6df31161
je 0x18003b3ac
jmp 0x18003b373
jmp 0x18003b4f9
mov eax, 0x10
call fcn.18008acc0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x38], rax
mov eax, 0x30
call fcn.18008acc0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x30], rax
mov dword [rbp - 0x40], 0x6df31161
jmp 0x18003b4f9
mov rcx, qword [rbp - 0x48]
mov rax, qword [rbp - 0x38]
mov qword [rax], rcx
mov rax, qword [rbp - 0x38]
mov dword [rbp - 0x40], 0x6b77db05
jmp 0x18003b4f9
mov rax, qword [rbp - 0x30]
mov qword [rbp - 0x28], rax
mov dword [rbp - 0x40], 0x9de2387
jmp 0x18003b4f9
mov rcx, qword [rbp - 0x28]
xor edx, edx
mov r8d, 0x30
sub rsp, 0x20
call sub.msvcrt.dll_memset
add rsp, 0x20
mov dword [rbp - 0x40], 0x5bb76542
jmp 0x18003b4f9
mov rcx, qword [rbp - 0x30]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
add rsp, 0x20
mov rax, qword [rbp - 0x30]
mov qword [rbp - 0x20], rax
mov dword [rbp - 0x40], 0x6adb7b63
jmp 0x18003b4f9
mov rax, qword [rbp - 0x20]
mov qword [rbp - 0x18], rax
mov dword [rbp - 0x40], 0x31495ae8
jmp 0x18003b4f9
mov rax, qword [rbp - 0x18]
mov ax, word [rax]
mov word [rbp - 0xc], ax
mov dword [rbp - 0x40], 0xee774f52
jmp 0x18003b4f9
mov ax, word [rbp - 0xc]
movzx eax, ax
cmp eax, 0
sete al
and al, 1
mov byte [rbp - 0xa], al
mov dword [rbp - 0x40], 0x2702dd05
jmp 0x18003b4f9
mov dl, byte [rbp - 0xa]
mov eax, 0x40d1c7f5
mov ecx, 0x8c26535
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x40], eax
jmp 0x18003b4f9
mov byte [rbp - 0x39], 1
mov dword [rbp - 0x40], 0xb8003650
jmp 0x18003b4f9
mov dword [rbp - 0x40], 0xd94a27b8
jmp 0x18003b4f9
mov byte [rbp - 0x39], 0
mov dword [rbp - 0x40], 0x52a5429f
jmp 0x18003b4f9
mov dword [rbp - 0x40], 0xd94a27b8
jmp 0x18003b4f9
mov al, byte [rbp - 0x39]
and al, 1
mov byte [rbp - 9], al
mov dword [rbp - 0x40], 0x50dbffc4
jmp 0x18003b4f9
mov al, byte [rbp - 9]
and al, 1
movzx eax, al
mov dword [rbp - 0x50], eax
mov rcx, qword [rbp - 8]
xor rcx, rbp
sub rsp, 0x20
call fcn.18008ac40
mov eax, dword [rbp - 0x50]
mov rsp, rbp
pop rbp
ret
jmp 0x18003b253