Function at 0x18002f0e0
Capabilities:
Get system information on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r13
push r14
lea rbp, [rsp - 0x2f]
sub rsp, 0xb8
mov rax, qword [0x1800ca088]
xor rax, rsp
mov qword [rbp + 0x17], rax
lea r14d, [rdx + 0xa0]
mov dword [rbp - 0x59], edx
mov ebx, dword [rbp - 0x59]
mov rsi, r8
mov r13, rcx
mov edi, edx
cmp edx, r14d
jae 0x18002f1c2
cmp edi, 0x26
je 0x18002f18d
cmp edi, 0x37
je 0x18002f178
cmp edi, 0x46
je 0x18002f184
cmp edi, 0x57
je 0x18002f150
cmp edi, 0x66
jne 0x18002f1b3
lea r8d, [rdi - 0x64]
lea rdx, [0x1800b2610]
lea rcx, [rbp - 0x19]
call fcn.180089030
jmp 0x18002f1b3
mov ecx, dword [rbp - 0x29]
mov eax, 0x48
cmp eax, 0x48
je 0x18002f16a
cmp eax, 0xfc0
je 0x18002f471
jmp 0x18002f16c
mov ebx, ecx
add eax, 0xf78
cmp eax, 0x1ef0
jbe 0x18002f158
lea rcx, [rbp - 0x49]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
jmp 0x18002f1b3
lea rdx, [0x1800b0be0]
jmp 0x18002f1a9
movzx eax, word [0x1800b260c]
lea rdx, [0x1800b0bd4]
mov word [rbp - 0x19], ax
movzx eax, byte [0x1800b260e]
mov byte [rbp - 0x17], al
lea rcx, [rbp - 0x19]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
add edi, 0x20
cmp edi, r14d
jb 0x18002f121
mov edx, dword [rbp - 0x59]
xor r8d, r8d
mov qword [rsp + 0xf8], r12
lea r12d, [rdx + 0x3c]
mov qword [rsp + 0xb0], r15
mov r15d, edx
lea r9d, [r8 + 0x6c]
cmp edx, r12d
jae 0x18002f35c
nop dword [rax]
mov eax, r15d
sub eax, 0x26
je 0x18002f347
sub eax, 0xc
je 0x18002f32d
sub eax, 0xc
je 0x18002f311
sub eax, 0x65
je 0x18002f270
cmp eax, 0xc
jne 0x18002f34c
cmp qword [rsi + 0x10], 0
jbe 0x18002f48f
cmp qword [rsi + 0x18], 0x10
mov rax, rsi
jb 0x18002f234
mov rax, qword [rsi]
cmp qword [r13 + 0x18], 0x10
mov r9, r13
mov rcx, qword [r13 + 0x10]
jb 0x18002f246
mov r9, qword [r13]
mov qword [rbp - 0x51], rcx
lea r8, [rbp - 0x51]
mov qword [rsp + 0x28], rax
xor ecx, ecx
xor edx, edx
mov dword [rsp + 0x20], 0x1a
call fcn.180014c90
xor r8d, r8d
lea r9d, [r8 + 0x6c]
jmp 0x18002f34c
cmp qword [rsi + 0x18], 0x10
mov rax, rsi
mov qword [rsi + 0x10], r8
jb 0x18002f281
mov rax, qword [rsi]
mov byte [rax], 0
mov rcx, qword [r13 + 0x10]
mov rdx, qword [rsi + 0x10]
shr rcx, 1
cmp rcx, rdx
ja 0x18002f2ae
mov qword [rsi + 0x10], rcx
mov rax, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x18002f2a5
mov rax, qword [rsi]
mov byte [rax + rcx], 0
jmp 0x18002f34c
mov r8, qword [rsi + 0x18]
mov r14, rcx
mov rax, r8
sub r14, rdx
sub rax, rdx
cmp r14, rax
ja 0x18002f2f2
mov qword [rsi + 0x10], rcx
mov rax, rsi
cmp r8, 0x10
jb 0x18002f2d3
mov rax, qword [rsi]
lea rdi, [rax + rdx]
mov r8, r14
mov rcx, rdi
xor edx, edx
call fcn.180082760
xor r8d, r8d
mov byte [rdi + r14], 0
lea r9d, [r8 + 0x6c]
jmp 0x18002f34c
mov r9, r14
mov byte [rsp + 0x20], 0
xor r8d, r8d
mov rdx, r14
mov rcx, rsi
call fcn.180075e50
xor r8d, r8d
lea r9d, [r8 + 0x6c]
jmp 0x18002f34c
movzx eax, word [0x1800b2614]
mov word [rbp - 0x10], ax
movzx eax, byte [0x1800b2616]
mov byte [rbp - 0xe], al
mov word [rbp - 9], r8w
jmp 0x18002f34c
lea rdx, [0x1800b1d3c]
lea rcx, [rbp - 0x12]
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
xor r8d, r8d
lea r9d, [r8 + 0x6c]
jmp 0x18002f34c
mov word [rbp - 0x13], r9w
add r15d, 0xc
cmp r15d, r12d
jb 0x18002f1f0
mov edx, dword [rbp - 0x59]
lea eax, [rdx - 6]
cmp edx, eax
jbe 0x18002f461
mov r14, qword [rbp - 0x51]
lea edi, [rdx - 0x21]
mov esi, 6
lea r15, [0x180000000]
nop word [rax + rax]
cmp edi, 5
ja case.default.0x18002f394
mov ecx, dword [r15 + rdi*4 + 0x2f498]
add rcx, r15
jmp rcx
mov word [rbp + 0xf], r8w
lea rdx, [rbp - 9]
lea r8, [rbp - 0x19]
mov ecx, 0x45
call fcn.18003ae90
mov r14, rax
jmp case.default.0x18002f394
mov word [rbp + 0xd], r9w
jmp case.default.0x18002f394
mov eax, dword [0x1800b2668]
mov dword [rbp - 1], eax
movzx eax, word [0x1800b266c]
mov word [rbp + 3], ax
mov word [rbp + 5], r8w
jmp case.default.0x18002f394
mov r8d, 4
lea rdx, [0x1800b26d8]
lea rcx, [rbp - 9]
call fcn.1800848d8
jmp case.default.0x18002f394
mov r8d, 2
lea rdx, [0x1800b27ce]
lea rcx, [rbp - 9]
call fcn.1800848d8
mov r8d, 2
lea rdx, [0x1800b28fa]
lea rcx, [rbp + 9]
call fcn.180088aec
jmp case.default.0x18002f394
cmp byte [r13 + 0x118], 0
mov rcx, qword [r13 + 0xe0]
je 0x18002f43e
xor edx, edx
mov r8d, 0x8000
call r14
jmp 0x18002f443
call fcn.180084920
mov rcx, r13
call fcn.180084920
mov r8d, 0
dec edi
lea r9d, [r8 + 0x6c]
sub rsi, 1
jne 0x18002f380
mov r12, qword [rsp + 0xf8]
mov r15, qword [rsp + 0xb0]
mov eax, ebx
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.1800803f0
add rsp, 0xb8
pop r14
pop r13
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1800746e0
int3