Function at 0x1400dda10
Capabilities:
Get system information on windows

Disassembly:
mov word [rsp + 0x10], dx
mov qword [rsp + 8], rcx
sub rsp, 0x1a8
mov dword [rsp + 0x34], 0xc068e9be
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x100], ILGetNext
mov eax, 0x13f3
mov word [rsp + 0x30], ax
movzx eax, word [rsp + 0x1b8]
mov dword [rsp + 0x4c], eax
cmp dword [rsp + 0x4c], 0x93c
je 0x1400dda60
jmp 0x1400dda88
movsx eax, word [rsp + 0x30]
add eax, 0x220c
mov word [rsp + 0x30], ax
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x50]
call qword [sym.imp.ole32.dll_CoSwitchCallContext]
mov dword [rsp + 0x50], eax
jmp 0x1400ddccd
mov eax, dword [section..data]
sub eax, 0x13420845
mov dword [rsp + 0x34], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x64], eax
imul eax, dword [rsp + 0x34], 0x33962101
cmp eax, dword [section..data]
je 0x1400ddbd3
mov rax, qword [rsp + 0x1b0]
mov qword [rsp + 0x58], rax
movsx eax, word [rsp + 0x30]
cmp eax, 0x3a34
je 0x1400ddbd3
mov eax, dword [rsp + 0x34]
mov dword [rsp + 0x3c], eax
movsx eax, word [rsp + 0x30]
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0x10bc
je 0x1400ddb00
cmp dword [rsp + 0x40], 0x13f3
je 0x1400ddba0
jmp 0x1400ddbd3
mov eax, 0x5d0
mov word [rsp + 0x1b8], ax
mov dword [rsp + 0x20], 0x39
mov r9d, 0xd2
mov r8d, 0x44
mov edx, 0xc7
mov ecx, ILCombine
call fcn.1400de340
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x78]
call qword [sym.imp.ole32.dll_CoMarshalInterThreadInterfaceInStream]
mov dword [rsp + 0x68], eax
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x34]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x3c], eax
mov edx, 0x32
mov ecx, 0x42
call fcn.1400dddf0
mov eax, dword [section..data]
movzx ecx, al
mov eax, dword [rsp + 0x3c]
shr eax, cl
mov dword [rsp + 0x34], eax
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x78]
call qword [sym.imp.ole32.dll_CoUnmarshalHresult]
mov dword [rsp + 0x44], eax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x1b0], rax
jmp 0x1400ddbd3
lea rcx, [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov byte [rsp + 0x38], 3
mov dword [rsp + 0x6c], 0x654aae76
movzx eax, byte [rsp + 0x38]
mov byte [rsp + 0x39], al
lea rcx, [rsp + 0xc8]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
nop
movzx eax, byte [rsp + 0x39]
mov byte [rsp + 0x3a], al
mov eax, dword [rsp + 0x34]
mov dword [rsp + 0x54], eax
cmp dword [rsp + 0x54], 0x77ba368e
je 0x1400ddbf3
jmp 0x1400ddca2
movzx eax, word [rsp + 0x1b8]
cmp eax, 0x180
jne 0x1400ddc40
mov eax, dword [section..data]
mov ecx, dword [rsp + 0x3c]
xor ecx, eax
mov eax, ecx
mov dword [rsp + 0x34], eax
movzx eax, word [rsp + 0x1b8]
mov word [rsp + 0x20], ax
movzx r9d, word [rsp + 0x1b8]
mov r8b, 0x1f
mov edx, PathYetAnotherMakeUniqueName
movzx ecx, word [rsp + 0x1b8]
call fcn.1400de920
nop
mov eax, dword [section..data]
movzx ecx, al
mov eax, dword [rsp + 0x34]
shl eax, cl
mov dword [rsp + 0x3c], eax
call qword [sym.imp.ole32.dll_CoResumeClassObjects]
mov dword [rsp + 0x44], eax
mov edx, 0xda
mov ecx, 0x6d
call fcn.1400dddf0
movabs rax, 0xbe113b0ddd323b5c
mov rcx, qword [rsp + 0x1b0]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x3a]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x3c]
call qword [sym.imp.ole32.dll_CoFileTimeToDosDateTime]
mov dword [rsp + 0x70], eax
movzx edx, word [rsp + 0x1b8]
mov rcx, qword [rsp + 0x58]
call fcn.1400dda10
lea rdx, [rsp + 0x88]
lea rcx, str.recreates_hyperventilated
call qword [sym.imp.ole32.dll_IIDFromString]
mov dword [rsp + 0x44], eax
lea r8, [rsp + 0x30]
mov edx, ILIsParent
lea rcx, [rsp + 0x30]
call qword [sym.imp.ole32.dll_CoGetStdMarshalEx]
mov dword [rsp + 0x48], eax
movzx eax, word [rsp + 0x1b8]
mov word [rsp + 0x20], ax
movzx r9d, word [rsp + 0x1b8]
mov r8b, 0x3d
mov edx, 0xdd
movzx ecx, word [rsp + 0x1b8]
call fcn.1400de920
mov eax, 0x24
add rsp, 0x1a8
ret