Function at 0x14000f744
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 8], rbx
push rsi
sub rsp, 0x680
mov rax, qword [0x14002c0e0]
xor rax, rsp
mov qword [rsp + 0x670], rax
and dword [rsp + 0x30], 0
xor edx, edx
lea rcx, [rsp + 0x34]
lea r8d, [rdx + 0x2c]
call fcn.140012400
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
cmp dword [0x14002ead8], 0
je 0x14000f81e
cmp qword [0x14002e898], 0
je 0x14000f81e
lea rdx, str.Loading_device_driver_..._n
lea rcx, [rsp + 0x270]
call fcn.14000f000
mov rcx, qword [0x14002e898]
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
mov rcx, qword [0x14002e898]
movsxd rbx, eax
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
mov rcx, qword [0x14002e898]
mov r9, rbx
mov edx, 0xb1
movsxd r8, eax
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [0x14002e898]
lea r9, [rsp + 0x270]
xor r8d, r8d
mov edx, 0xc2
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [0x14002e898]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb7
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x14000f82a
lea rcx, str.Loading_device_driver_..._n
call fcn.140011f24
lea rcx, str.SeLoadDriverPrivilege
call fcn.14000f070
test eax, eax
jne 0x14000f8e4
cmp dword [0x14002ead8], eax
je 0x14000f8d8
cmp qword [0x14002e898], 0
je 0x14000f8d8
lea rdx, str.Failed_to_enable_drivers_loading_privilege_..._n
lea rcx, [rsp + 0x270]
call fcn.14000f000
mov rcx, qword [0x14002e898]
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
mov rcx, qword [0x14002e898]
movsxd rbx, eax
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
mov rcx, qword [0x14002e898]
mov r9, rbx
mov edx, 0xb1
movsxd r8, eax
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [0x14002e898]
lea r9, [rsp + 0x270]
xor r8d, r8d
mov edx, 0xc2
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [0x14002e898]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb7
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x14000f8e4
lea rcx, str.Failed_to_enable_drivers_loading_privilege_..._n
call fcn.140011f24
lea rdx, [rsp + 0x60]
mov r8d, 0x104
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
and qword [rsp + 0x20], 0
lea rsi, [0x14002e8c0]
lea r8, [rsp + 0x60]
lea rcx, [rsp + 0x60]
mov rdx, rsi
xor r9d, r9d
call fcn.140012b80
lea rdx, [rsp + 0x60]
mov rcx, rsi
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
lea rdx, str.RamCaptureDriver64.SYS
mov rcx, rsi
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
lea rdx, str.RamCaptureDriver
mov rcx, rsi
call fcn.140011278
lea rdx, str.RamCaptureDriver
mov rcx, rsi
call fcn.140010f44
test eax, eax
jne 0x14000fa16
cmp dword [0x14002ead8], eax
je 0x14000f9f7
cmp qword [0x14002e898], 0
je 0x14000f9f7
lea rdx, str.Loading_device_driver_failed___n
lea rcx, [rsp + 0x270]
call fcn.14000f000
mov rcx, qword [0x14002e898]
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
mov rcx, qword [0x14002e898]
movsxd rbx, eax
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
mov rcx, qword [0x14002e898]
mov r9, rbx
mov edx, 0xb1
movsxd r8, eax
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [0x14002e898]
lea r9, [rsp + 0x270]
xor r8d, r8d
mov edx, 0xc2
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [0x14002e898]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb7
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x14000fa03
lea rcx, str.Loading_device_driver_failed___n
call fcn.140011f24
lea rdx, str.RamCaptureDriver
mov rcx, rsi
call fcn.140011278
xor eax, eax
jmp 0x14000fa1b
mov eax, 1
mov rcx, qword [rsp + 0x670]
xor rcx, rsp
call fcn.140011d10
mov rbx, qword [rsp + 0x690]
add rsp, 0x680
pop rsi
ret