Function at 0x14002f610
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x2a0
mov qword [rsp + 0x28], 0xfffffffffffffffe
mov rax, qword [0x140322b20]
xor rax, rsp
mov qword [rsp + 0x290], rax
lea rdx, [0x14025a2a8]
lea rcx, [rsp + 0x40]
call fcn.14001f4b0
nop
lea rdx, str.Unknown
lea rcx, [rsp + 0xc0]
call fcn.14001f4b0
nop
mov dword [rsp + 0x34], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x38], 0
lea rax, [rsp + 0x140]
mov rdi, rax
xor eax, eax
mov ecx, gethostbyname
rep stosb byte [rdi], al
lea rcx, [0x14025a300]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.GetNativeSystemInfo
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x20], rax
cmp qword [rsp + 0x20], 0
je 0x14002f6cd
lea rcx, [rsp + 0x140]
call qword [rsp + 0x20]
jmp 0x14002f6db
lea rcx, [rsp + 0x140]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea r9, [rsp + 0x38]
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x34]
mov rcx, qword [rsp + 0x2b0]
call fcn.14004ebf0
test eax, eax
je 0x14002fad7
lea rdx, [rsp + 0x170]
mov rcx, qword [rsp + 0x2b0]
call fcn.14004eca0
test eax, eax
je 0x14002fad7
cmp dword [rsp + 0x180], 2
je 0x14002f743
lea rcx, [rsp + 0xc0]
call fcn.140020590
nop
lea rcx, [rsp + 0x40]
call fcn.140020590
jmp 0x14002fb2d
cmp dword [rsp + 0x34], 4
ja 0x14002f774
lea rdx, [0x14025a37c]
lea rcx, [rsp + 0x40]
call fcn.140021260
lea rdx, str.Windows_NT
lea rcx, [rsp + 0xc0]
call fcn.140021260
jmp 0x14002fad7
cmp dword [rsp + 0x34], 5
jne 0x14002f8d7
cmp dword [rsp + 0x30], 0
jne 0x14002f7b0
lea rdx, [0x14025a4f8]
lea rcx, [rsp + 0x40]
call fcn.140021260
lea rdx, [0x14025a508]
lea rcx, [rsp + 0xc0]
call fcn.140021260
jmp 0x14002f8d2
cmp dword [rsp + 0x30], 1
jne 0x14002f7e1
lea rdx, [0x14025a524]
lea rcx, [rsp + 0x40]
call fcn.140021260
lea rdx, str.Windows_XP
lea rcx, [rsp + 0xc0]
call fcn.140021260
jmp 0x14002f8d2
cmp dword [rsp + 0x30], 2
jne 0x14002f8d2
movzx eax, byte [rsp + 0x28a]
cmp eax, 1
jne 0x14002f830
movzx eax, word [rsp + 0x140]
cmp eax, 9
jne 0x14002f830
lea rdx, [0x14025a560]
lea rcx, [rsp + 0x40]
call fcn.140021260
lea rdx, str.Windows_XP_Professional_x64_Edition
lea rcx, [rsp + 0xc0]
call fcn.140021260
jmp 0x14002f8d2
mov ecx, 0x59
call qword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
jne 0x14002f866
lea rdx, str.2003
lea rcx, [rsp + 0x40]
call fcn.140021260
lea rdx, str.Windows_Server_2003
lea rcx, [rsp + 0xc0]
call fcn.140021260
jmp 0x14002f8d2
movzx eax, word [rsp + 0x288]
and eax, 0x8000
test eax, eax
je 0x14002f89e
lea rdx, str.Home_Server
lea rcx, [rsp + 0x40]
call fcn.140021260
lea rdx, str.Windows_Home_Server
lea rcx, [rsp + 0xc0]
call fcn.140021260
jmp 0x14002f8d2
mov ecx, 0x59
call qword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x14002f8d2
lea rdx, str.2003_R2
lea rcx, [rsp + 0x40]
call fcn.140021260
lea rdx, str.Windows_Server_2003_R2
lea rcx, [rsp + 0xc0]
call fcn.140021260
jmp 0x14002fad7
cmp dword [rsp + 0x34], 6
jne 0x14002fa70
cmp dword [rsp + 0x30], 0
jne 0x14002f947
movzx eax, byte [rsp + 0x28a]
cmp eax, 1
jne 0x14002f91d
lea rdx, str.Vista
lea rcx, [rsp + 0x40]
call fcn.140021260
lea rdx, str.Windows_Vista
lea rcx, [rsp + 0xc0]
call fcn.140021260
jmp 0x14002f942
lea rdx, str.2008
lea rcx, [rsp + 0x40]
call fcn.140021260
lea rdx, str.Windows_Server_2008
lea rcx, [rsp + 0xc0]
call fcn.140021260
jmp 0x14002fa6e
cmp dword [rsp + 0x30], 1
jne 0x14002f9ac
movzx eax, byte [rsp + 0x28a]
cmp eax, 1
jne 0x14002f982
lea rdx, str.Win7
lea rcx, [rsp + 0x40]
call fcn.140021260
lea rdx, str.Windows_7
lea rcx, [rsp + 0xc0]
call fcn.140021260
jmp 0x14002f9a7
lea rdx, str.2008_R2
lea rcx, [rsp + 0x40]
call fcn.140021260
lea rdx, str.Windows_Server_2008_R2
lea rcx, [rsp + 0xc0]
call fcn.140021260
jmp 0x14002fa6e
cmp dword [rsp + 0x30], 2
jne 0x14002fa0e
movzx eax, byte [rsp + 0x28a]
cmp eax, 1
jne 0x14002f9e7
lea rdx, str.Win8
lea rcx, [rsp + 0x40]
call fcn.140021260
lea rdx, str.Windows_8
lea rcx, [rsp + 0xc0]
call fcn.140021260
jmp 0x14002fa0c
lea rdx, [0x14024ee08]
lea rcx, [rsp + 0x40]
call fcn.140021260
lea rdx, [0x14024ed78]
lea rcx, [rsp + 0xc0]
call fcn.140021260
jmp 0x14002fa6e
cmp dword [rsp + 0x30], 3
jne 0x14002fa6e
movzx eax, byte [rsp + 0x28a]
cmp eax, 1
jne 0x14002fa49
lea rdx, str.Win8.1
lea rcx, [rsp + 0x40]
call fcn.140021260
lea rdx, [0x14024ee18]
lea rcx, [rsp + 0xc0]
call fcn.140021260
jmp 0x14002fa6e
lea rdx, [0x14024ef18]
lea rcx, [rsp + 0x40]
call fcn.140021260
lea rdx, str.Windows_Server_2012_R2
lea rcx, [rsp + 0xc0]
call fcn.140021260
jmp 0x14002fad7
cmp dword [rsp + 0x34], 0xa
jne 0x14002fad7
cmp dword [rsp + 0x30], 0
jne 0x14002fad7
movzx eax, byte [rsp + 0x28a]
cmp eax, 1
jne 0x14002fab2
lea rdx, str.Win10
lea rcx, [rsp + 0x40]
call fcn.140021260
lea rdx, [0x14024ee88]
lea rcx, [rsp + 0xc0]
call fcn.140021260
jmp 0x14002fad7
lea rdx, str.2016
lea rcx, [rsp + 0x40]
call fcn.140021260
lea rdx, str.Windows_Server_2016_Technical_Preview
lea rcx, [rsp + 0xc0]
call fcn.140021260
cmp qword [rsp + 0x2b8], 0
je 0x14002faf4
lea rdx, [rsp + 0x40]
mov rcx, qword [rsp + 0x2b8]
call fcn.1400211f0
cmp qword [rsp + 0x2c0], 0
je 0x14002fb15
lea rdx, [rsp + 0xc0]
mov rcx, qword [rsp + 0x2c0]
call fcn.1400211f0
nop
lea rcx, [rsp + 0xc0]
call fcn.140020590
nop
lea rcx, [rsp + 0x40]
call fcn.140020590
mov rcx, qword [rsp + 0x290]
xor rcx, rsp
call fcn.1401fe250
add rsp, 0x2a0
pop rdi
ret