Function at 0x14000b7d0
Capabilities:
Get system information on windows

Disassembly:
mov byte [rsp + 0x18], r8b
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x390
lea rcx, [rsp + 0x170]
call fcn.140003e70
nop
mov rcx, qword [rsp + 0x3a0]
call fcn.140003330
movzx eax, byte [rsp + 0x3b0]
test eax, eax
je 0x14000b839
lea rcx, [rsp + 0x170]
call fcn.14000a040
movzx eax, al
test eax, eax
je 0x14000b837
lea rdx, [rsp + 0x170]
mov rcx, qword [rsp + 0x3a0]
call fcn.1400033e0
jmp 0x14000b862
lea rcx, [rsp + 0x170]
call fcn.14000b070
movzx eax, al
test eax, eax
je 0x14000b862
lea rdx, [rsp + 0x170]
mov rcx, qword [rsp + 0x3a0]
call fcn.1400033e0
cmp qword [rsp + 0x3a8], 0
je 0x14000b8a0
mov eax, 2
imul rax, rax, 0
mov rcx, qword [rsp + 0x3a8]
movzx eax, word [rcx + rax]
test eax, eax
je 0x14000b8a0
mov rdx, qword [rsp + 0x3a8]
mov rcx, qword [rsp + 0x3a0]
call fcn.140003630
jmp 0x14000b9c5
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 0xfe
lea r9, [rsp + 0x70]
lea r8, str.ProductId
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersion
mov rcx, 0xffffffff80000002
call fcn.140003fa0
movzx eax, al
test eax, eax
jne 0x14000b8e6
mov eax, 2
imul rax, rax, 0
xor ecx, ecx
mov word [rsp + rax + 0x70], cx
mov eax, 2
imul rax, rax, 0
movzx eax, word [rsp + rax + 0x70]
test eax, eax
je 0x14000b905
call fcn.14000b2f0
test eax, eax
je 0x14000b9b3
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 0xfe
lea r9, [rsp + 0x70]
lea r8, [0x1401b7784]
lea rdx, str.SOFTWAREMetaQuotes_Software
mov rcx, 0xffffffff80000002
call fcn.140003fa0
movzx eax, al
test eax, eax
je 0x14000b94c
lea rcx, [rsp + 0x70]
call fcn.14003e338
cmp eax, 0x2710
jge 0x14000b9a2
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 0xfe
lea r9, [rsp + 0x70]
lea r8, [0x1401b7784]
lea rdx, str.SOFTWAREMetaQuotes_Software
mov rcx, 0xffffffff80000001
call fcn.140003fa0
movzx eax, al
test eax, eax
je 0x14000b993
lea rcx, [rsp + 0x70]
call fcn.14003e338
cmp eax, 0x2710
jge 0x14000b9a2
mov edx, 0x7f
lea rcx, [rsp + 0x70]
call fcn.14000b350
lea rdx, str.4ed6bfa8
lea rcx, [rsp + 0x70]
call fcn.14000b620
lea rdx, [rsp + 0x70]
mov rcx, qword [rsp + 0x3a0]
call fcn.140003630
call fcn.14000b6a0
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
je 0x14000ba03
mov r8d, dword [rsp + 0x30]
lea rdx, [0x1401baa40]
lea rcx, [rsp + 0x170]
call fcn.1400038c0
lea rdx, [rsp + 0x170]
mov rcx, qword [rsp + 0x3a0]
call fcn.1400033e0
mov rcx, qword [rsp + 0x3a0]
call fcn.140003760
movzx eax, al
test eax, eax
jne 0x14000ba37
lea rcx, [rsp + 0x170]
call fcn.140003390
nop
lea rcx, [rsp + 0x170]
call fcn.140002ab0
jmp 0x14000bb07
lea rax, [rsp + 0x38]
mov rdi, rax
xor eax, eax
mov ecx, 0x30
rep stosb byte [rdi], al
lea rcx, [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx eax, word [rsp + 0x64]
test eax, eax
je 0x14000babb
movzx eax, word [rsp + 0x66]
test eax, eax
je 0x14000babb
movzx eax, word [rsp + 0x66]
movzx ecx, word [rsp + 0x64]
mov r9d, eax
mov r8d, ecx
lea rdx, [0x1401baa48]
lea rcx, [rsp + 0x170]
call fcn.1400038c0
lea rdx, [rsp + 0x170]
mov rcx, qword [rsp + 0x3a0]
call fcn.1400033e0
lea rcx, [rsp + 0x170]
call fcn.140003390
nop
lea rcx, [rsp + 0x170]
call fcn.140002ab0
jmp 0x14000bb07
call fcn.14000b760
mov r8d, eax
lea rdx, [0x1401baa54]
lea rcx, [rsp + 0x170]
call fcn.1400038c0
lea rdx, [rsp + 0x170]
mov rcx, qword [rsp + 0x3a0]
call fcn.1400033e0
lea rcx, [rsp + 0x170]
call fcn.140003390
nop
lea rcx, [rsp + 0x170]
call fcn.140002ab0
add rsp, 0x390
pop rdi
ret